Function at 0x44dd11
Capabilities:
Create process on windows
Get graphical window text

Disassembly:
mov eax, 0x45e108
call fcn.0045c170
mov eax, 0x1748
call fcn.0045c140
push ebx
push esi
mov esi, ecx
push edi
push 1
mov ecx, 0x473ec0
call fcn.00429b21
push 2
mov ecx, 0x45e2a0
call fcn.0041145f
and byte [ebp - 0x1754], 0
mov ebx, 0x1ff
mov ecx, ebx
xor eax, eax
lea edi, [ebp - 0x1753]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, dword [ebp + 8]
cmp eax, 0x7701
jl 0x44dd8a
cmp eax, 0x7800
jg 0x44dd8a
push 1
add eax, 0xffff88ff
pop ecx
mov dword [0x472a94], eax
push eax
mov dword [0x4727e0], ecx
push ecx
mov ecx, esi
jmp 0x44e71d
cmp eax, 0x3501
jl 0x44ddaa
cmp eax, 0x7700
jg 0x44ddaa
add eax, 0xffffcaff
mov ecx, esi
push eax
call fcn.00451802
jmp case.0x44e778.32857
cmp eax, 0x2700
jl 0x44ddc5
cmp eax, 0x2999
jg 0x44ddc5
push eax
mov ecx, esi
call fcn.00451844
jmp case.0x44e778.32857
cmp eax, 0x7801
jl 0x44dde8
cmp eax, 0x7901
jg 0x44dde8
add eax, 0xffff87ff
mov ecx, 0x4969d0
push eax
call fcn.00443519
jmp case.0x44e778.32857
cmp eax, 0x2650
jl 0x44de0b
cmp eax, 0x2699
jg 0x44de0b
add eax, 0xffffd9b0
mov ecx, 0x4947d8
push eax
call fcn.004382e8
jmp case.0x44e778.32857
mov ecx, 0x3001
cmp eax, ecx
jg 0x44deb0
je 0x44de69
add eax, 0xffffe890
cmp eax, 0xb
ja case.0x44e778.32857
jmp dword [eax*4 + 0x44efe9]
push 0
mov ecx, esi
call fcn.004541e2
jmp case.0x44e778.32857
push 1
jmp 0x44de31
push 2
jmp 0x44de31
push 3
jmp 0x44de31
push 4
jmp 0x44de31
push 5
jmp 0x44de31
push 6
jmp 0x44de31
push 7
jmp 0x44de31
push 8
jmp 0x44de31
push 9
jmp 0x44de31
push 0xa
jmp 0x44de31
push 0xb
jmp 0x44de31
mov al, byte [0x45e298]
mov ecx, ebx
mov byte [ebp - 0xd4c], al
xor eax, eax
lea edi, [ebp - 0xd4b]
push 0x800
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0xd4c]
push eax
push dword [esi + 0xb20]
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea eax, [ebp - 0xd4c]
push 0
push eax
mov ecx, esi
call fcn.00452b14
jmp case.0x44e778.32857
mov ecx, 0x8054
cmp eax, ecx
jg 0x44e74c
je 0x44e743
mov ecx, 0x7fa4
cmp eax, ecx
jg 0x44e28f
je case.0x44e778.32925
mov ecx, 0x3067
cmp eax, ecx
jg 0x44e115
je 0x44e106
add ecx, 0xfffffff2
cmp eax, ecx
jg 0x44e071
je 0x44e039
mov ecx, 0x3052
cmp eax, ecx
jg 0x44df8d
je case.0x44e778.32918
sub eax, 0x3002
je case.0x44e778.32854
dec eax
je 0x44df4e
dec eax
dec eax
je 0x44df3f
dec eax
je 0x44df30
sub eax, 0x4b
je case.0x44e778.32925
jmp case.0x44e778.32857
mov ecx, 0x495e88
call fcn.00453e00
jmp case.0x44e778.32857
mov ecx, 0x495e88
call fcn.004540e0
jmp case.0x44e778.32857
mov al, byte [0x45e298]
mov ecx, ebx
mov byte [ebp - 0xd4c], al
xor eax, eax
lea edi, [ebp - 0xd4b]
push 0x800
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0xd4c]
push eax
push dword [esi + 0xb20]
call dword [sym.imp.USER32.dll_GetWindowTextA]
push 0
lea eax, [ebp - 0xd4c]
jmp 0x44ef54
sub eax, 0x3053
je case.0x44e778.32919
dec eax
je 0x44e02a
dec eax
je case.0x44e2a8.32680
dec eax
je case.0x44e778.32927
dec eax
dec eax
jne case.0x44e778.32857
cmp dword [0x47286c], 0
je 0x44dfee
mov ecx, 0x531670
call fcn.0042fbcb
test eax, eax
je case.0x44e778.32857
mov esi, 0x4947f8
push 1
push 1
mov ecx, esi
call fcn.0041baac
push 0
mov ecx, esi
call fcn.0041b896
jmp case.0x44e778.32857
push 0x3058
lea ecx, [esi + 0xae4]
call fcn.0044758d
lea ecx, [ebp - 0x14]
push 0
push ecx
push eax
push dword [esi + 0xae8]
mov ecx, esi
push 0x3eb
call fcn.004503cb
lea eax, [ebp - 0x14]
mov ecx, 0x531670
push eax
call fcn.0042f4eb
jmp case.0x44e778.32857
mov ecx, 0x474b78
call fcn.00415d41
jmp case.0x44e778.32857
push ecx
lea ecx, [esi + 0xae4]
call fcn.0044758d
lea ecx, [ebp - 0x14]
push 0
push ecx
push eax
push dword [esi + 0xae8]
mov ecx, esi
push 0x3eb
call fcn.004503cb
lea eax, [ebp - 0x14]
mov ecx, 0x531670
push eax
call fcn.0042f620
jmp case.0x44e778.32857
lea ecx, [eax - 0x305b]
cmp ecx, 0xb
ja case.0x44e778.32857
jmp dword [ecx*4 + 0x44f019]
push 0xffffffffffffffff
push dword [esi + 4]
mov ecx, esi
call fcn.0044db33
jmp case.0x44e778.32857
push eax
lea ecx, [esi + 0xae4]
call fcn.0044758d
lea ecx, [ebp - 0x14]
push 0
push ecx
push eax
push dword [esi + 0xae8]
mov ecx, esi
push 0x3eb
call fcn.004503cb
push dword [ebp - 0x10]
mov ecx, esi
push dword [ebp - 0x14]
call fcn.0044fedd
jmp case.0x44e778.32857
push eax
lea ecx, [esi + 0xae4]
call fcn.0044758d
lea ecx, [ebp - 0x14]
push 0
push ecx
push eax
push dword [esi + 0xae8]
mov ecx, esi
push 0x3eb
call fcn.004503cb
push dword [ebp - 0x10]
mov ecx, esi
push dword [ebp - 0x14]
call fcn.0044ffa4
jmp case.0x44e778.32857
mov ecx, 0x474b78
call fcn.004196fe
jmp case.0x44e778.32857
mov ecx, 0x7954
cmp eax, ecx
jg 0x44e1ff
je 0x44e1f9
mov ecx, 0x306d
cmp eax, ecx
jg 0x44e1b0
je 0x44e1a9
sub eax, 0x3068
je 0x44e19a
dec eax
je 0x44eef7
dec eax
je case.0x44e2a8.32794
dec eax
je 0x44e18b
dec eax
jne case.0x44e778.32857
push 0x306c
lea ecx, [esi + 0xae4]
call fcn.0044758d
lea ecx, [ebp - 0x14]
push 0
push ecx
push eax
push dword [esi + 0xae8]
mov ecx, esi
push 0x3eb
call fcn.004503cb
lea eax, [ebp - 0x14]
mov ecx, esi
push eax
call fcn.00454184
jmp case.0x44e778.32857
mov ecx, 0x495e88
call fcn.00453d0c
jmp case.0x44e778.32857
mov ecx, 0x495e88
call fcn.00452fce
jmp case.0x44e778.32857
mov ecx, esi
jmp 0x44ea3f
sub eax, 0x306e
je case.0x44e2a8.32820
sub eax, 0x48e2
je 0x44e1e1
dec eax
je 0x44e1db
dec eax
je 0x44e1d5
dec eax
jne case.0x44e778.32857
push 0
push 0x27
jmp 0x44e1e5
push 0
push 0x25
jmp 0x44e1e5
push 0
push 0x28
jmp 0x44e1e5
push 0
push 0x26
push 0x100
mov ecx, 0x474b78
call fcn.00417cf9
jmp case.0x44e778.32857
push 0
push 0x22
jmp 0x44e1e5
mov ecx, 0x795a
cmp eax, ecx
jg 0x44e255
je case.0x44e778.32934
sub eax, 0x7955
je 0x44e23e
dec eax
je 0x44e238
dec eax
je 0x44e22d
dec eax
je 0x44e227
dec eax
jne case.0x44e778.32857
push 0
push 0x24
jmp 0x44e1e5
push 0
push 0x23
jmp 0x44e1e5
push 0
push 7
push 0x114
jmp 0x44e1ea
push 0
push 6
jmp 0x44e231
push 0
push 0x21
jmp 0x44e1e5
push 1
mov ecx, 0x474b78
call fcn.004189a2
jmp case.0x44e778.32857
sub eax, 0x795b
je case.0x44e778.32933
sub eax, 0x644
je case.0x44e2a8.32679
dec eax
je 0x44e281
sub eax, 3
jne case.0x44e778.32857
mov ecx, 0x495e88
jmp 0x44e7ab
mov esi, 0x474b78
mov ecx, esi
call fcn.00415f0d
jmp 0x44e2bb
lea ecx, [eax - 0x7fa5]
cmp ecx, 0xae
ja case.0x44e778.32857
movzx ecx, byte [ecx + 0x44f0ed]
jmp dword [ecx*4 + 0x44f049]
mov esi, 0x474b78
mov ecx, esi
call fcn.00415eeb
push 0
mov ecx, esi
call fcn.00417c1f
jmp case.0x44e778.32857
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x38]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x38]
mov ecx, esi
push eax
mov dword [ebp - 0x34], 0x100
mov dword [ebp - 0x30], 0x79
call fcn.0045135e
jmp case.0x44e778.32857
xor eax, eax
push 1
cmp dword [0x531f48], eax
mov ecx, 0x531670
sete al
push eax
mov dword [0x531f48], eax
call fcn.0042f7ad
jmp case.0x44e778.32857
push 4
jmp 0x44efb6
push 0x41
xor eax, eax
pop ecx
lea edi, [ebp - 0x240]
rep stosd dword es:[edi], eax
mov edi, dword [sym.imp.USER32.dll_LoadStringA]
lea eax, [ebp - 0x240]
push 0x103
push eax
push 0x91
push dword [0x531f10]
call edi
mov ebx, 0x104
lea eax, [ebp - 0x448]
push ebx
push eax
push 0x90
push dword [0x531f10]
call edi
lea eax, [ebp - 0x240]
push eax
call fcn.00425447
pop ecx
lea eax, [ebp - 0x13c]
push ebx
mov ebx, 0x4969d0
push eax
mov ecx, ebx
call fcn.004436a8
lea eax, [ebp - 0x13c]
push eax
call fcn.00426238
lea eax, [esi + 0x99c]
push eax
push 0x80802
lea eax, [ebp - 0x13c]
push 0x4105b8
push eax
lea eax, [ebp - 0x240]
push eax
lea eax, [ebp - 0x448]
push eax
push dword [esi + 4]
push dword [0x531f10]
call fcn.0042558d
add esp, 0x24
test eax, eax
je case.0x44e778.32857
and dword [ebp - 0x18], 0
and dword [ebp - 0x1c], 0
lea eax, [ebp - 0x13c]
push 0x2e
push eax
call dword [sym.imp.MSVCRT.dll_strrchr]
pop ecx
mov dword [ebp + 8], eax
test eax, eax
pop ecx
je 0x44e485
mov edi, dword [sym.imp.MSVCRT.dll__stricmp]
push 0x40dda0
push eax
call edi
pop ecx
test eax, eax
pop ecx
je 0x44e414
push 0x40dd98
push dword [ebp + 8]
call edi
pop ecx
test eax, eax
pop ecx
jne 0x44e41b
mov dword [ebp - 0x18], 1
push 0x40ab80
push dword [ebp + 8]
call edi
pop ecx
test eax, eax
pop ecx
jne 0x44e432
mov dword [ebp - 0x1c], 1
cmp dword [ebp - 0x18], 0
je 0x44e47f
mov al, byte [0x45e298]
mov ecx, 0x1ff
mov byte [ebp - 0xd4c], al
xor eax, eax
lea edi, [ebp - 0xd4b]
push 0x800
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0xd4c]
mov ecx, ebx
push eax
call fcn.004436e3
lea eax, [ebp - 0x13c]
push eax
lea eax, [ebp - 0xd4c]
push eax
call fcn.00425e68
pop ecx
pop ecx
jmp 0x44e4d9
cmp dword [ebp - 0x1c], 0
jne 0x44e4c8
mov ecx, 0x45f838
call fcn.00428b86
test eax, eax
jne 0x44e4c8
push 0x4010
push 0x40a2d4
push 0xc1
mov dword [0x4606b0], 0xc3
call fcn.0042487e
pop ecx
push eax
push dword [esi + 4]
call dword [sym.imp.USER32.dll_MessageBoxA]
and dword [0x4606b0], 0
jmp case.0x44e778.32857
lea eax, [ebp - 0x13c]
mov ecx, 0x474b78
push eax
call fcn.00419894
test eax, eax
jne 0x44e4fe
push 0x10
push 0x40a2d4
push 0x92
call fcn.0042487e
pop ecx
push eax
push dword [esi + 4]
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp case.0x44e778.32857
lea eax, [ebp - 0x13c]
push eax
push 0x99
call fcn.0042487e
pop ecx
push eax
lea eax, [ebp - 0xf54]
push 0x208
push eax
call dword [sym.imp.MSVCRT.dll__snprintf]
add esp, 0x10
lea eax, [ebp - 0xf54]
push 0x40
push 0x40a2d4
jmp 0x44e4ef
mov ecx, 0x4969d0
call fcn.00441ea3
jmp case.0x44e778.32857
mov ecx, 0x4969d0
call fcn.00441fa3
jmp case.0x44e778.32857
push 0
mov ecx, 0x474b78
call fcn.00417522
jmp case.0x44e778.32857
add eax, 0xffff7ff2
mov ecx, 0x474b78
push eax
call fcn.004175e5
jmp case.0x44e778.32857
call fcn.004256c8
jmp case.0x44e778.32857
push 0x4105a0
mov ecx, 0x474b78
call fcn.00417a60
jmp case.0x44e778.32857
push 0x410590
jmp 0x44e588
push 0x410584
jmp 0x44e588
push 0x410570
jmp 0x44e588
push 0x410560
jmp 0x44e588
push 0x410548
jmp 0x44e588
push 0x41053c
jmp 0x44e588
push 0x17
jmp 0x44efb6
push 2
jmp 0x44ef60
mov ecx, 0x474b78
call fcn.00418328
jmp case.0x44e778.32857
push 3
jmp 0x44ef60
cmp dword [0x4727e8], 0
je 0x44e620
push 0
push 0
push 0x93
call fcn.0042487e
pop ecx
mov edi, 0x45e2c0
push eax
mov ecx, edi
call fcn.00411868
push dword [esi + 4]
mov ecx, edi
call fcn.004118d8
mov ecx, edi
call fcn.004118c4
mov dword [0x4727e8], eax
xor eax, eax
push eax
push eax
push eax
push 1
push 0x41051c
jmp 0x44e7eb
mov ecx, 0x495e88
call fcn.0045079d
jmp case.0x44e778.32857
push 1
jmp 0x44e64f
cmp dword [esi + 0x8e4], 0
je 0x44e65e
push 0
mov ecx, 0x4969d0
call fcn.004438a2
jmp case.0x44e778.32857
mov ecx, 0x4969d0
call fcn.00443896
jmp case.0x44e778.32857
xor eax, eax
cmp dword [0x470f98], eax
sete al
mov dword [0x470f98], eax
push 0
mov ecx, 0x495220
call fcn.004412a6
jmp case.0x44e778.32857
xor eax, eax
cmp dword [0x470fa4], eax
sete al
mov dword [0x470fa4], eax
jmp 0x44e67d
xor eax, eax
push 1
cmp dword [0x4727d0], eax
sete al
push eax
call fcn.004470e2
jmp 0x44eb87
xor eax, eax
cmp dword [0x4727f8], eax
sete al
mov dword [0x4727f8], eax
jmp case.0x44e778.32857
push dword [esi + 4]
call fcn.00445db3
jmp 0x44ea5e
mov esi, 0x531670
mov ecx, esi
call fcn.0042d67c
mov ecx, esi
call fcn.0042fd37
jmp case.0x44e778.32857
push 7
jmp 0x44e089
cmp dword [0x4727e0], 0
je case.0x44e778.32857
and dword [0x4727e0], 0
or dword [0x472a94], 0xffffffff
push 0xffffffffffffffff
push 0
mov ecx, 0x495e88
call fcn.00450fb5
jmp case.0x44e778.32857
push 1
push 0x3ec
mov ecx, esi
call fcn.0045166d
jmp case.0x44e778.32857
push 1
push 0x3eb
jmp 0x44e72e
push 1
push 0x3ea
jmp 0x44e72e
mov ecx, GetModuleHandleA
cmp eax, ecx
jg 0x44eecb
je 0x44eec4
lea ecx, [eax - 0x8055]
cmp ecx, 0x8a
ja case.0x44e778.32857
movzx ecx, byte [ecx + 0x44f2d4]
jmp dword [ecx*4 + 0x44f19c]
xor eax, eax
cmp dword [0x4727f4], eax
je 0x44e794
push 1
mov ecx, esi
call fcn.0044dc58
jmp 0x44e7a9
push eax
push eax
push 1
push 1
push 0x40a6a0
mov ecx, 0x474b78
call fcn.00415920
mov ecx, esi
call fcn.0044f89a
jmp case.0x44e778.32857
push 1
mov ecx, 0x474b78
call fcn.00415ba2
jmp case.0x44e778.32857
lea eax, [ebp - 0x1754]
push 0x800
push eax
mov ecx, 0x4969d0
call fcn.004436e3
push 0
push 0
push 1
push 1
lea eax, [ebp - 0x1754]
push eax
mov ecx, 0x474b78
call fcn.00415920
jmp case.0x44e778.32857
push 0
mov ecx, esi
call fcn.0044dc58
jmp case.0x44e778.32857
mov ecx, 0x474b78
call fcn.00415ceb
jmp case.0x44e778.32857
mov ecx, 0x474b78
call fcn.00415c95
jmp case.0x44e778.32857
mov ecx, 0x474b78
call fcn.00415d96
jmp case.0x44e778.32857
mov ecx, 0x474b78
call fcn.00419681
jmp case.0x44e778.32857
push 0
mov ecx, 0x474b78
call fcn.004194ac
jmp case.0x44e778.32857
push 1
jmp 0x44e846
push 0x41
xor eax, eax
pop ecx
lea edi, [ebp - 0x240]
rep stosd dword es:[edi], eax
mov edi, dword [sym.imp.USER32.dll_LoadStringA]
lea eax, [ebp - 0x240]
push 0x103
push eax
push 0x6f
push dword [0x531f10]
call edi
lea eax, [ebp - 0x448]
push 0x104
push eax
push 0x6e
push dword [0x531f10]
call edi
lea eax, [ebp - 0x240]
push eax
call fcn.00425447
mov al, byte [0x45e298]
push 0x40
mov byte [ebp - 0x13c], al
pop ecx
xor eax, eax
lea edi, [ebp - 0x13b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dword [esp], 0x81800
lea eax, [ebp - 0x13c]
push 0x410518
push eax
lea eax, [ebp - 0x240]
push eax
lea eax, [ebp - 0x448]
push eax
push dword [esi + 4]
push dword [0x531f10]
call fcn.004254c6
add esp, 0x1c
test eax, eax
je case.0x44e778.32857
xor eax, eax
push eax
push eax
push eax
push 2
lea eax, [ebp - 0x13c]
jmp 0x44e7ea
mov ebx, 0x4969d0
mov ecx, ebx
call fcn.00444556
push eax
mov ecx, ebx
call fcn.004448a1
jmp case.0x44e778.32857
push 0
mov ecx, 0x474b78
call fcn.00418c1f
jmp case.0x44e778.32857
mov ecx, 0x474b78
call fcn.00418a7e
jmp case.0x44e778.32857
lea eax, [ebp - 0x344]
push 0x104
push eax
call fcn.00446f8b
lea eax, [ebp - 0x344]
push eax
push dword [0x531674]
call fcn.00424ddf
add esp, 0x10
jmp case.0x44e778.32857
lea eax, [ebp - 0x344]
push 0x104
push eax
call fcn.00446f8b
pop ecx
lea eax, [ebp - 0x344]
pop ecx
push 0xa
push 0
push 0
push eax
push 0x40a814
push dword [esi + 4]
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp case.0x44e778.32857
push 0
mov ecx, 0x474b78
call fcn.0041871a
jmp case.0x44e778.32857
push 7
jmp 0x44efb6
mov ecx, 0x4969d0
call fcn.00444973
jmp case.0x44e778.32857
mov ecx, 0x4969d0
call fcn.00443e04
jmp case.0x44e778.32857
mov ecx, 0x474b78
call fcn.00419578
jmp case.0x44e778.32857
xor edi, edi
mov esi, 0x474b78
cmp dword [0x531f48], edi
je 0x44ea05
push 1
push edi
mov ecx, 0x531670
call fcn.0042f7ad
jmp 0x44ea0c
mov ecx, esi
call fcn.00415d41
mov ecx, 0x460748
call fcn.0043342b
mov eax, dword [0x473eb0]
cmp eax, edi
je 0x44ea2c
push eax
call dword [sym.imp.USER32.dll_DestroyWindow]
mov dword [0x473eb0], edi
push 0xffffffffffffffff
mov ecx, esi
call fcn.0041574b
jmp 0x44e277
mov ecx, 0x495e88
call fcn.00453da9
jmp case.0x44e778.32857
mov ecx, 0x474b78
call fcn.00415ec4
jmp case.0x44e778.32857
push eax
call fcn.004520cc
pop ecx
jmp case.0x44e778.32857
push 0
call fcn.0043d005
neg eax
sbb eax, eax
inc eax
push eax
push dword [esi + 4]
call fcn.0043d273
add esp, 0xc
jmp case.0x44e778.32857
xor eax, eax
push eax
push eax
push eax
push 1
push 0xa3
jmp 0x44eb0c
call fcn.004148a2
test eax, eax
je 0x44ead7
push 0x24
push 0x40a2d4
push 0xad
call fcn.0042487e
pop ecx
push eax
push dword [esi + 4]
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp eax, 6
jne case.0x44e778.32857
push 0
push 0
push 0x4600
push dword [0x531674]
call dword [sym.imp.USER32.dll_PostMessageA]
jmp case.0x44e778.32857
push 0x40
push 0x40a2d4
push 0xb0
call fcn.0042487e
pop ecx
push eax
push dword [esi + 4]
jmp 0x44e4f3
xor eax, eax
push eax
push eax
push eax
push 1
push 0xa0
jmp 0x44eb0c
xor eax, eax
push eax
push eax
push eax
push 1
push 0x9f
call fcn.0042487e
pop ecx
jmp 0x44e7ea
xor eax, eax
push eax
push eax
push eax
push 1
push 0x410500
jmp 0x44e7eb
xor eax, eax
mov ecx, 0x495220
cmp dword [0x4727d8], eax
sete al
mov dword [0x4727d8], eax
call fcn.00440f8f
jmp case.0x44e778.32857
xor eax, eax
cmp dword [0x470fb0], eax
sete al
mov dword [0x470fb0], eax
jmp case.0x44e778.32857
xor eax, eax
cmp dword [0x470fc4], eax
sete al
mov dword [0x470fc4], eax
jmp case.0x44e778.32857
push 0
push dword [esi + 4]
call fcn.0043df74
jmp 0x44eb87
push 0
push dword [esi + 4]
call fcn.0043e256
pop ecx
jmp 0x44ea5e
xor eax, eax
cmp dword [0x472eec], eax
sete al
mov dword [0x472eec], eax
jmp case.0x44e778.32857
cmp dword [0x4727e0], 2
je case.0x44e778.32857
or dword [0x472a94], 0xffffffff
push 2
pop eax
push 0xffffffffffffffff
mov dword [0x4727e0], eax
push eax
jmp 0x44e718
push 1
push 0x3e9
jmp 0x44e72e
push 1
push 0x3ed
jmp 0x44e72e
mov ecx, 0x531670
call fcn.0042fbcb
jmp case.0x44e778.32857
mov ecx, 0x531670
call fcn.0042fb75
jmp case.0x44e778.32857
push 0
lea ecx, [esi + 0xae4]
mov dword [esi + 0xafc], 0xba
call fcn.004475f5
mov ebx, 0x4969d0
mov ecx, ebx
call fcn.00444556
push eax
mov ecx, ebx
call fcn.00443535
mov ecx, 0x495e88
call fcn.00451d9c
jmp case.0x44e778.32857
mov dword [esi + 0xae0], 0x78
and dword [esi + 0xadc], 0
push 0
lea ecx, [esi + 0xac8]
call fcn.004475f5
jmp case.0x44e778.32857
mov dword [esi + 0xb18], 0x78
and dword [esi + 0xb14], 0
push 0
lea ecx, [esi + 0xb00]
jmp 0x44ec4f
xor eax, eax
mov ecx, esi
cmp dword [0x470f70], eax
sete al
mov dword [0x470f70], eax
call fcn.004483d6
jmp case.0x44e778.32857
push 0
push 0x4104f8
mov ecx, 0x474b78
call fcn.00418833
jmp case.0x44e778.32857
push 0
push 0x4104f0
jmp 0x44ec97
push 0
push 0x4104e8
jmp 0x44ec97
push 0
push 0x40a7a8
jmp 0x44ec97
push 0
push 0x4104dc
jmp 0x44ec97
push 0
push 0x4104d0
jmp 0x44ec97
push 0
push 0x4104c4
jmp 0x44ec97
push 0
push 0x4104b8
jmp 0x44ec97
push 0xffffffffffffffff
jmp 0x44e246
push 2
mov ecx, 0x531670
call fcn.0045b228
jmp case.0x44e778.32857
push 3
jmp 0x44ecee
call fcn.00411c7f
jmp case.0x44e778.32857
push 0
jmp 0x44ed11
push 1
call fcn.00411b3f
jmp 0x44ea5e
push dword [esi + 4]
call fcn.004130a2
jmp 0x44ea5e
mov ecx, esi
call fcn.0044daf2
test byte [0x4727c8], 1
je 0x44ed44
and dword [0x4727c8], 0xfffffffe
jmp case.0x44e778.32857
or dword [0x4727c8], 1
jmp case.0x44e778.32857
mov ecx, esi
call fcn.0044daf2
test byte [0x4727c8], 4
je 0x44ed6c
and dword [0x4727c8], 0xfffffffb
jmp case.0x44e778.32857
or dword [0x4727c8], 4
jmp case.0x44e778.32857
mov ecx, esi
call fcn.0044daf2
test byte [0x4727c8], 8
je 0x44ed94
and dword [0x4727c8], 0xfffffff7
jmp case.0x44e778.32857
or dword [0x4727c8], 8
jmp case.0x44e778.32857
mov ecx, esi
call fcn.0044daf2
test byte [0x4727c8], 2
je 0x44edbc
and dword [0x4727c8], 0xfffffffd
jmp case.0x44e778.32857
or dword [0x4727c8], 2
jmp case.0x44e778.32857
mov ecx, esi
call fcn.0044daf2
test byte [0x4727c8], 0x10
je 0x44ede4
and dword [0x4727c8], 0xffffffef
jmp case.0x44e778.32857
or dword [0x4727c8], 0x10
jmp case.0x44e778.32857
push 0
mov ecx, 0x474b78
call fcn.00415dbd
jmp case.0x44e778.32857
push dword [0x472cc4]
lea eax, [ebp - 0x54c]
push 0x4104b4
push 0x104
push eax
call dword [sym.imp.MSVCRT.dll__snprintf]
add esp, 0x10
lea eax, [ebp - 0x54c]
lea ecx, [ebp + 8]
push eax
call fcn.0042b812
and dword [ebp - 4], 0
push 0xb9
call fcn.0042487e
pop ecx
push eax
lea ecx, [ebp + 8]
push dword [esi + 4]
call fcn.0042b907
cmp eax, 1
jne 0x44ee65
lea ecx, [ebp + 8]
call fcn.0042b928
push eax
call dword [sym.imp.MSVCRT.dll_atoi]
pop ecx
mov dword [0x472cc4], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.0042b86b
jmp case.0x44e778.32857
push 4
jmp 0x44e089
push 0
push 0
push 0x410490
mov ecx, esi
call fcn.0044f3d4
jmp case.0x44e778.32857
push 0
push 0
push 0x410464
jmp 0x44ee86
push 0
push 0
push 0x41043c
jmp 0x44ee86
push 0
push 0
push 0x410418
jmp 0x44ee86
push 0x410490
mov ecx, esi
call fcn.0044f35f
jmp case.0x44e778.32857
push 0xa
jmp 0x44efb6
mov ecx, 0xe124
cmp eax, ecx
jg 0x44ef6c
je 0x44ef0c
sub eax, 0xe106
je 0x44ef05
dec eax
je case.0x44e080.12387
sub eax, 0x1b
je 0x44eef7
dec eax
jne case.0x44e778.32857
push 0xb
jmp 0x44efb6
push 0xc
jmp 0x44efb6
push 6
jmp 0x44efb6
push 8
jmp 0x44efb6
mov ecx, 0x495e88
call fcn.00450464
test eax, eax
je 0x44ef5e
mov al, byte [0x45e298]
mov ecx, ebx
mov byte [ebp - 0xd4c], al
xor eax, eax
lea edi, [ebp - 0xd4b]
push 0x800
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0xd4c]
push eax
push dword [esi + 0xb20]
call dword [sym.imp.USER32.dll_GetWindowTextA]
push 0
lea eax, [ebp - 0xd4c]
push eax
mov ecx, esi
call fcn.0045014d
jmp case.0x44e778.32857
push 1
mov ecx, 0x474b78
call fcn.00417464
jmp case.0x44e778.32857
sub eax, 0xe125
je 0x44efb4
sub eax, 5
je 0x44efb0
sub eax, 0x16
je 0x44ef9f
dec eax
jne case.0x44e778.32857
xor esi, esi
push esi
push esi
push 0x1f
push dword [0x496774]
call dword [sym.imp.USER32.dll_SendMessageA]
push esi
mov ecx, 0x531670
call fcn.0042fad6
jmp case.0x44e778.32857
push 0x41040c
mov ecx, 0x531670
call fcn.0042f755
jmp case.0x44e778.32857
push 0x11
jmp 0x44efb6
push 0xd
mov ecx, 0x474b78
call fcn.00417504
push 0
mov ecx, 0x45e2a0
call fcn.0041145f
push 0
mov ecx, 0x473ec0
call fcn.00429b21
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 4