Function at 0x478790
Capabilities:
Check if file exists
Create process on windows
Get file attributes
Get graphical window text
Hide graphical window
Open clipboard
Read .ini file
Set file attributes
Write clipboard data

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1a40
call fcn.0057f600
mov eax, dword [0x5bd344]
xor eax, ebp
mov dword [ebp - 8], eax
push ebx
push esi
movzx esi, dx
mov ebx, ecx
push edi
mov edi, esi
mov dword [ebp - 0x58], edi
mov eax, edi
cmp edi, 0x9c40
ja 0x479711
je 0x4796e6
sub eax, 0x4e20
cmp eax, 0x23
ja case.default.0x4787d6
jmp dword [eax*4 + 0x47d808]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0
push 0x835
push dword [0x5e9fbc]
call esi
mov eax, dword [0x5ed28c]
cmp eax, 1
jne 0x478820
push 0
push 0xf020
push 0x112
push ebx
call esi
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0057e93d
mov esp, ebp
pop ebp
ret
cmp eax, 2
jne case.default.0x4787d6
push 0
push 0
push 0x10
push ebx
call esi
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0057e93d
mov esp, ebp
pop ebp
ret
xor edx, edx
push 0
push 0
lea ecx, [edx + 1]
call fcn.00482c20
add esp, 8
test eax, eax
je case.default.0x4787d6
push 0
push 0
push 0x10
push ebx
call dword [sym.imp.USER32.dll_SendMessageW]
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0057e93d
mov esp, ebp
pop ebp
ret
push 0
xor eax, eax
cmp dword [0x5ed600], eax
push 0
push 0x919
push dword [0x5e9fbc]
sete al
mov dword [0x5ed600], eax
call dword [sym.imp.USER32.dll_SendMessageW]
xor eax, eax
cmp dword [0x5ed600], eax
sete al
mov dword [0x5ed600], eax
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0057e93d
mov esp, ebp
pop ebp
ret
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0
push 0x7d8
push dword [0x5e9fbc]
call ebx
push 0
push 0
push 0x7d9
push dword [0x5e9fbc]
mov esi, eax
mov dword [ebp - 0x58], esi
call ebx
push 0
push esi
push 0x876
push dword [0x5e9fbc]
mov edi, eax
call ebx
push 0
mov esi, eax
push esi
push 0x877
push dword [0x5e9fbc]
call ebx
push 0
push esi
push 0x850
push dword [0x5e9fbc]
mov dword [ebp - 0x1a38], eax
call ebx
mov ecx, eax
mov eax, dword [ebp - 0x58]
cmp eax, edi
je 0x478958
push eax
push eax
push 0x870
push dword [0x5e9fbc]
call ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0057e93d
mov esp, ebp
pop ebp
ret
push 0
push 0
cmp eax, dword [ebp - 0x1a38]
jne 0x478984
push 0x916
push dword [0x5e9fbc]
call ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0057e93d
mov esp, ebp
pop ebp
ret
cmp eax, ecx
jg 0x4789a8
push 0x95b
push dword [0x5e9fbc]
call ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0057e93d
mov esp, ebp
pop ebp
ret
push 0x91f
push dword [0x5e9fbc]
call ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0057e93d
mov esp, ebp
pop ebp
ret
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0
push 0x7d8
push dword [0x5e9fbc]
call ebx
push 0
push 0
push 0x7d9
push dword [0x5e9fbc]
mov esi, eax
mov dword [ebp - 0x58], esi
call ebx
push 0
push esi
push 0x876
push dword [0x5e9fbc]
mov edi, eax
call ebx
push 0
mov esi, eax
push esi
push 0x877
push dword [0x5e9fbc]
call ebx
push 0
push esi
push 0x858
push dword [0x5e9fbc]
mov dword [ebp - 0x1a38], eax
call ebx
mov ecx, eax
mov eax, dword [ebp - 0x58]
cmp eax, edi
jne 0x478936
push 0
push 0
cmp dword [ebp - 0x1a38], ecx
je 0x478a68
push 0x920
push dword [0x5e9fbc]
call ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0057e93d
mov esp, ebp
pop ebp
ret
push 0x922
push dword [0x5e9fbc]
call ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0057e93d
mov esp, ebp
pop ebp
ret
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0
push 0x8d4
push dword [0x5e9fbc]
call esi
push 0
push 1
push 0x84c
push dword [0x5e9fbc]
call esi
push 0
push 0
push 0x917
push dword [0x5e9fbc]
call esi
xor eax, eax
cmp dword [0x5f03ac], eax
push 0
sete al
push eax
push 0x84c
push dword [0x5e9fbc]
call esi
push 0
push dword [0x5f0398]
push 0x8d4
push dword [0x5e9fbc]
call esi
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0057e93d
mov esp, ebp
pop ebp
ret
push 0x5f05e0
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je case.default.0x4787d6
mov eax, dword [0x5f0384]
cmp eax, 2
jne 0x478b2d
mov dword [0x5f0370], 4
jmp 0x478b4e
cmp eax, 3
jne 0x478b3e
mov dword [0x5f0370], 5
jmp 0x478b4e
cmp eax, 7
mov ecx, 6
cmove eax, ecx
mov dword [0x5f0370], eax
push 0x5f05e0
lea eax, [ebp - 0x96c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp - 0x96c]
xor edx, edx
push eax
push 0
push 1
xor ecx, ecx
call fcn.00482470
add esp, 0xc
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0057e93d
mov esp, ebp
pop ebp
ret
push 0x5f05e0
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je case.default.0x4787d6
mov dword [0x5f0370], 0
jmp 0x478b4e
push 0x5f05e0
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je case.default.0x4787d6
mov dword [0x5f0370], 1
jmp 0x478b4e
mov esi, dword [0x5f084c]
push 0x5f05e0
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je case.default.0x4787d6
push 0x5f05e0
lea eax, [ebp - 0x96c]
mov dword [0x5f084c], 1
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp - 0x96c]
xor edx, edx
push eax
push 0
push 1
xor ecx, ecx
call fcn.00482470
add esp, 0xc
mov dword [0x5f084c], esi
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0057e93d
mov esp, ebp
pop ebp
ret
push 0x5f05e0
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je case.default.0x4787d6
mov esi, dword [0x5e8f6c]
lea eax, [ebp - 0x96c]
mov edi, dword [0x5f03a0]
push 0x5f05e0
push eax
mov dword [0x5e8f6c], 1
mov dword [0x5f03a0], 1
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp - 0x96c]
xor edx, edx
push eax
push 0
push 1
xor ecx, ecx
call fcn.00482470
add esp, 0xc
mov dword [0x5e8f6c], esi
mov dword [0x5f03a0], edi
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0057e93d
mov esp, ebp
pop ebp
ret
mov ecx, dword [0x5e9fbc]
call fcn.0048c380
call fcn.00481d90
call fcn.00482240
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0057e93d
mov esp, ebp
pop ebp
ret
mov ecx, dword [0x5e9fbc]
call fcn.0048c3a0
call fcn.00481d90
call fcn.00482240
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0057e93d
mov esp, ebp
pop ebp
ret
mov ecx, dword [0x5e9fbc]
call fcn.0048c3d0
call fcn.00481d90
call fcn.00482240
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0057e93d
mov esp, ebp
pop ebp
ret
push 0x200
lea eax, [ebp - 0x314]
push 0
push eax
call fcn.00583650
add esp, 0xc
lea eax, [ebp - 0x514]
push 0x200
push 0
push eax
call fcn.00583650
add esp, 0xc
lea eax, [ebp - 0x1a34]
push 0x200
push 0
push eax
call fcn.00583650
add esp, 0xc
mov byte [ebp - 0x1834], 0
lea eax, [ebp - 0x1833]
push 0x1ff
push 0
push eax
call fcn.00583650
add esp, 0xc
mov byte [ebp - 0x1634], 0
lea eax, [ebp - 0x1633]
push 0x5ff
push 0
push eax
call fcn.00583650
add esp, 0xc
mov byte [ebp - 0x1034], 0
lea eax, [ebp - 0x1033]
push 0x5ff
push 0
push eax
call fcn.00583650
mov eax, dword [0x5e9fbc]
add esp, 0xc
mov dword [ebp - 0xa1c], eax
xorps xmm0, xmm0
lea eax, [ebp - 0x314]
mov dword [ebp - 0xa34], 0x200000
movups xmmword [ebp - 0xa30], xmm0
push 0x5e8d50
push 0x100
push eax
push 0x41fb58
push 0x41fbb4
push 0x41ef2c
mov dword [ebp - 0xa20], 0
mov dword [ebp - 0xa18], 0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
push 0x7c
lea eax, [ebp - 0x314]
push eax
call dword [sym.imp.SHLWAPI.dll_StrChrW]
mov esi, eax
test esi, esi
je 0x478e3d
lea ecx, [esi + 2]
push ecx
lea eax, [ebp - 0x514]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
xor eax, eax
mov word [esi], ax
mov esi, dword [sym.imp.SHLWAPI.dll_StrTrimW]
lea eax, [ebp - 0x314]
push 0x41bd94
push eax
call esi
push 0x41bd94
lea eax, [ebp - 0x514]
push eax
call esi
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [ebp - 0x314]
push eax
call esi
test eax, eax
je case.default.0x4787d6
lea eax, [ebp - 0x514]
push eax
call esi
test eax, eax
je case.default.0x4787d6
lea eax, [ebp - 0x64]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx eax, word [ebp - 0x58]
lea ecx, [ebp - 0xb8]
mov dword [ebp - 0xb8], eax
movzx eax, word [ebp - 0x5a]
mov dword [ebp - 0xb4], eax
movzx eax, word [ebp - 0x5c]
mov dword [ebp - 0xb0], eax
movzx eax, word [ebp - 0x5e]
mov dword [ebp - 0xac], eax
movzx eax, word [ebp - 0x62]
dec eax
mov dword [ebp - 0x98], 0xffffffff
mov dword [ebp - 0xa8], eax
movzx eax, word [ebp - 0x64]
sub eax, 0x76c
mov dword [ebp - 0xa4], eax
movzx eax, word [ebp - 0x60]
mov dword [ebp - 0xa0], eax
call fcn.004757f0
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0x514]
push eax
lea eax, [ebp - 0x754]
push 0x100
push eax
call fcn.00594460
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
add esp, 0x10
push 0
push 0
push 0x859
push dword [0x5e9fbc]
call ebx
mov esi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov edi, eax
push 0
push 0
push 0x200
lea eax, [ebp - 0x1a34]
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x314]
push eax
push 0
push edi
call esi
push 0
push 0
push 0x200
lea eax, [ebp - 0x1834]
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x754]
push eax
push 0
push edi
call esi
push 0
push 0
push 0x861
push dword [0x5e9fbc]
call ebx
push 0
push 0
push 0x85f
push dword [0x5e9fbc]
mov esi, eax
call ebx
mov ecx, dword [0x5e9fbc]
lea edx, [ebp - 0x1a34]
push 1
cmp eax, esi
je 0x478fc0
call fcn.00470f50
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0057e93d
mov esp, ebp
pop ebp
ret
call fcn.00470b00
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0057e93d
mov esp, ebp
pop ebp
ret
push 0x200
lea eax, [ebp - 0x314]
push 0
push eax
call fcn.00583650
add esp, 0xc
lea eax, [ebp - 0x96c]
push 0x208
push 0
push eax
call fcn.00583650
add esp, 0xc
lea eax, [ebp - 0x754]
mov edx, 0x4e2f
mov ecx, 0x41fbe4
cmp si, dx
push 0x5e8d50
push 0x100
push eax
push 0x41bcc8
mov eax, 0x41fbc8
cmovne eax, ecx
push eax
push 0x41ef2c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
test eax, eax
je case.default.0x4787d6
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0
push 0x861
push dword [0x5e9fbc]
call edi
push 0
push 0
push 0x85f
push dword [0x5e9fbc]
mov esi, eax
call edi
sub esi, eax
lea ecx, [esi - 1]
cmp ecx, 0x1f3
ja case.default.0x4787d6
push 0
push 0
push 0x871
push dword [0x5e9fbc]
call edi
cmp eax, 0x200
jae case.default.0x4787d6
lea eax, [ebp - 0x314]
push eax
push 0
push 0x871
push dword [0x5e9fbc]
call edi
cmp esi, 0x200
jae 0x47d802
push 0xd
lea eax, [ebp - 0x314]
mov byte [ebp + esi - 0x314], 0
mov esi, dword [sym.imp.SHLWAPI.dll_StrChrA]
push eax
call esi
test eax, eax
je 0x4790df
mov byte [eax], 0
push 0xa
lea eax, [ebp - 0x314]
push eax
call esi
test eax, eax
je 0x4790f1
mov byte [eax], 0
push 9
lea eax, [ebp - 0x314]
push eax
call esi
test eax, eax
je 0x479103
mov byte [eax], 0
lea eax, [ebp - 0x314]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
je case.default.0x4787d6
push 0
push 0
push 0x859
push dword [0x5e9fbc]
call edi
mov edx, 0xfde9
xor ecx, ecx
push 0x200
cmp eax, edx
lea eax, [ebp - 0xe14]
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x314]
cmove ecx, edx
push eax
push 0
push ecx
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov edi, dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push 0x848
push 0x40
call edi
mov ebx, eax
lea eax, [ebp - 0xe14]
push eax
lea eax, [ebp - 0x754]
push eax
push ebx
call dword [sym.imp.USER32.dll_wsprintfW]
mov esi, dword [sym.imp.KERNEL32.dll_GlobalSize]
add esp, 0xc
push ebx
call esi
shr eax, 1
mov ecx, ebx
mov edx, eax
call fcn.00474b70
push ebx
call esi
push eax
push 0x40
call edi
mov edi, eax
mov edx, ebx
push edi
mov ecx, ebx
call fcn.00474a90
add esp, 4
push 0x5f05e0
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x4791d5
push 0x5f05e0
lea eax, [ebp - 0x96c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp - 0x96c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea eax, [ebp - 0x96c]
mov dword [ebp - 0xd8], 0
xorps xmm0, xmm0
mov dword [ebp - 0xf8], eax
lea eax, [ebp - 0x110]
movlpd qword [ebp - 0xf0], xmm0
push eax
movlpd qword [ebp - 0xe8], xmm0
movlpd qword [ebp - 0xe0], xmm0
mov dword [ebp - 0x110], 0x3c
mov dword [ebp - 0x10c], 0x800000
mov dword [ebp - 0x108], 0
mov dword [ebp - 0x104], 0
mov dword [ebp - 0x100], ebx
mov dword [ebp - 0xfc], edi
mov dword [ebp - 0xf4], 1
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
mov esi, dword [sym.imp.KERNEL32.dll_GlobalFree]
push ebx
call esi
push edi
call esi
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0057e93d
mov esp, ebp
pop ebp
ret
cmp dword [0x5f02b0], 0
jne 0x47929f
push 0
push 0x19dd5
push 0x111
push ebx
call dword [sym.imp.USER32.dll_SendMessageW]
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0057e93d
mov esp, ebp
pop ebp
ret
mov eax, 0x4e33
cmp si, ax
mov eax, dword [0x5f036c]
jne 0x4792b1
inc eax
jmp 0x4792b2
dec eax
mov ecx, 0x1000
cmp eax, ecx
push 0
cmovl ecx, eax
xor eax, eax
test ecx, ecx
cmovg eax, ecx
push eax
push 0x939
push dword [0x5e9fbc]
mov dword [0x5f036c], eax
call dword [sym.imp.USER32.dll_SendMessageW]
call fcn.00481d90
mov eax, dword [0x5f036c]
mov dword [0x5f0368], eax
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0057e93d
mov esp, ebp
pop ebp
ret
mov ecx, dword [0x5e9fbc]
mov edx, 0x41fa48
push 0x41fa48
call fcn.0046c1c0
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0057e93d
mov esp, ebp
pop ebp
ret
mov ecx, dword [0x5e9fbc]
mov edx, 0x41f9a0
push 0x41f9a0
call fcn.0046c1c0
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0057e93d
mov esp, ebp
pop ebp
ret
mov ecx, dword [0x5e9fbc]
mov edx, 0x41fc04
push 0x41fc00
call fcn.0046c1c0
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0057e93d
mov esp, ebp
pop ebp
ret
mov ecx, dword [0x5e9fbc]
mov edx, 0x41fc08
push 0x41f33c
call fcn.0046c1c0
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0057e93d
mov esp, ebp
pop ebp
ret
mov ecx, dword [0x5e9fbc]
mov edx, 0x41fa80
push 0x41fa7c
call fcn.0046c1c0
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0057e93d
mov esp, ebp
pop ebp
ret
mov ecx, dword [0x5e9fbc]
mov edx, 0x41fc0c
push 0x41fc0c
call fcn.0046c1c0
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0057e93d
mov esp, ebp
pop ebp
ret
mov ecx, dword [0x5e9fbc]
mov edx, 1
call fcn.00469ca0
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0057e93d
mov esp, ebp
pop ebp
ret
mov ecx, dword [0x5e9fbc]
xor edx, edx
call fcn.00469ca0
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0057e93d
mov esp, ebp
pop ebp
ret
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0
push 0x977
push ebx
call esi
cmp eax, 1
je case.default.0x4787d6
push 0
push 0
push 0x7d9
push dword [0x5e9fbc]
call esi
push 0
push 0
push 0x7d8
push dword [0x5e9fbc]
mov edi, eax
call esi
cmp eax, edi
jle case.default.0x4787d6
push edi
push eax
push 0x870
push dword [0x5e9fbc]
call esi
push 0
push 0
push 0x95f
push dword [0x5e9fbc]
call esi
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0057e93d
mov esp, ebp
pop ebp
ret
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0
push 0x977
push ebx
call esi
cmp eax, 1
je case.default.0x4787d6
push 0
push 0
push 0x7d9
push dword [0x5e9fbc]
call esi
push 0
push 0
push 0x7d8
push dword [0x5e9fbc]
mov edi, eax
call esi
cmp eax, edi
jge case.default.0x4787d6
jmp 0x47948a
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
push 0x5f05e0
call edi
test eax, eax
je 0x47951e
mov esi, 0x5f05e0
jmp 0x479538
push 0x20
lea eax, [ebp - 0x54]
push eax
push 0x2713
push dword [0x5f0394]
call dword [sym.imp.USER32.dll_LoadStringW]
lea esi, [ebp - 0x54]
push ebx
mov dword [ebp - 0x10], esi
call dword [sym.imp.USER32.dll_OpenClipboard]
test eax, eax
je case.default.0x4787d6
call dword [sym.imp.USER32.dll_EmptyClipboard]
push esi
call edi
lea eax, [eax*2 + 2]
push eax
push 0x42
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov edi, eax
push edi
call dword [sym.imp.KERNEL32.dll_GlobalLock]
push edi
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GlobalSize]
shr eax, 1
push eax
push dword [ebp - 0x10]
push esi
call dword [sym.imp.SHLWAPI.dll_StrCpyNW]
push edi
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
push edi
push 0xd
call dword [sym.imp.USER32.dll_SetClipboardData]
call dword [sym.imp.USER32.dll_CloseClipboard]
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0057e93d
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0xc0]
mov dword [ebp - 0xc0], 0x2c
push eax
push dword [0x5f0848]
call dword [sym.imp.USER32.dll_GetWindowPlacement]
mov eax, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0xa0]
mov esi, dword [ebp - 0x9c]
mov edi, dword [ebp - 0x98]
sub esi, eax
push dword [0x5f0848]
mov dword [ebp - 0x1a38], eax
sub edi, ecx
mov dword [ebp - 0x58], ecx
call dword [sym.imp.USER32.dll_IsZoomed]
test eax, eax
jne 0x479606
test byte [ebp - 0xbc], 2
je 0x47960b
mov eax, 1
push eax
push edi
push esi
push dword [ebp - 0x58]
lea eax, [ebp - 0x314]
push dword [ebp - 0x1a38]
push 0x41fc10
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x1c
push ebx
call dword [sym.imp.USER32.dll_OpenClipboard]
test eax, eax
je 0x47a4c5
call dword [sym.imp.USER32.dll_EmptyClipboard]
lea eax, [ebp - 0x314]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [eax*2 + 2]
push eax
push 0x42
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov edi, eax
push edi
call dword [sym.imp.KERNEL32.dll_GlobalLock]
push edi
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GlobalSize]
shr eax, 1
push eax
lea eax, [ebp - 0x314]
push eax
push esi
call dword [sym.imp.SHLWAPI.dll_StrCpyNW]
push edi
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
push edi
push 0xd
call dword [sym.imp.USER32.dll_SetClipboardData]
call dword [sym.imp.USER32.dll_CloseClipboard]
call fcn.00481d70
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0057e93d
mov esp, ebp
pop ebp
ret
call fcn.00483f70
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0057e93d
mov esp, ebp
pop ebp
ret
push 0x5e8d50
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je case.default.0x4787d6
call fcn.00481cc0
push 0x5e8d50
jmp 0x479734
push 0x41bcc8
push 0
push 0
mov edx, 1
xor ecx, ecx
call fcn.00482470
add esp, 0xc
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0057e93d
mov esp, ebp
pop ebp
ret
sub eax, 0x9c41
cmp eax, 0x2d3
ja case.default.0x4787d6
movzx eax, byte [eax + 0x47db5c]
jmp dword [eax*4 + 0x47d898]
xor edx, edx
xor ecx, ecx
push 0
push 0
call fcn.00482470
add esp, 0xc
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0057e93d
mov esp, ebp
pop ebp
ret
mov edx, dword [0x5be124]
mov ecx, ebx
push 0x2715
push eax
push dword [0x5ed614]
push 0x5f05e0
push 0x2713
push dword [0x5e9fb8]
call fcn.00473260
add esp, 0x20
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0057e93d
mov esp, ebp
pop ebp
ret
cmp dword [0x5ed5f0], 0
jne 0x47a25f
mov eax, dword [0x5e95cc]
cmp eax, dword [0x5e95b0]
jne 0x47a25f
push 0x5e9a58
push dword [0x5e9fa8]
xor eax, eax
jmp 0x4799ec
push 0x5e9a58
push dword [0x5e9fa8]
mov eax, 1
jmp 0x4799ec
call fcn.00481d70
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0057e93d
mov esp, ebp
pop ebp
ret
mov ecx, dword [0x5e9fbc]
mov edx, 0x5e9fc0
call fcn.0046fdc0
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0057e93d
mov esp, ebp
pop ebp
ret
mov ecx, dword [0x5e9fbc]
mov edx, 0x5e9fc0
call fcn.0046ffb0
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0057e93d
mov esp, ebp
pop ebp
ret
mov ecx, dword [0x5e9fbc]
mov edx, 0x5e9a58
push 0x80
call fcn.0046e850
add esp, 4
jmp 0x47a237
push 0
push 0
push 0x861
push dword [0x5e9fbc]
call dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0
push 0x85f
push dword [0x5e9fbc]
mov esi, eax
call dword [sym.imp.USER32.dll_SendMessageW]
sub esi, eax
jne 0x47d130
push esi
push 0x19d77
push 0x111
push ebx
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
call ebx
push esi
push esi
push 0x861
push dword [0x5e9fbc]
call ebx
push 0
push 0
push 0x85f
push dword [0x5e9fbc]
mov esi, eax
call ebx
sub esi, eax
jmp 0x47d136
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esi - 1]
cmp eax, 0x1f3
ja case.default.0x4787d6
push 0
push 0
push 0x871
push dword [0x5e9fbc]
call ebx
cmp eax, 0x200
jge case.default.0x4787d6
lea eax, [ebp - 0x314]
push eax
push 0
push 0x871
push dword [0x5e9fbc]
call ebx
cmp esi, 0x200
jae 0x47d802
push 0xa
lea eax, [ebp - 0x314]
mov byte [ebp + esi - 0x314], 0
mov esi, dword [sym.imp.SHLWAPI.dll_StrChrA]
push eax
call esi
test eax, eax
je 0x47d1a2
mov byte [eax], 0
push 0xd
lea eax, [ebp - 0x314]
push eax
call esi
test eax, eax
je 0x47d1b4
mov byte [eax], 0
push 0
push 0
push 0x859
push dword [0x5e9fbc]
call ebx
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov dword [0x5e8f64], eax
lea eax, [ebp - 0x314]
push eax
push 0x5e9fc0
call esi
mov eax, dword [0x5e8f64]
cmp eax, 0xfde9
je 0x47d22e
push 0x200
lea ecx, [ebp - 0xe14]
push ecx
push 0xffffffffffffffff
lea ecx, [ebp - 0x314]
push ecx
push 0
push eax
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push 0
push 0
push 0x600
push 0x5ea3c0
push 0xffffffffffffffff
lea eax, [ebp - 0xe14]
push eax
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
jmp 0x47d23c
lea eax, [ebp - 0x314]
push eax
push 0x5ea3c0
call esi
and dword [0x5eafc0], 0xff9fffff
mov dword [0x5eafc4], 0
sub edi, 0x4e31
je 0x47d268
sub edi, 1
jne case.default.0x4787d6
push 0
jmp 0x47be6f
push 0
jmp 0x47be47
mov ecx, dword [ebp - 8]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0057e93d
mov esp, ebp
pop ebp
ret
call fcn.0057ea74
nop
fld qword [edi - 0x77baffb9]
inc edi
add byte [esi - 0x78], bh
inc edi
add dh, al
mov byte [edi], al
enter 0x4789, 0
mov byte [edx - 1962672057], cl
inc edi
add byte [edx - 0x56ffb875], cl
mov eax, dword [edi]
enter 0x478b, 0
sub eax, -1476376692
mov word [edi], es
ror byte [edi + eax*2 + 0x478cf800], 1
add byte [eax], ah
lea eax, [edi]
fisttp dword [edi - 0x7024ffb9]
inc edi
add dh, al
rol byte [edi], 1
invalid