Function at 0x4d4e40
Capabilities:
Enumerate gui resources

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x28
push 0
push 0
dec ecx
jne 0x4d4e48
push ebx
push esi
push edi
mov ebx, dword [0x4e21c8]
xor eax, eax
push ebp
push 0x4d5f1c
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x4e2700]
mov byte [eax], 1
mov eax, dword [0x4e458c]
mov eax, dword [eax + 0x364]
xor edx, edx
call fcn.0043468c
push 0x4d5f30
push 0
call sub.user32.dll_FindWindowA
mov esi, eax
mov eax, esi
call fcn.004d246c
mov edx, dword [0x4e26cc]
mov edx, dword [edx]
dec edx
mov eax, dword [0x4e458c]
mov eax, dword [eax + 0x324]
mov eax, dword [eax + 0x22c]
call fcn.0043beb4
mov eax, dword [eax + 8]
mov ecx, 0x4d5f4c
mov edx, 0xc
mov esi, dword [eax]
call dword [esi + 0x20]
lea eax, [ebp - 0x1c]
call fcn.004d27dc
push dword [ebp - 0x1c]
push 0x4d5f60
push 0x4d5f6c
mov eax, dword [0x4e284c]
push dword [eax]
lea eax, [ebp - 0x18]
mov edx, 4
call fcn.0040454c
mov edx, dword [ebp - 0x18]
mov eax, dword [0x4e458c]
mov eax, dword [eax + 0x328]
mov eax, dword [eax + 0x220]
mov ecx, dword [eax]
call dword [ecx + 0x38]
push 0x3e8
call fcn.004d2424
mov al, byte [0x4d5f7c]
push eax
lea eax, [ebp - 0x20]
push eax
lea edx, [ebp - 0x28]
mov eax, dword [0x4e458c]
mov eax, dword [eax + 0x340]
call fcn.004afd34
mov eax, dword [ebp - 0x28]
lea edx, [ebp - 0x24]
call fcn.0040904c
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov edx, 0x4d5f88
call fcn.0040d88c
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.00404220
lea eax, [ebp - 0x30]
call fcn.004d27dc
push dword [ebp - 0x30]
push 0x4d5f60
push 0x4d5f9c
push dword [ebx]
lea eax, [ebp - 0x2c]
mov edx, 4
call fcn.0040454c
mov edx, dword [ebp - 0x2c]
mov eax, dword [0x4e458c]
mov eax, dword [eax + 0x328]
mov eax, dword [eax + 0x220]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov al, byte [0x4d5f7c]
push eax
lea eax, [ebp - 0x34]
push eax
mov eax, dword [ebx]
xor ecx, ecx
mov edx, 0x4d5f88
call fcn.0040d88c
mov edx, dword [ebp - 0x34]
lea eax, [ebp - 8]
mov ecx, 0x4d5fb0
call fcn.004044d8
mov al, byte [0x4d5f7c]
push eax
lea eax, [ebp - 0x38]
push eax
mov eax, dword [ebx]
xor ecx, ecx
mov edx, 0x4d5f88
call fcn.0040d88c
mov edx, dword [ebp - 0x38]
mov eax, dword [0x4e247c]
mov ecx, 0x4d5fcc
call fcn.004044d8
mov al, byte [0x4d5f7c]
push eax
lea eax, [ebp - 0x3c]
push eax
mov eax, dword [ebx]
xor ecx, ecx
mov edx, 0x4d5f88
call fcn.0040d88c
mov edx, dword [ebp - 0x3c]
mov eax, dword [0x4e22f8]
mov ecx, 0x4d5ff0
call fcn.004044d8
mov eax, dword [0x4e247c]
mov eax, dword [eax]
call fcn.00408fb4
mov eax, dword [0x4e22f8]
mov eax, dword [eax]
call fcn.00408fb4
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x40]
mov ecx, 0x4d6014
mov edx, dword [0x4e4590]
call fcn.004044d8
mov eax, dword [ebp - 0x40]
mov ecx, dword [0x4e22d8]
mov ecx, dword [ecx]
mov edx, dword [0x4e2450]
mov edx, dword [edx]
call fcn.004d2360
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [0x4e284c]
mov ecx, dword [ecx]
lea eax, [ebp - 0x44]
mov edx, 0x4d6030
call fcn.004044d8
mov ecx, dword [ebp - 0x44]
mov edx, 0x4d603c
mov eax, dword [ebp - 8]
call fcn.004d20d4
push 0x4d6054
mov ecx, 0x4d6060
mov edx, 0x4d6074
mov eax, dword [ebp - 8]
call fcn.004d20d4
mov eax, dword [0x4e284c]
mov eax, dword [eax]
push eax
mov ecx, 0x4d6088
mov edx, 0x4d609c
mov eax, dword [ebp - 8]
call fcn.004d20d4
mov edx, 0x4d60ac
mov eax, 0x4d60c0
call fcn.004d1fe8
mov edx, 0x4d60d4
mov eax, 0x4d60e8
call fcn.004d1fe8
mov edx, 0x4d60fc
mov eax, 0x4d610c
call fcn.004d1fe8
mov edx, dword [0x4e2450]
mov edx, dword [edx]
mov eax, 0x4d6120
call fcn.004d1fe8
mov edx, dword [0x4e284c]
mov edx, dword [edx]
mov eax, 0x4d6134
call fcn.004d1fe8
mov edx, dword [0x4e2350]
mov edx, dword [edx]
mov eax, 0x4d6148
call fcn.004d1fe8
mov edx, dword [0x4e2350]
mov edx, dword [edx]
mov eax, 0x4d615c
call fcn.004d1fe8
mov edx, dword [ebx]
mov eax, 0x4d6170
call fcn.004d1fe8
lea ecx, [ebp - 0x48]
mov edx, dword [0x4e284c]
mov edx, dword [edx]
mov eax, dword [0x4e4604]
call fcn.004d1eb4
mov edx, dword [ebp - 0x48]
mov eax, 0x4d6184
call fcn.004d1fe8
lea ecx, [ebp - 0x4c]
mov edx, dword [0x4e2350]
mov edx, dword [edx]
mov eax, dword [0x4e4608]
call fcn.004d1eb4
mov edx, dword [ebp - 0x4c]
mov eax, 0x4d6198
call fcn.004d1fe8
lea edx, [ebp - 0x50]
mov eax, dword [0x4e458c]
mov eax, dword [eax + 0x36c]
call fcn.004afd34
mov edx, dword [ebp - 0x50]
mov eax, 0x4d61ac
call fcn.004d1fe8
lea edx, [ebp - 0x54]
mov eax, dword [0x4e458c]
mov eax, dword [eax + 0x368]
call fcn.004515c8
mov edx, dword [ebp - 0x54]
mov eax, 0x4d61bc
call fcn.004d1fe8
mov edx, 0x4d61cc
mov eax, 0x4d61d8
call fcn.004d1fe8
mov edx, 0x4d61cc
mov eax, 0x4d61ec
call fcn.004d1fe8
mov edx, 0x4d61cc
mov eax, 0x4d6200
call fcn.004d1fe8
mov edx, 0x4d6054
mov eax, 0x4d6214
call fcn.004d1fe8
lea edx, [ebp - 0x58]
mov eax, dword [0x4e458c]
mov eax, dword [eax + 0x34c]
call fcn.004afd34
mov edx, dword [ebp - 0x58]
mov eax, 0x4d6224
call fcn.004d1fe8
mov edx, dword [0x4e247c]
mov edx, dword [edx]
mov eax, 0x4d6238
call fcn.004d1fe8
mov edx, dword [0x4e22f8]
mov edx, dword [edx]
mov eax, 0x4d624c
call fcn.004d1fe8
call fcn.004d4c70
push 0x3e8
call fcn.004d2424
mov eax, dword [0x4e458c]
mov eax, dword [eax + 0x338]
mov edx, dword [eax]
call dword [edx + 0x50]
test al, al
je 0x4d5e77
mov eax, dword [ebx]
call fcn.004d1da4
lea eax, [ebp - 0x60]
call fcn.004d27dc
push dword [ebp - 0x60]
push 0x4d5f60
push 0x4d6260
lea eax, [ebp - 0x5c]
mov edx, 3
call fcn.0040454c
mov edx, dword [ebp - 0x5c]
mov eax, dword [0x4e458c]
mov eax, dword [eax + 0x328]
mov eax, dword [eax + 0x220]
mov ecx, dword [eax]
call dword [ecx + 0x38]
xor ebx, ebx
push 0x4d5f30
push 0
call sub.user32.dll_FindWindowA
mov esi, eax
test esi, esi
jne 0x4d5339
mov eax, dword [0x4e458c]
mov eax, dword [eax + 0x338]
mov edx, dword [eax]
call dword [edx + 0x50]
test al, al
je 0x4d5e77
inc ebx
push 0xc8
call fcn.004d2424
push 0x4d5f30
push 0
call sub.user32.dll_FindWindowA
mov esi, eax
cmp ebx, 0x12c
jbe 0x4d5331
call fcn.004d64b0
lea eax, [ebp - 0x68]
call fcn.004d27dc
push dword [ebp - 0x68]
push 0x4d5f60
push 0x4d6278
lea eax, [ebp - 0x64]
mov edx, 3
call fcn.0040454c
mov edx, dword [ebp - 0x64]
mov eax, dword [0x4e458c]
mov eax, dword [eax + 0x328]
mov eax, dword [eax + 0x220]
mov ecx, dword [eax]
call dword [ecx + 0x38]
jmp 0x4d5e77
test esi, esi
je 0x4d52b3
mov eax, dword [0x4e2544]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x4e2544]
cmp dword [eax], 0
jne 0x4d537f
push 0x4d5f30
push 0
call sub.user32.dll_FindWindowA
mov esi, eax
test esi, esi
je 0x4d5e77
push 0
push 0x4d1c9c
call sub.user32.dll_EnumWindows
push 0x64
call sub.kernel32.dll_Sleep_1
mov eax, dword [0x4e2544]
cmp dword [eax], 0
je 0x4d534c
mov eax, dword [0x4e283c]
xor edx, edx
mov dword [eax], edx
lea eax, [ebp - 0x70]
call fcn.004d27dc
push dword [ebp - 0x70]
push 0x4d5f60
push 0x4d6290
lea eax, [ebp - 0x6c]
mov edx, 3
call fcn.0040454c
mov edx, dword [ebp - 0x6c]
mov eax, dword [0x4e458c]
mov eax, dword [eax + 0x328]
mov eax, dword [eax + 0x220]
mov ecx, dword [eax]
call dword [ecx + 0x38]
push 0x4d61cc
mov al, byte [0x4d5f7c]
push eax
lea eax, [ebp - 0x74]
push eax
lea edx, [ebp - 0x78]
mov eax, dword [0x4e458c]
mov eax, dword [eax + 0x340]
call fcn.004afd34
mov eax, dword [ebp - 0x78]
xor ecx, ecx
mov edx, 0x4d5f88
call fcn.0040d88c
lea eax, [ebp - 0x74]
mov edx, 0x4d62a8
call fcn.00404494
mov eax, dword [ebp - 0x74]
mov ecx, 0x4d62cc
mov edx, 0x4d62e8
call fcn.004d20d4
lea eax, [ebp - 0x80]
call fcn.004d27dc
push dword [ebp - 0x80]
push 0x4d5f60
push 0x4d62fc
lea eax, [ebp - 0x7c]
mov edx, 3
call fcn.0040454c
mov edx, dword [ebp - 0x7c]
mov eax, dword [0x4e458c]
mov eax, dword [eax + 0x328]
mov eax, dword [eax + 0x220]
mov ecx, dword [eax]
call dword [ecx + 0x38]
push 0x1770
call fcn.004d2424
lea edx, [ebp - 0x84]
mov eax, 0x4d615c
call fcn.004d2230
mov eax, dword [ebp - 0x84]
call fcn.004d4458
mov eax, dword [0x4e2614]
mov eax, dword [eax]
push eax
mov eax, dword [0x4e284c]
mov eax, dword [eax]
push eax
call fcn.004db708
push 0x3e8
call fcn.004d2424
mov eax, dword [0x4e2550]
mov eax, dword [eax]
add eax, 0x82
push eax
mov eax, dword [0x4e2544]
mov eax, dword [eax]
push eax
call sub.user32.dll_SetCursorPos
push 0x3e8
call fcn.004d2424
push 0
push 0
push 0
push 0
push 2
call sub.user32.dll_mouse_event
push 0
push 0
push 0
push 0
push 4
call sub.user32.dll_mouse_event
xor ebx, ebx
xor eax, eax
mov dword [ebp - 0x14], eax
xor edi, edi
lea eax, [ebp - 0xc]
push eax
mov al, byte [0x4d5f7c]
push eax
lea eax, [ebp - 0x88]
push eax
lea edx, [ebp - 0x8c]
mov eax, dword [0x4e458c]
mov eax, dword [eax + 0x340]
call fcn.004afd34
mov eax, dword [ebp - 0x8c]
xor ecx, ecx
mov edx, 0x4d6314
call fcn.0040d88c
lea eax, [ebp - 0x88]
mov edx, 0x4d62a8
call fcn.00404494
mov eax, dword [ebp - 0x88]
mov ecx, 0x4d62cc
mov edx, 0x4d62e8
call fcn.004d217c
lea eax, [ebp - 0x94]
call fcn.004d27dc
push dword [ebp - 0x94]
push 0x4d5f60
push 0x4d6328
push dword [ebp - 0xc]
lea eax, [ebp - 0x90]
mov edx, 4
call fcn.0040454c
mov edx, dword [ebp - 0x90]
mov eax, dword [0x4e458c]
mov eax, dword [eax + 0x328]
mov eax, dword [eax + 0x220]
mov ecx, dword [eax]
call dword [ecx + 0x38]
jmp 0x4d5836
mov eax, 0xc8
call fcn.004d2b48
mov eax, dword [0x4e458c]
mov eax, dword [eax + 0x338]
mov edx, dword [eax]
call dword [edx + 0x50]
test al, al
je 0x4d5e77
inc ebx
lea eax, [ebp - 0xc]
push eax
mov al, byte [0x4d5f7c]
push eax
lea eax, [ebp - 0x98]
push eax
lea edx, [ebp - 0x9c]
mov eax, dword [0x4e458c]
mov eax, dword [eax + 0x340]
call fcn.004afd34
mov eax, dword [ebp - 0x9c]
xor ecx, ecx
mov edx, 0x4d6314
call fcn.0040d88c
lea eax, [ebp - 0x98]
mov edx, 0x4d62a8
call fcn.00404494
mov eax, dword [ebp - 0x98]
mov ecx, 0x4d62cc
mov edx, 0x4d62e8
call fcn.004d217c
lea eax, [ebp - 0xa4]
call fcn.004d27dc
push dword [ebp - 0xa4]
push 0x4d5f60
push 0x4d6328
push dword [ebp - 0xc]
lea eax, [ebp - 0xa0]
mov edx, 4
call fcn.0040454c
mov edx, dword [ebp - 0xa0]
mov eax, dword [0x4e458c]
mov eax, dword [eax + 0x328]
mov eax, dword [eax + 0x220]
mov ecx, dword [eax]
call dword [ecx + 0x38]
cmp dword [ebp - 0xc], 0
je 0x4d566e
mov eax, dword [ebp - 0xc]
mov edx, 0x4d61cc
call fcn.004045d8
jne 0x4d5763
mov eax, dword [0x4e247c]
mov eax, dword [eax]
call fcn.00408fa4
test al, al
jne 0x4d568e
mov eax, dword [0x4e22f8]
mov eax, dword [eax]
call fcn.00408fa4
test al, al
je 0x4d5702
lea edx, [ebp - 0xa8]
mov eax, 0x4d6200
call fcn.004d2230
mov eax, dword [ebp - 0xa8]
mov edx, 0x4d61cc
call fcn.004045d8
jne 0x4d5763
lea eax, [ebp - 0xb0]
call fcn.004d27dc
push dword [ebp - 0xb0]
push 0x4d5f60
push 0x4d633c
lea eax, [ebp - 0xac]
mov edx, 3
call fcn.0040454c
mov edx, dword [ebp - 0xac]
mov eax, dword [0x4e458c]
mov eax, dword [eax + 0x328]
mov eax, dword [eax + 0x220]
mov ecx, dword [eax]
call dword [ecx + 0x38]
call fcn.004d452c
jmp 0x4d5763
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x1e
jle 0x4d5763
mov eax, esi
call fcn.004d246c
lea eax, [ebp - 0xb8]
call fcn.004d27dc
push dword [ebp - 0xb8]
push 0x4d5f60
push 0x4d6354
lea eax, [ebp - 0xb4]
mov edx, 3
call fcn.0040454c
mov edx, dword [ebp - 0xb4]
mov eax, dword [0x4e458c]
mov eax, dword [eax + 0x328]
mov eax, dword [eax + 0x220]
mov ecx, dword [eax]
call dword [ecx + 0x38]
call fcn.004d4e40
jmp 0x4d5e77
push 0x4d5f30
push 0
call sub.user32.dll_FindWindowA
mov esi, eax
test esi, esi
jne 0x4d57cc
inc edi
cmp edi, 0xa
jle 0x4d57cc
lea eax, [ebp - 0xc0]
call fcn.004d27dc
push dword [ebp - 0xc0]
push 0x4d5f60
push 0x4d6368
lea eax, [ebp - 0xbc]
mov edx, 3
call fcn.0040454c
mov edx, dword [ebp - 0xbc]
mov eax, dword [0x4e458c]
mov eax, dword [eax + 0x328]
mov eax, dword [eax + 0x220]
mov ecx, dword [eax]
call dword [ecx + 0x38]
call fcn.004d4e40
jmp 0x4d5e77
push 0x3e8
call sub.kernel32.dll_Sleep_1
cmp ebx, 0x12c
jbe 0x4d5836
mov eax, esi
call fcn.004d246c
call fcn.004d4e40
lea eax, [ebp - 0xc8]
call fcn.004d27dc
push dword [ebp - 0xc8]
push 0x4d5f60
push 0x4d6380
lea eax, [ebp - 0xc4]
mov edx, 3
call fcn.0040454c
mov edx, dword [ebp - 0xc4]
mov eax, dword [0x4e458c]
mov eax, dword [eax + 0x328]
mov eax, dword [eax + 0x220]
mov ecx, dword [eax]
call dword [ecx + 0x38]
jmp 0x4d5e77
cmp dword [ebp - 0xc], 0
je 0x4d558a
mov eax, dword [ebp - 0xc]
mov edx, 0x4d61cc
call fcn.004045d8
je 0x4d558a
mov eax, dword [0x4e458c]
mov eax, dword [eax + 0x338]
mov edx, dword [eax]
call dword [edx + 0x50]
test al, al
je 0x4d5e77
xor ebx, ebx
push 0x4d5f30
push 0
call sub.user32.dll_FindWindowA
mov esi, eax
test esi, esi
je 0x4d5924
call fcn.004d28e4
push 0x4d5f30
push 0
call sub.user32.dll_FindWindowA
mov esi, eax
call fcn.004d4348
inc ebx
push 0xc8
call sub.kernel32.dll_Sleep_1
call fcn.004d2634
mov eax, dword [0x4e458c]
mov eax, dword [eax + 0x338]
mov edx, dword [eax]
call dword [edx + 0x50]
test al, al
je 0x4d5e77
cmp ebx, 0xb4
jbe 0x4d591c
call fcn.004d4e40
lea eax, [ebp - 0xd0]
call fcn.004d27dc
push dword [ebp - 0xd0]
push 0x4d5f60
push 0x4d63a8
lea eax, [ebp - 0xcc]
mov edx, 3
call fcn.0040454c
mov edx, dword [ebp - 0xcc]
mov eax, dword [0x4e458c]
mov eax, dword [eax + 0x328]
mov eax, dword [eax + 0x220]
mov ecx, dword [eax]
call dword [ecx + 0x38]
jmp 0x4d5e77
test esi, esi
jne 0x4d5883
lea eax, [ebp - 0xd8]
call fcn.004d27dc
push dword [ebp - 0xd8]
push 0x4d5f60
push 0x4d63c0
lea eax, [ebp - 0xd4]
mov edx, 3
call fcn.0040454c
mov edx, dword [ebp - 0xd4]
mov eax, dword [0x4e458c]
mov eax, dword [eax + 0x328]
mov eax, dword [eax + 0x220]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, 0x4e20
call fcn.004d289c
xor esi, esi
xor ebx, ebx
mov eax, 0x2710
call fcn.004d289c
lea eax, [ebp - 0xe0]
call fcn.004d27dc
push dword [ebp - 0xe0]
push 0x4d5f60
push 0x4d63d8
lea eax, [ebp - 0xdc]
mov edx, 3
call fcn.0040454c
mov edx, dword [ebp - 0xdc]
mov eax, dword [0x4e458c]
mov eax, dword [eax + 0x328]
mov eax, dword [eax + 0x220]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, 0x4e20
call fcn.004d289c
lea eax, [ebp - 0xe8]
call fcn.004d27dc
push dword [ebp - 0xe8]
push 0x4d5f60
push 0x4d63f0
lea eax, [ebp - 0xe4]
mov edx, 3
call fcn.0040454c
mov edx, dword [ebp - 0xe4]
mov eax, dword [0x4e458c]
mov eax, dword [eax + 0x328]
mov eax, dword [eax + 0x220]
mov ecx, dword [eax]
call dword [ecx + 0x38]
test esi, esi
jne 0x4d5b16
inc ebx
call fcn.004d2634
mov esi, eax
lea eax, [ebp - 4]
push eax
push esi
call sub.user32.dll_GetWindowThreadProcessId
push 0x7d0
call sub.kernel32.dll_Sleep_1
lea eax, [ebp - 0xf0]
call fcn.004d27dc
push dword [ebp - 0xf0]
push 0x4d5f60
push 0x4d6404
mov eax, ebx
xor edx, edx
push edx
push eax
lea eax, [ebp - 0xf4]
call fcn.00408b88
push dword [ebp - 0xf4]
lea eax, [ebp - 0xec]
mov edx, 4
call fcn.0040454c
mov edx, dword [ebp - 0xec]
mov eax, dword [0x4e458c]
mov eax, dword [eax + 0x328]
mov eax, dword [eax + 0x220]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x4e458c]
mov eax, dword [eax + 0x338]
mov edx, dword [eax]
call dword [edx + 0x50]
test al, al
je 0x4d5e77
cmp ebx, 0xb4
jbe 0x4d5b0e
call fcn.004d64b0
lea eax, [ebp - 0xfc]
call fcn.004d27dc
push dword [ebp - 0xfc]
push 0x4d5f60
push 0x4d63a8
lea eax, [ebp - 0xf8]
mov edx, 3
call fcn.0040454c
mov edx, dword [ebp - 0xf8]
mov eax, dword [0x4e458c]
mov eax, dword [eax + 0x328]
mov eax, dword [eax + 0x220]
mov ecx, dword [eax]
call dword [ecx + 0x38]
jmp 0x4d5e77
test esi, esi
je 0x4d5a23
test esi, esi
jle 0x4d5cd2
push 0xc8
call sub.kernel32.dll_Sleep_1
lea eax, [ebp - 0x104]
call fcn.004d27dc
push dword [ebp - 0x104]
push 0x4d5f60
push 0x4d6414
lea edx, [ebp - 0x108]
mov eax, esi
call fcn.00408a9c
push dword [ebp - 0x108]
lea eax, [ebp - 0x100]
mov edx, 4
call fcn.0040454c
mov edx, dword [ebp - 0x100]
mov eax, dword [0x4e458c]
mov eax, dword [eax + 0x328]
mov eax, dword [eax + 0x220]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea edx, [ebp - 0x10c]
mov eax, esi
call fcn.00408a9c
mov eax, dword [ebp - 0x10c]
push eax
mov edx, dword [0x4e26cc]
mov edx, dword [edx]
dec edx
mov eax, dword [0x4e458c]
mov eax, dword [eax + 0x324]
mov eax, dword [eax + 0x22c]
call fcn.0043beb4
mov eax, dword [eax + 8]
xor edx, edx
pop ecx
mov ebx, dword [eax]
call dword [ebx + 0x20]
mov eax, dword [ebp - 4]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x110]
call fcn.00408b88
mov eax, dword [ebp - 0x110]
push eax
mov edx, dword [0x4e26cc]
mov edx, dword [edx]
dec edx
mov eax, dword [0x4e458c]
mov eax, dword [eax + 0x324]
mov eax, dword [eax + 0x22c]
call fcn.0043beb4
pop edx
call fcn.0043b8c8
mov edx, dword [0x4e284c]
mov edx, dword [edx]
mov eax, 0x4d6148
call fcn.004d1fe8
push 0x64
call sub.kernel32.dll_Sleep_1
lea edx, [ebp - 0x114]
mov eax, esi
call fcn.00408a9c
mov edx, dword [ebp - 0x114]
mov eax, 0x4d6428
call fcn.004d1fe8
push 0x7530
call sub.kernel32.dll_Sleep_1
push esi
mov edx, dword [0x4e26a8]
mov edx, dword [edx]
lea eax, [ebp - 0x118]
mov ecx, 0x4d643c
call fcn.004044d8
mov eax, dword [ebp - 0x118]
push eax
call dword [0x4e4588]
push 0x3e8
call sub.kernel32.dll_Sleep_1
lea eax, [ebp - 0x120]
call fcn.004d27dc
push dword [ebp - 0x120]
push 0x4d5f60
push 0x4d6450
lea edx, [ebp - 0x124]
mov eax, esi
call fcn.00408a9c
push dword [ebp - 0x124]
lea eax, [ebp - 0x11c]
mov edx, 4
call fcn.0040454c
mov edx, dword [ebp - 0x11c]
mov eax, dword [0x4e458c]
mov eax, dword [eax + 0x328]
mov eax, dword [eax + 0x220]
mov ecx, dword [eax]
call dword [ecx + 0x38]
push 0x3e8
call sub.kernel32.dll_Sleep_1
push esi
call sub.user32.dll_CloseWindow
xor ebx, ebx
jmp 0x4d5db0
inc ebx
lea eax, [ebp - 0x12c]
call fcn.004d27dc
push dword [ebp - 0x12c]
push 0x4d5f60
push 0x4d6464
mov eax, 0x3c
sub eax, ebx
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x130]
call fcn.00408b88
push dword [ebp - 0x130]
lea eax, [ebp - 0x128]
mov edx, 4
call fcn.0040454c
mov edx, dword [ebp - 0x128]
mov eax, dword [0x4e458c]
mov eax, dword [eax + 0x328]
mov eax, dword [eax + 0x220]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea eax, [ebp - 0x134]
call fcn.004d27dc
lea eax, [ebp - 0x134]
mov edx, 0x4d6474
call fcn.00404494
mov edx, dword [ebp - 0x134]
mov eax, dword [0x4e458c]
mov eax, dword [eax + 0x328]
mov eax, dword [eax + 0x220]
mov ecx, dword [eax]
call dword [ecx + 0x38]
cmp ebx, 0x3c
ja 0x4d5dd6
mov edx, 0x4d6488
mov eax, 0x4d60c0
call fcn.004d1fe8
mov eax, dword [0x4e458c]
mov eax, dword [eax + 0x338]
mov edx, dword [eax]
call dword [edx + 0x50]
test al, al
je 0x4d5e77
push 0x3e8
call sub.kernel32.dll_Sleep_1
lea edx, [ebp - 0x138]
mov eax, 0x4d60c0
call fcn.004d2230
mov eax, dword [ebp - 0x138]
mov edx, 0x4d6488
call fcn.004045d8
jne 0x4d5cdf
push 0
push 0
push 0x481
push esi
call sub.user32.dll_SendMessageA
lea eax, [ebp - 0x140]
call fcn.004d27dc
push dword [ebp - 0x140]
push 0x4d5f60
push 0x4d649c
lea eax, [ebp - 0x13c]
mov edx, 3
call fcn.0040454c
mov edx, dword [ebp - 0x13c]
mov eax, dword [0x4e458c]
mov eax, dword [eax + 0x328]
mov eax, dword [eax + 0x220]
mov ecx, dword [eax]
call dword [ecx + 0x38]
push 0x1388
call sub.kernel32.dll_Sleep_1
mov edx, dword [0x4e26cc]
mov edx, dword [edx]
dec edx
mov eax, dword [0x4e458c]
mov eax, dword [eax + 0x324]
mov eax, dword [eax + 0x22c]
call fcn.0043beb4
mov eax, dword [eax + 8]
mov ecx, 0x4d6488
mov edx, 0xc
mov ebx, dword [eax]
call dword [ebx + 0x20]
push esi
call sub.user32.dll_CloseWindow
mov eax, 0x7d0
call fcn.004d2854
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4d5f26
lea eax, [ebp - 0x140]
mov edx, 0x29
call fcn.004041f0
lea eax, [ebp - 0x9c]
call fcn.004041cc
lea eax, [ebp - 0x98]
mov edx, 3
call fcn.004041f0
lea eax, [ebp - 0x8c]
call fcn.004041cc
lea eax, [ebp - 0x88]
mov edx, 4
call fcn.004041f0
lea eax, [ebp - 0x78]
call fcn.004041cc
lea eax, [ebp - 0x74]
mov edx, 7
call fcn.004041f0
lea eax, [ebp - 0x58]
mov edx, 3
call fcn.004041f0
lea eax, [ebp - 0x4c]
mov edx, 9
call fcn.004041f0
lea eax, [ebp - 0x28]
call fcn.004041cc
lea eax, [ebp - 0x24]
mov edx, 4
call fcn.004041f0
lea eax, [ebp - 0x10]
mov edx, 3
call fcn.004041f0
ret