Function at 0x458240
Capabilities:
Bypass mark of the web
Delete file
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4d4a33
mov eax, dword fs:[0]
push eax
sub esp, 0x520
mov eax, dword [0x517ba0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x498], edi
mov eax, dword [ebp + 0x10]
movzx edx, word [ebp + 0xc]
mov esi, dword [edi + 4]
mov ecx, edx
mov dword [ebp - 0x49c], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x4a8], eax
lea eax, [edi + 4]
mov dword [ebp - 0x4a0], eax
mov eax, edx
mov dword [ebp - 0x4ac], esi
mov dword [ebp - 0x4a4], eax
mov dword [ebp - 0x424], ecx
cmp ecx, 0x9c41
ja 0x45830a
je 0x4582e8
sub eax, 1
je case.0x458333.40003
sub eax, 0x12b
jne case.default.0x45a566
push eax
push 0x41cc90
push esi
push 0x4eac68
push dword [0x51cf38]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
jmp 0x45a84a
push dword [edi + 0x15c]
push 0x43a060
push esi
push 0x4eaa2c
push dword [0x51cf38]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
jmp 0x45a84a
cmp ecx, 0xd101
ja 0x45a558
je case.0x45a566.53506
sub eax, 0x9c43
cmp eax, 0xa4
ja case.default.0x45a566
movzx eax, byte [eax + 0x45a948]
jmp dword [eax*4 + 0x45a878]
push 0
push 0x9c53
push 0x111
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.default.0x45a566
cmp byte [0x51765c], 0
push 0
sete al
mov byte [0x51765c], al
movzx eax, al
push eax
push ecx
lea ecx, [edi + 0x40]
call fcn.00460570
movzx eax, byte [0x51765c]
push eax
push esi
call fcn.004694b0
add esp, 8
jmp case.default.0x45a566
cmp byte [0x51765f], 0
push 0
sete al
mov byte [0x51765f], al
movzx eax, al
push eax
push 0x9cc0
lea ecx, [edi + 0x40]
call fcn.00460570
mov ecx, 0x51c200
call fcn.0042de00
jmp case.default.0x45a566
cmp byte [0x517660], 0
push 0
sete al
mov byte [0x517660], al
movzx eax, al
push eax
push 0x9ce6
jmp 0x4583a0
cmp byte [0x517661], 0
push 0
sete al
mov byte [0x517661], al
movzx eax, al
push eax
push 0x9ce7
jmp 0x4583a0
push 1
push dword [edi + 0x15c]
call fcn.00454670
add esp, 8
jmp case.default.0x45a566
mov ecx, 0x51c200
call fcn.0042cd10
test al, al
je 0x458431
mov edi, dword [ebp - 0x4a0]
push 0x10
push 0x4e23b8
push 0x4ea970
push dword [edi]
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp case.default.0x45a566
push dword [edi + 0x15c]
call fcn.0041db70
add esp, 4
jmp case.default.0x45a566
mov ecx, dword [edi + 0x4198]
mov edx, 0x9cdd
mov eax, ecx
and ecx, 0xfffffffe
or eax, 1
cmp word [ebp - 0x4a4], dx
cmovne ecx, eax
mov dword [edi + 0x4198], ecx
and ecx, 1
mov byte [ebp - 0x491], 0
lea eax, [ecx*2 - 1]
lea ecx, [ebp - 0x491]
push ecx
push eax
push dword [edi + 0x15c]
call fcn.0041e000
add esp, 0xc
test al, al
jne 0x458511
cmp byte [ebp - 0x491], al
jne 0x458511
push 0x4ea9e4
call fcn.0049fbd0
push eax
push 0x4ea9e4
call fcn.0049fd60
add esp, 0xc
mov dword [ebp - 0x4ac], eax
push esi
mov dword [ebp - 4], 0
call dword [sym.imp.USER32.dll_SetForegroundWindow]
lea ecx, [ebp - 0x4ac]
call fcn.0049f770
mov edi, dword [ebp - 0x4a0]
push 0x30
push 0x4e23b8
push eax
push dword [edi]
call dword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, dword [ebp - 0x4ac]
mov dword [ebp - 4], 1
test ecx, ecx
je 0x458517
call fcn.0049fda0
push dword [edi]
call dword [sym.imp.USER32.dll_SetFocus]
push esi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
jmp case.default.0x45a566
mov edi, dword [ebp - 0x4a0]
push dword [edi]
call dword [sym.imp.USER32.dll_SetFocus]
push esi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
jmp case.default.0x45a566
cmp byte [0x51765d], 0
lea ecx, [edi + 0x40]
push 0
sete al
mov byte [0x51765d], al
movzx eax, al
push eax
push 0x9c53
call fcn.00460570
jmp 0x45a84a
push 0
push 0x492140
push esi
push 0x4eaa08
push dword [0x51cf38]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
jmp case.default.0x45a566
lea ecx, [edi + 0x15c]
call fcn.00457120
mov edi, eax
test edi, edi
js case.default.0x45a566
push 0x51c200
mov dword [ebp - 0x49c], 0x51c200
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push edi
lea eax, [ebp - 0x434]
mov dword [ebp - 4], 2
push eax
mov ecx, 0x51c200
call fcn.0041e2d0
mov dword [ebp - 0x4ac], 0
lea eax, [ebp - 0x4ac]
mov byte [ebp - 4], 4
push eax
push 0xffffffffffffffff
lea ecx, [ebp - 0x434]
call fcn.00425120
mov eax, dword [ebp - 0x42c]
movzx eax, word [eax + 8]
sub eax, 2
je 0x458627
sub eax, 1
je 0x458605
mov edi, dword [ebp - 0x4a0]
push 0x10
push 0x4e23b8
push 0x4eaa48
push dword [edi]
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x45864a
push ecx
mov eax, esp
mov dword [ebp - 0x498], eax
mov ecx, dword [ebp - 0x4ac]
mov dword [eax], ecx
test ecx, ecx
je 0x45861f
call fcn.0049fad0
push esi
call fcn.00452e60
jmp 0x458647
push ecx
mov eax, esp
mov dword [ebp - 0x498], eax
mov ecx, dword [ebp - 0x4ac]
mov dword [eax], ecx
test ecx, ecx
je 0x458641
call fcn.0049fad0
push esi
call fcn.00453050
add esp, 8
mov ecx, dword [ebp - 0x4ac]
mov byte [ebp - 4], 5
test ecx, ecx
je 0x45865d
call fcn.0049fda0
lea ecx, [ebp - 0x434]
call fcn.00423d30
jmp 0x45a833
lea ecx, [edi + 0x15c]
call fcn.00457120
mov edi, eax
test edi, edi
js case.default.0x45a566
push 0x51c200
mov dword [ebp - 0x49c], 0x51c200
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push edi
lea eax, [ebp - 0x434]
mov dword [ebp - 4], 6
push eax
mov ecx, 0x51c200
call fcn.0041e2d0
cmp dword [ebp - 0x42c], 0
mov byte [ebp - 4], 7
je 0x4586e9
push 0x104
lea eax, [ebp - 0x420]
push eax
push 0x9c75
lea ecx, [ebp - 0x434]
call fcn.004258d0
lea eax, [ebp - 0x420]
push eax
push esi
call fcn.00468b80
add esp, 8
lea ecx, [ebp - 0x434]
call fcn.00423d30
jmp 0x45a833
push 0
push 0
push 0x1042
push dword [edi + 0x15c]
call dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
js case.default.0x45a566
push dword [ebp - 0x424]
lea ecx, [edi + 0x38]
push eax
push esi
push ecx
call fcn.004420d0
add esp, 0x10
jmp case.default.0x45a566
xor esi, esi
mov eax, dword [esi + 0x4ea948]
cmp eax, ecx
jne 0x45876c
push 0
push eax
push 0x40a
push dword [edi + 0x160]
call dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
setne al
movzx eax, al
push eax
push dword [esi + 0x4ea94c]
call fcn.00487da0
mov ecx, dword [ebp - 0x424]
add esp, 8
add esi, 8
cmp esi, 0x28
jb 0x458731
jmp case.default.0x45a566
cmp byte [0x51765e], 0
lea ecx, [edi + 0x40]
push 0
sete al
mov byte [0x51765e], al
movzx eax, al
push eax
push 0x9c7f
call fcn.00460570
cmp byte [0x51765e], 0
mov ecx, 0x51c284
sete al
movzx eax, al
push eax
call fcn.00429690
push 0
mov ecx, 0x51c200
call fcn.0042d650
jmp case.default.0x45a566
mov eax, dword [0x51cb18]
test eax, eax
je 0x4587e7
push 5
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push dword [0x51cb18]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
jmp 0x45a84a
push 0x48
call fcn.004a4441
mov edi, eax
add esp, 4
mov dword [ebp - 0x4a8], edi
test edi, edi
je 0x458875
mov dword [edi + 4], 0
mov ecx, edi
mov dword [edi + 0x14], 0
mov dword [edi + 0x18], 0
mov dword [edi + 0x1c], 0
push 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x28], 0
mov byte [edi + 0x3c], 0
mov dword [edi + 0x2c], 0
mov dword [edi + 0x30], 0
mov dword [edi + 0x34], 0xffffffff
mov dword [edi + 0x38], 0xffffffff
push esi
mov dword [edi], vtable.CFilterDlg.0
mov dword [edi + 0x40], 0xb8
call fcn.004564a0
push 5
push dword [edi + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x45a84a
xor edi, edi
push edi
push esi
mov ecx, edi
call fcn.004564a0
push 5
push dword [edi + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x45a84a
push 0x51c284
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov esi, dword [0x51c2a0]
sub esi, dword [0x51c29c]
push 0x51c284
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp esi, 0x20
jae 0x4588d6
mov edi, dword [ebp - 0x4a0]
push 0x40
push 0x4e23b8
push 0x4eaaa0
push dword [edi]
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp case.default.0x45a566
mov esi, dword [ebp - 0x4ac]
push 0
push 0x497db0
push esi
push 0x4eaaec
push dword [0x51cf38]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
push dword [edi + 0x4174]
mov ecx, 0x51cf90
call fcn.00457010
jmp case.default.0x45a566
push 0
push 0x4718b0
push esi
push 0x4eab04
jmp 0x4588e9
mov eax, dword [0x51cb1c]
test eax, eax
je 0x45893c
push 5
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push dword [0x51cb1c]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
jmp case.default.0x45a566
push 0x44
call fcn.004a4441
mov edi, eax
add esp, 4
mov dword [ebp - 0x49c], edi
test edi, edi
je 0x4589af
mov dword [edi + 4], 0
mov dword [edi + 0x14], 0
mov dword [edi + 0x18], 0
mov dword [edi + 0x1c], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x28], 0
mov byte [edi + 0x3c], 0
mov dword [edi + 0x2c], 0
mov dword [edi + 0x30], 0
mov dword [edi + 0x34], 0xffffffff
mov dword [edi + 0x38], 0xffffffff
mov dword [edi], vtable.CHighlightDlg.0
mov byte [edi + 0x40], 0
jmp 0x4589b1
xor edi, edi
mov eax, dword [edi + 0x14]
test eax, eax
jne 0x4589dc
call fcn.004a5d0c
mov dword [edi + 0x14], eax
test eax, eax
jne 0x4589dc
push 0xe
call dword [sym.imp.KERNEL32.dll_SetLastError]
push 5
push dword [edi + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
jmp case.default.0x45a566
push 0
push 0
push eax
call fcn.004a5e0e
lea eax, [edi + 8]
test eax, eax
je 0x45a869
test edi, edi
je 0x45a869
mov dword [eax], edi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push 0x5171c4
mov dword [edi + 0xc], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x5171dc]
lea ecx, [edi + 8]
mov dword [ecx + 8], eax
push 0x5171c4
mov dword [0x5171dc], ecx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0
push 0x4422e0
push esi
push 0xbc
push dword [0x51d938]
call dword [sym.imp.USER32.dll_CreateDialogParamW]
push 5
push dword [edi + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
jmp case.default.0x45a566
push dword [0x517670]
lea ecx, [ebp - 0x52c]
push dword [0x517674]
call fcn.00450d10
mov dword [ebp - 4], 8
call dword [sym.imp.USER32.dll_GetActiveWindow]
mov esi, eax
mov eax, dword [ebp - 0x518]
test eax, eax
jne 0x458aa0
call fcn.004a5d0c
mov dword [ebp - 0x518], eax
test eax, eax
jne 0x458aa0
push 0xe
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x458b37
push 0
push 0
push eax
call fcn.004a5e0e
lea eax, [ebp - 0x52c]
lea edi, [ebp - 0x524]
mov dword [ebp - 0x524], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push 0x5171c4
mov dword [ebp - 0x520], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x5171dc]
push 0x5171c4
mov dword [ebp - 0x51c], eax
mov dword [0x5171dc], edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0
push 0x4422e0
push esi
push 0xbd
push dword [0x51d938]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
cmp eax, 1
jne 0x458b37
lea ecx, [ebp - 0x52c]
call fcn.00450f40
lea ecx, [ebp - 0x52c]
mov dword [0x517674], eax
call fcn.00450f50
mov ecx, 0x51c200
mov dword [0x517670], eax
call fcn.0042de00
mov eax, dword [ebp - 0x518]
test eax, eax
je case.default.0x45a566
push eax
call fcn.004a5db8
jmp case.default.0x45a566
push 0x34
lea eax, [ebp - 0x4e0]
mov dword [ebp - 0x4e8], 0x3c
push 0
push eax
call fcn.004a7410
push 0x5c
lea eax, [ebp - 0x490]
push 0
push eax
call fcn.004a7410
add esp, 0x18
lea eax, [ebp - 0x490]
push eax
push 0x5c
push dword [0x5174d0]
call dword [sym.imp.GDI32.dll_GetObjectW]
lea eax, [ebp - 0x490]
mov dword [ebp - 0x4e4], esi
mov dword [ebp - 0x4dc], eax
lea eax, [ebp - 0x4e8]
push eax
mov dword [ebp - 0x4d4], 0x10041
call dword [sym.imp.COMDLG32.dll_ChooseFontW]
test eax, eax
je case.default.0x45a566
push dword [0x5174d0]
mov edi, dword [sym.imp.GDI32.dll_DeleteObject]
call edi
mov esi, dword [sym.imp.GDI32.dll_CreateFontIndirectW]
lea eax, [ebp - 0x490]
push eax
call esi
mov ecx, dword [ebp - 0x498]
push 0
push eax
push 0x30
mov dword [0x5174d0], eax
push dword [ecx + 0x15c]
call dword [sym.imp.USER32.dll_SendMessageW]
push dword [0x5174d4]
mov ecx, 0x2bc
mov eax, 0x320
cmp dword [ebp - 0x480], ecx
cmovl eax, ecx
mov dword [ebp - 0x480], eax
call edi
lea eax, [ebp - 0x490]
push eax
call esi
mov esi, dword [ebp - 0x4a0]
mov edi, dword [sym.imp.USER32.dll_GetWindowRect]
mov dword [0x5174d4], eax
lea eax, [ebp - 0x430]
push eax
push dword [esi]
call edi
mov eax, dword [ebp - 0x424]
mov edx, dword [ebp - 0x42c]
sub eax, edx
mov ecx, dword [ebp - 0x430]
push 0
push eax
mov eax, dword [ebp - 0x428]
sub eax, ecx
dec eax
push eax
push edx
push ecx
push dword [esi]
mov esi, dword [sym.imp.USER32.dll_MoveWindow]
call esi
mov eax, dword [ebp - 0x424]
mov edx, dword [ebp - 0x42c]
sub eax, edx
mov ecx, dword [ebp - 0x430]
push 0
push eax
mov eax, dword [ebp - 0x428]
sub eax, ecx
push eax
mov eax, dword [ebp - 0x4a0]
push edx
push ecx
push dword [eax]
call esi
mov esi, dword [ebp - 0x4a0]
lea eax, [ebp - 0x430]
push eax
push dword [esi]
call edi
mov eax, dword [ebp - 0x424]
mov edx, dword [ebp - 0x42c]
sub eax, edx
mov ecx, dword [ebp - 0x430]
push 4
push eax
mov eax, dword [ebp - 0x428]
sub eax, ecx
dec eax
push eax
push edx
push ecx
push 0
mov ecx, esi
call fcn.0045fca0
push 4
mov eax, dword [ebp - 0x424]
mov esi, dword [ebp - 0x42c]
sub eax, esi
mov edx, dword [ebp - 0x430]
mov ecx, dword [ebp - 0x4a0]
push eax
mov eax, dword [ebp - 0x428]
sub eax, edx
push eax
push esi
push edx
push 0
call fcn.0045fca0
jmp case.default.0x45a566
push 0
push 0x451ec0
push esi
push 0x4eab28
push dword [0x51cf38]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
jmp 0x45a84a
mov ecx, 0x51c200
call fcn.0042bd40
test eax, eax
je 0x458d56
push 0
push 0x4a3b80
push esi
push 0x4eab44
push dword [0x51cf38]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
jmp 0x45a84a
mov eax, dword [ebp - 0x4a0]
push 0x10
push 0x4e23b8
push 0x4eab68
push dword [eax]
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x45a84a
push 0x44
call fcn.004a4441
mov edi, eax
add esp, 4
mov dword [ebp - 0x4a8], edi
test edi, edi
je 0x458deb
mov dword [edi + 4], 0
mov dword [edi + 0x14], 0
mov dword [edi + 0x18], 0
mov dword [edi + 0x1c], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x28], 0
mov byte [edi + 0x3c], 0
mov dword [edi + 0x2c], 0
mov dword [edi + 0x30], 0
mov dword [edi + 0x34], 0xffffffff
mov dword [edi + 0x38], 0xffffffff
mov dword [edi], vtable.COccurrencesDlg.0
mov dword [edi + 0x40], 0
jmp 0x458ded
xor edi, edi
mov eax, dword [edi + 0x14]
test eax, eax
jne 0x458e18
call fcn.004a5d0c
mov dword [edi + 0x14], eax
test eax, eax
jne 0x458e18
push 0xe
call dword [sym.imp.KERNEL32.dll_SetLastError]
push 5
push dword [edi + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x45a84a
push 0
push 0
push eax
call fcn.004a5e0e
lea eax, [edi + 8]
test eax, eax
je 0x45a869
test edi, edi
je 0x45a869
mov dword [eax], edi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push 0x5171c4
mov dword [edi + 0xc], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x5171dc]
lea ecx, [edi + 8]
mov dword [ecx + 8], eax
push 0x5171c4
mov dword [0x5171dc], ecx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0
push 0x4422e0
push esi
push 0xbf
push dword [0x51d938]
call dword [sym.imp.USER32.dll_CreateDialogParamW]
push 5
push dword [edi + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x45a84a
mov eax, dword [0x51cb14]
test eax, eax
je 0x458eb3
push 5
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push dword [0x51cb14]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
jmp 0x458fd7
push 0x44
call fcn.004a4441
mov esi, eax
add esp, 4
mov dword [ebp - 0x49c], esi
test esi, esi
je 0x458f30
test edi, edi
je 0x458ed2
lea eax, [edi + 0x38]
jmp 0x458ed4
xor eax, eax
mov dword [esi + 4], 0
mov dword [esi + 0x14], 0
mov dword [esi + 0x18], 0
mov dword [esi + 0x1c], 0
mov dword [esi + 0x20], 0
mov dword [esi + 0x24], 0
mov dword [esi + 0x28], 0
mov byte [esi + 0x3c], 0
mov dword [esi + 0x2c], 0
mov dword [esi + 0x30], 0
mov dword [esi + 0x34], 0xffffffff
mov dword [esi + 0x38], 0xffffffff
mov dword [esi], vtable.CProcessTreeDlg.0
mov dword [esi + 0x40], eax
jmp 0x458f32
xor esi, esi
mov eax, dword [edi + 4]
mov dword [ebp - 0x498], eax
mov eax, dword [esi + 0x14]
test eax, eax
jne 0x458f5a
call fcn.004a5d0c
mov dword [esi + 0x14], eax
test eax, eax
jne 0x458f5a
push 0xe
call dword [sym.imp.KERNEL32.dll_SetLastError]
xor eax, eax
jmp 0x458fc7
push 0
push 0
push eax
call fcn.004a5e0e
lea eax, [esi + 8]
test eax, eax
je 0x45a869
test esi, esi
je 0x45a869
mov dword [eax], esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push 0x5171c4
mov dword [esi + 0xc], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x5171dc]
lea ecx, [esi + 8]
mov dword [ecx + 8], eax
push 0x5171c4
mov dword [0x5171dc], ecx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0
push 0x4422e0
push dword [ebp - 0x498]
push 0xae
push dword [0x51d938]
call dword [sym.imp.USER32.dll_CreateDialogParamW]
push 5
mov dword [0x51cb14], eax
push dword [esi + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
push 0x51c200
mov dword [ebp - 0x49c], 0x51c200
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea ecx, [edi + 0x15c]
mov dword [ebp - 4], 9
call fcn.00457120
push eax
lea eax, [ebp - 0x434]
mov ecx, 0x51c200
push eax
call fcn.0041e2d0
cmp dword [ebp - 0x42c], 0
mov byte [ebp - 4], 0xa
je 0x45903e
lea ecx, [ebp - 0x434]
call fcn.004264b0
push dword [eax + 4]
push 0
push 0x8003
push dword [0x51cb14]
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0x434]
call fcn.00423d30
jmp 0x45a833
push 0x40
call fcn.004a4441
mov esi, eax
add esp, 4
mov dword [ebp - 0x4a8], esi
test esi, esi
je 0x4590bd
mov dword [esi + 4], 0
mov dword [esi + 0x14], 0
mov dword [esi + 0x18], 0
mov dword [esi + 0x1c], 0
mov dword [esi + 0x20], 0
mov dword [esi + 0x24], 0
mov dword [esi + 0x28], 0
mov byte [esi + 0x3c], 0
mov dword [esi + 0x2c], 0
mov dword [esi + 0x30], 0
mov dword [esi + 0x34], 0xffffffff
mov dword [esi + 0x38], 0xffffffff
mov dword [esi], vtable.CProcessActivitySummaryDlg.0
jmp 0x4590bf
xor esi, esi
mov eax, dword [edi + 4]
mov dword [ebp - 0x498], eax
mov eax, dword [esi + 0x14]
test eax, eax
jne 0x4590e5
call fcn.004a5d0c
mov dword [esi + 0x14], eax
test eax, eax
jne 0x4590e5
push 0xe
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x459152
push 0
push 0
push eax
call fcn.004a5e0e
lea eax, [esi + 8]
test eax, eax
je 0x45a869
test esi, esi
je 0x45a869
mov dword [eax], esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push 0x5171c4
mov dword [esi + 0xc], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x5171dc]
lea ecx, [esi + 8]
mov dword [ecx + 8], eax
push 0x5171c4
mov dword [0x5171dc], ecx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0
push 0x4422e0
push dword [ebp - 0x498]
push 0x99
push dword [0x51d938]
call dword [sym.imp.USER32.dll_CreateDialogParamW]
push 5
push dword [esi + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
push dword [esi + 4]
call dword [sym.imp.USER32.dll_SetFocus]
jmp 0x45a84a
push 0x44
call fcn.004a4441
mov esi, eax
add esp, 4
mov dword [ebp - 0x4a8], esi
test esi, esi
je 0x4591e1
mov dword [esi + 4], 0
mov dword [esi + 0x14], 0
mov dword [esi + 0x18], 0
mov dword [esi + 0x1c], 0
mov dword [esi + 0x20], 0
mov dword [esi + 0x24], 0
mov dword [esi + 0x28], 0
mov byte [esi + 0x3c], 0
mov dword [esi + 0x2c], 0
mov dword [esi + 0x30], 0
mov dword [esi + 0x34], 0xffffffff
mov dword [esi + 0x38], 0xffffffff
mov dword [esi], vtable.CFileSummaryDlg.0
mov dword [esi + 0x40], 0
jmp 0x4591e3
xor esi, esi
mov eax, dword [edi + 4]
mov dword [ebp - 0x498], eax
mov eax, dword [esi + 0x14]
test eax, eax
jne 0x459203
call fcn.004a5d0c
mov dword [esi + 0x14], eax
test eax, eax
je 0x4590db
push 0
push 0
push eax
call fcn.004a5e0e
lea eax, [esi + 8]
test eax, eax
je 0x45a869
test esi, esi
je 0x45a869
mov dword [eax], esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push 0x5171c4
mov dword [esi + 0xc], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x5171dc]
lea ecx, [esi + 8]
mov dword [ecx + 8], eax
push 0x5171c4
mov dword [0x5171dc], ecx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0
push 0x4422e0
push dword [ebp - 0x498]
push 0xba
jmp 0x459146
push 0x44
call fcn.004a4441
mov esi, eax
add esp, 4
mov dword [ebp - 0x4a8], esi
test esi, esi
je 0x4592df
mov dword [esi + 4], 0
mov dword [esi + 0x14], 0
mov dword [esi + 0x18], 0
mov dword [esi + 0x1c], 0
mov dword [esi + 0x20], 0
mov dword [esi + 0x24], 0
mov dword [esi + 0x28], 0
mov byte [esi + 0x3c], 0
mov dword [esi + 0x2c], 0
mov dword [esi + 0x30], 0
mov dword [esi + 0x34], 0xffffffff
mov dword [esi + 0x38], 0xffffffff
mov dword [esi], vtable.CRegistrySummaryDlg.0
mov dword [esi + 0x40], 0
jmp 0x4592e1
xor esi, esi
mov eax, dword [edi + 4]
mov dword [ebp - 0x498], eax
mov eax, dword [esi + 0x14]
test eax, eax
jne 0x459301
call fcn.004a5d0c
mov dword [esi + 0x14], eax
test eax, eax
je 0x4590db
push 0
push 0
push eax
call fcn.004a5e0e
lea eax, [esi + 8]
test eax, eax
je 0x45a869
test esi, esi
je 0x45a869
mov dword [eax], esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push 0x5171c4
mov dword [esi + 0xc], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x5171dc]
lea ecx, [esi + 8]
mov dword [ecx + 8], eax
push 0x5171c4
mov dword [0x5171dc], ecx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0
push 0x4422e0
push dword [ebp - 0x498]
push 0x96
jmp 0x459146
push 0x44
call fcn.004a4441
mov esi, eax
add esp, 4
mov dword [ebp - 0x4a8], esi
test esi, esi
je 0x4593dd
mov dword [esi + 4], 0
mov dword [esi + 0x14], 0
mov dword [esi + 0x18], 0
mov dword [esi + 0x1c], 0
mov dword [esi + 0x20], 0
mov dword [esi + 0x24], 0
mov dword [esi + 0x28], 0
mov byte [esi + 0x3c], 0
mov dword [esi + 0x2c], 0
mov dword [esi + 0x30], 0
mov dword [esi + 0x34], 0xffffffff
mov dword [esi + 0x38], 0xffffffff
mov dword [esi], vtable.CNetworkSummaryDlg.0
mov dword [esi + 0x40], 0
jmp 0x4593df
xor esi, esi
mov eax, dword [edi + 4]
mov dword [ebp - 0x498], eax
mov eax, dword [esi + 0x14]
test eax, eax
jne 0x4593ff
call fcn.004a5d0c
mov dword [esi + 0x14], eax
test eax, eax
je 0x4590db
push 0
push 0
push eax
call fcn.004a5e0e
lea eax, [esi + 8]
test eax, eax
je 0x45a869
test esi, esi
je 0x45a869
mov dword [eax], esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push 0x5171c4
mov dword [esi + 0xc], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x5171dc]
lea ecx, [esi + 8]
mov dword [ecx + 8], eax
push 0x5171c4
mov dword [0x5171dc], ecx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0
push 0x4422e0
push dword [ebp - 0x498]
push 0x98
jmp 0x459146
push 0xa8
call fcn.004a4441
add esp, 4
mov dword [ebp - 0x4a4], eax
mov dword [ebp - 4], 0xb
test eax, eax
je 0x4595ed
mov dword [eax + 4], 0
mov dword [eax + 0x14], 0
mov dword [eax + 0x18], 0
mov dword [eax + 0x1c], 0
mov dword [eax + 0x20], 0
mov dword [eax + 0x24], 0
mov dword [eax + 0x28], 0
mov byte [eax + 0x3c], 0
mov dword [eax + 0x2c], 0
mov dword [eax + 0x30], 0
mov dword [eax + 0x34], 0xffffffff
mov dword [eax + 0x38], 0xffffffff
lea esi, [eax + 0x40]
mov dword [eax], vtable.CStackSummaryDlg.0
mov dword [ebp - 0x4a8], esi
mov dword [ebp - 0x49c], esi
mov dword [esi], 0
push 0x4eae34
mov ecx, esi
mov byte [ebp - 4], 0xe
call fcn.0049f6f0
xorps xmm0, xmm0
movups xmmword [esi + 8], xmm0
movq qword [esi + 0x18], xmm0
mov dword [esi + 0x20], 0
push 0x4eae34
mov byte [ebp - 4], 0xf
call fcn.0049fbd0
push eax
push 0x4eae34
call fcn.0049fd60
mov dword [esi + 0x28], eax
mov eax, dword [ebp - 0x4a4]
push 0x40
mov byte [ebp - 4], 0x10
mov dword [eax + 0x70], esi
lea esi, [eax + 0x74]
mov dword [ebp - 0x4a8], esi
mov dword [esi], 0
mov dword [esi + 4], 0
call fcn.004a4441
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [esi], eax
mov eax, dword [ebp - 0x4a4]
mov dword [eax + 0x80], 0xffffffff
mov dword [eax + 0x84], 0xffffffff
mov dword [eax + 0x88], 0xffffffff
mov dword [eax + 0x90], 0
mov dword [eax + 0x94], 0
mov dword [eax + 0x98], 0
lea esi, [eax + 0xa0]
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x4a8], esi
push 0x3c
mov dword [esi], 0
mov dword [esi + 4], 0
call fcn.004a4441
add esp, 0x14
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [esi], eax
mov esi, dword [ebp - 0x4a4]
jmp 0x4595ef
xor esi, esi
mov eax, dword [edi + 4]
mov dword [ebp - 0x498], eax
mov eax, dword [esi + 0x14]
test eax, eax
jne 0x459623
call fcn.004a5d0c
mov dword [esi + 0x14], eax
test eax, eax
jne 0x459623
push 0xe
call dword [sym.imp.KERNEL32.dll_SetLastError]
push 5
push dword [esi + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x45a84a
push 0
push 0
push eax
call fcn.004a5e0e
lea eax, [esi + 8]
test eax, eax
je 0x45a869
test esi, esi
je 0x45a869
mov dword [eax], esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push 0x5171c4
mov dword [esi + 0xc], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x5171dc]
lea ecx, [esi + 8]
mov dword [ecx + 8], eax
push 0x5171c4
mov dword [0x5171dc], ecx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0
push 0x4422e0
push dword [ebp - 0x498]
push 0x9f
push dword [0x51d938]
call dword [sym.imp.USER32.dll_CreateDialogParamW]
push 5
push dword [esi + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x45a84a
push 0x44
call fcn.004a4441
mov esi, eax
add esp, 4
mov dword [ebp - 0x4a8], esi
test esi, esi
je 0x459716
mov dword [esi + 4], 0
mov dword [esi + 0x14], 0
mov dword [esi + 0x18], 0
mov dword [esi + 0x1c], 0
mov dword [esi + 0x20], 0
mov dword [esi + 0x24], 0
mov dword [esi + 0x28], 0
mov byte [esi + 0x3c], 0
mov dword [esi + 0x2c], 0
mov dword [esi + 0x30], 0
mov dword [esi + 0x34], 0xffffffff
mov dword [esi + 0x38], 0xffffffff
mov dword [esi], vtable.CCrossReferenceSummaryDlg.0
mov dword [esi + 0x40], 0
jmp 0x459718
xor esi, esi
mov eax, dword [edi + 4]
mov dword [ebp - 0x498], eax
mov eax, dword [esi + 0x14]
test eax, eax
jne 0x459738
call fcn.004a5d0c
mov dword [esi + 0x14], eax
test eax, eax
je 0x45960b
push 0
push 0
push eax
call fcn.004a5e0e
lea edi, [esi + 8]
test edi, edi
je 0x45a869
test esi, esi
je 0x45a869
mov dword [edi], esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push 0x5171c4
mov dword [edi + 4], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x5171dc]
mov dword [edi + 8], eax
push 0x5171c4
mov dword [0x5171dc], edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0
push 0x4422e0
push dword [ebp - 0x498]
push 0xa0
jmp 0x459684
push 0
push 0x4a2ba0
push esi
push 0x4eabac
push dword [0x51cf38]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
jmp 0x45a84a
and dword [edi + 0x4198], 0xffffffbf
lea eax, [edi + 0x418c]
push eax
call dword [sym.imp.COMDLG32.dll_FindTextW]
mov dword [0x51c8fc], eax
jmp 0x45a84a
mov ecx, dword [edi + 0x4198]
mov esi, 0x9cd3
mov edx, dword [edi + 0x15c]
mov eax, ecx
and ecx, 0xfffffffe
mov dword [ebp - 0x424], edx
or eax, 1
cmp word [ebp - 0x4a4], si
push 0
cmovne ecx, eax
push 0
mov dword [edi + 0x4198], ecx
and cl, 1
push 0x1042
push edx
mov byte [ebp - 0x498], cl
call dword [sym.imp.USER32.dll_SendMessageW]
push dword [ebp - 0x498]
mov ecx, 0x51c200
push eax
call fcn.0042d1b0
mov ecx, 0x51c200
mov dword [ebp - 0x4a0], eax
call fcn.0042bd40
mov esi, dword [ebp - 0x4ac]
cmp dword [ebp - 0x4a0], eax
jb 0x4598b5
push 0x4eabc8
call fcn.0049fbd0
push eax
push 0x4eabc8
call fcn.0049fd60
add esp, 0xc
mov dword [ebp - 0x424], eax
push esi
mov dword [ebp - 4], 0x12
call dword [sym.imp.USER32.dll_SetForegroundWindow]
lea ecx, [ebp - 0x424]
call fcn.0049f770
push 0x30
push 0x4e23b8
push eax
push dword [edi + 4]
call dword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, dword [ebp - 0x424]
mov dword [ebp - 4], 0x13
test ecx, ecx
je 0x45a84a
call fcn.0049fda0
jmp 0x45a84a
mov esi, dword [ebp - 0x424]
lea eax, [ebp - 0x4e8]
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
push eax
push 0xffffffffffffffff
push 0x102b
push esi
mov dword [ebp - 0x4d8], 3
mov dword [ebp - 0x4dc], 0
call edi
lea eax, [ebp - 0x4e8]
mov dword [ebp - 0x4d8], 3
push eax
push dword [ebp - 0x4a0]
mov dword [ebp - 0x4dc], 3
push 0x102b
push esi
call edi
push 0
push dword [ebp - 0x4a0]
push 0x1013
push esi
call edi
push dword [ebp - 0x4a0]
push 0
push 0x1043
push esi
call edi
push esi
call dword [sym.imp.USER32.dll_UpdateWindow]
jmp 0x45a84a
mov ecx, dword [edi + 0x4198]
mov edx, 0x9c7e
mov eax, ecx
and ecx, 0xfffffffe
or eax, 1
cmp word [ebp - 0x4a4], dx
cmovne ecx, eax
lea eax, [edi + 0x418c]
push eax
push 0
push 0x8004
push esi
mov dword [edi + 0x4198], ecx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x45a84a
push 0x51c900
lea eax, [ebp - 0x420]
push 0x104
push eax
call fcn.004b7f10
lea eax, [ebp - 0x420]
push 0x5c
push eax
call fcn.004a861e
lea ecx, [ebp - 0x218]
sub ecx, eax
push 0x4eabf0
sar ecx, 1
push ecx
push eax
call fcn.004b7f10
lea eax, [ebp - 0x420]
push eax
push 0x4eac0c
lea eax, [ebp - 0x218]
push 0x104
push eax
call fcn.00404df0
add esp, 0x30
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 0
push 0
lea eax, [ebp - 0x420]
push eax
push esi
call fcn.004a4304
test eax, eax
jne 0x45a84a
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
push 0
push ecx
mov ecx, esp
push 0x4eac34
call fcn.00437950
call fcn.00468ea0
add esp, 8
jmp 0x45a84a
push 0
push 0x41cc90
push esi
push 0x4eac7c
push dword [0x51cf38]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
jmp 0x45a84a
lea eax, [ebp - 0x4dc]
mov dword [ebp - 0x4dc], 0x30
push eax
push 0
xorps xmm0, xmm0
mov dword [ebp - 0x4d8], 1
push 0x9cb0
push dword [edi + 0xb4]
movups xmmword [ebp - 0x4d4], xmm0
movups xmmword [ebp - 0x4c4], xmm0
movq qword [ebp - 0x4b4], xmm0
call dword [sym.imp.USER32.dll_GetMenuItemInfoW]
mov ecx, dword [ebp - 0x4d0]
shr ecx, 3
mov al, cl
not ecx
push 0
and ecx, 1
not al
push ecx
and al, 1
lea ecx, [edi + 0x40]
push 0x9cb0
mov byte [0x51766c], al
call fcn.00460570
jmp case.default.0x45a566
push 1
push 0xffffffffffffffff
push 0x100c
push dword [edi + 0x15c]
call dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0
push 0x1028
push dword [edi + 0x15c]
mov esi, eax
call dword [sym.imp.USER32.dll_SendMessageW]
movzx ecx, word [ebp + 0xc]
lea edx, [eax + eax*4]
mov eax, 0x9c8e
add edx, edx
cmp cx, ax
jne 0x459afb
mov eax, esi
mov esi, 0
sub eax, edx
cmovns esi, eax
jmp 0x459b19
push 0
push 0
push 0x1004
push dword [edi + 0x15c]
add esi, edx
call dword [sym.imp.USER32.dll_SendMessageW]
cmp esi, eax
jl 0x459b19
lea esi, [eax - 1]
lea eax, [ebp - 0x4e8]
mov dword [ebp - 0x4d8], 3
push eax
push esi
push 0x102b
push dword [edi + 0x15c]
mov dword [ebp - 0x4dc], 3
call dword [sym.imp.USER32.dll_SendMessageW]
push 0
push esi
push 0x1013
push dword [edi + 0x15c]
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.default.0x45a566
push 0x51c200
mov dword [ebp - 0x49c], 0x51c200
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0
mov ecx, 0x51c2b0
mov dword [ebp - 4], 0x14
call fcn.0045fb70
cmp byte [0x51765e], 0
mov ecx, 0x51c284
sete al
movzx eax, al
push eax
call fcn.0045fb70
push 0
jmp 0x45a814
push 0x44
call fcn.004a4441
mov esi, eax
add esp, 4
mov dword [ebp - 0x49c], esi
test esi, esi
je 0x459c1c
mov dword [esi + 4], 0
mov dword [esi + 0x14], 0
mov dword [esi + 0x18], 0
mov dword [esi + 0x1c], 0
mov dword [esi + 0x20], 0
mov dword [esi + 0x24], 0
mov dword [esi + 0x28], 0
mov byte [esi + 0x3c], 0
mov dword [esi + 0x2c], 0
mov dword [esi + 0x30], 0
mov dword [esi + 0x34], 0xffffffff
mov dword [esi + 0x38], 0xffffffff
mov dword [esi], vtable.CBackingFileDlg.0
mov dword [esi + 0x40], 0
jmp 0x459c1e
xor esi, esi
mov eax, dword [edi + 4]
mov dword [ebp - 0x498], eax
mov eax, dword [esi + 0x14]
test eax, eax
jne 0x459c52
call fcn.004a5d0c
mov dword [esi + 0x14], eax
test eax, eax
jne 0x459c52
push 0xe
call dword [sym.imp.KERNEL32.dll_SetLastError]
push 5
push dword [esi + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
jmp case.default.0x45a566
push 0
push 0
push eax
call fcn.004a5e0e
lea edi, [esi + 8]
test edi, edi
je 0x45a869
test esi, esi
je 0x45a869
mov dword [edi], esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push 0x5171c4
mov dword [edi + 4], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x5171dc]
mov dword [edi + 8], eax
push 0x5171c4
mov dword [0x5171dc], edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0
push 0x4422e0
push dword [ebp - 0x498]
push 0x93
push dword [0x51d938]
call dword [sym.imp.USER32.dll_CreateDialogParamW]
push 5
push dword [esi + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
jmp case.default.0x45a566
mov eax, 0x9cc7
cmp dx, ax
lea eax, [ebp - 0x504]
push 0x58
push 0
push eax
sete byte [ebp - 0x498]
call fcn.004a7410
movups xmm0, xmmword [0x4eac88]
mov ax, word [0x4eacb8]
push 0x1d6
movups xmmword [ebp - 0x420], xmm0
mov word [ebp - 0x3f0], ax
lea eax, [ebp - 0x3ee]
movups xmm0, xmmword [0x4eac98]
push 0
push eax
movups xmmword [ebp - 0x410], xmm0
movups xmm0, xmmword [0x4eaca8]
movups xmmword [ebp - 0x400], xmm0
call fcn.004a7410
lea eax, [ebp - 0x420]
mov dword [ebp - 0x500], esi
movzx esi, word [ebp + 0xc]
add esp, 0x18
mov dword [ebp - 0x4e8], eax
mov ecx, 0x9cc7
xor eax, eax
mov dword [ebp - 0x504], 0x58
cmp si, cx
mov dword [ebp - 0x4e4], 0x104
lea ecx, [ebp - 0x504]
mov dword [ebp - 0x4f8], 0x4eacc0
setne al
push ecx
lea eax, [eax*4 + 8]
mov dword [ebp - 0x4d0], eax
mov eax, dword [sym.imp.COMDLG32.dll_GetSaveFileNameW]
cmove eax, dword [sym.imp.COMDLG32.dll_GetOpenFileNameW]
call eax
test eax, eax
je case.default.0x45a566
mov ecx, 6
lea eax, [ebp - 0xe8]
nop
mov dword [eax - 8], 0
lea eax, [eax + 0x20]
mov dword [eax - 0x24], 0
mov dword [eax - 0x20], 0
mov dword [eax - 0x1c], 0
mov dword [eax - 0x18], 0
mov dword [eax - 0x14], 0
mov dword [eax - 0x10], 0
sub ecx, 1
jne 0x459db0
lea eax, [ebp - 0x30]
push eax
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea eax, [ebp - 0x110]
mov dword [ebp - 0x18], 0
xorps xmm0, xmm0
mov word [ebp - 0x108], 0
movlpd qword [ebp - 0x110], xmm0
mov dword [ebp - 0x104], 0
mov dword [ebp - 0x100], 0xffffffff
mov dword [ebp - 0xfc], 0
movlpd qword [ebp - 0xf8], xmm0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x420]
mov dword [ebp - 4], 0x1d
push 0x2e
push eax
call fcn.004a83c5
add esp, 8
test eax, eax
jne 0x459e94
push 0x4ead0c
lea eax, [ebp - 0x420]
push 0x104
push eax
call fcn.004b8a72
add esp, 0xc
push 0
push dword [ebp - 0x498]
lea eax, [ebp - 0x420]
push eax
lea ecx, [ebp - 0x110]
call fcn.004613e0
test al, al
jne 0x459ed8
mov eax, dword [ebp - 0x4a0]
push 0x10
push 0x4e23b8
push 0x4ead18
push dword [eax]
call dword [sym.imp.USER32.dll_MessageBoxW]
mov dword [ebp - 4], 0x1e
jmp 0x45a036
lea eax, [ebp - 0x110]
push eax
lea ecx, [ebp - 0x428]
call fcn.004987a0
mov eax, 0x9cc7
mov byte [ebp - 4], 0x1f
cmp si, ax
lea eax, [ebp - 0x428]
jne 0x45a015
push eax
call fcn.004990a0
add esp, 4
lea ecx, [edi + 0x40]
xor eax, eax
cmp byte [0x51765c], al
push 0
setne al
push eax
push 0x9cb4
call fcn.00460570
xor eax, eax
lea ecx, [edi + 0x40]
cmp byte [0x51765d], al
push 0
setne al
push eax
push 0x9c53
call fcn.00460570
xor eax, eax
lea ecx, [edi + 0x40]
cmp byte [0x51765e], al
push 0
setne al
push eax
push 0x9c7f
call fcn.00460570
mov ecx, edi
call fcn.00460810
xor eax, eax
lea ecx, [edi + 0x40]
cmp byte [0x51766c], 1
push 0
sete al
push eax
push 0x9cb0
call fcn.00460570
xor eax, eax
lea ecx, [edi + 0x40]
cmp byte [0x51765f], al
push 0
setne al
push eax
push 0x9cc0
call fcn.00460570
xor eax, eax
lea ecx, [edi + 0x40]
cmp byte [0x517660], al
push 0
setne al
push eax
push 0x9ce6
call fcn.00460570
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push dword [0x5174d0]
push 0x30
push dword [edi + 0x15c]
call esi
push dword [0x517558]
push 0x5174d8
push 0x51755c
push dword [edi + 0x15c]
call fcn.0043a2f0
push dword [edi + 0x134]
call fcn.0048f830
add esp, 4
mov ecx, 0x51c200
push 0
call fcn.0042d650
push 0
push 0
push 0x800b
push dword [0x51cb18]
call esi
jmp 0x45a024
push dword [edi + 0x15c]
push eax
call fcn.00499350
add esp, 8
lea ecx, [ebp - 0x428]
call fcn.00405a70
mov dword [ebp - 4], 0x20
lea ecx, [ebp - 0x110]
call fcn.00461e30
mov esi, dword [ebp - 0x18]
test esi, esi
je 0x45a093
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
dec eax
jne 0x45a08c
test esi, esi
je 0x45a08c
mov eax, dword [esi]
test eax, eax
je 0x45a06a
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x45a081
push eax
call fcn.004a447f
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.004a4471
add esp, 8
mov dword [ebp - 0x18], 0
lea eax, [ebp - 0x30]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
jmp case.default.0x45a566
call fcn.0046c3c0
mov esi, eax
call fcn.0046b9f0
push 0x7f02
push 0
mov byte [ebp - 0x491], al
call dword [sym.imp.USER32.dll_LoadCursorW]
push eax
call dword [sym.imp.USER32.dll_SetCursor]
mov dword [ebp - 0x498], eax
test esi, esi
je 0x45a125
cmp byte [ebp - 0x491], 0
je 0x45a125
push 1
call fcn.0046c3d0
add esp, 4
mov ecx, 0x51c200
push 0
call fcn.0042b470
push 0x51cd28
push 0x51cb20
push 0
push 0x517888
mov ecx, 0x51c200
call fcn.0042bdb0
mov esi, dword [ebp - 0x4ac]
test al, al
je 0x45a141
push 0
push 1
push esi
call fcn.0046bd50
add esp, 0xc
jmp 0x45a141
push 0
call fcn.0046c3d0
add esp, 4
mov ecx, 0x51c200
push 0
call fcn.0042b470
mov esi, dword [ebp - 0x4ac]
push 0
push 0xfa
push 1
push dword [edi + 4]
call dword [sym.imp.USER32.dll_SetTimer]
push ecx
mov ecx, esp
push 0x517888
call fcn.00437950
push esi
call fcn.0048e2a0
add esp, 8
call fcn.0046b9f0
xor ecx, ecx
test al, al
push 0
setne cl
push ecx
push 0x9c52
lea ecx, [edi + 0x40]
call fcn.00460570
push dword [edi + 0x134]
call fcn.0048f830
add esp, 4
push dword [ebp - 0x498]
call dword [sym.imp.USER32.dll_SetCursor]
jmp 0x45a84a
push 0
lea eax, [edi + 0x40]
push 1
push 0x9c54
mov ecx, eax
call fcn.00460480
call fcn.0046b9f0
test al, al
jne 0x45a1e0
call fcn.0046c3c0
test eax, eax
jne 0x45a1e0
push eax
push 0x9c87
push 0x111
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x45a84a
call fcn.0046b9f0
mov byte [ebp - 0x491], al
mov dword [ebp - 0x424], 0
test al, al
je 0x45a234
call fcn.00467500
test al, al
jne 0x45a22e
push 0
push 0x485ba0
push esi
push 0x4ead60
push dword [0x51cf38]
call dword [sym.imp.USER32.dll_CreateDialogParamW]
push eax
mov dword [ebp - 0x424], eax
call dword [sym.imp.USER32.dll_UpdateWindow]
call dword [sym.imp.GDI32.dll_GdiFlush]
mov al, byte [ebp - 0x491]
test al, al
push 0
sete cl
movzx ecx, cl
push ecx
call fcn.0046c540
add esp, 8
mov esi, eax
push dword [ebp - 0x424]
call dword [sym.imp.USER32.dll_DestroyWindow]
test esi, esi
je 0x45a27b
call fcn.0046b9f0
lea esi, [edi + 4]
test al, al
jne 0x45a27e
push 0x30
push 0x4e23b8
push 0x4ead80
push dword [esi]
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x45a27e
lea esi, [edi + 4]
call fcn.0046b9f0
xor edx, edx
lea ecx, [edi + 0x40]
test al, al
push 0
setne dl
push edx
push 0x9c52
call fcn.00460570
push dword [edi + 0x134]
call fcn.0048f830
add esp, 4
call fcn.0046b9f0
test al, al
je 0x45a84a
push 0
push 0xfa
push 1
push dword [esi]
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x45a84a
cmp byte [0x51c8f9], 0
push 0xffffffffffffffff
sete al
mov byte [0x51c8f9], al
push 0
movzx eax, al
push eax
push esi
call fcn.00422e90
add esp, 0x10
mov byte [0x51c8f9], al
xor ecx, ecx
test al, al
setne cl
push 0
push ecx
push 0x9c8c
lea ecx, [edi + 0x40]
call fcn.00460570
jmp 0x45a84a
push 0
push 0x497420
push esi
push 0x4eadcc
push dword [0x51cf38]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
jmp case.default.0x45a566
push esi
call fcn.0048aaf0
add esp, 4
test al, al
je case.default.0x45a566
push 0
push 0
push 0x9c54
lea ecx, [edi + 0x40]
call fcn.00460480
jmp case.default.0x45a566
push 0
call fcn.0046c3d0
add esp, 4
mov ecx, 0x51c200
push 0
call fcn.0042b470
call fcn.0046b9f0
xor ecx, ecx
test al, al
push 0
setne cl
push ecx
push 0x9c52
lea ecx, [edi + 0x40]
call fcn.00460570
push ecx
mov ecx, esp
push 0x4e1a9c
call fcn.00437950
push esi
call fcn.0048e2a0
add esp, 8
jmp case.default.0x45a566
mov eax, dword [ebp - 0x49c]
mov byte [ebp - 0x424], 1
mov dword [ebp - 0x4a4], 0
test eax, eax
je 0x45a3cc
cmp byte [eax], 0
mov eax, dword [eax + 4]
sete byte [ebp - 0x424]
mov dword [ebp - 0x4a4], eax
push 0
push 0x9c8a
push 0x111
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x51cd28
push 0x51cb20
push dword [ebp - 0x424]
mov ecx, 0x51c200
push 0x517888
call fcn.0042bdb0
mov byte [ebp - 0x491], al
test al, al
je 0x45a431
push dword [ebp - 0x4a4]
push 0
push esi
call fcn.0046bd50
add esp, 0xc
mov byte [ebp - 0x491], al
push 0
push 0xfa
push 1
push dword [edi + 4]
call dword [sym.imp.USER32.dll_SetTimer]
call fcn.0046b9f0
xor ecx, ecx
test al, al
push 0
setne cl
push ecx
push 0x9c52
lea ecx, [edi + 0x40]
call fcn.00460570
push ecx
mov ecx, esp
push 0x517888
call fcn.00437950
push esi
call fcn.0048e2a0
movzx eax, byte [ebp - 0x491]
add esp, 8
jmp 0x45a84c
lea eax, [ebp - 0x4a4]
push esi
push eax
call fcn.00462690
add esp, 8
lea ecx, [ebp - 0x4a4]
mov dword [ebp - 4], 0x21
call fcn.0049fdc0
test eax, eax
jne 0x45a4a5
lea ecx, [ebp - 0x4a4]
call fcn.0041ce90
jmp case.default.0x45a566
push 0
push 0x9c8a
push 0x111
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x4eadd8
push 0x4eae04
push 0
push 0x517888
mov ecx, 0x51c200
call fcn.0042bdb0
test al, al
je 0x45a4ef
push ecx
lea eax, [ebp - 0x4a4]
mov ecx, esp
push eax
call fcn.00455340
push esi
call fcn.0046bf50
add esp, 8
call fcn.0046b9f0
xor edx, edx
lea ecx, [edi + 0x40]
test al, al
push 0
setne dl
push edx
push 0x9c52
call fcn.00460570
push ecx
mov ecx, esp
push 0x517888
call fcn.00437950
mov esi, dword [ebp - 0x4ac]
push esi
call fcn.0048e2a0
add esp, 8
mov ecx, dword [ebp - 0x4a4]
mov dword [ebp - 4], 0x22
test ecx, ecx
je case.default.0x45a566
call fcn.0049fda0
jmp case.default.0x45a566
push 0
push 0
push 0x10
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x45a84a
sub eax, 0xd102
cmp eax, 5
ja case.default.0x45a566
jmp dword [eax*4 + 0x45a9f0]
push 0x51c200
mov dword [ebp - 0x498], 0x51c200
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
movzx ecx, word [ebp + 0xc]
mov eax, 0xd101
cmp cx, ax
mov dword [ebp - 4], 0x15
sete al
movzx eax, al
push eax
lea eax, [edi + 0x164]
push eax
push 0
push dword [edi + 0x4164]
jmp 0x45a7fe
mov eax, dword [0x51cb18]
test eax, eax
je 0x45a5d3
push 5
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push dword [0x51cb18]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
jmp 0x45a66a
push 0x48
call fcn.004a4441
add esp, 4
mov dword [ebp - 0x424], eax
test eax, eax
je 0x45a647
mov dword [eax + 4], 0
mov dword [eax + 0x14], 0
mov dword [eax + 0x18], 0
mov dword [eax + 0x1c], 0
mov dword [eax + 0x20], 0
mov dword [eax + 0x24], 0
mov dword [eax + 0x28], 0
mov byte [eax + 0x3c], 0
mov dword [eax + 0x2c], 0
mov dword [eax + 0x30], 0
mov dword [eax + 0x34], 0xffffffff
mov dword [eax + 0x38], 0xffffffff
mov dword [eax], vtable.CFilterDlg.0
mov dword [eax + 0x40], 0xb8
jmp 0x45a64f
xor eax, eax
mov dword [ebp - 0x424], eax
push 0
push esi
mov ecx, eax
call fcn.004564a0
mov eax, dword [ebp - 0x424]
push 5
push dword [eax + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
push 0x51c200
mov dword [ebp - 0x4a4], 0x51c200
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0x20
mov dword [ebp - 4], 0x16
call fcn.004a4441
add esp, 4
mov dword [ebp - 0x424], eax
mov byte [ebp - 4], 0x17
test eax, eax
je 0x45a704
mov ecx, dword [ebp - 0x498]
lea esi, [eax + 8]
add edi, 0x164
mov dword [ebp - 0x498], esi
mov ecx, dword [ecx + 0x4164]
push ecx
mov dword [eax], ecx
mov dword [eax + 4], 0
call fcn.00439b40
push edi
mov byte [ebp - 0x49c], al
call fcn.0049fbd0
push eax
push edi
call fcn.0049fd60
mov dword [esi], eax
push dword [ebp - 0x49c]
mov byte [ebp - 4], 0x18
push edi
call fcn.004690a0
mov dword [esi + 8], eax
add esp, 0x18
mov eax, dword [ebp - 0x424]
mov dword [esi + 0xc], edx
mov word [eax + 0x18], 0x101
jmp 0x45a706
xor eax, eax
push eax
push 0
push 0x800d
push 0x418
push dword [0x51cb18]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
jmp 0x45a82d
push 0x51c200
mov dword [ebp - 0x49c], 0x51c200
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 1
lea eax, [edi + 0x164]
mov dword [ebp - 4], 0x19
push eax
push 0
push dword [edi + 0x4164]
mov ecx, 0x51c2b0
call fcn.00427d10
mov ecx, 0x51c200
call fcn.0042de00
push 0
push 0
push 0x800b
push dword [0x51cb1c]
jmp 0x45a82d
lea eax, [edi + 0x164]
push eax
lea ecx, [ebp - 0x498]
call fcn.00437950
lea eax, [ebp - 0x498]
mov dword [ebp - 4], 0x1a
push eax
push esi
call fcn.004647a0
add esp, 8
mov ecx, dword [ebp - 0x498]
mov dword [ebp - 4], 0x1b
test ecx, ecx
je case.default.0x45a566
call fcn.0049fda0
jmp case.default.0x45a566
push 0x51c200
mov dword [ebp - 0x498], 0x51c200
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
movzx ecx, word [ebp + 0xc]
lea eax, [edi + 0x2164]
push 0
push eax
xor eax, eax
mov dword [ebp - 4], 0x1c
mov edx, 0xd104
cmp cx, dx
setne al
add eax, 2
push eax
push 0x9c74
mov ecx, 0x51c284
call fcn.00427d10
mov byte [ebp - 0x49c], al
push dword [ebp - 0x49c]
mov ecx, 0x51c200
call fcn.0042d650
push 0
push 0
push 0x800b
push dword [0x51cb18]
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x51c200
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [ebp - 0x4a8]
mov dword [eax], 0
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004a4433
mov esp, ebp
pop ebp
ret 0x10
push 1
push 0xc0000005
call fcn.00442dc0
nop dword [eax]
stc
xchg byte [ebp], al
wait
xchg edi, eax
inc ebp
add byte [ebx], cl
inc ebp
add byte [esi + 0x5f00459b], ah
wait
inc ebp
add byte [eax - 0x67], bh
inc ebp
add byte [ecx - 0x7ad4ffbb], ah
inc ebp
add byte [edx - 0x6fffba60], ah
mov es, word [ebp]
les eax, [edi - 0x6846ffbb]
inc ebp
add byte [eax - 0x75], dl
inc ebp
add byte [esi - 0x5b], al
inc ebp
add byte [edx], ch
mov dword [0x83ef0045], eax
inc ebp
add byte [edi], ch
xchg dword [ebp], eax
sbb dword [ecx - 0x7a8fffbb], ecx
inc ebp
add byte [ecx*4 - 0x75abffbb], cl
inc ebp
add byte [ebx], bh
cdq
inc ebp
add byte [ecx - 0x79], bh
inc ebp
add byte [eax + 0xa004588], dl
mov dword [ebp], eax
sahf
mov dword [-1536229307], eax
inc ebp
add byte [ecx - 0x5d], dl
inc ebp
add bl, cl
mov byte [0x9aae0045], al
inc ebp
add byte [ebp - 0x73], dh
inc ebp
add byte [esi - 0x70], cl
inc ebp
add byte [ebx - 0x6f], ch
inc ebp
add byte [ebx], bl
lcall 0x45, 0x92690045
xchg esp, eax
inc ebp
add byte [edx - 0x7b], dl
inc ebp
add byte [ebp - 0x7a], ch
inc ebp
add byte [edx], bh
add dword [ebp], 0x39
lcall 0x45, 0x96a00045
push edx
add dword [ebp], 42
lea eax, [ebp]
xchg byte [ebx - 0x6c98ffbb], al
inc ebp
add ah, cl
pushfd
inc ebp
add bh, dl
xchg edi, eax
inc ebp
add byte [esp + eax*4 + 0x45], al
add byte [esp + eax*4], al
inc ebp
add byte [edi - 0x2cffba7d], dh
add dword [ebp], 0x3e
test al, 0x45
add byte [eax], al
add dword [edx], eax
xor esi, dword [ebx]
xor esi, dword [ebx]
xor eax, dword [ebx]
xor esi, dword [ebx]
add al, 51
xor eax, dword [151521030]
xor ecx, dword [edx]
or esi, dword [ebx]
xor esi, dword [ebx]
xor esi, dword [ebx]
xor esi, dword [ebx]
or al, 13
xor esi, dword [ebx]
push cs
add byte [ebx], dh
xor ecx, dword [edi]
adc byte [eax], dl
adc byte [eax], dl
adc dword [eax], edx
xor esi, dword [ebx]
xor esi, dword [ebx]
adc dh, byte [ebx]
xor esi, dword [ebx]
xor esi, dword [ebx]
xor esi, dword [ebx]
adc edx, dword [edx + 857150997]
sbb byte [ebx], dh
xor esi, dword [ebx]
xor ebx, dword [ecx]
sbb dh, byte [ebx]
sbb esi, dword [ebx]
sbb al, 29
sbb eax, 857617203
xor ebx, dword [edi]
xor esi, dword [ebx]
xor esp, dword [eax]
xor esp, dword [ecx]
xor esp, dword [edx]
xor esp, dword [ebx]
and al, 51
xor esi, dword [ebx]
xor esi, dword [ebx]
xor esi, dword [ebx]
xor esi, dword [ebx]
xor esp, dword [858993446]
xor esp, dword [edi]
xor ebp, dword [eax]
xor ebp, dword [ecx]
xor esi, dword [ebx]
xor esi, dword [ebx]
sub dh, byte [ebx]
xor esi, dword [ebx]
xor esi, dword [ebx]
xor ebp, dword [ebx]
xor ebp, dword [ebx + esi]
xor esi, dword [ebx]
xor ebp, dword [858993453]
xor esi, dword [ebx]
xor esi, dword [ebx]
xor esi, dword [ebx]
xor esi, dword cs:[ebx]
xor esi, dword [ebx]
das
xor byte [ebx], dh
xor esi, dword [ebx]
das
xor esi, dword [ebx]
xor esi, dword [ebx]
xor esi, dword [ebx]
xor esi, dword [ebx]
xor dword [edx], esi
nop dword [eax]
insd dword es:[edi], dx
movsd dword es:[edi], dword [esi]
inc ebp
add byte [0xbf0045a7], ah
cmpsd dword [esi], dword es:[edi]
inc ebp
add byte [edi + 0x7a0045a7], bh
cmpsd dword [esi], dword es:[edi]
inc ebp
add byte [eax - 0x33ffba5b], dh
int3