Function at 0x444a26
Capabilities:
Check for time delay via gettickcount
Log keystrokes via polling

Disassembly:
push ebp
lea ebp, [esp - 0x68]
sub esp, 0x4e0
push ebx
push esi
mov esi, dword [sym.imp.USER32.dll_GetScrollPos]
push edi
xor ebx, ebx
push ebx
push dword [0x5106a8]
call esi
xor edi, edi
inc edi
push edi
push dword [0x5106a8]
mov dword [ebp + 0x64], eax
call esi
mov dword [ebp + 0x60], eax
mov eax, dword [ebp + 0x78]
cmp eax, dword [0x5106b4]
je 0x445dd0
cmp eax, dword [0x5106bc]
je 0x445dd0
mov edx, dword [0x5106c4]
cmp eax, edx
jne 0x444ad3
cmp dword [ebp + 0x7c], 0x300
jne 0x444ad3
push edx
call dword [sym.imp.USER32.dll_GetWindowTextLengthW]
mov esi, eax
cmp esi, ebx
je 0x444aa6
cmp dword [0x51c368], ebx
jne 0x444a9f
cmp esi, 3
jg 0x444aa6
mov edi, 0x1f4
jmp 0x444aa9
push 0x64
pop edi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 0x43af26
push edi
push 0x19091969
push dword [ebp + 0x70]
mov dword [0x510670], eax
call dword [sym.imp.USER32.dll_SetTimer]
mov dword [0x51c368], esi
jmp 0x445e7b
cmp eax, dword [0x5106d0]
jne 0x444ae6
push ebx
call fcn.0043daf9
jmp 0x445e7b
cmp eax, dword [0x5106d4]
jne 0x444af1
push edi
jmp 0x444adc
cmp eax, dword [0x5106a8]
jne 0x444b00
mov eax, edi
jmp 0x445e7d
mov esi, dword [ebp + 0x74]
mov ecx, 0x9d83
cmp esi, ecx
jg 0x4450b2
je 0x44509b
lea eax, [ecx - 0x71]
cmp esi, eax
jg 0x444cdc
je case.0x445938.41012
add eax, 0xffffffa7
cmp esi, eax
jg 0x444c79
je 0x444c6f
mov eax, 0x9ca4
cmp esi, eax
jg 0x444c10
je 0x444bfe
mov eax, esi
dec eax
je 0x444bd9
dec eax
je 0x444bd5
sub eax, 5
je case.0x445938.41017
sub eax, 0x9c84
jne case.0x445938.41018
mov esi, 0x510750
push esi
call fcn.00428492
push 0
push 0x4284be
push dword [ebp + 0x70]
push 0xbb8
push dword [0x510698]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
cmp eax, 1
jne case.0x445938.41017
push esi
call fcn.004284a8
mov eax, dword [0x510754]
shr eax, 8
dec eax
mov dword [0x4a7b18], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 1
push 0xfade
push 0x113
push dword [0x51069c]
mov dword [0x51100c], eax
call fcn.0044329c
jmp case.0x445938.41017
push ebx
push edi
jmp 0x444bee
push 0xd
call dword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jge case.0x445938.41017
push 0
push 0
push 0x1116
push dword [0x5106a4]
jmp 0x445b00
push ebx
push ebx
push 0x10
push dword [ebp + 0x70]
call dword [sym.imp.USER32.dll_PostMessageW]
jmp case.0x445938.41017
mov eax, esi
sub eax, 0x9cae
je 0x444fc9
sub eax, 5
je 0x444c35
sub eax, 5
jne case.default.0x445938
call fcn.0043f6c0
jmp case.0x445938.41017
push ebx
push ebx
push 0x7f02
call fcn.00436641
call fcn.0043481b
push 0x4561e0
push 0x50fa68
call fcn.0042a2a4
test eax, eax
je 0x4457ce
push ebx
push ebx
push 0x10
push dword [ebp + 0x70]
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x4457ce
call fcn.0043f803
jmp case.0x445938.41017
mov eax, esi
sub eax, 0x9cbd
je case.0x445938.41016
dec eax
je case.0x445938.41017
dec eax
je case.0x445938.41015
sub eax, 0x49
je 0x444ccc
dec eax
je 0x444cb6
dec eax
je 0x444cae
dec eax
jne case.0x445938.41018
push dword [0x511008]
jmp 0x444cbc
push dword [0x511008]
jmp 0x444cd2
push dword [0x511000]
push dword [0x5106a4]
call fcn.0043ce05
jmp case.0x445938.41017
push dword [0x511000]
call fcn.004370a0
jmp case.0x445938.41017
mov ecx, 0x9d7a
cmp esi, ecx
jg 0x444ef4
je 0x444e70
add ecx, 0xfffffff8
cmp esi, ecx
jg 0x444d99
je 0x444d85
mov eax, esi
sub eax, 0x9d13
je case.0x445938.41013
sub eax, 4
je 0x444d6f
sub eax, 0x55
je 0x444d4f
sub eax, 5
jne case.default.0x445938
cmp dword [0x512c74], ebx
sete al
push eax
mov dword [0x512c74], eax
push 0x9d71
call fcn.00434e1d
mov dword [0x51102c], ebx
mov dword [0x511030], ebx
call fcn.00418559
jmp case.0x445938.41017
xor eax, eax
cmp dword [0x4a7b30], ebx
sete al
push eax
mov dword [0x4a7b30], eax
push 0x9d6c
call fcn.00434e1d
jmp case.0x445938.41017
push dword [0x511008]
call fcn.00436535
push eax
call fcn.00437130
jmp case.0x445938.41017
xor eax, eax
cmp dword [0x512c78], ebx
sete al
mov dword [0x512c78], eax
push eax
push ecx
jmp 0x444d34
mov eax, esi
mov ecx, 0x9d73
sub eax, ecx
je 0x444e5b
sub eax, 3
je 0x444e40
sub eax, 3
jne case.default.0x445938
cmp dword [0x512c9c], ebx
sete al
push eax
push 0x9d79
mov dword [0x512c9c], eax
call fcn.00434e1d
mov eax, dword [0x512c60]
cmp eax, ebx
je case.0x445938.41017
xor ebx, ebx
cmp dword [eax + 0xc], ebx
jle case.0x445938.41017
push 0x14
pop esi
xor edi, edi
mov ecx, dword [esi + eax]
cmp ecx, edi
je 0x444e32
mov edx, dword [ecx + 0x18]
cmp edx, 9
jne 0x444e0f
cmp dword [ecx + 0x1154], edi
je 0x444e0f
cmp dword [ecx + 0x1148], edi
jne 0x444e27
cmp edx, 1
jne 0x444e32
mov edx, dword [ecx + 0x1154]
cmp edx, edi
je 0x444e32
cmp dword [edx + 0x3ab4], 1
jne 0x444e32
push edi
call fcn.0040bce8
mov eax, dword [0x512c60]
inc ebx
add esi, 4
cmp ebx, dword [eax + 0xc]
jl 0x444df0
jmp case.0x445938.41017
xor eax, eax
cmp dword [0x512c98], ebx
sete al
push eax
mov dword [0x512c98], eax
push 0x9d76
jmp 0x444d34
xor eax, eax
cmp dword [0x512c7c], ebx
sete al
mov dword [0x512c7c], eax
jmp 0x444d95
xor eax, eax
cmp dword [0x512ca0], ebx
sete al
push eax
push ecx
mov dword [0x512ca0], eax
call fcn.00434e1d
mov eax, dword [0x512c60]
cmp eax, ebx
je case.0x445938.41017
xor ebx, ebx
cmp dword [eax + 0xc], ebx
jle case.0x445938.41017
push 0x14
pop esi
xor edi, edi
mov ecx, dword [esi + eax]
cmp ecx, edi
je 0x444ee6
mov edx, dword [ecx + 0x18]
cmp edx, 9
jne 0x444ec3
cmp dword [ecx + 0x1154], edi
je 0x444ec3
cmp dword [ecx + 0x1148], edi
jne 0x444edb
cmp edx, 1
jne 0x444ee6
mov edx, dword [ecx + 0x1154]
cmp edx, edi
je 0x444ee6
cmp dword [edx + 0x3ab4], 1
jne 0x444ee6
push edi
call fcn.0040bce8
mov eax, dword [0x512c60]
inc ebx
add esi, 4
cmp ebx, dword [eax + 0xc]
jl 0x444ea4
jmp case.0x445938.41017
mov eax, esi
mov ecx, 0x9d7b
sub eax, ecx
je 0x445079
dec eax
je 0x445061
dec eax
je 0x444ff3
dec eax
je 0x444fae
dec eax
dec eax
je 0x444f70
dec eax
je 0x444f3f
dec eax
jne case.default.0x445938
cmp dword [0x4a7b38], ebx
sete al
push eax
mov dword [0x4a7b38], eax
push 0x9d82
jmp 0x444d65
xor eax, eax
cmp dword [0x512c8c], ebx
sete al
push eax
push 0x9d81
mov dword [0x512c8c], eax
call fcn.00434e1d
cmp dword [0x512c8c], ebx
jne 0x444fa4
push ebx
mov dword [0x512c88], ebx
push 0x9d80
jmp 0x444f9f
xor eax, eax
cmp dword [0x512c88], ebx
sete al
push eax
push 0x9d80
mov dword [0x512c88], eax
call fcn.00434e1d
cmp dword [0x512c88], ebx
je 0x444fa4
push edi
mov dword [0x512c8c], edi
push 0x9d81
call fcn.00434e1d
call fcn.0043eca3
jmp case.0x445938.41017
xor eax, eax
cmp dword [0x4a7b40], ebx
sete al
push eax
push 0x9d7e
mov dword [0x4a7b40], eax
call fcn.00434e1d
cmp dword [0x510648], ebx
jne case.0x445938.41017
push str.Refresh...
push 0
push 1
push dword [0x511014]
call fcn.0040601d
add esp, 0x10
push 0
jmp 0x445091
xor eax, eax
cmp dword [0x512ca4], ebx
sete al
push eax
push 0x9d7d
mov dword [0x512ca4], eax
call fcn.00434e1d
mov eax, dword [0x512c60]
cmp eax, ebx
je case.0x445938.41017
xor edi, edi
cmp dword [eax + 0xc], edi
jle case.0x445938.41017
push 0x14
pop esi
xor ebx, ebx
mov ecx, dword [esi + eax]
cmp ecx, ebx
je 0x445053
cmp dword [ecx + 0x1154], ebx
je 0x445053
cmp dword [ecx + 0x1148], ebx
jne 0x445048
cmp dword [ecx + 0x18], 4
jne 0x445053
push ebx
call fcn.0040bce8
mov eax, dword [0x512c60]
inc edi
add esi, 4
cmp edi, dword [eax + 0xc]
jl 0x44502b
jmp case.0x445938.41017
xor eax, eax
cmp dword [0x512cb0], ebx
sete al
push eax
mov dword [0x512cb0], eax
push 0x9d7c
jmp 0x44508b
xor eax, eax
cmp dword [0x512cac], ebx
sete al
push eax
mov dword [0x512cac], eax
push ecx
call fcn.00434e1d
push ebx
call fcn.0043efdd
jmp case.0x445938.41017
xor eax, eax
cmp dword [0x4a7b3c], ebx
sete al
mov dword [0x4a7b3c], eax
push eax
push ecx
jmp 0x444d65
mov eax, 0xa032
cmp esi, eax
jg 0x445909
je 0x445aaf
mov eax, 0x9dab
cmp esi, eax
jg 0x445710
je 0x445608
lea ecx, [eax - 0x15]
cmp esi, ecx
jg 0x445244
add eax, 0xffffffe9
cmp esi, eax
jge 0x4451c0
add ecx, 0xffffffee
cmp esi, ecx
je 0x4451ab
mov ecx, 0x9d85
cmp esi, ecx
je 0x445196
inc ecx
cmp esi, ecx
je 0x44517f
cmp esi, 0x9d89
jle case.default.0x445938
mov eax, 0x9d8b
cmp esi, eax
jg case.default.0x445938
xor ecx, ecx
cmp esi, eax
sete cl
push eax
push 0x9d8a
push esi
mov dword [0x512ca8], ecx
call fcn.00434e67
mov eax, dword [0x512c60]
cmp eax, ebx
je case.0x445938.41017
xor edi, edi
cmp dword [eax + 0xc], edi
jle case.0x445938.41017
push 0x14
pop esi
mov ecx, dword [esi + eax]
test ecx, ecx
je 0x445171
cmp dword [ecx + 0x18], 6
jl 0x445171
push 0
call fcn.0040bce8
mov eax, dword [0x512c60]
inc edi
add esi, 4
cmp edi, dword [eax + 0xc]
jl 0x445158
jmp case.0x445938.41017
xor eax, eax
cmp dword [0x4a7b34], ebx
sete al
push eax
mov dword [0x4a7b34], eax
push ecx
jmp 0x444f9f
xor eax, eax
cmp dword [0x512c94], ebx
sete al
mov dword [0x512c94], eax
jmp 0x4450ab
xor eax, eax
cmp dword [0x512c90], ebx
sete al
mov dword [0x512c90], eax
jmp 0x4450ab
push ecx
push eax
lea edx, [esi - 0x9d94]
push esi
mov dword [0x4a7b44], edx
call fcn.00434e67
mov eax, dword [0x512c60]
cmp eax, ebx
je 0x445239
cmp dword [eax + 0xc], ebx
mov dword [ebp + 0x78], ebx
jle 0x445239
push 0x14
pop edi
mov esi, dword [edi + eax]
cmp esi, ebx
je 0x44522b
mov ecx, dword [esi + 0x18]
cmp ecx, 6
jl 0x44522b
cmp ecx, 7
jle 0x445204
add ecx, 0xfffffff7
cmp ecx, 1
ja 0x44522b
lea eax, [esi + 0x24]
push eax
push ebx
push esi
call fcn.0040af35
lea eax, [esi + 0x428]
push eax
push 1
push esi
call fcn.0040af35
push ebx
mov ecx, esi
call fcn.0040bce8
mov eax, dword [0x512c60]
inc dword [ebp + 0x78]
mov ecx, dword [ebp + 0x78]
add edi, 4
cmp ecx, dword [eax + 0xc]
jl 0x4451e8
push ebx
call fcn.0043ec88
jmp case.0x445938.41017
mov eax, esi
sub eax, 0x9da8
je 0x445527
dec eax
je 0x44532d
dec eax
jne case.default.0x445938
mov eax, dword [0x510680]
mov eax, dword [eax*4 + 0x510568]
mov edx, 0x4a7f40
cmp eax, ebx
je 0x44529f
mov ecx, edx
cmp dword [ecx], eax
je 0x44529f
add ecx, 4
cmp ecx, 0x4a7f80
jl 0x445276
xor ecx, ecx
cmp dword [ecx*4 + 0x4a7f40], ebx
je 0x445298
inc ecx
cmp ecx, 0x10
jl 0x445287
jmp 0x44529f
mov dword [ecx*4 + 0x4a7f40], eax
mov ecx, dword [0x51069c]
push 0x51c344
mov dword [0x51c344], 0x24
mov dword [0x51c348], ecx
mov dword [0x51c350], eax
mov dword [0x51c354], edx
mov dword [0x51c358], 3
call dword [sym.imp.COMDLG32.dll_ChooseColorW]
test eax, eax
je case.0x445938.41017
push dword [0x51c350]
call fcn.0044c289
mov ecx, dword [0x510680]
cmp ecx, eax
je 0x445303
push 0x10
push 0x46d5fc
push str.Color_rejected
jmp 0x445792
mov eax, dword [0x51c350]
push eax
push 0
push 0x443
push dword [0x5106a8]
mov dword [ecx*4 + 0x510568], eax
call dword [sym.imp.USER32.dll_SendMessageW]
call fcn.0043726d
jmp case.0x445938.41017
push 0x17
pop ecx
push 0x34
mov ebx, 0x50ffa0
lea eax, [ebp + 0x2c]
push 0
mov esi, ebx
lea edi, [ebp - 0x78]
push eax
rep movsd dword es:[edi], dword [esi]
mov dword [ebp + 0x24], 0x3c
call fcn.0044b15e
mov eax, dword [0x51069c]
and dword [ebp + 0x2c], 0
and dword [ebp + 0x34], 0
add esp, 0xc
push dword [0x4a7adc]
mov dword [ebp + 0x28], eax
lea eax, [ebp - 0x78]
mov dword [ebp + 0x30], eax
mov eax, dword [0x510680]
mov eax, dword [eax*4 + 0x51005c]
push 0x60
push 8
mov dword [ebp + 0x38], 0x2141
mov dword [ebp + 0x3c], eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [ebp + 0x58], eax
mov eax, dword [ebp + 0x30]
mov esi, 0x47dd8c
push esi
add eax, 0x1c
push eax
mov dword [ebp + 0x5c], 0xc8
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
jne 0x4453ee
push 0x3e
push eax
mov word [ebp - 0x1c], ax
lea eax, [ebp - 0x1a]
push eax
call fcn.0044b15e
add esp, 0xc
push 0x20
lea eax, [ebp - 0x1c]
push eax
push esi
push str.SOFTWAREMicrosoftWindows_NTCurrentVersionFontSubstitutes
push 0x80000002
call fcn.004296c8
test eax, eax
je 0x4453ee
lea eax, [ebp - 0x1c]
push eax
mov eax, dword [ebp + 0x30]
add eax, 0x1c
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp + 0x24]
push eax
call dword [sym.imp.COMDLG32.dll_ChooseFontW]
test eax, eax
je case.0x445938.41017
push dword [ebp + 0x3c]
call fcn.0044c25b
cmp dword [0x510680], eax
je 0x44542c
push 0x10
push 0x46d5fc
push str.Color_rejected
push dword [0x51069c]
call fcn.00452b3b
jmp 0x445511
push str.font
push 1
push 0x7f02
call fcn.00436641
mov eax, dword [ebp + 0x3c]
push 0x17
pop ecx
push eax
push 0
lea esi, [ebp - 0x78]
mov edi, ebx
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x510680]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 0x111e
push dword [0x5106a4]
mov dword [ecx*4 + 0x51005c], eax
call esi
push ebx
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
push 0
mov edi, eax
push edi
push 0x30
push dword [0x5106a4]
call esi
push dword [0x5106f4]
call dword [sym.imp.GDI32.dll_DeleteObject]
mov esi, dword [0x510640]
mov dword [0x5106f4], edi
call fcn.004381c4
cmp dword [0x510640], esi
je 0x4454df
mov eax, dword [0x512c60]
xor esi, esi
inc esi
cmp dword [eax + 0xc], esi
jle 0x4454df
push 0x18
pop edi
push dword [edi + eax]
call fcn.00407b01
test eax, eax
je 0x4454d1
mov eax, dword [0x512c60]
push dword [edi + eax]
call fcn.0043c106
mov eax, dword [0x512c60]
inc esi
add edi, 4
cmp esi, dword [eax + 0xc]
jl 0x4454b8
push dword [0x511008]
push dword [0x5106a4]
call fcn.004305da
push dword [0x511008]
push dword [0x5106a4]
call fcn.004307cd
push 1
push 0
push dword [0x5106a4]
call dword [sym.imp.USER32.dll_InvalidateRect]
push str.font
push 1
push 0x7f00
call fcn.00436641
jmp case.0x445938.41017
push 0x34
lea eax, [ebp + 0x2c]
push ebx
push eax
mov dword [ebp + 0x24], 0x3c
call fcn.0044b15e
mov eax, dword [0x51069c]
add esp, 0xc
push dword [0x4a7adc]
mov dword [ebp + 0x28], eax
mov eax, dword [0x510680]
mov eax, dword [eax*4 + 0x510218]
push 0x60
mov esi, 0x510000
push 8
mov dword [ebp + 0x2c], ebx
mov dword [ebp + 0x30], esi
mov dword [ebp + 0x34], ebx
mov dword [ebp + 0x38], 0x6141
mov dword [ebp + 0x3c], eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [ebp + 0x58], eax
lea eax, [ebp + 0x24]
push eax
mov dword [ebp + 0x5c], 0xc8
call dword [sym.imp.COMDLG32.dll_ChooseFontW]
test eax, eax
je case.0x445938.41017
push dword [ebp + 0x3c]
call fcn.0044c25b
cmp dword [0x510680], eax
jne 0x4452f2
push esi
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
push 0
mov esi, eax
push esi
push 0x30
push dword [0x5106a8]
call dword [sym.imp.USER32.dll_SendMessageW]
push dword [0x5106f0]
call dword [sym.imp.GDI32.dll_DeleteObject]
push 1
push 0
push dword [0x5106a8]
mov dword [0x5106f0], esi
call dword [sym.imp.USER32.dll_InvalidateRect]
mov eax, dword [ebp + 0x3c]
mov ecx, dword [0x510680]
push 1
push eax
push dword [0x5106a8]
mov dword [ecx*4 + 0x510218], eax
call fcn.0042b135
jmp case.0x445938.41017
mov eax, dword [0x510680]
shl eax, 2
mov esi, 0x4a7f00
cmp dword [eax + 0x510568], ebx
je 0x44564e
mov edx, dword [eax + 0x510210]
mov ecx, esi
cmp dword [ecx], edx
je 0x44564e
add ecx, 4
cmp ecx, 0x4a7f40
jl 0x445625
xor ecx, ecx
cmp dword [ecx*4 + 0x4a7f00], ebx
je 0x445647
inc ecx
cmp ecx, 0x10
jl 0x445636
jmp 0x44564e
mov dword [ecx*4 + 0x4a7f00], edx
mov ecx, dword [0x51069c]
mov eax, dword [eax + 0x510210]
push 0x51c320
mov dword [0x51c320], 0x24
mov dword [0x51c324], ecx
mov dword [0x51c32c], eax
mov dword [0x51c330], esi
mov dword [0x51c334], 3
call dword [sym.imp.COMDLG32.dll_ChooseColorW]
test eax, eax
je case.0x445938.41017
push dword [0x51c32c]
call fcn.0044c289
mov ecx, dword [0x510680]
cmp ecx, eax
jne 0x4452f2
mov eax, dword [0x51c32c]
mov dword [ecx*4 + 0x510210], eax
call fcn.004381c4
mov eax, dword [0x510680]
push dword [eax*4 + 0x510210]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
xor edi, edi
push edi
push 0x111d
push dword [0x5106a4]
call esi
mov eax, dword [0x510680]
push dword [eax*4 + 0x51005c]
push edi
push 0x111e
push dword [0x5106a4]
call esi
push 0x305
push edi
push edi
push dword [0x5106a4]
call dword [sym.imp.USER32.dll_RedrawWindow]
jmp case.0x445938.41017
mov ecx, 0x9dc6
cmp esi, ecx
jg 0x44582b
je 0x4457f6
mov eax, esi
add ecx, 0xfffffff7
sub eax, ecx
je 0x4457d5
dec eax
je 0x445774
sub eax, 3
jne case.default.0x445938
cmp dword [0x512cbc], ebx
sete al
push eax
push 0x9dc1
mov dword [0x512cbc], eax
call fcn.00434e1d
push 0x50fcf0
push dword [0x512cbc]
push str.OneInstance
push 0x45acf8
call fcn.0042afb2
jmp case.0x445938.41017
cmp dword [0x510680], ebx
jne 0x4457a2
call fcn.0042d809
cmp eax, 0x20
je 0x4457a2
push 0x10
push 0x46d5fc
push str.Dark_Mode_needs_32_bits_per_pixel
push dword [0x51069c]
call fcn.00452b3b
jmp case.0x445938.41017
xor eax, eax
cmp dword [0x510680], ebx
sete al
push eax
push 0x9dbe
mov dword [0x510680], eax
call fcn.00434e1d
push ebx
push ebx
push 0x7f02
call fcn.00436641
call fcn.0043a139
push ebx
push ebx
jmp 0x445518
xor eax, eax
cmp dword [0x4a7b4c], ebx
sete al
push eax
push ecx
mov dword [0x4a7b4c], eax
call fcn.00434e1d
call fcn.00434edf
jmp case.0x445938.41017
xor eax, eax
cmp dword [0x512cb8], ebx
sete al
push eax
push ecx
mov dword [0x512cb8], eax
call fcn.00434e1d
xor eax, eax
cmp dword [0x512cb8], ebx
setne al
dec eax
dec eax
push eax
push dword [0x51069c]
call fcn.0042c0ab
jmp case.0x445938.41017
mov eax, 0x9dd0
cmp esi, eax
jl case.default.0x445938
cmp esi, 0x9dd3
jle 0x44589b
cmp esi, 0x9fc4
je 0x445870
cmp esi, 0x9fc5
jne case.default.0x445938
push dword [0x51069c]
call dword [sym.imp.USER32.dll_UpdateWindow]
push ebx
push 0x43bb71
push dword [0x51069c]
push 0x67
jmp 0x44588a
push dword [0x51069c]
call dword [sym.imp.USER32.dll_UpdateWindow]
push ebx
push 0x43b77c
push dword [0x51069c]
push 0x66
push dword [0x510698]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
jmp case.0x445938.41017
sub esi, eax
mov ecx, str.calc.exe
mov ebx, 0x4561e0
je 0x4458cf
dec esi
je 0x4458c8
dec esi
je 0x4458be
dec esi
jne 0x4458d9
mov ecx, str.control.exe
mov ebx, str.ncpa.cpl
jmp 0x4458d9
push 3
mov ecx, str.eventvwr.exe
pop edi
jmp 0x4458d9
mov ebx, str.devmgmt.msc
jmp 0x4458d4
mov ebx, str.diskmgmt.msc
mov ecx, str.mmc.exe
push ecx
mov esi, 0x50fc70
push esi
lea eax, [ebp - 0x280]
push 0x456374
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
push edi
push esi
push ebx
lea eax, [ebp - 0x280]
push eax
call fcn.0042e013
jmp case.0x445938.41017
cmp esi, 0xa48b
mov edi, 0xa488
jg 0x445a96
cmp esi, edi
jge 0x445c3e
lea eax, [esi - 0xa033]
cmp eax, 0x14
ja case.default.0x445938
movzx eax, byte [eax + 0x445eba]
jmp dword [eax*4 + 0x445e8a]
push edx
push dword [0x51069c]
call fcn.0042b0bf
jmp case.0x445938.41017
push dword [0x5106b4]
push dword [0x51069c]
call fcn.0042b0bf
push 0
push 1
push 0x14f
push dword [0x5106b4]
jmp 0x445b00
push dword [0x5106bc]
push dword [0x51069c]
call fcn.0042b0bf
push 0
push 1
push 0x14f
push dword [0x5106bc]
jmp 0x445b00
push 0
call fcn.0043daf9
jmp case.0x445938.41017
push 1
jmp 0x44599c
call fcn.0043fc05
jmp case.0x445938.41017
call fcn.0043ccf9
jmp case.0x445938.41017
push dword [0x511000]
call fcn.0043fd5e
jmp case.0x445938.41017
push dword [0x511008]
call fcn.00436535
push dword [eax + 8]
jmp 0x4459c4
mov esi, dword [sym.imp.USER32.dll_GetFocus]
call esi
mov edi, eax
push 0x20
lea eax, [ebp - 0x1c]
push eax
call esi
push eax
call dword [sym.imp.USER32.dll_GetClassNameW]
push str.Tree
lea eax, [ebp - 0x1c]
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrW]
test eax, eax
je 0x445a2f
push dword [0x511008]
call fcn.00436535
test eax, eax
je case.0x445938.41017
push 1
push dword [eax + 0x828]
call fcn.00430903
jmp case.0x445938.41017
call esi
cmp eax, dword [0x5106dc]
jne 0x445a48
push 0
push 0
push 0x301
push edi
jmp 0x445b00
call esi
cmp eax, dword [0x5106c4]
je 0x445a39
cmp edi, dword [0x5106a8]
jne case.0x445938.41017
xor ebx, ebx
push dword [0x511008]
call fcn.00436535
cmp eax, ebx
jne 0x445b9c
push str.Dlg_OnCommand
push 0x149c
push str..UsbTreeView.cpp
push str.INT3_in__S_line__u__function__S
push 1
call fcn.00451479
add esp, 0x14
jmp 0x445d7b
mov eax, esi
sub eax, 0xa492
je 0x445c3e
sub eax, 0x366
je 0x445a60
sub eax, 3
jne case.default.0x445938
call dword [sym.imp.USER32.dll_GetFocus]
mov esi, eax
push 0x20
lea eax, [ebp + 0x40]
push eax
push esi
call dword [sym.imp.USER32.dll_GetClassNameA]
cmp esi, ebx
je case.0x445938.41017
push 0x47dc08
lea eax, [ebp + 0x40]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
je 0x445af6
push str.Rich
lea eax, [ebp + 0x40]
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrIA]
test eax, eax
je case.0x445938.41017
push 0xffffffffffffffff
push 0
push 0xb1
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x445938.41017
xor ebx, ebx
mov edi, dword [sym.imp.USER32.dll_GetMenuStringW]
lea eax, [esi - 0xa4d8]
cmp eax, 0x62
ja 0x445b4b
push ebx
push 0x104
lea eax, [ebp - 0x280]
push eax
push esi
push dword [0x512cfc]
call edi
test eax, eax
je 0x445b4b
push ebx
lea eax, [ebp - 0x280]
push eax
call fcn.0042c533
push eax
call fcn.00430903
lea eax, [esi - 0xa53c]
cmp eax, 0x62
ja case.0x445938.41017
push dword [0x51069c]
call dword [sym.imp.USER32.dll_UpdateWindow]
push 0
push 0x200
lea eax, [ebp - 0x478]
push eax
push esi
push dword [0x512d00]
call edi
test eax, eax
je case.0x445938.41017
lea eax, [ebp - 0x478]
push eax
call fcn.0042c533
push eax
call fcn.004315f2
jmp case.0x445938.41017
mov ebx, dword [eax + 0xc74]
test ebx, ebx
je case.0x445938.41017
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
push ebx
call edi
test eax, eax
je case.0x445938.41017
and dword [ebp + 0x78], 0
and dword [ebp + 0x70], 0
lea eax, [ebp + 0x70]
push eax
lea eax, [ebp + 0x78]
push eax
push 0xb0
push dword [0x5106a8]
call dword [sym.imp.USER32.dll_SendMessageW]
mov esi, dword [ebp + 0x70]
mov eax, dword [ebp + 0x78]
cmp esi, eax
jle case.0x445938.41017
sub esi, eax
lea eax, [ebx + eax*2]
push eax
call edi
cmp eax, esi
jge 0x445bf8
mov esi, eax
xor ecx, ecx
push 2
pop edx
lea eax, [esi + 1]
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0044b31e
mov edi, eax
mov eax, dword [ebp + 0x78]
add esi, esi
push esi
lea eax, [ebx + eax*2]
push eax
push edi
call fcn.0044b1c8
add esp, 0x10
push 1
xor eax, eax
push edi
mov word [esi + edi], ax
call fcn.00430903
push edi
call fcn.0044b359
pop ecx
jmp case.0x445938.41017
push dword [0x511008]
call fcn.00436535
cmp esi, edi
mov dword [ebp + 0x70], eax
mov eax, dword [eax + 0x1154]
mov dword [ebp + 0x78], ebx
jl 0x445c71
cmp esi, 0xa489
jle 0x445cca
cmp esi, 0xa48a
je 0x445ca3
cmp esi, 0xa492
je 0x445cca
push str.Dlg_OnCommand
push ebx
push 0x7f8a
call fcn.00436641
mov eax, esi
sub eax, edi
mov ecx, 0x4510ba
je 0x445cf7
dec eax
je 0x445cee
dec eax
je 0x445ce5
dec eax
je 0x445cdc
sub eax, 7
jne 0x445cfa
mov dword [ebp + 0x78], 0x44f225
jmp 0x445cfa
mov eax, dword [ebp + 0x70]
cmp dword [eax + 0x1148], ebx
jne 0x445c71
push 0x30
push 0x46d5fc
push str.Oops__no_port
push dword [0x51069c]
call fcn.00452af1
jmp case.0x445938.41017
cmp eax, ebx
jne 0x445c71
push 0x30
push 0x46d5fc
push str.Oops__no_device
jmp 0x445cba
mov dword [ebp + 0x78], 0x44f220
jmp 0x445cfa
mov dword [ebp + 0x78], 0x44efe9
jmp 0x445cfa
mov dword [ebp + 0x78], 0x44eef2
jmp 0x445cfa
mov dword [ebp + 0x78], ecx
mov eax, dword [ebp + 0x70]
mov eax, dword [eax + 0x1154]
cmp eax, ebx
je 0x445d0c
mov edi, dword [eax + 0x14]
jmp 0x445d0e
xor edi, edi
cmp dword [ebp + 0x78], ecx
jne 0x445d2f
cmp dword [eax + 8], ebx
jne 0x445d21
cmp word [eax + 0xc34], bx
jne 0x445d2f
push ebx
push dword [ebp + 0x70]
push 0x444890
call fcn.00429b2b
cmp dword [ebp + 0x78], 0x44eef2
je 0x445d41
cmp dword [ebp + 0x78], 0x44efe9
jne 0x445d5c
cmp edi, ebx
je 0x445d5c
push 0x440014
push 0xbb8
push edi
push dword [0x51069c]
call dword [sym.imp.USER32.dll_SetTimer]
cmp esi, 0xa492
jne 0x445d6f
push dword [0x51069c]
call fcn.0043725a
push ebx
push dword [ebp + 0x70]
push dword [ebp + 0x78]
call fcn.00429b2b
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, dword [sym.imp.USER32.dll_GetScrollPos]
push 0
push dword [0x5106a8]
call esi
cmp dword [ebp + 0x64], eax
je 0x445da8
push dword [ebp + 0x64]
push 0
push dword [0x5106a8]
call fcn.00429f74
push 1
push dword [0x5106a8]
call esi
cmp dword [ebp + 0x60], eax
je 0x445e7b
push dword [ebp + 0x60]
push 1
push dword [0x5106a8]
call fcn.00429f74
jmp 0x445e7b
cmp dword [ebp + 0x7c], 9
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
jne 0x445e60
push ebx
push ebx
push 0x147
push eax
call esi
push ebx
push eax
mov edi, 0x150
push edi
push dword [ebp + 0x78]
mov dword [ebp + 0x70], eax
call esi
push ebx
push dword [ebp + 0x70]
push edi
push dword [ebp + 0x78]
call esi
mov edi, eax
push edi
mov dword [ebp + 0x70], edi
call fcn.00407b01
test eax, eax
je 0x445e5d
cmp dword [edi + 8], ebx
je 0x445e5d
push dword [0x51069c]
mov edi, dword [sym.imp.USER32.dll_UpdateWindow]
call edi
mov ecx, dword [ebp + 0x70]
push ebx
call fcn.0040c258
push dword [0x5106a4]
push dword [0x51069c]
call fcn.0042b0bf
push dword [0x5106a4]
call edi
mov eax, dword [ebp + 0x70]
push dword [eax + 8]
push 9
push 0x110b
push dword [0x5106a4]
call esi
mov eax, dword [ebp + 0x78]
mov ecx, dword [0x5106b4]
cmp eax, ecx
mov eax, dword [0x5106bc]
je 0x445e71
mov eax, ecx
push ebx
push ebx
push 0x14e
push eax
call esi
xor eax, eax
pop edi
pop esi
pop ebx
add ebp, 0x68
leave
ret 0x10