Function at 0x463400
Capabilities:
Create process on windows
Create thread
Find taskbar
Get common file path
Get program files directory
Link many functions at runtime
Query environment variable
Read .ini file
Resolve function by parsing pe exports

Disassembly:
sub esp, 0xc7c
mov eax, dword [0x4c4004]
xor eax, esp
mov dword [esp + 0xc74], eax
mov eax, dword [0x4db8d4]
mov dword [esp + 4], edx
push ebx
mov ebx, ecx
push ebp
push esi
push edi
cmp eax, 0xc
jg 0x463438
inc eax
mov dword [0x4db8d4], eax
cmp eax, 0xc
jne 0x463438
call fcn.00471930
mov ebp, dword [esp + 0xc90]
mov edi, ebp
mov eax, dword [0x4deb74]
dec eax
shr edi, 0x10
movzx esi, bp
cmp eax, 7
ja case.default.0x463452
jmp dword [eax*4 + 0x4646f4]
mov ecx, esi
call fcn.00409a50
mov ecx, esi
call fcn.00413ef0
jmp case.default.0x463452
mov ecx, esi
call fcn.0040a3b0
jmp case.default.0x463452
mov ecx, esi
call fcn.00425d30
jmp case.default.0x463452
mov ecx, esi
call fcn.004301a0
mov edx, edi
mov ecx, esi
call fcn.004442d0
jmp case.default.0x463452
mov ecx, esi
call fcn.00448b20
jmp case.default.0x463452
mov ecx, esi
call fcn.00453900
cmp esi, 0x7530
ja 0x463a36
je 0x463a13
cmp esi, 0x4e39
ja 0x463693
je 0x463617
add esi, 0xffffd6ee
cmp esi, 0xbb
ja case.0x463a45.30028
movzx eax, byte [esi + 0x464728]
jmp dword [eax*4 + 0x464714]
xor eax, eax
push 0x7fe
push eax
mov word [esp + 0x488], ax
lea eax, [esp + 0x48a]
push eax
call fcn.0048e770
add esp, 0xc
lea eax, [esp + 0x480]
push 0x400
push eax
push 0
call dword [sym.imp.kernel32.dll_GetModuleFileNameW]
push 0x5c
push 0
lea eax, [esp + 0x488]
push eax
call dword [sym.imp.SHLWAPI.dll_StrRChrW]
lea ecx, [esp + 0x480]
sub eax, ecx
and eax, 0xfffffffe
cmp eax, 0x800
jae 0x4646ee
xor ecx, ecx
mov word [esp + eax + 0x480], cx
lea eax, [esp + 0x480]
push 0x4ba788
push eax
call dword [sym.imp.SHLWAPI.dll_StrCatW]
mov eax, dword [0x4def88]
xorps xmm0, xmm0
mov dword [esp + 0x20], eax
lea eax, [esp + 0x480]
mov dword [esp + 0x28], eax
lea eax, [esp + 0x18]
movlpd qword [esp + 0x3c], xmm0
movlpd qword [esp + 0x44], xmm0
movlpd qword [esp + 0x4c], xmm0
movaps xmm0, xmmword [0x4c1390]
push eax
mov dword [esp + 0x1c], 0x3c
mov dword [esp + 0x20], 0x4c
mov dword [esp + 0x28], 0
movups xmmword [esp + 0x30], xmm0
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
xor eax, eax
jmp 0x4646d5
call fcn.0045e9e0
xor eax, eax
jmp 0x4646d5
cmp dword [0x4df1ac], 0
jne 0x4635ee
push 5
push 0
push 0
push 0x4ba7a8
push 0x4af6a8
push dword [0x4def88]
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x463602
push 1
push 0xf
push 0x4de958
push dword [0x4def88]
call fcn.00401149
push 0x3e8
call dword [sym.imp.kernel32.dll_Sleep]
push 0x29af
jmp 0x463987
mov edx, 0x4ae308
mov ecx, 0x4ad81c
call fcn.004773a0
push eax
push dword [0x4def88]
call dword [sym.imp.user32.dll_SetWindowTextW]
mov edx, 0x4ad0dc
mov ecx, 0x4ba19c
call fcn.004773a0
mov esi, dword [sym.imp.user32.dll_SendMessageW]
push eax
push 2
push 0x40b
push dword [reloc.kernel32.dll_InitializeSListHead]
call esi
push 0x4ad29c
push 1
push 0x40b
push dword [reloc.kernel32.dll_InitializeSListHead]
call esi
call fcn.004673d0
xor ecx, ecx
call fcn.0046bfa0
mov ecx, 5
mov dword [0x4deb74], 1
call fcn.0046bfa0
xor eax, eax
jmp 0x4646d5
cmp esi, 0x4f42
ja 0x4639a1
je 0x463964
add esi, 0xffffb1c6
cmp esi, 5
ja case.0x463a45.30028
jmp dword [esi*4 + 0x4647e4]
mov edx, 0x4ae310
mov ecx, 0x4ad81c
call fcn.004773a0
push eax
push dword [0x4def88]
call dword [sym.imp.user32.dll_SetWindowTextW]
mov edx, 0x4ad0d4
mov ecx, 0x4ba19c
call fcn.004773a0
push eax
push 2
push 0x40b
push dword [reloc.kernel32.dll_InitializeSListHead]
call dword [sym.imp.user32.dll_SendMessageW]
call fcn.00467f10
xor ecx, ecx
call fcn.0046bfa0
mov ecx, 5
mov dword [0x4deb74], 2
call fcn.0046bfa0
cmp dword [0x4c5188], 2
je 0x4637b2
push 5
push 0x27a7
jmp 0x46379f
mov edx, 0x4ad7cc
mov ecx, 0x4ad81c
call fcn.004773a0
push eax
push dword [0x4def88]
call dword [sym.imp.user32.dll_SetWindowTextW]
mov edx, 0x4ad3dc
mov ecx, 0x4ba19c
call fcn.004773a0
push eax
push 2
push 0x40b
push dword [reloc.kernel32.dll_InitializeSListHead]
call dword [sym.imp.user32.dll_SendMessageW]
call fcn.004689d0
xor ecx, ecx
call fcn.0046bfa0
mov ecx, 5
mov dword [0x4deb74], 3
call fcn.0046bfa0
cmp dword [0x4c5194], 2
je 0x4637b2
push 5
push 0x27ae
push dword [0x4def88]
call dword [sym.imp.user32.dll_GetDlgItem]
push eax
call dword [sym.imp.user32.dll_ShowWindow]
xor eax, eax
jmp 0x4646d5
mov edx, 0x4ad7d4
mov ecx, 0x4ad81c
call fcn.004773a0
push eax
push dword [0x4def88]
call dword [sym.imp.user32.dll_SetWindowTextW]
mov edx, 0x4ad444
mov ecx, 0x4ba19c
call fcn.004773a0
push eax
push 2
push 0x40b
push dword [reloc.kernel32.dll_InitializeSListHead]
call dword [sym.imp.user32.dll_SendMessageW]
call fcn.004692b0
xor ecx, ecx
call fcn.0046bfa0
mov ecx, 5
mov dword [0x4deb74], 4
call fcn.0046bfa0
xor eax, eax
jmp 0x4646d5
cmp dword [0x4d2c80], 0
jne 0x463832
mov dword [0x4d2c80], 0x29fa
mov edx, 0x4ad7fc
mov ecx, 0x4ad81c
call fcn.004773a0
push eax
push dword [0x4def88]
call dword [sym.imp.user32.dll_SetWindowTextW]
mov edx, 0x4ad480
mov ecx, 0x4ba19c
call fcn.004773a0
push eax
push 2
push 0x40b
push dword [reloc.kernel32.dll_InitializeSListHead]
call dword [sym.imp.user32.dll_SendMessageW]
call fcn.0046b870
xor ecx, ecx
call fcn.0046bfa0
mov ecx, 5
mov dword [0x4deb74], 5
call fcn.0046bfa0
xor eax, eax
jmp 0x4646d5
mov edx, 0x4ae4a8
mov ecx, 0x4ad81c
call fcn.004773a0
push eax
push dword [0x4def88]
call dword [sym.imp.user32.dll_SetWindowTextW]
mov edx, 0x4ad560
mov ecx, 0x4ba19c
call fcn.004773a0
push eax
push 2
push 0x40b
push dword [reloc.kernel32.dll_InitializeSListHead]
call dword [sym.imp.user32.dll_SendMessageW]
call fcn.0046fc40
xor ecx, ecx
call fcn.0046bfa0
mov ecx, 5
mov dword [0x4deb74], 6
call fcn.0046bfa0
xor eax, eax
jmp 0x4646d5
mov edx, 0x4ade90
mov ecx, 0x4ad81c
call fcn.004773a0
push eax
push dword [0x4def88]
call dword [sym.imp.user32.dll_SetWindowTextW]
mov edx, 0x4ad76c
mov ecx, 0x4ba19c
call fcn.004773a0
push eax
push 2
push 0x40b
push dword [reloc.kernel32.dll_InitializeSListHead]
call dword [sym.imp.user32.dll_SendMessageW]
call fcn.00470870
xor ecx, ecx
call fcn.0046bfa0
mov ecx, 5
mov dword [0x4deb74], 7
call fcn.0046bfa0
xor eax, eax
jmp 0x4646d5
push 0
push 0x475420
push dword [0x4def88]
push 0x4ba320
push dword [InitializeSListHead]
call dword [sym.imp.user32.dll_DialogBoxParamW]
push 0x4f42
push dword [0x4def88]
call dword [sym.imp.user32.dll_GetDlgItem]
mov ecx, eax
call fcn.0045ef60
xor eax, eax
jmp 0x4646d5
cmp esi, 0x4f78
jne case.0x463a45.30028
mov edx, 0x4b0c28
mov ecx, 0x4ad81c
call fcn.004773a0
push eax
push dword [0x4def88]
call dword [sym.imp.user32.dll_SetWindowTextW]
mov edx, 0x4ad9bc
mov ecx, 0x4ba19c
call fcn.004773a0
push eax
push 2
push 0x40b
push dword [reloc.kernel32.dll_InitializeSListHead]
call dword [sym.imp.user32.dll_SendMessageW]
call fcn.004709e0
xor ecx, ecx
call fcn.0046bfa0
mov ecx, 5
mov dword [0x4deb74], 8
call fcn.0046bfa0
xor eax, eax
jmp 0x4646d5
push 5
push 0
push 0
push 0x4ade70
push 0x4af6a8
push dword [0x4def88]
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
xor eax, eax
jmp 0x4646d5
add esi, 0xffff8acf
cmp esi, 0x3b
ja case.0x463a45.30028
jmp dword [esi*4 + 0x4647fc]
cmp dword [0x4deb74], 0
je 0x4637b2
mov edi, dword [sym.imp.user32.dll_GetDlgItem]
push 0
push 1
push 0xf8
push 0x4f42
push dword [0x4def88]
call edi
mov esi, dword [sym.imp.user32.dll_SendMessageW]
push eax
call esi
push 0x1000
push 0
push 0
push 1
push 0x4f42
push dword [InitializeSListHead]
call dword [sym.imp.user32.dll_LoadImageW]
push eax
push 1
push 0xf7
push 0x4f42
push dword [0x4def88]
call edi
push eax
call esi
push 1
push 0
push 0x4f42
push dword [0x4def88]
call edi
push eax
call dword [sym.imp.user32.dll_InvalidateRect]
lea eax, [esp + 0x14]
push eax
push 0
push 0
push 0x474a70
push 0
push 0
call dword [sym.imp.kernel32.dll_CreateThread]
mov edx, 0x4ae300
mov ecx, 0x4ad81c
call fcn.004773a0
push eax
push 0
push 0x40b
push dword [reloc.kernel32.dll_InitializeSListHead]
call esi
mov edx, 0x4ad0cc
mov ecx, 0x4ba19c
call fcn.004773a0
push eax
push 2
push 0x40b
push dword [reloc.kernel32.dll_InitializeSListHead]
call esi
mov edx, 0x4ad560
mov ecx, 0x4ad81c
call fcn.004773a0
push eax
push 0x2723
push dword [0x4def88]
call edi
mov esi, dword [sym.imp.user32.dll_SetWindowTextW]
push eax
call esi
mov edx, 0x4ad76c
mov ecx, 0x4ad81c
call fcn.004773a0
push eax
push 0x2724
push dword [0x4def88]
call edi
push eax
call esi
xor ecx, ecx
call fcn.0046bfa0
call fcn.0047ebf0
call fcn.00485220
mov dword [0x4deb74], 0
mov ecx, 1
call fcn.004857c0
mov ecx, 5
call fcn.0046bfa0
xor eax, eax
jmp 0x4646d5
mov edi, dword [sym.imp.user32.dll_GetDlgItem]
push 0xa000a
push 0
push 0x202
push 0x4e39
push dword [0x4def88]
call edi
mov esi, dword [sym.imp.user32.dll_SendMessageW]
push eax
call esi
push 0xa000a
push 0
push 0x201
push 0x4e39
push dword [0x4def88]
call edi
push eax
call esi
push 0xa000a
push 0
push 0x202
push 0x4e39
push dword [0x4def88]
call edi
push eax
call esi
xor eax, eax
jmp 0x4646d5
mov edi, dword [sym.imp.user32.dll_GetDlgItem]
push 0xa000a
push 0
push 0x202
push 0x4e3a
push dword [0x4def88]
call edi
mov esi, dword [sym.imp.user32.dll_SendMessageW]
push eax
call esi
push 0xa000a
push 0
push 0x201
push 0x4e3a
push dword [0x4def88]
call edi
push eax
call esi
push 0xa000a
push 0
push 0x202
push 0x4e3a
push dword [0x4def88]
call edi
push eax
call esi
xor eax, eax
jmp 0x4646d5
mov edi, dword [sym.imp.user32.dll_GetDlgItem]
push 0xa000a
push 0
push 0x202
push 0x4e3b
push dword [0x4def88]
call edi
mov esi, dword [sym.imp.user32.dll_SendMessageW]
push eax
call esi
push 0xa000a
push 0
push 0x201
push 0x4e3b
push dword [0x4def88]
call edi
push eax
call esi
push 0xa000a
push 0
push 0x202
push 0x4e3b
push dword [0x4def88]
call edi
push eax
call esi
xor eax, eax
jmp 0x4646d5
mov edi, dword [sym.imp.user32.dll_GetDlgItem]
push 0xa000a
push 0
push 0x202
push 0x4e3c
push dword [0x4def88]
call edi
mov esi, dword [sym.imp.user32.dll_SendMessageW]
push eax
call esi
push 0xa000a
push 0
push 0x201
push 0x4e3c
push dword [0x4def88]
call edi
push eax
call esi
push 0xa000a
push 0
push 0x202
push 0x4e3c
push dword [0x4def88]
call edi
push eax
call esi
xor eax, eax
jmp 0x4646d5
mov edi, dword [sym.imp.user32.dll_GetDlgItem]
push 0xa000a
push 0
push 0x202
push 0x4e3d
push dword [0x4def88]
call edi
mov esi, dword [sym.imp.user32.dll_SendMessageW]
push eax
call esi
push 0xa000a
push 0
push 0x201
push 0x4e3d
push dword [0x4def88]
call edi
push eax
call esi
push 0xa000a
push 0
push 0x202
push 0x4e3d
push dword [0x4def88]
call edi
push eax
call esi
xor eax, eax
jmp 0x4646d5
mov edi, dword [sym.imp.user32.dll_GetDlgItem]
push 0xa000a
push 0
push 0x202
push 0x4e3e
push dword [0x4def88]
call edi
mov esi, dword [sym.imp.user32.dll_SendMessageW]
push eax
call esi
push 0xa000a
push 0
push 0x201
push 0x4e3e
push dword [0x4def88]
call edi
push eax
call esi
push 0xa000a
push 0
push 0x202
push 0x4e3e
push dword [0x4def88]
call edi
push eax
call esi
xor eax, eax
jmp 0x4646d5
mov edi, dword [sym.imp.user32.dll_GetDlgItem]
push 0xa000a
push 0
push 0x202
push 0x4e3f
push dword [0x4def88]
call edi
mov esi, dword [sym.imp.user32.dll_SendMessageW]
push eax
call esi
push 0xa000a
push 0
push 0x201
push 0x4e3f
push dword [0x4def88]
call edi
push eax
call esi
push 0xa000a
push 0
push 0x202
push 0x4e3f
push dword [0x4def88]
call edi
push eax
call esi
xor eax, eax
jmp 0x4646d5
push 0x208
lea eax, [esp + 0x74]
push 0
push eax
call fcn.0048e770
add esp, 0xc
lea eax, [esp + 0x18]
push 0x58
push 0
push eax
call fcn.0048e770
mov eax, dword [InitializeSListHead]
add esp, 0xc
mov dword [esp + 0x20], eax
mov eax, dword [0x4def88]
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x70]
mov dword [esp + 0x34], eax
lea eax, [esp + 0x18]
push eax
mov dword [esp + 0x1c], 0x58
mov dword [esp + 0x50], 0x81824
mov dword [esp + 0x28], 0x4ba1b0
mov dword [esp + 0x4c], 0x4ba240
mov dword [esp + 0x48], 0x4b0a54
mov dword [esp + 0x3c], 0x104
mov dword [esp + 0x2c], 0
mov dword [esp + 0x30], 0
mov dword [esp + 0x60], 0
call dword [sym.imp.comdlg32.dll_GetOpenFileNameW]
cmp word [esp + 0x70], 0
je 0x4637b2
push 5
push 0
lea eax, [esp + 0x78]
push eax
jmp 0x463a19
push 0x104
lea eax, [esp + 0x74]
push eax
call dword [sym.imp.kernel32.dll_GetWindowsDirectoryW]
push 0x4ba284
lea eax, [esp + 0x74]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCatW]
push 5
push 0
lea eax, [esp + 0x78]
push eax
jmp 0x463a19
push 0x104
lea eax, [esp + 0x74]
push eax
call dword [sym.imp.kernel32.dll_GetWindowsDirectoryW]
push 0x4ba29c
jmp 0x463f2e
push 0x104
lea eax, [esp + 0x74]
push eax
call dword [sym.imp.kernel32.dll_GetSystemDirectoryW]
push 0x4ba2b0
jmp 0x463f2e
push 0x104
lea eax, [esp + 0x74]
push eax
call dword [sym.imp.kernel32.dll_GetSystemDirectoryW]
push 0x4ba2c8
jmp 0x463f2e
push 5
push 0
push 0x4ba2e4
jmp 0x463a19
push 5
push 0
push 0x4ba300
jmp 0x463a19
push 5
push 0
push 0
push 0x4ba338
jmp 0x463a1e
push 5
push 0
push 0
push 0x4ba358
jmp 0x463a1e
push 5
push 0
push 0
push 0x4ba3b8
jmp 0x463a1e
push 5
push 0
push 0
push 0x4ba418
jmp 0x463a1e
push 5
push 0
push 0
push 0x4ba434
jmp 0x463a1e
push 5
push 0
push 0
push 0x4ba450
jmp 0x463a1e
push 5
push 0
push 0
push 0x4ba4b0
jmp 0x463a1e
push 0x4bf544
mov dword [esp + 0x18], 0
call dword [sym.imp.kernel32.dll_GetModuleHandleW]
mov edi, dword [sym.imp.kernel32.dll_FreeLibrary]
mov esi, eax
mov ebp, dword [sym.imp.kernel32.dll_LoadLibraryW]
test esi, esi
jne 0x46404a
push 0x4bf544
call ebp
mov esi, eax
test esi, esi
je 0x464064
push 0x4c0888
push esi
call dword [sym.imp.kernel32.dll_GetProcAddress]
test eax, eax
je 0x464061
lea ecx, [esp + 0x14]
push ecx
call eax
push esi
call edi
mov ebx, dword [esp + 0x14]
push 5
push 0
push 0
push 0x4ba510
push 0x4af6a8
push dword [0x4def88]
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
test ebx, ebx
je 0x4637b2
push 0x4bf544
call dword [sym.imp.kernel32.dll_GetModuleHandleW]
mov esi, eax
test esi, esi
jne 0x4640ae
push 0x4bf544
call ebp
mov esi, eax
test esi, esi
je 0x4637b2
push 0x4c08a8
push esi
call dword [sym.imp.kernel32.dll_GetProcAddress]
test eax, eax
je 0x4640c1
push ebx
call eax
push esi
call edi
xor eax, eax
jmp 0x4646d5
push 0x4bf544
mov dword [esp + 0x18], 0
call dword [sym.imp.kernel32.dll_GetModuleHandleW]
mov edi, dword [sym.imp.kernel32.dll_FreeLibrary]
mov esi, eax
mov ebp, dword [sym.imp.kernel32.dll_LoadLibraryW]
test esi, esi
jne 0x4640fd
push 0x4bf544
call ebp
mov esi, eax
test esi, esi
je 0x464117
push 0x4c0888
push esi
call dword [sym.imp.kernel32.dll_GetProcAddress]
test eax, eax
je 0x464114
lea ecx, [esp + 0x14]
push ecx
call eax
push esi
call edi
mov esi, dword [sym.imp.SHELL32.dll_ShellExecuteW]
push 5
push 0
push 0
push 0x4ba52c
push 0x4af6a8
push 0
call esi
cmp eax, 2
jne 0x46414e
push 5
push 0
push 0
push 0x4ba544
push 0x4af6a8
push dword [0x4def88]
call esi
mov ebx, dword [esp + 0x14]
test ebx, ebx
je 0x4637b2
push 0x4bf544
call dword [sym.imp.kernel32.dll_GetModuleHandleW]
mov esi, eax
test esi, esi
jne 0x46417c
push 0x4bf544
call ebp
mov esi, eax
test esi, esi
je 0x4637b2
push 0x4c08a8
push esi
call dword [sym.imp.kernel32.dll_GetProcAddress]
test eax, eax
jne 0x4640be
push esi
call edi
xor eax, eax
jmp 0x4646d5
cmp dword [0x4de950], 2
je case.0x463a45.30059
xor eax, eax
push 0x206
push eax
mov word [esp + 0x78], ax
lea eax, [esp + 0x7a]
push eax
call fcn.0048e770
add esp, 0xc
lea eax, [esp + 0x70]
push 0x104
push eax
push 0x4ba558
call dword [sym.imp.kernel32.dll_GetEnvironmentVariableW]
mov edi, dword [sym.imp.SHLWAPI.dll_StrCatW]
lea eax, [esp + 0x70]
push 0x4ba570
push eax
call edi
mov esi, dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea eax, [esp + 0x70]
push 5
push 0
push 0
push eax
push 0x4af6a8
push dword [0x4def88]
call esi
cmp eax, 2
jne 0x4637b2
lea eax, [esp + 0x14]
push eax
push 0x26
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderLocation]
lea eax, [esp + 0x70]
push eax
push dword [esp + 0x18]
call dword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
test eax, eax
je 0x4637b2
push 0x4ba5c8
lea eax, [esp + 0x74]
push eax
call edi
push 5
push 0
push 0
lea eax, [esp + 0x7c]
push eax
push 0x4af6a8
push dword [0x4def88]
call esi
cmp eax, 2
jne 0x4637b2
push 5
push 0
push 0
push 0x4ba604
push 0x4af6a8
push dword [0x4def88]
call esi
xor eax, eax
jmp 0x4646d5
push 0x4bf544
mov dword [esp + 0x18], 0
call dword [sym.imp.kernel32.dll_GetModuleHandleW]
mov edi, dword [sym.imp.kernel32.dll_FreeLibrary]
mov esi, eax
mov ebp, dword [sym.imp.kernel32.dll_LoadLibraryW]
test esi, esi
jne 0x4642b3
push 0x4bf544
call ebp
mov esi, eax
test esi, esi
je 0x4642cd
push 0x4c0888
push esi
call dword [sym.imp.kernel32.dll_GetProcAddress]
test eax, eax
je 0x4642ca
lea ecx, [esp + 0x14]
push ecx
call eax
push esi
call edi
push 5
push 0
push 0
push 0x4ba614
push 0x4af6a8
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x46414e
push 5
push 0
push 0
push 0x4addfc
jmp 0x463a1e
push 5
push 0
push 0
push 0x4ba62c
jmp 0x463a1e
push 5
push 0
push 0
push 0x4ba648
jmp 0x463a1e
call fcn.00477880
xor eax, eax
jmp 0x4646d5
push 0
push 0x191
push 0x111
push 0
push 0x4ba660
call dword [sym.imp.user32.dll_FindWindowW]
push eax
call dword [sym.imp.user32.dll_SendMessageW]
xor eax, eax
jmp 0x4646d5
push 5
push 0
push 0
push 0x4b0574
jmp 0x463a1e
push 5
push 0
push 0
push 0x4ba67c
jmp 0x463a1e
mov edx, 0x4ade88
mov ecx, 0x4ad81c
call fcn.004773a0
push eax
lea eax, [esp + 0x74]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCpyW]
lea eax, [esp + 0x70]
mov edx, 0x4ade98
push 0x24
push eax
mov ecx, 0x4ad81c
call fcn.004773a0
push eax
push dword [0x4def88]
call dword [sym.imp.user32.dll_MessageBoxW]
cmp eax, 6
jne 0x4637b2
lea ecx, [eax - 4]
call fcn.004775f0
xor eax, eax
jmp 0x4646d5
push 1
push 0x4def98
push 0
push 0x4ba694
jmp 0x463a1e
mov edx, 0x4ba6b0
mov ecx, 0x754f
call fcn.00477690
push 0x4ded80
push 0
push 0x4ba6b0
push 0x4af780
call dword [sym.imp.kernel32.dll_GetPrivateProfileIntW]
push 3
push 0
push 0
push 0
push 0
test eax, eax
jne 0x46441f
push 0xfffffffffffffffe
push dword [0x4def88]
call dword [sym.imp.user32.dll_SetWindowPos]
xor eax, eax
jmp 0x4646d5
push 0xffffffffffffffff
push dword [0x4def88]
call dword [sym.imp.user32.dll_SetWindowPos]
xor eax, eax
jmp 0x4646d5
mov edx, 0x4ba6bc
mov ecx, 0x7550
call fcn.00477690
push 0x4ded80
push 0
push 0x4ba6bc
push 0x4af780
call dword [sym.imp.kernel32.dll_GetPrivateProfileIntW]
mov dword [0x4df1b0], eax
xor eax, eax
jmp 0x4646d5
mov edx, 0x4ba6cc
mov ecx, 0x7551
call fcn.00477690
xor eax, eax
jmp 0x4646d5
mov edx, 0x4ba6e0
mov ecx, 0x7552
call fcn.00477690
xor eax, eax
jmp 0x4646d5
mov edx, 0x4ba6f4
mov ecx, 0x7553
call fcn.00477690
push 0x4ded80
push 0
push 0x4ba6f4
push 0x4af780
call dword [sym.imp.kernel32.dll_GetPrivateProfileIntW]
push 2
push 0
test eax, eax
jne 0x4644d1
push 1
push 0x11
call dword [sym.imp.user32.dll_SystemParametersInfoW]
xor eax, eax
jmp 0x4646d5
push 0
push 0x11
call dword [sym.imp.user32.dll_SystemParametersInfoW]
xor eax, eax
jmp 0x4646d5
push 0
push 0x462540
push dword [0x4def88]
push 0x4ba704
push dword [InitializeSListHead]
call dword [sym.imp.user32.dll_DialogBoxParamW]
xor eax, eax
jmp 0x4646d5
mov edx, 0x4ba724
mov ecx, 0x7555
call fcn.00477690
mov edx, 0x4ad488
mov ecx, 0x4ad81c
call fcn.004773a0
push eax
lea eax, [esp + 0x27c]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCpyW]
lea eax, [esp + 0x278]
mov edx, 0x4ae4b0
push 0x30
push eax
mov ecx, 0x4ad81c
call fcn.004773a0
push eax
push dword [0x4def88]
call dword [sym.imp.user32.dll_MessageBoxW]
xor eax, eax
jmp 0x4646d5
mov edx, 0x4ba738
mov ecx, 0x7556
call fcn.00477690
call fcn.0047b620
xor eax, eax
jmp 0x4646d5
mov edx, 0x4ba750
mov ecx, 0x7563
call fcn.00477690
xor eax, eax
jmp 0x4646d5
mov edx, 0x4ba758
mov ecx, 0x7564
call fcn.00477690
lea eax, [esp + 0x14]
push eax
push 0
push 0
push 0x474a70
push 0
push 0
call dword [sym.imp.kernel32.dll_CreateThread]
xor eax, eax
jmp 0x4646d5
push 0x4ded80
push 0
push 0x4b9868
push 0x4af780
call dword [sym.imp.kernel32.dll_GetPrivateProfileIntW]
push 0
test eax, eax
je 0x46460f
push 0x7557
push dword [0x4df1a8]
call dword [sym.imp.user32.dll_CheckMenuItem]
push 0x4ded80
push 0x4ad0e0
push 0x4b9868
push 0x4af780
call dword [sym.imp.kernel32.dll_WritePrivateProfileStringW]
xor eax, eax
jmp 0x4646d5
push 0x462a00
push dword [0x4def88]
push 0x4ba770
push dword [InitializeSListHead]
call dword [sym.imp.user32.dll_DialogBoxParamW]
xor eax, eax
jmp 0x4646d5
push 1
push 0xf
push 0x4de958
push dword [0x4def88]
call fcn.00401149
xor eax, eax
jmp 0x4646d5
push 0x13
jmp 0x464634
push 0
push 0x471080
push dword [0x4def88]
push 0x4ade14
push dword [InitializeSListHead]
call dword [sym.imp.user32.dll_DialogBoxParamW]
xor eax, eax
jmp 0x4646d5
push 0x12
jmp 0x464634
push 5
push 0
push 0
push 0x4ba7dc
jmp 0x463a1e
push 5
push 0
push 0
push 0x4ba810
jmp 0x463a1e
push 0
push 0x462c00
push ebx
push 0x67
push dword [InitializeSListHead]
call dword [sym.imp.user32.dll_DialogBoxParamW]
xor eax, eax
jmp 0x4646d5
push 0
push 0
push 0x10
push ebx
call dword [sym.imp.user32.dll_PostMessageW]
xor eax, eax
jmp 0x4646d5
push dword [esp + 0xc94]
push ebp
push dword [esp + 0x1c]
push ebx
call dword [sym.imp.user32.dll_DefWindowProcW]
mov ecx, dword [esp + 0xc84]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.0048d815
add esp, 0xc7c
ret
call fcn.0048d945
nop
pop ecx
xor al, 70
add byte [ecx + 0x34], ch
inc esi
add byte [eax + 0x34], ah
inc esi
add byte [edx + 0x34], dh
inc esi
add byte [ebx + 0x34], bh
inc esi
add byte [edx - 0x72ffb9cc], al
xor al, 0x46
add byte [esi + 0x6d004634], dl
inc ebx
inc esi
add cl, ah
xor al, 0x46
add byte [ebx - 0x38ffb9cb], bh
xor eax, 0x46c20046
inc esi
add byte [eax], al
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add dword [esp + eax], eax
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, byte [ebx]
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 2
mov ebx, 805324342
aaa
inc esi
add byte [ecx + 0x1f004637], bh
cmp byte [esi], al
cwde
cmp byte [esi], al
invalid