Function at 0x446fe8
Capabilities:
Download url
Log keystrokes via polling
Receive data
Set registry value

Disassembly:
mov dword [0x541730], 0
mov ebx, dword [0x540fe0]
add ebx, 0xfffffffe
push ebx
push 2
call fcn.00482713
push 0xa2
call fcn.004bfe49
mov dword [0x541514], eax
push 0xa2
call fcn.004bfeb8
mov dword [0x541518], eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push 0x99
call fcn.004b4516
call fcn.0048a262
add dword [esp], edx
call fcn.004d2ca0
call fcn.0048a280
mov dword [0x54113c], eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push 0xa9
call fcn.004b4516
call fcn.0048a262
add dword [esp], edx
call fcn.004d2ca0
call fcn.0048a280
mov dword [0x541554], eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov eax, 0x510afe
push eax
mov eax, 0x51b9ca
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push 0x88
call fcn.004b4516
mov edx, str..vok
push edx
call fcn.004d58b0
call fcn.0048a262
add dword [esp], edx
call fcn.004d3620
push 0x541130
call fcn.004d57f0
push 5
call fcn.004b2591
mov dword [0x541614], eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push dword [0x541614]
push 5
call fcn.004b47af
push 0x541808
call fcn.004d57f0
push dword [0x54109c]
push 2
push 0xac
call fcn.004b12c4
push dword [0x54109c]
push 2
push 0xad
call fcn.004b12c4
push dword [0x541484]
mov edx, 0x51019a
pop ecx
call fcn.0048a290
je 0x447ab0
mov ebx, dword [0x541500]
and ebx, ebx
jne 0x447231
push dword [0x5410a4]
push edx
call fcn.004d57b0
pop edx
push eax
mov edx, 0x510932
push edx
call fcn.004d58b0
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov eax, dword [0x54109c]
call fcn.0048a170
cdq
push edx
push eax
call fcn.004d2ec0
pop eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov eax, dword [0x54109c]
call fcn.0048a180
cdq
push edx
push eax
call fcn.004d2ec0
pop eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov eax, dword [0x54109c]
call fcn.0048a190
cdq
push edx
push eax
call fcn.004d2ec0
pop eax
call fcn.0048a200
mov edx, eax
pop ecx
call fcn.0048a210
je 0x44721d
push dword [0x541148]
mov edx, dword [0x5410b0]
pop ecx
call fcn.0048a210
je 0x44721d
jmp 0x447224
mov eax, 1
jmp 0x447226
xor eax, eax
and eax, eax
je 0x447231
mov eax, 1
jmp 0x447233
xor eax, eax
and eax, eax
je 0x44763c
mov edx, dword [0x5410a4]
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d58b0
push 0x540f60
call fcn.004d57f0
push edx
call fcn.004d57b0
pop edx
push eax
mov edx, 0x510932
push edx
call fcn.004d58b0
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov eax, dword [0x54109c]
call fcn.0048a170
cdq
push edx
push eax
call fcn.004d2ec0
pop eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov eax, dword [0x54109c]
call fcn.0048a180
cdq
push edx
push eax
call fcn.004d2ec0
pop eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov eax, dword [0x54109c]
call fcn.0048a190
cdq
push edx
push eax
call fcn.004d2ec0
pop eax
push 0x5410a4
call fcn.004d57f0
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push 1
mov eax, 0x51019a
push eax
mov eax, str.file:___
push eax
push dword [0x540e28]
call fcn.004d32c0
call fcn.0048a262
add dword [esp], edx
call fcn.004ad923
call fcn.004d5880
push 0x2d
call fcn.0048a262
add dword [esp + 4], edx
call fcn.004c1b20
call fcn.0048a280
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push 0x7d0
push 0x10002
push 0x2d
call fcn.004c1d50
push 0x540fd0
call fcn.004d57f0
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov edx, str.color:_000000__background_color:
push edx
call fcn.004d58b0
mov edx, dword [0x5410a4]
push edx
call fcn.004d58b0
mov edx, str.__scrollbar_track_color:
push edx
call fcn.004d58b0
mov edx, dword [0x5410a4]
push edx
call fcn.004d58b0
mov edx, str.__font_family:
push edx
call fcn.004d58b0
mov edx, dword [0x5410b0]
push edx
call fcn.004d58b0
call fcn.004d5880
push edx
call fcn.004d57b0
pop edx
push eax
mov edx, str.color:_000000__background_color:
push edx
call fcn.004d58b0
mov edx, dword [0x540f60]
push edx
call fcn.004d58b0
mov edx, str.__scrollbar_track_color:
push edx
call fcn.004d58b0
mov edx, dword [0x540f60]
push edx
call fcn.004d58b0
mov edx, str.__font_family:
push edx
call fcn.004d58b0
mov edx, dword [0x541148]
push edx
call fcn.004d58b0
call fcn.004d5880
push dword [0x540fd0]
call fcn.0048a262
add dword [esp + 4], edx
call fcn.0048a262
add dword [esp + 8], edx
call fcn.004d3620
push 0x540fd0
call fcn.004d57f0
push 0
push 0
push 0x2d
call fcn.004c2440
push 2
push dword [0x540fd0]
push 0x2d
call fcn.004c2350
push 0x2d
call fcn.004c1770
push 4
push 0xaf
call fcn.004af861
push edx
call fcn.004d57b0
pop edx
push eax
mov edx, dword [0x541400]
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d58b0
mov edx, str.Deutsch.htm
push edx
call fcn.004d58b0
call fcn.004d5880
push 0x2d
call fcn.0048a262
add dword [esp + 4], edx
call fcn.004c1b20
call fcn.0048a280
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push 0x7d0
push 0x10002
push 0x2d
call fcn.004c1d50
push 0x540fd0
call fcn.004d57f0
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov edx, str.color:_000000__background_color:
push edx
call fcn.004d58b0
mov edx, dword [0x5410a4]
push edx
call fcn.004d58b0
mov edx, str.__scrollbar_track_color:
push edx
call fcn.004d58b0
mov edx, dword [0x5410a4]
push edx
call fcn.004d58b0
mov edx, str.__font_family:
push edx
call fcn.004d58b0
mov edx, dword [0x5410b0]
push edx
call fcn.004d58b0
call fcn.004d5880
push edx
call fcn.004d57b0
pop edx
push eax
mov edx, str.color:_000000__background_color:
push edx
call fcn.004d58b0
mov edx, dword [0x540f60]
push edx
call fcn.004d58b0
mov edx, str.__scrollbar_track_color:
push edx
call fcn.004d58b0
mov edx, dword [0x540f60]
push edx
call fcn.004d58b0
mov edx, str.__font_family:
push edx
call fcn.004d58b0
mov edx, dword [0x541148]
push edx
call fcn.004d58b0
call fcn.004d5880
push dword [0x540fd0]
call fcn.0048a262
add dword [esp + 4], edx
call fcn.0048a262
add dword [esp + 8], edx
call fcn.004d3620
push 0x540fd0
call fcn.004d57f0
push 0
push 0
push 0x2d
call fcn.004c2440
push 2
push dword [0x540fd0]
push 0x2d
call fcn.004c2350
push 0x2d
call fcn.004c1770
push 4
push 0xae
call fcn.004af861
push 5
call fcn.004bf6a1
and eax, eax
je 0x447637
jmp 0x447627
jmp 0x447ab0
mov ebx, dword [0x541500]
cmp ebx, 1
jne 0x447706
push dword [0x541414]
push edx
call fcn.004d57b0
pop edx
push eax
mov edx, 0x510932
push edx
call fcn.004d58b0
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov eax, dword [0x54169c]
call fcn.0048a170
cdq
push edx
push eax
call fcn.004d2ec0
pop eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov eax, dword [0x54169c]
call fcn.0048a180
cdq
push edx
push eax
call fcn.004d2ec0
pop eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov eax, dword [0x54169c]
call fcn.0048a190
cdq
push edx
push eax
call fcn.004d2ec0
pop eax
call fcn.0048a200
mov edx, eax
pop ecx
call fcn.0048a210
je 0x4476f2
push dword [0x541148]
mov edx, dword [0x5410b0]
pop ecx
call fcn.0048a210
je 0x4476f2
jmp 0x4476f9
mov eax, 1
jmp 0x4476fb
xor eax, eax
and eax, eax
je 0x447706
mov eax, 1
jmp 0x447708
xor eax, eax
and eax, eax
je 0x447ab0
mov edx, dword [0x541414]
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d58b0
push 0x541460
call fcn.004d57f0
push edx
call fcn.004d57b0
pop edx
push eax
mov edx, 0x510932
push edx
call fcn.004d58b0
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov eax, dword [0x54169c]
call fcn.0048a170
cdq
push edx
push eax
call fcn.004d2ec0
pop eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov eax, dword [0x54169c]
call fcn.0048a180
cdq
push edx
push eax
call fcn.004d2ec0
pop eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov eax, dword [0x54169c]
call fcn.0048a190
cdq
push edx
push eax
call fcn.004d2ec0
pop eax
push 0x541414
call fcn.004d57f0
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push 1
mov eax, 0x51019a
push eax
mov eax, str.file:___
push eax
push dword [0x540e28]
call fcn.004d32c0
call fcn.0048a262
add dword [esp], edx
call fcn.004ad923
call fcn.004d5880
push 0x2d
call fcn.0048a262
add dword [esp + 4], edx
call fcn.004c1b20
call fcn.0048a280
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push 0x7d0
push 0x10002
push 0x2d
call fcn.004c1d50
push 0x540fd0
call fcn.004d57f0
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov edx, str.color:
push edx
call fcn.004d58b0
mov edx, dword [0x541414]
push edx
call fcn.004d58b0
mov edx, str.__background_color:_000000__scrollbar_track_color:_000000__font_family:
push edx
call fcn.004d58b0
mov edx, dword [0x5410b0]
push edx
call fcn.004d58b0
call fcn.004d5880
push edx
call fcn.004d57b0
pop edx
push eax
mov edx, str.color:
push edx
call fcn.004d58b0
mov edx, dword [0x541460]
push edx
call fcn.004d58b0
mov edx, str.__background_color:_000000__scrollbar_track_color:_000000__font_family:
push edx
call fcn.004d58b0
mov edx, dword [0x541148]
push edx
call fcn.004d58b0
call fcn.004d5880
push dword [0x540fd0]
call fcn.0048a262
add dword [esp + 4], edx
call fcn.0048a262
add dword [esp + 8], edx
call fcn.004d3620
push 0x540fd0
call fcn.004d57f0
push 0
push 0
push 0x2d
call fcn.004c2440
push 2
push dword [0x540fd0]
push 0x2d
call fcn.004c2350
push 0x2d
call fcn.004c1770
push 4
push 0xaf
call fcn.004af861
push edx
call fcn.004d57b0
pop edx
push eax
mov edx, dword [0x541400]
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d58b0
mov edx, str.Deutsch.htm
push edx
call fcn.004d58b0
call fcn.004d5880
push 0x2d
call fcn.0048a262
add dword [esp + 4], edx
call fcn.004c1b20
call fcn.0048a280
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push 0x7d0
push 0x10002
push 0x2d
call fcn.004c1d50
push 0x540fd0
call fcn.004d57f0
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov edx, str.color:
push edx
call fcn.004d58b0
mov edx, dword [0x541414]
push edx
call fcn.004d58b0
mov edx, str.__background_color:_000000__scrollbar_track_color:_000000__font_family:
push edx
call fcn.004d58b0
mov edx, dword [0x5410b0]
push edx
call fcn.004d58b0
call fcn.004d5880
push edx
call fcn.004d57b0
pop edx
push eax
mov edx, str.color:
push edx
call fcn.004d58b0
mov edx, dword [0x541460]
push edx
call fcn.004d58b0
mov edx, str.__background_color:_000000__scrollbar_track_color:_000000__font_family:
push edx
call fcn.004d58b0
mov edx, dword [0x541148]
push edx
call fcn.004d58b0
call fcn.004d5880
push dword [0x540fd0]
call fcn.0048a262
add dword [esp + 4], edx
call fcn.0048a262
add dword [esp + 8], edx
call fcn.004d3620
push 0x540fd0
call fcn.004d57f0
push 0
push 0
push 0x2d
call fcn.004c2440
push 2
push dword [0x540fd0]
push 0x2d
call fcn.004c2350
push 0x2d
call fcn.004c1770
push 4
push 0xae
call fcn.004af861
push 5
call fcn.004bf6a1
and eax, eax
je 0x447ab0
jmp 0x447aa0
push 0x541030
push 0x5411a8
push 0
push 0xf003f
push 0
push 0
push 0
mov eax, str.SoftwareLibello
push eax
push 0x80000001
call sub.ADVAPI32.DLL_RegCreateKeyExW
mov ebx, eax
and ebx, ebx
jne 0x448b97
push 0xa3
call fcn.004bfb87
mov ebx, eax
and ebx, ebx
jne 0x447e3a
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push 0xa3
call fcn.004bfe49
cdq
push edx
push eax
call fcn.004d2f40
call fcn.0048a262
add dword [esp], edx
call fcn.004d30a0
call fcn.0048a280
mov ebx, eax
add ebx, 2
push ebx
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push 0xa3
call fcn.004bfe49
cdq
push edx
push eax
call fcn.004d2f40
call fcn.004d5880
push 1
push 0
mov eax, 0x511b38
push eax
push dword [0x5411a8]
call fcn.0048a262
add dword [esp + 0x10], edx
call sub.ADVAPI32.DLL_RegSetValueExW
call fcn.0048a280
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push 0xa3
call fcn.004bfeb8
cdq
push edx
push eax
call fcn.004d2f40
call fcn.0048a262
add dword [esp], edx
call fcn.004d30a0
call fcn.0048a280
mov ebx, eax
add ebx, 2
push ebx
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push 0xa3
call fcn.004bfeb8
cdq
push edx
push eax
call fcn.004d2f40
call fcn.004d5880
push 1
push 0
mov eax, 0x511b9a
push eax
push dword [0x5411a8]
call fcn.0048a262
add dword [esp + 0x10], edx
call sub.ADVAPI32.DLL_RegSetValueExW
call fcn.0048a280
push 0x124
call fcn.004b2522
and eax, eax
je 0x447d1a
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov eax, dword [0x540fa4]
cdq
push edx
push eax
push 0x125
call fcn.004b2591
cdq
add dword [esp], eax
adc dword [esp + 4], edx
add dword [esp], 4
adc dword [esp + 4], 0
pop eax
pop edx
push edx
push eax
call fcn.004d2f40
call fcn.0048a262
add dword [esp], edx
call fcn.004d30a0
call fcn.0048a280
mov ebx, eax
add ebx, 2
push ebx
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov eax, dword [0x540fa4]
cdq
push edx
push eax
push 0x125
call fcn.004b2591
cdq
add dword [esp], eax
adc dword [esp + 4], edx
add dword [esp], 4
adc dword [esp + 4], 0
pop eax
pop edx
push edx
push eax
call fcn.004d2f40
call fcn.004d5880
push 1
push 0
mov eax, 0x512fc0
push eax
push dword [0x5411a8]
call fcn.0048a262
add dword [esp + 0x10], edx
call sub.ADVAPI32.DLL_RegSetValueExW
call fcn.0048a280
jmp 0x447daa
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov eax, dword [0x540fa4]
cdq
push edx
push eax
call fcn.004d2f40
call fcn.0048a262
add dword [esp], edx
call fcn.004d30a0
call fcn.0048a280
mov ebx, eax
add ebx, 2
push ebx
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov eax, dword [0x540fa4]
cdq
push edx
push eax
call fcn.004d2f40
call fcn.004d5880
push 1
push 0
mov eax, 0x512fc0
push eax
push dword [0x5411a8]
call fcn.0048a262
add dword [esp + 0x10], edx
call sub.ADVAPI32.DLL_RegSetValueExW
call fcn.0048a280
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov eax, dword [0x541058]
cdq
push edx
push eax
call fcn.004d2f40
call fcn.0048a262
add dword [esp], edx
call fcn.004d30a0
call fcn.0048a280
mov ebx, eax
add ebx, 2
push ebx
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov eax, dword [0x541058]
cdq
push edx
push eax
call fcn.004d2f40
call fcn.004d5880
push 1
push 0
mov eax, str.Hoehe
push eax
push dword [0x5411a8]
call fcn.0048a262
add dword [esp + 0x10], edx
call sub.ADVAPI32.DLL_RegSetValueExW
call fcn.0048a280
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov eax, dword [0x5416f0]
cdq
push edx
push eax
call fcn.004d2f40
call fcn.0048a262
add dword [esp], edx
call fcn.004d30a0
call fcn.0048a280
mov ebx, eax
add ebx, 2
push ebx
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov eax, dword [0x5416f0]
cdq
push edx
push eax
call fcn.004d2f40
call fcn.004d5880
push 1
push 0
mov eax, str.SuchX
push eax
push dword [0x5411a8]
call fcn.0048a262
add dword [esp + 0x10], edx
call sub.ADVAPI32.DLL_RegSetValueExW
call fcn.0048a280
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov eax, dword [0x5416f8]
cdq
push edx
push eax
call fcn.004d2f40
call fcn.0048a262
add dword [esp], edx
call fcn.004d30a0
call fcn.0048a280
mov ebx, eax
add ebx, 2
push ebx
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov eax, dword [0x5416f8]
cdq
push edx
push eax
call fcn.004d2f40
call fcn.004d5880
push 1
push 0
mov eax, str.SuchY
push eax
push dword [0x5411a8]
call fcn.0048a262
add dword [esp + 0x10], edx
call sub.ADVAPI32.DLL_RegSetValueExW
call fcn.0048a280
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov eax, dword [0x541514]
cdq
push edx
push eax
call fcn.004d2f40
call fcn.0048a262
add dword [esp], edx
call fcn.004d30a0
call fcn.0048a280
mov ebx, eax
add ebx, 2
push ebx
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov eax, dword [0x541514]
cdq
push edx
push eax
call fcn.004d2f40
call fcn.004d5880
push 1
push 0
mov eax, 0x513d3c
push eax
push dword [0x5411a8]
call fcn.0048a262
add dword [esp + 0x10], edx
call sub.ADVAPI32.DLL_RegSetValueExW
call fcn.0048a280
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov eax, dword [0x541518]
cdq
push edx
push eax
call fcn.004d2f40
call fcn.0048a262
add dword [esp], edx
call fcn.004d30a0
call fcn.0048a280
mov ebx, eax
add ebx, 2
push ebx
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov eax, dword [0x541518]
cdq
push edx
push eax
call fcn.004d2f40
call fcn.004d5880
push 1
push 0
mov eax, str.PrefY
push eax
push dword [0x5411a8]
call fcn.0048a262
add dword [esp + 0x10], edx
call sub.ADVAPI32.DLL_RegSetValueExW
call fcn.0048a280
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov eax, dword [0x5410b8]
cdq
push edx
push eax
call fcn.004d2f40
call fcn.0048a262
add dword [esp], edx
call fcn.004d30a0
call fcn.0048a280
mov ebx, eax
add ebx, 2
push ebx
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov eax, dword [0x5410b8]
cdq
push edx
push eax
call fcn.004d2f40
call fcn.004d5880
push 1
push 0
mov eax, 0x516d04
push eax
push dword [0x5411a8]
call fcn.0048a262
add dword [esp + 0x10], edx
call sub.ADVAPI32.DLL_RegSetValueExW
call fcn.0048a280
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov eax, dword [0x541794]
cdq
push edx
push eax
call fcn.004d2f40
call fcn.0048a262
add dword [esp], edx
call fcn.004d30a0
call fcn.0048a280
mov ebx, eax
add ebx, 2
push ebx
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov eax, dword [0x541794]
cdq
push edx
push eax
call fcn.004d2f40
call fcn.004d5880
push 1
push 0
mov eax, str.Schriftgradg
push eax
push dword [0x5411a8]
call fcn.0048a262
add dword [esp + 0x10], edx
call sub.ADVAPI32.DLL_RegSetValueExW
call fcn.0048a280
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov eax, dword [0x5417b0]
cdq
push edx
push eax
call fcn.004d2f40
call fcn.0048a262
add dword [esp], edx
call fcn.004d30a0
call fcn.0048a280
mov ebx, eax
add ebx, 2
push ebx
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov eax, dword [0x5417b0]
cdq
push edx
push eax
call fcn.004d2f40
call fcn.004d5880
push 1
push 0
mov eax, str.Schriftgrads
push eax
push dword [0x5411a8]
call fcn.0048a262
add dword [esp + 0x10], edx
call sub.ADVAPI32.DLL_RegSetValueExW
call fcn.0048a280
push dword [0x541098]
call fcn.004d30a0
mov ebx, eax
add ebx, 2
push ebx
push dword [0x541098]
push 1
push 0
mov eax, str.Schriftart
push eax
push dword [0x5411a8]
call sub.ADVAPI32.DLL_RegSetValueExW
push dword [0x5410b0]
call fcn.004d30a0
mov ebx, eax
add ebx, 2
push ebx
push dword [0x5410b0]
push 1
push 0
mov eax, str.SchriftartEpub
push eax
push dword [0x5411a8]
call sub.ADVAPI32.DLL_RegSetValueExW
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push 0xab
call fcn.004b2591
cdq
push edx
push eax
call fcn.004d2f40
call fcn.0048a262
add dword [esp], edx
call fcn.004d30a0
call fcn.0048a280
mov ebx, eax
add ebx, 2
push ebx
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push 0xab
call fcn.004b2591
cdq
push edx
push eax
call fcn.004d2f40
call fcn.004d5880
push 1
push 0
mov eax, str.Panel
push eax
push dword [0x5411a8]
call fcn.0048a262
add dword [esp + 0x10], edx
call sub.ADVAPI32.DLL_RegSetValueExW
call fcn.0048a280
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov eax, dword [0x5412f0]
cdq
push edx
push eax
call fcn.004d2f40
call fcn.0048a262
add dword [esp], edx
call fcn.004d30a0
call fcn.0048a280
mov ebx, eax
add ebx, 2
push ebx
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov eax, dword [0x5412f0]
cdq
push edx
push eax
call fcn.004d2f40
call fcn.004d5880
push 1
push 0
mov eax, str.Gross
push eax
push dword [0x5411a8]
call fcn.0048a262
add dword [esp + 0x10], edx
call sub.ADVAPI32.DLL_RegSetValueExW
call fcn.0048a280
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov eax, dword [0x5410e8]
cdq
push edx
push eax
call fcn.004d2f40
call fcn.0048a262
add dword [esp], edx
call fcn.004d30a0
call fcn.0048a280
mov ebx, eax
add ebx, 2
push ebx
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov eax, dword [0x5410e8]
cdq
push edx
push eax
call fcn.004d2f40
call fcn.004d5880
push 1
push 0
mov eax, str.Translit
push eax
push dword [0x5411a8]
call fcn.0048a262
add dword [esp + 0x10], edx
call sub.ADVAPI32.DLL_RegSetValueExW
call fcn.0048a280
push dword [0x541130]
call fcn.004d30a0
mov ebx, eax
add ebx, 2
push ebx
push dword [0x541130]
push 1
push 0
mov eax, str.Vokabeln
push eax
push dword [0x5411a8]
call sub.ADVAPI32.DLL_RegSetValueExW
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov eax, dword [0x54113c]
cdq
push edx
push eax
call fcn.004d2f40
call fcn.0048a262
add dword [esp], edx
call fcn.004d30a0
call fcn.0048a280
mov ebx, eax
add ebx, 2
push ebx
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov eax, dword [0x54113c]
cdq
push edx
push eax
call fcn.004d2f40
call fcn.004d5880
push 1
push 0
mov eax, str.Umbruch
push eax
push dword [0x5411a8]
call fcn.0048a262
add dword [esp + 0x10], edx
call sub.ADVAPI32.DLL_RegSetValueExW
call fcn.0048a280
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov eax, dword [0x541684]
cdq
push edx
push eax
call fcn.004d2f40
call fcn.0048a262
add dword [esp], edx
call fcn.004d30a0
call fcn.0048a280
mov ebx, eax
add ebx, 2
push ebx
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov eax, dword [0x541684]
cdq
push edx
push eax
call fcn.004d2f40
call fcn.004d5880
push 1
push 0
mov eax, 0x511d6c
push eax
push dword [0x5411a8]
call fcn.0048a262
add dword [esp + 0x10], edx
call sub.ADVAPI32.DLL_RegSetValueExW
call fcn.0048a280
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov eax, dword [0x540e6c]
cdq
push edx
push eax
call fcn.004d2f40
call fcn.0048a262
add dword [esp], edx
call fcn.004d30a0
call fcn.0048a280
mov ebx, eax
add ebx, 2
push ebx
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov eax, dword [0x540e6c]
cdq
push edx
push eax
call fcn.004d2f40
call fcn.004d5880
push 1
push 0
mov eax, str.Wordwrap
push eax
push dword [0x5411a8]
call fcn.0048a262
add dword [esp + 0x10], edx
call sub.ADVAPI32.DLL_RegSetValueExW
call fcn.0048a280
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov eax, dword [0x540e3c]
cdq
push edx
push eax
call fcn.004d2f40
call fcn.0048a262
add dword [esp], edx
call fcn.004d30a0
call fcn.0048a280
mov ebx, eax
add ebx, 2
push ebx
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov eax, dword [0x540e3c]
cdq
push edx
push eax
call fcn.004d2f40
call fcn.004d5880
push 1
push 0
mov eax, str.Instanzen
push eax
push dword [0x5411a8]
call fcn.0048a262
add dword [esp + 0x10], edx
call sub.ADVAPI32.DLL_RegSetValueExW
call fcn.0048a280
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push 0
push 1
call fcn.004d2f40
call fcn.0048a262
add dword [esp], edx
call fcn.004d30a0
call fcn.0048a280
mov ebx, eax
add ebx, 2
push ebx
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push 0
push 1
call fcn.004d2f40
call fcn.004d5880
push 1
push 0
mov eax, 0x512878
push eax
push dword [0x5411a8]
call fcn.0048a262
add dword [esp + 0x10], edx
call sub.ADVAPI32.DLL_RegSetValueExW
call fcn.0048a280
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push 0x6a
call fcn.004b2591
cdq
push edx
push eax
call fcn.004d2f40
call fcn.0048a262
add dword [esp], edx
call fcn.004d30a0
call fcn.0048a280
mov ebx, eax
add ebx, 2
push ebx
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push 0x6a
call fcn.004b2591
cdq
push edx
push eax
call fcn.004d2f40
call fcn.004d5880
push 1
push 0
mov eax, str.PopUp
push eax
push dword [0x5411a8]
call fcn.0048a262
add dword [esp + 0x10], edx
call sub.ADVAPI32.DLL_RegSetValueExW
call fcn.0048a280
push 2
mov eax, 0x51019a
push eax
push 1
push 0
mov eax, 0x5109b6
push eax
push dword [0x5411a8]
call sub.ADVAPI32.DLL_RegSetValueExW
push 2
mov eax, 0x51019a
push eax
push 1
push 0
mov eax, str.FileName
push eax
push dword [0x5411a8]
call sub.ADVAPI32.DLL_RegSetValueExW
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov eax, dword [0x541614]
cdq
push edx
push eax
call fcn.004d2f40
call fcn.0048a262
add dword [esp], edx
call fcn.004d30a0
call fcn.0048a280
mov ebx, eax
add ebx, 2
push ebx
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov eax, dword [0x541614]
cdq
push edx
push eax
call fcn.004d2f40
call fcn.004d5880
push 1
push 0
mov eax, str.Stimme
push eax
push dword [0x5411a8]
call fcn.0048a262
add dword [esp + 0x10], edx
call sub.ADVAPI32.DLL_RegSetValueExW
call fcn.0048a280
push dword [0x541808]
call fcn.004d30a0
mov ebx, eax
add ebx, 2
push ebx
push dword [0x541808]
push 1
push 0
mov eax, str.StimmenName
push eax
push dword [0x5411a8]
call sub.ADVAPI32.DLL_RegSetValueExW
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push 0xc5
call fcn.004b4516
call fcn.0048a262
add dword [esp], edx
call fcn.004d2ca0
call fcn.0048a280
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jl 0x44893e
jg 0x44893a
cmp ebx, 0x64
jb 0x44893e
xor eax, eax
jmp 0x448943
mov eax, 1
or eax, eax
je 0x44899f
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push 0xc5
call fcn.004b4516
call fcn.0048a262
add dword [esp], edx
call fcn.004d2ca0
call fcn.0048a280
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x44898f
jl 0x44898b
cmp ebx, 0xf
ja 0x44898f
xor eax, eax
jmp 0x448994
mov eax, 1
or eax, eax
je 0x44899f
mov eax, 1
jmp 0x4489a1
xor eax, eax
and eax, eax
je 0x448a6c
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push 0xc5
call fcn.004b4516
call fcn.0048a262
add dword [esp], edx
call fcn.004d30a0
call fcn.0048a280
mov ebx, eax
add ebx, 2
push ebx
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push 0xc5
call fcn.004b4516
call fcn.004d5880
push 1
push 0
mov eax, str.Icons
push eax
push dword [0x5411a8]
call fcn.0048a262
add dword [esp + 0x10], edx
call sub.ADVAPI32.DLL_RegSetValueExW
call fcn.0048a280
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push 0xc5
call fcn.004b4516
call fcn.0048a262
add dword [esp], edx
call fcn.004d2ca0
call fcn.0048a280
mov dword [0x54136c], eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov eax, dword [0x54109c]
cdq
push edx
push eax
call fcn.004d2f40
call fcn.0048a262
add dword [esp], edx
call fcn.004d30a0
call fcn.0048a280
mov ebx, eax
add ebx, 2
push ebx
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov eax, dword [0x54109c]
cdq
push edx
push eax
call fcn.004d2f40
call fcn.004d5880
push 1
push 0
mov eax, str.hintergrundFarbe
push eax
push dword [0x5411a8]
call fcn.0048a262
add dword [esp + 0x10], edx
call sub.ADVAPI32.DLL_RegSetValueExW
call fcn.0048a280
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov eax, dword [0x54169c]
cdq
push edx
push eax
call fcn.004d2f40
call fcn.0048a262
add dword [esp], edx
call fcn.004d30a0
call fcn.0048a280
mov ebx, eax
add ebx, 2
push ebx
push edx
call fcn.004d57b0
pop edx
push eax
push edx
call fcn.004d57b0
pop edx
push eax
mov eax, dword [0x54169c]
cdq
push edx
push eax
call fcn.004d2f40
call fcn.004d5880
push 1
push 0
mov eax, str.textFarbe
push eax
push dword [0x5411a8]
call fcn.0048a262
add dword [esp + 0x10], edx
call sub.ADVAPI32.DLL_RegSetValueExW
call fcn.0048a280
push dword [0x5411a8]
call sub.ADVAPI32.DLL_RegCloseKey
push 0xa2
call fcn.004bed94
push dword [0x541314]
push 0xa3
call fcn.004bf832
mov dword [0x541138], 0
push 0xab
call fcn.004b2591
mov ebx, eax
cmp ebx, 1
jne 0x448bed
push 0
push 0
push 0xce
push dword [0x5411cc]
call sub.USER32.DLL_SendMessageW
mov dword [0x541144], eax
jmp 0x448c0c
push 0
push 0
push 0xce
push dword [0x5411c4]
call sub.USER32.DLL_SendMessageW
mov dword [0x541144], eax
mov ebx, dword [0x541570]
cmp ebx, 1
jne 0x448c1c
call fcn.00439102
push 0xab
call fcn.004b2591
mov ebx, eax
cmp ebx, 1
jne 0x448c8e
push 0xad
call fcn.004b271e
push 1
push dword [0x541144]
push 1
push dword [0x541144]
push 0xad
call fcn.00488f31
push 0
push 6
push 0x115
push dword [0x5411cc]
call sub.USER32.DLL_SendMessageW
push dword [0x541144]
push 0
push 0xb6
push dword [0x5411cc]
call sub.USER32.DLL_SendMessageW
jmp 0x448cfc
push 0
push 0xab
call fcn.004af861
push 0xac
call fcn.004b271e
push 1
push dword [0x541144]
push 1
push dword [0x541144]
push 0xac
call fcn.00488f31
push 0
push 6
push 0x115
push dword [0x5411c4]
call sub.USER32.DLL_SendMessageW
push dword [0x541144]
push 0
push 0xb6
push dword [0x5411c4]
call sub.USER32.DLL_SendMessageW
mov ebx, dword [0x5414d0]
cmp ebx, 1
jne 0x448d2b
mov dword [0x5414e0], 1
mov dword [0x54110c], 0
push 0xae
call fcn.00471ef0
pop eax
jmp 0x40a689
call fcn.0040b2bf
ret