Function at 0x49e9c0
Capabilities:
Contain obfuscated stackstrings
Get graphical window text

Disassembly:
push ebp
lea ebp, [esp - 0x50]
sub esp, 0x50
push 0xffffffffffffffff
push 0x5bd19b
mov eax, dword fs:[0]
push eax
sub esp, 0x160
mov eax, dword [0x61f138]
xor eax, ebp
mov dword [ebp + 0x4c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov eax, dword [ebp + 0x58]
mov dword [ebp + 0x14], eax
mov eax, dword [ebp + 0x5c]
mov dword [ebp], eax
mov eax, dword [ebp + 0x60]
mov dword [ebp + 0x18], 0
mov dword [ebp - 4], 0
lea ebx, [esi + 0x68]
inc dword [0x6c4e28]
cmp ebx, eax
je 0x49ea34
cmp dword [eax + 0x14], 8
mov ecx, eax
jb 0x49ea29
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
mov ecx, ebx
call fcn.00445cb0
lea ecx, [ebp + 0x64]
push ecx
lea ecx, [esi + 0x80]
call fcn.00440860
sub esp, 8
lea ecx, [ebp - 0xbc]
call fcn.00442390
mov edx, str.toAdmin
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xac]
call fcn.0044a500
cmp dword [ebx + 0x14], 8
mov edx, ebx
jb 0x49ea6f
mov edx, dword [ebx]
push dword [ebx + 0x10]
mov ecx, eax
call fcn.0044d4b0
push 4
call fcn.0056eed3
mov edi, eax
add esp, 8
mov dword [ebp + 0x20], edi
lea eax, [ebp + 0x34]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0xa4]
call fcn.004466f0
mov byte [ebp - 4], 3
lea edx, [ebp + 0x34]
mov ecx, edi
mov dword [ebp + 0x18], 5
call fcn.004fac70
mov dword [ebp - 4], 1
mov edx, dword [ebp + 0x48]
mov dword [esi + 0x194], eax
cmp edx, 8
jb 0x49eaf7
mov ecx, dword [ebp + 0x34]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x49eaed
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x49fe6a
push edx
push ecx
call fcn.0056eec5
add esp, 8
mov dword [ebp + 0x1c], 0
mov byte [ebp - 4], 5
mov ecx, dword [esi + 0x194]
lea eax, [ebp + 0x1c]
push eax
call fcn.004fb050
test al, al
jne 0x49eb02
mov eax, dword [ebp + 0x1c]
test eax, eax
je 0x49eb25
push eax
call fcn.0056ef26
add esp, 4
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0
call fcn.0043ae30
sub esp, 8
lea ecx, [ebp - 0xbc]
call fcn.00442390
mov edx, str.fromAdmin
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xac]
call fcn.0044a500
cmp dword [ebx + 0x14], 8
mov edx, ebx
jb 0x49eb60
mov edx, dword [ebx]
push dword [ebx + 0x10]
mov ecx, eax
call fcn.0044d4b0
push 4
call fcn.0056eed3
mov edi, eax
add esp, 8
mov dword [ebp + 0x20], edi
lea eax, [ebp + 0x34]
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0xa4]
call fcn.004466f0
mov byte [ebp - 4], 8
lea edx, [ebp + 0x34]
mov ecx, edi
mov dword [ebp + 0x18], 0xe
call fcn.004fac70
mov dword [ebp - 4], 6
mov edx, dword [ebp + 0x48]
mov dword [esi + 0x198], eax
cmp edx, 8
jb 0x49ebe8
mov ecx, dword [ebp + 0x34]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x49ebde
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x49fe6f
push edx
push ecx
call fcn.0056eec5
add esp, 8
mov dword [ebp + 0x1c], 0
mov byte [ebp - 4], 0xa
mov ecx, dword [esi + 0x198]
lea eax, [ebp + 0x1c]
push eax
call fcn.004fb050
test al, al
jne 0x49ebf3
mov eax, dword [ebp + 0x1c]
test eax, eax
je 0x49ec16
push eax
call fcn.0056ef26
add esp, 4
lea ecx, [ebp - 0xbc]
call fcn.0043ae30
mov dword [ebp + 4], 0
mov dword [ebp + 8], 0
mov dword [ebp + 0xc], 0
mov byte [ebp - 4], 0xb
lea eax, [ebp + 0x14]
push dword [ebp + 0x20]
lea ecx, [ebp + 4]
mov byte [ebp + 0x13], 0x63
push eax
lea eax, [ebp + 0x13]
push eax
push 0
call fcn.00465ce0
mov eax, dword [ebx + 0x10]
lea ecx, [ebp + 4]
push dword [ebp + 0x20]
mov dword [ebp + 0x18], eax
lea eax, [ebp + 0x1c]
push eax
lea eax, [ebp + 0x18]
push eax
push dword [ebp + 8]
call fcn.00465ce0
mov eax, dword [ebx + 0x10]
test eax, eax
je 0x49ec93
cmp dword [ebx + 0x14], 8
mov ecx, ebx
jb 0x49ec80
mov ecx, dword [ebx]
push dword [ebp + 0x20]
lea eax, [ecx + eax*2]
push eax
push ecx
push dword [ebp + 8]
lea ecx, [ebp + 4]
call fcn.00465ce0
lea edx, [esi + 0x80]
lea ecx, [ebp + 4]
call fcn.004623e0
mov ecx, dword [ebp + 4]
mov eax, dword [ebp + 8]
sub eax, ecx
push eax
push ecx
lea ecx, [esi + 0x190]
call fcn.004faf10
xor eax, eax
mov dword [esi + 0x170], 0
push 0x2c
push eax
mov dword [esi + 0x17e], eax
lea eax, [esi + 0x104]
push eax
mov dword [esi + 0x174], 0
mov dword [esi + 0xa4], 0xffffffff
mov dword [esi + 0x16c], 0x26
mov word [esi + 0x178], 1
call fcn.00586880
mov edi, dword [sym.imp.GDI32.dll_CreateSolidBrush]
add esp, 0xc
mov dword [esi + 0x140], 0
mov dword [esi + 0x144], 0
mov byte [esi + 0x200], 0
push 0
mov dword [esi + 0x1c], 0
mov dword [esi + 0x20], 0
call edi
push 0xf5f5f5
mov dword [esi + 0x24], eax
call edi
mov ecx, dword [ebp]
lea edx, [ebp + 0x24]
mov dword [esi + 0x28], eax
call fcn.0049e330
call fcn.004387d0
push str.back_adminwind_status
call fcn.00518d60
push 0
lea edi, [esi + 0x2c]
push 0xce2000
mov ecx, dword [eax]
mov dword [esi + 0x1c], ecx
mov eax, dword [eax + 4]
mov dword [esi + 0x20], eax
lea eax, [ecx + 0x64]
mov dword [edi], 0x64
mov dword [esi + 0x34], eax
mov eax, dword [esi + 0x20]
add eax, 0x64
mov dword [esi + 0x30], 0x64
push edi
mov dword [esi + 0x38], eax
call dword [sym.imp.USER32.dll_AdjustWindowRect]
mov eax, dword [esi + 0x38]
mov ecx, dword [esi + 0x34]
sub eax, dword [esi + 0x30]
sub ecx, dword [edi]
push eax
push ecx
push dword [ebp + 0x30]
mov ecx, esi
push dword [ebp + 0x24]
push 0
push 0
push str.MainWindow
push 0
push dword [ebp + 0x14]
push 0xce2000
call fcn.00528510
sub esp, 8
lea ecx, [ebp - 0x16c]
call fcn.00442390
mov edx, str.Client_ID:
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x15c]
call fcn.0044a500
cmp dword [ebx + 0x14], 8
mov ecx, dword [ebx + 0x10]
jb 0x49eded
mov ebx, dword [ebx]
push ecx
mov edx, ebx
mov ecx, eax
call fcn.0044d4b0
add esp, 4
lea eax, [ebp + 0x34]
lea ecx, [ebp - 0x154]
push eax
call fcn.004466f0
cmp dword [ebp + 0x48], 8
lea eax, [ebp + 0x34]
cmovae eax, dword [ebp + 0x34]
push eax
push dword [esi + 0x10]
call dword [sym.imp.USER32.dll_SetWindowTextW]
mov edx, dword [ebp + 0x48]
cmp edx, 8
jb 0x49ee58
mov ecx, dword [ebp + 0x34]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x49ee4e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x49fe74
push edx
push ecx
call fcn.0056eec5
add esp, 8
push str.Arial
push 2
push 0
push 0
push 8
push 1
push 0
push 0
push 0
push 0x190
push 0
push 0
push 0
push 0xf
call dword [sym.imp.GDI32.dll_CreateFontW]
mov ebx, eax
push 0x40
mov dword [ebp + 0x18], ebx
call fcn.0056eed3
mov edi, eax
mov dword [ebp + 0x20], edi
push ecx
push 0
lea eax, [ebp + 0x3c]
mov byte [ebp - 4], 0xd
push eax
push 0x40010080
push str.aw_btn_fullscreen
push str.button
push dword [ebp + 0x14]
mov ecx, edi
mov dword [ebp + 0x3c], 0
push dword [esi + 0x10]
mov dword [ebp + 0x40], 0
mov dword [ebp + 0x44], 0x26
mov dword [ebp + 0x48], 0x26
call fcn.0052a8f0
push 1
push ebx
mov byte [ebp - 4], 0xe
push 0x30
push dword [edi + 8]
mov dword [edi + 0x3c], ebx
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
mov dword [edi], vtable.Button.0
call ebx
call fcn.004387d0
push str.aw_btn_fullscreen
call fcn.00518e20
push dword [eax]
push 0
push 0xf7
push dword [edi + 8]
call ebx
mov byte [ebp - 4], 0xc
lea ecx, [esi + 0x4c]
mov dword [esi + 0x1a8], edi
mov eax, dword [edi + 8]
mov dword [ebp + 0x1c], eax
lea eax, [ebp + 0x1c]
push eax
mov dword [ebp + 0x20], edi
call fcn.0050cf50
push eax
add eax, 0x10
push eax
push ecx
lea eax, [ebp + 0x1c]
push eax
lea ecx, [esi + 0x4c]
call fcn.0052bd40
push 0x40
call fcn.0056eed3
mov edi, eax
mov dword [ebp + 0x20], edi
mov byte [ebp - 4], 0xf
mov dword [ebp + 0x3c], 0x26
mov dword [ebp + 0x40], 0
push ecx
push 0
lea eax, [ebp + 0x3c]
mov dword [ebp + 0x44], 0x26
push eax
push 0x40010080
push str.aw_btn_fitscreen
push str.button
push dword [ebp + 0x14]
mov ecx, edi
mov dword [ebp + 0x48], 0x26
push dword [esi + 0x10]
call fcn.0052a8f0
mov byte [ebp - 4], 0x10
mov eax, dword [ebp + 0x18]
push 1
push eax
push 0x30
push dword [edi + 8]
mov dword [edi], vtable.Button.0
mov dword [edi + 0x3c], eax
call ebx
call fcn.004387d0
push str.aw_btn_fitscreen
call fcn.00518e20
push dword [eax]
push 0
push 0xf7
push dword [edi + 8]
call ebx
mov byte [ebp - 4], 0xc
lea ecx, [esi + 0x4c]
mov dword [esi + 0x1bc], edi
mov eax, dword [edi + 8]
mov dword [ebp + 0x1c], eax
lea eax, [ebp + 0x1c]
push eax
mov dword [ebp + 0x20], edi
call fcn.0050cf50
push eax
add eax, 0x10
push eax
push ecx
lea eax, [ebp + 0x1c]
push eax
lea ecx, [esi + 0x4c]
call fcn.0052bd40
push 0x40
call fcn.0056eed3
mov edi, eax
mov dword [ebp + 0x20], edi
push ecx
push 0
lea eax, [ebp + 0x3c]
mov byte [ebp - 4], 0x11
push eax
push 0x40010080
push str.aw_btn_img_settings
push str.button
push dword [ebp + 0x14]
mov ecx, edi
mov dword [ebp + 0x3c], 0x56
push dword [esi + 0x10]
mov dword [ebp + 0x40], 0
mov dword [ebp + 0x44], 0x26
mov dword [ebp + 0x48], 0x26
call fcn.0052a8f0
mov byte [ebp - 4], 0x12
mov eax, dword [ebp + 0x18]
push 1
push eax
push 0x30
push dword [edi + 8]
mov dword [edi], vtable.Button.0
mov dword [edi + 0x3c], eax
call ebx
call fcn.004387d0
push str.aw_btn_img_settings
call fcn.00518e20
push dword [eax]
push 0
push 0xf7
push dword [edi + 8]
call ebx
mov byte [ebp - 4], 0xc
lea ecx, [esi + 0x4c]
mov dword [esi + 0x1c0], edi
mov eax, dword [edi + 8]
mov dword [ebp + 0x1c], eax
lea eax, [ebp + 0x1c]
push eax
mov dword [ebp + 0x20], edi
call fcn.0050cf50
push eax
add eax, 0x10
push eax
push ecx
lea eax, [ebp + 0x1c]
push eax
lea ecx, [esi + 0x4c]
call fcn.0052bd40
push 0x50
call fcn.0056eed3
mov edi, eax
add esp, 4
mov dword [ebp + 0x20], edi
push 0x40010203
mov byte [ebp - 4], 0x13
push ecx
push 0xffffff
mov dword [ebp + 0x3c], 0x86
mov dword [ebp + 0x40], 8
mov dword [ebp + 0x44], 0x72
mov dword [ebp + 0x48], 0x46
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
push eax
push dword [ebp + 0x18]
lea eax, [ebp + 0x3c]
mov ecx, edi
push eax
push str.aw_display
push dword [ebp + 0x14]
push dword [esi + 0x10]
call fcn.0052b100
mov byte [ebp - 4], 0xc
mov dword [esi + 0x154], eax
mov dword [ebp + 0x20], eax
mov ecx, dword [eax + 8]
lea eax, [ebp + 0x1c]
mov dword [ebp + 0x1c], ecx
lea ecx, [esi + 0x4c]
push eax
call fcn.0050cf50
push eax
add eax, 0x10
push eax
push ecx
lea eax, [ebp + 0x1c]
push eax
lea ecx, [esi + 0x4c]
call fcn.0052bd40
push 0x50
call fcn.0056eed3
mov edi, eax
add esp, 4
mov dword [ebp + 0x20], edi
push 0x40010203
mov byte [ebp - 4], 0x14
push ecx
push 0xffffff
mov dword [ebp + 0x3c], 0xfd
mov dword [ebp + 0x40], 8
mov dword [ebp + 0x44], 0x5b
mov dword [ebp + 0x48], 0x46
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
push eax
push dword [ebp + 0x18]
lea eax, [ebp + 0x3c]
mov ecx, edi
push eax
push str.aw_video_mode
push dword [ebp + 0x14]
push dword [esi + 0x10]
call fcn.0052b100
mov byte [ebp - 4], 0xc
mov dword [esi + 0x158], eax
mov dword [ebp + 0x20], eax
mov ecx, dword [eax + 8]
lea eax, [ebp + 0x1c]
mov dword [ebp + 0x1c], ecx
lea ecx, [esi + 0x4c]
push eax
call fcn.0050cf50
push eax
add eax, 0x10
push eax
push ecx
lea eax, [ebp + 0x1c]
push eax
lea ecx, [esi + 0x4c]
call fcn.0052bd40
push 0x40
call fcn.0056eed3
mov edi, eax
mov dword [ebp + 0x20], edi
push ecx
push 0
lea eax, [ebp + 0x3c]
mov byte [ebp - 4], 0x15
push eax
push 0x40010080
push str.aw_btn_voice_off
push str.button
push dword [ebp + 0x14]
mov ecx, edi
mov dword [ebp + 0x3c], 0x162
push dword [esi + 0x10]
mov dword [ebp + 0x40], 0
mov dword [ebp + 0x44], 0x26
mov dword [ebp + 0x48], 0x26
call fcn.0052a8f0
mov byte [ebp - 4], 0x16
mov eax, dword [ebp + 0x18]
push 1
push eax
push 0x30
push dword [edi + 8]
mov dword [edi], vtable.Button.0
mov dword [edi + 0x3c], eax
call ebx
call fcn.004387d0
push str.aw_btn_voice_off
call fcn.00518e20
push dword [eax]
push 0
push 0xf7
push dword [edi + 8]
call ebx
mov byte [ebp - 4], 0xc
lea ecx, [esi + 0x4c]
mov dword [esi + 0x1b0], edi
mov eax, dword [edi + 8]
mov dword [ebp + 0x1c], eax
lea eax, [ebp + 0x1c]
push eax
mov dword [ebp + 0x20], edi
call fcn.0050cf50
push eax
add eax, 0x10
push eax
push ecx
lea eax, [ebp + 0x1c]
push eax
lea ecx, [esi + 0x4c]
call fcn.0052bd40
push 0x40
call fcn.0056eed3
mov edi, eax
mov dword [ebp + 0x20], edi
push ecx
push 0
lea eax, [ebp + 0x3c]
mov byte [ebp - 4], 0x17
push eax
push 0x40010080
push str.aw_btn_filemanager
push str.button
push dword [ebp + 0x14]
mov ecx, edi
mov dword [ebp + 0x3c], 0x1c7
push dword [esi + 0x10]
mov dword [ebp + 0x40], 0
mov dword [ebp + 0x44], 0x26
mov dword [ebp + 0x48], 0x26
call fcn.0052a8f0
mov byte [ebp - 4], 0x18
mov eax, dword [ebp + 0x18]
push 1
push eax
push 0x30
push dword [edi + 8]
mov dword [edi], vtable.Button.0
mov dword [edi + 0x3c], eax
call ebx
call fcn.004387d0
push str.aw_btn_filemanager
call fcn.00518e20
push dword [eax]
push 0
push 0xf7
push dword [edi + 8]
call ebx
mov byte [ebp - 4], 0xc
lea ecx, [esi + 0x4c]
mov dword [esi + 0x1b4], edi
mov eax, dword [edi + 8]
mov dword [ebp + 0x1c], eax
lea eax, [ebp + 0x1c]
push eax
mov dword [ebp + 0x20], edi
call fcn.0050cf50
push eax
add eax, 0x10
push eax
push ecx
lea eax, [ebp + 0x1c]
push eax
lea ecx, [esi + 0x4c]
call fcn.0052bd40
push 0x40
call fcn.0056eed3
mov edi, eax
mov dword [ebp + 0x20], edi
push ecx
push 0
lea eax, [ebp + 0x3c]
mov byte [ebp - 4], 0x19
push eax
push 0x40010080
push str.aw_btn_cad
push str.button
push dword [ebp + 0x14]
mov ecx, edi
mov dword [ebp + 0x3c], 0x1ed
push dword [esi + 0x10]
mov dword [ebp + 0x40], 0
mov dword [ebp + 0x44], 0x26
mov dword [ebp + 0x48], 0x26
call fcn.0052a8f0
mov byte [ebp - 4], 0x1a
mov eax, dword [ebp + 0x18]
mov dword [edi], vtable.Button.0
mov dword [edi + 0x3c], eax
push 1
push eax
push 0x30
push dword [edi + 8]
call ebx
call fcn.004387d0
push str.aw_btn_cad
call fcn.00518e20
push dword [eax]
push 0
push 0xf7
push dword [edi + 8]
call ebx
mov byte [ebp - 4], 0xc
lea ecx, [esi + 0x4c]
mov dword [esi + 0x1b8], edi
mov eax, dword [edi + 8]
mov dword [ebp + 0x1c], eax
lea eax, [ebp + 0x1c]
push eax
mov dword [ebp + 0x20], edi
call fcn.0050cf50
push eax
add eax, 0x10
push eax
push ecx
lea eax, [ebp + 0x1c]
push eax
lea ecx, [esi + 0x4c]
call fcn.0052bd40
push 0x40
call fcn.0056eed3
mov edi, eax
mov dword [ebp + 0x20], edi
push ecx
push 0
lea eax, [ebp + 0x3c]
mov byte [ebp - 4], 0x1b
push eax
push 0x40010080
push str.aw_btn_syskey
push str.button
push dword [ebp + 0x14]
mov ecx, edi
mov dword [ebp + 0x3c], 0x213
push dword [esi + 0x10]
mov dword [ebp + 0x40], 0
mov dword [ebp + 0x44], 0x26
mov dword [ebp + 0x48], 0x26
call fcn.0052a8f0
mov byte [ebp - 4], 0x1c
mov eax, dword [ebp + 0x18]
push 1
push eax
push 0x30
push dword [edi + 8]
mov dword [edi], vtable.Button.0
mov dword [edi + 0x3c], eax
call ebx
call fcn.004387d0
push str.aw_btn_syskey
call fcn.00518e20
push dword [eax]
push 0
push 0xf7
push dword [edi + 8]
call ebx
mov byte [ebp - 4], 0xc
lea ecx, [esi + 0x4c]
mov dword [esi + 0x1c4], edi
mov eax, dword [edi + 8]
mov dword [ebp + 0x1c], eax
lea eax, [ebp + 0x1c]
push eax
mov dword [ebp + 0x20], edi
call fcn.0050cf50
push eax
add eax, 0x10
push eax
push ecx
lea eax, [ebp + 0x1c]
push eax
lea ecx, [esi + 0x4c]
call fcn.0052bd40
push 0x40
call fcn.0056eed3
mov edi, eax
mov dword [ebp + 0x20], edi
push ecx
push 0
lea eax, [ebp + 0x3c]
mov byte [ebp - 4], 0x1d
push eax
push 0x40010080
push str.aw_btn_control_panel
push str.button
push dword [ebp + 0x14]
mov ecx, edi
mov dword [ebp + 0x3c], 0x239
push dword [esi + 0x10]
mov dword [ebp + 0x40], 0
mov dword [ebp + 0x44], 0x26
mov dword [ebp + 0x48], 0x26
call fcn.0052a8f0
mov byte [ebp - 4], 0x1e
mov eax, dword [ebp + 0x18]
push 1
push eax
push 0x30
push dword [edi + 8]
mov dword [edi], vtable.Button.0
mov dword [edi + 0x3c], eax
call ebx
call fcn.004387d0
push str.aw_btn_control_panel
call fcn.00518e20
push dword [eax]
push 0
push 0xf7
push dword [edi + 8]
call ebx
mov byte [ebp - 4], 0xc
lea ecx, [esi + 0x4c]
mov dword [esi + 0x1c8], edi
mov eax, dword [edi + 8]
mov dword [ebp + 0x1c], eax
lea eax, [ebp + 0x1c]
push eax
mov dword [ebp + 0x20], edi
call fcn.0050cf50
push eax
add eax, 0x10
push eax
push ecx
lea eax, [ebp + 0x1c]
push eax
lea ecx, [esi + 0x4c]
call fcn.0052bd40
push 0x40
call fcn.0056eed3
mov edi, eax
mov dword [ebp + 0x20], edi
push ecx
push 0
lea eax, [ebp + 0x3c]
mov byte [ebp - 4], 0x1f
push eax
push 0x40010080
push str.aw_btn_computer_management
push str.button
push dword [ebp + 0x14]
mov dword [ebp + 0x3c], 0x25f
mov ecx, edi
push dword [esi + 0x10]
mov dword [ebp + 0x40], 0
mov dword [ebp + 0x44], 0x26
mov dword [ebp + 0x48], 0x26
call fcn.0052a8f0
mov byte [ebp - 4], 0x20
mov eax, dword [ebp + 0x18]
push 1
push eax
push 0x30
push dword [edi + 8]
mov dword [edi], vtable.Button.0
mov dword [edi + 0x3c], eax
call ebx
call fcn.004387d0
push str.aw_btn_computer_management
call fcn.00518e20
push dword [eax]
push 0
push 0xf7
push dword [edi + 8]
call ebx
mov byte [ebp - 4], 0xc
lea ecx, [esi + 0x4c]
mov dword [esi + 0x1cc], edi
mov eax, dword [edi + 8]
mov dword [ebp + 0x1c], eax
lea eax, [ebp + 0x1c]
push eax
mov dword [ebp + 0x20], edi
call fcn.0050cf50
push eax
add eax, 0x10
push eax
push ecx
lea eax, [ebp + 0x1c]
push eax
lea ecx, [esi + 0x4c]
call fcn.0052bd40
push 0x40
call fcn.0056eed3
mov edi, eax
mov dword [ebp + 0x20], edi
push ecx
push 0
lea eax, [ebp + 0x3c]
mov byte [ebp - 4], 0x21
push eax
push 0x40010080
push str.aw_btn_services
push str.button
push dword [ebp + 0x14]
mov ecx, edi
mov dword [ebp + 0x3c], 0x285
push dword [esi + 0x10]
mov dword [ebp + 0x40], 0
mov dword [ebp + 0x44], 0x26
mov dword [ebp + 0x48], 0x26
call fcn.0052a8f0
mov byte [ebp - 4], 0x22
mov eax, dword [ebp + 0x18]
push 1
push eax
push 0x30
push dword [edi + 8]
mov dword [edi], vtable.Button.0
mov dword [edi + 0x3c], eax
call ebx
call fcn.004387d0
push str.aw_btn_services
call fcn.00518e20
push dword [eax]
push 0
push 0xf7
push dword [edi + 8]
call ebx
mov byte [ebp - 4], 0xc
mov dword [esi + 0x1d0], edi
mov eax, dword [edi + 8]
mov dword [ebp + 0x1c], eax
lea eax, [ebp + 0x1c]
mov dword [ebp + 0x20], edi
push eax
lea ecx, [esi + 0x4c]
call fcn.0050cf50
push eax
add eax, 0x10
push eax
push ecx
lea eax, [ebp + 0x1c]
push eax
lea ecx, [esi + 0x4c]
call fcn.0052bd40
push 0x40
call fcn.0056eed3
mov edi, eax
mov dword [ebp + 0x20], edi
push ecx
push 0
lea eax, [ebp + 0x3c]
mov byte [ebp - 4], 0x23
push eax
push 0x40010080
push str.aw_btn_lock
push str.button
push dword [ebp + 0x14]
mov ecx, edi
mov dword [ebp + 0x3c], 0x2b5
push dword [esi + 0x10]
mov dword [ebp + 0x40], 0
mov dword [ebp + 0x44], 0x26
mov dword [ebp + 0x48], 0x26
call fcn.0052a8f0
mov byte [ebp - 4], 0x24
mov eax, dword [ebp + 0x18]
push 1
push eax
push 0x30
push dword [edi + 8]
mov dword [edi], vtable.Button.0
mov dword [edi + 0x3c], eax
call ebx
call fcn.004387d0
push str.aw_btn_lock
call fcn.00518e20
push dword [eax]
push 0
push 0xf7
push dword [edi + 8]
call ebx
mov byte [ebp - 4], 0xc
lea ecx, [esi + 0x4c]
mov dword [esi + 0x1d4], edi
mov eax, dword [edi + 8]
mov dword [ebp + 0x1c], eax
lea eax, [ebp + 0x1c]
push eax
mov dword [ebp + 0x20], edi
call fcn.0050cf50
push eax
add eax, 0x10
push eax
push ecx
lea eax, [ebp + 0x1c]
push eax
lea ecx, [esi + 0x4c]
call fcn.0052bd40
push 0x40
call fcn.0056eed3
mov edi, eax
mov dword [ebp + 0x20], edi
push ecx
mov byte [ebp - 4], 0x25
lea eax, [ebp + 0x3c]
push 0
mov dword [ebp + 0x3c], 0x2db
mov dword [ebp + 0x40], 0
mov dword [ebp + 0x44], 0x26
mov dword [ebp + 0x48], 0x26
push eax
push 0x40010080
push str.aw_btn_autolock
push str.button
push dword [ebp + 0x14]
mov ecx, edi
push dword [esi + 0x10]
call fcn.0052a8f0
mov byte [ebp - 4], 0x26
mov eax, dword [ebp + 0x18]
push 1
push eax
push 0x30
push dword [edi + 8]
mov dword [edi], vtable.Button.0
mov dword [edi + 0x3c], eax
call ebx
call fcn.004387d0
push str.aw_btn_autolock
call fcn.00518e20
push dword [eax]
push 0
push 0xf7
push dword [edi + 8]
call ebx
mov byte [ebp - 4], 0xc
lea ecx, [esi + 0x4c]
mov dword [esi + 0x1d8], edi
mov eax, dword [edi + 8]
mov dword [ebp + 0x1c], eax
lea eax, [ebp + 0x1c]
push eax
mov dword [ebp + 0x20], edi
call fcn.0050cf50
push eax
add eax, 0x10
push eax
push ecx
lea eax, [ebp + 0x1c]
push eax
lea ecx, [esi + 0x4c]
call fcn.0052bd40
push 0x40
call fcn.0056eed3
mov edi, eax
mov dword [ebp + 0x20], edi
push ecx
push 0
lea eax, [ebp + 0x3c]
mov byte [ebp - 4], 0x27
push eax
push 0x40010080
push str.aw_btn_logoff
push str.button
push dword [ebp + 0x14]
mov ecx, edi
mov dword [ebp + 0x3c], 0x301
push dword [esi + 0x10]
mov dword [ebp + 0x40], 0
mov dword [ebp + 0x44], 0x26
mov dword [ebp + 0x48], 0x26
call fcn.0052a8f0
mov byte [ebp - 4], 0x28
mov eax, dword [ebp + 0x18]
push 1
push eax
push 0x30
push dword [edi + 8]
mov dword [edi], vtable.Button.0
mov dword [edi + 0x3c], eax
call ebx
call fcn.004387d0
push str.aw_btn_logoff
call fcn.00518e20
push dword [eax]
push 0
push 0xf7
push dword [edi + 8]
call ebx
mov byte [ebp - 4], 0xc
lea ecx, [esi + 0x4c]
mov dword [esi + 0x1dc], edi
mov eax, dword [edi + 8]
mov dword [ebp + 0x1c], eax
lea eax, [ebp + 0x1c]
push eax
mov dword [ebp + 0x20], edi
call fcn.0050cf50
push eax
add eax, 0x10
push eax
push ecx
lea eax, [ebp + 0x1c]
push eax
lea ecx, [esi + 0x4c]
call fcn.0052bd40
push 0x40
call fcn.0056eed3
mov edi, eax
mov dword [ebp + 0x20], edi
push ecx
push 0
lea eax, [ebp + 0x3c]
mov byte [ebp - 4], 0x29
push eax
push 0x40010080
push str.aw_btn_restart
push str.button
push dword [ebp + 0x14]
mov ecx, edi
mov dword [ebp + 0x3c], 0x327
push dword [esi + 0x10]
mov dword [ebp + 0x40], 0
mov dword [ebp + 0x44], 0x26
mov dword [ebp + 0x48], 0x26
call fcn.0052a8f0
mov byte [ebp - 4], 0x2a
mov eax, dword [ebp + 0x18]
push 1
push eax
push 0x30
push dword [edi + 8]
mov dword [edi], vtable.Button.0
mov dword [edi + 0x3c], eax
call ebx
call fcn.004387d0
push str.aw_btn_restart
call fcn.00518e20
push dword [eax]
push 0
push 0xf7
push dword [edi + 8]
call ebx
mov byte [ebp - 4], 0xc
lea ecx, [esi + 0x4c]
mov dword [esi + 0x1e4], edi
mov eax, dword [edi + 8]
mov dword [ebp + 0x1c], eax
lea eax, [ebp + 0x1c]
push eax
mov dword [ebp + 0x20], edi
call fcn.0050cf50
push eax
add eax, 0x10
push eax
push ecx
lea eax, [ebp + 0x1c]
push eax
lea ecx, [esi + 0x4c]
call fcn.0052bd40
push 0x40
call fcn.0056eed3
mov edi, eax
mov dword [ebp + 0x20], edi
mov byte [ebp - 4], 0x2b
mov dword [ebp + 0x3c], 0x34d
mov dword [ebp + 0x40], 0
push ecx
push 0
lea eax, [ebp + 0x3c]
mov dword [ebp + 0x44], 0x26
push eax
push 0x40010080
push str.aw_btn_safe
push str.button
push dword [ebp + 0x14]
mov ecx, edi
mov dword [ebp + 0x48], 0x26
push dword [esi + 0x10]
call fcn.0052a8f0
mov byte [ebp - 4], 0x2c
mov eax, dword [ebp + 0x18]
push 1
push eax
push 0x30
push dword [edi + 8]
mov dword [edi], vtable.Button.0
mov dword [edi + 0x3c], eax
call ebx
call fcn.004387d0
push str.aw_btn_safe
call fcn.00518e20
push dword [eax]
push 0
push 0xf7
push dword [edi + 8]
call ebx
mov byte [ebp - 4], 0xc
lea ecx, [esi + 0x4c]
mov dword [esi + 0x1e0], edi
mov eax, dword [edi + 8]
mov dword [ebp + 0x1c], eax
lea eax, [ebp + 0x1c]
push eax
mov dword [ebp + 0x20], edi
call fcn.0050cf50
push eax
add eax, 0x10
push eax
push ecx
lea eax, [ebp + 0x1c]
push eax
lea ecx, [esi + 0x4c]
call fcn.0052bd40
push 0x40
call fcn.0056eed3
mov edi, eax
mov dword [ebp + 0x20], edi
push ecx
push 0
lea eax, [ebp + 0x3c]
mov byte [ebp - 4], 0x2d
push eax
push 0x40010080
push str.aw_btn_show
push str.button
push dword [ebp + 0x14]
mov ecx, edi
mov dword [ebp + 0x3c], 0x37d
push dword [esi + 0x10]
mov dword [ebp + 0x40], 0
mov dword [ebp + 0x44], 0x26
mov dword [ebp + 0x48], 0x26
call fcn.0052a8f0
mov byte [ebp - 4], 0x2e
mov eax, dword [ebp + 0x18]
push 1
push eax
push 0x30
push dword [edi + 8]
mov dword [edi], vtable.Button.0
mov dword [edi + 0x3c], eax
call ebx
call fcn.004387d0
push str.aw_btn_show
call fcn.00518e20
push dword [eax]
push 0
push 0xf7
push dword [edi + 8]
call ebx
mov byte [ebp - 4], 0xc
lea ecx, [esi + 0x4c]
mov dword [esi + 0x1e8], edi
mov eax, dword [edi + 8]
mov dword [ebp + 0x1c], eax
lea eax, [ebp + 0x1c]
push eax
mov dword [ebp + 0x20], edi
call fcn.0050cf50
push eax
add eax, 0x10
push eax
push ecx
lea eax, [ebp + 0x1c]
push eax
lea ecx, [esi + 0x4c]
call fcn.0052bd40
push 0x40
call fcn.0056eed3
mov edi, eax
mov dword [ebp + 0x20], edi
push ecx
push 0
lea eax, [ebp + 0x3c]
mov byte [ebp - 4], 0x2f
push eax
push 0x40010080
push str.aw_btn_screenshot
push str.button
push dword [ebp + 0x14]
mov ecx, edi
mov dword [ebp + 0x3c], 0x3a3
push dword [esi + 0x10]
mov dword [ebp + 0x40], 0
mov dword [ebp + 0x44], 0x26
mov dword [ebp + 0x48], 0x26
call fcn.0052a8f0
mov byte [ebp - 4], 0x30
mov eax, dword [ebp + 0x18]
push 1
push eax
push 0x30
push dword [edi + 8]
mov dword [edi], vtable.Button.0
mov dword [edi + 0x3c], eax
call ebx
call fcn.004387d0
push str.aw_btn_screenshot
call fcn.00518e20
push dword [eax]
push 0
push 0xf7
push dword [edi + 8]
call ebx
mov byte [ebp - 4], 0xc
lea ecx, [esi + 0x4c]
mov dword [esi + 0x1ec], edi
mov eax, dword [edi + 8]
mov dword [ebp + 0x1c], eax
lea eax, [ebp + 0x1c]
push eax
mov dword [ebp + 0x20], edi
call fcn.0050cf50
push eax
add eax, 0x10
push eax
push ecx
lea eax, [ebp + 0x1c]
push eax
lea ecx, [esi + 0x4c]
call fcn.0052bd40
push 0x40
call fcn.0056eed3
mov edi, eax
mov dword [ebp + 0x20], edi
push ecx
push 0
lea eax, [ebp + 0x3c]
mov byte [ebp - 4], 0x31
push eax
push 0x40010080
push str.aw_btn_screenrecord_start
push str.button
push dword [ebp + 0x14]
mov ecx, edi
mov dword [ebp + 0x3c], 0x3c9
push dword [esi + 0x10]
mov dword [ebp + 0x40], 0
mov dword [ebp + 0x44], 0x26
mov dword [ebp + 0x48], 0x26
call fcn.0052a8f0
mov byte [ebp - 4], 0x32
mov eax, dword [ebp + 0x18]
push 1
push eax
push 0x30
push dword [edi + 8]
mov dword [edi], vtable.Button.0
mov dword [edi + 0x3c], eax
call ebx
call fcn.004387d0
push str.aw_btn_screenrecord_start
call fcn.00518e20
push dword [eax]
push 0
push 0xf7
push dword [edi + 8]
call ebx
mov byte [ebp - 4], 0xc
lea ecx, [esi + 0x4c]
mov dword [esi + 0x1f0], edi
mov eax, dword [edi + 8]
mov dword [ebp + 0x1c], eax
lea eax, [ebp + 0x1c]
push eax
mov dword [ebp + 0x20], edi
call fcn.0050cf50
push eax
add eax, 0x10
push eax
push ecx
lea eax, [ebp + 0x1c]
push eax
lea ecx, [esi + 0x4c]
call fcn.0052bd40
push 0x40
call fcn.0056eed3
mov edi, eax
mov dword [ebp + 0x20], edi
push ecx
push 0
lea eax, [ebp + 0x3c]
mov byte [ebp - 4], 0x33
push eax
push 0x40010080
push str.aw_btn_toolbar_help
push str.button
push dword [ebp + 0x14]
mov ecx, edi
mov dword [ebp + 0x3c], 0x3f9
push dword [esi + 0x10]
mov dword [ebp + 0x40], 0
mov dword [ebp + 0x44], 0x26
mov dword [ebp + 0x48], 0x26
call fcn.0052a8f0
mov byte [ebp - 4], 0x34
mov eax, dword [ebp + 0x18]
mov dword [edi], vtable.Button.0
mov dword [edi + 0x3c], eax
push 1
push eax
push 0x30
push dword [edi + 8]
call ebx
call fcn.004387d0
push str.aw_btn_toolbar_help
call fcn.00518e20
push dword [eax]
push 0
push 0xf7
push dword [edi + 8]
call ebx
mov byte [ebp - 4], 0xc
lea ecx, [esi + 0x4c]
mov dword [esi + 0x1f4], edi
mov eax, dword [edi + 8]
mov dword [ebp + 0x1c], eax
lea eax, [ebp + 0x1c]
push eax
mov dword [ebp + 0x20], edi
call fcn.0050cf50
push eax
add eax, 0x10
push eax
push ecx
lea eax, [ebp + 0x1c]
push eax
lea ecx, [esi + 0x4c]
call fcn.0052bd40
push 0x40
call fcn.0056eed3
mov edi, eax
mov dword [ebp + 0x20], edi
push ecx
push 0
lea eax, [ebp + 0x3c]
mov byte [ebp - 4], 0x35
push eax
push 0x40010080
push str.aw_btn_feedback
push str.button
push dword [ebp + 0x14]
mov ecx, edi
mov dword [ebp + 0x3c], 0x41f
push dword [esi + 0x10]
mov dword [ebp + 0x40], 0
mov dword [ebp + 0x44], 0x26
mov dword [ebp + 0x48], 0x26
call fcn.0052a8f0
mov byte [ebp - 4], 0x36
mov eax, dword [ebp + 0x18]
push 1
push eax
push 0x30
push dword [edi + 8]
mov dword [edi], vtable.Button.0
mov dword [edi + 0x3c], eax
call ebx
call fcn.004387d0
push str.aw_btn_feedback
call fcn.00518e20
push dword [eax]
push 0
push 0xf7
push dword [edi + 8]
call ebx
mov byte [ebp - 4], 0xc
lea ecx, [esi + 0x4c]
mov dword [esi + 0x1f8], edi
mov eax, dword [edi + 8]
mov dword [ebp + 0x1c], eax
lea eax, [ebp + 0x1c]
push eax
mov dword [ebp + 0x20], edi
call fcn.0050cf50
push eax
add eax, 0x10
push eax
push ecx
lea eax, [ebp + 0x1c]
push eax
lea ecx, [esi + 0x4c]
call fcn.0052bd40
push 0
push 0
mov ecx, esi
call fcn.0049e440
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x4c]
mov eax, dword [esi]
mov ecx, esi
push str.adminwind_connecting
call dword [eax + 0x48]
lea ecx, [ebp - 0x16c]
call fcn.0043ae30
mov ecx, dword [ebp + 4]
test ecx, ecx
je 0x49fe43
mov edx, dword [ebp + 0xc]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x49fe39
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x49fe79
push edx
push ecx
call fcn.0056eec5
add esp, 8
lea ecx, [ebp + 0x64]
call fcn.00445c30
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x4c]
xor ecx, ebp
call fcn.0056eeb4
lea esp, [ebp + 0x50]
pop ebp
ret 0x30
call fcn.00591dc6
call fcn.00591dc6
call fcn.00591dc6
call fcn.00591dc6
int3