Function at 0x49ac00
Capabilities:
Get session user name
Hide graphical window
List user accounts

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x4d8dd8
push eax
mov dword fs:[0], esp
sub esp, 0xa9c
push ebx
mov ebx, dword [ebp + 0x14]
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, dword [ebp + 0xc]
cmp edi, 0x110
jne 0x49ac43
push ebx
push 8
push esi
mov dword [ebp + 0xc], ebx
mov dword [ebx], esi
call dword [sym.imp.USER32.dll_SetWindowLongW]
jmp 0x49ac4f
push 8
push esi
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov dword [ebp + 0xc], eax
cmp dword [ebp + 0xc], 0
je 0x49bf26
mov eax, dword [ebp + 0x10]
push ebx
push eax
push edi
push esi
call fcn.00426230
add esp, 0x10
cmp edi, 0x138
ja 0x49bbd6
je 0x49bb8b
sub edi, 0x110
je 0x49b319
sub edi, 1
je 0x49adaa
sub edi, 1
jne 0x49bf26
movzx eax, word [ebp + 0x10]
sub eax, 0xaba8
je 0x49ad2e
sub eax, 0xe
jne 0x49bf26
mov ecx, dword [0x52fe34]
push esi
call fcn.0045c520
test al, al
je 0x49ad0b
push 0x5f7
push esi
call fcn.004271f0
add esp, 8
push edi
push edi
push 0x14b
push 0x5f7
push esi
mov ebx, eax
call dword [sym.imp.USER32.dll_SendDlgItemMessageW]
push edi
push edi
push 0x8022
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
test ebx, ebx
je 0x49ad0b
push ebx
push 0x5f7
push esi
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
push ebx
call fcn.0044c4f0
add esp, 4
push 0
push 0
push esi
call dword [sym.imp.USER32.dll_SetWindowLongW]
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
mov ecx, dword [0x52fe30]
cmp byte [ecx + 0x115c], 0
mov eax, str.Do_you_want_to_disable_history_
jne 0x49ad47
mov eax, str.Do_you_want_to_enable_history_
push 1
push esi
push 0
push 0x24
push eax
call fcn.004262f0
add esp, 0x14
cmp eax, 6
jne 0x49ad0b
mov edx, dword [0x52fe30]
cmp byte [edx + 0x115c], 0
sete al
movzx ecx, al
push ecx
mov ecx, dword [0x52fe34]
call fcn.004604e0
push 0
push esi
call dword [sym.imp.USER32.dll_GetSystemMenu]
mov edx, dword [0x52fe30]
movzx ecx, byte [edx + 0x115c]
neg ecx
sbb ecx, ecx
and ecx, 8
push ecx
push 0xaba8
push eax
call dword [sym.imp.USER32.dll_CheckMenuItem]
jmp 0x49ad0b
mov ecx, dword [ebp + 0x10]
mov eax, ecx
shr eax, 0x10
test ax, ax
jne 0x49b2cd
movzx eax, cx
cmp eax, 0x60b
jg 0x49b1a4
je 0x49b116
cmp eax, 0x5f5
jg 0x49b0cd
je 0x49b0b2
sub eax, 2
je 0x49b09a
sub eax, 0x5f2
jne 0x49bf26
mov edx, dword [ebp + 0xc]
mov ebx, dword [edx + 8]
mov eax, dword [ebx + 0x34]
test eax, eax
je 0x49ae11
push eax
call fcn.0044c4f0
add esp, 4
mov dword [ebx + 0x34], 0
mov eax, dword [ebx + 0x38]
test eax, eax
je 0x49ae28
push eax
call fcn.0044c4f0
add esp, 4
mov dword [ebx + 0x38], 0
mov edi, dword [sym.imp.USER32.dll_SendDlgItemMessageW]
push 0
push 0
push pe_nt_image_headers32
push 0x679
push esi
call edi
test eax, eax
je 0x49ae95
push 0x674
push esi
mov dword [ebx + 0x30], 1
call fcn.004271f0
add esp, 8
mov dword [ebx + 0x34], eax
test eax, eax
je 0x49aeb0
push 0x675
push esi
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
mov ecx, ebx
call fcn.0047a420
test al, al
jne 0x49aeb0
call dword [sym.imp.KERNEL32.dll_GetLastError]
push esi
push 0
push 0x10
push eax
push str.Invalid_user_name_or_password_was_specified_
call fcn.004263e0
add esp, 0x14
jmp 0x49ad16
push 0
push 0
push pe_nt_image_headers32
push 0x672
push esi
call edi
neg eax
sbb eax, eax
neg eax
inc eax
mov dword [ebx + 0x30], eax
push 0
push 0
push pe_nt_image_headers32
push 0x60b
push esi
call edi
neg eax
sbb eax, eax
neg eax
inc eax
push 0x643
push esi
mov dword [ebx + 0x2c], eax
call fcn.004271f0
mov edi, eax
add esp, 8
mov dword [ebp + 0x10], edi
test edi, edi
je 0x49af7f
push 0x25
push edi
call fcn.004c9bca
add esp, 8
test eax, eax
je 0x49af7f
push edi
call fcn.004c6380
add esp, 4
mov dword [ebp + 8], eax
mov edi, eax
test eax, eax
jne 0x49af0e
mov edi, dword [ebp + 0x10]
cmp dword [ebx + 0x34], 0
jne 0x49af88
test edi, edi
je 0x49af88
cmp word [edi], 0
je 0x49af88
push edi
call fcn.004c5ac0
add esp, 4
test al, al
jne 0x49af88
push 0
push 0
push str._nDo_you_want_to_choose_another_directory__n_n
push edi
push str.Specified_directory_does_not_exists__n
call fcn.0044c5d0
add esp, 0x14
mov edi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push esi
push 0
push 0x34
push eax
push edi
call fcn.004263e0
add esp, 0x14
cmp eax, 6
jne 0x49af88
mov eax, dword [ebp + 0x10]
test eax, eax
je 0x49af6e
push eax
call fcn.0044c4f0
add esp, 4
mov eax, dword [ebp + 8]
test eax, eax
je 0x49b212
push eax
jmp 0x49b20a
mov dword [ebp + 8], 0
jmp 0x49af0b
mov eax, dword [ebx + 0x18]
test eax, eax
je 0x49af9f
push eax
call fcn.0044c4f0
add esp, 4
mov dword [ebx + 0x18], 0
mov ecx, dword [ebp + 8]
mov eax, ecx
test ecx, ecx
jne 0x49afab
mov eax, dword [ebp + 0x10]
mov dword [ebx + 0x18], eax
test ecx, ecx
je 0x49afc4
cmp dword [ebp + 0x10], 0
je 0x49afc4
mov eax, dword [ebp + 0x10]
push eax
call fcn.0044c4f0
add esp, 4
mov eax, dword [ebx + 0x14]
test eax, eax
je 0x49afdb
push eax
call fcn.0044c4f0
add esp, 4
mov dword [ebx + 0x14], 0
push 0x5f7
push esi
call fcn.004271f0
add esp, 8
mov dword [ebx + 0x14], eax
test eax, eax
je 0x49affc
mov ecx, dword [0x52fe30]
push eax
call fcn.004534b0
mov eax, dword [ebx + 0x280]
cmp eax, 1
je 0x49b02e
cmp eax, 3
je 0x49b02e
push 0
push 0
push pe_nt_image_headers32
push 0x91a
push esi
call dword [sym.imp.USER32.dll_SendDlgItemMessageW]
neg eax
sbb eax, eax
and eax, 2
mov dword [ebx + 0x280], eax
mov eax, dword [ebx + 0x280]
test eax, eax
je 0x49b03d
cmp eax, 3
jne 0x49b07f
cmp dword [ebx + 0x274], 0
je 0x49b07f
push 0
lea ecx, [ebp + 0x10]
push ecx
push 0x98c
push esi
mov dword [ebp + 0x10], 0
call dword [sym.imp.USER32.dll_GetDlgItemInt]
cmp dword [ebp + 0x10], 0
je 0x49b07f
lea edx, [eax - 1]
cmp edx, 0x62
ja 0x49b07f
mov ecx, 0x64
sub ecx, eax
lea eax, [ecx + ecx*4]
add eax, eax
mov dword [ebx + 0x278], eax
mov ecx, dword [ebp + 0xc]
push 0x5f4
push esi
mov dword [ecx + 4], 0x5f4
call dword [sym.imp.USER32.dll_EndDialog]
jmp 0x49ad16
mov edx, dword [ebp + 0xc]
push 2
push esi
mov dword [edx + 4], 2
call dword [sym.imp.USER32.dll_EndDialog]
jmp 0x49ad16
mov eax, dword [ebp + 0xc]
push 0x5f5
push esi
mov dword [eax + 4], 0x5f5
call dword [sym.imp.USER32.dll_EndDialog]
jmp 0x49ad16
cmp eax, 0x5f8
jne 0x49bf26
push 1
push 0x4faf80
push esi
push 0
push 0
push str.Choose_program_to_run
call fcn.00428670
mov edi, eax
add esp, 0x18
test edi, edi
je 0x49ad16
push edi
push 0x5f7
push esi
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
push edi
call fcn.0044c4f0
add esp, 4
jmp 0x49ad16
mov edi, dword [sym.imp.USER32.dll_SendDlgItemMessageW]
push 0
push 0
push pe_nt_image_headers32
push 0x60b
push esi
call edi
cmp dword [0x52fe5c], 6
mov ebx, eax
jb 0x49b164
test ebx, ebx
je 0x49b152
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 8]
cmp dword [edx + 0x280], 3
je 0x49b152
mov eax, 1
jmp 0x49b154
xor eax, eax
push eax
push 0
push 0x160c
push 0x5f4
push esi
call edi
test ebx, ebx
je 0x49ad16
push 0x678
push 0x679
push 0x678
push esi
call dword [sym.imp.USER32.dll_CheckRadioButton]
push 0
push 0x672
push esi
call dword [sym.imp.USER32.dll_CheckDlgButton]
push 0
push 0
push 0x8021
push esi
call fcn.0049ac00
jmp 0x49ad16
cmp eax, 0x679
jg 0x49b228
cmp eax, 0x678
jge 0x49b1c5
mov ecx, eax
sub ecx, 0x642
je 0x49b1d8
sub ecx, 0x30
jne 0x49bf26
push 0
push eax
push 0x8021
push esi
call fcn.0049ac00
jmp 0x49ad16
push 0x643
push esi
call fcn.004271f0
push 0
mov edi, eax
push esi
push edi
push str.Choose_startup_directory
call fcn.004284c0
mov ebx, eax
add esp, 0x18
test ebx, ebx
je 0x49b212
push ebx
push 0x643
push esi
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
push ebx
call fcn.0044c4f0
add esp, 4
test edi, edi
je 0x49ad16
push edi
call fcn.0044c4f0
add esp, 4
jmp 0x49ad16
lea ecx, [eax - 0x989]
cmp ecx, 2
ja 0x49bf26
sub eax, 0x989
mov edx, dword [ebp + 0xc]
mov ebx, dword [edx + 8]
je 0x49b266
sub eax, 1
je 0x49b25a
sub eax, 1
jne 0x49b270
mov dword [ebx + 0x274], 2
jmp 0x49b270
mov dword [ebx + 0x274], 1
jmp 0x49b270
mov dword [ebx + 0x274], 0
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
xor eax, eax
cmp dword [ebx + 0x274], eax
setne al
push eax
push 0x98c
push esi
call edi
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
xor ecx, ecx
cmp dword [ebx + 0x274], ecx
setne cl
push ecx
push 0x98d
push esi
call edi
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
cmp dword [ebx + 0x274], 0
je 0x49ad16
push 0x98c
push esi
call edi
push eax
call dword [sym.imp.USER32.dll_SetFocus]
jmp 0x49ad16
mov edx, 0x100
cmp ax, dx
jne 0x49bf26
test ebx, ebx
je 0x49bf26
movzx eax, cx
cmp eax, 0x675
je 0x49b2f8
cmp eax, 0x98c
jne 0x49bf26
push 0
push 0
push 0xe
push ebx
call dword [sym.imp.USER32.dll_SendMessageW]
push eax
push 0
push 0xb1
push ebx
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x49bf26
mov eax, dword [0x52fe38]
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
push eax
push 1
push 0x80
push esi
mov dword [ebp - 0x14], 0
call edi
mov ecx, dword [0x52fe3c]
push ecx
push 0
push 0x80
push esi
call edi
push 0
push 0x11
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
push 0x30
push 0x675
push esi
call dword [sym.imp.USER32.dll_SendDlgItemMessageW]
push 0
push esi
call dword [sym.imp.USER32.dll_GetSystemMenu]
push 0
push 0x800
push 0x400
mov ebx, eax
push 0
push ebx
call dword [sym.imp.USER32.dll_InsertMenuW]
push str.Clear_history...
push 0xabb6
push 0x400
push 0
push ebx
call dword [sym.imp.USER32.dll_InsertMenuW]
mov edx, dword [0x52fe30]
movzx eax, byte [edx + 0x115c]
neg eax
push str.Store_history
sbb eax, eax
push 0xaba8
and eax, 8
or eax, 0x400
push eax
push 0
push ebx
call dword [sym.imp.USER32.dll_InsertMenuW]
mov ecx, dword [ebp + 0xc]
mov ebx, dword [ecx + 8]
push 0
push 1
push 0x8022
push esi
call edi
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 0x10]
test eax, eax
jne 0x49b3ed
mov eax, dword [ebx + 0x14]
test eax, eax
jne 0x49b3ed
mov eax, 0x4e5034
mov edi, dword [sym.imp.USER32.dll_SetDlgItemTextW]
push eax
push 0x5f7
push esi
call edi
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x1c]
test eax, eax
jne 0x49b419
mov eax, dword [ebx + 0x18]
test eax, eax
jne 0x49b419
mov ecx, dword [0x52fe2c]
push eax
call fcn.00408f30
push eax
push 0x643
push esi
call edi
cmp dword [ebx + 0x280], 1
push 0
jne 0x49b499
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0x988
push esi
call edi
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 0
push 0x989
push esi
call edi
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 0
push 0x98a
push esi
call edi
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 0
push 0x98b
push esi
call edi
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 0
push 0x98d
push esi
call edi
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 0
push 0x98c
push esi
call edi
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x49b515
mov ecx, 0x3e8
sub ecx, dword [ebx + 0x278]
mov eax, 0xcccccccd
mul ecx
shr edx, 3
push edx
push 0x98c
push esi
call dword [sym.imp.USER32.dll_SetDlgItemInt]
mov edx, dword [ebx + 0x274]
add edx, 0x989
push edx
push 0x98b
push 0x989
push esi
call dword [sym.imp.USER32.dll_CheckRadioButton]
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
xor eax, eax
cmp dword [ebx + 0x274], eax
setne al
push eax
push 0x98c
push esi
call edi
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
xor ecx, ecx
cmp dword [ebx + 0x274], ecx
setne cl
push ecx
push 0x98d
push esi
call edi
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
mov eax, dword [ebx + 0x280]
cmp eax, 3
je 0x49b529
mov byte [ebp + 0x13], 0
cmp eax, 1
jne 0x49b52d
mov byte [ebp + 0x13], 1
xor edx, edx
cmp byte [ebp + 0x13], dl
sete dl
push edx
push 0x91a
push esi
call edi
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [ebx + 0x34]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebx + 0x38]
mov eax, dword [ebp + 0xc]
mov dword [ebp + 0x14], ecx
cmp dword [ebx + 0x30], 2
lea ecx, [ebp - 0x2c]
sete dl
add eax, 0x20
push ecx
push eax
mov byte [ebp + 0xb], dl
mov dword [ebp - 0x18], 0x678
mov dword [ebp - 0x2c], 0x209
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
test eax, eax
jne 0x49b589
mov eax, dword [ebp + 0xc]
xor edx, edx
add eax, 0x20
mov word [eax], dx
push 0x502988
lea eax, [ebp - 0xaa8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov eax, dword [ebp + 0xc]
add eax, 0x20
push eax
lea ecx, [ebp - 0xaa8]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatW]
lea edx, [ebp - 0xaa8]
push edx
push 0x678
push esi
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
xor eax, eax
lea ecx, [ebp - 0x5c]
mov word [ebp - 0x490], ax
call fcn.004bc8c0
push 0
lea ecx, [ebp - 0x5c]
push ecx
mov ecx, dword [0x52fe2c]
mov dword [ebp - 4], 0
call fcn.0040a790
test eax, eax
jl 0x49b5f9
lea ecx, [ebp - 0x5c]
call fcn.004bc9d0
jmp 0x49b5fb
xor eax, eax
mov edx, dword [ebx + 0x34]
test edx, edx
je 0x49b608
cmp word [edx], 0
jne 0x49b63f
cmp dword [ebx + 0x280], 1
jne 0x49b792
test eax, eax
je 0x49b792
lea edx, [ebp + 0xb]
push edx
lea ecx, [ebp + 0x14]
push ecx
lea edx, [ebp - 0x10]
push edx
mov ecx, eax
call fcn.004bcc80
mov ecx, eax
call fcn.004886e0
test al, al
je 0x49b792
cmp byte [ebp + 0xb], 0
mov dword [ebp - 0x18], 0x679
je 0x49b665
push 1
push 0x672
push esi
call dword [sym.imp.USER32.dll_CheckDlgButton]
lea eax, [ebp - 0x490]
jmp 0x49b797
mov eax, dword [ebx + 0x34]
test eax, eax
je 0x49b681
cmp word [eax], 0
je 0x49b681
push 0x209
push eax
lea eax, [ebp - 0x490]
push eax
jmp 0x49b694
mov eax, dword [ebp + 0xc]
push 0x209
add eax, 0x20
push eax
lea ecx, [ebp - 0x490]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
mov eax, dword [ebp + 0x14]
test eax, eax
je 0x49b764
push 0x2e
push eax
call fcn.004c9bca
add esp, 8
push 0x104
test eax, eax
je 0x49b712
mov edx, dword [ebp - 0x10]
push edx
lea eax, [ebp - 0x490]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
push 0x502984
push 0x209
lea ecx, [ebp - 0x490]
push ecx
call fcn.004017b0
lea eax, [ebp - 0x490]
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x49b6f0
sub eax, edx
mov edx, dword [ebp + 0x14]
push 0x104
sar eax, 1
push edx
lea eax, [ebp + eax*2 - 0x490]
push eax
jmp 0x49b774
mov ecx, dword [ebp + 0x14]
push ecx
lea edx, [ebp - 0x490]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
push 0x4e82fc
push 0x209
lea eax, [ebp - 0x490]
push eax
call fcn.004017b0
lea eax, [ebp - 0x490]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x49b742
mov ecx, dword [ebp - 0x10]
sub eax, edx
push 0x104
sar eax, 1
push ecx
lea edx, [ebp + eax*2 - 0x490]
push edx
jmp 0x49b774
mov eax, dword [ebp - 0x10]
push 0x209
push eax
lea ecx, [ebp - 0x490]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
lea edx, [ebx + 0x3c]
push edx
push 0x675
push esi
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
lea eax, [ebp - 0x490]
jmp 0x49b797
mov eax, 0x4e5034
push eax
push 0x674
push esi
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
mov eax, dword [ebp - 0x18]
push eax
push 0x679
push 0x678
push esi
call dword [sym.imp.USER32.dll_CheckRadioButton]
push 0
push 0
push 0x8021
push esi
call fcn.0049ac00
cmp dword [0x52fe5c], 6
jae 0x49b821
push str.Run_as...
push 0x60b
push esi
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
lea ecx, [ebp - 0x28]
push ecx
push 0x60b
push esi
call edi
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x28]
push 6
push edx
cdq
sub eax, edx
sar eax, 1
push eax
push 0
push 0
push 0
push 0x60b
push esi
call edi
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
jmp 0x49b870
mov eax, dword [0x52fe2c]
cmp dword [eax + 0x4824], 0
jne 0x49b835
cmp dword [ebx + 0x2c], 2
jne 0x49b870
push 1
push 0x60b
push esi
call dword [sym.imp.USER32.dll_CheckDlgButton]
mov ecx, dword [0x52fe2c]
cmp dword [ecx + 0x4824], 0
push 0
push 0x60b
je 0x49b865
push esi
call edi
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
jmp 0x49b870
push 0x111
push esi
call fcn.0049ac00
mov edx, dword [0x52fe38]
push edx
push 0xfffffffffffffff2
push esi
call dword [sym.imp.USER32.dll_SetClassLongW]
xor eax, eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], eax
cmp dword [ebx + 0x280], 1
jne 0x49b8e8
push str.About_to_restart_console
push 0x5f9
push esi
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
push 0
push 0x7f03
push 0
call dword [sym.imp.USER32.dll_LoadIconW]
push eax
push 0x170
push 0x5f3
push esi
call dword [sym.imp.USER32.dll_SendDlgItemMessageW]
lea eax, [ebp - 0x3c]
push eax
push 0x5f4
push esi
call edi
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov dword [ebp - 0x14], 1
jmp 0x49b9f4
push 0x502948
push 0x5f9
push esi
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
cmp dword [ebx + 0x280], 2
je 0x49b915
mov ecx, dword [0x52fe34]
call fcn.004604a0
test al, al
je 0x49b915
xor eax, eax
jmp 0x49b91a
mov eax, 1
push eax
push 0x91a
push esi
call dword [sym.imp.USER32.dll_CheckDlgButton]
mov ecx, dword [0x52fe34]
call fcn.004604a0
movzx ecx, al
push ecx
push 0x91a
push esi
call edi
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
push 0
push 0x7f02
push 0
call dword [sym.imp.USER32.dll_LoadIconW]
push eax
push 0x170
push 0x5f3
push esi
call dword [sym.imp.USER32.dll_SendDlgItemMessageW]
push 1
lea edx, [ebp - 0x20]
push edx
push esi
xor eax, eax
push 0x5f5
push esi
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], eax
call edi
push eax
call dword [sym.imp.USER32.dll_MapWindowPoints]
push 0x5f5
push esi
call edi
push eax
call dword [sym.imp.USER32.dll_DestroyWindow]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
push 5
push 0
push 0
push eax
push ecx
push 0
push 0x5f4
push esi
call edi
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
cmp dword [ebx + 0x280], 3
mov eax, str.Save
je 0x49b9c5
mov eax, str.Start
push eax
push 0x5f4
push esi
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
push 0x5fa
push esi
call edi
push eax
call dword [sym.imp.USER32.dll_DestroyWindow]
lea edx, [ebp - 0x3c]
push edx
push 0x5f4
push esi
call edi
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
cmp dword [ebp - 0x3c], 0
je 0x49ba56
push 2
lea eax, [ebp - 0x3c]
push eax
push esi
push 0
call dword [sym.imp.USER32.dll_MapWindowPoints]
lea ecx, [ebp - 0x28]
push ecx
push 0x60b
push esi
call edi
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x3c]
lea ecx, [edx + eax - 5]
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x1c]
push 5
sub eax, dword [ebp - 0x38]
push 0
add eax, dword [ebp - 0x30]
push 0
cdq
sub eax, edx
sar eax, 1
add eax, dword [ebp - 0x38]
push eax
push ecx
push 0
push 0x60b
push esi
call edi
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
cmp byte [ebp + 0x13], 0
jne 0x49bab2
push 1
lea ecx, [ebp - 0x20]
push ecx
push esi
xor eax, eax
push 0x60b
push esi
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], eax
call edi
push eax
call dword [sym.imp.USER32.dll_MapWindowPoints]
lea edx, [ebp - 0x6c]
push edx
push 0x91a
push esi
call edi
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov ecx, dword [ebp - 0x6c]
sub ecx, dword [ebp - 0x64]
mov eax, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x20]
push 1
push 0
push 0
push eax
push ecx
push 0
push 0x91a
push esi
call edi
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
lea edx, [ebp - 0x4c]
push edx
push esi
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x4c]
push ecx
mov ecx, dword [ebp - 0x48]
sub esp, 0x10
mov eax, esp
mov dword [eax], edx
mov edx, dword [ebp - 0x44]
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0x40]
mov dword [eax + 8], edx
lea edx, [ebp - 0x7c]
push edx
mov dword [eax + 0xc], ecx
call fcn.00426520
mov edx, dword [eax + 4]
mov ecx, dword [eax]
mov dword [ebp - 0x24], edx
mov edx, dword [eax + 8]
mov eax, dword [eax + 0xc]
add esp, 0x18
mov dword [ebp - 0x20], edx
mov edx, dword [ebp - 0x40]
sub edx, dword [ebp - 0x48]
push 0
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x44]
sub eax, dword [ebp - 0x4c]
push edx
mov edx, dword [ebp - 0x24]
push eax
push edx
push ecx
push esi
call dword [sym.imp.USER32.dll_MoveWindow]
push 0
push 0
push 0x8001
push esi
call dword [sym.imp.USER32.dll_PostMessageW]
cmp dword [ebx + 0x280], 1
jne 0x49bb3c
push 0x5f4
jmp 0x49bb5c
mov eax, dword [ebx + 0x34]
test eax, eax
je 0x49bb57
cmp word [eax], 0
je 0x49bb57
cmp word [ebx + 0x3c], 0
jne 0x49bb57
push 0x675
jmp 0x49bb5c
push 0x5f7
push esi
call edi
push eax
call dword [sym.imp.USER32.dll_SetFocus]
lea ecx, [ebp - 0x5c]
mov dword [ebp - 4], 0xffffffff
call fcn.004bc960
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
push 0x5fa
push esi
call dword [sym.imp.USER32.dll_GetDlgItem]
cmp eax, ebx
jne 0x49bf26
mov edi, dword [ebp + 0x10]
push 0xff
push edi
call dword [sym.imp.GDI32.dll_SetTextColor]
push 0xf
call dword [sym.imp.USER32.dll_GetSysColorBrush]
push 1
push edi
mov esi, eax
call dword [sym.imp.GDI32.dll_SetBkMode]
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
sub edi, 0x8001
je 0x49bf19
sub edi, 0x20
je 0x49bcb3
sub edi, 1
jne 0x49bf26
mov edi, dword [ebp + 0xc]
mov esi, dword [edi + 8]
mov eax, dword [esi + 0x14]
push 0xffffffffffffffff
push eax
mov ecx, edi
call fcn.0049a990
mov ecx, dword [esi + 0x14]
mov edx, dword [edi + 0x18]
neg ecx
sbb ecx, ecx
push ecx
push edx
mov ecx, edi
call fcn.0049a990
mov eax, dword [edi + 0x14]
push 0xffffffffffffffff
push eax
mov ecx, edi
call fcn.0049a990
mov ecx, dword [edi + 0x10]
push 0xffffffffffffffff
push ecx
mov ecx, edi
call fcn.0049a990
cmp dword [ebp + 0x10], 0
je 0x49bc7a
mov ecx, dword [0x52fe30]
call fcn.0044e190
mov esi, eax
test esi, esi
je 0x49bc7a
cmp word [esi], 0
je 0x49bc7a
push 0xffffffffffffffff
push esi
mov ecx, edi
call fcn.0049a990
mov eax, esi
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x49bc60
sub eax, edx
sar eax, 1
cmp word [esi + eax*2 + 2], cx
lea esi, [esi + eax*2 + 2]
jne 0x49bc51
mov ecx, dword [0x52fe30]
xor esi, esi
push esi
call fcn.0044ecd0
test eax, eax
je 0x49bf26
mov edx, dword [eax + 4]
push 0xffffffffffffffff
push edx
mov ecx, edi
inc esi
call fcn.0049a990
mov ecx, dword [0x52fe30]
push esi
call fcn.0044ecd0
test eax, eax
jne 0x49bc90
jmp 0x49bf26
mov ebx, dword [sym.imp.USER32.dll_SendDlgItemMessageW]
push 0
push 0
push pe_nt_image_headers32
push 0x678
push esi
call ebx
test eax, eax
je 0x49bd06
mov ebx, dword [sym.imp.USER32.dll_GetDlgItem]
push 1
push 0x672
push esi
call ebx
mov edi, dword [sym.imp.USER32.dll_EnableWindow]
push eax
call edi
push 0
push 0x674
push esi
call ebx
push eax
call edi
push 0
push 0x675
push esi
call ebx
push eax
call edi
jmp 0x49beff
push 0
push 0
push 0x146
push 0x674
push esi
call ebx
test eax, eax
jne 0x49bec6
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x1c]
push ecx
lea edx, [ebp - 0x14]
push edx
push 0xffffffffffffffff
lea eax, [ebp + 8]
push eax
xor edi, edi
push 2
push 3
push edi
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x50], edi
mov dword [ebp + 8], edi
call sub.NETAPI32.dll_NetUserEnum
test eax, eax
jne 0x49beb1
mov dword [ebp + 0x14], edi
mov dword [ebp - 0x10], edi
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x2c], edi
cmp dword [ebp - 0x14], edi
jbe 0x49be44
mov eax, dword [ebp + 8]
lea esp, [esp]
test byte [edi + eax + 0x18], 2
jne 0x49be31
mov ecx, dword [edi + eax]
test ecx, ecx
je 0x49be31
cmp word [ecx], 0
je 0x49be31
push ecx
push 0
push 0x143
push 0x674
push esi
call ebx
mov eax, dword [ebp + 8]
mov ecx, dword [edi + eax + 0xc]
cmp ecx, 2
jne 0x49bdfa
cmp dword [ebp + 0x14], 0
jne 0x49bdcc
cmp dword [edi + eax + 0x60], 0x1f4
jne 0x49bdcc
mov ecx, dword [edi + eax]
push 0
push ecx
call fcn.0044c570
mov dword [ebp + 0x14], eax
jmp 0x49be2b
cmp dword [ebp - 0x10], 0
jne 0x49be31
mov edx, dword [edi + eax]
mov eax, dword [ebp + 0xc]
push edx
add eax, 0x20
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
je 0x49be2e
mov ecx, dword [ebp + 8]
mov edx, dword [edi + ecx]
push 0
push edx
call fcn.0044c570
mov dword [ebp - 0x10], eax
jmp 0x49be2b
cmp dword [ebp - 0x18], 0
jne 0x49be31
cmp ecx, 1
jne 0x49be31
mov eax, dword [edi + eax]
mov ecx, dword [ebp + 0xc]
push eax
add ecx, 0x20
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
je 0x49be2e
mov edx, dword [ebp + 8]
mov eax, dword [edi + edx]
push 0
push eax
call fcn.0044c570
mov dword [ebp - 0x18], eax
add esp, 8
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x2c]
inc ecx
add edi, 0x74
mov dword [ebp - 0x2c], ecx
cmp ecx, dword [ebp - 0x14]
jb 0x49bd70
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0x674
push esi
call edi
push eax
call dword [sym.imp.USER32.dll_GetWindowTextLengthW]
mov ebx, dword [ebp + 0x14]
test eax, eax
jne 0x49be89
test ebx, ebx
je 0x49be68
mov eax, ebx
jmp 0x49be7c
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x49be7c
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x49be7c
mov eax, dword [ebp + 0xc]
add eax, 0x20
push eax
push 0x674
push esi
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
mov ecx, dword [ebp + 8]
push ecx
call sub.NETAPI32.dll_NetApiBufferFree
test ebx, ebx
je 0x49be9f
push ebx
call fcn.0044c4f0
add esp, 4
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x49becc
push eax
call fcn.0044c4f0
add esp, 4
jmp 0x49becc
mov edx, dword [ebp + 0xc]
add edx, 0x20
push edx
push edi
push 0x143
push 0x674
push esi
call ebx
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0
push 0x672
push esi
call edi
mov ebx, dword [sym.imp.USER32.dll_EnableWindow]
push eax
call ebx
push 1
push 0x674
push esi
call edi
push eax
call ebx
push 1
push 0x675
push esi
call edi
push eax
call ebx
mov ebx, dword [sym.imp.USER32.dll_GetDlgItem]
cmp dword [ebp + 0x10], 0x679
jne 0x49bf26
push 0x674
push esi
call ebx
push eax
call dword [sym.imp.USER32.dll_SetFocus]
jmp 0x49bf26
mov ecx, dword [0x52fe2c]
push 0
call fcn.0040adf0
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
xor eax, eax
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 0x10