Function at 0x4086d4
Capabilities:
Copy file
Create process on windows
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffae4
xor eax, eax
mov dword [ebp - 0x54], eax
xor edx, edx
mov dword [ebp - 8], edx
lea ecx, [ebp - 8]
push ecx
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.00420840
add esp, 0x14
test eax, eax
je 0x40870b
mov eax, dword [ebp - 8]
jmp 0x40ac81
mov edx, dword [ebp + 0xc]
sub edx, 2
je 0x408c69
sub edx, 0x10e
je 0x408734
dec edx
je 0x408cc4
sub edx, 2
je 0x408c11
jmp 0x40ac7e
push 0xf44278
lea ecx, [ebp - 0x268]
push ecx
call fcn.004415c8
add esp, 8
cmp dword [0x44f8d8], 1
jne 0x408767
push 0x45639d
lea eax, [ebp - 0x268]
push eax
call fcn.004414ec
add esp, 8
jmp 0x408784
cmp dword [0x44f8d8], 2
jne 0x408784
push 0x4563a5
lea edx, [ebp - 0x268]
push edx
call fcn.004414ec
add esp, 8
lea ecx, [ebp - 0x268]
push ecx
push 0x4c0
push dword [ebp + 8]
call sub.USER32.DLL_SetDlgItemTextA
push dword [0x44f8dc]
call sub.USER32.DLL_GetMenu
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x1c], 0x4ec
cmp dword [ebp - 0x1c], 0x4ec
jne 0x4087bf
mov dword [ebp - 0x6c], 0x465fd7
jmp 0x4087d8
cmp dword [ebp - 0x1c], 0x4ed
jne 0x4087d1
mov dword [ebp - 0x6c], 0x467555
jmp 0x4087d8
mov dword [ebp - 0x6c], 0x468ad3
push dword [ebp - 0x1c]
push dword [ebp - 0x6c]
push dword [ebp + 8]
call fcn.00420848
add esp, 0xc
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x4ee
jle 0x4087ad
push 0x31
push str.S12_10.04.2019
lea eax, [ebp - 0x4a8]
push eax
call fcn.00441824
add esp, 0xc
mov byte [ebp - 0x477], 0
lea edx, [ebp - 0x4a8]
mov dword [ebp - 0xc], edx
jmp 0x408820
inc dword [ebp - 0xc]
mov ecx, dword [ebp - 0xc]
cmp byte [ecx], 0x20
ja 0x40881d
mov eax, dword [ebp - 0xc]
mov byte [eax], 0
lea edx, [ebp - 0x4a8]
push edx
push 0x4563b9
push 0x44f958
push 0x4563ae
lea ecx, [ebp - 0x268]
push ecx
call fcn.00444f70
add esp, 0x14
lea eax, [ebp - 0x268]
push eax
push 0x4c5
push dword [ebp + 8]
call sub.USER32.DLL_SetDlgItemTextA
push dword [ebp + 8]
call fcn.004081f8
pop ecx
push 0
push dword [ebp + 8]
call fcn.0040855c
add esp, 8
cmp byte [0x45c3d8], 0
jne 0x408893
cmp byte [0x450c9c], 0
je 0x408bec
push 1
push 0x3eb
push dword [ebp - 0x70]
call sub.USER32.DLL_EnableMenuItem
push 0
push 0x4b1
push dword [ebp + 8]
call fcn.0041ca68
add esp, 0xc
push 0
push 0x4d7
push dword [ebp + 8]
call fcn.0041ca68
add esp, 0xc
push 0
push 0x4da
push dword [ebp + 8]
call fcn.0041ca68
add esp, 0xc
push 0
push 0x4db
push dword [ebp + 8]
call fcn.0041ca68
add esp, 0xc
push 0
push 0x4dc
push dword [ebp + 8]
call fcn.0041ca68
add esp, 0xc
push 0
push 0x4df
push dword [ebp + 8]
call fcn.0041ca68
add esp, 0xc
push 0
push 0x4d9
push dword [ebp + 8]
call fcn.0041ca68
add esp, 0xc
push 0
push 0x4d8
push dword [ebp + 8]
call fcn.0041ca68
add esp, 0xc
push 0
push 0x4b2
push dword [ebp + 8]
call fcn.0041ca68
add esp, 0xc
push 0
push 0x4de
push dword [ebp + 8]
call fcn.0041ca68
add esp, 0xc
push 0
push 0x4dd
push dword [ebp + 8]
call fcn.0041ca68
add esp, 0xc
push 0
push 0x4bd
push dword [ebp + 8]
call fcn.0041ca68
add esp, 0xc
push 0
push 0x4b5
push dword [ebp + 8]
call fcn.0041ca68
add esp, 0xc
push 0
push 0x2777
push dword [ebp + 8]
call fcn.0041ca68
add esp, 0xc
cmp byte [0x45c3d8], 0
jne 0x4089b9
push 0
push 0x4dd
push dword [ebp + 8]
call fcn.0041ca68
add esp, 0xc
push 0
push 0x4b1
push dword [ebp + 8]
call fcn.0041ca8c
add esp, 0xc
push 0
push 0x4d7
push dword [ebp + 8]
call fcn.0041ca8c
add esp, 0xc
push 0
push 0x4da
push dword [ebp + 8]
call fcn.0041ca8c
add esp, 0xc
push 0
push 0x4db
push dword [ebp + 8]
call fcn.0041ca8c
add esp, 0xc
push 0
push 0x4dc
push dword [ebp + 8]
call fcn.0041ca8c
add esp, 0xc
push 0
push 0x4df
push dword [ebp + 8]
call fcn.0041ca8c
add esp, 0xc
push 0
push 0x4d9
push dword [ebp + 8]
call fcn.0041ca8c
add esp, 0xc
push 0
push 0x4d8
push dword [ebp + 8]
call fcn.0041ca8c
add esp, 0xc
push 0
push 0x4b2
push dword [ebp + 8]
call fcn.0041ca8c
add esp, 0xc
push 0
push 0x4de
push dword [ebp + 8]
call fcn.0041ca8c
add esp, 0xc
push 0
push 0x4dd
push dword [ebp + 8]
call fcn.0041ca8c
add esp, 0xc
push 0
push 0x4bd
push dword [ebp + 8]
call fcn.0041ca8c
add esp, 0xc
push 0
push 0x4b3
push dword [ebp + 8]
call fcn.0041ca8c
add esp, 0xc
push 0
push 0x4ec
push dword [ebp + 8]
call fcn.0041ca8c
add esp, 0xc
push 0
push 0x4b5
push dword [ebp + 8]
call fcn.0041ca8c
add esp, 0xc
push 1
push 0x3eb
push dword [ebp - 0x70]
call sub.USER32.DLL_EnableMenuItem
cmp dword [0x45c4e0], 1
jne 0x408b08
push 5
push 0x4dd
push dword [ebp + 8]
call fcn.0041ca8c
add esp, 0xc
push 1
push 0x4dd
push dword [ebp + 8]
call fcn.0041ca68
add esp, 0xc
jmp 0x408bec
cmp dword [0x45c4e0], 2
jne 0x408b3a
push 5
push 0x4df
push dword [ebp + 8]
call fcn.0041ca8c
add esp, 0xc
push 1
push 0x4df
push dword [ebp + 8]
call fcn.0041ca68
add esp, 0xc
jmp 0x408bec
cmp dword [0x45c4e0], 3
jne 0x408b6c
push 5
push 0x4e4
push dword [ebp + 8]
call fcn.0041ca8c
add esp, 0xc
push 1
push 0x4e4
push dword [ebp + 8]
call fcn.0041ca68
add esp, 0xc
jmp 0x408bec
cmp dword [0x45c4e0], 4
jne 0x408bbf
push 5
push 0x4e7
push dword [ebp + 8]
call fcn.0041ca8c
add esp, 0xc
push 1
push 0x4e7
push dword [ebp + 8]
call fcn.0041ca68
add esp, 0xc
push 5
push 0x4e8
push dword [ebp + 8]
call fcn.0041ca8c
add esp, 0xc
push 1
push 0x4e8
push dword [ebp + 8]
call fcn.0041ca68
add esp, 0xc
jmp 0x408bec
cmp dword [0x44f8b8], 0
je 0x408bec
push 5
push 0x4e4
push dword [ebp + 8]
call fcn.0041ca8c
add esp, 0xc
push 1
push 0x4e4
push dword [ebp + 8]
call fcn.0041ca68
add esp, 0xc
push 0
push 0xc8
push 0x458
push dword [ebp + 8]
call sub.USER32.DLL_SetTimer
mov dword [0x451c70], eax
mov dword [ebp - 8], 1
jmp 0x40ac7e
cmp dword [ebp + 0x10], 0x458
jne 0x408c24
call fcn.00417c78
jmp 0x40ac7e
cmp dword [ebp + 0x10], 0x46a
jne 0x40ac7e
push 0x46a
push dword [ebp + 8]
call sub.USER32.DLL_KillTimer
xor edx, edx
mov dword [0x451c74], edx
call fcn.00421214
push 0
push 0x7d0
push 0x46a
push dword [ebp + 8]
call sub.USER32.DLL_SetTimer
mov dword [0x451c74], eax
jmp 0x40ac7e
xor ecx, ecx
mov dword [0x44f948], ecx
mov eax, dword [0x44f8dc]
mov dword [0x44f94c], eax
cmp dword [0x451c70], 0
je 0x408c99
push 0x458
push dword [ebp + 8]
call sub.USER32.DLL_KillTimer
xor edx, edx
mov dword [0x451c70], edx
cmp dword [0x451c74], 0
je 0x408cb7
push 0x46a
push dword [ebp + 8]
call sub.USER32.DLL_KillTimer
xor ecx, ecx
mov dword [0x451c74], ecx
push 0xffffffffffffffff
call fcn.00420d24
pop ecx
jmp 0x40ac7e
mov ax, word [ebp + 0x10]
and ax, 0xffff
cmp ax, 2
jne 0x408cee
push 0
push 0x3e8
push 0x111
push dword [0x44f8dc]
call sub.USER32.DLL_PostMessageA
jmp 0x40ac7e
mov dx, word [ebp + 0x10]
and dx, 0xffff
cmp dx, 0x4b3
jne 0x408d10
push 0
push dword [ebp + 8]
call fcn.00408014
add esp, 8
jmp 0x40ac7e
mov cx, word [ebp + 0x10]
and cx, 0xffff
cmp cx, 0x4ec
jb 0x408edf
mov ax, word [ebp + 0x10]
and ax, 0xffff
cmp ax, 0x4ee
ja 0x408edf
mov dx, word [ebp + 0x10]
and dx, 0xffff
cmp dx, 0x4ec
jne 0x408d4f
mov dword [ebp - 0x6c], 0x465fd7
jmp 0x408d6f
mov cx, word [ebp + 0x10]
and cx, 0xffff
cmp cx, 0x4ed
jne 0x408d68
mov dword [ebp - 0x6c], 0x467555
jmp 0x408d6f
mov dword [ebp - 0x6c], 0x468ad3
mov eax, dword [ebp + 0x10]
shr eax, 0x10
cmp ax, 2
je 0x408d87
mov edx, dword [ebp + 0x10]
shr edx, 0x10
cmp dx, 1
jne 0x408dfc
push 0
push 0
push 0x188
mov cx, word [ebp + 0x10]
and cx, 0xffff
movzx eax, cx
push eax
push dword [ebp + 8]
call sub.USER32.DLL_SendDlgItemMessageA
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jl 0x408dc8
cmp dword [ebp - 0x38], 0x14
jge 0x408dc8
imul edx, dword [ebp - 0x38], 0x83
mov ecx, dword [ebp - 0x6c]
cmp byte [ecx + edx*2 + 0x106], 0
jne 0x408ddf
push 0x4563be
push 0x503
push dword [ebp + 8]
call sub.USER32.DLL_SetDlgItemTextA
jmp 0x40ac7e
mov eax, dword [ebp - 0x38]
inc eax
imul edx, eax, 0x106
add edx, dword [ebp - 0x6c]
push edx
lea ecx, [ebp - 0x268]
push ecx
call fcn.004415c8
add esp, 8
mov eax, dword [ebp + 0x10]
shr eax, 0x10
cmp ax, 2
jne 0x408e93
push 0x4563bf
push 0x503
push dword [ebp + 8]
call sub.USER32.DLL_SetDlgItemTextA
push 0
mov dx, word [ebp + 0x10]
and dx, 0xffff
movzx ecx, dx
push ecx
lea eax, [ebp - 0x268]
push eax
push dword [ebp - 0x6c]
call fcn.004209e0
add esp, 0x10
mov dx, word [ebp + 0x10]
and dx, 0xffff
cmp dx, 0x4ec
je 0x409021
mov cx, word [ebp + 0x10]
and cx, 0xffff
cmp cx, 0x4ed
jne 0x408e81
lea eax, [ebp - 0x268]
push eax
push 0x679f44
call fcn.004415c8
add esp, 8
call fcn.0041a6d8
jmp 0x40ac7e
push 0
push dword [ebp + 8]
call fcn.0041e944
add esp, 8
jmp 0x40ac7e
mov edx, dword [ebp + 0x10]
shr edx, 0x10
cmp dx, 1
jne 0x408eb8
lea ecx, [ebp - 0x268]
push ecx
push 0x503
push dword [ebp + 8]
call sub.USER32.DLL_SetDlgItemTextA
jmp 0x40ac7e
mov eax, dword [ebp + 0x10]
shr eax, 0x10
cmp ax, 5
jne 0x40ac7e
push 0x4563c0
push 0x503
push dword [ebp + 8]
call sub.USER32.DLL_SetDlgItemTextA
jmp 0x40ac7e
mov dx, word [ebp + 0x10]
and dx, 0xffff
cmp dx, 0x4c1
jne 0x408ef9
call fcn.0041ff90
jmp 0x40ac7e
mov cx, word [ebp + 0x10]
and cx, 0xffff
cmp cx, 0x4b1
jne 0x409114
mov dword [ebp - 8], 1
cmp byte [0x450c9c], 0
je 0x408f33
push 0x450c9c
lea eax, [ebp - 0x268]
push eax
call fcn.004415c8
add esp, 8
jmp 0x408f7a
push 0x465fd7
lea edx, [ebp - 0x268]
push edx
call fcn.004415c8
add esp, 8
mov dword [0x44ffa4], 1
push 0x44ffa4
push 0x46a051
lea ecx, [ebp - 0x268]
push ecx
push dword [0x44f94c]
call fcn.004115d8
add esp, 0x10
mov dword [0x44ffa4], 4
cmp byte [0x450c9c], 0
je 0x408fb5
cmp dword [0x44f8e8], 4
jne 0x408fb5
cmp dword [0x450db8], 0
jne 0x40ac7e
push 0
push 0x4e9
push 0x111
push dword [0x44f948]
call sub.USER32.DLL_PostMessageA
jmp 0x40ac7e
cmp byte [0x450c9c], 0
je 0x408ff0
cmp dword [0x44f8e8], 3
jne 0x408ff0
cmp dword [0x450db8], 0
jne 0x40ac7e
push 0
push 0x4e5
push 0x111
push dword [0x44f948]
call sub.USER32.DLL_PostMessageA
jmp 0x40ac7e
cmp byte [ebp - 0x268], 0
je 0x40ac7e
cmp byte [0x450c9c], 0
jne 0x409021
push 0
push 0x4ec
lea eax, [ebp - 0x268]
push eax
push 0x465fd7
call fcn.004209e0
add esp, 0x10
mov byte [0x465ed1], 0
push dword [ebp + 8]
call fcn.00407ec4
pop ecx
lea edx, [ebp - 0x268]
push edx
push dword [0x44f94c]
call fcn.00412838
add esp, 8
test eax, eax
je 0x4090eb
lea ecx, [ebp - 0x268]
push ecx
push 0x465ed1
call fcn.004415c8
add esp, 8
push dword [ebp + 8]
call fcn.00407ec4
pop ecx
cmp dword [0x450db8], 0
jne 0x40ac7e
cmp byte [0x450c9c], 0
je 0x40ac7e
cmp dword [0x44f8e8], 1
jne 0x4090aa
push 0
push 0x4e0
push 0x111
push dword [0x44f948]
call sub.USER32.DLL_PostMessageA
jmp 0x40ac7e
cmp dword [0x44f8e8], 2
jne 0x4090cf
push 0
push 0x4e2
push 0x111
push dword [0x44f948]
call sub.USER32.DLL_PostMessageA
jmp 0x40ac7e
push 0
push 0x4b4
push 0x111
push dword [0x44f948]
call sub.USER32.DLL_PostMessageA
jmp 0x40ac7e
cmp byte [0x450c9c], 0
je 0x40ac7e
push 0
push 0x3e8
push 0x111
push dword [0x44f8dc]
call sub.USER32.DLL_PostMessageA
jmp 0x40ac7e
mov ax, word [ebp + 0x10]
and ax, 0xffff
cmp ax, 0x4d7
je 0x4091ee
mov dx, word [ebp + 0x10]
and dx, 0xffff
cmp dx, 0x4e1
je 0x4091ee
mov cx, word [ebp + 0x10]
and cx, 0xffff
cmp cx, 0x4b2
je 0x4091ee
mov ax, word [ebp + 0x10]
and ax, 0xffff
cmp ax, 0x4da
je 0x4091ee
mov dx, word [ebp + 0x10]
and dx, 0xffff
cmp dx, 0x4db
je 0x4091ee
mov cx, word [ebp + 0x10]
and cx, 0xffff
cmp cx, 0x4dc
je 0x4091ee
mov ax, word [ebp + 0x10]
and ax, 0xffff
cmp ax, 0x4df
je 0x4091ee
mov dx, word [ebp + 0x10]
and dx, 0xffff
cmp dx, 0x4e4
je 0x4091ee
mov cx, word [ebp + 0x10]
and cx, 0xffff
cmp cx, 0x4e7
je 0x4091ee
mov ax, word [ebp + 0x10]
and ax, 0xffff
cmp ax, 0x4e8
je 0x4091ee
mov dx, word [ebp + 0x10]
and dx, 0xffff
cmp dx, 0x4d9
je 0x4091ee
mov cx, word [ebp + 0x10]
and cx, 0xffff
cmp cx, 0x4e3
je 0x4091ee
mov ax, word [ebp + 0x10]
and ax, 0xffff
cmp ax, 0x4e6
jne 0x409d28
mov dword [ebp - 8], 1
mov dx, word [ebp + 0x10]
and dx, 0xffff
cmp dx, 0x4d7
jne 0x409215
push str._IDD_READ_SECUTEST
call fcn.0040391c
pop ecx
jmp 0x40937c
mov cx, word [ebp + 0x10]
and cx, 0xffff
cmp cx, 0x4b2
jne 0x409235
push str._IDD_READ_LOG
call fcn.0040391c
pop ecx
jmp 0x40937c
mov ax, word [ebp + 0x10]
and ax, 0xffff
cmp ax, 0x4da
jne 0x409253
push str._IDD_READ_PROFI_204
call fcn.0040391c
pop ecx
jmp 0x40937c
mov dx, word [ebp + 0x10]
and dx, 0xffff
cmp dx, 0x4e1
jne 0x409273
push str._IDD_READ_S3N
call fcn.0040391c
pop ecx
jmp 0x40937c
mov cx, word [ebp + 0x10]
and cx, 0xffff
cmp cx, 0x4db
jne 0x409293
push str._IDD_READ_PROFI_PSI
call fcn.0040391c
pop ecx
jmp 0x40937c
mov ax, word [ebp + 0x10]
and ax, 0xffff
cmp ax, 0x4dc
jne 0x4092b1
push str._IDD_READ_PROFI_C
call fcn.0040391c
pop ecx
jmp 0x40937c
mov dx, word [ebp + 0x10]
and dx, 0xffff
cmp dx, 0x4df
jne 0x4092d1
push str._IDD_READ_PROFI_M
call fcn.0040391c
pop ecx
jmp 0x40937c
mov cx, word [ebp + 0x10]
and cx, 0xffff
cmp cx, 0x4e4
jne 0x4092f1
push str._IDD_READ_SECUSTAR_from_XML
call fcn.0040391c
pop ecx
jmp 0x40937c
mov ax, word [ebp + 0x10]
and ax, 0xffff
cmp ax, 0x4e7
jne 0x40930c
push str._IDD_READ_SECUTEST4_from_etc.exe
call fcn.0040391c
pop ecx
jmp 0x40937c
mov dx, word [ebp + 0x10]
and dx, 0xffff
cmp dx, 0x4e8
jne 0x409329
push str._IDD_READ_SECUTEST4_from_XML
call fcn.0040391c
pop ecx
jmp 0x40937c
mov cx, word [ebp + 0x10]
and cx, 0xffff
cmp cx, 0x4d9
jne 0x409346
push str._IDD_READ_MINIT_MEM
call fcn.0040391c
pop ecx
jmp 0x40937c
mov ax, word [ebp + 0x10]
and ax, 0xffff
cmp ax, 0x4e3
jne 0x409361
push str._IDD_READ_METRISO
call fcn.0040391c
pop ecx
jmp 0x40937c
mov dx, word [ebp + 0x10]
and dx, 0xffff
cmp dx, 0x4e6
jne 0x40937c
push str._IDD_READ_MPI530
call fcn.0040391c
pop ecx
lea ecx, [ebp - 0x474]
push ecx
push 0x4564cd
call fcn.00408528
add esp, 8
mov ax, word [ebp + 0x10]
and ax, 0xffff
cmp ax, 0x4b2
je 0x4093e0
mov dx, word [ebp + 0x10]
and dx, 0xffff
cmp dx, 0x4e7
je 0x4093e0
mov cx, word [ebp + 0x10]
and cx, 0xffff
cmp cx, 0x4e8
je 0x4093e0
mov ax, word [ebp + 0x10]
and ax, 0xffff
cmp ax, 0x4e4
je 0x4093e0
mov dx, word [ebp + 0x10]
and dx, 0xffff
cmp dx, 0x4df
jne 0x409733
mov cx, word [ebp + 0x10]
and cx, 0xffff
cmp cx, 0x4e7
jne 0x40949a
push str.read_Secutest4_etc.exe_r_n
call fcn.0040391c
pop ecx
push 0x4655a5
lea eax, [ebp - 0x268]
push eax
call fcn.004415c8
add esp, 8
push 0
push 5
lea edx, [ebp - 0x268]
push edx
push dword [0x44f94c]
call fcn.00429360
add esp, 0x10
test eax, eax
jne 0x409460
push 0x44fe18
lea ecx, [ebp - 0x268]
push ecx
call fcn.004415c8
add esp, 8
push 0
push 0x44ff7f
lea eax, [ebp - 0x268]
push eax
push dword [0x44f94c]
call fcn.004115d8
add esp, 0x10
cmp byte [ebp - 0x268], 0
je 0x40ac7e
lea edx, [ebp - 0x268]
push edx
push 0x44fe18
call fcn.004415c8
add esp, 8
lea ecx, [ebp - 0x268]
push ecx
push 0x44fce1
call fcn.004415c8
add esp, 8
jmp 0x4096c3
mov ax, word [ebp + 0x10]
and ax, 0xffff
cmp ax, 0x4e8
jne 0x40951d
push str.read_Secutest4_XML_r_n
call fcn.0040391c
pop ecx
push 0x44fe18
lea edx, [ebp - 0x268]
push edx
call fcn.004415c8
add esp, 8
push 0
push 0x44ff7f
lea ecx, [ebp - 0x268]
push ecx
push dword [0x44f94c]
call fcn.004115d8
add esp, 0x10
cmp byte [ebp - 0x268], 0
je 0x40ac7e
lea eax, [ebp - 0x268]
push eax
push 0x44fe18
call fcn.004415c8
add esp, 8
lea edx, [ebp - 0x268]
push edx
push 0x44fce1
call fcn.004415c8
add esp, 8
jmp 0x4096c3
mov cx, word [ebp + 0x10]
and cx, 0xffff
cmp cx, 0x4df
jne 0x4095d7
push str.read_ProfiM_XML_r_n
call fcn.0040391c
pop ecx
push 0x4655a5
lea eax, [ebp - 0x268]
push eax
call fcn.004415c8
add esp, 8
push 0
push 1
lea edx, [ebp - 0x268]
push edx
push dword [0x44f94c]
call fcn.00429360
add esp, 0x10
test eax, eax
jne 0x40959d
push 0x44fe18
lea ecx, [ebp - 0x268]
push ecx
call fcn.004415c8
add esp, 8
push 0
push 0x44ff67
lea eax, [ebp - 0x268]
push eax
push dword [0x44f94c]
call fcn.004115d8
add esp, 0x10
cmp byte [ebp - 0x268], 0
je 0x40ac7e
lea edx, [ebp - 0x268]
push edx
push 0x44fe18
call fcn.004415c8
add esp, 8
lea ecx, [ebp - 0x268]
push ecx
push 0x44fce1
call fcn.004415c8
add esp, 8
jmp 0x4096c3
mov ax, word [ebp + 0x10]
and ax, 0xffff
cmp ax, 0x4e4
jne 0x409657
push str.read_SECUSTAR_XML_r_n
call fcn.0040391c
pop ecx
push 0x44fe18
lea edx, [ebp - 0x268]
push edx
call fcn.004415c8
add esp, 8
push 0
push 0x44ff67
lea ecx, [ebp - 0x268]
push ecx
push dword [0x44f94c]
call fcn.004115d8
add esp, 0x10
cmp byte [ebp - 0x268], 0
je 0x40ac7e
lea eax, [ebp - 0x268]
push eax
push 0x44fe18
call fcn.004415c8
add esp, 8
lea edx, [ebp - 0x268]
push edx
push 0x44fce1
call fcn.004415c8
add esp, 8
jmp 0x4096c3
mov cx, word [ebp + 0x10]
and cx, 0xffff
cmp cx, 0x4b2
jne 0x4096c3
push str.read_LOG_r_n
call fcn.0040391c
pop ecx
push 0x44fce1
lea eax, [ebp - 0x268]
push eax
call fcn.004415c8
add esp, 8
push 0
push 0x44ff4f
lea edx, [ebp - 0x268]
push edx
push dword [0x44f94c]
call fcn.004115d8
add esp, 0x10
cmp byte [ebp - 0x268], 0
je 0x40ac7e
lea ecx, [ebp - 0x268]
push ecx
push 0x44fce1
call fcn.004415c8
add esp, 8
push dword [ebp + 8]
call sub.USER32.DLL_UpdateWindow
push 0
push 1
lea eax, [ebp - 0x474]
push eax
push 0x44fce1
push dword [0x44f94c]
call fcn.00429634
add esp, 0x14
mov dword [ebp - 0x1c], eax
test eax, eax
jl 0x409719
push 0x45653a
lea edx, [ebp - 0x474]
push edx
call fcn.0044362c
add esp, 8
mov dword [ebp - 0x14], eax
test eax, eax
je 0x409719
push dword [ebp - 0x14]
call fcn.00442e70
pop ecx
jmp 0x4099ce
push str.Fehler_beim_Lesen_des_Ger
push 0x10
call sub.USER32.DLL_GetFocus
push eax
call fcn.0041124c
add esp, 0xc
jmp 0x40ac7e
mov dx, word [ebp + 0x10]
and dx, 0xffff
cmp dx, 0x4da
jne 0x4098ad
push str.read_Profitest_204_r_n
call fcn.0040391c
pop ecx
push 1
push dword [ebp + 8]
call fcn.00408014
add esp, 8
test eax, eax
je 0x40ac7e
push dword [0x44fff4]
call fcn.004016bc
pop ecx
mov dword [ebp - 0x68], eax
test eax, eax
jb 0x40ac7e
push dword [ebp - 0x68]
push dword [0x44f94c]
call fcn.004018a0
add esp, 8
test eax, eax
jne 0x4097f1
push 0x4509da
push 0x11
call sub.USER32.DLL_GetFocus
push eax
call fcn.0041124c
add esp, 0xc
dec eax
je 0x4097b9
push dword [ebp - 0x68]
call fcn.00418a88
pop ecx
jmp 0x40ac7e
push dword [ebp - 0x68]
push dword [0x44f94c]
call fcn.004018a0
add esp, 8
test eax, eax
jne 0x4097f1
push 0x450a6a
push 0x10
call sub.USER32.DLL_GetFocus
push eax
call fcn.0041124c
add esp, 0xc
push dword [ebp - 0x68]
call fcn.00418a88
pop ecx
jmp 0x40ac7e
push 0x7f02
push 0
call sub.USER32.DLL_LoadCursorA
push eax
call sub.USER32.DLL_SetCursor
mov dword [ebp - 0x54], eax
push 0x4655a5
lea edx, [ebp - 0x268]
push edx
call fcn.004415c8
add esp, 8
push str.PROFI204.BIN
lea ecx, [ebp - 0x268]
push ecx
call fcn.004414ec
add esp, 8
lea eax, [ebp - 0x474]
push eax
lea edx, [ebp - 0x268]
push edx
push dword [ebp - 0x68]
push dword [0x44f94c]
call fcn.00401a00
add esp, 0x10
mov dword [ebp - 0x1c], eax
push dword [ebp - 0x54]
call sub.USER32.DLL_SetCursor
push dword [ebp - 0x68]
call fcn.00418a88
pop ecx
cmp dword [ebp - 0x1c], 0
jge 0x409881
push str.Fehler_beim_Auslesen
push 0x10
call sub.USER32.DLL_GetFocus
push eax
call fcn.0041124c
add esp, 0xc
jmp 0x40ac7e
cmp dword [ebp - 0x1c], 0
jne 0x4098a1
push 0x45ad3b
push 0x10
call sub.USER32.DLL_GetFocus
push eax
call fcn.0041124c
add esp, 0xc
jmp 0x40ac7e
mov dword [ebp - 0x1c], 5
jmp 0x4099ce
cmp dword [0x450110], 0
jl 0x4098c2
cmp dword [0x450110], 0x100
jl 0x4098dc
push 0x456571
push 0x10
call sub.USER32.DLL_GetFocus
push eax
call fcn.0041124c
add esp, 0xc
jmp 0x40ac7e
mov ecx, dword [0x450110]
mov dword [0x44fff4], ecx
push 0x11
call sub.USER32.DLL_GetKeyState
test al, 0x80
je 0x40991f
push 1
push 0
push 0
push str.TestCom.ht
push 0x4565af
push 0
call sub.SHELL32.DLL_ShellExecuteA
push str.Device_reading_will_proceed_now
push 0x40
call sub.USER32.DLL_GetFocus
push eax
call fcn.0041124c
add esp, 0xc
push str.read_WIZS_r_n
call fcn.0040391c
pop ecx
push 0
push 1
push dword [0x44fff4]
lea eax, [ebp - 0x474]
push eax
push dword [0x44f94c]
call fcn.00428efc
add esp, 0x14
mov dword [ebp - 0x1c], eax
test eax, eax
jl 0x409994
push 0x4565e2
lea edx, [ebp - 0x474]
push edx
call fcn.0044362c
add esp, 8
mov dword [ebp - 0x14], eax
test eax, eax
je 0x409994
push dword [ebp - 0x14]
call fcn.00442e70
pop ecx
cmp dword [ebp - 0x1c], 4
je 0x4099ce
push str.Unbekanntes_Ger
push 0x10
call sub.USER32.DLL_GetFocus
push eax
call fcn.0041124c
add esp, 0xc
jmp 0x40ac7e
cmp dword [ebp - 0x1c], 0xfffffffe
jne 0x4099b4
push 0x45ad3b
push 0x10
call sub.USER32.DLL_GetFocus
push eax
call fcn.0041124c
add esp, 0xc
jmp 0x40ac7e
push str.Von_der_selektierten_Schnittstelle_kann_nicht_gelesen_werden.
push 0x10
call sub.USER32.DLL_GetFocus
push eax
call fcn.0041124c
add esp, 0xc
jmp 0x40ac7e
mov edx, dword [ebp - 0x1c]
cmp edx, dword [0x44ffa4]
je 0x4099eb
mov byte [ebp - 0x268], 0
mov ecx, dword [ebp - 0x1c]
mov dword [0x44ffa4], ecx
jmp 0x4099ff
push 0x465fd7
lea eax, [ebp - 0x268]
push eax
call fcn.004415c8
add esp, 8
mov dword [0x44ffa4], 1
cmp byte [0x45c3d8], 0
je 0x409a84
cmp dword [0x45c4e0], 2
je 0x409a2d
cmp dword [0x45c4e0], 3
je 0x409a2d
cmp dword [0x45c4e0], 4
jne 0x409a84
push 0
push 0x45c3d8
lea edx, [ebp - 0x474]
push edx
call sub.KERNEL32.DLL_CopyFileA
test eax, eax
jne 0x409a5b
push 0x45c3d8
push 0x450450
push 0x30
push dword [ebp + 8]
call fcn.0041124c
add esp, 0x10
lea ecx, [ebp - 0x474]
push ecx
call fcn.00442d38
pop ecx
push 0
push 0x3e8
push 0x111
push dword [0x44f8dc]
call sub.USER32.DLL_PostMessageA
jmp 0x40ac7e
push dword [0x44ffa4]
push 0x46a051
call fcn.004114dc
add esp, 8
push eax
push 0
lea eax, [ebp - 0x268]
push eax
call fcn.00404b3c
add esp, 0xc
push 1
push 0x44ffa4
push 1
push 0x46a051
lea edx, [ebp - 0x268]
push edx
push dword [0x44f94c]
call fcn.00411764
add esp, 0x18
mov dword [0x44ffa4], 4
push dword [0x44f94c]
call sub.USER32.DLL_UpdateWindow
mov cx, word [ebp + 0x10]
and cx, 0xffff
cmp cx, 0x4d7
je 0x409b6f
mov ax, word [ebp + 0x10]
and ax, 0xffff
cmp ax, 0x4d9
je 0x409b6f
mov dx, word [ebp + 0x10]
and dx, 0xffff
cmp dx, 0x4db
je 0x409b6f
mov cx, word [ebp + 0x10]
and cx, 0xffff
cmp cx, 0x4df
je 0x409b6f
mov ax, word [ebp + 0x10]
and ax, 0xffff
cmp ax, 0x4e4
je 0x409b6f
mov dx, word [ebp + 0x10]
and dx, 0xffff
cmp dx, 0x4e7
je 0x409b6f
mov cx, word [ebp + 0x10]
and cx, 0xffff
cmp cx, 0x4e1
je 0x409b6f
mov ax, word [ebp + 0x10]
and ax, 0xffff
cmp ax, 0x4e3
je 0x409b6f
mov dx, word [ebp + 0x10]
and dx, 0xffff
cmp dx, 0x4e6
jne 0x409c2d
lea ecx, [ebp - 0x268]
push ecx
push 0x44fce1
call fcn.004415c8
add esp, 8
push 0x2e
push 0x44fce1
call fcn.004416fd
add esp, 8
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x409bba
push dword [ebp - 0xc]
call fcn.004415f8
pop ecx
cmp eax, 4
ja 0x409bba
push 0x5c
push dword [ebp - 0xc]
call fcn.004416f1
add esp, 8
test eax, eax
je 0x409bce
push 0x44fce1
call fcn.004415f8
pop ecx
add eax, 0x44fce1
mov dword [ebp - 0xc], eax
push 0x456636
push dword [ebp - 0xc]
call fcn.004415c8
add esp, 8
mov byte [0x44fde5], 0
push 0x187a800
call fcn.0040464c
pop ecx
test eax, eax
je 0x409c2d
push 0
push 0x44fce1
push 0x187a800
call sub.KERNEL32.DLL_CopyFileA
test eax, eax
je 0x409c16
push 0x187a800
call fcn.00442d38
pop ecx
jmp 0x409c2d
push 0x44fce1
push 0x450450
push 0x30
push dword [ebp + 8]
call fcn.0041124c
add esp, 0x10
cmp byte [ebp - 0x268], 0
je 0x409c6d
push 0
lea eax, [ebp - 0x268]
push eax
lea edx, [ebp - 0x474]
push edx
call sub.KERNEL32.DLL_CopyFileA
test eax, eax
jne 0x409c6d
lea ecx, [ebp - 0x268]
push ecx
push 0x450450
push 0x30
push dword [ebp + 8]
call fcn.0041124c
add esp, 0x10
jmp 0x40ac7e
lea eax, [ebp - 0x474]
push eax
call fcn.00442d38
pop ecx
cmp byte [ebp - 0x268], 0
jne 0x409c9e
push 0
push 0x4ec
push 0
push 0x465fd7
call fcn.004209e0
add esp, 0x10
jmp 0x40ac7e
push 0
push 0x4ec
lea edx, [ebp - 0x268]
push edx
push 0x465fd7
call fcn.004209e0
add esp, 0x10
mov byte [0x465ed1], 0
push dword [ebp + 8]
call fcn.00407ec4
pop ecx
push 0x4660dd
push dword [0x44f94c]
call fcn.00412838
add esp, 8
test eax, eax
je 0x40ac7e
push 0x4660dd
push 0x465ed1
call fcn.004415c8
add esp, 8
push dword [ebp + 8]
call fcn.00407ec4
pop ecx
cmp byte [0x450c9c], 0
je 0x40ac7e
push 0
push 0x4b4
push 0x111
push dword [0x44f948]
call sub.USER32.DLL_PostMessageA
jmp 0x40ac7e
mov cx, word [ebp + 0x10]
and cx, 0xffff
cmp cx, 0x4dd
je 0x409d5a
mov ax, word [ebp + 0x10]
and ax, 0xffff
cmp ax, 0x4d8
je 0x409d5a
mov dx, word [ebp + 0x10]
and dx, 0xffff
cmp dx, 0x4de
jne 0x40a091
mov dword [ebp - 8], 1
mov cx, word [ebp + 0x10]
and cx, 0xffff
cmp cx, 0x4dd
jne 0x409d78
mov eax, str._IDD_READ_MT5_ONL
jmp 0x409d94
mov dx, word [ebp + 0x10]
and dx, 0xffff
cmp dx, 0x4d8
jne 0x409d8f
mov eax, str._IDD_READ_MINIT_ONL
jmp 0x409d94
mov eax, str._IDD_READ_MT5_IR
push eax
call fcn.0040391c
pop ecx
mov dx, word [ebp + 0x10]
and dx, 0xffff
cmp dx, 0x4dd
je 0x409dc7
cmp dword [0x450104], 1
je 0x40ac7e
jmp 0x409dc7
push dword [ebp + 8]
call fcn.00408424
pop ecx
test eax, eax
je 0x409dd8
push 1
push dword [ebp + 8]
call fcn.00408014
add esp, 8
test eax, eax
je 0x409dba
cmp dword [0x44fff4], 0
jge 0x409e05
cmp dword [0x450104], 1
jne 0x40ac7e
push 0
push 0x3e8
push 0x111
push dword [0x44f8dc]
call sub.USER32.DLL_PostMessageA
cmp byte [0x45c3d8], 0
je 0x409eb1
cmp dword [0x45c4e0], 1
jne 0x409eb1
xor ecx, ecx
mov dword [0x187a93c], ecx
mov ax, word [ebp + 0x10]
and ax, 0xffff
cmp ax, 0x4d8
sete dl
and edx, 1
mov dword [0x187a940], edx
push dword [ebp + 8]
call fcn.00407ec4
pop ecx
push 0x45c3d8
push dword [0x44f94c]
call fcn.0042b0f8
add esp, 8
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jg 0x409e82
cmp dword [0x450104], 1
je 0x409e82
push str.Keine_Funkdaten_gelesen.__METRATESTER_5_FUNK_anklicken.
push 0x30
push dword [0x44f94c]
call fcn.0041124c
add esp, 0xc
cmp dword [ebp - 0x1c], 0
jg 0x409e95
cmp dword [0x450104], 1
jne 0x40ac7e
push 0
push 0x3e8
push 0x111
push dword [0x44f8dc]
call sub.USER32.DLL_PostMessageA
jmp 0x40ac7e
cmp dword [0x44ffa4], 4
je 0x409ecd
mov byte [ebp - 0x268], 0
mov dword [0x44ffa4], 4
jmp 0x409ee1
push 0x465fd7
lea ecx, [ebp - 0x268]
push ecx
call fcn.004415c8
add esp, 8
cmp byte [ebp - 0x268], 0
je 0x409f05
push 0
push 0x4ec
lea eax, [ebp - 0x268]
push eax
push 0x465fd7
call fcn.004209e0
add esp, 0x10
cmp dword [0x450104], 1
jne 0x409f1a
mov byte [ebp - 0x268], 0
jmp 0x409fac
push dword [0x44ffa4]
push 0x46a051
call fcn.004114dc
add esp, 8
push eax
push 0
lea edx, [ebp - 0x268]
push edx
call fcn.00404b3c
add esp, 0xc
push 1
push 0x44ffa4
push 0
push 0x46a051
lea ecx, [ebp - 0x268]
push ecx
push dword [0x44f94c]
call fcn.00411764
add esp, 0x18
push dword [0x44f94c]
call sub.USER32.DLL_UpdateWindow
cmp byte [ebp - 0x268], 0
jne 0x409f91
push 0
push 0x4ec
push 0
push 0x465fd7
call fcn.004209e0
add esp, 0x10
jmp 0x40ac7e
push 0
push 0x4ec
lea eax, [ebp - 0x268]
push eax
push 0x465fd7
call fcn.004209e0
add esp, 0x10
mov edx, 1
mov cx, word [ebp + 0x10]
and cx, 0xffff
cmp cx, 0x4de
je 0x409fc2
dec edx
mov dword [0x187a93c], edx
mov ax, word [ebp + 0x10]
and ax, 0xffff
cmp ax, 0x4d8
sete dl
and edx, 1
mov dword [0x187a940], edx
lea ecx, [ebp - 0x268]
push ecx
push dword [0x44f94c]
call fcn.0042b0f8
add esp, 8
mov dword [ebp - 0x1c], eax
cmp dword [0x450104], 1
jne 0x40a018
push 0
push 0x3e8
push 0x111
push dword [0x44f8dc]
call sub.USER32.DLL_PostMessageA
cmp dword [ebp - 0x1c], 0
jle 0x40ac7e
mov byte [0x465ed1], 0
push dword [ebp + 8]
call fcn.00407ec4
pop ecx
push 0x4660dd
push dword [0x44f94c]
call fcn.00412838
add esp, 8
test eax, eax
je 0x40ac7e
push 0x4660dd
push 0x465ed1
call fcn.004415c8
add esp, 8
push dword [ebp + 8]
call fcn.00407ec4
pop ecx
cmp byte [0x450c9c], 0
je 0x40ac7e
push 0
push 0x4b4
push 0x111
push dword [0x44f948]
call sub.USER32.DLL_PostMessageA
jmp 0x40ac7e
mov ax, word [ebp + 0x10]
and ax, 0xffff
cmp ax, 0xce5
je 0x40a0af
mov dx, word [ebp + 0x10]
and dx, 0xffff
cmp dx, 0xcec
jne 0x40a10c
mov cx, word [ebp + 0x10]
and cx, 0xffff
movzx eax, cx
add eax, 0xfffff31c
mov dword [ebp - 0x1c], eax
mov edx, dword [ebp - 0x1c]
push dword [edx*8 + 0x450ed4]
lea ecx, [ebp - 0x268]
push ecx
call fcn.004415c8
add esp, 8
mov eax, dword [ebp - 0x1c]
mov edx, dword [eax*8 + 0x450ed8]
mov dword [ebp - 0x1c], edx
lea ecx, [ebp - 0x1c]
push ecx
push 0x46a051
lea eax, [ebp - 0x268]
push eax
push dword [0x44f94c]
call fcn.004115d8
add esp, 0x10
jmp 0x40ac7e
mov dx, word [ebp + 0x10]
and dx, 0xffff
cmp dx, 0xce6
je 0x40a14a
mov cx, word [ebp + 0x10]
and cx, 0xffff
cmp cx, 0xce8
je 0x40a14a
mov ax, word [ebp + 0x10]
and ax, 0xffff
cmp ax, 0xcea
je 0x40a14a
mov dx, word [ebp + 0x10]
and dx, 0xffff
cmp dx, 0xced
jne 0x40a1a7
mov cx, word [ebp + 0x10]
and cx, 0xffff
movzx eax, cx
add eax, 0xfffff31c
mov dword [ebp - 0x1c], eax
mov edx, dword [ebp - 0x1c]
push dword [edx*8 + 0x450ed4]
lea ecx, [ebp - 0x268]
push ecx
call fcn.004415c8
add esp, 8
mov eax, dword [ebp - 0x1c]
mov edx, dword [eax*8 + 0x450ed8]
mov dword [ebp - 0x1c], edx
lea ecx, [ebp - 0x1c]
push ecx
push str.MS_WORD_Formularvorlage.frmMS_WORD_Protokollvorlage.rtf
lea eax, [ebp - 0x268]
push eax
push dword [0x44f94c]
call fcn.004115d8
add esp, 0x10
jmp 0x40ac7e
mov dx, word [ebp + 0x10]
and dx, 0xffff
cmp dx, 0xce4
jne 0x40a218
mov cx, word [ebp + 0x10]
and cx, 0xffff
movzx eax, cx
add eax, 0xfffff31c
mov dword [ebp - 0x1c], eax
mov edx, dword [ebp - 0x1c]
push dword [edx*8 + 0x450ed4]
lea ecx, [ebp - 0x268]
push ecx
call fcn.004415c8
add esp, 8
mov eax, dword [ebp - 0x1c]
mov edx, dword [eax*8 + 0x450ed8]
mov dword [ebp - 0x1c], edx
push 1
lea ecx, [ebp - 0x1c]
push ecx
push 1
push 0x46a051
lea eax, [ebp - 0x268]
push eax
push dword [0x44f94c]
call fcn.00411764
add esp, 0x18
jmp 0x40ac7e
mov dx, word [ebp + 0x10]
and dx, 0xffff
cmp dx, 0xce7
je 0x40a256
mov cx, word [ebp + 0x10]
and cx, 0xffff
cmp cx, 0xce9
je 0x40a256
mov ax, word [ebp + 0x10]
and ax, 0xffff
cmp ax, 0xceb
je 0x40a256
mov dx, word [ebp + 0x10]
and dx, 0xffff
cmp dx, 0xcee
jne 0x40a2b7
mov cx, word [ebp + 0x10]
and cx, 0xffff
movzx eax, cx
add eax, 0xfffff31c
mov dword [ebp - 0x1c], eax
mov edx, dword [ebp - 0x1c]
push dword [edx*8 + 0x450ed4]
lea ecx, [ebp - 0x268]
push ecx
call fcn.004415c8
add esp, 8
mov eax, dword [ebp - 0x1c]
mov edx, dword [eax*8 + 0x450ed8]
mov dword [ebp - 0x1c], edx
push 1
lea ecx, [ebp - 0x1c]
push ecx
push 1
push str.MS_WORD_Messprotokoll_.rtf
lea eax, [ebp - 0x268]
push eax
push dword [0x44f94c]
call fcn.00411764
add esp, 0x18
jmp 0x40ac7e
mov dx, word [ebp + 0x10]
and dx, 0xffff
cmp dx, 0x1069
je 0x40a2d7
mov cx, word [ebp + 0x10]
and cx, 0xffff
cmp cx, 0x106a
jne 0x40a319
mov eax, 2
mov dx, word [ebp + 0x10]
and dx, 0xffff
cmp dx, 0x1069
je 0x40a2ed
dec eax
mov dword [0x450db8], eax
push 0
push sym.htpwrdoc.exe__ListProcDlg_qqsp6HWND__uiuil
push dword [ebp + 8]
push 0x4b3
push dword [0x44f8e0]
call sub.USER32.DLL_DialogBoxParamA
xor ecx, ecx
mov dword [0x450db8], ecx
jmp 0x40ac7e
mov ax, word [ebp + 0x10]
and ax, 0xffff
cmp ax, 0x106b
jne 0x40a363
mov dword [0x450db8], 1
xor edx, edx
mov dword [0x67e074], edx
push 0
push sym.htpwrdoc.exe__ValTestProcDlg_qqsp6HWND__uiuil
push dword [0x44f948]
push 0xbb8
push dword [0x44f8e0]
call sub.USER32.DLL_DialogBoxParamA
xor ecx, ecx
mov dword [0x450db8], ecx
jmp 0x40ac7e
mov ax, word [ebp + 0x10]
and ax, 0xffff
cmp ax, 0x4bd
jne 0x40a3aa
push 1
push dword [ebp + 8]
call fcn.00408014
add esp, 8
test eax, eax
je 0x40ac7e
push dword [0x44f94c]
call sub.USER32.DLL_UpdateWindow
push dword [0x44fff4]
push dword [0x44f94c]
call fcn.004298b0
add esp, 8
jmp 0x40ac7e
mov dx, word [ebp + 0x10]
and dx, 0xffff
cmp dx, 0x4d6
jne 0x40a40f
mov dword [ebp - 8], 1
mov dword [0x44f8f8], 0xffffffff
push 0
push sym.htpwrdoc.exe__ActionSelProc_qqsp6HWND__uiuil
push dword [ebp + 8]
push 0x4d6
push dword [0x44f8e0]
call sub.USER32.DLL_DialogBoxParamA
cmp dword [0x44f8f8], 0
jle 0x40ac7e
push 0
push dword [0x44f8f8]
push 0x111
push dword [0x44f948]
call sub.USER32.DLL_PostMessageA
jmp 0x40ac7e
mov cx, word [ebp + 0x10]
and cx, 0xffff
cmp cx, 0x4b4
jne 0x40a50e
cmp dword [0x44f9c8], 0
jne 0x40a50e
cmp dword [0x457540], 0
jne 0x40a50e
cmp dword [0x450114], 0
jle 0x40a50e
mov dword [ebp - 8], 1
xor eax, eax
mov dword [0x67e070], eax
push str.XLS_RTF_start_IDD_FRTF_r_n
call fcn.0040391c
pop ecx
push dword [0x44f94c]
call fcn.0040d9f8
pop ecx
mov dword [ebp - 0x1c], eax
push str.XLS_RTF_after_TranRtfFile_r_n
call fcn.0040391c
pop ecx
cmp dword [0x67e070], 0
je 0x40a4ac
cmp byte [0x450c9c], 0
jne 0x40a4ac
push str.XLS_RTF_ValTestSaveFile_r_n
call fcn.0040391c
pop ecx
push dword [ebp + 8]
call fcn.0041714c
pop ecx
push dword [ebp + 8]
call fcn.00407ec4
pop ecx
cmp dword [ebp - 0x1c], 0
je 0x40a4c4
push str.XLS_RTF_EditFile_r_n
call fcn.0040391c
pop ecx
call fcn.0041a6d8
jmp 0x40a4da
push 0
push 0x4ed
push 0
push 0x467555
call fcn.004209e0
add esp, 0x10
push str.XLS_RTF_PostMessage_IDM_EXIT_r_n
call fcn.0040391c
pop ecx
cmp byte [0x450c9c], 0
je 0x40ac7e
push 0
push 0x3e8
push 0x111
push dword [0x44f8dc]
call sub.USER32.DLL_PostMessageA
jmp 0x40ac7e
mov dx, word [ebp + 0x10]
and dx, 0xffff
cmp dx, 0x4b5
jne 0x40a59b
mov dword [ebp - 8], 1
push 0x467555
push 0x679f44
call fcn.004415c8
add esp, 8
push 0x44ffac
push str.MS_WORD_Messprotokoll_.rtf
push 0x679f44
push dword [0x44f94c]
call fcn.004115d8
add esp, 0x10
cmp byte [0x679f44], 0
jne 0x40a578
push 0
push 0x4ed
push 0
push 0x467555
call fcn.004209e0
add esp, 0x10
jmp 0x40ac7e
push 0
push 0x4ed
push 0x679f44
push 0x467555
call fcn.004209e0
add esp, 0x10
call fcn.0041a6d8
jmp 0x40ac7e
mov cx, word [ebp + 0x10]
and cx, 0xffff
cmp cx, 0x2775
jne 0x40a5b9
push dword [ebp + 8]
call fcn.0040cce8
pop ecx
jmp 0x40ac7e
mov ax, word [ebp + 0x10]
and ax, 0xffff
cmp ax, 0x2776
jne 0x40a5d5
push dword [ebp + 8]
call fcn.0040cd08
pop ecx
jmp 0x40ac7e
mov dx, word [ebp + 0x10]
and dx, 0xffff
cmp dx, 0x2777
jne 0x40a5f3
push dword [ebp + 8]
call fcn.0040cd48
pop ecx
jmp 0x40ac7e
mov cx, word [ebp + 0x10]
and cx, 0xffff
cmp cx, 0x3eb
jne 0x40a60d
call fcn.00417bc8
jmp 0x40ac7e
mov ax, word [ebp + 0x10]
and ax, 0xffff
cmp ax, 0x2710
jne 0x40a789
cmp dword [0x46a124], 0
je 0x40a789
cmp dword [0x450db0], 0
jne 0x40ac7e
push dword [0x44f8dc]
call sub.USER32.DLL_GetMenu
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
je 0x40a65c
push 0x400
push 0
push dword [ebp - 0x70]
call sub.USER32.DLL_RemoveMenu
push 0
push sym.htpwrdoc.exe__WizardProcDlg_qqsp6HWND__uiuil
push dword [0x44f8dc]
push 0x2710
push dword [0x44f8e0]
call sub.USER32.DLL_CreateDialogParamA
mov dword [0x44f950], eax
push 5
push 0
push 0
push 0
push 0
push 0
push dword [0x44f950]
call sub.USER32.DLL_SetWindowPos
lea edx, [ebp - 0x51c]
push edx
push dword [0x44f950]
call sub.USER32.DLL_GetWindowRect
push 0xfffffffffffffff0
push dword [0x44f8dc]
call sub.USER32.DLL_GetWindowLongA
mov dword [ebp - 0x74], eax
push 0
push dword [ebp - 0x74]
lea ecx, [ebp - 0x51c]
push ecx
call sub.USER32.DLL_AdjustWindowRect
push 0
call sub.USER32.DLL_GetSystemMetrics
mov dword [ebp - 0x3c], eax
push 1
call sub.USER32.DLL_GetSystemMetrics
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x514]
sub eax, dword [ebp - 0x51c]
mov dword [ebp - 0x44], eax
mov edx, dword [ebp - 0x510]
sub edx, dword [ebp - 0x518]
mov dword [ebp - 0x48], edx
mov ecx, dword [ebp - 0x3c]
sub ecx, dword [ebp - 0x44]
sar ecx, 1
jns 0x40a707
adc ecx, 0
mov dword [ebp - 0x4c], ecx
cmp dword [ebp - 0x4c], 0
jge 0x40a715
xor eax, eax
mov dword [ebp - 0x4c], eax
mov edx, dword [ebp - 0x40]
sub edx, dword [ebp - 0x48]
sar edx, 1
jns 0x40a722
adc edx, 0
mov dword [ebp - 0x50], edx
cmp dword [ebp - 0x50], 0
jge 0x40a730
xor ecx, ecx
mov dword [ebp - 0x50], ecx
push 1
push dword [ebp - 0x48]
push dword [ebp - 0x44]
push dword [ebp - 0x50]
push dword [ebp - 0x4c]
push dword [0x44f8dc]
call sub.USER32.DLL_MoveWindow
push 5
push dword [0x44f950]
call sub.USER32.DLL_ShowWindow
push dword [0x44f950]
call sub.USER32.DLL_UpdateWindow
push 5
push dword [0x44f8dc]
call sub.USER32.DLL_ShowWindow
push dword [0x44f8dc]
call sub.USER32.DLL_UpdateWindow
push dword [0x44f950]
call sub.USER32.DLL_SetFocus
jmp 0x40ac7e
mov ax, word [ebp + 0x10]
and ax, 0xffff
cmp ax, 0x4e0
jne 0x40a82a
cmp byte [0x450c9c], 0
je 0x40a82a
cmp dword [0x44f9c8], 0
jne 0x40a82a
cmp dword [0x457540], 0
jne 0x40a82a
mov dword [ebp - 8], 1
cmp dword [0x450114], 0
jg 0x40a805
push 0x45671e
push 0x450c9c
push 0x4566f3
push 0x30
call sub.USER32.DLL_GetFocus
push eax
call fcn.0041124c
add esp, 0x14
push 0
push 0x3e8
push 0x111
push dword [0x44f8dc]
call sub.USER32.DLL_PostMessageA
jmp 0x40ac7e
push dword [ebp + 8]
call fcn.004293dc
pop ecx
push 0
push 0x3e8
push 0x111
push dword [0x44f8dc]
call sub.USER32.DLL_PostMessageA
jmp 0x40ac7e
mov dx, word [ebp + 0x10]
and dx, 0xffff
cmp dx, 0x4e9
jne 0x40aa0b
cmp byte [0x450c9c], 0
je 0x40aa0b
cmp dword [0x44f9c8], 0
jne 0x40aa0b
cmp dword [0x457540], 0
jne 0x40aa0b
push 0x456738
push 0x450c9c
call fcn.0044362c
add esp, 8
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x40a8b6
push 0x450c9c
push 0x45673b
push 0x30
call sub.USER32.DLL_GetFocus
push eax
call fcn.0041124c
add esp, 0x10
push 0
push 0x3e8
push 0x111
push dword [0x44f8dc]
call sub.USER32.DLL_PostMessageA
jmp 0x40ac7e
push 2
push 0
push dword [ebp - 0x14]
call fcn.00443918
add esp, 0xc
push dword [ebp - 0x14]
call fcn.0044397c
pop ecx
mov dword [ebp - 0x34], eax
push 0
push 0
push dword [ebp - 0x14]
call fcn.00443918
add esp, 0xc
cmp dword [ebp - 0x34], 2
jl 0x40a8ef
cmp dword [ebp - 0x34], 0x989680
jle 0x40a930
push 0xffffffffffffffff
push 0x450c9c
push 0x456766
push 0x30
call sub.USER32.DLL_GetFocus
push eax
call fcn.0041124c
add esp, 0x14
push dword [ebp - 0x14]
call fcn.00442e70
pop ecx
push 0
push 0x3e8
push 0x111
push dword [0x44f8dc]
call sub.USER32.DLL_PostMessageA
jmp 0x40ac7e
mov ecx, dword [ebp - 0x34]
inc ecx
push ecx
call fcn.0044065c
pop ecx
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x40a960
push 0x450c9c
push str.Die_Datei__s_kann_nicht_gelesen_werden.
push 0x30
call sub.USER32.DLL_GetFocus
push eax
call fcn.0041124c
add esp, 0x10
jmp 0x40a90b
push dword [ebp - 0x14]
push dword [ebp - 0x34]
push 1
push dword [ebp - 0xc]
call fcn.00443888
add esp, 0x10
mov dword [ebp - 0x1c], eax
push dword [ebp - 0x14]
call fcn.00442e70
pop ecx
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x34]
je 0x40a9c6
push 0x450c9c
push str.Die_Datei__s_kann_nicht_gelesen_werden.
push 0x30
call sub.USER32.DLL_GetFocus
push eax
call fcn.0041124c
add esp, 0x10
push dword [ebp - 0xc]
call fcn.0044066c
pop ecx
push 0
push 0x3e8
push 0x111
push dword [0x44f8dc]
call sub.USER32.DLL_PostMessageA
jmp 0x40ac7e
mov edx, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x1c]
mov byte [edx + ecx], 0
push 0x450c9c
push dword [ebp - 0xc]
call sub.USER32.DLL_GetFocus
push eax
call fcn.0040aeb8
add esp, 0xc
push dword [ebp - 0xc]
call fcn.0044066c
pop ecx
push 0
push 0x3e8
push 0x111
push dword [0x44f8dc]
call sub.USER32.DLL_PostMessageA
jmp 0x40ac7e
mov ax, word [ebp + 0x10]
and ax, 0xffff
cmp ax, 0x4e5
jne 0x40abe7
cmp byte [0x450c9c], 0
je 0x40abe7
cmp dword [0x44f9c8], 0
jne 0x40abe7
cmp dword [0x457540], 0
jne 0x40abe7
push 0x45678a
push 0x450c9c
call fcn.0044362c
add esp, 8
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x40aa95
push 0x450c9c
push 0x45678d
push 0x30
call sub.USER32.DLL_GetFocus
push eax
call fcn.0041124c
add esp, 0x10
push 0
push 0x3e8
push 0x111
push dword [0x44f8dc]
call sub.USER32.DLL_PostMessageA
jmp 0x40ac7e
push 2
push 0
push dword [ebp - 0x14]
call fcn.00443918
add esp, 0xc
push dword [ebp - 0x14]
call fcn.0044397c
pop ecx
mov dword [ebp - 0x34], eax
push 0
push 0
push dword [ebp - 0x14]
call fcn.00443918
add esp, 0xc
cmp dword [ebp - 0x34], 2
jl 0x40aace
cmp dword [ebp - 0x34], 0x989680
jle 0x40ab0f
push 0xffffffffffffffff
push 0x450c9c
push 0x4567b8
push 0x30
call sub.USER32.DLL_GetFocus
push eax
call fcn.0041124c
add esp, 0x14
push dword [ebp - 0x14]
call fcn.00442e70
pop ecx
push 0
push 0x3e8
push 0x111
push dword [0x44f8dc]
call sub.USER32.DLL_PostMessageA
jmp 0x40ac7e
mov edx, dword [ebp - 0x34]
inc edx
push edx
call fcn.0044065c
pop ecx
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x40ab3f
push 0x450c9c
push str.Die_Datei__s_kann_nicht_gelesen_werden.
push 0x30
call sub.USER32.DLL_GetFocus
push eax
call fcn.0041124c
add esp, 0x10
jmp 0x40aaea
push dword [ebp - 0x14]
push dword [ebp - 0x34]
push 1
push dword [ebp - 0xc]
call fcn.00443888
add esp, 0x10
mov dword [ebp - 0x1c], eax
push dword [ebp - 0x14]
call fcn.00442e70
pop ecx
mov ecx, dword [ebp - 0x1c]
cmp ecx, dword [ebp - 0x34]
je 0x40aba5
push 0x450c9c
push str.Die_Datei__s_kann_nicht_gelesen_werden.
push 0x30
call sub.USER32.DLL_GetFocus
push eax
call fcn.0041124c
add esp, 0x10
push dword [ebp - 0xc]
call fcn.0044066c
pop ecx
push 0
push 0x3e8
push 0x111
push dword [0x44f8dc]
call sub.USER32.DLL_PostMessageA
jmp 0x40ac7e
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 0x1c]
mov byte [eax + edx], 0
push 0x450c9c
push dword [ebp - 0xc]
push dword [ebp + 8]
call fcn.0040ac88
add esp, 0xc
push dword [ebp - 0xc]
call fcn.0044066c
pop ecx
push 0
push 0x3e8
push 0x111
push dword [0x44f8dc]
call sub.USER32.DLL_PostMessageA
jmp 0x40ac7e
mov cx, word [ebp + 0x10]
and cx, 0xffff
cmp cx, 0x4e2
jne 0x40ac7e
cmp byte [0x450c9c], 0
je 0x40ac7e
cmp dword [0x44f9c8], 0
jne 0x40ac7e
cmp dword [0x457540], 0
jne 0x40ac7e
mov dword [ebp - 8], 1
cmp dword [0x450114], 0
jg 0x40ac5e
push 0x456807
push 0x450c9c
push 0x4567dc
push 0x30
call sub.USER32.DLL_GetFocus
push eax
call fcn.0041124c
add esp, 0x14
push 0
push 0x3e8
push 0x111
push dword [0x44f8dc]
call sub.USER32.DLL_PostMessageA
jmp 0x40ac7e
push dword [ebp + 8]
call fcn.0040afa4
pop ecx
push 0
push 0x3e8
push 0x111
push dword [0x44f8dc]
call sub.USER32.DLL_PostMessageA
mov eax, dword [ebp - 8]
mov esp, ebp
pop ebp
ret 0x10