Function at 0x44067c
Capabilities:
Check for time delay via gettickcount
Log keystrokes via polling

Disassembly:
push ebp
lea ebp, [esp - 0x68]
sub esp, 0x4e0
push ebx
push esi
mov esi, dword [sym.imp.USER32.dll_GetScrollPos]
push edi
xor ebx, ebx
push ebx
push dword [0x508d30]
call esi
xor edi, edi
inc edi
push edi
push dword [0x508d30]
mov dword [ebp + 0x64], eax
call esi
mov dword [ebp + 0x60], eax
mov eax, dword [ebp + 0x78]
cmp eax, dword [0x508d3c]
je 0x4417bb
cmp eax, dword [0x508d44]
je 0x4417bb
mov edx, dword [0x508d4c]
cmp eax, edx
jne 0x440729
cmp dword [ebp + 0x7c], 0x300
jne 0x440729
push edx
call dword [sym.imp.USER32.dll_GetWindowTextLengthW]
mov esi, eax
cmp esi, ebx
je 0x4406fc
cmp dword [0x514a4c], ebx
jne 0x4406f5
cmp esi, 3
jg 0x4406fc
mov edi, 0x1f4
jmp 0x4406ff
push 0x64
pop edi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 0x4376b3
push edi
push 0x19091969
push dword [ebp + 0x70]
mov dword [0x508cf8], eax
call dword [sym.imp.USER32.dll_SetTimer]
mov dword [0x514a4c], esi
jmp 0x441861
cmp eax, dword [0x508d58]
jne 0x44073c
push ebx
call fcn.0043a820
jmp 0x441861
cmp eax, dword [0x508d5c]
jne 0x440747
push edi
jmp 0x440732
cmp eax, dword [0x508d30]
jne 0x440756
mov eax, edi
jmp 0x441863
mov esi, dword [ebp + 0x74]
mov ecx, 0x9d85
cmp esi, ecx
jg 0x440d24
je 0x440d0d
lea eax, [ecx - 0x72]
cmp esi, eax
jg 0x4409f2
je case.0x44143a.41013
add eax, 0xffffffa6
cmp esi, eax
jg 0x4408f6
je 0x4408ec
mov eax, 0x9ca4
cmp esi, eax
jg 0x440870
je 0x44085e
mov eax, esi
dec eax
je 0x44083b
dec eax
je 0x440837
sub eax, 5
je case.0x44143a.41017
sub eax, 0x9c84
jne case.0x44143a.41018
mov esi, 0x508dd8
push esi
call fcn.00426b5e
push ebx
push 0x426b8a
push dword [ebp + 0x70]
push 0xbb8
push dword [0x508d20]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
cmp eax, 1
jne 0x44160c
push esi
call fcn.00426b74
mov eax, dword [0x508ddc]
cdq
and edx, 0xff
add eax, edx
sar eax, 8
dec eax
mov dword [0x4a0af0], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 1
push 0xfade
push 0x113
push dword [0x508d24]
mov dword [0x509690], eax
call fcn.0043a1f8
jmp case.0x44143a.41017
push ebx
push edi
jmp 0x44084e
push 0xd
call dword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jge 0x44160c
push ebx
push ebx
push 0x1116
push dword [0x508d2c]
jmp 0x44156c
push ebx
push ebx
push 0x10
push dword [ebp + 0x70]
call dword [sym.imp.USER32.dll_PostMessageW]
jmp case.0x44143a.41017
mov eax, esi
sub eax, 0x9cae
je 0x4408d3
sub eax, 5
je 0x440891
sub eax, 5
jne case.0x44143a.41018
call fcn.0043c0ae
jmp case.0x44143a.41017
push ebx
push ebx
push 0x7f02
call fcn.004336e7
call fcn.004319a1
push 0x451138
push 0x508110
call fcn.004287e4
test eax, eax
je 0x4408c2
push ebx
push ebx
push 0x10
push dword [ebp + 0x70]
call dword [sym.imp.USER32.dll_PostMessageW]
push ebx
push ebx
push 0x7f00
call fcn.004336e7
jmp case.0x44143a.41017
cmp dword [0x508cd4], ebx
jne case.0x44143a.41017
push str.Refresh...
push ebx
push 1
jmp 0x440c54
call fcn.0043c1f1
jmp case.0x44143a.41017
mov eax, 0x9d09
cmp esi, eax
jg 0x440947
je 0x440931
mov eax, esi
sub eax, 0x9cbd
je case.0x44143a.41016
dec eax
je case.0x44143a.41017
dec eax
je case.0x44143a.41015
sub eax, 0x49
jne case.0x44143a.41018
push dword [0x509684]
call fcn.00434142
jmp case.0x44143a.41017
push dword [0x509684]
push dword [0x508d2c]
call fcn.00439585
jmp case.0x44143a.41017
mov eax, esi
sub eax, 0x9d0a
je 0x4414bd
dec eax
je 0x4417b0
sub eax, 7
je 0x441401
mov edi, dword [sym.imp.USER32.dll_GetMenuStringW]
lea eax, [esi - 0xa4d8]
cmp eax, 0x62
ja 0x4409a2
push ebx
push 0x104
lea eax, [ebp - 0x280]
push eax
push esi
push dword [0x50b408]
call edi
test eax, eax
je 0x4409a2
push ebx
lea eax, [ebp - 0x280]
push eax
call fcn.0042a69b
push eax
call fcn.0042dcf0
lea eax, [esi - 0xa53c]
cmp eax, 0x62
ja case.0x44143a.41017
push dword [0x508d24]
call dword [sym.imp.USER32.dll_UpdateWindow]
push ebx
push 0x200
lea eax, [ebp - 0x478]
push eax
push esi
push dword [0x50b40c]
call edi
test eax, eax
je 0x44160c
lea eax, [ebp - 0x478]
push eax
call fcn.0042a69b
push eax
call fcn.0042ea1f
jmp case.0x44143a.41017
lea eax, [esi - 0x9d6c]
cmp eax, 0x18
ja case.0x44143a.41018
jmp dword [eax*4 + 0x441870]
xor eax, eax
cmp dword [0x4a0b08], ebx
sete al
mov dword [0x4a0b08], eax
push eax
push esi
call fcn.00431e5c
jmp case.0x44143a.41017
xor eax, eax
cmp dword [0x50b380], ebx
sete al
mov dword [0x50b380], eax
push eax
push esi
call fcn.00431e5c
mov dword [0x50973c], ebx
mov dword [0x509740], ebx
call fcn.00416986
jmp case.0x44143a.41017
xor eax, eax
cmp dword [0x50b384], ebx
sete al
mov dword [0x50b384], eax
jmp 0x440a34
xor eax, eax
cmp dword [0x50b388], ebx
sete al
mov dword [0x50b388], eax
jmp 0x440a34
xor eax, eax
cmp dword [0x50b3a4], ebx
sete al
mov dword [0x50b3a4], eax
jmp 0x440a34
xor eax, eax
cmp dword [0x50b3a8], ebx
sete al
push eax
push esi
mov dword [0x50b3a8], eax
call fcn.00431e5c
mov eax, dword [0x50b36c]
cmp eax, ebx
je 0x44160c
xor edi, edi
cmp dword [eax + 0xc], ebx
jle 0x44160c
push 0x14
pop esi
mov ecx, dword [esi + eax]
cmp ecx, ebx
je 0x440afc
mov edx, dword [ecx + 0x14]
cmp edx, 9
jne 0x440ad8
cmp dword [ecx + 0xfd0], ebx
je 0x440ad8
cmp dword [ecx + 0xfc8], ebx
jne 0x440af0
cmp edx, 1
jne 0x440afc
mov edx, dword [ecx + 0xfd0]
cmp edx, ebx
je 0x440afc
cmp dword [edx + 0x3a34], 1
jne 0x440afc
push 1
call fcn.0040b3b9
mov eax, dword [0x50b36c]
inc edi
add esi, 4
cmp edi, dword [eax + 0xc]
jl 0x440ab9
jmp case.0x44143a.41017
xor eax, eax
cmp dword [0x50b3ac], ebx
sete al
push eax
push esi
mov dword [0x50b3ac], eax
call fcn.00431e5c
mov eax, dword [0x50b36c]
cmp eax, ebx
je 0x44160c
xor edi, edi
cmp dword [eax + 0xc], ebx
jle 0x44160c
push 0x14
pop esi
mov ecx, dword [esi + eax]
cmp ecx, ebx
je 0x440b7f
mov edx, dword [ecx + 0x14]
cmp edx, 9
jne 0x440b5b
cmp dword [ecx + 0xfd0], ebx
je 0x440b5b
cmp dword [ecx + 0xfc8], ebx
jne 0x440b73
cmp edx, 1
jne 0x440b7f
mov edx, dword [ecx + 0xfd0]
cmp edx, ebx
je 0x440b7f
cmp dword [edx + 0x3a34], 1
jne 0x440b7f
push 1
call fcn.0040b3b9
mov eax, dword [0x50b36c]
inc edi
add esi, 4
cmp edi, dword [eax + 0xc]
jl 0x440b3c
jmp case.0x44143a.41017
xor eax, eax
cmp dword [0x50b3b8], ebx
sete al
mov dword [0x50b3b8], eax
push eax
push esi
call fcn.00431e5c
push ebx
call fcn.0043b9da
jmp case.0x44143a.41017
xor eax, eax
cmp dword [0x50b3bc], ebx
sete al
mov dword [0x50b3bc], eax
jmp 0x440b9d
xor eax, eax
cmp dword [0x50b3b0], ebx
sete al
push eax
push esi
mov dword [0x50b3b0], eax
call fcn.00431e5c
mov eax, dword [0x50b36c]
cmp eax, ebx
je 0x44160c
xor edi, edi
cmp dword [eax + 0xc], ebx
jle 0x44160c
push 0x14
pop esi
mov ecx, dword [esi + eax]
cmp ecx, ebx
je 0x440c1c
cmp dword [ecx + 0xfd0], ebx
je 0x440c1c
cmp dword [ecx + 0xfc8], ebx
jne 0x440c10
cmp dword [ecx + 0x14], 4
jne 0x440c1c
push 1
call fcn.0040b3b9
mov eax, dword [0x50b36c]
inc edi
add esi, 4
cmp edi, dword [eax + 0xc]
jl 0x440bf3
jmp case.0x44143a.41017
xor eax, eax
cmp dword [0x4a0b18], ebx
sete al
push eax
push esi
mov dword [0x4a0b18], eax
call fcn.00431e5c
cmp dword [0x508cd4], ebx
jne 0x44160c
push str.Refresh...
push ebx
push edi
push dword [0x509698]
call fcn.00405dc1
add esp, 0x10
jmp 0x440ba4
xor eax, eax
cmp dword [0x50b394], ebx
sete al
push eax
push esi
mov dword [0x50b394], eax
call fcn.00431e5c
cmp dword [0x50b394], ebx
je 0x440c97
push edi
mov dword [0x50b398], edi
push 0x9d81
call fcn.00431e5c
call fcn.0043b6ed
jmp case.0x44143a.41017
xor eax, eax
cmp dword [0x50b398], ebx
sete al
push eax
push esi
mov dword [0x50b398], eax
call fcn.00431e5c
cmp dword [0x50b398], ebx
jne 0x440c97
push ebx
mov dword [0x50b394], ebx
push 0x9d80
jmp 0x440c92
xor eax, eax
cmp dword [0x4a0b10], ebx
sete al
mov dword [0x4a0b10], eax
jmp 0x440a18
xor eax, eax
cmp dword [0x4a0b14], ebx
sete al
mov dword [0x4a0b14], eax
jmp 0x440a18
xor eax, eax
cmp dword [0x50b39c], ebx
sete al
mov dword [0x50b39c], eax
jmp 0x440a18
xor eax, eax
cmp dword [0x50b3a0], ebx
sete al
push eax
mov dword [0x50b3a0], eax
push ecx
jmp 0x440a1a
mov eax, 0xa034
cmp esi, eax
jg 0x441411
je 0x441401
mov ecx, 0x9dbe
cmp esi, ecx
jg 0x4411af
je 0x44118e
lea eax, [ecx - 0x15]
cmp esi, eax
jg 0x4410a5
je 0x440f4c
add ecx, 0xffffffc8
cmp esi, ecx
je 0x440f35
cmp esi, 0x9d89
jle case.0x44143a.41018
add eax, 0xffffffe2
cmp esi, eax
jle 0x440eda
cmp esi, 0x9d93
jle case.0x44143a.41018
mov eax, 0x9d96
cmp esi, eax
jle 0x440e51
cmp esi, 0x9da8
jne case.0x44143a.41018
push 0x34
lea eax, [ebp + 0x2c]
push ebx
push eax
mov dword [ebp + 0x24], 0x3c
call fcn.00446b72
mov eax, dword [0x508d24]
mov dword [ebp + 0x28], eax
mov eax, dword [0x508d08]
mov eax, dword [eax*4 + 0x5088b0]
mov dword [ebp + 0x3c], eax
add esp, 0xc
lea eax, [ebp + 0x24]
mov esi, 0x5086a8
push eax
mov dword [ebp + 0x2c], ebx
mov dword [ebp + 0x30], esi
mov dword [ebp + 0x34], ebx
mov dword [ebp + 0x38], 0x4141
call dword [sym.imp.COMDLG32.dll_ChooseFontW]
test eax, eax
je 0x44160c
push esi
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
push ebx
mov esi, eax
push esi
push 0x30
push dword [0x508d30]
call dword [sym.imp.USER32.dll_SendMessageW]
push dword [0x508d78]
call dword [sym.imp.GDI32.dll_DeleteObject]
push edi
push ebx
push dword [0x508d30]
mov dword [0x508d78], esi
call dword [sym.imp.USER32.dll_InvalidateRect]
mov eax, dword [ebp + 0x3c]
mov ecx, dword [0x508d08]
push edi
push eax
push dword [0x508d30]
mov dword [ecx*4 + 0x5088b0], eax
call fcn.00429675
jmp case.0x44143a.41017
push eax
push 0x9d94
lea ecx, [esi - 0x9d94]
push esi
mov dword [0x4a0b1c], ecx
call fcn.00431ea6
mov eax, dword [0x50b36c]
cmp eax, ebx
je 0x440ecf
cmp dword [eax + 0xc], ebx
mov dword [ebp + 0x78], ebx
jle 0x440ecf
push 0x14
pop edi
mov esi, dword [edi + eax]
cmp esi, ebx
je 0x440ec1
mov ecx, dword [esi + 0x14]
cmp ecx, 6
jl 0x440ec1
cmp ecx, 7
jle 0x440e99
add ecx, 0xfffffff7
cmp ecx, 1
ja 0x440ec1
lea eax, [esi + 0x20]
push eax
push ebx
push esi
call fcn.0040a6b8
lea eax, [esi + 0x424]
push eax
push 1
push esi
call fcn.0040a6b8
push 1
mov ecx, esi
call fcn.0040b3b9
mov eax, dword [0x50b36c]
inc dword [ebp + 0x78]
mov ecx, dword [ebp + 0x78]
add edi, 4
cmp ecx, dword [eax + 0xc]
jl 0x440e7d
push ebx
call fcn.0043b6d2
jmp case.0x44143a.41017
xor ecx, ecx
cmp esi, eax
sete cl
push eax
push 0x9d8a
push esi
mov dword [0x50b3b4], ecx
call fcn.00431ea6
mov eax, dword [0x50b36c]
cmp eax, ebx
je 0x44160c
xor edi, edi
cmp dword [eax + 0xc], ebx
jle 0x44160c
push 0x14
pop esi
mov ecx, dword [eax + esi]
cmp ecx, ebx
je 0x440f27
cmp dword [ecx + 0x14], 6
jl 0x440f27
push 1
call fcn.0040b3b9
mov eax, dword [0x50b36c]
inc edi
add esi, 4
cmp edi, dword [eax + 0xc]
jl 0x440f0e
jmp case.0x44143a.41017
xor eax, eax
cmp dword [0x4a0b0c], ebx
sete al
push eax
mov dword [0x4a0b0c], eax
push ecx
jmp 0x440c92
push 0x17
pop ecx
push 0x34
lea eax, [ebp + 0x2c]
push ebx
mov esi, 0x508648
lea edi, [ebp - 0x78]
push eax
rep movsd dword es:[edi], dword [esi]
mov dword [ebp + 0x24], 0x3c
call fcn.00446b72
mov eax, dword [0x508d24]
mov dword [ebp + 0x28], eax
add esp, 0xc
lea eax, [ebp - 0x78]
mov dword [ebp + 0x30], eax
mov esi, 0x47732c
push esi
lea eax, [ebp - 0x5c]
push eax
mov dword [ebp + 0x2c], ebx
mov dword [ebp + 0x34], ebx
mov dword [ebp + 0x38], 0x141
mov dword [ebp + 0x3c], ebx
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
jne 0x440fdf
push 0x3e
mov word [ebp - 0x1c], ax
lea eax, [ebp - 0x1a]
push ebx
push eax
call fcn.00446b72
add esp, 0xc
push 0x20
lea eax, [ebp - 0x1c]
push eax
push esi
push str.SOFTWAREMicrosoftWindows_NTCurrentVersionFontSubstitutes
push 0x80000002
call fcn.00427c75
test eax, eax
je 0x440fdf
lea eax, [ebp - 0x1c]
push eax
mov eax, dword [ebp + 0x30]
add eax, 0x1c
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp + 0x24]
push eax
call dword [sym.imp.COMDLG32.dll_ChooseFontW]
test eax, eax
je 0x44160c
push 0x17
pop ecx
lea esi, [ebp - 0x78]
mov edi, 0x508648
rep movsd dword es:[edi], dword [esi]
cmp dword [0x508d08], ebx
je 0x44100d
mov eax, dword [0x4a0ad4]
jmp 0x441015
push 8
call dword [sym.imp.USER32.dll_GetSysColor]
push 0x508648
mov dword [ebp + 0x3c], eax
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
push ebx
mov esi, eax
push esi
push 0x30
push dword [0x508d2c]
call dword [sym.imp.USER32.dll_SendMessageW]
push dword [0x508d7c]
call dword [sym.imp.GDI32.dll_DeleteObject]
mov dword [0x508d7c], esi
mov esi, dword [0x508ccc]
call fcn.0043503b
cmp dword [0x508ccc], esi
je 0x441091
mov eax, dword [0x50b36c]
xor esi, esi
inc esi
cmp dword [eax + 0xc], esi
jle 0x441091
push 0x18
pop edi
push dword [edi + eax]
call fcn.00407684
test eax, eax
je 0x441083
mov eax, dword [0x50b36c]
push dword [edi + eax]
call fcn.0043887b
mov eax, dword [0x50b36c]
inc esi
add edi, 4
cmp esi, dword [eax + 0xc]
jl 0x44106a
push 1
push ebx
push dword [0x508d2c]
call dword [sym.imp.USER32.dll_InvalidateRect]
jmp case.0x44143a.41017
mov eax, esi
sub eax, 0x9daa
je 0x4410e1
dec eax
je case.0x44143a.41017
sub eax, 0x12
jne case.0x44143a.41018
cmp dword [0x4a0b24], ebx
sete al
push eax
push 0x9dbd
mov dword [0x4a0b24], eax
call fcn.00431e5c
call fcn.00431f1e
jmp case.0x44143a.41017
mov eax, dword [0x508d08]
mov eax, dword [eax*4 + 0x508c00]
mov edx, 0x4a0ec8
cmp eax, ebx
je 0x441121
mov ecx, edx
cmp dword [ecx], eax
je 0x441121
add ecx, 4
cmp ecx, 0x4a0f08
jl 0x4410f8
xor ecx, ecx
cmp dword [ecx*4 + 0x4a0ec8], ebx
je 0x44111a
inc ecx
cmp ecx, 0x10
jl 0x441109
jmp 0x441121
mov dword [ecx*4 + 0x4a0ec8], eax
mov ecx, dword [0x508d24]
push 0x514a28
mov dword [0x514a28], 0x24
mov dword [0x514a2c], ecx
mov dword [0x514a34], eax
mov dword [0x514a38], edx
mov dword [0x514a3c], 3
call dword [sym.imp.COMDLG32.dll_ChooseColorW]
test eax, eax
je 0x44160c
mov eax, dword [0x514a34]
mov ecx, dword [0x508d08]
push eax
push ebx
push 0x443
push dword [0x508d30]
mov dword [ecx*4 + 0x508c00], eax
call dword [sym.imp.USER32.dll_SendMessageW]
call fcn.00434235
jmp case.0x44143a.41017
xor eax, eax
cmp dword [0x508d08], ebx
sete al
push eax
push ecx
mov dword [0x508d08], eax
call fcn.00431e5c
call fcn.004368f8
jmp case.0x44143a.41017
mov eax, 0x9fc4
cmp esi, eax
jg 0x441307
je 0x4412dc
mov ecx, 0x9dc1
cmp esi, ecx
je 0x4412a6
add ecx, 5
cmp esi, ecx
je 0x441271
cmp esi, 0x9dcf
jle case.0x44143a.41018
cmp esi, 0x9dd3
jg case.0x44143a.41018
sub esi, 0x9dd0
mov eax, str.calc.exe
mov edi, 0x451138
mov dword [ebp + 0x78], 1
je 0x441235
dec esi
je 0x44122e
dec esi
je 0x441220
dec esi
jne 0x44123f
mov eax, str.control.exe
mov edi, str.ncpa.cpl
jmp 0x44123f
mov eax, str.eventvwr.exe
mov dword [ebp + 0x78], 3
jmp 0x44123f
mov edi, str.devmgmt.msc
jmp 0x44123a
mov edi, str.diskmgmt.msc
mov eax, str.mmc.exe
push eax
mov esi, 0x508318
push esi
lea eax, [ebp - 0x280]
push 0x4512b4
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
push dword [ebp + 0x78]
lea eax, [ebp - 0x280]
push esi
push edi
push eax
call fcn.0042c1e8
jmp case.0x44143a.41017
xor eax, eax
cmp dword [0x50b3c4], ebx
sete al
push eax
push ecx
mov dword [0x50b3c4], eax
call fcn.00431e5c
xor eax, eax
cmp dword [0x50b3c4], ebx
setne al
dec eax
dec eax
push eax
push dword [0x508d24]
call fcn.0042a2ee
jmp case.0x44143a.41017
xor eax, eax
cmp dword [0x50b3c8], ebx
sete al
push eax
push ecx
mov dword [0x50b3c8], eax
call fcn.00431e5c
push 0x508398
push dword [0x50b3c8]
push str.OneInstance
push 0x45548c
call fcn.004294f2
jmp case.0x44143a.41017
push dword [0x508d24]
call dword [sym.imp.USER32.dll_UpdateWindow]
push ebx
push 0x437ef1
push dword [0x508d24]
push 0x66
push dword [0x508d20]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
jmp case.0x44143a.41017
mov eax, esi
sub eax, 0x9fc5
je 0x4413e2
sub eax, 0x6d
je 0x44151c
dec eax
jne case.0x44143a.41018
mov esi, dword [sym.imp.USER32.dll_GetFocus]
call esi
mov edi, eax
push 0x20
lea eax, [ebp - 0x1c]
push eax
call esi
push eax
call dword [sym.imp.USER32.dll_GetClassNameW]
push str.Tree
lea eax, [ebp - 0x1c]
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrW]
test eax, eax
je 0x441375
push dword [0x50968c]
call fcn.004335db
cmp eax, ebx
je 0x44160c
push 1
push dword [eax + 0x824]
call fcn.0042dcf0
jmp case.0x44143a.41017
call esi
cmp eax, dword [0x508d64]
jne 0x44138c
push ebx
push ebx
push 0x301
push edi
jmp 0x44156c
call esi
cmp eax, dword [0x508d4c]
je 0x44137f
cmp edi, dword [0x508d30]
jne case.0x44143a.41017
xor edi, edi
inc edi
push dword [0x50968c]
call fcn.004335db
cmp eax, ebx
jne 0x441577
push str.Dlg_OnCommand
push 0x12af
push str..UsbTreeView.cpp
push str.INT3_in__S_line__u__function__S
push edi
call fcn.0044c79b
add esp, 0x14
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp case.0x44143a.41017
push dword [0x508d24]
call dword [sym.imp.USER32.dll_UpdateWindow]
push ebx
push 0x4382e6
push dword [0x508d24]
push 0x67
jmp 0x4412f6
push dword [0x509684]
call fcn.0043c72a
jmp case.0x44143a.41017
mov eax, 0xa474
cmp esi, eax
jg 0x4414c8
je 0x4414bd
lea eax, [esi - 0xa035]
cmp eax, 0x12
ja case.0x44143a.41018
movzx eax, byte [eax + 0x4418fc]
jmp dword [eax*4 + 0x4418d4]
push edx
push dword [0x508d24]
call fcn.004295ff
jmp case.0x44143a.41017
push dword [0x508d3c]
push dword [0x508d24]
call fcn.004295ff
push ebx
push 1
push 0x14f
push dword [0x508d3c]
jmp 0x44156c
push dword [0x508d44]
push dword [0x508d24]
call fcn.004295ff
push ebx
push 1
push 0x14f
push dword [0x508d44]
jmp 0x44156c
push ebx
call fcn.0043a820
jmp case.0x44143a.41017
push 1
jmp 0x44149b
call fcn.0043c5d1
jmp case.0x44143a.41017
call fcn.00439479
jmp case.0x44143a.41017
push dword [0x50968c]
jmp 0x440927
cmp esi, 0xa475
je 0x4417b0
cmp esi, 0xa476
je case.0x44143a.41013
cmp esi, 0xa487
jle case.0x44143a.41018
cmp esi, 0xa48b
jle 0x441659
cmp esi, 0xa492
je 0x441659
cmp esi, 0xb600
je 0x4413a5
cmp esi, 0xb603
jne case.0x44143a.41018
call dword [sym.imp.USER32.dll_GetFocus]
mov esi, eax
push 0x20
lea eax, [ebp + 0x40]
push eax
push esi
call dword [sym.imp.USER32.dll_GetClassNameA]
cmp esi, ebx
je 0x44160c
push 0x4771d0
lea eax, [ebp + 0x40]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
je 0x441563
push str.Rich
lea eax, [ebp + 0x40]
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrIA]
test eax, eax
je 0x44160c
push 0xffffffffffffffff
push ebx
push 0xb1
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x44143a.41017
mov ebx, dword [eax + 0xc70]
test ebx, ebx
je 0x44160c
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
push ebx
call edi
test eax, eax
je 0x44160c
and dword [ebp + 0x78], 0
and dword [ebp + 0x70], 0
lea eax, [ebp + 0x70]
push eax
lea eax, [ebp + 0x78]
push eax
push 0xb0
push dword [0x508d30]
call dword [sym.imp.USER32.dll_SendMessageW]
mov esi, dword [ebp + 0x70]
mov eax, dword [ebp + 0x78]
cmp esi, eax
jle 0x44160c
sub esi, eax
lea eax, [ebx + eax*2]
push eax
call edi
cmp eax, esi
jge 0x4415cb
mov esi, eax
xor ecx, ecx
push 2
pop edx
lea eax, [esi + 1]
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00446ca6
mov edi, eax
mov eax, dword [ebp + 0x78]
add esi, esi
push esi
lea eax, [ebx + eax*2]
push eax
push edi
call fcn.00446bdc
add esp, 0x10
push 1
xor eax, eax
push edi
mov word [esi + edi], ax
call fcn.0042dcf0
push edi
call fcn.00446ce1
pop ecx
xor ebx, ebx
mov edi, dword [sym.imp.USER32.dll_GetScrollPos]
push ebx
push dword [0x508d30]
call edi
mov esi, dword [sym.imp.USER32.dll_SetScrollPos]
cmp dword [ebp + 0x64], eax
je 0x441635
push ebx
push dword [ebp + 0x64]
push ebx
push dword [0x508d30]
call esi
push 1
push dword [0x508d30]
call edi
cmp dword [ebp + 0x60], eax
je 0x441861
push ebx
push dword [ebp + 0x60]
push 1
push dword [0x508d30]
jmp 0x44185f
push dword [0x50968c]
call fcn.004335db
mov edi, 0xa488
cmp esi, edi
mov dword [ebp + 0x78], eax
mov eax, dword [eax + 0xfd0]
jl 0x44168e
cmp esi, 0xa489
jle 0x4416e5
cmp esi, 0xa48a
je 0x4416be
cmp esi, 0xa492
je 0x4416e5
push str.Dlg_OnCommand
push ebx
push 0x7f8a
call fcn.004336e7
mov eax, esi
sub eax, edi
mov ecx, 0x44c42b
je 0x44170c
dec eax
je 0x441705
dec eax
je 0x4416fe
dec eax
je 0x4416f7
sub eax, 7
jne 0x441710
mov edi, 0x44aa7f
jmp 0x441712
mov eax, dword [ebp + 0x78]
cmp dword [eax + 0xfc8], ebx
jne 0x44168e
push 0x30
push 0x46766c
push str.Oops__no_port
push dword [0x508d24]
call fcn.0044ddf0
jmp case.0x44143a.41017
cmp eax, ebx
jne 0x44168e
push 0x30
push 0x46766c
push str.Oops__no_device
jmp 0x4416d5
mov edi, 0x44aa7a
jmp 0x441712
mov edi, 0x44a8a2
jmp 0x441712
mov edi, 0x44a7b8
jmp 0x441712
mov edi, ecx
jmp 0x441712
mov edi, ebx
mov eax, dword [ebp + 0x78]
mov eax, dword [eax + 0xfd0]
cmp eax, ebx
je 0x441727
mov edx, dword [eax + 0x10]
mov dword [ebp + 0x70], edx
jmp 0x44172a
mov dword [ebp + 0x70], ebx
cmp edi, ecx
jne 0x44174d
cmp dword [eax + 0x39f4], ebx
jne 0x44173f
cmp word [eax + 0xc30], bx
jne 0x44174d
push ebx
push dword [ebp + 0x78]
push 0x4404dc
call fcn.004280bc
cmp edi, 0x44a7b8
je 0x44175d
cmp edi, 0x44a8a2
jne 0x44177b
cmp dword [ebp + 0x70], ebx
je 0x44177b
push 0x43cd4e
push 0xbb8
push dword [ebp + 0x70]
push dword [0x508d24]
call dword [sym.imp.USER32.dll_SetTimer]
cmp esi, 0xa492
jne 0x44178e
push dword [0x508d24]
call fcn.00434222
push ebx
push dword [ebp + 0x78]
push edi
call fcn.004280bc
jmp 0x4413d5
push dword [0x50968c]
call fcn.004335db
push dword [eax + 8]
jmp 0x441407
push dword [0x50968c]
jmp 0x440937
cmp dword [ebp + 0x7c], 9
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
jne 0x441846
push ebx
push ebx
push 0x147
push eax
call esi
push ebx
push eax
mov edi, 0x150
push edi
push dword [ebp + 0x78]
mov dword [ebp + 0x70], eax
call esi
push ebx
push dword [ebp + 0x70]
push edi
push dword [ebp + 0x78]
call esi
mov edi, eax
push edi
mov dword [ebp + 0x70], edi
call fcn.00407684
test eax, eax
je 0x441843
cmp dword [edi + 8], ebx
je 0x441843
push dword [0x508d24]
mov edi, dword [sym.imp.USER32.dll_UpdateWindow]
call edi
mov ecx, dword [ebp + 0x70]
call fcn.00407751
push dword [0x508d2c]
push dword [0x508d24]
call fcn.004295ff
push dword [0x508d2c]
call edi
mov eax, dword [ebp + 0x70]
push dword [eax + 8]
push 9
push 0x110b
push dword [0x508d2c]
call esi
mov eax, dword [ebp + 0x78]
mov ecx, dword [0x508d3c]
cmp eax, ecx
mov eax, dword [0x508d44]
je 0x441857
mov eax, ecx
push ebx
push ebx
push 0x14e
push eax
call esi
xor eax, eax
pop edi
pop esi
pop ebx
add ebp, 0x68
leave
ret 0x10