Function at 0x44efac
Capabilities:
Create process on windows
Get graphical window text

Disassembly:
mov eax, 0x45faa4
call fcn.0045dac0
mov eax, 0x2010
call fcn.0045da90
push ebx
push esi
mov ebx, ecx
push edi
push 1
mov ecx, 0x476a00
call fcn.0042a4d7
push 2
mov ecx, 0x45fc40
call fcn.00411c6f
and byte [ebp - 0x201c], 0
mov esi, 0x1ff
mov ecx, esi
xor eax, eax
lea edi, [ebp - 0x201b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, dword [ebp + 8]
cmp eax, 0x7701
jl 0x44f025
cmp eax, 0x7800
jg 0x44f025
push 1
add eax, 0xffff88ff
pop ecx
mov dword [0x4755cc], eax
push eax
mov dword [0x475310], ecx
push ecx
mov ecx, ebx
jmp 0x44fb07
cmp eax, 0x3501
jl 0x44f045
cmp eax, 0x7700
jg 0x44f045
add eax, 0xffffcaff
mov ecx, ebx
push eax
call fcn.00452f6a
jmp case.0x44fb73.32857
cmp eax, 0x2700
jl 0x44f060
cmp eax, 0x2999
jg 0x44f060
push eax
mov ecx, ebx
call fcn.00452fac
jmp case.0x44fb73.32857
cmp eax, 0x7801
jl 0x44f083
cmp eax, 0x7901
jg 0x44f083
add eax, 0xffff87ff
mov ecx, 0x499510
push eax
call fcn.00444680
jmp case.0x44fb73.32857
cmp eax, 0x2650
jl 0x44f0a6
cmp eax, 0x2699
jg 0x44f0a6
add eax, 0xffffd9b0
mov ecx, 0x497318
push eax
call fcn.004392df
jmp case.0x44fb73.32857
mov ecx, 0x3001
cmp eax, ecx
jg 0x44f25f
je 0x44f104
add eax, 0xffffe890
cmp eax, 0xb
ja case.0x44fb73.32857
jmp dword [eax*4 + 0x4503f1]
push 0
mov ecx, ebx
call fcn.00455a72
jmp case.0x44fb73.32857
push 1
jmp 0x44f0cc
push 2
jmp 0x44f0cc
push 3
jmp 0x44f0cc
push 4
jmp 0x44f0cc
push 5
jmp 0x44f0cc
push 6
jmp 0x44f0cc
push 7
jmp 0x44f0cc
push 8
jmp 0x44f0cc
push 9
jmp 0x44f0cc
push 0xa
jmp 0x44f0cc
push 0xb
jmp 0x44f0cc
and byte [ebp - 0xcac], 0
mov ecx, 0x218
xor eax, eax
lea edi, [ebp - 0xcab]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0xcac]
push 0x863
push eax
push dword [ebx + 0xb20]
call dword [sym.imp.USER32.dll_GetWindowTextA]
mov edi, dword [sym.imp.MSVCRT.dll_strstr]
lea eax, [ebp - 0xcac]
push 0x410d68
push eax
call edi
pop ecx
test eax, eax
pop ecx
je 0x44f248
lea eax, [ebp - 0xcac]
push 0x410d64
push eax
call edi
pop ecx
mov dword [ebp + 8], eax
test eax, eax
pop ecx
je 0x44f248
lea edi, [ebp - 0xcac]
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0x181c]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push 0x40b034
mov eax, ecx
mov esi, edi
mov edi, edx
lea edx, [ebp - 0x181c]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, dword [ebp + 8]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebp - 0xcac]
mov edi, 0x410d58
sub eax, ecx
or ecx, 0xffffffff
and byte [ebp + eax - 0x181c], 0
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
mov ecx, edx
and ecx, 3
add eax, 3
rep movsb byte es:[edi], byte [esi]
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
pop ecx
test eax, eax
pop ecx
je 0x44f21f
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0x181c]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0x181c]
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0xcac]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push 0
lea eax, [ebp - 0xcac]
push 0
push eax
mov ecx, ebx
call fcn.0045427c
jmp case.0x44fb73.32857
mov ecx, 0x8055
cmp eax, ecx
jg 0x44fb47
je 0x44fb36
mov ecx, FindResourceA
cmp eax, ecx
jg 0x44f631
je case.0x44fb73.32898
mov ecx, 0x3068
cmp eax, ecx
jg 0x44f4cf
je 0x44f4c0
add ecx, 0xfffffff1
cmp eax, ecx
jg 0x44f41c
je 0x44f3e4
mov ecx, 0x3052
cmp eax, ecx
jg 0x44f338
je case.0x44fb73.32918
sub eax, 0x3002
je case.0x44fb73.32854
dec eax
je 0x44f2f7
dec eax
dec eax
je 0x44f2e8
dec eax
je 0x44f2d9
sub eax, 0x4b
jmp 0x44f618
mov ecx, 0x4989c8
call fcn.00455690
jmp case.0x44fb73.32857
mov ecx, 0x4989c8
call fcn.00455970
jmp case.0x44fb73.32857
mov al, byte [0x45fc38]
mov ecx, esi
mov byte [ebp - 0xc48], al
xor eax, eax
lea edi, [ebp - 0xc47]
push 0x800
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0xc48]
push eax
push dword [ebx + 0xb20]
call dword [sym.imp.USER32.dll_GetWindowTextA]
push 0
push 0
lea eax, [ebp - 0xc48]
jmp 0x45035c
sub eax, 0x3053
je case.0x44fb73.32919
dec eax
je 0x44f3d5
dec eax
je case.0x44f64a.32680
dec eax
je case.0x44fb73.32927
dec eax
dec eax
jne case.0x44fb73.32857
cmp dword [0x47539c], 0
je 0x44f399
mov ecx, 0x5341b0
call fcn.004307d5
test eax, eax
je case.0x44fb73.32857
mov esi, 0x497338
push 1
push 1
mov ecx, esi
call fcn.0041c1dc
push 0
mov ecx, esi
call fcn.0041bfc6
jmp case.0x44fb73.32857
push 0x3058
lea ecx, [ebx + 0xae4]
call fcn.0044877d
lea ecx, [ebp - 0x14]
push 0
push ecx
push eax
push dword [ebx + 0xae8]
mov ecx, ebx
push 0x3eb
call fcn.00451a46
lea eax, [ebp - 0x14]
mov ecx, 0x5341b0
push eax
call fcn.004300f5
jmp case.0x44fb73.32857
mov ecx, 0x4776b0
call fcn.004164d6
jmp case.0x44fb73.32857
push ecx
lea ecx, [ebx + 0xae4]
call fcn.0044877d
lea ecx, [ebp - 0x14]
push 0
push ecx
push eax
push dword [ebx + 0xae8]
mov ecx, ebx
push 0x3eb
call fcn.00451a46
lea eax, [ebp - 0x14]
mov ecx, 0x5341b0
push eax
call fcn.0043022a
jmp case.0x44fb73.32857
lea ecx, [eax - 0x305b]
cmp ecx, 0xc
ja case.0x44fb73.32857
jmp dword [ecx*4 + 0x450421]
push 0xffffffffffffffff
push dword [ebx + 4]
mov ecx, ebx
call fcn.0044edce
jmp case.0x44fb73.32857
push eax
lea ecx, [ebx + 0xae4]
call fcn.0044877d
lea ecx, [ebp - 0x14]
push 0
push ecx
push eax
push dword [ebx + 0xae8]
mov ecx, ebx
push 0x3eb
call fcn.00451a46
push dword [ebp - 0x10]
mov ecx, ebx
push dword [ebp - 0x14]
call fcn.0045130f
jmp case.0x44fb73.32857
push eax
lea ecx, [ebx + 0xae4]
call fcn.0044877d
lea ecx, [ebp - 0x14]
push 0
push ecx
push eax
push dword [ebx + 0xae8]
mov ecx, ebx
push 0x3eb
call fcn.00451a46
push dword [ebp - 0x10]
mov ecx, ebx
push dword [ebp - 0x14]
call fcn.004513d6
jmp case.0x44fb73.32857
mov ecx, 0x4776b0
call fcn.00419e8e
jmp case.0x44fb73.32857
mov ecx, 0x4989c8
call fcn.0045485e
jmp case.0x44fb73.32857
mov ecx, 0x7955
cmp eax, ecx
jg 0x44f5ac
je 0x44f5a6
mov ecx, 0x306e
cmp eax, ecx
jg 0x44f55f
je case.0x44f64a.32820
sub eax, 0x3069
je 0x4502fd
dec eax
je case.0x44f64a.32794
dec eax
je 0x44f550
dec eax
je 0x44f517
dec eax
jne case.0x44fb73.32857
mov ecx, ebx
jmp 0x44fe3f
push 0x306c
lea ecx, [ebx + 0xae4]
call fcn.0044877d
lea ecx, [ebp - 0x14]
push 0
push ecx
push eax
push dword [ebx + 0xae8]
mov ecx, ebx
push 0x3eb
call fcn.00451a46
lea eax, [ebp - 0x14]
mov ecx, ebx
push eax
call fcn.00455a14
jmp case.0x44fb73.32857
mov ecx, 0x4989c8
call fcn.0045559c
jmp case.0x44fb73.32857
sub eax, 0x7950
je 0x44f58e
dec eax
je 0x44f588
dec eax
je 0x44f582
dec eax
je 0x44f57c
dec eax
jne case.0x44fb73.32857
push 0
push 0x22
jmp 0x44f592
push 0
push 0x27
jmp 0x44f592
push 0
push 0x25
jmp 0x44f592
push 0
push 0x28
jmp 0x44f592
push 0
push 0x26
push 0x100
mov ecx, 0x4776b0
call fcn.00418491
jmp case.0x44fb73.32857
push 0
push 0x21
jmp 0x44f592
mov ecx, 0x795b
cmp eax, ecx
jg 0x44f600
je case.0x44fb73.32933
sub eax, 0x7956
je 0x44f5fa
dec eax
je 0x44f5ef
dec eax
je 0x44f5e9
dec eax
je 0x44f5e3
dec eax
jne case.0x44fb73.32857
push 1
mov ecx, 0x4776b0
call fcn.00419132
jmp case.0x44fb73.32857
push 0
push 0x24
jmp 0x44f592
push 0
push 0x23
jmp 0x44f592
push 0
push 7
push 0x114
jmp 0x44f597
push 0
push 6
jmp 0x44f5f3
sub eax, 0x7f9f
je case.0x44f64a.32679
dec eax
je 0x44f623
sub eax, 3
je 0x44fe30
dec eax
je case.0x44fb73.32925
jmp case.0x44fb73.32857
mov edi, 0x4776b0
mov ecx, edi
call fcn.004166a2
jmp 0x44f65d
lea ecx, reloc.KERNEL32.dll_FindResourceA
cmp ecx, 0xae
ja case.0x44fb73.32857
movzx ecx, byte [ecx + 0x4504fd]
jmp dword [ecx*4 + 0x450455]
mov edi, 0x4776b0
mov ecx, edi
call fcn.00416680
push 0
mov ecx, edi
call fcn.00418389
jmp case.0x44fb73.32857
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x38]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
mov dword [ebp - 0x34], 0x100
mov dword [ebp - 0x30], 0x79
call fcn.00452a8d
jmp case.0x44fb73.32857
xor eax, eax
push 1
cmp dword [0x534a88], eax
mov ecx, 0x5341b0
sete al
push eax
mov dword [0x534a88], eax
call fcn.004303b7
jmp case.0x44fb73.32857
push 4
jmp 0x4503be
push 0x41
xor eax, eax
pop ecx
lea edi, [ebp - 0x240]
rep stosd dword es:[edi], eax
mov edi, dword [sym.imp.USER32.dll_LoadStringA]
lea eax, [ebp - 0x240]
push 0x103
push eax
push 0x91
push dword [0x534a50]
call edi
mov esi, 0x104
lea eax, [ebp - 0x448]
push esi
push eax
push 0x90
push dword [0x534a50]
call edi
lea eax, [ebp - 0x240]
push eax
call fcn.00425b7d
pop ecx
lea eax, [ebp - 0x13c]
push esi
mov esi, 0x499510
push eax
mov ecx, esi
call fcn.0044480f
lea eax, [ebp - 0x13c]
push eax
call fcn.004269d2
mov eax, dword [0x410d54]
lea edi, [ebp - 0x2c]
mov dword [ebp - 0x30], eax
xor eax, eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push SysReAllocStringLen
lea eax, [ebp - 0x30]
push 0x14
push eax
mov edi, 0x410b28
push 0x410d48
push edi
call fcn.004245ef
lea eax, [ebx + 0x99c]
push eax
lea eax, [ebp - 0x30]
push 0x80802
push eax
lea eax, [ebp - 0x13c]
push eax
lea eax, [ebp - 0x240]
push eax
lea eax, [ebp - 0x448]
push eax
push dword [ebx + 4]
push dword [0x534a50]
call fcn.00425cc3
add esp, 0x38
test eax, eax
je case.0x44fb73.32857
and dword [ebp - 0x1c], 0
and dword [ebp - 0x18], 0
lea eax, [ebp - 0x13c]
push 0x2e
push eax
call dword [sym.imp.MSVCRT.dll_strrchr]
pop ecx
mov dword [ebp + 8], eax
test eax, eax
pop ecx
je 0x44f872
push 0x40e4d0
push eax
call dword [sym.imp.MSVCRT.dll__stricmp]
pop ecx
test eax, eax
pop ecx
je 0x44f7e3
push 0x40e4c8
push dword [ebp + 8]
call dword [sym.imp.MSVCRT.dll__stricmp]
pop ecx
test eax, eax
pop ecx
jne 0x44f7ea
mov dword [ebp - 0x1c], 1
push 0x40ab5c
push dword [ebp + 8]
call dword [sym.imp.MSVCRT.dll__stricmp]
pop ecx
test eax, eax
pop ecx
jne 0x44f805
mov dword [ebp - 0x18], 1
mov eax, dword [ebp + 8]
push SysReAllocStringLen
inc eax
push 0xffffffffffffffff
push eax
push 0x410d48
push edi
call fcn.0042475d
add esp, 0x14
cmp dword [ebp - 0x1c], 0
je 0x44f86c
mov al, byte [0x45fc38]
mov ecx, 0x1ff
mov byte [ebp - 0xc48], al
xor eax, eax
lea edi, [ebp - 0xc47]
push 0x800
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0xc48]
mov ecx, esi
push eax
call fcn.0044484a
lea eax, [ebp - 0x13c]
push eax
lea eax, [ebp - 0xc48]
push eax
call fcn.00426602
pop ecx
pop ecx
jmp 0x44f8c6
cmp dword [ebp - 0x18], 0
jne 0x44f8b5
mov ecx, 0x4619fc
call fcn.00429435
test eax, eax
jne 0x44f8b5
push 0x4010
push 0x40a37c
push 0xc1
mov dword [0x4631e0], 0xc3
call fcn.00424eff
pop ecx
push eax
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_MessageBoxA]
and dword [0x4631e0], 0
jmp case.0x44fb73.32857
lea eax, [ebp - 0x13c]
mov ecx, 0x4776b0
push eax
call fcn.0041a024
test eax, eax
jne 0x44f8eb
push 0x10
push 0x40a37c
push 0x92
call fcn.00424eff
pop ecx
push eax
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp case.0x44fb73.32857
lea eax, [ebp - 0x13c]
push eax
push 0x99
call fcn.00424eff
pop ecx
push eax
lea eax, [ebp - 0xfb8]
push 0x208
push eax
call dword [sym.imp.MSVCRT.dll__snprintf]
add esp, 0x10
lea eax, [ebp - 0xfb8]
push 0x40
push 0x40a37c
jmp 0x44f8dc
mov ecx, 0x499510
call fcn.00442faf
jmp case.0x44fb73.32857
mov ecx, 0x499510
call fcn.004430af
jmp case.0x44fb73.32857
push 0
mov ecx, 0x4776b0
call fcn.00417c6e
jmp case.0x44fb73.32857
add eax, 0xffff7ff2
mov ecx, 0x4776b0
push eax
call fcn.00417d31
jmp case.0x44fb73.32857
call fcn.00425dfe
jmp case.0x44fb73.32857
push 0x410d30
mov ecx, 0x4776b0
call fcn.004181ac
jmp case.0x44fb73.32857
push 0x410d20
jmp 0x44f975
push 0x410d14
jmp 0x44f975
push 0x410d00
jmp 0x44f975
push 0x410cf0
jmp 0x44f975
push 0x410cd8
jmp 0x44f975
push 0x410ccc
jmp 0x44f975
push 0x17
jmp 0x4503be
push 2
jmp 0x450368
mov ecx, 0x4776b0
call fcn.00418ac0
jmp case.0x44fb73.32857
push 3
jmp 0x450368
xor esi, esi
cmp dword [0x475318], esi
je 0x44fa0c
push esi
push esi
push 0x93
call fcn.00424eff
pop ecx
mov edi, 0x45fc60
push eax
mov ecx, edi
call fcn.00412078
push dword [ebx + 4]
mov ecx, edi
call fcn.004120e8
mov ecx, edi
call fcn.004120d4
mov dword [0x475318], eax
push esi
push esi
push esi
push 1
push 0x410cac
jmp 0x44fbe6
mov ecx, 0x4989c8
call fcn.00451ec2
jmp case.0x44fb73.32857
push 1
jmp 0x44fa39
cmp dword [ebx + 0x8e4], 0
je 0x44fa48
push 0
mov ecx, 0x499510
call fcn.00444a17
jmp case.0x44fb73.32857
mov ecx, 0x499510
call fcn.00444a0b
jmp case.0x44fb73.32857
xor eax, eax
cmp dword [0x473ac8], eax
sete al
mov dword [0x473ac8], eax
push 0
mov ecx, 0x497d60
call fcn.004423b2
jmp case.0x44fb73.32857
xor eax, eax
cmp dword [0x473ad4], eax
sete al
mov dword [0x473ad4], eax
jmp 0x44fa67
xor eax, eax
push 1
cmp dword [0x475300], eax
sete al
push eax
call fcn.004482d2
jmp 0x44ff8e
xor eax, eax
cmp dword [0x475328], eax
sete al
mov dword [0x475328], eax
jmp case.0x44fb73.32857
push dword [ebx + 4]
call fcn.00446f25
jmp 0x44fe5e
mov esi, 0x5341b0
mov ecx, esi
call fcn.0042e286
mov ecx, esi
call fcn.00430941
jmp case.0x44fb73.32857
push 7
jmp 0x44f434
cmp dword [0x475310], 0
je case.0x44fb73.32857
and dword [0x475310], 0
or dword [0x4755cc], 0xffffffff
push 0xffffffffffffffff
push 0
mov ecx, 0x4989c8
call fcn.004526e4
jmp case.0x44fb73.32857
push 1
push 0x3ec
mov ecx, ebx
call fcn.00452dda
jmp case.0x44fb73.32857
push 1
push 0x3eb
jmp 0x44fb18
push 1
push 0x3ea
jmp 0x44fb18
xor eax, eax
push eax
push eax
push eax
push 1
push 0xa3
jmp 0x44ff13
mov ecx, 0x80fe
cmp eax, ecx
jg 0x4502d1
je 0x4502ca
lea ecx, [eax - 0x8056]
cmp ecx, 0x89
ja case.0x44fb73.32857
movzx ecx, byte [ecx + 0x4506e8]
jmp dword [ecx*4 + 0x4505ac]
xor eax, eax
cmp dword [0x475324], eax
je 0x44fb8f
push 1
mov ecx, ebx
call fcn.0044eef3
jmp 0x44fba4
push eax
push eax
push 1
push 1
push 0x40a66c
mov ecx, 0x4776b0
call fcn.004160a5
mov ecx, ebx
call fcn.00450ccc
jmp case.0x44fb73.32857
push 1
mov ecx, 0x4776b0
call fcn.00416337
jmp case.0x44fb73.32857
lea eax, [ebp - 0x201c]
push 0x800
push eax
mov ecx, 0x499510
call fcn.0044484a
push 0
push 0
push 1
push 1
lea eax, [ebp - 0x201c]
push eax
mov ecx, 0x4776b0
call fcn.004160a5
jmp case.0x44fb73.32857
push 0
mov ecx, ebx
call fcn.0044eef3
jmp case.0x44fb73.32857
mov ecx, 0x4776b0
call fcn.00416480
jmp case.0x44fb73.32857
mov ecx, 0x4776b0
call fcn.0041642a
jmp case.0x44fb73.32857
mov ecx, 0x4776b0
call fcn.0041652b
jmp case.0x44fb73.32857
mov ecx, 0x4776b0
call fcn.00419e11
jmp case.0x44fb73.32857
push 0
mov ecx, 0x4776b0
call fcn.00419c3c
jmp case.0x44fb73.32857
push 1
jmp 0x44fc41
push 0x41
xor eax, eax
pop ecx
lea edi, [ebp - 0x240]
rep stosd dword es:[edi], eax
mov edi, dword [sym.imp.USER32.dll_LoadStringA]
lea eax, [ebp - 0x240]
push 0x103
push eax
push 0x6f
push dword [0x534a50]
call edi
lea eax, [ebp - 0x448]
push 0x104
push eax
push 0x6e
push dword [0x534a50]
call edi
lea eax, [ebp - 0x240]
push eax
call fcn.00425b7d
mov al, byte [0x45fc38]
push 0x40
mov byte [ebp - 0x13c], al
pop ecx
xor eax, eax
lea edi, [ebp - 0x13b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dword [esp], 0x81800
lea eax, [ebp - 0x13c]
push 0x410ca8
push eax
lea eax, [ebp - 0x240]
push eax
lea eax, [ebp - 0x448]
push eax
push dword [ebx + 4]
push dword [0x534a50]
call fcn.00425bfc
add esp, 0x1c
test eax, eax
je case.0x44fb73.32857
xor eax, eax
push eax
push eax
push eax
push 2
lea eax, [ebp - 0x13c]
jmp 0x44fbe5
mov esi, 0x499510
mov ecx, esi
call fcn.004456c5
push eax
mov ecx, esi
call fcn.00445a10
jmp case.0x44fb73.32857
push 0
mov ecx, 0x4776b0
call fcn.004193af
jmp case.0x44fb73.32857
mov ecx, 0x4776b0
call fcn.0041920e
jmp case.0x44fb73.32857
lea eax, [ebp - 0x344]
push 0x104
push eax
call fcn.0044817b
lea eax, [ebp - 0x344]
push eax
push dword [0x5341b4]
call fcn.00425460
add esp, 0x10
jmp case.0x44fb73.32857
lea eax, [ebp - 0x344]
push 0x104
push eax
call fcn.0044817b
pop ecx
lea eax, [ebp - 0x344]
pop ecx
push 0xa
push 0
push 0
push eax
push 0x40a7e0
push dword [ebx + 4]
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp case.0x44fb73.32857
push 0
mov ecx, 0x4776b0
call fcn.00418eaa
jmp case.0x44fb73.32857
push 7
jmp 0x4503be
mov ecx, 0x499510
call fcn.00445ae2
jmp case.0x44fb73.32857
mov ecx, 0x499510
call fcn.00444f81
jmp case.0x44fb73.32857
mov ecx, 0x4776b0
call fcn.00419d08
jmp case.0x44fb73.32857
xor ebx, ebx
mov edi, 0x4776b0
cmp dword [0x534a88], ebx
je 0x44fe00
push 1
push ebx
mov ecx, 0x5341b0
call fcn.004303b7
jmp 0x44fe07
mov ecx, edi
call fcn.004164d6
mov ecx, 0x463278
call fcn.00434073
mov eax, dword [0x4769f0]
cmp eax, ebx
je 0x44fe27
push eax
call dword [sym.imp.USER32.dll_DestroyWindow]
mov dword [0x4769f0], ebx
push 0xffffffffffffffff
mov ecx, edi
call fcn.00415ed0
mov ecx, 0x4989c8
jmp 0x44fba6
mov ecx, 0x4989c8
call fcn.00455639
jmp case.0x44fb73.32857
mov ecx, 0x4776b0
call fcn.00416659
jmp case.0x44fb73.32857
push eax
call fcn.00453834
pop ecx
jmp case.0x44fb73.32857
push 0
call fcn.0043e107
neg eax
sbb eax, eax
inc eax
push eax
push dword [ebx + 4]
call fcn.0043e375
add esp, 0xc
jmp case.0x44fb73.32857
xor eax, eax
push eax
push eax
push eax
push 1
push 0x410c8c
jmp 0x44fbe6
mov dword [0x475b50], 1
call fcn.0044713a
jmp case.0x44fb73.32857
call fcn.00415087
test eax, eax
je 0x44fede
push 0x24
push 0x40a37c
push 0xad
call fcn.00424eff
pop ecx
push eax
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp eax, 6
jne case.0x44fb73.32857
call fcn.00415178
jmp case.0x44fb73.32857
push 0x40
push 0x40a37c
push 0xb0
call fcn.00424eff
pop ecx
push eax
push dword [ebx + 4]
jmp 0x44f8e0
xor eax, eax
push eax
push eax
push eax
push 1
push 0xa0
jmp 0x44ff13
xor eax, eax
push eax
push eax
push eax
push 1
push 0x9f
call fcn.00424eff
pop ecx
jmp 0x44fbe5
xor eax, eax
push eax
push eax
push eax
push 1
push 0x410c74
jmp 0x44fbe6
xor eax, eax
mov ecx, 0x497d60
cmp dword [0x475308], eax
sete al
mov dword [0x475308], eax
call fcn.0044209b
jmp case.0x44fb73.32857
xor eax, eax
cmp dword [0x473ae0], eax
sete al
mov dword [0x473ae0], eax
jmp case.0x44fb73.32857
xor eax, eax
cmp dword [0x473af4], eax
sete al
mov dword [0x473af4], eax
jmp case.0x44fb73.32857
push 0
push dword [ebx + 4]
call fcn.0043f076
jmp 0x44ff8e
push 0
push dword [ebx + 4]
call fcn.0043f358
pop ecx
jmp 0x44fe5e
xor eax, eax
cmp dword [0x475a24], eax
sete al
mov dword [0x475a24], eax
jmp case.0x44fb73.32857
push 2
pop eax
cmp dword [0x475310], eax
je case.0x44fb73.32857
or dword [0x4755cc], 0xffffffff
push 0xffffffffffffffff
mov dword [0x475310], eax
push eax
jmp 0x44fb02
push 1
push 0x3e9
jmp 0x44fb18
push 1
push 0x3ed
jmp 0x44fb18
mov ecx, 0x5341b0
call fcn.004307d5
jmp case.0x44fb73.32857
mov ecx, 0x5341b0
call fcn.0043077f
jmp case.0x44fb73.32857
push 0
lea ecx, [ebx + 0xae4]
mov dword [ebx + 0xafc], 0xba
call fcn.004487e5
mov esi, 0x499510
mov ecx, esi
call fcn.004456c5
push eax
mov ecx, esi
call fcn.0044469c
mov ecx, 0x4989c8
call fcn.00453504
jmp case.0x44fb73.32857
mov dword [ebx + 0xae0], 0x78
and dword [ebx + 0xadc], 0
push 0
lea ecx, [ebx + 0xac8]
call fcn.004487e5
jmp case.0x44fb73.32857
mov dword [ebx + 0xb18], 0x78
and dword [ebx + 0xb14], 0
push 0
lea ecx, [ebx + 0xb00]
jmp 0x450055
xor eax, eax
mov ecx, ebx
cmp dword [0x473aa0], eax
sete al
mov dword [0x473aa0], eax
call fcn.004495cc
jmp case.0x44fb73.32857
push 0
push 0x410c6c
mov ecx, 0x4776b0
call fcn.00418fc3
jmp case.0x44fb73.32857
push 0
push 0x410c64
jmp 0x45009d
push 0
push 0x410c5c
jmp 0x45009d
push 0
push 0x40a774
jmp 0x45009d
push 0
push 0x410c50
jmp 0x45009d
push 0
push 0x410c44
jmp 0x45009d
push 0
push 0x410c38
jmp 0x45009d
push 0
push 0x410c2c
jmp 0x45009d
push 0xffffffffffffffff
jmp 0x44f5d4
push 2
mov ecx, 0x5341b0
call fcn.0045cb78
jmp case.0x44fb73.32857
push 3
jmp 0x4500f4
call fcn.0041248f
jmp case.0x44fb73.32857
push 0
jmp 0x450117
push 1
call fcn.0041234f
jmp 0x44fe5e
push dword [ebx + 4]
call fcn.004138b2
jmp 0x44fe5e
mov ecx, ebx
call fcn.0044ed8d
test byte [0x4752f8], 1
je 0x45014a
and dword [0x4752f8], 0xfffffffe
jmp case.0x44fb73.32857
or dword [0x4752f8], 1
jmp case.0x44fb73.32857
mov ecx, ebx
call fcn.0044ed8d
test byte [0x4752f8], 4
je 0x450172
and dword [0x4752f8], 0xfffffffb
jmp case.0x44fb73.32857
or dword [0x4752f8], 4
jmp case.0x44fb73.32857
mov ecx, ebx
call fcn.0044ed8d
test byte [0x4752f8], 8
je 0x45019a
and dword [0x4752f8], 0xfffffff7
jmp case.0x44fb73.32857
or dword [0x4752f8], 8
jmp case.0x44fb73.32857
mov ecx, ebx
call fcn.0044ed8d
test byte [0x4752f8], 2
je 0x4501c2
and dword [0x4752f8], 0xfffffffd
jmp case.0x44fb73.32857
or dword [0x4752f8], 2
jmp case.0x44fb73.32857
mov ecx, ebx
call fcn.0044ed8d
test byte [0x4752f8], 0x10
je 0x4501ea
and dword [0x4752f8], 0xffffffef
jmp case.0x44fb73.32857
or dword [0x4752f8], 0x10
jmp case.0x44fb73.32857
push 0
mov ecx, 0x4776b0
call fcn.00416552
jmp case.0x44fb73.32857
push dword [0x4757fc]
lea eax, [ebp - 0xdb0]
push 0x410c28
push 0x104
push eax
call dword [sym.imp.MSVCRT.dll__snprintf]
add esp, 0x10
lea eax, [ebp - 0xdb0]
lea ecx, [ebp + 8]
push eax
call fcn.0042c42c
and dword [ebp - 4], 0
push 0xb9
call fcn.00424eff
pop ecx
push eax
lea ecx, [ebp + 8]
push dword [ebx + 4]
call fcn.0042c521
cmp eax, 1
jne 0x45026b
lea ecx, [ebp + 8]
call fcn.0042c542
push eax
call dword [sym.imp.MSVCRT.dll_atoi]
pop ecx
mov dword [0x4757fc], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.0042c485
jmp case.0x44fb73.32857
push 4
jmp 0x44f434
push 0
push 0
push 0x410c04
mov ecx, ebx
call fcn.004507e7
jmp case.0x44fb73.32857
push 0
push 0
push 0x410bd8
jmp 0x45028c
push 0
push 0
push 0x410bb0
jmp 0x45028c
push 0
push 0
push 0x410b8c
jmp 0x45028c
push 0x410c04
mov ecx, ebx
call fcn.00450772
jmp case.0x44fb73.32857
push 0xa
jmp 0x4503be
mov ecx, 0xe124
cmp eax, ecx
jg 0x450374
je 0x450312
sub eax, 0xe106
je 0x45030b
dec eax
je case.0x44f42b.12387
sub eax, 0x1b
je 0x4502fd
dec eax
jne case.0x44fb73.32857
push 0xb
jmp 0x4503be
push 0xc
jmp 0x4503be
push 6
jmp 0x4503be
push 8
jmp 0x4503be
mov ecx, 0x4989c8
call fcn.00451adf
test eax, eax
je 0x450366
mov al, byte [0x45fc38]
mov ecx, esi
mov byte [ebp - 0xc48], al
xor eax, eax
lea edi, [ebp - 0xc47]
push 0x800
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0xc48]
push eax
push dword [ebx + 0xb20]
call dword [sym.imp.USER32.dll_GetWindowTextA]
push 0
push 0
lea eax, [ebp - 0xc48]
push eax
mov ecx, ebx
call fcn.004516a5
jmp case.0x44fb73.32857
push 1
mov ecx, 0x4776b0
call fcn.00417bb0
jmp case.0x44fb73.32857
sub eax, 0xe125
je 0x4503bc
sub eax, 5
je 0x4503b8
sub eax, 0x16
je 0x4503a7
dec eax
jne case.0x44fb73.32857
xor esi, esi
push esi
push esi
push 0x1f
push dword [0x4992b4]
call dword [sym.imp.USER32.dll_SendMessageA]
push esi
mov ecx, 0x5341b0
call fcn.004306e0
jmp case.0x44fb73.32857
push 0x410b80
mov ecx, 0x5341b0
call fcn.0043035f
jmp case.0x44fb73.32857
push 0x11
jmp 0x4503be
push 0xd
mov ecx, 0x4776b0
call fcn.00417c50
push 0
mov ecx, 0x45fc40
call fcn.00411c6f
push 0
mov ecx, 0x476a00
call fcn.0042a4d7
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 4