Function at 0x441b64
Capabilities:
Check for time delay via gettickcount
Log keystrokes via polling

Disassembly:
push ebp
lea ebp, [esp - 0x68]
sub esp, 0x4e0
push ebx
push esi
mov esi, dword [sym.imp.USER32.dll_GetScrollPos]
push edi
xor edi, edi
push edi
push dword [0x50b234]
call esi
xor ebx, ebx
inc ebx
push ebx
push dword [0x50b234]
mov dword [ebp + 0x64], eax
call esi
mov dword [ebp + 0x60], eax
mov eax, dword [ebp + 0x78]
cmp eax, dword [0x50b240]
je 0x442e87
cmp eax, dword [0x50b248]
je 0x442e87
mov edx, dword [0x50b250]
cmp eax, edx
jne 0x441c11
cmp dword [ebp + 0x7c], 0x300
jne 0x441c11
push edx
call dword [sym.imp.USER32.dll_GetWindowTextLengthW]
mov esi, eax
cmp esi, edi
je 0x441be4
cmp dword [0x516ef0], edi
jne 0x441bdd
cmp esi, 3
jg 0x441be4
mov edi, 0x1f4
jmp 0x441be7
push 0x64
pop edi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 0x4388f5
push edi
push 0x19091969
push dword [ebp + 0x70]
mov dword [0x50b1fc], eax
call dword [sym.imp.USER32.dll_SetTimer]
mov dword [0x516ef0], esi
jmp 0x442f25
cmp eax, dword [0x50b25c]
jne 0x441c24
push edi
call fcn.0043bb8a
jmp 0x442f25
cmp eax, dword [0x50b260]
jne 0x441c2f
push ebx
jmp 0x441c1a
cmp eax, dword [0x50b234]
jne 0x441c3e
mov eax, ebx
jmp 0x442f27
mov esi, dword [ebp + 0x74]
mov ecx, 0x9d85
cmp esi, ecx
jg 0x44220c
je 0x4421f5
lea eax, [ecx - 0x72]
cmp esi, eax
jg 0x441eda
je case.0x442b46.41013
add eax, 0xffffffa6
cmp esi, eax
jg 0x441dde
je 0x441dd4
mov eax, 0x9ca4
cmp esi, eax
jg 0x441d58
je 0x441d46
mov eax, esi
dec eax
je 0x441d23
dec eax
je 0x441d1f
sub eax, 5
je case.0x442b46.41017
sub eax, 0x9c84
jne case.0x442b46.41018
mov esi, 0x50b2e0
push esi
call fcn.00427056
push edi
push 0x427082
push dword [ebp + 0x70]
push 0xbb8
push dword [0x50b224]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
cmp eax, 1
jne 0x44264d
push esi
call fcn.0042706c
mov eax, dword [0x50b2e4]
cdq
and edx, 0xff
add eax, edx
sar eax, 8
dec eax
mov dword [0x4a2af8], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 1
push 0xfade
push 0x113
push dword [0x50b228]
mov dword [0x50bb94], eax
call fcn.0043b682
jmp case.0x442b46.41017
push edi
push ebx
jmp 0x441d36
push 0xd
call dword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jge 0x44264d
push edi
push edi
push 0x1116
push dword [0x50b230]
jmp 0x442c78
push edi
push edi
push 0x10
push dword [ebp + 0x70]
call dword [sym.imp.USER32.dll_PostMessageW]
jmp case.0x442b46.41017
mov eax, esi
sub eax, 0x9cae
je 0x441dbb
sub eax, 5
je 0x441d79
sub eax, 5
jne case.0x442b46.41018
call fcn.0043d4d8
jmp case.0x442b46.41017
push edi
push edi
push 0x7f02
call fcn.004346f7
call fcn.0043289a
push 0x453148
push 0x50a5f8
call fcn.00428e2a
test eax, eax
je 0x441daa
push edi
push edi
push 0x10
push dword [ebp + 0x70]
call dword [sym.imp.USER32.dll_PostMessageW]
push edi
push edi
push 0x7f00
call fcn.004346f7
jmp case.0x442b46.41017
cmp dword [0x50b1d4], edi
jne case.0x442b46.41017
push str.Refresh...
push edi
push 1
jmp 0x44213c
call fcn.0043d61b
jmp case.0x442b46.41017
mov eax, 0x9d09
cmp esi, eax
jg 0x441e2f
je 0x441e19
mov eax, esi
sub eax, 0x9cbd
je case.0x442b46.41016
dec eax
je case.0x442b46.41017
dec eax
je case.0x442b46.41015
sub eax, 0x49
jne case.0x442b46.41018
push dword [0x50bb88]
call fcn.00435159
jmp case.0x442b46.41017
push dword [0x50bb88]
push dword [0x50b230]
call fcn.0043a7ee
jmp case.0x442b46.41017
mov eax, esi
sub eax, 0x9d0a
je 0x442bc9
dec eax
je 0x442e7c
sub eax, 7
je 0x442b0d
mov ebx, dword [sym.imp.USER32.dll_GetMenuStringW]
lea eax, [esi - 0xa4d8]
cmp eax, 0x62
ja 0x441e8a
push edi
push 0x104
lea eax, [ebp - 0x280]
push eax
push esi
push dword [0x50d884]
call ebx
test eax, eax
je 0x441e8a
push edi
lea eax, [ebp - 0x280]
push eax
call fcn.0042aef9
push eax
call fcn.0042e97f
lea eax, [esi - 0xa53c]
cmp eax, 0x62
ja case.0x442b46.41017
push dword [0x50b228]
call dword [sym.imp.USER32.dll_UpdateWindow]
push edi
push 0x200
lea eax, [ebp - 0x478]
push eax
push esi
push dword [0x50d888]
call ebx
test eax, eax
je 0x44264d
lea eax, [ebp - 0x478]
push eax
call fcn.0042aef9
push eax
call fcn.0042f750
jmp case.0x442b46.41017
lea eax, [esi - 0x9d6c]
cmp eax, 0x18
ja case.0x442b46.41018
jmp dword [eax*4 + 0x442f34]
xor eax, eax
cmp dword [0x4a2b10], edi
sete al
mov dword [0x4a2b10], eax
push eax
push esi
call fcn.00432e9c
jmp case.0x442b46.41017
xor eax, eax
cmp dword [0x50d7fc], edi
sete al
mov dword [0x50d7fc], eax
push eax
push esi
call fcn.00432e9c
mov dword [0x50bbb4], edi
mov dword [0x50bbb8], edi
call fcn.00416e8e
jmp case.0x442b46.41017
xor eax, eax
cmp dword [0x50d800], edi
sete al
mov dword [0x50d800], eax
jmp 0x441f1c
xor eax, eax
cmp dword [0x50d804], edi
sete al
mov dword [0x50d804], eax
jmp 0x441f1c
xor eax, eax
cmp dword [0x50d820], edi
sete al
mov dword [0x50d820], eax
jmp 0x441f1c
xor eax, eax
cmp dword [0x50d824], edi
sete al
push eax
push esi
mov dword [0x50d824], eax
call fcn.00432e9c
mov eax, dword [0x50d7e8]
cmp eax, edi
je 0x44264d
xor ebx, ebx
cmp dword [eax + 0xc], edi
jle 0x44264d
push 0x14
pop esi
mov ecx, dword [esi + eax]
cmp ecx, edi
je 0x441fe4
mov edx, dword [ecx + 0x14]
cmp edx, 9
jne 0x441fc0
cmp dword [ecx + 0xfd0], edi
je 0x441fc0
cmp dword [ecx + 0xfc8], edi
jne 0x441fd8
cmp edx, 1
jne 0x441fe4
mov edx, dword [ecx + 0xfd0]
cmp edx, edi
je 0x441fe4
cmp dword [edx + 0x3a34], 1
jne 0x441fe4
push 1
call fcn.0040b812
mov eax, dword [0x50d7e8]
inc ebx
add esi, 4
cmp ebx, dword [eax + 0xc]
jl 0x441fa1
jmp case.0x442b46.41017
xor eax, eax
cmp dword [0x50d828], edi
sete al
push eax
push esi
mov dword [0x50d828], eax
call fcn.00432e9c
mov eax, dword [0x50d7e8]
cmp eax, edi
je 0x44264d
xor ebx, ebx
cmp dword [eax + 0xc], edi
jle 0x44264d
push 0x14
pop esi
mov ecx, dword [esi + eax]
cmp ecx, edi
je 0x442067
mov edx, dword [ecx + 0x14]
cmp edx, 9
jne 0x442043
cmp dword [ecx + 0xfd0], edi
je 0x442043
cmp dword [ecx + 0xfc8], edi
jne 0x44205b
cmp edx, 1
jne 0x442067
mov edx, dword [ecx + 0xfd0]
cmp edx, edi
je 0x442067
cmp dword [edx + 0x3a34], 1
jne 0x442067
push 1
call fcn.0040b812
mov eax, dword [0x50d7e8]
inc ebx
add esi, 4
cmp ebx, dword [eax + 0xc]
jl 0x442024
jmp case.0x442b46.41017
xor eax, eax
cmp dword [0x50d834], edi
sete al
mov dword [0x50d834], eax
push eax
push esi
call fcn.00432e9c
push edi
call fcn.0043cdf5
jmp case.0x442b46.41017
xor eax, eax
cmp dword [0x50d838], edi
sete al
mov dword [0x50d838], eax
jmp 0x442085
xor eax, eax
cmp dword [0x50d82c], edi
sete al
push eax
push esi
mov dword [0x50d82c], eax
call fcn.00432e9c
mov eax, dword [0x50d7e8]
cmp eax, edi
je 0x44264d
xor ebx, ebx
cmp dword [eax + 0xc], edi
jle 0x44264d
push 0x14
pop esi
mov ecx, dword [esi + eax]
cmp ecx, edi
je 0x442104
cmp dword [ecx + 0xfd0], edi
je 0x442104
cmp dword [ecx + 0xfc8], edi
jne 0x4420f8
cmp dword [ecx + 0x14], 4
jne 0x442104
push 1
call fcn.0040b812
mov eax, dword [0x50d7e8]
inc ebx
add esi, 4
cmp ebx, dword [eax + 0xc]
jl 0x4420db
jmp case.0x442b46.41017
xor eax, eax
cmp dword [0x4a2b20], edi
sete al
push eax
push esi
mov dword [0x4a2b20], eax
call fcn.00432e9c
cmp dword [0x50b1d4], edi
jne 0x44264d
push str.Refresh...
push edi
push ebx
push dword [0x50bb9c]
call fcn.00405e29
add esp, 0x10
jmp 0x44208c
xor eax, eax
cmp dword [0x50d810], edi
sete al
push eax
push esi
mov dword [0x50d810], eax
call fcn.00432e9c
cmp dword [0x50d810], edi
je 0x44217f
push ebx
mov dword [0x50d814], ebx
push 0x9d81
call fcn.00432e9c
call fcn.0043cabb
jmp case.0x442b46.41017
xor eax, eax
cmp dword [0x50d814], edi
sete al
push eax
push esi
mov dword [0x50d814], eax
call fcn.00432e9c
cmp dword [0x50d814], edi
jne 0x44217f
push edi
mov dword [0x50d810], edi
push 0x9d80
jmp 0x44217a
xor eax, eax
cmp dword [0x4a2b18], edi
sete al
mov dword [0x4a2b18], eax
jmp 0x441f00
xor eax, eax
cmp dword [0x4a2b1c], edi
sete al
mov dword [0x4a2b1c], eax
jmp 0x441f00
xor eax, eax
cmp dword [0x50d818], edi
sete al
mov dword [0x50d818], eax
jmp 0x441f00
xor eax, eax
cmp dword [0x50d81c], edi
sete al
push eax
mov dword [0x50d81c], eax
push ecx
jmp 0x441f02
mov eax, 0xa034
cmp esi, eax
jg 0x442b1d
je 0x442b0d
mov ecx, 0x9dbe
cmp esi, ecx
jg 0x4428bd
je 0x44289c
lea eax, [ecx - 0x15]
cmp esi, eax
jg 0x44269a
je 0x44247a
add ecx, 0xffffffc8
cmp esi, ecx
je 0x442463
cmp esi, 0x9d89
jle case.0x442b46.41018
add eax, 0xffffffe2
cmp esi, eax
jle 0x442408
cmp esi, 0x9d93
jle case.0x442b46.41018
mov eax, 0x9d96
cmp esi, eax
jle 0x44237f
cmp esi, 0x9da8
jne case.0x442b46.41018
push 0x34
lea eax, [ebp + 0x2c]
push edi
push eax
mov dword [ebp + 0x24], 0x3c
call fcn.00448216
mov eax, dword [0x50b228]
add esp, 0xc
push dword [0x4a2abc]
mov dword [ebp + 0x28], eax
mov eax, dword [0x50b20c]
mov eax, dword [eax*4 + 0x50ada8]
push 0x60
mov esi, 0x50ab90
push 8
mov dword [ebp + 0x2c], edi
mov dword [ebp + 0x30], esi
mov dword [ebp + 0x34], edi
mov dword [ebp + 0x38], 0x6141
mov dword [ebp + 0x3c], eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [ebp + 0x58], eax
lea eax, [ebp + 0x24]
push eax
mov dword [ebp + 0x5c], 0xa0
call dword [sym.imp.COMDLG32.dll_ChooseFontW]
test eax, eax
je 0x44264d
push dword [ebp + 0x3c]
call fcn.004492a6
cmp dword [0x50b20c], eax
je 0x442324
push 0x10
push 0x46981c
push str.Color_rejected
push dword [0x50b228]
call fcn.0044f594
jmp case.0x442b46.41017
push esi
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
push edi
mov esi, eax
push esi
push 0x30
push dword [0x50b234]
call dword [sym.imp.USER32.dll_SendMessageW]
push dword [0x50b27c]
call dword [sym.imp.GDI32.dll_DeleteObject]
push ebx
push edi
push dword [0x50b234]
mov dword [0x50b27c], esi
call dword [sym.imp.USER32.dll_InvalidateRect]
mov eax, dword [ebp + 0x3c]
mov ecx, dword [0x50b20c]
push ebx
push eax
push dword [0x50b234]
mov dword [ecx*4 + 0x50ada8], eax
call fcn.00429cbb
jmp case.0x442b46.41017
push eax
push 0x9d94
lea ecx, [esi - 0x9d94]
push esi
mov dword [0x4a2b24], ecx
call fcn.00432ee6
mov eax, dword [0x50d7e8]
cmp eax, edi
je 0x4423fd
cmp dword [eax + 0xc], edi
mov dword [ebp + 0x78], edi
jle 0x4423fd
push 0x14
pop ebx
mov esi, dword [ebx + eax]
cmp esi, edi
je 0x4423ef
mov ecx, dword [esi + 0x14]
cmp ecx, 6
jl 0x4423ef
cmp ecx, 7
jle 0x4423c7
add ecx, 0xfffffff7
cmp ecx, 1
ja 0x4423ef
lea eax, [esi + 0x20]
push eax
push edi
push esi
call fcn.0040ab11
lea eax, [esi + 0x424]
push eax
push 1
push esi
call fcn.0040ab11
push 1
mov ecx, esi
call fcn.0040b812
mov eax, dword [0x50d7e8]
inc dword [ebp + 0x78]
mov ecx, dword [ebp + 0x78]
add ebx, 4
cmp ecx, dword [eax + 0xc]
jl 0x4423ab
push edi
call fcn.0043caa0
jmp case.0x442b46.41017
xor ecx, ecx
cmp esi, eax
sete cl
push eax
push 0x9d8a
push esi
mov dword [0x50d830], ecx
call fcn.00432ee6
mov eax, dword [0x50d7e8]
cmp eax, edi
je 0x44264d
xor ebx, ebx
cmp dword [eax + 0xc], edi
jle 0x44264d
push 0x14
pop esi
mov ecx, dword [esi + eax]
cmp ecx, edi
je 0x442455
cmp dword [ecx + 0x14], 6
jl 0x442455
push 1
call fcn.0040b812
mov eax, dword [0x50d7e8]
inc ebx
add esi, 4
cmp ebx, dword [eax + 0xc]
jl 0x44243c
jmp case.0x442b46.41017
xor eax, eax
cmp dword [0x4a2b14], edi
sete al
push eax
mov dword [0x4a2b14], eax
push ecx
jmp 0x44217a
push 0x17
pop ecx
push 0x34
mov ebx, 0x50ab30
lea eax, [ebp + 0x2c]
push 0
mov esi, ebx
lea edi, [ebp - 0x78]
push eax
rep movsd dword es:[edi], dword [esi]
mov dword [ebp + 0x24], 0x3c
call fcn.00448216
mov eax, dword [0x50b228]
and dword [ebp + 0x2c], 0
and dword [ebp + 0x34], 0
add esp, 0xc
push dword [0x4a2abc]
mov dword [ebp + 0x28], eax
lea eax, [ebp - 0x78]
mov dword [ebp + 0x30], eax
mov eax, dword [0x50b20c]
mov eax, dword [eax*4 + 0x50abec]
push 0x60
push 8
mov dword [ebp + 0x38], 0x2141
mov dword [ebp + 0x3c], eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [ebp + 0x58], eax
mov eax, dword [ebp + 0x30]
mov esi, 0x4797c4
push esi
add eax, 0x1c
push eax
mov dword [ebp + 0x5c], 0xa0
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
jne 0x44253b
push 0x3e
push eax
mov word [ebp - 0x1c], ax
lea eax, [ebp - 0x1a]
push eax
call fcn.00448216
add esp, 0xc
push 0x20
lea eax, [ebp - 0x1c]
push eax
push esi
push str.SOFTWAREMicrosoftWindows_NTCurrentVersionFontSubstitutes
push 0x80000002
call fcn.00428246
test eax, eax
je 0x44253b
lea eax, [ebp - 0x1c]
push eax
mov eax, dword [ebp + 0x30]
add eax, 0x1c
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp + 0x24]
push eax
call dword [sym.imp.COMDLG32.dll_ChooseFontW]
test eax, eax
je 0x44264d
push dword [ebp + 0x3c]
call fcn.004492a6
cmp dword [0x50b20c], eax
je 0x442579
push 0x10
push 0x46981c
push str.Color_rejected
push dword [0x50b228]
call fcn.0044f594
jmp 0x44263c
push str.font
push 1
push 0x7f02
call fcn.004346f7
mov eax, dword [ebp + 0x3c]
push 0x17
pop ecx
push eax
push 0
lea esi, [ebp - 0x78]
mov edi, ebx
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x50b20c]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 0x111e
push dword [0x50b230]
mov dword [ecx*4 + 0x50abec], eax
call esi
push ebx
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
push 0
mov edi, eax
push edi
push 0x30
push dword [0x50b230]
call esi
push dword [0x50b280]
call dword [sym.imp.GDI32.dll_DeleteObject]
mov esi, dword [0x50b1cc]
mov dword [0x50b280], edi
call fcn.004360f0
cmp dword [0x50b1cc], esi
je 0x44262c
mov eax, dword [0x50d7e8]
xor esi, esi
inc esi
cmp dword [eax + 0xc], esi
jle 0x44262c
push 0x18
pop edi
push dword [edi + eax]
call fcn.004077a1
test eax, eax
je 0x44261e
mov eax, dword [0x50d7e8]
push dword [edi + eax]
call fcn.00439ad4
mov eax, dword [0x50d7e8]
inc esi
add edi, 4
cmp esi, dword [eax + 0xc]
jl 0x442605
push 1
push 0
push dword [0x50b230]
call dword [sym.imp.USER32.dll_InvalidateRect]
push str.font
push 1
push 0x7f00
call fcn.004346f7
xor edi, edi
mov esi, dword [sym.imp.USER32.dll_GetScrollPos]
push edi
push dword [0x50b234]
call esi
cmp dword [ebp + 0x64], eax
je 0x442672
push dword [ebp + 0x64]
push edi
push dword [0x50b234]
call fcn.00428ad6
push 1
push dword [0x50b234]
call esi
cmp dword [ebp + 0x60], eax
je 0x442f25
push dword [ebp + 0x60]
push 1
push dword [0x50b234]
call fcn.00428ad6
jmp 0x442f25
mov eax, esi
sub eax, 0x9daa
je 0x4427dc
dec eax
je 0x4426d6
sub eax, 0x12
jne case.0x442b46.41018
cmp dword [0x4a2b2c], edi
sete al
push eax
push 0x9dbd
mov dword [0x4a2b2c], eax
call fcn.00432e9c
call fcn.00432f5e
jmp case.0x442b46.41017
mov eax, dword [0x50b20c]
shl eax, 2
mov esi, 0x4a2f00
cmp dword [eax + 0x50b0f8], edi
je 0x44271c
mov edx, dword [eax + 0x50ada0]
mov ecx, esi
cmp dword [ecx], edx
je 0x44271c
add ecx, 4
cmp ecx, 0x4a2f40
jl 0x4426f3
xor ecx, ecx
cmp dword [ecx*4 + 0x4a2f00], edi
je 0x442715
inc ecx
cmp ecx, 0x10
jl 0x442704
jmp 0x44271c
mov dword [ecx*4 + 0x4a2f00], edx
mov ecx, dword [0x50b228]
mov eax, dword [eax + 0x50ada0]
push 0x516ecc
mov dword [0x516ecc], 0x24
mov dword [0x516ed0], ecx
mov dword [0x516ed8], eax
mov dword [0x516edc], esi
mov dword [0x516ee0], 3
call dword [sym.imp.COMDLG32.dll_ChooseColorW]
test eax, eax
je 0x44264d
push dword [0x516ed8]
call fcn.004492d4
mov ecx, dword [0x50b20c]
cmp ecx, eax
jne 0x442308
mov eax, dword [0x516ed8]
mov dword [ecx*4 + 0x50ada0], eax
call fcn.004360f0
mov eax, dword [0x50b20c]
push dword [eax*4 + 0x50ada0]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push edi
push 0x111d
push dword [0x50b230]
call esi
mov eax, dword [0x50b20c]
push dword [eax*4 + 0x50abec]
push edi
push 0x111e
push dword [0x50b230]
call esi
push 0x305
push edi
push edi
push dword [0x50b230]
call dword [sym.imp.USER32.dll_RedrawWindow]
jmp case.0x442b46.41017
mov eax, dword [0x50b20c]
mov eax, dword [eax*4 + 0x50b0f8]
mov edx, 0x4a2ec0
cmp eax, edi
je 0x44281c
mov ecx, edx
cmp dword [ecx], eax
je 0x44281c
add ecx, 4
cmp ecx, 0x4a2f00
jl 0x4427f3
xor ecx, ecx
cmp dword [ecx*4 + 0x4a2ec0], edi
je 0x442815
inc ecx
cmp ecx, 0x10
jl 0x442804
jmp 0x44281c
mov dword [ecx*4 + 0x4a2ec0], eax
mov ecx, dword [0x50b228]
push 0x516ea8
mov dword [0x516ea8], 0x24
mov dword [0x516eac], ecx
mov dword [0x516eb4], eax
mov dword [0x516eb8], edx
mov dword [0x516ebc], 3
call dword [sym.imp.COMDLG32.dll_ChooseColorW]
test eax, eax
je 0x44264d
push dword [0x516eb4]
call fcn.004492d4
mov ecx, dword [0x50b20c]
cmp ecx, eax
jne 0x442308
mov eax, dword [0x516eb4]
push eax
push edi
push 0x443
push dword [0x50b234]
mov dword [ecx*4 + 0x50b0f8], eax
call dword [sym.imp.USER32.dll_SendMessageW]
call fcn.0043524c
jmp case.0x442b46.41017
xor eax, eax
cmp dword [0x50b20c], edi
sete al
push eax
push ecx
mov dword [0x50b20c], eax
call fcn.00432e9c
call fcn.00437abf
jmp case.0x442b46.41017
mov eax, 0x9fc4
cmp esi, eax
jg 0x442a15
je 0x4429ea
mov ecx, 0x9dc1
cmp esi, ecx
je 0x4429b4
add ecx, 5
cmp esi, ecx
je 0x44297f
cmp esi, 0x9dcf
jle case.0x442b46.41018
cmp esi, 0x9dd3
jg case.0x442b46.41018
sub esi, 0x9dd0
mov eax, str.calc.exe
mov ebx, 0x453148
mov dword [ebp + 0x78], 1
je 0x442943
dec esi
je 0x44293c
dec esi
je 0x44292e
dec esi
jne 0x44294d
mov eax, str.control.exe
mov ebx, str.ncpa.cpl
jmp 0x44294d
mov eax, str.eventvwr.exe
mov dword [ebp + 0x78], 3
jmp 0x44294d
mov ebx, str.devmgmt.msc
jmp 0x442948
mov ebx, str.diskmgmt.msc
mov eax, str.mmc.exe
push eax
mov esi, 0x50a800
push esi
lea eax, [ebp - 0x280]
push 0x4532dc
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
push dword [ebp + 0x78]
lea eax, [ebp - 0x280]
push esi
push ebx
push eax
call fcn.0042c980
jmp case.0x442b46.41017
xor eax, eax
cmp dword [0x50d840], edi
sete al
push eax
push ecx
mov dword [0x50d840], eax
call fcn.00432e9c
xor eax, eax
cmp dword [0x50d840], edi
setne al
dec eax
dec eax
push eax
push dword [0x50b228]
call fcn.0042aa71
jmp case.0x442b46.41017
xor eax, eax
cmp dword [0x50d844], edi
sete al
push eax
push ecx
mov dword [0x50d844], eax
call fcn.00432e9c
push 0x50a880
push dword [0x50d844]
push str.OneInstance
push 0x4575f4
call fcn.00429b38
jmp case.0x442b46.41017
push dword [0x50b228]
call dword [sym.imp.USER32.dll_UpdateWindow]
push edi
push 0x43914a
push dword [0x50b228]
push 0x66
push dword [0x50b224]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
jmp case.0x442b46.41017
mov eax, esi
sub eax, 0x9fc5
je 0x442aee
sub eax, 0x6d
je 0x442c28
dec eax
jne case.0x442b46.41018
mov esi, dword [sym.imp.USER32.dll_GetFocus]
call esi
mov ebx, eax
push 0x20
lea eax, [ebp - 0x1c]
push eax
call esi
push eax
call dword [sym.imp.USER32.dll_GetClassNameW]
push str.Tree
lea eax, [ebp - 0x1c]
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrW]
test eax, eax
je 0x442a83
push dword [0x50bb90]
call fcn.004345eb
cmp eax, edi
je 0x44264d
push 1
push dword [eax + 0x824]
call fcn.0042e97f
jmp case.0x442b46.41017
call esi
cmp eax, dword [0x50b268]
jne 0x442a9a
push edi
push edi
push 0x301
push ebx
jmp 0x442c78
call esi
cmp eax, dword [0x50b250]
je 0x442a8d
cmp ebx, dword [0x50b234]
jne case.0x442b46.41017
push dword [0x50bb90]
call fcn.004345eb
cmp eax, edi
jne 0x442c83
push str.Dlg_OnCommand
push 0x13de
push str..UsbTreeView.cpp
push str.INT3_in__S_line__u__function__S
push 1
call fcn.0044def7
add esp, 0x14
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp case.0x442b46.41017
push dword [0x50b228]
call dword [sym.imp.USER32.dll_UpdateWindow]
push edi
push 0x43953f
push dword [0x50b228]
push 0x67
jmp 0x442a04
push dword [0x50bb88]
call fcn.0043db76
jmp case.0x442b46.41017
mov eax, 0xa474
cmp esi, eax
jg 0x442bd4
je 0x442bc9
lea eax, [esi - 0xa035]
cmp eax, 0x12
ja case.0x442b46.41018
movzx eax, byte [eax + 0x442fc0]
jmp dword [eax*4 + 0x442f98]
push edx
push dword [0x50b228]
call fcn.00429c45
jmp case.0x442b46.41017
push dword [0x50b240]
push dword [0x50b228]
call fcn.00429c45
push edi
push 1
push 0x14f
push dword [0x50b240]
jmp 0x442c78
push dword [0x50b248]
push dword [0x50b228]
call fcn.00429c45
push edi
push 1
push 0x14f
push dword [0x50b248]
jmp 0x442c78
push edi
call fcn.0043bb8a
jmp case.0x442b46.41017
push 1
jmp 0x442ba7
call fcn.0043da1d
jmp case.0x442b46.41017
call fcn.0043a6e2
jmp case.0x442b46.41017
push dword [0x50bb90]
jmp 0x441e0f
cmp esi, 0xa475
je 0x442e7c
cmp esi, 0xa476
je case.0x442b46.41013
cmp esi, 0xa487
jle case.0x442b46.41018
cmp esi, 0xa48b
jle 0x442d25
cmp esi, 0xa492
je 0x442d25
cmp esi, 0xb600
je 0x442ab0
cmp esi, 0xb603
jne case.0x442b46.41018
call dword [sym.imp.USER32.dll_GetFocus]
mov esi, eax
push 0x20
lea eax, [ebp + 0x40]
push eax
push esi
call dword [sym.imp.USER32.dll_GetClassNameA]
cmp esi, edi
je 0x44264d
push 0x479660
lea eax, [ebp + 0x40]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
je 0x442c6f
push str.Rich
lea eax, [ebp + 0x40]
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrIA]
test eax, eax
je 0x44264d
push 0xffffffffffffffff
push edi
push 0xb1
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x442b46.41017
mov ebx, dword [eax + 0xc70]
cmp ebx, edi
je 0x44264d
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x44264d
lea eax, [ebp + 0x70]
push eax
lea eax, [ebp + 0x78]
push eax
push 0xb0
push dword [0x50b234]
mov dword [ebp + 0x78], edi
mov dword [ebp + 0x70], edi
call dword [sym.imp.USER32.dll_SendMessageW]
mov esi, dword [ebp + 0x70]
mov eax, dword [ebp + 0x78]
cmp esi, eax
jle 0x44264d
sub esi, eax
lea eax, [ebx + eax*2]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, esi
jge 0x442cdf
mov esi, eax
xor ecx, ecx
push 2
pop edx
lea eax, [esi + 1]
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004483d6
mov edi, eax
mov eax, dword [ebp + 0x78]
add esi, esi
push esi
lea eax, [ebx + eax*2]
push eax
push edi
call fcn.00448280
add esp, 0x10
push 1
xor eax, eax
push edi
mov word [esi + edi], ax
call fcn.0042e97f
push edi
call fcn.00448411
pop ecx
jmp 0x44264d
push dword [0x50bb90]
call fcn.004345eb
mov ebx, 0xa488
cmp esi, ebx
mov dword [ebp + 0x78], eax
mov eax, dword [eax + 0xfd0]
jl 0x442d5a
cmp esi, 0xa489
jle 0x442db1
cmp esi, 0xa48a
je 0x442d8a
cmp esi, 0xa492
je 0x442db1
push str.Dlg_OnCommand
push edi
push 0x7f8a
call fcn.004346f7
mov eax, esi
sub eax, ebx
mov ecx, 0x44db87
je 0x442dd8
dec eax
je 0x442dd1
dec eax
je 0x442dca
dec eax
je 0x442dc3
sub eax, 7
jne 0x442ddc
mov ebx, 0x44c1db
jmp 0x442dde
mov eax, dword [ebp + 0x78]
cmp dword [eax + 0xfc8], edi
jne 0x442d5a
push 0x30
push 0x46981c
push str.Oops__no_port
push dword [0x50b228]
call fcn.0044f54a
jmp case.0x442b46.41017
cmp eax, edi
jne 0x442d5a
push 0x30
push 0x46981c
push str.Oops__no_device
jmp 0x442da1
mov ebx, 0x44c1d6
jmp 0x442dde
mov ebx, 0x44bfee
jmp 0x442dde
mov ebx, 0x44bf04
jmp 0x442dde
mov ebx, ecx
jmp 0x442dde
mov ebx, edi
mov eax, dword [ebp + 0x78]
mov eax, dword [eax + 0xfd0]
cmp eax, edi
je 0x442df3
mov edx, dword [eax + 0x10]
mov dword [ebp + 0x70], edx
jmp 0x442df6
mov dword [ebp + 0x70], edi
cmp ebx, ecx
jne 0x442e19
cmp dword [eax + 0x39f4], edi
jne 0x442e0b
cmp word [eax + 0xc30], di
jne 0x442e19
push edi
push dword [ebp + 0x78]
push 0x4419c3
call fcn.0042868d
cmp ebx, 0x44bf04
je 0x442e29
cmp ebx, 0x44bfee
jne 0x442e47
cmp dword [ebp + 0x70], edi
je 0x442e47
push 0x43e19a
push 0xbb8
push dword [ebp + 0x70]
push dword [0x50b228]
call dword [sym.imp.USER32.dll_SetTimer]
cmp esi, 0xa492
jne 0x442e5a
push dword [0x50b228]
call fcn.00435239
push edi
push dword [ebp + 0x78]
push ebx
call fcn.0042868d
jmp 0x442ae1
push dword [0x50bb90]
call fcn.004345eb
push dword [eax + 8]
jmp 0x442b13
push dword [0x50bb90]
jmp 0x441e1f
cmp dword [ebp + 0x7c], 9
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
jne 0x442f0c
push edi
push edi
push 0x147
push eax
call esi
push edi
push eax
mov ebx, 0x150
push ebx
push dword [ebp + 0x78]
mov dword [ebp + 0x70], eax
call esi
push edi
push dword [ebp + 0x70]
push ebx
push dword [ebp + 0x78]
call esi
mov ebx, eax
push ebx
call fcn.004077a1
test eax, eax
je 0x442f0c
cmp dword [ebx + 8], edi
je 0x442f0c
push dword [0x50b228]
mov edi, dword [sym.imp.USER32.dll_UpdateWindow]
call edi
push 0
mov ecx, ebx
call fcn.0040786e
push dword [0x50b230]
push dword [0x50b228]
call fcn.00429c45
push dword [0x50b230]
call edi
push dword [ebx + 8]
push 9
push 0x110b
push dword [0x50b230]
call esi
xor edi, edi
mov eax, dword [0x50b240]
cmp dword [ebp + 0x78], eax
jne 0x442f1b
mov eax, dword [0x50b248]
push edi
push edi
push 0x14e
push eax
call esi
xor eax, eax
pop edi
pop esi
pop ebx
add ebp, 0x68
leave
ret 0x10