Function at 0x44dbcd
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x440
mov eax, dword [0x4ce724]
xor eax, ebp
mov dword [ebp - 8], eax
push 8
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov dword [ebp - 4], eax
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0x440], ecx
cmp dword [ebp - 0x440], 0x459
jg 0x44d4d0
cmp dword [ebp - 0x440], 0x459
je 0x44dbf4
mov edx, dword [ebp - 0x440]
sub edx, 1
mov dword [ebp - 0x440], edx
cmp dword [ebp - 0x440], 7
ja case.0x44d4c9.4
mov eax, dword [ebp - 0x440]
jmp dword [eax*4 + 0x44e0b4]
jmp case.0x44d4c9.4
cmp dword [ebp - 4], 0
je 0x44d90d
push 0x51
mov ecx, dword [ebp - 4]
add ecx, 0x434
push ecx
push 0x462
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_GetDlgItemTextW]
push 0x51
mov eax, dword [ebp - 4]
add eax, 0x4d6
push eax
push 0x464
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_GetDlgItemTextW]
mov byte [ebp - 0x1ac], 0
xor edx, edx
mov dword [ebp - 0x1ab], edx
mov dword [ebp - 0x1a7], edx
mov dword [ebp - 0x1a3], edx
mov dword [ebp - 0x19f], edx
mov dword [ebp - 0x19b], edx
mov dword [ebp - 0x197], edx
mov dword [ebp - 0x193], edx
mov dword [ebp - 0x18f], edx
mov word [ebp - 0x18b], dx
mov byte [ebp - 0x189], dl
mov dword [ebp - 0x1b0], 0
mov eax, dword [ebp - 4]
movzx ecx, byte [eax + 0x18]
cmp ecx, 1
jne 0x44d634
push 0x24
lea edx, [ebp - 0x1ac]
push edx
push 0x459
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_GetDlgItemTextA]
mov ecx, dword [ebp - 4]
movzx edx, byte [ecx + 0x20]
cmp edx, 2
je 0x44d5a4
mov eax, dword [ebp - 4]
movzx ecx, byte [eax + 0x20]
cmp ecx, 3
jne 0x44d5cf
push 1
push 0x1d
push 0
push 0x104
mov edx, dword [ebp - 4]
add edx, 0x24
push edx
push 0
lea eax, [ebp - 0x1ac]
push eax
call fcn.0044b9c0
add esp, 0x1c
mov dword [ebp - 0x1b0], eax
jmp 0x44d62f
mov ecx, dword [ebp - 4]
movzx edx, byte [ecx + 0x20]
cmp edx, 1
jne 0x44d606
push 1
push 0x18
push 0
push 0x104
mov eax, dword [ebp - 4]
add eax, 0x24
push eax
push 0
lea ecx, [ebp - 0x1ac]
push ecx
call fcn.0044b9c0
add esp, 0x1c
mov dword [ebp - 0x1b0], eax
jmp 0x44d62f
push 1
push 0
push 0
push 0x104
mov edx, dword [ebp - 4]
add edx, 0x24
push edx
push 0
lea eax, [ebp - 0x1ac]
push eax
call fcn.0044b9c0
add esp, 0x1c
mov dword [ebp - 0x1b0], eax
jmp 0x44d78b
mov ecx, dword [ebp - 4]
movzx edx, byte [ecx + 0x18]
cmp edx, 2
jne 0x44d78b
mov eax, dword [ebp - 4]
movzx ecx, byte [eax + 0x20]
cmp ecx, 2
je 0x44d660
mov edx, dword [ebp - 4]
movzx eax, byte [edx + 0x20]
cmp eax, 3
jne 0x44d707
mov dword [ebp - 0x1b8], 0
mov dword [ebp - 0x1bc], 0
jmp 0x44d685
mov ecx, dword [ebp - 0x1bc]
add ecx, 1
mov dword [ebp - 0x1bc], ecx
cmp dword [ebp - 0x1bc], 7
jge 0x44d6d9
mov edx, 0x24
sub edx, dword [ebp - 0x1b8]
push edx
mov eax, dword [ebp - 0x1b8]
lea ecx, [ebp + eax - 0x1ac]
push ecx
mov edx, dword [ebp - 0x1bc]
add edx, 0x45a
push edx
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_GetDlgItemTextA]
mov dword [ebp - 0x1b4], eax
mov ecx, dword [ebp - 0x1b8]
add ecx, dword [ebp - 0x1b4]
mov dword [ebp - 0x1b8], ecx
jmp 0x44d676
push 1
push 0x1d
push 0
push 0x104
mov edx, dword [ebp - 4]
add edx, 0x24
push edx
push 0
lea eax, [ebp - 0x1ac]
push eax
call fcn.0044b9c0
add esp, 0x1c
mov dword [ebp - 0x1b0], eax
jmp 0x44d78b
mov dword [ebp - 0x1c0], 0
jmp 0x44d722
mov ecx, dword [ebp - 0x1c0]
add ecx, 1
mov dword [ebp - 0x1c0], ecx
cmp dword [ebp - 0x1c0], 6
jae 0x44d762
mov edx, dword [ebp - 0x1c0]
shl edx, 2
mov eax, 0x1e
sub eax, edx
push eax
mov ecx, dword [ebp - 0x1c0]
lea edx, [ebp + ecx*4 - 0x1ac]
push edx
mov eax, dword [ebp - 0x1c0]
add eax, 0x45a
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_GetDlgItemTextA]
jmp 0x44d713
push 1
push 0x18
push 0
push 0x104
mov edx, dword [ebp - 4]
add edx, 0x24
push edx
push 0
lea eax, [ebp - 0x1ac]
push eax
call fcn.0044b9c0
add esp, 0x1c
mov dword [ebp - 0x1b0], eax
push 0x40
lea ecx, [ebp - 0x88]
push ecx
push 0x258
mov edx, dword [ebp - 4]
mov eax, dword [edx]
push eax
call dword [sym.imp.USER32.dll_LoadStringW]
push 0x80
lea ecx, [ebp - 0x188]
push ecx
push 0x2bf
mov edx, dword [ebp - 4]
mov eax, dword [edx]
push eax
call dword [sym.imp.USER32.dll_LoadStringW]
cmp dword [ebp - 0x1b0], 0
jne 0x44d8f3
lea ecx, [ebp - 0x1e8]
push ecx
lea edx, [ebp - 0x1ac]
push edx
mov eax, dword [ebp - 4]
add eax, 8
sub esp, 0x10
mov ecx, esp
mov edx, dword [eax]
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
call fcn.0048a582
mov dword [ebp - 0x1b0], eax
mov ecx, dword [ebp - 0x1b0]
push ecx
lea edx, [ebp - 0x1ac]
push edx
push 0x4bbfa0
call fcn.004573f0
add esp, 0xc
cmp dword [ebp - 0x1b0], 0
jne 0x44d8d7
mov eax, dword [ebp - 4]
movzx ecx, byte [eax + 0x1e]
push ecx
mov edx, dword [ebp - 4]
movzx eax, byte [edx + 0x1f]
push eax
movzx ecx, byte [ebp - 0x1e6]
push ecx
push str.SNV3GetDlg_OnCommand____ProductCode_d_ProductLanguage_d_ProductVersion_d
call fcn.004573f0
add esp, 0x10
mov edx, dword [ebp - 4]
movzx eax, byte [edx + 0x1d]
test eax, eax
je 0x44d873
movzx ecx, byte [ebp - 0x1e6]
mov edx, dword [ebp - 4]
movzx eax, byte [edx + 0x1d]
cmp ecx, eax
jne 0x44d8ad
mov ecx, dword [ebp - 4]
movzx edx, byte [ecx + 0x1f]
test edx, edx
je 0x44d890
movzx eax, byte [ebp - 0x1e5]
mov ecx, dword [ebp - 4]
movzx edx, byte [ecx + 0x1f]
cmp eax, edx
jne 0x44d8ad
mov eax, dword [ebp - 4]
movzx ecx, byte [eax + 0x1e]
test ecx, ecx
je 0x44d8c9
movzx edx, byte [ebp - 0x1e8]
mov eax, dword [ebp - 4]
movzx ecx, byte [eax + 0x1e]
cmp edx, ecx
je 0x44d8c9
push 0
lea edx, [ebp - 0x88]
push edx
lea eax, [ebp - 0x188]
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x44d8d5
push 1
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_EndDialog]
jmp 0x44d8f1
push 0
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0x188]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x44d90d
push 0
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0x188]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_MessageBoxW]
mov eax, 1
jmp 0x44e0a4
cmp dword [ebp - 4], 0
je 0x44db4a
push 0x51
mov eax, dword [ebp - 4]
add eax, 0x434
push eax
push 0x462
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_GetDlgItemTextW]
push 0x51
mov edx, dword [ebp - 4]
add edx, 0x4d6
push edx
push 0x464
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_GetDlgItemTextW]
mov byte [ebp - 0x390], 0
xor ecx, ecx
mov dword [ebp - 0x38f], ecx
mov dword [ebp - 0x38b], ecx
mov dword [ebp - 0x387], ecx
mov dword [ebp - 0x383], ecx
mov dword [ebp - 0x37f], ecx
mov dword [ebp - 0x37b], ecx
mov dword [ebp - 0x377], ecx
mov dword [ebp - 0x373], ecx
mov word [ebp - 0x36f], cx
mov byte [ebp - 0x36d], cl
mov edx, dword [ebp - 4]
movzx eax, byte [edx + 0x20]
xor ecx, ecx
cmp eax, 2
sete cl
push ecx
push 0
push 0
push 0x24
lea edx, [ebp - 0x390]
push edx
push 0
mov eax, dword [ebp - 4]
add eax, 0x128
push eax
call fcn.0044b9c0
add esp, 0x1c
mov dword [ebp - 0x36c], eax
push 0x40
lea ecx, [ebp - 0x268]
push ecx
push 0x258
mov edx, dword [ebp - 4]
mov eax, dword [edx]
push eax
call dword [sym.imp.USER32.dll_LoadStringW]
push 0x80
lea ecx, [ebp - 0x368]
push ecx
push 0x2bf
mov edx, dword [ebp - 4]
mov eax, dword [edx]
push eax
call dword [sym.imp.USER32.dll_LoadStringW]
cmp dword [ebp - 0x36c], 0
jne 0x44db30
lea ecx, [ebp - 0x3b8]
push ecx
lea edx, [ebp - 0x390]
push edx
mov eax, dword [ebp - 4]
add eax, 8
sub esp, 0x10
mov ecx, esp
mov edx, dword [eax]
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
call fcn.0048a582
mov dword [ebp - 0x36c], eax
mov ecx, dword [ebp - 0x36c]
push ecx
lea edx, [ebp - 0x390]
push edx
push str.SNV3GetDlg_OnCommand____SerialNumber_Validate__s____d
call fcn.004573f0
add esp, 0xc
cmp dword [ebp - 0x36c], 0
jne 0x44db14
mov eax, dword [ebp - 4]
movzx ecx, byte [eax + 0x1d]
test ecx, ecx
je 0x44da95
movzx edx, byte [ebp - 0x3b6]
mov eax, dword [ebp - 4]
movzx ecx, byte [eax + 0x1d]
cmp edx, ecx
jne 0x44dacf
mov edx, dword [ebp - 4]
movzx eax, byte [edx + 0x1f]
test eax, eax
je 0x44dab2
movzx ecx, byte [ebp - 0x3b5]
mov edx, dword [ebp - 4]
movzx eax, byte [edx + 0x1f]
cmp ecx, eax
jne 0x44dacf
mov ecx, dword [ebp - 4]
movzx edx, byte [ecx + 0x1e]
test edx, edx
je 0x44daeb
movzx eax, byte [ebp - 0x3b8]
mov ecx, dword [ebp - 4]
movzx edx, byte [ecx + 0x1e]
cmp eax, edx
je 0x44daeb
push 0
lea eax, [ebp - 0x268]
push eax
lea ecx, [ebp - 0x368]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x44db12
lea eax, [ebp - 0x390]
push eax
push 0x104
mov ecx, dword [ebp - 4]
add ecx, 0x24
push ecx
call fcn.0046a4fd
add esp, 0xc
push 1
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_EndDialog]
jmp 0x44db2e
push 0
lea eax, [ebp - 0x268]
push eax
lea ecx, [ebp - 0x368]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x44db4a
push 0
lea eax, [ebp - 0x268]
push eax
lea ecx, [ebp - 0x368]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_MessageBoxW]
mov eax, 1
jmp 0x44e0a4
push 3
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_EndDialog]
mov eax, 1
jmp 0x44e0a4
push 2
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_EndDialog]
mov eax, 1
jmp 0x44e0a4
push str.SNV3GetDlg_OnCommand___IDPASTE
call fcn.00456fc0
add esp, 4
cmp dword [ebp - 4], 0
je 0x44dbc3
push 0
push 0
push 0x302
mov edx, dword [ebp - 4]
movzx eax, byte [edx + 0x18]
sub eax, 1
neg eax
sbb eax, eax
neg eax
add eax, 0x459
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, 1
jmp 0x44e0a4
mov edx, dword [ebp - 4]
add edx, 0x22c
je 0x44dbf4
push 5
push 0
push 0
mov eax, dword [ebp - 4]
add eax, 0x22c
push eax
push 0x4bc09c
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
cmp dword [ebp + 0x14], 0x300
jne 0x44dd6b
mov byte [ebp - 0x3e0], 0
xor ecx, ecx
mov dword [ebp - 0x3df], ecx
mov dword [ebp - 0x3db], ecx
mov dword [ebp - 0x3d7], ecx
mov dword [ebp - 0x3d3], ecx
mov dword [ebp - 0x3cf], ecx
mov dword [ebp - 0x3cb], ecx
mov dword [ebp - 0x3c7], ecx
mov dword [ebp - 0x3c3], ecx
mov word [ebp - 0x3bf], cx
mov byte [ebp - 0x3bd], cl
push 0x24
lea edx, [ebp - 0x3e0]
push edx
push 0x459
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_GetDlgItemTextA]
mov dword [ebp - 0x3e8], eax
mov ecx, dword [ebp - 4]
movzx edx, byte [ecx + 0x20]
cmp edx, 2
je 0x44dc7d
mov eax, dword [ebp - 4]
movzx ecx, byte [eax + 0x20]
cmp ecx, 3
jne 0x44dc89
mov dword [ebp - 0x3e4], 0x1d
jmp 0x44dcab
mov edx, dword [ebp - 4]
movzx eax, byte [edx + 0x20]
cmp eax, 1
jne 0x44dca1
mov dword [ebp - 0x3e4], 0x18
jmp 0x44dcab
mov dword [ebp - 0x3e4], 0
mov dword [ebp - 0x3bc], 0
cmp dword [ebp - 4], 0
je 0x44dd11
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x19]
and edx, 2
je 0x44dd11
cmp dword [ebp - 0x3e8], 0x18
jb 0x44dd0f
mov eax, dword [ebp - 4]
movzx ecx, byte [eax + 0x20]
xor edx, edx
cmp ecx, 2
sete dl
push edx
mov eax, dword [ebp - 0x3e4]
push eax
push 0
push 0x24
lea ecx, [ebp - 0x3e0]
push ecx
push 0
lea edx, [ebp - 0x3e0]
push edx
call fcn.0044b9c0
add esp, 0x1c
neg eax
sbb eax, eax
add eax, 1
mov dword [ebp - 0x3bc], eax
jmp 0x44dd51
mov eax, dword [ebp - 4]
movzx ecx, byte [eax + 0x20]
xor edx, edx
cmp ecx, 2
sete dl
push edx
mov eax, dword [ebp - 0x3e4]
push eax
push 0
push 0x24
lea ecx, [ebp - 0x3e0]
push ecx
push 0
lea edx, [ebp - 0x3e0]
push edx
call fcn.0044b9c0
add esp, 0x1c
neg eax
sbb eax, eax
add eax, 1
mov dword [ebp - 0x3bc], eax
mov eax, dword [ebp - 0x3bc]
push eax
push 1
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
mov eax, 1
jmp 0x44e0a4
cmp dword [ebp + 0xc], 0x45a
jl 0x44e0a2
cmp dword [ebp + 0xc], 0x461
jge 0x44e0a2
cmp dword [ebp + 0x14], 0x300
jne 0x44e09b
mov edx, dword [ebp - 4]
movzx eax, byte [edx + 0x20]
cmp eax, 2
je 0x44ddb8
mov ecx, dword [ebp - 4]
movzx edx, byte [ecx + 0x20]
cmp edx, 3
jne 0x44df38
mov byte [ebp - 0x40c], 0
xor eax, eax
mov dword [ebp - 0x40b], eax
mov dword [ebp - 0x407], eax
mov dword [ebp - 0x403], eax
mov dword [ebp - 0x3ff], eax
mov dword [ebp - 0x3fb], eax
mov dword [ebp - 0x3f7], eax
mov dword [ebp - 0x3f3], eax
mov byte [ebp - 0x3ef], al
mov dword [ebp - 0x410], 0
mov dword [ebp - 0x414], 0
jmp 0x44de16
mov ecx, dword [ebp - 0x414]
add ecx, 1
mov dword [ebp - 0x414], ecx
cmp dword [ebp - 0x414], 7
jge 0x44deb7
mov edx, 0x1e
sub edx, dword [ebp - 0x410]
push edx
mov eax, dword [ebp - 0x410]
lea ecx, [ebp + eax - 0x40c]
push ecx
mov edx, dword [ebp - 0x414]
add edx, 0x45a
push edx
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_GetDlgItemTextA]
mov dword [ebp - 0x3ec], eax
cmp dword [ebp - 4], 0
je 0x44dea0
mov ecx, dword [ebp - 4]
movzx edx, byte [ecx + 0x23]
test edx, edx
jne 0x44dea0
mov eax, dword [ebp - 0x414]
add eax, 0x45a
cmp dword [ebp + 0xc], eax
jne 0x44dea0
mov ecx, dword [ebp - 0x414]
mov edx, dword [ebp - 0x3ec]
cmp edx, dword [ecx*4 + 0x4ce5f0]
jne 0x44dea0
push 0
push 0
push 0x28
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
mov ecx, dword [ebp - 0x410]
add ecx, dword [ebp - 0x3ec]
mov dword [ebp - 0x410], ecx
jmp 0x44de07
cmp dword [ebp - 4], 0
je 0x44deea
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x19]
and eax, 2
je 0x44deea
xor ecx, ecx
cmp dword [ebp - 0x410], 0x1d
sete cl
push ecx
push 1
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
jmp 0x44df33
mov eax, dword [ebp - 4]
movzx ecx, byte [eax + 0x20]
xor edx, edx
cmp ecx, 2
sete dl
push edx
push 0x1d
push 0
push 0x1e
lea eax, [ebp - 0x40c]
push eax
push 0
lea ecx, [ebp - 0x40c]
push ecx
call fcn.0044b9c0
add esp, 0x1c
neg eax
sbb eax, eax
add eax, 1
push eax
push 1
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
jmp 0x44e09b
mov byte [ebp - 0x434], 0
xor eax, eax
mov dword [ebp - 0x433], eax
mov dword [ebp - 0x42f], eax
mov dword [ebp - 0x42b], eax
mov dword [ebp - 0x427], eax
mov dword [ebp - 0x423], eax
mov dword [ebp - 0x41f], eax
mov dword [ebp - 0x438], 0
mov dword [ebp - 0x43c], 0
jmp 0x44df8a
mov ecx, dword [ebp - 0x43c]
add ecx, 1
mov dword [ebp - 0x43c], ecx
cmp dword [ebp - 0x43c], 6
jge 0x44e01f
mov edx, 0x19
sub edx, dword [ebp - 0x438]
push edx
mov eax, dword [ebp - 0x438]
lea ecx, [ebp + eax - 0x434]
push ecx
mov edx, dword [ebp - 0x43c]
add edx, 0x45a
push edx
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_GetDlgItemTextA]
mov dword [ebp - 0x418], eax
cmp dword [ebp - 4], 0
je 0x44e008
mov ecx, dword [ebp - 4]
movzx edx, byte [ecx + 0x23]
test edx, edx
jne 0x44e008
mov eax, dword [ebp - 0x43c]
add eax, 0x45a
cmp dword [ebp + 0xc], eax
jne 0x44e008
cmp dword [ebp - 0x418], 4
jne 0x44e008
push 0
push 0
push 0x28
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_PostMessageW]
mov edx, dword [ebp - 0x438]
add edx, dword [ebp - 0x418]
mov dword [ebp - 0x438], edx
jmp 0x44df7b
cmp dword [ebp - 4], 0
je 0x44e052
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x19]
and ecx, 2
je 0x44e052
xor edx, edx
cmp dword [ebp - 0x438], 0x18
sete dl
push edx
push 1
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
jmp 0x44e09b
mov ecx, dword [ebp - 4]
movzx edx, byte [ecx + 0x20]
xor eax, eax
cmp edx, 2
sete al
push eax
push 0x18
push 0
push 0x19
lea ecx, [ebp - 0x434]
push ecx
push 0
lea edx, [ebp - 0x434]
push edx
call fcn.0044b9c0
add esp, 0x1c
neg eax
sbb eax, eax
add eax, 1
push eax
push 1
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
mov eax, 1
jmp 0x44e0a4
xor eax, eax
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.00467d4f
mov esp, ebp
pop ebp
ret