Function at 0x4049aa
Capabilities:
Terminate thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x49c
push ebx
push esi
push edi
lea edi, [ebp - 0x49c]
mov ecx, 0x127
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
mov al, byte [0x47b7a4]
mov byte [ebp - 0x104], al
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x103]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dword [ebp - 0x108], 0
mov dword [ebp - 0x10c], 0
mov cl, byte [0x47b7a4]
mov byte [ebp - 0x214], cl
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x213]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dl, byte [0x47b7a4]
mov byte [ebp - 0x318], dl
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x317]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov al, byte [0x47b7a4]
mov byte [ebp - 0x41c], al
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x41b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, dword [ebp + 0xc]
and ecx, 0xffff
and ecx, 0xffff
mov dword [ebp - 0x45c], ecx
cmp dword [ebp - 0x45c], 0x9c41
jg 0x404682
cmp dword [ebp - 0x45c], 0x9c41
je 0x405eee
mov edx, dword [ebp - 0x45c]
sub edx, 0x67
mov dword [ebp - 0x45c], edx
cmp dword [ebp - 0x45c], 0x19
ja case.0x40467b.3
mov eax, dword [ebp - 0x45c]
jmp dword [eax*4 + 0x405f4d]
jmp case.0x40467b.3
cmp dword [0x4843c8], 1
jne 0x40472c
mov esi, esp
push 0
push 0
push 0x18b
mov ecx, dword [0x484378]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
mov dword [ebp - 0x108], eax
mov edx, dword [ebp - 0x108]
sub edx, 1
mov dword [ebp - 0x424], edx
jmp 0x4046d9
mov eax, dword [ebp - 0x424]
sub eax, 1
mov dword [ebp - 0x424], eax
cmp dword [ebp - 0x424], 0xffffffff
jle 0x404708
mov esi, esp
push 0
mov ecx, dword [ebp - 0x424]
push ecx
push 0x182
mov edx, dword [0x484378]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
jmp 0x4046ca
mov esi, esp
push 0x47b7a4
mov eax, dword [0x484334]
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
cmp esi, esp
call fcn.0043b120
mov dword [0x4843c8], 0
call fcn.00401212
mov esi, esp
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0x47b904
push 0
call dword [sym.imp.USER32.dll_FindWindowA]
cmp esi, esp
call fcn.0043b120
mov dword [ebp - 0x420], eax
mov esi, esp
push 1
mov ecx, dword [ebp - 0x420]
push ecx
call dword [sym.imp.USER32.dll_EndDialog]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0
mov edx, dword [0x484170]
push edx
call dword [sym.imp.KERNEL32.dll_TerminateThread]
cmp esi, esp
call fcn.0043b120
jmp case.0x40467b.3
cmp dword [0x4843c8], 1
jne 0x404838
mov esi, esp
push 0
push 0
push 0x18b
mov eax, dword [0x484378]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
mov dword [ebp - 0x108], eax
mov ecx, dword [ebp - 0x108]
sub ecx, 1
mov dword [ebp - 0x428], ecx
jmp 0x4047e4
mov edx, dword [ebp - 0x428]
sub edx, 1
mov dword [ebp - 0x428], edx
cmp dword [ebp - 0x428], 0xffffffff
jle 0x404813
mov esi, esp
push 0
mov eax, dword [ebp - 0x428]
push eax
push 0x182
mov ecx, dword [0x484378]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
jmp 0x4047d5
mov esi, esp
push 0x47b7a4
mov edx, dword [0x484334]
push edx
call dword [sym.imp.USER32.dll_SetWindowTextA]
cmp esi, esp
call fcn.0043b120
mov dword [0x4843c8], 0
call fcn.0040105f
mov esi, esp
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0x47b904
push 0
call dword [sym.imp.USER32.dll_FindWindowA]
cmp esi, esp
call fcn.0043b120
mov dword [ebp - 0x420], eax
mov esi, esp
push 1
mov eax, dword [ebp - 0x420]
push eax
call dword [sym.imp.USER32.dll_EndDialog]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0
mov ecx, dword [0x484170]
push ecx
call dword [sym.imp.KERNEL32.dll_TerminateThread]
cmp esi, esp
call fcn.0043b120
jmp case.0x40467b.3
cmp dword [0x4843c8], 1
jne 0x404944
mov esi, esp
push 0
push 0
push 0x18b
mov edx, dword [0x484378]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
mov dword [ebp - 0x108], eax
mov eax, dword [ebp - 0x108]
sub eax, 1
mov dword [ebp - 0x42c], eax
jmp 0x4048f1
mov ecx, dword [ebp - 0x42c]
sub ecx, 1
mov dword [ebp - 0x42c], ecx
cmp dword [ebp - 0x42c], 0xffffffff
jle 0x40491f
mov esi, esp
push 0
mov edx, dword [ebp - 0x42c]
push edx
push 0x182
mov eax, dword [0x484378]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
jmp 0x4048e2
mov esi, esp
push 0x47b7a4
mov ecx, dword [0x484334]
push ecx
call dword [sym.imp.USER32.dll_SetWindowTextA]
cmp esi, esp
call fcn.0043b120
mov dword [0x4843c8], 0
call fcn.00401267
mov esi, esp
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0x47b904
push 0
call dword [sym.imp.USER32.dll_FindWindowA]
cmp esi, esp
call fcn.0043b120
mov dword [ebp - 0x420], eax
mov esi, esp
push 1
mov edx, dword [ebp - 0x420]
push edx
call dword [sym.imp.USER32.dll_EndDialog]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0
mov eax, dword [0x484170]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateThread]
cmp esi, esp
call fcn.0043b120
jmp case.0x40467b.3
cmp dword [0x4843c8], 1
jne 0x404a4f
mov esi, esp
push 0
push 0
push 0x18b
mov ecx, dword [0x484378]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
mov dword [ebp - 0x108], eax
mov edx, dword [ebp - 0x108]
sub edx, 1
mov dword [ebp - 0x430], edx
jmp 0x4049fc
mov eax, dword [ebp - 0x430]
sub eax, 1
mov dword [ebp - 0x430], eax
cmp dword [ebp - 0x430], 0xffffffff
jle 0x404a2b
mov esi, esp
push 0
mov ecx, dword [ebp - 0x430]
push ecx
push 0x182
mov edx, dword [0x484378]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
jmp 0x4049ed
mov esi, esp
push 0x47b7a4
mov eax, dword [0x484334]
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
cmp esi, esp
call fcn.0043b120
mov dword [0x4843c8], 0
call fcn.00401096
mov esi, esp
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0x47b904
push 0
call dword [sym.imp.USER32.dll_FindWindowA]
cmp esi, esp
call fcn.0043b120
mov dword [ebp - 0x420], eax
mov esi, esp
push 1
mov ecx, dword [ebp - 0x420]
push ecx
call dword [sym.imp.USER32.dll_EndDialog]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0
mov edx, dword [0x484170]
push edx
call dword [sym.imp.KERNEL32.dll_TerminateThread]
cmp esi, esp
call fcn.0043b120
jmp case.0x40467b.3
cmp dword [0x4843c8], 1
jne 0x404b5b
mov esi, esp
push 0
push 0
push 0x18b
mov eax, dword [0x484378]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
mov dword [ebp - 0x108], eax
mov ecx, dword [ebp - 0x108]
sub ecx, 1
mov dword [ebp - 0x434], ecx
jmp 0x404b07
mov edx, dword [ebp - 0x434]
sub edx, 1
mov dword [ebp - 0x434], edx
cmp dword [ebp - 0x434], 0xffffffff
jle 0x404b36
mov esi, esp
push 0
mov eax, dword [ebp - 0x434]
push eax
push 0x182
mov ecx, dword [0x484378]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
jmp 0x404af8
mov esi, esp
push 0x47b7a4
mov edx, dword [0x484334]
push edx
call dword [sym.imp.USER32.dll_SetWindowTextA]
cmp esi, esp
call fcn.0043b120
mov dword [0x4843c8], 0
call fcn.0040119a
call fcn.0040126c
jmp case.0x40467b.3
cmp dword [0x4843c8], 1
jne 0x404c0f
mov esi, esp
push 0
push 0
push 0x18b
mov eax, dword [0x484378]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
mov dword [ebp - 0x108], eax
mov ecx, dword [ebp - 0x108]
sub ecx, 1
mov dword [ebp - 0x438], ecx
jmp 0x404bbb
mov edx, dword [ebp - 0x438]
sub edx, 1
mov dword [ebp - 0x438], edx
cmp dword [ebp - 0x438], 0xffffffff
jle 0x404bea
mov esi, esp
push 0
mov eax, dword [ebp - 0x438]
push eax
push 0x182
mov ecx, dword [0x484378]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
jmp 0x404bac
mov esi, esp
push 0x47b7a4
mov edx, dword [0x484334]
push edx
call dword [sym.imp.USER32.dll_SetWindowTextA]
cmp esi, esp
call fcn.0043b120
mov dword [0x4843c8], 0
call fcn.00401113
mov esi, esp
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0x47b904
push 0
call dword [sym.imp.USER32.dll_FindWindowA]
cmp esi, esp
call fcn.0043b120
mov dword [ebp - 0x420], eax
mov esi, esp
push 1
mov eax, dword [ebp - 0x420]
push eax
call dword [sym.imp.USER32.dll_EndDialog]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0
mov ecx, dword [0x484170]
push ecx
call dword [sym.imp.KERNEL32.dll_TerminateThread]
cmp esi, esp
call fcn.0043b120
jmp case.0x40467b.3
cmp dword [0x4843c8], 1
jne 0x404d1b
mov esi, esp
push 0
push 0
push 0x18b
mov edx, dword [0x484378]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
mov dword [ebp - 0x108], eax
mov eax, dword [ebp - 0x108]
sub eax, 1
mov dword [ebp - 0x43c], eax
jmp 0x404cc8
mov ecx, dword [ebp - 0x43c]
sub ecx, 1
mov dword [ebp - 0x43c], ecx
cmp dword [ebp - 0x43c], 0xffffffff
jle 0x404cf6
mov esi, esp
push 0
mov edx, dword [ebp - 0x43c]
push edx
push 0x182
mov eax, dword [0x484378]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
jmp 0x404cb9
mov esi, esp
push 0x47b7a4
mov ecx, dword [0x484334]
push ecx
call dword [sym.imp.USER32.dll_SetWindowTextA]
cmp esi, esp
call fcn.0043b120
mov dword [0x4843c8], 0
call fcn.0040119f
mov esi, esp
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0x47b904
push 0
call dword [sym.imp.USER32.dll_FindWindowA]
cmp esi, esp
call fcn.0043b120
mov dword [ebp - 0x420], eax
mov esi, esp
push 1
mov edx, dword [ebp - 0x420]
push edx
call dword [sym.imp.USER32.dll_EndDialog]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0
mov eax, dword [0x484170]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateThread]
cmp esi, esp
call fcn.0043b120
jmp case.0x40467b.3
cmp dword [0x4843c8], 1
jne 0x404e26
mov esi, esp
push 0
push 0
push 0x18b
mov ecx, dword [0x484378]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
mov dword [ebp - 0x108], eax
mov edx, dword [ebp - 0x108]
sub edx, 1
mov dword [ebp - 0x440], edx
jmp 0x404dd3
mov eax, dword [ebp - 0x440]
sub eax, 1
mov dword [ebp - 0x440], eax
cmp dword [ebp - 0x440], 0xffffffff
jle 0x404e02
mov esi, esp
push 0
mov ecx, dword [ebp - 0x440]
push ecx
push 0x182
mov edx, dword [0x484378]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
jmp 0x404dc4
mov esi, esp
push 0x47b7a4
mov eax, dword [0x484334]
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
cmp esi, esp
call fcn.0043b120
mov dword [0x4843c8], 0
call fcn.0040115e
jmp case.0x40467b.3
mov dword [0x4843f8], 1
mov esi, esp
push 0
push 0
push 0xf0
mov ecx, dword [0x4843f0]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
test eax, eax
jne 0x405115
mov esi, esp
push 0
push 0
push 0x18b
mov edx, dword [0x484378]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
mov dword [ebp - 0x108], eax
mov eax, dword [ebp - 0x108]
sub eax, 1
mov dword [ebp - 0x444], eax
jmp 0x404ea6
mov ecx, dword [ebp - 0x444]
sub ecx, 1
mov dword [ebp - 0x444], ecx
cmp dword [ebp - 0x444], 0xffffffff
jle 0x404ed4
mov esi, esp
push 0
mov edx, dword [ebp - 0x444]
push edx
push 0x182
mov eax, dword [0x484378]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
jmp 0x404e97
mov esi, esp
push 0x47b7a4
mov ecx, dword [0x484334]
push ecx
call dword [sym.imp.USER32.dll_SetWindowTextA]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0x47b904
push 0
call dword [sym.imp.USER32.dll_FindWindowA]
cmp esi, esp
call fcn.0043b120
mov dword [ebp - 0x420], eax
mov esi, esp
push 1
mov edx, dword [ebp - 0x420]
push edx
call dword [sym.imp.USER32.dll_EndDialog]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0
mov eax, dword [0x484170]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateThread]
cmp esi, esp
call fcn.0043b120
call fcn.00401212
mov esi, esp
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0x47b904
push 0
call dword [sym.imp.USER32.dll_FindWindowA]
cmp esi, esp
call fcn.0043b120
mov dword [ebp - 0x420], eax
mov esi, esp
push 1
mov ecx, dword [ebp - 0x420]
push ecx
call dword [sym.imp.USER32.dll_EndDialog]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0
mov edx, dword [0x484170]
push edx
call dword [sym.imp.KERNEL32.dll_TerminateThread]
cmp esi, esp
call fcn.0043b120
call fcn.0040105f
mov esi, esp
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0x47b904
push 0
call dword [sym.imp.USER32.dll_FindWindowA]
cmp esi, esp
call fcn.0043b120
mov dword [ebp - 0x420], eax
mov esi, esp
push 1
mov eax, dword [ebp - 0x420]
push eax
call dword [sym.imp.USER32.dll_EndDialog]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0
mov ecx, dword [0x484170]
push ecx
call dword [sym.imp.KERNEL32.dll_TerminateThread]
cmp esi, esp
call fcn.0043b120
call fcn.00401267
mov esi, esp
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0x47b904
push 0
call dword [sym.imp.USER32.dll_FindWindowA]
cmp esi, esp
call fcn.0043b120
mov dword [ebp - 0x420], eax
mov esi, esp
push 1
mov edx, dword [ebp - 0x420]
push edx
call dword [sym.imp.USER32.dll_EndDialog]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0
mov eax, dword [0x484170]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateThread]
cmp esi, esp
call fcn.0043b120
call fcn.00401096
mov esi, esp
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0x47b904
push 0
call dword [sym.imp.USER32.dll_FindWindowA]
cmp esi, esp
call fcn.0043b120
mov dword [ebp - 0x420], eax
mov esi, esp
push 1
mov ecx, dword [ebp - 0x420]
push ecx
call dword [sym.imp.USER32.dll_EndDialog]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0
mov edx, dword [0x484170]
push edx
call dword [sym.imp.KERNEL32.dll_TerminateThread]
cmp esi, esp
call fcn.0043b120
call fcn.0040119a
mov esi, esp
push 0
push 1
push 0xf1
mov eax, dword [0x4843f0]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0x47b8f8
mov ecx, dword [0x4843f0]
push ecx
call dword [sym.imp.USER32.dll_SetWindowTextA]
cmp esi, esp
call fcn.0043b120
jmp 0x4052d2
mov esi, esp
push 0
push 0
push 0xf1
mov edx, dword [0x4843f0]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0
push 0
push 0xf1
mov eax, dword [0x484398]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0
push 0
push 0xf1
mov ecx, dword [0x484184]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0
push 0
push 0xf1
mov edx, dword [0x484380]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0
push 0
push 0xf1
mov eax, dword [0x4842b8]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0
push 0
push 0xf1
mov ecx, dword [0x48438c]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0
push 0
push 0xf1
mov edx, dword [0x484190]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0
push 0
push 0xf1
mov eax, dword [0x484394]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0
push 0
push 0xf1
mov ecx, dword [0x484174]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0x47b158
mov edx, dword [0x4843f0]
push edx
call dword [sym.imp.USER32.dll_SetWindowTextA]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0
push 0
push 0x18b
mov eax, dword [0x484378]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
mov dword [ebp - 0x108], eax
mov ecx, dword [ebp - 0x108]
sub ecx, 1
mov dword [ebp - 0x448], ecx
jmp 0x405288
mov edx, dword [ebp - 0x448]
sub edx, 1
mov dword [ebp - 0x448], edx
cmp dword [ebp - 0x448], 0xffffffff
jle 0x4052b7
mov esi, esp
push 0
mov eax, dword [ebp - 0x448]
push eax
push 0x182
mov ecx, dword [0x484378]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
jmp 0x405279
mov esi, esp
push 0x47b7a4
mov edx, dword [0x484334]
push edx
call dword [sym.imp.USER32.dll_SetWindowTextA]
cmp esi, esp
call fcn.0043b120
jmp case.0x40467b.3
mov esi, esp
push 0
push 0
push 0x18b
mov eax, dword [0x484378]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0
je 0x405353
mov ecx, dword [ebp - 0x108]
sub ecx, 1
mov dword [ebp - 0x44c], ecx
jmp 0x405324
mov edx, dword [ebp - 0x44c]
sub edx, 1
mov dword [ebp - 0x44c], edx
cmp dword [ebp - 0x44c], 0xffffffff
jle 0x405353
mov esi, esp
push 0
mov eax, dword [ebp - 0x44c]
push eax
push 0x182
mov ecx, dword [0x484378]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
jmp 0x405315
lea edx, [ebp - 0x104]
push edx
push 0x4841a0
push 0x47b8e0
mov eax, dword [ebp + 8]
push eax
call fcn.0040120d
add esp, 0x10
test eax, eax
je 0x4053ac
mov esi, esp
lea ecx, [ebp - 0x104]
push ecx
mov edx, dword [0x484334]
push edx
call dword [sym.imp.USER32.dll_SetWindowTextA]
cmp esi, esp
call fcn.0043b120
mov esi, esp
lea eax, [ebp - 0x104]
push eax
push 0x4841a0
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
cmp esi, esp
call fcn.0043b120
jmp case.0x40467b.3
mov esi, esp
push 0
push 0
push 0x18b
mov ecx, dword [0x484378]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0
je 0x40542e
mov edx, dword [ebp - 0x108]
sub edx, 1
mov dword [ebp - 0x450], edx
jmp 0x4053ff
mov eax, dword [ebp - 0x450]
sub eax, 1
mov dword [ebp - 0x450], eax
cmp dword [ebp - 0x450], 0xffffffff
jle 0x40542e
mov esi, esp
push 0
mov ecx, dword [ebp - 0x450]
push ecx
push 0x182
mov edx, dword [0x484378]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
jmp 0x4053f0
mov esi, esp
push 0xfffffffffffffff0
mov eax, dword [0x48418c]
push eax
call dword [sym.imp.USER32.dll_GetWindowLongA]
cmp esi, esp
call fcn.0043b120
mov dword [ebp - 0x110], eax
mov ecx, dword [ebp - 0x110]
or ecx, 0x8000000
mov dword [ebp - 0x110], ecx
mov esi, esp
mov edx, dword [ebp - 0x110]
push edx
push 0xfffffffffffffff0
mov eax, dword [0x48418c]
push eax
call dword [sym.imp.USER32.dll_SetWindowLongA]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0
push 1
push 0xf
mov ecx, dword [0x48418c]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
call fcn.00401154
call fcn.0040112c
call fcn.0040126c
mov esi, esp
push 0xfffffffffffffff0
mov edx, dword [0x48418c]
push edx
call dword [sym.imp.USER32.dll_GetWindowLongA]
cmp esi, esp
call fcn.0043b120
mov dword [ebp - 0x110], eax
mov eax, dword [ebp - 0x110]
and eax, 0xf7ffffff
mov dword [ebp - 0x110], eax
mov esi, esp
mov ecx, dword [ebp - 0x110]
push ecx
push 0xfffffffffffffff0
mov edx, dword [0x48418c]
push edx
call dword [sym.imp.USER32.dll_SetWindowLongA]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0
push 1
push 0xf
mov eax, dword [0x48418c]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 1
mov ecx, dword [0x4843f0]
push ecx
call dword [sym.imp.USER32.dll_EnableWindow]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0
push 0
push 0xf1
mov edx, dword [0x4843f0]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0x47b158
mov eax, dword [0x4843f0]
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
cmp esi, esp
call fcn.0043b120
mov dword [0x4843c8], 1
jmp case.0x40467b.3
call fcn.004010aa
jmp case.0x40467b.3
call fcn.004011ef
jmp case.0x40467b.3
call fcn.004011f4
jmp case.0x40467b.3
call fcn.0040128a
jmp case.0x40467b.3
call fcn.00401168
jmp case.0x40467b.3
call fcn.0040123f
jmp case.0x40467b.3
call fcn.0040114f
jmp case.0x40467b.3
call fcn.0040109b
jmp case.0x40467b.3
mov esi, esp
push 0
push 0
push 0x18b
mov ecx, dword [0x484378]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0
je 0x40563c
mov edx, dword [ebp - 0x108]
sub edx, 1
mov dword [ebp - 0x454], edx
jmp 0x40560d
mov eax, dword [ebp - 0x454]
sub eax, 1
mov dword [ebp - 0x454], eax
cmp dword [ebp - 0x454], 0xffffffff
jle 0x40563c
mov esi, esp
push 0
mov ecx, dword [ebp - 0x454]
push ecx
push 0x182
mov edx, dword [0x484378]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
jmp 0x4055fe
mov esi, esp
push 0
push 0
push 0xf1
mov eax, dword [0x4843f0]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0
push 0
push 0xf1
mov ecx, dword [0x484398]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0
push 0
push 0xf1
mov edx, dword [0x484184]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0
push 0
push 0xf1
mov eax, dword [0x484380]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0
push 0
push 0xf1
mov ecx, dword [0x4842b8]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0
push 0
push 0xf1
mov edx, dword [0x48438c]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0
push 0
push 0xf1
mov eax, dword [0x484190]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0
push 0
push 0xf1
mov ecx, dword [0x484394]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0
push 0
push 0xf1
mov edx, dword [0x484174]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0
push 0
push 0x18b
mov eax, dword [0x484068]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0
je 0x4057cc
mov ecx, dword [ebp - 0x108]
sub ecx, 1
mov dword [ebp - 0x458], ecx
jmp 0x40579d
mov edx, dword [ebp - 0x458]
sub edx, 1
mov dword [ebp - 0x458], edx
cmp dword [ebp - 0x458], 0xffffffff
jle 0x4057cc
mov esi, esp
push 0
mov eax, dword [ebp - 0x458]
push eax
push 0x182
mov ecx, dword [0x484068]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
jmp 0x40578e
lea edx, [ebp - 0x104]
push edx
push 0x4841a0
push 0x47b8c0
mov eax, dword [ebp + 8]
push eax
call fcn.0040120d
add esp, 0x10
test eax, eax
je 0x405e0b
mov esi, esp
lea ecx, [ebp - 0x104]
push ecx
mov edx, dword [0x4843b8]
push edx
call dword [sym.imp.USER32.dll_SetWindowTextA]
cmp esi, esp
call fcn.0043b120
mov esi, esp
lea eax, [ebp - 0x104]
push eax
push 0x4841a0
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0x104
lea ecx, [ebp - 0x214]
push ecx
mov edx, dword [0x4843b8]
push edx
call dword [sym.imp.USER32.dll_GetWindowTextA]
cmp esi, esp
call fcn.0043b120
test eax, eax
jne 0x405854
jmp case.0x40467b.3
push 0
mov esi, esp
push str.Document_Backup
lea eax, [ebp - 0x214]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
cmp esi, esp
call fcn.0043b120
push eax
call fcn.0043d320
add esp, 8
test eax, eax
jne 0x405883
call fcn.004010aa
mov esi, esp
push 0x47b7a4
lea ecx, [ebp - 0x214]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0x104
lea edx, [ebp - 0x214]
push edx
mov eax, dword [0x4843b8]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextA]
cmp esi, esp
call fcn.0043b120
test eax, eax
jne 0x4058c8
jmp case.0x40467b.3
push 0
mov esi, esp
push str.Desktop_Backup
lea ecx, [ebp - 0x214]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
cmp esi, esp
call fcn.0043b120
push eax
call fcn.0043d320
add esp, 8
test eax, eax
jne 0x4058f7
call fcn.004011ef
mov esi, esp
push 0x47b7a4
lea edx, [ebp - 0x214]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0x104
lea eax, [ebp - 0x214]
push eax
mov ecx, dword [0x4843b8]
push ecx
call dword [sym.imp.USER32.dll_GetWindowTextA]
cmp esi, esp
call fcn.0043b120
test eax, eax
jne 0x40593d
jmp case.0x40467b.3
push 0
mov esi, esp
push str.Mail_Backup
lea edx, [ebp - 0x214]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
cmp esi, esp
call fcn.0043b120
push eax
call fcn.0043d320
add esp, 8
test eax, eax
jne 0x40596c
call fcn.004011f4
mov esi, esp
push 0x47b7a4
lea eax, [ebp - 0x214]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0x104
lea ecx, [ebp - 0x214]
push ecx
mov edx, dword [0x4843b8]
push edx
call dword [sym.imp.USER32.dll_GetWindowTextA]
cmp esi, esp
call fcn.0043b120
test eax, eax
jne 0x4059b2
jmp case.0x40467b.3
push 0
mov esi, esp
push str.Address_Backup
lea eax, [ebp - 0x214]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
cmp esi, esp
call fcn.0043b120
push eax
call fcn.0043d320
add esp, 8
test eax, eax
jne 0x4059e1
call fcn.0040128a
mov esi, esp
push 0x47b7a4
lea ecx, [ebp - 0x214]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0x104
lea edx, [ebp - 0x214]
push edx
mov eax, dword [0x4843b8]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextA]
cmp esi, esp
call fcn.0043b120
test eax, eax
jne 0x405a26
jmp case.0x40467b.3
push 0
mov esi, esp
push str.Npki_Backup1
lea ecx, [ebp - 0x214]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
cmp esi, esp
call fcn.0043b120
push eax
call fcn.0043d320
add esp, 8
test eax, eax
jne 0x405a55
call fcn.00401168
mov esi, esp
push 0x47b7a4
lea edx, [ebp - 0x214]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0x104
lea eax, [ebp - 0x214]
push eax
mov ecx, dword [0x4843b8]
push ecx
call dword [sym.imp.USER32.dll_GetWindowTextA]
cmp esi, esp
call fcn.0043b120
test eax, eax
jne 0x405a9b
jmp case.0x40467b.3
push 0
mov esi, esp
push str.Gpki_Backup1
lea edx, [ebp - 0x214]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
cmp esi, esp
call fcn.0043b120
push eax
call fcn.0043d320
add esp, 8
test eax, eax
jne 0x405aca
call fcn.00401168
mov esi, esp
push 0x47b7a4
lea eax, [ebp - 0x214]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0x104
lea ecx, [ebp - 0x214]
push ecx
mov edx, dword [0x4843b8]
push edx
call dword [sym.imp.USER32.dll_GetWindowTextA]
cmp esi, esp
call fcn.0043b120
test eax, eax
jne 0x405b10
jmp case.0x40467b.3
mov esi, esp
lea eax, [ebp - 0x214]
push eax
lea ecx, [ebp - 0x318]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
cmp esi, esp
call fcn.0043b120
mov esi, esp
lea edx, [ebp - 0x214]
push edx
lea eax, [ebp - 0x41c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
cmp esi, esp
call fcn.0043b120
push 0
mov esi, esp
push str.Favorites_Backup
lea ecx, [ebp - 0x214]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
cmp esi, esp
call fcn.0043b120
push eax
call fcn.0043d320
add esp, 8
test eax, eax
je 0x405bc8
push 0
mov esi, esp
push str.Edge_Favorites_Backup
lea edx, [ebp - 0x318]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
cmp esi, esp
call fcn.0043b120
push eax
call fcn.0043d320
add esp, 8
test eax, eax
je 0x405bc8
push 0
mov esi, esp
push str.Chrome_Favorites_Backup
lea eax, [ebp - 0x41c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
cmp esi, esp
call fcn.0043b120
push eax
call fcn.0043d320
add esp, 8
test eax, eax
jne 0x405bcd
call fcn.0040123f
mov esi, esp
push 0x47b7a4
lea ecx, [ebp - 0x214]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0x47b7a4
lea edx, [ebp - 0x318]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0x47b7a4
lea eax, [ebp - 0x41c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0x104
lea ecx, [ebp - 0x214]
push ecx
mov edx, dword [0x4843b8]
push edx
call dword [sym.imp.USER32.dll_GetWindowTextA]
cmp esi, esp
call fcn.0043b120
test eax, eax
jne 0x405c49
jmp case.0x40467b.3
push 0
mov esi, esp
push str.StickyNotes_Backup
lea eax, [ebp - 0x214]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
cmp esi, esp
call fcn.0043b120
push eax
call fcn.0043d320
add esp, 8
test eax, eax
jne 0x405c78
call fcn.0040114f
mov esi, esp
push 0x47b7a4
lea ecx, [ebp - 0x214]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0x104
lea edx, [ebp - 0x214]
push edx
mov eax, dword [0x4843b8]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextA]
cmp esi, esp
call fcn.0043b120
test eax, eax
jne 0x405cbd
jmp case.0x40467b.3
mov esi, esp
push 0x47b7e4
lea ecx, [ebp - 0x214]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
cmp esi, esp
call fcn.0043b120
lea edx, [ebp - 0x214]
push edx
call fcn.004011bd
add esp, 4
cmp eax, 3
je 0x405cf1
jmp case.0x40467b.3
mov esi, esp
push 0x47b7e4
lea eax, [ebp - 0x214]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0x484424
lea ecx, [ebp - 0x214]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push str._alldocument_backup
lea edx, [ebp - 0x214]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
cmp esi, esp
call fcn.0043b120
push 0
lea eax, [ebp - 0x214]
push eax
call fcn.0043d320
add esp, 8
test eax, eax
jne 0x405dd3
mov esi, esp
push 0
push 0
push 0xf0
mov ecx, dword [0x484338]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
test eax, eax
jne 0x405d9b
mov esi, esp
push 0
push 1
push 0xf1
mov edx, dword [0x484338]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
jmp 0x405dd1
mov esi, esp
push 0
push 1
push 0xf1
mov eax, dword [0x484338]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0
mov ecx, dword [0x484338]
push ecx
call dword [sym.imp.USER32.dll_EnableWindow]
cmp esi, esp
call fcn.0043b120
jmp 0x405df0
mov esi, esp
push 0x40
push 0x47b7c4
push 0x47b7a8
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0x47b7a4
lea edx, [ebp - 0x214]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
cmp esi, esp
call fcn.0043b120
jmp case.0x40467b.3
mov esi, esp
push 0xfffffffffffffff0
mov eax, dword [0x48418c]
push eax
call dword [sym.imp.USER32.dll_GetWindowLongA]
cmp esi, esp
call fcn.0043b120
mov dword [ebp - 0x110], eax
mov ecx, dword [ebp - 0x110]
or ecx, 0x8000000
mov dword [ebp - 0x110], ecx
mov esi, esp
mov edx, dword [ebp - 0x110]
push edx
push 0xfffffffffffffff0
mov eax, dword [0x48418c]
push eax
call dword [sym.imp.USER32.dll_SetWindowLongA]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0
push 1
push 0xf
mov ecx, dword [0x48418c]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
call fcn.00401014
call fcn.0040126c
mov esi, esp
push 0xfffffffffffffff0
mov edx, dword [0x48418c]
push edx
call dword [sym.imp.USER32.dll_GetWindowLongA]
cmp esi, esp
call fcn.0043b120
mov dword [ebp - 0x110], eax
mov eax, dword [ebp - 0x110]
and eax, 0xf7ffffff
mov dword [ebp - 0x110], eax
mov esi, esp
mov ecx, dword [ebp - 0x110]
push ecx
push 0xfffffffffffffff0
mov edx, dword [0x48418c]
push edx
call dword [sym.imp.USER32.dll_SetWindowLongA]
cmp esi, esp
call fcn.0043b120
mov esi, esp
push 0
push 1
push 0xf
mov eax, dword [0x48418c]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.0043b120
jmp case.0x40467b.3
mov esi, esp
push 0
push 0x4011ae
mov ecx, dword [0x48418c]
push ecx
push 0x8f
mov edx, dword [0x484178]
push edx
call dword [sym.imp.USER32.dll_DialogBoxParamA]
cmp esi, esp
call fcn.0043b120
jmp case.0x40467b.3
call fcn.004012ad
call fcn.004010e6
call fcn.00401046
mov esi, esp
push 0
call dword [sym.imp.USER32.dll_PostQuitMessage]
cmp esi, esp
call fcn.0043b120
pop edi
pop esi
pop ebx
add esp, 0x49c
cmp ebp, esp
call fcn.0043b120
mov esp, ebp
pop ebp
ret