Function at 0x4d99f0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x53d601
mov eax, dword fs:[0]
push eax
sub esp, 0xd0
push ebx
push esi
push edi
mov eax, dword [0x575494]
xor eax, esp
push eax
lea eax, [esp + 0xe0]
mov dword fs:[0], eax
xor ebx, ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov esi, dword [ebp + 8]
add esi, 0x5c8
mov dword [esp + 0xe8], ebx
mov ecx, dword [esi + 0x14]
cmp ecx, ebx
je 0x4d9a5b
push ebx
push ebx
push 0x14b
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x4d9a69
mov ecx, dword [esi + 0x10]
mov ecx, dword [ecx + 4]
mov dword [ecx + esi + 0x10], 6
mov dword [esi + 0x28], ebx
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x68], ebx
mov dword [esp + 0x6c], ebx
mov dword [esp + 0x70], ebx
mov dword [esp + 0x74], ebx
mov dword [esp + 0x78], ebx
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x80], ebx
mov dword [esp + 0x84], ebx
mov dword [esp + 0x88], ebx
mov dword [esp + 0x8c], ebx
mov dword [esp + 0x90], ebx
mov dword [esp + 0x94], ebx
mov dword [esp + 0x98], ebx
mov dword [esp + 0x9c], ebx
mov dword [esp + 0xa0], ebx
mov dword [esp + 0xa4], ebx
mov dword [esp + 0xa8], ebx
mov dword [esp + 0xac], ebx
mov dword [esp + 0xb0], ebx
mov dword [esp + 0xb4], ebx
mov dword [esp + 0xb8], ebx
mov dword [esp + 0xbc], ebx
mov dword [esp + 0xc0], ebx
lea ecx, [esp + 0x5c]
mov byte [esp + 0xe8], 1
call fcn.00474020
cmp eax, 1
je 0x4d9b45
cmp eax, 2
je 0x4d9b45
cmp eax, 0x37
jne 0x4d9b2e
mov byte [esp + 0x13], 1
jmp 0x4d9b4a
lea edx, [eax - 0x33]
cmp edx, 7
jbe 0x4d9b45
add eax, 0xfffffe0b
cmp eax, 0x61
seta byte [esp + 0x13]
jmp 0x4d9b4a
mov byte [esp + 0x13], 0
call fcn.004c79e0
test al, al
je 0x4d9d97
call fcn.004db920
cmp eax, ebx
je 0x4d9d97
cmp byte [esp + 0x13], 0
je 0x4d9b89
push 0x8d2f
lea eax, [esp + 0x18]
push eax
mov ecx, 0x5776a0
call fcn.00471480
mov byte [esp + 0xe8], 2
jmp 0x4d9ba5
push 0x8d2b
lea ecx, [esp + 0x18]
push ecx
mov ecx, 0x5776a0
call fcn.00471480
mov byte [esp + 0xe8], 3
lea ecx, [esp + 0x20]
call fcn.00508010
mov byte [esp + 0xe8], 1
mov eax, dword [esp + 0x14]
cmp eax, ebx
je 0x4d9bc7
push eax
call fcn.0051ebab
add esp, 4
mov eax, dword [esp + 0x20]
cmp eax, ebx
jne 0x4d9bd4
mov eax, 0x54ee24
push 0xc
push eax
call fcn.0042c9a0
cmp byte [esp + 0x13], 0
mov ecx, 0x5776a0
je 0x4d9c01
push 0x8d30
lea edx, [esp + 0x18]
push edx
call fcn.00471480
mov byte [esp + 0xe8], 4
jmp 0x4d9c18
push 0x8d2c
lea eax, [esp + 0x18]
push eax
call fcn.00471480
mov byte [esp + 0xe8], 5
lea ecx, [esp + 0x20]
call fcn.00508010
mov byte [esp + 0xe8], 1
mov eax, dword [esp + 0x14]
cmp eax, ebx
je 0x4d9c3a
push eax
call fcn.0051ebab
add esp, 4
mov eax, dword [esp + 0x20]
cmp eax, ebx
jne 0x4d9c47
mov eax, 0x54ee24
push 9
push eax
call fcn.0042c9a0
cmp byte [esp + 0x13], 0
je 0x4d9c74
push 0x8d31
lea ecx, [esp + 0x18]
push ecx
mov ecx, 0x5776a0
call fcn.00471480
mov byte [esp + 0xe8], 6
jmp 0x4d9c90
push 0x8d2d
lea edx, [esp + 0x18]
push edx
mov ecx, 0x5776a0
call fcn.00471480
mov byte [esp + 0xe8], 7
lea ecx, [esp + 0x20]
call fcn.00508010
mov byte [esp + 0xe8], 1
mov eax, dword [esp + 0x14]
cmp eax, ebx
je 0x4d9cb2
push eax
call fcn.0051ebab
add esp, 4
mov eax, dword [esp + 0x20]
cmp eax, ebx
jne 0x4d9cbf
mov eax, 0x54ee24
push 0xb
push eax
call fcn.0042c9a0
cmp byte [esp + 0x13], 0
je 0x4d9cec
push 0x8d32
lea eax, [esp + 0x18]
push eax
mov ecx, 0x5776a0
call fcn.00471480
mov byte [esp + 0xe8], 8
jmp 0x4d9d08
push 0x8d2e
lea ecx, [esp + 0x18]
push ecx
mov ecx, 0x5776a0
call fcn.00471480
mov byte [esp + 0xe8], 9
lea ecx, [esp + 0x20]
call fcn.00508010
mov byte [esp + 0xe8], 1
mov eax, dword [esp + 0x14]
cmp eax, ebx
je 0x4d9d2a
push eax
call fcn.0051ebab
add esp, 4
mov eax, dword [esp + 0x20]
cmp eax, ebx
jne 0x4d9d37
mov eax, 0x54ee24
push 0xa
push eax
call fcn.0042c9a0
push 0x8d33
lea edx, [esp + 0x18]
push edx
mov ecx, 0x5776a0
call fcn.00471480
lea ecx, [esp + 0x20]
mov byte [esp + 0xe8], 0xa
call fcn.00508010
mov byte [esp + 0xe8], 1
mov eax, dword [esp + 0x14]
cmp eax, ebx
je 0x4d9d7d
push eax
call fcn.0051ebab
add esp, 4
mov eax, dword [esp + 0x20]
cmp eax, ebx
jne 0x4d9d8a
mov eax, 0x54ee24
push 0x34
push eax
call fcn.0042c9a0
jmp 0x4dae7d
call fcn.004db500
movzx eax, al
push eax
call fcn.004c7fe0
cmp byte [0x57774c], 0
mov edi, eax
mov dword [esp + 0x34], edi
je 0x4d9dd2
push 0x8cd2
lea ecx, [esp + 0x18]
push ecx
mov ecx, 0x5776a0
call fcn.00471480
mov byte [esp + 0xe8], 0xb
jmp 0x4d9df7
call fcn.004c7a60
test al, al
je 0x4d9e2e
push 0x8cd2
lea edx, [esp + 0x18]
push edx
mov ecx, 0x5776a0
call fcn.00471480
mov byte [esp + 0xe8], 0xc
lea ecx, [esp + 0x20]
call fcn.00508010
mov byte [esp + 0xe8], 1
mov eax, dword [esp + 0x14]
cmp eax, ebx
je 0x4d9e19
push eax
call fcn.0051ebab
add esp, 4
mov eax, dword [esp + 0x20]
cmp eax, ebx
jne 0x4d9e26
mov eax, 0x54ee24
push 0x19
push eax
call fcn.0042c9a0
cmp edi, 0x17
jl 0x4d9eab
cmp byte [esp + 0x13], 0
je 0x4d9e58
push 0x8ce7
lea eax, [esp + 0x18]
push eax
mov ecx, 0x5776a0
call fcn.00471480
mov byte [esp + 0xe8], 0xd
jmp 0x4d9e74
push 0x8cd3
lea ecx, [esp + 0x18]
push ecx
mov ecx, 0x5776a0
call fcn.00471480
mov byte [esp + 0xe8], 0xe
lea ecx, [esp + 0x20]
call fcn.00508010
mov byte [esp + 0xe8], 1
mov eax, dword [esp + 0x14]
cmp eax, ebx
je 0x4d9e96
push eax
call fcn.0051ebab
add esp, 4
mov eax, dword [esp + 0x20]
cmp eax, ebx
jne 0x4d9ea3
mov eax, 0x54ee24
push 0x17
push eax
call fcn.0042c9a0
cmp edi, 0x16
jl 0x4d9f23
cmp byte [esp + 0x13], 0
mov ecx, 0x5776a0
je 0x4d9ed5
push 0x8ce8
lea edx, [esp + 0x18]
push edx
call fcn.00471480
mov byte [esp + 0xe8], 0xf
jmp 0x4d9eec
push 0x8cd4
lea eax, [esp + 0x18]
push eax
call fcn.00471480
mov byte [esp + 0xe8], 0x10
lea ecx, [esp + 0x20]
call fcn.00508010
mov byte [esp + 0xe8], 1
mov eax, dword [esp + 0x14]
cmp eax, ebx
je 0x4d9f0e
push eax
call fcn.0051ebab
add esp, 4
mov eax, dword [esp + 0x20]
cmp eax, ebx
jne 0x4d9f1b
mov eax, 0x54ee24
push 0x16
push eax
call fcn.0042c9a0
cmp edi, 0x15
jl 0x4d9fa0
cmp byte [esp + 0x13], 0
je 0x4d9f4d
push 0x8ce9
lea ecx, [esp + 0x18]
push ecx
mov ecx, 0x5776a0
call fcn.00471480
mov byte [esp + 0xe8], 0x11
jmp 0x4d9f69
push 0x8cd5
lea edx, [esp + 0x18]
push edx
mov ecx, 0x5776a0
call fcn.00471480
mov byte [esp + 0xe8], 0x12
lea ecx, [esp + 0x20]
call fcn.00508010
mov byte [esp + 0xe8], 1
mov eax, dword [esp + 0x14]
cmp eax, ebx
je 0x4d9f8b
push eax
call fcn.0051ebab
add esp, 4
mov eax, dword [esp + 0x20]
cmp eax, ebx
jne 0x4d9f98
mov eax, 0x54ee24
push 0x15
push eax
call fcn.0042c9a0
cmp byte [esp + 0x13], 0
je 0x4d9fc5
push 0x8cea
lea eax, [esp + 0x18]
push eax
mov ecx, 0x5776a0
call fcn.00471480
mov byte [esp + 0xe8], 0x13
jmp 0x4d9fe1
push 0x8cd6
lea ecx, [esp + 0x18]
push ecx
mov ecx, 0x5776a0
call fcn.00471480
mov byte [esp + 0xe8], 0x14
lea ecx, [esp + 0x20]
call fcn.00508010
mov byte [esp + 0xe8], 1
mov eax, dword [esp + 0x14]
cmp eax, ebx
je 0x4da003
push eax
call fcn.0051ebab
add esp, 4
mov eax, dword [esp + 0x20]
cmp eax, ebx
jne 0x4da010
mov eax, 0x54ee24
push 0xc
push eax
call fcn.0042c9a0
cmp byte [esp + 0x13], 0
mov ecx, 0x5776a0
je 0x4da03d
push 0x8ceb
lea edx, [esp + 0x18]
push edx
call fcn.00471480
mov byte [esp + 0xe8], 0x15
jmp 0x4da054
push 0x8cd7
lea eax, [esp + 0x18]
push eax
call fcn.00471480
mov byte [esp + 0xe8], 0x16
lea ecx, [esp + 0x20]
call fcn.00508010
mov byte [esp + 0xe8], 1
mov eax, dword [esp + 0x14]
cmp eax, ebx
je 0x4da076
push eax
call fcn.0051ebab
add esp, 4
mov eax, dword [esp + 0x20]
cmp eax, ebx
jne 0x4da083
mov eax, 0x54ee24
push 9
push eax
call fcn.0042c9a0
cmp byte [esp + 0x13], 0
je 0x4da0b0
push 0x8cec
lea ecx, [esp + 0x18]
push ecx
mov ecx, 0x5776a0
call fcn.00471480
mov byte [esp + 0xe8], 0x17
jmp 0x4da0cc
push 0x8cd8
lea edx, [esp + 0x18]
push edx
mov ecx, 0x5776a0
call fcn.00471480
mov byte [esp + 0xe8], 0x18
lea ecx, [esp + 0x20]
call fcn.00508010
mov byte [esp + 0xe8], 1
mov eax, dword [esp + 0x14]
cmp eax, ebx
je 0x4da0ee
push eax
call fcn.0051ebab
add esp, 4
mov eax, dword [esp + 0x20]
cmp eax, ebx
jne 0x4da0fb
mov eax, 0x54ee24
push 0xb
push eax
call fcn.0042c9a0
cmp edi, 0xf
jl 0x4da2e7
cmp byte [esp + 0x13], 0
je 0x4da131
push 0x8ced
lea eax, [esp + 0x18]
push eax
mov ecx, 0x5776a0
call fcn.00471480
mov byte [esp + 0xe8], 0x19
jmp 0x4da14d
push 0x8cd9
lea ecx, [esp + 0x18]
push ecx
mov ecx, 0x5776a0
call fcn.00471480
mov byte [esp + 0xe8], 0x1a
lea ecx, [esp + 0x20]
call fcn.00508010
mov byte [esp + 0xe8], 1
mov eax, dword [esp + 0x14]
cmp eax, ebx
je 0x4da16f
push eax
call fcn.0051ebab
add esp, 4
mov eax, dword [esp + 0x20]
cmp eax, ebx
jne 0x4da17c
mov eax, 0x54ee24
push 0xf
push eax
call fcn.0042c9a0
cmp byte [esp + 0x13], 0
mov ecx, 0x5776a0
je 0x4da1a9
push 0x8d36
lea edx, [esp + 0x18]
push edx
call fcn.00471480
mov byte [esp + 0xe8], 0x1b
jmp 0x4da1c0
push 0x8d35
lea eax, [esp + 0x18]
push eax
call fcn.00471480
mov byte [esp + 0xe8], 0x1c
lea ecx, [esp + 0x20]
call fcn.00508010
mov byte [esp + 0xe8], 1
mov eax, dword [esp + 0x14]
cmp eax, ebx
je 0x4da1e2
push eax
call fcn.0051ebab
add esp, 4
mov eax, dword [esp + 0x20]
cmp eax, ebx
jne 0x4da1ef
mov eax, 0x54ee24
push 0x11
push eax
call fcn.0042c9a0
cmp byte [esp + 0x13], 0
je 0x4da21c
push 0x8d4d
lea ecx, [esp + 0x18]
push ecx
mov ecx, 0x5776a0
call fcn.00471480
mov byte [esp + 0xe8], 0x1d
jmp 0x4da238
push 0x8d4c
lea edx, [esp + 0x18]
push edx
mov ecx, 0x5776a0
call fcn.00471480
mov byte [esp + 0xe8], 0x1e
lea ecx, [esp + 0x20]
call fcn.00508010
mov byte [esp + 0xe8], 1
mov eax, dword [esp + 0x14]
cmp eax, ebx
je 0x4da25a
push eax
call fcn.0051ebab
add esp, 4
mov eax, dword [esp + 0x20]
cmp eax, ebx
jne 0x4da267
mov eax, 0x54ee24
push 0x12
push eax
call fcn.0042c9a0
cmp byte [esp + 0x13], 0
je 0x4da294
push 0x8d4f
lea eax, [esp + 0x18]
push eax
mov ecx, 0x5776a0
call fcn.00471480
mov byte [esp + 0xe8], 0x1f
jmp 0x4da2b0
push 0x8d4e
lea ecx, [esp + 0x18]
push ecx
mov ecx, 0x5776a0
call fcn.00471480
mov byte [esp + 0xe8], 0x20
lea ecx, [esp + 0x20]
call fcn.00508010
mov byte [esp + 0xe8], 1
mov eax, dword [esp + 0x14]
cmp eax, ebx
je 0x4da2d2
push eax
call fcn.0051ebab
add esp, 4
mov eax, dword [esp + 0x20]
cmp eax, ebx
jne 0x4da2df
mov eax, 0x54ee24
push 0x13
push eax
call fcn.0042c9a0
cmp byte [esp + 0x13], 0
mov ecx, 0x5776a0
je 0x4da30c
push 0x8cee
lea edx, [esp + 0x18]
push edx
call fcn.00471480
mov byte [esp + 0xe8], 0x21
jmp 0x4da323
push 0x8cda
lea eax, [esp + 0x18]
push eax
call fcn.00471480
mov byte [esp + 0xe8], 0x22
lea ecx, [esp + 0x20]
call fcn.00508010
mov byte [esp + 0xe8], 1
mov eax, dword [esp + 0x14]
cmp eax, ebx
je 0x4da345
push eax
call fcn.0051ebab
add esp, 4
mov eax, dword [esp + 0x20]
cmp eax, ebx
jne 0x4da352
mov eax, 0x54ee24
push 8
push eax
call fcn.0042c9a0
mov edi, 0x27
call fcn.004c88c0
cmp al, 1
jne 0x4da3e0
cmp byte [esp + 0x13], 0
je 0x4da38d
push 0x8cf7
lea ecx, [esp + 0x18]
push ecx
mov ecx, 0x5776a0
call fcn.00471480
mov byte [esp + 0xe8], 0x23
jmp 0x4da3a9
push 0x8ce3
lea edx, [esp + 0x18]
push edx
mov ecx, 0x5776a0
call fcn.00471480
mov byte [esp + 0xe8], 0x24
lea ecx, [esp + 0x20]
call fcn.00508010
mov byte [esp + 0xe8], 1
mov eax, dword [esp + 0x14]
cmp eax, ebx
je 0x4da3cb
push eax
call fcn.0051ebab
add esp, 4
mov eax, dword [esp + 0x20]
cmp eax, ebx
jne 0x4da3d8
mov eax, 0x54ee24
push 0xe
push eax
call fcn.0042c9a0
mov edi, 0xd
call fcn.004c88c0
cmp al, 1
jne 0x4da466
cmp byte [esp + 0x13], 0
je 0x4da413
push 0x8cf8
lea eax, [esp + 0x18]
push eax
mov ecx, 0x5776a0
call fcn.00471480
mov byte [esp + 0xe8], 0x25
jmp 0x4da42f
push 0x8ce4
lea ecx, [esp + 0x18]
push ecx
mov ecx, 0x5776a0
call fcn.00471480
mov byte [esp + 0xe8], 0x26
lea ecx, [esp + 0x20]
call fcn.00508010
mov byte [esp + 0xe8], 1
mov eax, dword [esp + 0x14]
cmp eax, ebx
je 0x4da451
push eax
call fcn.0051ebab
add esp, 4
mov eax, dword [esp + 0x20]
cmp eax, ebx
jne 0x4da45e
mov eax, 0x54ee24
push 0xd
push eax
call fcn.0042c9a0
cmp byte [esp + 0x13], 0
mov ecx, 0x5776a0
je 0x4da48b
push 0x8cef
lea edx, [esp + 0x18]
push edx
call fcn.00471480
mov byte [esp + 0xe8], 0x27
jmp 0x4da4a2
push 0x8cdb
lea eax, [esp + 0x18]
push eax
call fcn.00471480
mov byte [esp + 0xe8], 0x28
lea ecx, [esp + 0x20]
call fcn.00508010
mov byte [esp + 0xe8], 1
mov eax, dword [esp + 0x14]
cmp eax, ebx
je 0x4da4c4
push eax
call fcn.0051ebab
add esp, 4
mov eax, dword [esp + 0x20]
cmp eax, ebx
jne 0x4da4d1
mov eax, 0x54ee24
push 0xa
push eax
call fcn.0042c9a0
call fcn.004c7e60
mov bl, al
call fcn.004c7ee0
mov byte [esp + 0x33], al
call fcn.004c7de0
cmp byte [0x57774c], 0
jne 0x4da66b
test bl, bl
je 0x4da50e
cmp byte [esp + 0x33], 0
jne 0x4da53a
test al, al
jne 0x4da66b
cmp byte [esp + 0x13], 0
mov ecx, 0x5776a0
je 0x4da621
push 0x8cf0
lea edx, [esp + 0x18]
push edx
call fcn.00471480
mov byte [esp + 0xe8], 0x2f
jmp 0x4da638
test al, al
je 0x4da50e
mov bl, byte [esp + 0x13]
test bl, bl
je 0x4da564
push 0x8d29
lea ecx, [esp + 0x18]
push ecx
mov ecx, 0x5776a0
call fcn.00471480
mov byte [esp + 0xe8], 0x2b
jmp 0x4da580
push 0x8d27
lea edx, [esp + 0x18]
push edx
mov ecx, 0x5776a0
call fcn.00471480
mov byte [esp + 0xe8], 0x2c
lea ecx, [esp + 0x20]
call fcn.00508010
lea ecx, [esp + 0x14]
mov byte [esp + 0xe8], 1
call fcn.00507320
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x4da5a7
mov eax, 0x54ee24
push 1
push eax
call fcn.0042c9a0
test bl, bl
je 0x4da5d1
push 0x8d2a
lea eax, [esp + 0x18]
push eax
mov ecx, 0x5776a0
call fcn.00471480
mov byte [esp + 0xe8], 0x2d
jmp 0x4da5ed
push 0x8d28
lea ecx, [esp + 0x18]
push ecx
mov ecx, 0x5776a0
call fcn.00471480
mov byte [esp + 0xe8], 0x2e
lea ecx, [esp + 0x20]
call fcn.00508010
lea ecx, [esp + 0x14]
mov byte [esp + 0xe8], 1
call fcn.00507320
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x4da614
mov eax, 0x54ee24
push 0x10
push eax
call fcn.0042c9a0
jmp 0x4da6e7
push 0x8cdc
lea eax, [esp + 0x18]
push eax
call fcn.00471480
mov byte [esp + 0xe8], 0x30
lea ecx, [esp + 0x20]
call fcn.00508010
mov byte [esp + 0xe8], 1
mov eax, dword [esp + 0x14]
test eax, eax
je 0x4da65a
push eax
call fcn.0051ebab
add esp, 4
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x4da667
mov eax, 0x54ee24
push 1
jmp 0x4da6dd
cmp byte [esp + 0x13], 0
je 0x4da690
push 0x8d04
lea ecx, [esp + 0x18]
push ecx
mov ecx, 0x5776a0
call fcn.00471480
mov byte [esp + 0xe8], 0x29
jmp 0x4da6ac
push 0x8d03
lea edx, [esp + 0x18]
push edx
mov ecx, 0x5776a0
call fcn.00471480
mov byte [esp + 0xe8], 0x2a
lea ecx, [esp + 0x20]
call fcn.00508010
mov byte [esp + 0xe8], 1
mov eax, dword [esp + 0x14]
test eax, eax
je 0x4da6ce
push eax
call fcn.0051ebab
add esp, 4
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x4da6db
mov eax, 0x54ee24
push 0x10
push eax
call fcn.0042c9a0
mov bl, byte [esp + 0x13]
test bl, bl
je 0x4da709
push 0x8cf1
lea eax, [esp + 0x18]
push eax
mov ecx, 0x5776a0
call fcn.00471480
mov byte [esp + 0xe8], 0x31
jmp 0x4da725
push 0x8cdd
lea ecx, [esp + 0x18]
push ecx
mov ecx, 0x5776a0
call fcn.00471480
mov byte [esp + 0xe8], 0x32
lea ecx, [esp + 0x20]
call fcn.00508010
mov byte [esp + 0xe8], 1
mov eax, dword [esp + 0x14]
test eax, eax
je 0x4da747
push eax
call fcn.0051ebab
add esp, 4
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x4da754
mov eax, 0x54ee24
push 4
push eax
call fcn.0042c9a0
mov ecx, 0x5776a0
test bl, bl
je 0x4da77e
push 0x8cf2
lea edx, [esp + 0x18]
push edx
call fcn.00471480
mov byte [esp + 0xe8], 0x33
jmp 0x4da795
push 0x8cde
lea eax, [esp + 0x18]
push eax
call fcn.00471480
mov byte [esp + 0xe8], 0x34
lea ecx, [esp + 0x20]
call fcn.00508010
mov byte [esp + 0xe8], 1
mov eax, dword [esp + 0x14]
test eax, eax
je 0x4da7b7
push eax
call fcn.0051ebab
add esp, 4
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x4da7c4
mov eax, 0x54ee24
push 6
push eax
call fcn.0042c9a0
test bl, bl
je 0x4da7ee
push 0x8cf3
lea ecx, [esp + 0x18]
push ecx
mov ecx, 0x5776a0
call fcn.00471480
mov byte [esp + 0xe8], 0x35
jmp 0x4da80a
push 0x8cdf
lea edx, [esp + 0x18]
push edx
mov ecx, 0x5776a0
call fcn.00471480
mov byte [esp + 0xe8], 0x36
lea ecx, [esp + 0x20]
call fcn.00508010
mov byte [esp + 0xe8], 1
mov eax, dword [esp + 0x14]
test eax, eax
je 0x4da82c
push eax
call fcn.0051ebab
add esp, 4
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x4da839
mov eax, 0x54ee24
push 2
push eax
call fcn.0042c9a0
test bl, bl
je 0x4da863
push 0x8cf4
lea eax, [esp + 0x18]
push eax
mov ecx, 0x5776a0
call fcn.00471480
mov byte [esp + 0xe8], 0x37
jmp 0x4da87f
push 0x8ce0
lea ecx, [esp + 0x18]
push ecx
mov ecx, 0x5776a0
call fcn.00471480
mov byte [esp + 0xe8], 0x38
lea ecx, [esp + 0x20]
call fcn.00508010
mov byte [esp + 0xe8], 1
mov eax, dword [esp + 0x14]
test eax, eax
je 0x4da8a1
push eax
call fcn.0051ebab
add esp, 4
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x4da8ae
mov eax, 0x54ee24
push 5
push eax
call fcn.0042c9a0
mov ecx, 0x5776a0
test bl, bl
je 0x4da8d8
push 0x8cf5
lea edx, [esp + 0x18]
push edx
call fcn.00471480
mov byte [esp + 0xe8], 0x39
jmp 0x4da8ef
push 0x8ce1
lea eax, [esp + 0x18]
push eax
call fcn.00471480
mov byte [esp + 0xe8], 0x3a
lea ecx, [esp + 0x20]
call fcn.00508010
mov byte [esp + 0xe8], 1
mov eax, dword [esp + 0x14]
test eax, eax
je 0x4da911
push eax
call fcn.0051ebab
add esp, 4
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x4da91e
mov eax, 0x54ee24
push 3
push eax
call fcn.0042c9a0
test bl, bl
je 0x4da948
push 0x8cf6
lea ecx, [esp + 0x18]
push ecx
mov ecx, 0x5776a0
call fcn.00471480
mov byte [esp + 0xe8], 0x3b
jmp 0x4da964
push 0x8ce2
lea edx, [esp + 0x18]
push edx
mov ecx, 0x5776a0
call fcn.00471480
mov byte [esp + 0xe8], 0x3c
lea ecx, [esp + 0x20]
call fcn.00508010
mov byte [esp + 0xe8], 1
mov eax, dword [esp + 0x14]
test eax, eax
je 0x4da986
push eax
call fcn.0051ebab
add esp, 4
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x4da993
mov eax, 0x54ee24
push 7
push eax
call fcn.0042c9a0
call fcn.004db7c0
test al, al
jne 0x4dac53
mov edi, dword [esp + 0x34]
cmp edi, 0x17
jl 0x4daa04
push 0x8cfb
lea eax, [esp + 0x18]
push eax
mov ecx, 0x5776a0
call fcn.00471480
lea ecx, [esp + 0x20]
mov byte [esp + 0xe8], 0x3d
call fcn.00508010
mov byte [esp + 0xe8], 1
mov eax, dword [esp + 0x14]
test eax, eax
je 0x4da9ef
push eax
call fcn.0051ebab
add esp, 4
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x4da9fc
mov eax, 0x54ee24
push 0x22
push eax
call fcn.0042c9a0
cmp edi, 0x16
jl 0x4daa5c
push 0x8cfc
lea ecx, [esp + 0x18]
push ecx
mov ecx, 0x5776a0
call fcn.00471480
lea ecx, [esp + 0x20]
mov byte [esp + 0xe8], 0x3e
call fcn.00508010
mov byte [esp + 0xe8], 1
mov eax, dword [esp + 0x14]
test eax, eax
je 0x4daa47
push eax
call fcn.0051ebab
add esp, 4
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x4daa54
mov eax, 0x54ee24
push 0x21
push eax
call fcn.0042c9a0
cmp edi, 0x15
jl 0x4daab4
push 0x8cfd
lea edx, [esp + 0x18]
push edx
mov ecx, 0x5776a0
call fcn.00471480
lea ecx, [esp + 0x20]
mov byte [esp + 0xe8], 0x3f
call fcn.00508010
mov byte [esp + 0xe8], 1
mov eax, dword [esp + 0x14]
test eax, eax
je 0x4daa9f
push eax
call fcn.0051ebab
add esp, 4
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x4daaac
mov eax, 0x54ee24
push 0x20
push eax
call fcn.0042c9a0
push 0x8cfe
lea eax, [esp + 0x18]
push eax
mov ecx, 0x5776a0
call fcn.00471480
lea ecx, [esp + 0x20]
mov byte [esp + 0xe8], 0x40
call fcn.00508010
mov byte [esp + 0xe8], 1
mov eax, dword [esp + 0x14]
test eax, eax
je 0x4daaf2
push eax
call fcn.0051ebab
add esp, 4
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x4daaff
mov eax, 0x54ee24
push 0x1f
push eax
call fcn.0042c9a0
push 0x8cff
lea ecx, [esp + 0x18]
push ecx
mov ecx, 0x5776a0
call fcn.00471480
lea ecx, [esp + 0x20]
mov byte [esp + 0xe8], 0x41
call fcn.00508010
mov byte [esp + 0xe8], 1
mov eax, dword [esp + 0x14]
test eax, eax
je 0x4dab45
push eax
call fcn.0051ebab
add esp, 4
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x4dab52
mov eax, 0x54ee24
push 0x28
push eax
call fcn.0042c9a0
push 0x8d00
lea edx, [esp + 0x18]
push edx
mov ecx, 0x5776a0
call fcn.00471480
lea ecx, [esp + 0x20]
mov byte [esp + 0xe8], 0x42
call fcn.00508010
mov byte [esp + 0xe8], 1
mov eax, dword [esp + 0x14]
test eax, eax
je 0x4dab98
push eax
call fcn.0051ebab
add esp, 4
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x4daba5
mov eax, 0x54ee24
push 0x29
push eax
call fcn.0042c9a0
push 0x8d02
lea eax, [esp + 0x18]
push eax
mov ecx, 0x5776a0
call fcn.00471480
lea ecx, [esp + 0x20]
mov byte [esp + 0xe8], 0x43
call fcn.00508010
mov byte [esp + 0xe8], 1
mov eax, dword [esp + 0x14]
test eax, eax
je 0x4dabeb
push eax
call fcn.0051ebab
add esp, 4
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x4dabf8
mov eax, 0x54ee24
push 0x2a
push eax
call fcn.0042c9a0
push 0x8d01
lea ecx, [esp + 0x18]
push ecx
mov ecx, 0x5776a0
call fcn.00471480
lea ecx, [esp + 0x20]
mov byte [esp + 0xe8], 0x44
call fcn.00508010
mov byte [esp + 0xe8], 1
mov eax, dword [esp + 0x14]
test eax, eax
je 0x4dac3e
push eax
call fcn.0051ebab
add esp, 4
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x4dac4b
mov eax, 0x54ee24
push 0x2b
push eax
call fcn.0042c9a0
mov ecx, 0x5776a0
test bl, bl
je 0x4dac7a
push 0x8cf9
lea edx, [esp + 0x48]
push edx
call fcn.00471480
mov byte [esp + 0xe8], 0x45
mov ebx, 1
jmp 0x4dac99
push 0x8ce5
lea eax, [esp + 0x3c]
push eax
call fcn.00471480
mov dword [esp + 0xe8], 0x46
mov ebx, 2
push eax
lea ecx, [esp + 0xc8]
mov dword [esp + 0x30], ebx
call fcn.005072b0
xor edi, edi
mov dword [esp + 0xe8], 0x48
test bl, 2
je 0x4dace0
mov eax, dword [esp + 0x38]
and ebx, 0xfffffffd
mov dword [esp + 0x2c], ebx
cmp eax, edi
je 0x4dace0
push eax
call fcn.0051ebab
add esp, 4
mov dword [esp + 0x38], edi
mov dword [esp + 0x3c], edi
mov dword [esp + 0x40], edi
mov byte [esp + 0xe8], 0x49
test bl, 1
je 0x4dad11
mov eax, dword [esp + 0x44]
and ebx, 0xfffffffe
mov dword [esp + 0x2c], ebx
cmp eax, edi
je 0x4dad11
push eax
call fcn.0051ebab
add esp, 4
mov dword [esp + 0x44], edi
mov dword [esp + 0x48], edi
mov dword [esp + 0x4c], edi
cmp byte [esp + 0x13], 0
je 0x4dad39
push 0x8cfa
lea ecx, [esp + 0x18]
push ecx
mov ecx, 0x5776a0
call fcn.00471480
mov byte [esp + 0xe8], 0x4a
or ebx, 4
jmp 0x4dad5b
push 0x8ce6
lea edx, [esp + 0x54]
push edx
mov ecx, 0x5776a0
call fcn.00471480
mov dword [esp + 0xe8], 0x4b
or ebx, 8
push eax
lea ecx, [esp + 0xd4]
mov dword [esp + 0x30], ebx
call fcn.005072b0
mov dword [esp + 0xe8], 0x4d
test bl, 8
je 0x4dada0
mov eax, dword [esp + 0x50]
and ebx, 0xfffffff7
mov dword [esp + 0x2c], ebx
cmp eax, edi
je 0x4dada0
push eax
call fcn.0051ebab
add esp, 4
mov dword [esp + 0x50], edi
mov dword [esp + 0x54], edi
mov dword [esp + 0x58], edi
mov byte [esp + 0xe8], 0x4e
test bl, 4
je 0x4dadca
mov eax, dword [esp + 0x14]
cmp eax, edi
je 0x4dadca
push eax
call fcn.0051ebab
add esp, 4
mov dword [esp + 0x14], edi
mov dword [esp + 0x18], edi
mov dword [esp + 0x1c], edi
call fcn.004c8310
mov edi, dword [esp + 0xc4]
mov ebx, dword [esp + 0xd0]
cmp eax, 1
jne 0x4dae1f
call fcn.004db870
test al, al
jne 0x4dae53
call fcn.004db500
test al, al
jne 0x4dae53
call fcn.004db660
test al, al
jne 0x4dae53
mov eax, edi
test edi, edi
jne 0x4dae08
mov eax, 0x54ee24
push 0x32
push eax
call fcn.0042c9a0
mov eax, ebx
test ebx, ebx
jne 0x4dae1b
mov eax, 0x54ee24
push 0x33
jmp 0x4dae4d
cmp eax, 2
jne 0x4dae53
call fcn.004db660
test al, al
jne 0x4dae53
mov eax, edi
test edi, edi
jne 0x4dae38
mov eax, 0x54ee24
push 0x35
push eax
call fcn.0042c9a0
mov eax, ebx
test ebx, ebx
jne 0x4dae4b
mov eax, 0x54ee24
push 0x36
push eax
call fcn.0042c9a0
mov byte [esp + 0xe8], 0x49
test ebx, ebx
je 0x4dae68
push ebx
call fcn.0051ebab
add esp, 4
mov byte [esp + 0xe8], 1
test edi, edi
je 0x4dae7d
push edi
call fcn.0051ebab
add esp, 4
mov ebx, dword [ebp + 8]
mov ecx, ebx
call fcn.004daf40
mov edx, dword [ebx + 0x5dc]
test edx, edx
je 0x4daea2
push 0
push eax
push 0x14e
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x4daeb6
mov eax, dword [ebx + 0x5d8]
mov eax, dword [eax + 4]
mov dword [eax + ebx + 0x5d8], 6
cmp dword [esi + 0x28], 0
jle 0x4daeef
push 2
call dword [sym.imp.USER32.dll_GetSystemMetrics]
mov ecx, dword [esi + 0x28]
mov edx, dword [esi + 0x14]
add ecx, eax
test edx, edx
je 0x4daee1
push 0
push ecx
push 0x160
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x4daeef
mov ecx, dword [esi + 0x10]
mov ecx, dword [ecx + 4]
mov dword [ecx + esi + 0x10], 6
lea edx, [esp + 0x5c]
push edx
mov byte [esp + 0xec], 0
call fcn.00473d80
mov dword [esp + 0xe8], 0xffffffff
mov eax, dword [esp + 0x20]
test eax, eax
je 0x4daf1d
push eax
call fcn.0051ebab
add esp, 4
mov ecx, dword [esp + 0xe0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4