Function at 0x4b25d4
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x618
push ebx
push esi
push edi
mov dword [ebp - 0x280], 0
mov dword [ebp - 0x27c], 0
mov dword [ebp - 0x39c], 0
mov dword [ebp - 0x278], 0
mov dword [ebp - 0x38c], 0
mov dword [ebp - 0x274], 0
mov dword [ebp - 0x4b0], 0
mov eax, dword [ebp + 0x10]
mov dword [eax], 0
cmp dword [ebp + 0xc], 0x5d
jne 0x4b2657
push 0x5d
mov eax, dword [ebp + 8]
push eax
call fcn.004b8a03
add esp, 8
cmp eax, 2
jne 0x4b2657
mov dword [ebp + 0xc], 0x5c
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x5f8], eax
jmp 0x4b2688
mov dword [ebp - 0x158], 1
jmp 0x4b2780
mov dword [ebp - 0x158], 0
jmp 0x4b2780
add dword [ebp - 0x5f8], 0x5b
cmp dword [ebp - 0x5f8], 0xb7
ja case.0x4b26ad.4
mov eax, dword [ebp - 0x5f8]
xor ecx, ecx
mov cl, byte [eax + 0x4b26c8]
jmp dword [ecx*4 + 0x4b26b4]
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x5fc], eax
jmp 0x4b27bb
mov dword [ebp - 0x390], 1
jmp 0x4b27fc
mov dword [ebp - 0x390], 0
mov dword [0x531b48], 0
jmp 0x4b27fc
sub dword [ebp - 0x5fc], 0x5a
cmp dword [ebp - 0x5fc], 7
ja case.0x4b27dd.3
mov eax, dword [ebp - 0x5fc]
xor ecx, ecx
mov cl, byte [eax + 0x4b27f4]
jmp dword [ecx*4 + 0x4b27e4]
cmp dword [ebp + 0xc], 0
jge 0x4b2818
mov eax, dword [ebp + 0xc]
neg eax
mov dword [ebp + 0xc], eax
mov dword [ebp - 0x390], 1
cmp dword [ebp + 0xc], 0x61
je 0x4b2836
call fcn.004af6a8
test eax, eax
je 0x4b2836
xor eax, eax
jmp 0x4b3915
push 1
call fcn.0049c470
add esp, 4
cmp dword [ebp + 0xc], 0x61
jne 0x4b2859
mov dword [ebp - 0x154], 0
jmp 0x4b2863
mov dword [ebp - 0x154], 1
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x600], eax
jmp 0x4b2956
lea eax, [ebp - 0x264]
push eax
push 0x1f4
call fcn.004e3fc4
add esp, 8
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 0
je 0x4b289d
jmp 0x4b340b
mov eax, dword [0x531adc]
inc eax
mov dword [ebp - 0x140], eax
mov eax, dword [ebp - 0x140]
push eax
push 0x531d54
lea eax, [ebp - 0x4ac]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x4ac]
push eax
lea eax, [ebp - 0x264]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
jmp 0x4b29f3
mov dword [ebp - 0x140], 0
mov eax, dword [ebp + 8]
push eax
lea eax, [ebp - 0x264]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea eax, [ebp - 0x388]
push eax
lea eax, [ebp - 0x5b8]
push eax
lea eax, [ebp - 0x4ac]
push eax
lea eax, [ebp - 0x13c]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.0052344e
add esp, 0x14
lea eax, [ebp - 0x5b8]
push eax
lea eax, [ebp - 0x264]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea eax, [ebp - 0x388]
push eax
lea eax, [ebp - 0x264]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
jmp 0x4b29f3
sub dword [ebp - 0x600], 4
cmp dword [ebp - 0x600], 0x5f
ja case.0x4b2978.4
mov eax, dword [ebp - 0x600]
xor ecx, ecx
mov cl, byte [eax + 0x4b2993]
jmp dword [ecx*4 + 0x4b297f]
mov dword [ebp - 0x5dc], 0x531d58
lea eax, [ebp - 0x264]
mov dword [ebp - 0x5d8], eax
mov eax, dword [0x533640]
mov dword [ebp - 0x5d4], eax
mov dword [ebp - 0x5d0], 0x80000000
mov dword [ebp - 0x5cc], 0x80000000
mov dword [ebp - 0x5c8], 0x80000000
mov dword [ebp - 0x5c4], 0x80000000
mov dword [ebp - 0x5bc], 0
mov dword [ebp - 0x3a4], 0x1000000
mov eax, dword [0x533644]
push eax
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x4b2ad3
mov dword [ebp - 0x3a4], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x2c], 0x2c
mov dword [ebp - 0x24], 2
lea eax, [ebp - 0x2c]
push eax
mov eax, dword [0x533644]
push eax
call dword [sym.imp.USER32.dll_GetWindowPlacement]
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x5c8], eax
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 0xc]
mov dword [ebp - 0x5c4], eax
cmp dword [ebp - 0x5c8], 0x10
jle 0x4b2abf
sub dword [ebp - 0x5c8], 0x10
cmp dword [ebp - 0x5c4], 0x10
jle 0x4b2ad3
sub dword [ebp - 0x5c4], 0x10
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x5c0], eax
push 0x3e8
push 0x3e8
push 0
push 0
lea eax, [ebp - 0x150]
push eax
call dword [sym.imp.USER32.dll_SetRect]
cmp dword [ebp - 0x154], 0
je 0x4b2b73
lea eax, [ebp - 0x5dc]
push eax
push 0
push 0x220
mov eax, dword [0x533648]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov dword [ebp - 0x38c], eax
cmp dword [ebp - 0x38c], 0
jne 0x4b2b43
mov dword [ebp - 0x280], 0x2712
jmp 0x4b2b61
mov dword [ebp - 0x280], 0
lea eax, [ebp - 0x150]
push eax
mov eax, dword [ebp - 0x38c]
push eax
call dword [sym.imp.USER32.dll_GetClientRect]
cmp dword [ebp - 0x280], 0
je 0x4b2b73
jmp 0x4b340b
mov eax, dword [ebp - 0x38c]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jne 0x4b2b8e
mov eax, dword [0x533644]
mov dword [ebp - 0x30], eax
push 0
mov eax, dword [0x533640]
push eax
push 0
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 0x144]
push eax
mov eax, dword [ebp - 0x148]
push eax
push 0
push 0
push 0x42300000
push 0
push 0x531d6c
push 0
call dword [sym.imp.USER32.dll_CreateWindowExA]
mov dword [ebp - 0x274], eax
mov eax, dword [ebp - 0x274]
push eax
call fcn.004e3c00
add esp, 4
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 0
je 0x4b2bef
jmp 0x4b340b
mov eax, dword [ebp - 0x274]
mov ecx, dword [ebp + 0x10]
mov dword [ecx], eax
cmp dword [ebp - 0x154], 0
je 0x4b2c6b
push 0
mov eax, dword [0x533640]
push eax
push 0
mov eax, dword [ebp - 0x38c]
push eax
mov eax, dword [ebp - 0x144]
push eax
mov eax, dword [ebp - 0x148]
push eax
push 0
push 0
push 0x40300000
push 0
push 0x531d7c
push 0
call dword [sym.imp.USER32.dll_CreateWindowExA]
mov dword [ebp - 0x4b0], eax
mov eax, dword [ebp - 0x4b0]
push eax
call fcn.004e3c00
add esp, 4
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 0
je 0x4b2c6b
jmp 0x4b340b
cmp dword [ebp - 0x154], 0
je 0x4b2d05
cmp dword [ebp + 0xc], 0x5b
je 0x4b2ca0
cmp dword [ebp + 0xc], 0x62
je 0x4b2ca0
cmp dword [ebp + 0xc], 0x5a
je 0x4b2ca0
cmp dword [ebp + 0xc], 0x5f
jne 0x4b2caf
mov dword [ebp - 0x5f4], 1
jmp 0x4b2cb9
mov dword [ebp - 0x5f4], 0
lea eax, [ebp - 0x394]
push eax
mov eax, dword [ebp + 8]
push eax
mov eax, dword [ebp - 0x158]
push eax
mov eax, dword [ebp - 0x5f4]
push eax
mov eax, dword [ebp - 0x140]
push eax
mov eax, dword [ebp - 0x38c]
push eax
call fcn.004b1eaa
add esp, 0x18
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 0
je 0x4b2d00
jmp 0x4b340b
jmp 0x4b2d10
mov eax, dword [0x52da00]
mov dword [ebp - 0x394], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x604], eax
jmp 0x4b2dfa
push 0
mov eax, dword [ebp - 0x38c]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov dword [ebp - 0x278], 1
mov eax, dword [ebp + 0xc]
push eax
mov eax, dword [ebp - 0x394]
push eax
mov eax, dword [ebp - 0x274]
push eax
call fcn.004b08c5
add esp, 0xc
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 0
je 0x4b2d69
jmp 0x4b340b
jmp 0x4b2ea1
push 0
mov eax, dword [ebp - 0x38c]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov dword [ebp - 0x278], 1
mov eax, dword [ebp + 0xc]
push eax
mov eax, dword [ebp - 0x394]
push eax
mov eax, dword [ebp - 0x274]
push eax
call fcn.004af9d3
add esp, 0xc
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 0
je 0x4b2db9
jmp 0x4b340b
jmp 0x4b2ea1
mov eax, dword [ebp + 0xc]
push eax
mov eax, dword [ebp - 0x394]
push eax
mov eax, dword [ebp - 0x274]
push eax
call fcn.004af9d3
add esp, 0xc
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 0
je 0x4b2df0
jmp 0x4b340b
jmp 0x4b2ea1
sub dword [ebp - 0x604], 2
cmp dword [ebp - 0x604], 0x61
ja case.0x4b2e1c.6
mov eax, dword [ebp - 0x604]
xor ecx, ecx
mov cl, byte [eax + 0x4b2e3f]
jmp dword [ecx*4 + 0x4b2e23]
push 4
mov eax, dword [ebp - 0x274]
push eax
call dword [sym.imp.USER32.dll_GetWindowLongA]
mov dword [ebp - 0x268], eax
mov eax, dword [ebp - 0x268]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov dword [ebp - 0x3a0], eax
push 0
push 1
mov eax, dword [ebp - 0x3a0]
add eax, 0x22
push eax
call fcn.004e43fc
add esp, 0xc
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x608], eax
jmp 0x4b3345
push 0
push 0
mov eax, dword [ebp - 0x3a0]
mov eax, dword [eax + 0x5a]
push eax
mov eax, dword [ebp - 0x3a0]
mov eax, dword [eax + 0x56]
push eax
mov eax, dword [ebp - 0x274]
push eax
call fcn.004e462a
add esp, 0x14
mov dword [ebp - 0x280], eax
jmp 0x4b33ec
test byte [0x52d007], 4
je 0x4b2f9b
mov eax, dword [0x52d074]
mov dword [ebp - 0x5f0], eax
cmp dword [ebp + 0xc], 0x5b
je 0x4b2f4b
cmp dword [ebp + 0xc], 0x5a
jne 0x4b2f96
cmp dword [ebp - 0x5f0], 0x1f4
jge 0x4b2f7a
cmp dword [ebp - 0x5f0], 0
je 0x4b2f7a
mov eax, dword [ebp - 0x3a0]
mov dword [eax + 0xe], 1
jmp 0x4b2f87
mov eax, dword [ebp - 0x3a0]
mov dword [eax + 0xe], 0
mov eax, dword [ebp - 0x5f0]
mov ecx, dword [ebp - 0x3a0]
mov dword [ecx + 0xa], eax
jmp 0x4b2fa5
mov dword [ebp - 0x5f0], 0
push 0
mov eax, dword [ebp - 0x5f0]
push eax
mov eax, dword [ebp - 0x3a0]
mov eax, dword [eax + 0x5a]
push eax
mov eax, dword [ebp - 0x3a0]
mov eax, dword [eax + 0x56]
push eax
mov eax, dword [ebp - 0x274]
push eax
call fcn.004e462a
add esp, 0x14
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x5f0], 0
je 0x4b2ffd
cmp dword [ebp - 0x5f0], 0xffffffff
je 0x4b2ffd
mov eax, dword [ebp - 0x5f0]
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x280], 0
jne 0x4b302d
push 0
push 0
push 0x12c
push 0x12c
mov eax, dword [ebp - 0x4b0]
push eax
call fcn.004e462a
add esp, 0x14
mov dword [ebp - 0x280], eax
push 0
mov eax, dword [ebp - 0x38c]
push eax
call dword [sym.imp.USER32.dll_GetWindowLongA]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov dword [ebp - 0x270], eax
mov eax, dword [ebp - 0x270]
cmp dword [eax], 0
jne 0x4b3070
mov eax, dword [ebp - 0x270]
add eax, 4
push eax
call fcn.004b4f96
add esp, 4
mov eax, dword [ebp - 0x34]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
jmp 0x4b33ec
mov eax, dword [ebp - 0x3a0]
mov eax, dword [eax + 0xa]
mov dword [ebp - 0x5f0], eax
mov eax, dword [ebp - 0x3a0]
mov eax, dword [eax + 0xe]
mov dword [ebp - 0x398], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x60c], eax
jmp 0x4b30f3
test byte [0x52d007], 4
je 0x4b30e9
mov eax, dword [0x52d074]
mov dword [ebp - 0x5f0], eax
cmp dword [ebp - 0x5f0], 0
jge 0x4b30df
mov dword [ebp - 0x398], 1
jmp 0x4b30e9
mov dword [ebp - 0x398], 0
jmp 0x4b3112
cmp dword [ebp - 0x60c], 0x5b
je 0x4b30ab
cmp dword [ebp - 0x60c], 0x62
je 0x4b30ab
jmp 0x4b3112
mov eax, dword [ebp - 0x398]
push eax
mov eax, dword [ebp - 0x5f0]
push eax
mov eax, dword [ebp - 0x3a0]
mov eax, dword [eax + 0x5a]
push eax
mov eax, dword [ebp - 0x3a0]
mov eax, dword [eax + 0x56]
push eax
mov eax, dword [ebp - 0x274]
push eax
call fcn.004e462a
add esp, 0x14
mov dword [ebp - 0x280], eax
cmp dword [ebp + 0xc], 0x62
je 0x4b3181
mov eax, dword [ebp - 0x3a0]
push eax
mov eax, dword [ebp - 0x274]
push eax
call fcn.0049a311
add esp, 8
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 0
je 0x4b3181
jmp 0x4b33ec
cmp dword [ebp - 0x5f0], 0
je 0x4b31e4
test byte [ebp - 0x398], 1
jne 0x4b31e4
mov eax, dword [ebp - 0x274]
push eax
call dword [sym.imp.USER32.dll_GetDC]
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp - 0x5f0]
push eax
mov eax, dword [ebp - 0x15c]
push eax
call fcn.004e4256
add esp, 8
mov eax, dword [ebp - 0x15c]
push eax
mov eax, dword [ebp - 0x274]
push eax
call dword [sym.imp.USER32.dll_ReleaseDC]
mov eax, dword [ebp - 0x5f0]
mov dword [ebp - 0x27c], eax
test byte [ebp - 0x398], 1
je 0x4b31fb
mov dword [ebp - 0x39c], 1
cmp dword [ebp - 0x280], 0
jne 0x4b3235
push 0
push 0
mov eax, dword [ebp - 0x3a0]
mov eax, dword [eax + 0x1e]
push eax
mov eax, dword [ebp - 0x3a0]
mov eax, dword [eax + 0x1a]
push eax
mov eax, dword [ebp - 0x4b0]
push eax
call fcn.004e462a
add esp, 0x14
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 0
jne 0x4b333b
lea eax, [ebp - 0x5ec]
push eax
mov eax, dword [ebp - 0x274]
push eax
call dword [sym.imp.USER32.dll_GetClientRect]
push 0
mov eax, dword [ebp - 0x5e4]
push eax
mov eax, dword [ebp - 0x3a0]
mov eax, dword [eax + 2]
push eax
push 0
push 0
mov eax, dword [ebp - 0x274]
push eax
call fcn.004e472e
add esp, 0x18
push 0
mov eax, dword [ebp - 0x5e0]
push eax
mov eax, dword [ebp - 0x3a0]
mov eax, dword [eax + 6]
push eax
push 0
push 1
mov eax, dword [ebp - 0x274]
push eax
call fcn.004e472e
add esp, 0x18
push 0
mov eax, dword [ebp - 0x3a0]
xor ecx, ecx
mov cx, word [eax + 2]
shl ecx, 0x10
mov cl, 0x63
push ecx
push 0x114
mov eax, dword [ebp - 0x274]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
push 0
mov eax, dword [ebp - 0x3a0]
xor ecx, ecx
mov cx, word [eax + 6]
shl ecx, 0x10
mov cl, 0x63
push ecx
push 0x115
mov eax, dword [ebp - 0x274]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
push 0
mov eax, dword [ebp - 0x38c]
push eax
call dword [sym.imp.USER32.dll_GetWindowLongA]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov dword [ebp - 0x270], eax
mov eax, dword [ebp - 0x270]
cmp dword [eax], 0
jne 0x4b3331
mov eax, dword [ebp - 0x270]
add eax, 4
push eax
call fcn.004b4f96
add esp, 4
mov eax, dword [ebp - 0x34]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
jmp 0x4b33ec
sub dword [ebp - 0x608], 2
cmp dword [ebp - 0x608], 0x61
ja case.0x4b3367.6
mov eax, dword [ebp - 0x608]
xor ecx, ecx
mov cl, byte [eax + 0x4b338a]
jmp dword [ecx*4 + 0x4b336e]
mov eax, dword [ebp - 0x268]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
cmp dword [ebp - 0x280], 0
je 0x4b340b
jmp 0x4b340b
cmp dword [ebp - 0x280], 0
je 0x4b354b
cmp dword [ebp - 0x38c], 0
je 0x4b344c
mov eax, dword [ebp - 0x38c]
push eax
call fcn.004b75cc
add esp, 4
push 0
push 0
push 0x10
mov eax, dword [ebp - 0x38c]
push eax
call dword [sym.imp.USER32.dll_DefMDIChildProcA]
jmp 0x4b346c
cmp dword [ebp - 0x274], 0
je 0x4b346c
push 0
push 0
push 0x10
mov eax, dword [ebp - 0x274]
push eax
call dword [sym.imp.USER32.dll_DefWindowProcA]
cmp dword [ebp - 0x280], 2
je 0x4b3546
cmp dword [ebp - 0x390], 0
jne 0x4b3546
mov eax, dword [ebp - 0x280]
mov dword [ebp - 0x610], eax
jmp 0x4b34ec
push 0x40
call fcn.0049c6f9
add esp, 4
jmp 0x4b3546
push 0x3f
call fcn.0049c6f9
add esp, 4
jmp 0x4b3546
push 0x33
call fcn.0049c6f9
add esp, 4
jmp 0x4b3546
push 0x3a
call fcn.0049c6f9
add esp, 4
jmp 0x4b3546
push 7
call fcn.0049c6f9
add esp, 4
jmp 0x4b3546
cmp dword [ebp - 0x610], 7
jg 0x4b3511
je 0x4b349c
cmp dword [ebp - 0x610], 0xffffffff
je 0x4b3546
jmp 0x4b34d8
cmp dword [ebp - 0x610], 0x2716
je 0x4b34ba
cmp dword [ebp - 0x610], 0x2717
je 0x4b34c9
cmp dword [ebp - 0x610], 0x2718
je 0x4b34ab
jmp 0x4b34d8
jmp case.0x4b3877.7
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x614], eax
jmp 0x4b3569
inc dword [0x531adc]
jmp case.0x4b358b.4
sub dword [ebp - 0x614], 4
cmp dword [ebp - 0x614], 0x5f
ja case.0x4b358b.4
mov eax, dword [ebp - 0x614]
xor ecx, ecx
mov cl, byte [eax + 0x4b35a6]
jmp dword [ecx*4 + 0x4b3592]
cmp dword [ebp - 0x154], 0
jne 0x4b361e
mov eax, dword [ebp - 0x280]
jmp 0x4b3915
cmp dword [ebp + 0xc], 0x5d
je 0x4b367b
cmp dword [ebp + 0xc], 0x60
je 0x4b367b
cmp dword [ebp + 0xc], 0x5f
je 0x4b367b
cmp dword [ebp - 0x278], 0
jne 0x4b367b
cmp dword [ebp + 0xc], 0x5c
je 0x4b367b
cmp dword [ebp + 0xc], 0x5a
je 0x4b367b
push 5
mov eax, dword [ebp - 0x38c]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 5
mov eax, dword [ebp - 0x274]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
cmp dword [ebp - 0x27c], 0
je 0x4b36a5
mov eax, dword [ebp - 0x39c]
push eax
mov eax, dword [ebp - 0x27c]
push eax
mov eax, dword [ebp - 0x274]
push eax
call fcn.004bae00
add esp, 0xc
mov eax, dword [ebp - 0x38c]
push eax
call fcn.004bad5e
add esp, 4
push 1
mov eax, dword [ebp - 0x38c]
push eax
call fcn.004a1e47
add esp, 8
mov dword [ebp - 0x26c], 0
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x618], eax
jmp 0x4b3855
mov dword [ebp - 0x26c], 1
push 0
push 0
push 1
push 0
push 0
mov eax, dword [ebp - 0x274]
push eax
call fcn.0043c3e6
add esp, 0x18
push 0
push 0
push 0
push 1
push 0
push 0
push 0x459
mov eax, dword [ebp - 0x274]
push eax
call fcn.0043db0f
add esp, 0x20
mov eax, dword [ebp - 0x268]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov dword [ebp - 0x3a0], eax
mov eax, dword [ebp - 0x3a0]
cmp dword [eax + 0xe6], 0
je 0x4b3768
push 0
push 1
mov eax, dword [ebp - 0x26c]
push eax
push 0
mov eax, dword [ebp - 0x3a0]
mov eax, dword [eax + 0xe6]
push eax
call fcn.00472111
add esp, 0x14
mov eax, dword [ebp - 0x268]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
jmp case.0x4b3877.7
mov eax, dword [ebp - 0x268]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov dword [ebp - 0x3a0], eax
push 1
push pe_nt_image_headers32
mov eax, dword [ebp - 0x3a0]
add eax, 0x22
push eax
call fcn.004e43fc
add esp, 0xc
push 0
push 0
push 0
push 1
push 0
mov eax, dword [ebp - 0x3a0]
xor ecx, ecx
mov cx, word [eax + 0xde]
shl ecx, 0x10
push ecx
push 0x457
mov eax, dword [ebp - 0x274]
push eax
call fcn.0043db0f
add esp, 0x20
push 0
push 0
push 1
push 0
push 0
mov eax, dword [ebp - 0x274]
push eax
call fcn.0043c3e6
add esp, 0x18
push 0
push pe_nt_image_headers32
mov eax, dword [ebp - 0x3a0]
add eax, 0x22
push eax
call fcn.004e43fc
add esp, 0xc
push 0
mov eax, dword [ebp - 0x274]
push eax
call dword [sym.imp.USER32.dll_GetScrollPos]
mov ecx, dword [ebp - 0x3a0]
mov dword [ecx + 2], eax
push 1
mov eax, dword [ebp - 0x274]
push eax
call dword [sym.imp.USER32.dll_GetScrollPos]
mov ecx, dword [ebp - 0x3a0]
mov dword [ecx + 6], eax
mov eax, dword [ebp - 0x268]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
jmp case.0x4b3877.7
jmp case.0x4b3877.7
sub dword [ebp - 0x618], 2
cmp dword [ebp - 0x618], 0x61
ja case.0x4b3877.7
mov eax, dword [ebp - 0x618]
xor ecx, ecx
mov cl, byte [eax + 0x4b389e]
jmp dword [ecx*4 + 0x4b387e]
push 0
call fcn.0049c470
add esp, 4
mov eax, dword [ebp - 0x280]
jmp 0x4b3915
pop edi
pop esi
pop ebx
leave
ret