Function at 0x49be90
Capabilities:
Accept command line arguments
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x64
push ebx
push esi
push edi
jmp 0x49beee
mov dword [ebp - 0x18], 0
lea eax, [ebp - 0x44]
push eax
call dword [sym.imp.KERNEL32.dll_GetStartupInfoA_1]
test byte [ebp - 0x18], 1
je 0x49bf19
mov eax, dword [ebp - 0x14]
and eax, 0xffff
mov dword [ebp + 0x14], eax
jmp 0x49bf20
mov dword [ebp + 0x14], 0xa
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA_1]
mov dword [ebp + 8], eax
mov dword [ebp + 0xc], 0
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov dword [ebp + 0x10], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x4c], eax
mov word [0x4a11b8], 0
mov word [0x4a4c42], 0
cmp dword [ebp + 0xc], 0
jne 0x49bf74
mov ecx, dword [ebp + 8]
call fcn.0049cdf0
test eax, eax
jne 0x49bf74
xor eax, eax
jmp 0x49c33c
push 0x104
push 0x4a4a70
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
jne 0x49bf97
xor eax, eax
jmp 0x49c33c
mov edx, dword [ebp + 0x14]
mov ecx, dword [ebp + 8]
call fcn.0049ce40
test eax, eax
jne 0x49bfc5
push 0
push 0x4a10b8
push 0x4a1214
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
xor eax, eax
jmp 0x49c33c
mov dword [ebp - 0x50], 1
mov eax, dword [ebp + 0x10]
mov dword [0x4a49d0], eax
mov edx, 0x4a4a50
lea ecx, [0x4a49b1]
call fcn.0049ebb0
call fcn.0049ebe0
test eax, eax
je 0x49c009
mov word [0x4a11b8], 1
mov dword [0x4a1168], 1
jmp 0x49c2a3
mov ecx, 1
call fcn.0049ea90
xor eax, eax
mov ax, word [0x4a4c42]
test ah, 0xc0
jne 0x49c052
xor eax, eax
mov ax, word [0x4a4c42]
test ah, 0x10
je 0x49c052
push 0
push 0x8003
push 0x111
mov eax, dword [0x4a4b90]
push eax
call dword [sym.imp.USER32.dll_SendMessageA_1]
jmp 0x49c057
call fcn.0049c670
cmp dword [0x4a1170], 0
je 0x49c07a
mov ecx, dword [ebp - 0x50]
call fcn.0049ecb0
mov dword [ebp - 0x50], eax
mov ecx, dword [ebp - 0x50]
call fcn.0049ed70
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 1
jne 0x49c0ab
xor eax, eax
mov ax, word [0x4a11b8]
test eax, eax
je 0x49c0ab
xor eax, eax
mov ax, word [0x4a49af]
test eax, eax
je 0x49c0ab
dec word [0x4a49af]
cmp dword [ebp - 0x50], 1
jne 0x49c1c1
xor eax, eax
mov ax, word [0x4a11b8]
test eax, eax
je 0x49c1c1
xor eax, eax
mov ax, word [0x4a117c]
test al, 2
jne 0x49c0f3
cmp dword [0x4a1178], 0
je 0x49c0f3
xor eax, eax
mov ax, word [0x4a117c]
or eax, 2
mov word [0x4a117c], ax
xor eax, eax
mov ax, word [0x4a117c]
test al, 2
je 0x49c132
call fcn.0049f240
mov word [0x4a11b8], ax
xor eax, eax
mov ax, word [0x4a11b8]
test eax, eax
jne 0x49c132
push 0
push 0x4a10b8
push 0x4a1204
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
xor eax, eax
mov ax, word [0x4a117c]
test al, 1
jne 0x49c1c1
cmp dword [0x4a1174], 0
je 0x49c184
movsx eax, word [0x4a49c1]
test eax, eax
jl 0x49c184
movsx eax, word [0x4a49c1]
shl eax, 2
lea eax, [eax + eax*2]
lea eax, [eax + eax*4]
mov ecx, dword [0x4a4c4c]
xor edx, edx
mov dx, word [eax + ecx + 0x28]
test dl, 8
jne 0x49c1b0
cmp dword [0x4a1174], 0
je 0x49c1c1
movsx eax, word [0x4a49c1]
test eax, eax
jge 0x49c1c1
xor eax, eax
mov ax, word [0x4a4c54]
test al, 8
je 0x49c1c1
xor eax, eax
mov ax, word [0x4a117c]
or eax, 1
mov word [0x4a117c], ax
xor eax, eax
mov ax, word [0x4a117c]
test eax, eax
je 0x49c2a3
cmp dword [ebp - 0x50], 1
jne 0x49c2a3
xor eax, eax
mov ax, word [0x4a11b8]
test eax, eax
je 0x49c2a3
lea eax, [ebp - 0x64]
push eax
mov edx, 0x4a4b80
lea ecx, [0x4a49b1]
call fcn.0049fb40
mov ecx, 0x4a4950
add ecx, 0x61
mov edx, dword [eax]
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
call fcn.0049e630
test eax, eax
jne 0x49c239
mov edx, 0x4a11fc
mov ecx, 0x4a11e0
call fcn.0049f5f0
mov edx, 0x4a4a50
lea ecx, [0x4a49b1]
call fcn.0049ebb0
mov ecx, dword [ebp + 0x10]
call fcn.0049f0f0
test eax, eax
je 0x49c281
call fcn.0049f070
mov dword [ebp - 0x50], eax
push 0
push 0
push 0x10
mov eax, dword [0x4a4b90]
push eax
call dword [sym.imp.USER32.dll_SendMessageA_1]
mov word [0x4a11b8], 0
jmp 0x49c2a3
mov dword [ebp - 0x50], 0
mov word [0x4a11b8], 0
push 0
push 0
push 0x10
mov eax, dword [0x4a4b90]
push eax
call dword [sym.imp.USER32.dll_SendMessageA_1]
lea edx, [ebp - 0x4c]
lea ecx, [ebp - 0x54]
call fcn.0049c3c0
mov dword [ebp - 0x48], eax
push 0
push 0
push 0x10
mov eax, dword [0x4a4b90]
push eax
call dword [sym.imp.USER32.dll_SendMessageA_1]
cmp dword [0x4a1180], 2
je 0x49c318
cmp dword [ebp - 0x50], 1
jne 0x49c318
xor eax, eax
mov ax, word [0x4a11b8]
test eax, eax
je 0x49c318
mov eax, dword [ebp + 8]
push eax
push 0x4a11a8
call dword [sym.imp.USER32.dll_UnregisterClassA]
xor eax, eax
mov ax, word [0x4a11bc]
test eax, eax
je 0x49c318
mov eax, dword [ebp - 0x4c]
push eax
lea edx, [ebp - 0x54]
mov ecx, dword [ebp - 0x48]
call fcn.0049c350
cmp dword [ebp - 0x54], 0
je 0x49c32a
mov ecx, dword [ebp - 0x54]
call fcn.0049f5e0
mov eax, dword [ebp - 0x50]
push eax
call dword [sym.imp.KERNEL32.dll_ExitProcess]
pop edi
pop esi
pop ebx
leave
ret 0x10