Function at 0x4a75e0
Capabilities:
Contain obfuscated stackstrings
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x5ede4b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x480
push ebx
push ebp
push esi
mov esi, ecx
xor ebp, ebp
push edi
lea ecx, [esp + 0x24]
xor edi, edi
mov dword [esp + 0x7c], ebp
call fcn.004918b0
mov ebx, dword [esp + 0x4a0]
mov dword [esp + 0x498], edi
cmp ebx, 0x2020032
je 0x4a7b9e
cmp ebx, 0x2020033
je 0x4a7734
test byte [esp + 0x4a4], 0xf
je 0x4a7734
test ebx, 0x80000000
jne 0x4a7734
cmp dword [esi + 0x414], 1
je 0x4aa34d
cmp dword [esi + 0x410], edi
jne 0x4aa34d
cmp ebx, 0x202000a
je 0x4a7719
cmp ebx, 0x202001c
je 0x4a7719
cmp ebx, 0x202000b
je 0x4a7712
cmp ebx, 0x202001b
je 0x4a7712
cmp ebx, 0x202000c
je 0x4a770b
cmp ebx, 0x202001d
je 0x4a770b
cmp ebx, 0x2020010
je 0x4a7704
cmp ebx, 0x202007e
je 0x4a7704
cmp ebx, 0x2020011
jne 0x4a76c6
mov byte [esp + 0x18], 7
jmp 0x4a76db
cmp ebx, 0x2020012
setne al
dec eax
and eax, 8
test al, al
mov byte [esp + 0x18], al
je 0x4a7720
mov eax, dword [esp + 0x18]
lea ecx, [esp + 0x24]
push eax
call fcn.00491bb0
push edi
lea ecx, [esp + 0x28]
call fcn.00491be0
push edi
lea ecx, [esp + 0x28]
call fcn.00491bb0
lea ecx, [esp + 0x24]
push ecx
jmp 0x4a7721
mov byte [esp + 0x18], 6
jmp 0x4a76db
mov byte [esp + 0x18], 4
jmp 0x4a76db
mov byte [esp + 0x18], 3
jmp 0x4a76db
mov byte [esp + 0x18], 2
jmp 0x4a76db
push edi
mov ecx, 0x676258
call fcn.0050be60
mov ebp, 1
mov dword [esp + 0x7c], ebp
cmp ebx, 0x2020032
ja 0x4a7bc3
je 0x4a7b9e
lea eax, [ebx - 0x202000a]
cmp eax, 0x13
ja case.0x4a8b26.33685638
jmp dword [eax*4 + 0x4aa38c]
mov edx, dword [esi + 0x3f8]
not edx
test dl, 1
jne case.0x4aa170.6
lea eax, [esi + 0xc0]
push 0xffffffffffffffff
push eax
mov ecx, esi
call fcn.0050e4d0
push 0
push 0
push 0
push 2
mov ecx, esi
mov edi, eax
call fcn.004097e0
mov ecx, esi
call fcn.00469ad0
push 0xffffffffffffffff
push 0
push 0
push 0
push 0xffffffffffffffff
push edi
push 2
mov ecx, esi
call fcn.00403b60
jmp case.0x4aa170.6
mov ecx, dword [esi + 0x3f8]
not ecx
test cl, 1
jne case.0x4aa170.6
lea edx, [esi + 0xc0]
push 0xffffffffffffffff
push edx
mov ecx, esi
call fcn.0050e6d0
push 0
push 0
push 0
push 3
mov ecx, esi
mov edi, eax
call fcn.004097e0
mov ecx, esi
call fcn.00469ad0
push 0xffffffffffffffff
push 0
push 0
push 0
push 0xffffffffffffffff
push edi
push 3
mov ecx, esi
call fcn.00403b60
jmp case.0x4aa170.6
mov eax, dword [esi + 0x3f8]
not eax
test al, 1
jne case.0x4aa170.6
lea ecx, [esi + 0xc0]
push 0xffffffffffffffff
push ecx
mov ecx, esi
call fcn.0050e860
push 0
push 0
push 0
push 4
mov ecx, esi
mov edi, eax
call fcn.004097e0
mov ecx, esi
call fcn.00469ad0
push 0xffffffffffffffff
push 0
push 0
push 0
push 0xffffffffffffffff
push edi
push 4
mov ecx, esi
call fcn.00403b60
jmp case.0x4aa170.6
mov edx, dword [esi + 0x3f8]
not edx
test dl, 1
jne case.0x4aa170.6
lea eax, [esi + 0xc0]
push 0xffffffffffffffff
push eax
mov ecx, esi
call fcn.0050ec60
push 0
push 0
push 0
push 7
mov ecx, esi
mov edi, eax
call fcn.004097e0
push 0xffffffffffffffff
push 0
push 0
push 0
push 0xffffffffffffffff
push edi
push 7
mov ecx, esi
call fcn.00403b60
jmp case.0x4aa170.6
mov ecx, dword [esi + 0x3f8]
not ecx
test cl, 1
jne case.0x4aa170.6
lea edx, [esi + 0xc0]
push 0xffffffffffffffff
push edx
mov ecx, esi
call fcn.0050ec80
push 0
push 0
push 0
push 8
mov ecx, esi
mov edi, eax
call fcn.004097e0
push 0xffffffffffffffff
push 0
push 0
push 0
push 0xffffffffffffffff
push edi
push 8
mov ecx, esi
call fcn.00403b60
jmp case.0x4aa170.6
mov eax, dword [esi + 0x3f8]
not eax
test al, 1
jne case.0x4aa170.6
mov edx, dword [esp + 0x4a8]
lea ecx, [esp + 0x14]
push ecx
push edx
lea ecx, [esi + 0x340]
call fcn.004f48d0
cmp eax, 1
jne case.0x4aa170.6
mov eax, dword [esp + 0x14]
mov ecx, dword [eax + 0x3c]
mov edx, dword [eax + 0x3c]
shr ecx, 2
test edx, edx
jne 0x4a792d
xor eax, eax
jmp 0x4a7930
mov eax, dword [eax + 0x34]
mov edx, dword [esp + 0x4ac]
cmp edx, ecx
jge case.0x4aa170.6
mov ecx, edx
lea edx, [esp + 0x1c]
lea ebp, [esi + 0x324]
push 0
lea ebx, [ecx*4]
push edx
mov ecx, ebp
mov edi, dword [ebx + eax]
push edi
call fcn.004f4970
cmp eax, 1
jne case.0x4aa170.6
mov eax, dword [esp + 0x1c]
mov eax, dword [eax + 0x10]
and eax, 0x30
cmp eax, 0x10
je 0x4a79c8
cmp eax, 0x20
je 0x4a79c8
mov ecx, dword [esp + 0x4ac]
lea edx, [esi + 0xc0]
push ecx
push edi
push edx
mov ecx, esi
call fcn.0050ee80
push 1
push edi
mov ecx, ebp
call fcn.004e99f0
mov eax, dword [esp + 0x14]
push 4
push ebx
lea ecx, [eax + 0x2c]
call fcn.004922f0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.004097e0
mov ecx, esi
call fcn.00469ad0
jmp case.0x4aa170.6
push 0x669148
mov ecx, 0x676088
call fcn.005bc5aa
mov dword [0x67608c], 0x10
push 0
jmp 0x4a811b
mov eax, dword [esi + 0x3f8]
not eax
test al, 1
jne case.0x4aa170.6
mov ebp, dword [esp + 0x4a8]
lea edi, [esi + 0x340]
push ebp
mov ecx, edi
call fcn.004f4910
mov ebx, eax
test ebx, ebx
je case.0x4aa170.6
lea ecx, [esp + 0x14]
push ecx
push ebp
mov ecx, edi
call fcn.004f48d0
cmp eax, 1
jne case.0x4aa170.6
mov edx, dword [esi + 0x458]
mov eax, 0
dec edx
js 0x4a7a84
mov edi, dword [esi + 0x454]
mov ebp, dword [esp + 0x14]
mov ecx, dword [edi]
cmp dword [ecx + 0x3c], 1
jne 0x4a7a52
cmp dword [ecx + 0x54], ebp
je 0x4a7a5c
inc eax
add edi, 4
cmp eax, edx
jle 0x4a7a45
jmp 0x4a7a84
cmp eax, edx
jg 0x4a7a84
mov dword [esp + 0x34], 0
mov edx, dword [ecx]
lea eax, [esp + 0x24]
push eax
call dword [edx + 0xd0]
lea ecx, [esp + 0x24]
push ecx
mov ecx, 0x676258
call fcn.0050be10
mov edx, dword [esp + 0x14]
mov ecx, esi
push edx
push 1
call fcn.00409950
mov eax, dword [esp + 0x4a8]
mov ecx, dword [esp + 0x14]
push ebx
push eax
lea edx, [esi + 0xc0]
push ecx
push edx
mov ecx, esi
call fcn.0050efb0
push 1
push ebx
lea ecx, [esi + 0x340]
call fcn.004e9220
jmp 0x4a79ad
mov eax, dword [esi + 0x3f8]
not eax
test al, 1
jne case.0x4aa170.6
mov ebx, dword [esp + 0x4a8]
push 0
push 1
lea edi, [esi + 0x304]
push ebx
push 0
push edi
mov ecx, 0x6756e0
call fcn.0050e390
push ebx
push ebx
mov ecx, edi
call fcn.004e6d80
jmp 0x4a79ad
mov ecx, dword [esi + 0x3f8]
not ecx
test cl, 1
jne case.0x4aa170.6
mov edx, dword [esp + 0x4a8]
lea ebx, [esi + 0x2e8]
push edx
mov ecx, ebx
call fcn.004f4910
mov edi, eax
test edi, edi
je case.0x4aa170.6
push edi
lea eax, [esi + 0xc0]
push 2
push eax
mov ecx, esi
call fcn.0050e210
push 1
push edi
mov ecx, ebx
call fcn.004e9cc0
jmp 0x4a79ad
mov ecx, dword [esi + 0x3f8]
not ecx
test cl, 1
jne case.0x4aa170.6
mov edx, dword [esp + 0x4a8]
lea ebx, [esi + 0x35c]
push edx
mov ecx, ebx
call fcn.004f4910
mov edi, eax
test edi, edi
je case.0x4aa170.6
push edi
lea eax, [esi + 0xc0]
push 4
push eax
mov ecx, esi
call fcn.0050e210
push 1
push edi
mov ecx, ebx
call fcn.004e9e00
jmp 0x4a79ad
cmp dword [esi + 0x414], 1
je 0x4aa34d
cmp dword [esi + 0x410], edi
jne 0x4aa34d
mov ecx, esi
call fcn.004aad50
jmp case.0x4aa170.6
cmp ebx, 0x202007e
ja 0x4a8b05
je case.0x4a7755.33685520
lea eax, [ebx - 0x2020033]
cmp eax, 0x4a
ja case.0x4a8b26.33685638
xor ecx, ecx
mov cl, byte [eax + 0x4aa414]
jmp dword [ecx*4 + 0x4aa3dc]
mov ecx, esi
call fcn.004aaa20
jmp case.0x4aa170.6
cmp dword [esi + 0x710], 0x19dc775b
jne 0x4a7c41
push 0x66911c
mov ecx, 0x676088
call fcn.005bc5aa
mov edx, dword [0x67602c]
mov dword [0x67608c], 0x40
push edi
push 0x73
mov eax, dword [edx + 0x1c]
push 0x111
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
jmp case.0x4aa170.6
mov ecx, dword [esi + 0x3f8]
not ecx
test cl, 1
jne case.0x4aa170.6
mov edi, dword [0x66dae8]
lea eax, [esi + 0x340]
cmp ebx, 0x202000d
mov dword [esp + 0x10], eax
je 0x4a7c70
mov edi, dword [0x66daf0]
mov edx, dword [0x6707bc]
mov dword [esp + 0x14], edx
lea eax, [esp + 0x14]
lea ecx, [esp + 0x10]
push eax
push edi
push 0
push ecx
push 1
mov byte [esp + 0x4ac], 1
call fcn.004e81d0
add esp, 0x14
test eax, eax
jne 0x4a7ca7
push edi
lea ecx, [esp + 0x18]
call fcn.005bc5aa
push 0x54
call fcn.005bd3d9
mov edi, eax
add esp, 4
mov dword [esp + 0x1c], edi
test edi, edi
je 0x4a7d13
mov edx, dword [0x6707bc]
lea ebp, [esi + 0xc0]
mov dword [edi], edx
mov eax, dword [0x6707bc]
mov dword [edi + 4], eax
lea ecx, [edi + 0xc]
push ebp
mov byte [esp + 0x49c], 4
call fcn.0040ea40
mov dword [edi + 0xc], 0x5f7bac
lea ecx, [edi + 0x2c]
mov byte [esp + 0x498], 5
call fcn.004918b0
xor eax, eax
mov dword [edi + 0x50], ebp
mov dword [edi + 0x40], eax
mov dword [edi + 0x44], eax
mov dword [edi + 0x4c], eax
mov dword [edi + 0x48], eax
mov dword [edi + 8], eax
mov dword [esp + 0x18], edi
jmp 0x4a7d1b
mov dword [esp + 0x18], 0
mov edi, dword [esp + 0x18]
lea ecx, [esp + 0x14]
push ecx
mov ecx, edi
mov byte [esp + 0x49c], 1
call fcn.005bc55a
lea ecx, [esp + 0x54]
call fcn.004918b0
lea ebp, [esi + 0xc0]
mov dword [esp + 0x4c], 0x5f79ac
mov dword [esp + 0x50], ebp
cmp ebx, 0x202006a
mov byte [esp + 0x498], 6
jne 0x4a7d78
mov dword [edi + 0x44], 0xffffffff
mov edx, dword [esp + 0x4c]
push 0x40000000
push edi
lea ecx, [esp + 0x54]
call dword [edx + 0x10]
jmp 0x4a7d85
push 0
push edi
lea ecx, [esp + 0x54]
call dword [0x5f79bc]
mov dword [esp + 0x80], eax
mov eax, dword [esi + 0x358]
push 1
lea ecx, [esp + 0x50]
push 0
push ecx
shr eax, 3
push eax
push 0x131
mov ecx, esi
call fcn.0050f120
mov eax, dword [esi + 0x358]
push 1
lea edx, [esp + 0x50]
push 0
shr eax, 3
push edx
push eax
lea ecx, [esi + 0x340]
call fcn.004f4a50
lea ecx, [esp + 0x54]
call fcn.00491ab0
cmp ebx, 0x202006a
jne 0x4a7f4e
xor ebx, ebx
mov dword [esp + 0x1c], ebx
push 0xd4
call fcn.005bd3d9
mov edi, eax
add esp, 4
mov dword [esp + 0x20], edi
test edi, edi
je 0x4a7ec5
mov eax, dword [0x6707bc]
mov dword [edi], eax
mov ecx, dword [0x6707bc]
mov dword [edi + 4], ecx
mov edx, dword [0x6707bc]
mov dword [edi + 8], edx
lea ebx, [edi + 0x18]
push ebp
mov ecx, ebx
mov byte [esp + 0x49c], 0xa
call fcn.0040ea40
mov dword [ebx], 0x5f7bac
push ebp
lea ecx, [edi + 0x38]
mov byte [esp + 0x49c], 0xb
call fcn.0040ec70
lea ecx, [edi + 0x58]
mov byte [esp + 0x498], 0xc
call fcn.004918b0
lea ecx, [edi + 0x6c]
mov byte [esp + 0x498], 0xd
call fcn.004918b0
lea ecx, [edi + 0x80]
mov byte [esp + 0x498], 0xe
call fcn.004918b0
lea ecx, [edi + 0x94]
mov byte [esp + 0x498], 0xf
call fcn.004918b0
lea ecx, [edi + 0xa8]
mov byte [esp + 0x498], 0x10
call fcn.004918b0
lea ecx, [edi + 0xbc]
mov byte [esp + 0x498], 0x11
call fcn.004918b0
mov ebx, dword [esp + 0x1c]
xor eax, eax
mov dword [edi + 0x10], eax
mov dword [edi + 0x14], eax
mov dword [edi + 0xc], eax
mov dword [edi + 0xd0], ebp
jmp 0x4a7ec7
xor edi, edi
mov eax, dword [0x66da44]
mov byte [esp + 0x498], 6
test ebx, ebx
je 0x4a7edd
mov eax, dword [0x66da48]
push eax
mov ecx, edi
call fcn.005bc5aa
test ebx, ebx
mov eax, 0x6690ec
je 0x4a7ef3
mov eax, 0x6690bc
push eax
lea ecx, [edi + 8]
call fcn.005bc5aa
mov eax, dword [esp + 0x80]
push 0
push 0
mov ecx, edi
mov dword [edi + 0xc], eax
call fcn.004ee660
mov edx, dword [esi + 0x324]
lea ecx, [esi + 0x324]
push 0
push edi
call dword [edx + 0x10]
mov edi, eax
mov eax, dword [esp + 0x18]
push edi
lea ecx, [eax + 0x2c]
call fcn.00491be0
push edi
push 0
push ebp
mov ecx, 0x6756e0
call fcn.0050e0e0
inc ebx
cmp ebx, 2
mov dword [esp + 0x1c], ebx
jl 0x4a7de4
mov ecx, esi
call fcn.00469ad0
mov ecx, dword [esp + 0x18]
push ecx
push 1
mov ecx, esi
call fcn.00409c10
test eax, eax
je 0x4a7f8d
lea ecx, [esp + 0x24]
mov dword [esp + 0x34], 0
mov edx, dword [eax]
push ecx
mov ecx, eax
call dword [edx + 0xd0]
lea edx, [esp + 0x24]
mov ecx, 0x676258
push edx
call fcn.0050be10
mov dword [esp + 0x4c], 0x5f79ac
lea ecx, [esp + 0x4c]
mov byte [esp + 0x498], 0x12
call fcn.004e9470
mov dword [esp + 0x4c], 0x5f7a04
lea ecx, [esp + 0x54]
mov byte [esp + 0x498], 0x13
call fcn.00491ab0
lea ecx, [esp + 0x54]
mov byte [esp + 0x498], 1
mov dword [esp + 0x54], 0x5f7940
call fcn.00491ab0
lea ecx, [esp + 0x14]
mov byte [esp + 0x498], 0
call fcn.005bc421
jmp case.0x4aa170.6
mov eax, dword [esp + 0x4a8]
push edi
lea ecx, [esi + 0xc0]
push eax
push ecx
mov ecx, esi
call fcn.00513fc0
jmp case.0x4aa170.6
mov edx, dword [esp + 0x4a8]
push 1
lea eax, [esi + 0xc0]
push edx
push eax
mov ecx, esi
call fcn.00514390
mov ecx, dword [esp + 0x4ac]
cmp ecx, edi
je case.0x4aa170.6
mov dword [ecx], eax
jmp case.0x4aa170.6
mov ecx, dword [esp + 0x4a8]
push ecx
mov ecx, esi
call fcn.00514560
jmp case.0x4aa170.6
mov edx, dword [esi + 0x3f8]
not edx
test dl, 1
je 0x4a8067
mov eax, dword [esp + 0x4ac]
mov dword [eax], edi
jmp case.0x4aa170.6
mov ecx, dword [esp + 0x4ac]
mov ebp, dword [esp + 0x4a8]
xor edi, edi
mov dword [ecx], 0
mov eax, dword [ebp + 8]
test eax, eax
mov dword [esp + 0x10], eax
jle case.0x4aa170.6
lea edx, [esp + 0x84]
push edi
push edx
mov ecx, ebp
call fcn.00449790
mov eax, dword [eax]
push 0
push eax
lea eax, [esi + 0xc0]
push eax
mov ecx, esi
mov byte [esp + 0x4a4], 0x14
call fcn.005124f0
cmp eax, 0xffffffff
lea ecx, [esp + 0x84]
setne bl
mov byte [esp + 0x498], 0
call fcn.005bc421
test bl, bl
je 0x4a80e2
mov eax, dword [esp + 0x4ac]
mov dword [eax], 1
mov eax, dword [esp + 0x10]
inc edi
cmp edi, eax
jl 0x4a808c
jmp case.0x4aa170.6
lea ebx, [esi + 0xc0]
mov ecx, ebx
call fcn.00467110
test eax, eax
jne 0x4a8137
push 0x669078
mov ecx, 0x676088
call fcn.005bc5aa
mov dword [0x67608c], 0x40
push edi
mov ecx, dword [0x67602c]
push 0x73
push 0x111
mov edx, dword [ecx + 0x1c]
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
jmp case.0x4aa170.6
cmp dword [esi + 0x710], 0x19dc775b
jne 0x4a8178
push 0x669058
mov ecx, 0x676088
call fcn.005bc5aa
mov eax, dword [0x67602c]
mov dword [0x67608c], 0x40
push edi
push 0x73
mov ecx, dword [eax + 0x1c]
push 0x111
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
jmp case.0x4aa170.6
mov edx, dword [esi + 0x3f8]
not edx
test dl, 1
jne case.0x4aa170.6
mov ecx, dword [esi + 0x94c]
call fcn.005bd856
push 0xffffffffffffffff
push ebx
mov ecx, esi
call fcn.0050ea70
push 0
push 0
push 0
push 5
mov ecx, esi
mov edi, eax
call fcn.004097e0
mov ecx, esi
call fcn.00469ad0
push 0xffffffffffffffff
push 0
push 0
push 0
push 0xffffffffffffffff
push edi
push 5
mov ecx, esi
call fcn.00403b60
test eax, eax
je case.0x4aa170.6
lea ecx, [esp + 0x24]
mov dword [esp + 0x34], 0
mov edx, dword [eax]
push ecx
mov ecx, eax
call dword [edx + 0xd0]
lea edx, [esp + 0x24]
mov ecx, 0x676258
push edx
call fcn.0050be10
jmp case.0x4aa170.6
mov eax, dword [esi + 0x3f8]
not eax
test al, 1
jne case.0x4aa170.6
mov edi, dword [esp + 0x4a8]
lea ebp, [esi + 0x378]
push edi
mov ecx, ebp
call fcn.004f4910
mov ebx, eax
test ebx, ebx
je case.0x4aa170.6
lea ecx, [esp + 0x1c]
push ecx
push edi
mov ecx, ebp
call fcn.004f48d0
cmp eax, 1
jne case.0x4aa170.6
mov eax, dword [esi + 0x458]
mov edx, 0
dec eax
js 0x4a8299
mov edi, dword [esi + 0x454]
mov ebp, dword [esp + 0x1c]
mov ecx, dword [edi]
cmp dword [ecx + 0x3c], 5
jne 0x4a8267
cmp dword [ecx + 0x4c], ebp
je 0x4a8271
inc edx
add edi, 4
cmp edx, eax
jle 0x4a825a
jmp 0x4a8299
cmp edx, eax
jg 0x4a8299
mov dword [esp + 0x34], 0
mov edx, dword [ecx]
lea eax, [esp + 0x24]
push eax
call dword [edx + 0xd0]
lea ecx, [esp + 0x24]
push ecx
mov ecx, 0x676258
call fcn.0050be10
mov edx, dword [esp + 0x1c]
mov ecx, esi
push edx
push 5
call fcn.00409950
push ebx
lea eax, [esi + 0xc0]
push 5
push eax
mov ecx, esi
call fcn.0050e210
push 1
push ebx
lea ecx, [esi + 0x378]
call fcn.004e9e60
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.004097e0
mov ecx, esi
call fcn.00469ad0
mov ecx, esi
call fcn.0046da10
jmp case.0x4aa170.6
cmp dword [esi + 0x414], 1
je 0x4aa34d
cmp dword [esi + 0x410], edi
jne 0x4aa34d
mov ecx, esi
call fcn.004aad70
jmp case.0x4aa170.6
mov ecx, dword [0x6707bc]
mov dword [esp + 0x14], ecx
lea edx, [esp + 0x14]
push edi
mov bl, 0x15
push edx
push edi
mov ecx, esi
mov byte [esp + 0x4a4], bl
call fcn.0043f740
test eax, eax
je 0x4a8a4b
lea ecx, [esp + 0x88]
call fcn.00456540
lea ecx, [esp + 0xc4]
call fcn.0040ee50
lea ecx, [esp + 0x11c]
mov byte [esp + 0x498], 0x16
call fcn.005bae68
lea ecx, [esp + 0x130]
mov byte [esp + 0x498], 0x17
call fcn.005bb2c6
lea ecx, [esp + 0x144]
mov byte [esp + 0x498], 0x18
call fcn.004918b0
mov ebp, 0x5f7a80
mov dword [esp + 0x144], ebp
lea ecx, [esp + 0x158]
mov byte [esp + 0x498], 0x19
call fcn.005bb2c6
lea ecx, [esp + 0x16c]
mov byte [esp + 0x498], 0x1a
call fcn.005bb2c6
lea ecx, [esp + 0x180]
mov byte [esp + 0x498], 0x1b
call fcn.005bae68
lea ecx, [esp + 0x1a8]
mov byte [esp + 0x498], 0x1c
call fcn.004918b0
mov eax, dword [0x6707bc]
mov dword [esp + 0x1bc], eax
mov dword [esp + 0x1c0], eax
mov dword [esp + 0x1c4], eax
mov dword [esp + 0x1c8], eax
lea ecx, [esp + 0x1d0]
mov byte [esp + 0x498], 0x21
call fcn.005bb2c6
lea ecx, [esp + 0x1e8]
mov byte [esp + 0x498], 0x22
call fcn.005bae68
lea ecx, [esp + 0x1fc]
mov byte [esp + 0x498], 0x23
call fcn.005bae68
lea ecx, [esp + 0x214]
mov byte [esp + 0x498], 0x24
call fcn.005bae68
lea ecx, [esp + 0x228]
mov byte [esp + 0x498], 0x25
call fcn.004918b0
mov dword [esp + 0x228], ebp
lea ecx, [esp + 0x23c]
mov byte [esp + 0x498], 0x26
call fcn.0040f670
lea ecx, [esp + 0x250]
mov byte [esp + 0x498], 0x27
call fcn.005bae68
lea ecx, [esp + 0x264]
mov byte [esp + 0x498], 0x28
call fcn.004918b0
lea ecx, [esp + 0x27c]
mov byte [esp + 0x498], 0x29
call fcn.005bb2c6
push edi
lea ecx, [esp + 0x294]
mov byte [esp + 0x49c], 0x2a
call fcn.0040ea10
push edi
lea ecx, [esp + 0x2b4]
mov byte [esp + 0x49c], 0x2b
call fcn.0040ed60
push edi
lea ecx, [esp + 0x2d0]
mov byte [esp + 0x49c], 0x2c
call fcn.0040ec70
push edi
lea ecx, [esp + 0x2f0]
mov byte [esp + 0x49c], 0x2d
call fcn.0040edc0
push edi
lea ecx, [esp + 0x30c]
mov byte [esp + 0x49c], 0x2e
call fcn.0040ed90
push edi
lea ecx, [esp + 0x328]
mov byte [esp + 0x49c], 0x2f
call fcn.0040edf0
push edi
lea ecx, [esp + 0x344]
mov byte [esp + 0x49c], 0x30
call fcn.0040eb30
push edi
lea ecx, [esp + 0x360]
mov byte [esp + 0x49c], 0x31
call fcn.0040eb90
lea ecx, [esp + 0x37c]
mov byte [esp + 0x498], 0x32
call fcn.0040ee20
mov eax, dword [0x6707bc]
mov dword [esp + 0x3c4], eax
mov dword [esp + 0x3c8], eax
mov dword [esp + 0x3cc], eax
mov dword [esp + 0x3d0], eax
lea eax, [esp + 0x198]
mov byte [esp + 0x498], 0x37
push eax
mov dword [esp + 0x27c], 0xffff
mov dword [esp + 0x3c4], edi
mov dword [esp + 0x214], edi
mov dword [esp + 0x198], edi
mov dword [esp + 0x1d0], edi
call dword [sym.imp.ole32.dll_CoCreateGuid]
push 5
push edi
lea ecx, [esp + 0x124]
mov dword [esp + 0x3e4], edi
mov dword [esp + 0x3e0], edi
mov dword [esp + 0x3e8], edi
mov dword [esp + 0x3ec], edi
mov dword [esp + 0x3f0], edi
mov dword [esp + 0x3f8], edi
mov dword [esp + 0x3f4], edi
call fcn.005baefb
push 5
push edi
lea ecx, [esp + 0x138]
call fcn.005bb4dc
push 5
push edi
lea ecx, [esp + 0x160]
call fcn.005bb4dc
push 5
push edi
lea ecx, [esp + 0x174]
call fcn.005bb4dc
push 5
push edi
lea ecx, [esp + 0x188]
call fcn.005baefb
lea eax, [esp + 0x88]
lea ecx, [esp + 0x88]
lea edx, [esp + 0x88]
mov dword [esp + 0x344], eax
mov dword [esp + 0x328], ecx
mov dword [esp + 0x378], edx
lea eax, [esp + 0x88]
lea ecx, [esp + 0x88]
lea edx, [esp + 0x88]
mov dword [esp + 0x2e8], eax
mov dword [esp + 0x2f0], ecx
mov dword [esp + 0x30c], edx
lea eax, [esp + 0x398]
lea ecx, [esp + 0x88]
lea edx, [esp + 0x88]
push 0x28
push eax
mov dword [esp + 0x2bc], ecx
mov dword [esp + 0x2b4], edx
call fcn.004927e0
add esp, 8
mov ecx, dword [esp + 0x14]
push edi
push edi
push 1
push edi
push edi
push ecx
lea ecx, [esp + 0xa0]
mov byte [esp + 0x4b0], 0x38
call fcn.00457490
test eax, eax
je 0x4a870d
lea edx, [esp + 0x88]
push edi
push edx
mov ecx, esi
call fcn.004aa4d0
lea ecx, [esp + 0x88]
mov byte [esp + 0x498], 0x5a
call fcn.00460ce0
lea ecx, [esp + 0x3d0]
mov byte [esp + 0x498], 0x59
call fcn.005bc421
lea ecx, [esp + 0x3cc]
mov byte [esp + 0x498], 0x58
call fcn.005bc421
lea ecx, [esp + 0x3c8]
mov byte [esp + 0x498], 0x57
call fcn.005bc421
lea ecx, [esp + 0x3c4]
mov byte [esp + 0x498], 0x56
call fcn.005bc421
lea eax, [esp + 0x37c]
mov dword [esp + 0x37c], 0x5f7a7c
mov dword [esp + 0x20], eax
lea ecx, [esp + 0x384]
mov byte [esp + 0x498], 0x5b
mov dword [esp + 0x380], edi
call fcn.00491ab0
mov esi, 0x5f7940
lea ecx, [esp + 0x384]
mov byte [esp + 0x498], 0x55
mov dword [esp + 0x384], esi
call fcn.00491ab0
lea ecx, [esp + 0x35c]
mov byte [esp + 0x498], 0x54
call fcn.00402470
lea ecx, [esp + 0x340]
mov dword [esp + 0x340], 0x5f7a30
mov dword [esp + 0x20], ecx
lea ecx, [esp + 0x340]
mov byte [esp + 0x498], 0x5c
call fcn.004f5210
lea ecx, [esp + 0x340]
mov byte [esp + 0x498], 0x53
call fcn.00402530
lea ecx, [esp + 0x324]
mov byte [esp + 0x498], 0x52
call fcn.00402ba0
lea ecx, [esp + 0x308]
mov byte [esp + 0x498], 0x51
call fcn.00402940
lea ecx, [esp + 0x2ec]
mov byte [esp + 0x498], 0x50
call fcn.00402a70
lea ecx, [esp + 0x2cc]
mov byte [esp + 0x498], 0x4f
call fcn.00402470
lea ecx, [esp + 0x2b0]
mov byte [esp + 0x498], 0x4e
call fcn.00402810
lea ecx, [esp + 0x290]
mov byte [esp + 0x498], 0x4d
call fcn.00402470
lea ecx, [esp + 0x27c]
mov byte [esp + 0x498], 0x4c
call fcn.005bb2f9
lea ecx, [esp + 0x264]
mov byte [esp + 0x498], 0x4b
mov dword [esp + 0x264], esi
call fcn.00491ab0
lea ecx, [esp + 0x250]
mov byte [esp + 0x498], 0x4a
call fcn.005bae9b
lea ecx, [esp + 0x23c]
mov byte [esp + 0x498], 0x49
call fcn.00409d50
lea ecx, [esp + 0x228]
mov byte [esp + 0x498], 0x48
mov dword [esp + 0x228], esi
call fcn.00491ab0
lea ecx, [esp + 0x214]
mov byte [esp + 0x498], 0x47
call fcn.005bae9b
lea ecx, [esp + 0x1fc]
mov byte [esp + 0x498], 0x46
call fcn.005bae9b
lea ecx, [esp + 0x1e8]
mov byte [esp + 0x498], 0x45
call fcn.005bae9b
lea ecx, [esp + 0x1d0]
mov byte [esp + 0x498], 0x44
call fcn.005bb2f9
lea ecx, [esp + 0x1c8]
mov byte [esp + 0x498], 0x43
call fcn.005bc421
lea ecx, [esp + 0x1c4]
mov byte [esp + 0x498], 0x42
call fcn.005bc421
lea ecx, [esp + 0x1c0]
mov byte [esp + 0x498], 0x41
call fcn.005bc421
lea ecx, [esp + 0x1bc]
mov byte [esp + 0x498], 0x40
call fcn.005bc421
lea ecx, [esp + 0x1a8]
mov byte [esp + 0x498], 0x3f
mov dword [esp + 0x1a8], esi
call fcn.00491ab0
lea ecx, [esp + 0x180]
mov byte [esp + 0x498], 0x3e
call fcn.005bae9b
lea ecx, [esp + 0x16c]
mov byte [esp + 0x498], 0x3d
call fcn.005bb2f9
lea ecx, [esp + 0x158]
mov byte [esp + 0x498], 0x3c
call fcn.005bb2f9
lea ecx, [esp + 0x144]
mov byte [esp + 0x498], 0x3b
mov dword [esp + 0x144], esi
call fcn.00491ab0
lea ecx, [esp + 0x130]
mov byte [esp + 0x498], 0x3a
call fcn.005bb2f9
lea ecx, [esp + 0x11c]
mov byte [esp + 0x498], 0x39
call fcn.005bae9b
lea ecx, [esp + 0xc4]
mov byte [esp + 0x498], bl
call fcn.00402d50
lea ecx, [esp + 0x14]
mov byte [esp + 0x498], 0
call fcn.005bc421
jmp case.0x4aa170.6
mov edx, dword [esp + 0x4ac]
mov eax, dword [esp + 0x4a8]
push edx
push eax
mov ecx, esi
call fcn.004aa4d0
jmp case.0x4aa170.6
push edi
push edi
push edi
push 0x12
mov ecx, esi
call fcn.0043caa0
jmp case.0x4aa170.6
mov ecx, dword [esp + 0x4ac]
push ecx
lea ecx, [esi + 0xc0]
call fcn.00430920
mov edx, dword [esp + 0x4a8]
mov dword [edx], eax
jmp case.0x4aa170.6
mov eax, dword [esi + 0x3f8]
not eax
test al, 1
jne case.0x4aa170.6
xor ecx, ecx
cmp ebx, 0x202007e
sete cl
push ecx
lea edx, [esi + 0xc0]
push 0xffffffffffffffff
push edx
mov ecx, esi
call fcn.0050ec40
push 0
push 0
push 0
push 6
mov ecx, esi
mov edi, eax
call fcn.004097e0
push 0xffffffffffffffff
push 0
push 0
push 0
push 0xffffffffffffffff
push edi
push 6
mov ecx, esi
call fcn.00403b60
jmp case.0x4aa170.6
cmp ebx, 0x2020088
ja 0x4a9e28
je 0x4a9d64
add ebx, 0xfdfdff7f
cmp ebx, 6
ja case.0x4a8b26.33685638
jmp dword [ebx*4 + 0x4aa460]
mov eax, dword [esi + 0x3f8]
not eax
test al, 1
je 0x4a8b47
mov ecx, dword [esp + 0x4ac]
mov dword [ecx], edi
jmp case.0x4aa170.6
mov edx, dword [esp + 0x4a8]
push edi
lea eax, [esi + 0xc0]
push edx
push eax
mov ecx, esi
call fcn.005124f0
mov edx, dword [esp + 0x4ac]
xor ecx, ecx
cmp eax, 0xffffffff
setne cl
mov dword [edx], ecx
jmp case.0x4aa170.6
lea ecx, [esp + 0x88]
call fcn.00456540
lea ecx, [esp + 0xc4]
call fcn.0040ee50
lea ecx, [esp + 0x11c]
mov byte [esp + 0x498], 0x5d
call fcn.005bae68
lea ecx, [esp + 0x130]
mov byte [esp + 0x498], 0x5e
call fcn.005bb2c6
lea ecx, [esp + 0x144]
mov byte [esp + 0x498], 0x5f
call fcn.004918b0
mov dword [esp + 0x144], 0x5f7a80
lea ecx, [esp + 0x158]
mov byte [esp + 0x498], 0x60
call fcn.005bb2c6
lea ecx, [esp + 0x16c]
mov byte [esp + 0x498], 0x61
call fcn.005bb2c6
lea ecx, [esp + 0x180]
mov byte [esp + 0x498], 0x62
call fcn.005bae68
lea ecx, [esp + 0x1a8]
mov byte [esp + 0x498], 0x63
call fcn.004918b0
mov eax, dword [0x6707bc]
mov dword [esp + 0x1bc], eax
mov dword [esp + 0x1c0], eax
mov dword [esp + 0x1c4], eax
mov dword [esp + 0x1c8], eax
lea ecx, [esp + 0x1d0]
mov byte [esp + 0x498], 0x68
call fcn.005bb2c6
lea ecx, [esp + 0x1e8]
mov byte [esp + 0x498], 0x69
call fcn.005bae68
lea ecx, [esp + 0x1fc]
mov byte [esp + 0x498], 0x6a
call fcn.005bae68
lea ecx, [esp + 0x214]
mov byte [esp + 0x498], 0x6b
call fcn.005bae68
lea ecx, [esp + 0x228]
mov byte [esp + 0x498], 0x6c
call fcn.0040fb10
lea ecx, [esp + 0x23c]
mov byte [esp + 0x498], 0x6d
call fcn.0040f670
lea ecx, [esp + 0x250]
mov byte [esp + 0x498], 0x6e
call fcn.005bae68
lea ecx, [esp + 0x264]
mov byte [esp + 0x498], 0x6f
call fcn.004918b0
lea ecx, [esp + 0x27c]
mov byte [esp + 0x498], 0x70
call fcn.005bb2c6
mov byte [esp + 0x498], 0x71
push edi
lea ecx, [esp + 0x294]
call fcn.0040ea10
push edi
lea ecx, [esp + 0x2b4]
mov byte [esp + 0x49c], 0x72
call fcn.0040ed60
push edi
lea ecx, [esp + 0x2d0]
mov byte [esp + 0x49c], 0x73
call fcn.0040ec70
push edi
lea ecx, [esp + 0x2f0]
mov byte [esp + 0x49c], 0x74
call fcn.0040edc0
push edi
lea ecx, [esp + 0x30c]
mov byte [esp + 0x49c], 0x75
call fcn.0040ed90
push edi
lea ecx, [esp + 0x328]
mov byte [esp + 0x49c], 0x76
call fcn.0040edf0
push edi
lea ecx, [esp + 0x344]
mov byte [esp + 0x49c], 0x77
call fcn.0040eb30
push edi
lea ecx, [esp + 0x360]
mov byte [esp + 0x49c], 0x78
call fcn.0040eb90
lea ecx, [esp + 0x37c]
mov byte [esp + 0x498], 0x79
call fcn.0040ee20
mov eax, dword [0x6707bc]
mov dword [esp + 0x3c4], eax
mov dword [esp + 0x3c8], eax
mov dword [esp + 0x3cc], eax
mov dword [esp + 0x3d0], eax
lea eax, [esp + 0x198]
mov byte [esp + 0x498], 0x7e
push eax
mov dword [esp + 0x27c], 0xffff
mov dword [esp + 0x3c4], edi
mov dword [esp + 0x214], edi
mov dword [esp + 0x198], edi
mov dword [esp + 0x1d0], edi
call dword [sym.imp.ole32.dll_CoCreateGuid]
push 5
push edi
lea ecx, [esp + 0x124]
mov dword [esp + 0x3e4], edi
mov dword [esp + 0x3e0], edi
mov dword [esp + 0x3e8], edi
mov dword [esp + 0x3ec], edi
mov dword [esp + 0x3f0], edi
mov dword [esp + 0x3f8], edi
mov dword [esp + 0x3f4], edi
call fcn.005baefb
push 5
push edi
lea ecx, [esp + 0x138]
call fcn.005bb4dc
push 5
push edi
lea ecx, [esp + 0x160]
call fcn.005bb4dc
push 5
push edi
lea ecx, [esp + 0x174]
call fcn.005bb4dc
push 5
push edi
lea ecx, [esp + 0x188]
call fcn.005baefb
lea eax, [esp + 0x88]
lea ecx, [esp + 0x88]
lea edx, [esp + 0x88]
mov dword [esp + 0x344], eax
mov dword [esp + 0x328], ecx
mov dword [esp + 0x378], edx
lea eax, [esp + 0x88]
lea ecx, [esp + 0x88]
lea edx, [esp + 0x88]
mov dword [esp + 0x2e8], eax
mov dword [esp + 0x2f0], ecx
mov dword [esp + 0x30c], edx
lea eax, [esp + 0x398]
lea ecx, [esp + 0x88]
lea edx, [esp + 0x88]
push 0x28
push eax
mov dword [esp + 0x2bc], ecx
mov dword [esp + 0x2b4], edx
call fcn.004927e0
add esp, 8
mov ecx, dword [esp + 0x4a8]
push edi
push edi
push 1
push edi
push edi
push ecx
lea ecx, [esp + 0xa0]
mov byte [esp + 0x4b0], 0x7f
call fcn.00457490
test eax, eax
je 0x4a8f46
lea edx, [esp + 0x88]
push edi
push edx
mov ecx, esi
call fcn.004aa4d0
lea ecx, [esp + 0x88]
mov byte [esp + 0x498], 0xa1
call fcn.00460ce0
lea ecx, [esp + 0x3d0]
mov byte [esp + 0x498], 0xa0
call fcn.005bc421
lea ecx, [esp + 0x3cc]
mov byte [esp + 0x498], 0x9f
call fcn.005bc421
lea ecx, [esp + 0x3c8]
mov byte [esp + 0x498], 0x9e
call fcn.005bc421
lea ecx, [esp + 0x3c4]
mov byte [esp + 0x498], 0x9d
call fcn.005bc421
lea eax, [esp + 0x37c]
mov dword [esp + 0x37c], 0x5f7a7c
mov dword [esp + 0x20], eax
lea ecx, [esp + 0x384]
mov byte [esp + 0x498], 0xa2
mov dword [esp + 0x380], edi
call fcn.00491ab0
mov esi, 0x5f7940
lea ecx, [esp + 0x384]
mov byte [esp + 0x498], 0x9c
mov dword [esp + 0x384], esi
call fcn.00491ab0
lea ecx, [esp + 0x35c]
mov byte [esp + 0x498], 0x9b
call fcn.00402470
lea ecx, [esp + 0x340]
mov byte [esp + 0x498], 0x9a
call fcn.00402620
lea ecx, [esp + 0x324]
mov byte [esp + 0x498], 0x99
call fcn.00402ba0
lea ecx, [esp + 0x308]
mov byte [esp + 0x498], 0x98
call fcn.00402940
lea ecx, [esp + 0x2ec]
mov byte [esp + 0x498], 0x97
call fcn.00402a70
lea ecx, [esp + 0x2cc]
mov byte [esp + 0x498], 0x96
call fcn.00402470
mov byte [esp + 0x498], 0x95
lea ecx, [esp + 0x2b0]
call fcn.00402810
lea ecx, [esp + 0x290]
mov byte [esp + 0x498], 0x94
call fcn.00402470
lea ecx, [esp + 0x27c]
mov byte [esp + 0x498], 0x93
call fcn.005bb2f9
lea ecx, [esp + 0x264]
mov byte [esp + 0x498], 0x92
mov dword [esp + 0x264], esi
call fcn.00491ab0
lea ecx, [esp + 0x250]
mov byte [esp + 0x498], 0x91
call fcn.005bae9b
lea ecx, [esp + 0x23c]
mov byte [esp + 0x498], 0x90
call fcn.00409d50
lea ecx, [esp + 0x228]
mov byte [esp + 0x498], 0x8f
mov dword [esp + 0x228], esi
call fcn.00491ab0
lea ecx, [esp + 0x214]
mov byte [esp + 0x498], 0x8e
call fcn.005bae9b
lea ecx, [esp + 0x1fc]
mov byte [esp + 0x498], 0x8d
call fcn.005bae9b
lea ecx, [esp + 0x1e8]
mov byte [esp + 0x498], 0x8c
call fcn.005bae9b
lea ecx, [esp + 0x1d0]
mov byte [esp + 0x498], 0x8b
call fcn.005bb2f9
lea ecx, [esp + 0x1c8]
mov byte [esp + 0x498], 0x8a
call fcn.005bc421
lea ecx, [esp + 0x1c4]
mov byte [esp + 0x498], 0x89
call fcn.005bc421
lea ecx, [esp + 0x1c0]
mov byte [esp + 0x498], 0x88
call fcn.005bc421
lea ecx, [esp + 0x1bc]
mov byte [esp + 0x498], 0x87
call fcn.005bc421
lea ecx, [esp + 0x1a8]
mov byte [esp + 0x498], 0x86
mov dword [esp + 0x1a8], esi
call fcn.00491ab0
lea ecx, [esp + 0x180]
mov byte [esp + 0x498], 0x85
call fcn.005bae9b
lea ecx, [esp + 0x16c]
mov byte [esp + 0x498], 0x84
call fcn.005bb2f9
lea ecx, [esp + 0x158]
mov byte [esp + 0x498], 0x83
call fcn.005bb2f9
lea ecx, [esp + 0x144]
mov byte [esp + 0x498], 0x82
mov dword [esp + 0x144], esi
call fcn.00491ab0
lea ecx, [esp + 0x130]
mov byte [esp + 0x498], 0x81
call fcn.005bb2f9
lea ecx, [esp + 0x11c]
mov byte [esp + 0x498], 0x80
call fcn.005bae9b
lea ecx, [esp + 0xc4]
mov byte [esp + 0x498], 0
call fcn.00402d50
jmp case.0x4aa170.6
mov ecx, dword [esi + 0x3f8]
not ecx
test cl, 1
jne case.0x4aa170.6
mov eax, dword [esi + 0x94c]
push 0
add eax, 0x5f4
push 9
push 0x110a
mov edx, dword [eax + 0x1c]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
test eax, eax
je case.0x4aa170.6
mov ecx, dword [esi + 0x94c]
push eax
add ecx, 0x5f4
call fcn.005b9fc7
test eax, eax
je 0x4a92c1
mov ecx, eax
and ecx, 0xf0000000
cmp ecx, 0xf0000000
jne case.0x4aa170.6
and eax, 0xfffffff
mov ebp, 0
mov ebx, eax
mov dword [esp + 0x10], ebx
je 0x4a92ea
push ebp
push ebx
lea ecx, [esi + 0xc0]
call fcn.00462180
mov ebp, eax
test ebp, ebp
je case.0x4aa170.6
mov edx, dword [esi + 0x94c]
lea ecx, [esp + 0x3f4]
push edx
call fcn.00455e90
lea ecx, [esp + 0x3f4]
mov byte [esp + 0x498], 0xa3
call fcn.005bcf16
cmp eax, 1
je 0x4a9357
lea ecx, [esp + 0x48c]
mov byte [esp + 0x498], 0xa5
call fcn.005bc421
lea ecx, [esp + 0x450]
mov byte [esp + 0x498], 0xa4
call fcn.005d1625
lea ecx, [esp + 0x3f4]
mov byte [esp + 0x498], 0
call fcn.005bcb4c
jmp case.0x4aa170.6
push 0x24
call fcn.005bd3d9
mov edi, eax
add esp, 4
mov dword [esp + 0x20], edi
test edi, edi
je 0x4a939b
mov eax, dword [0x6707bc]
mov dword [edi + 0xc], eax
lea ebx, [edi + 0x10]
mov byte [esp + 0x498], 0xa7
mov ecx, ebx
call fcn.004918b0
xor eax, eax
mov dword [ebx], 0x5f7a80
mov ebx, dword [esp + 0x10]
mov dword [edi], eax
mov dword [edi + 8], eax
mov dword [edi + 4], eax
jmp 0x4a939d
xor edi, edi
mov eax, dword [esi + 0x204]
mov byte [esp + 0x498], 0xa3
cmp eax, 0xf0000000
jb 0x4a93bc
mov dword [esi + 0x204], 0
mov ecx, dword [esi + 0x204]
inc ecx
mov dword [esi + 0x204], ecx
mov eax, ecx
lea ecx, [esp + 0x48c]
mov dword [edi + 4], eax
push ecx
lea ecx, [edi + 0xc]
mov dword [edi + 8], ebx
call fcn.005bc55a
mov eax, dword [esi + 0x210]
lea ecx, [esi + 0x208]
push edi
push eax
call fcn.005bb38c
test ebp, ebp
je 0x4a9400
mov eax, dword [ebp]
or al, 2
mov dword [ebp], eax
lea ecx, [esp + 0x38]
call fcn.004918b0
mov eax, dword [0x67625c]
mov byte [esp + 0x498], 0xa8
cmp eax, 0xffffffff
je 0x4a94e4
lea edx, [esp + 0x38]
mov ecx, edi
push edx
call fcn.00461db0
test eax, eax
je 0x4a94e4
lea eax, [esp + 0x10]
push 2
push eax
mov ecx, 0x676278
mov dword [esp + 0x18], 0xde
call fcn.00492170
mov ecx, dword [esp + 0x48]
lea edx, [esp + 0x10]
add ecx, 0x10
push 4
mov dword [esp + 0x14], ecx
push edx
mov ecx, 0x676278
call fcn.00492170
lea eax, [esp + 0x10]
mov ebx, 1
push 4
push eax
mov ecx, 0x676278
mov dword [esp + 0x18], ebx
call fcn.00492170
lea ecx, [esp + 0x10]
push 4
push ecx
mov ecx, 0x676278
mov dword [esp + 0x18], ebx
call fcn.00492170
mov edx, dword [edi + 4]
lea eax, [esp + 0x10]
push 4
push eax
mov ecx, 0x676278
mov dword [esp + 0x18], edx
call fcn.00492170
mov ecx, dword [esp + 0x48]
lea edx, [esp + 0x10]
mov dword [esp + 0x10], ecx
push 4
push edx
mov ecx, 0x676278
call fcn.00492170
mov ecx, dword [esp + 0x48]
mov edi, dword [esp + 0x40]
mov eax, ecx
push ecx
neg eax
sbb eax, eax
mov ecx, 0x676278
and eax, edi
push eax
call fcn.00492170
mov ecx, esi
call fcn.00469ad0
lea ecx, [esp + 0x38]
mov byte [esp + 0x498], 0xa3
mov dword [esp + 0x38], 0x5f7940
call fcn.00491ab0
lea ecx, [esp + 0x48c]
mov byte [esp + 0x498], 0xaa
call fcn.005bc421
lea ecx, [esp + 0x450]
mov byte [esp + 0x498], 0xa9
call fcn.005d1625
lea ecx, [esp + 0x3f4]
mov byte [esp + 0x498], 0
call fcn.005bcb4c
jmp case.0x4aa170.6
mov eax, dword [esi + 0x3f8]
not eax
test al, 1
jne case.0x4aa170.6
mov eax, dword [esi + 0x94c]
push 0
add eax, 0x5f4
push 9
push 0x110a
mov ecx, dword [eax + 0x1c]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
test eax, eax
je case.0x4aa170.6
mov ecx, dword [esi + 0x94c]
push eax
add ecx, 0x5f4
call fcn.005b9fc7
mov edx, eax
and edx, 0xf0000000
cmp edx, 0xf0000000
jne case.0x4aa170.6
and eax, 0xfffffff
mov edi, eax
je case.0x4aa170.6
lea ecx, [esp + 0x68]
call fcn.004918b0
mov dword [esp + 0x68], 0x5f7a80
push edi
lea ecx, [esp + 0x6c]
mov byte [esp + 0x49c], 0xab
call fcn.00491be0
lea eax, [esp + 0x68]
lea ecx, [esi + 0xc0]
push eax
push edi
call fcn.004620f0
lea ecx, [esp + 0x38]
call fcn.004918b0
lea ecx, [esp + 0x4c]
mov byte [esp + 0x498], 0xac
call fcn.004918b0
mov ebx, dword [esi + 0x210]
xor ebp, ebp
dec ebx
mov byte [esp + 0x498], 0xad
test ebx, ebx
jl 0x4a96e7
mov eax, dword [esp + 0x78]
mov ecx, dword [esi + 0x20c]
test eax, eax
mov edi, dword [ecx + ebx*4]
mov ecx, dword [edi + 4]
je 0x4a96e0
mov edx, dword [esp + 0x70]
test edx, edx
je 0x4a96e0
shr eax, 2
push ecx
push eax
push edx
call fcn.004928c0
add esp, 0xc
cmp eax, 0xffffffff
je 0x4a96dc
lea edx, [esp + 0x4c]
mov ecx, edi
push edx
call fcn.00461db0
test eax, eax
je 0x4a96dc
mov eax, dword [edi + 4]
lea ecx, [esp + 0x38]
push eax
call fcn.00491be0
mov ecx, dword [esp + 0x5c]
push ecx
lea ecx, [esp + 0x3c]
call fcn.00491be0
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0x54]
mov eax, ecx
push ecx
neg eax
sbb eax, eax
lea ecx, [esp + 0x3c]
and eax, edx
push eax
call fcn.00492170
test edi, edi
mov dword [esp + 0x20], edi
je 0x4a96cd
lea ecx, [edi + 0x10]
mov byte [esp + 0x498], 0xae
mov dword [ecx], 0x5f7940
call fcn.00491ab0
lea ecx, [edi + 0xc]
mov byte [esp + 0x498], 0xad
call fcn.005bc421
push edi
call fcn.005bd402
add esp, 4
push 1
push ebx
lea ecx, [esi + 0x208]
call fcn.005bb445
inc ebp
mov eax, dword [esp + 0x78]
dec ebx
jns 0x4a9619
mov eax, dword [0x67625c]
mov edi, 0x5f7940
cmp eax, 0xffffffff
je 0x4a9775
lea edx, [esp + 0x10]
push 2
push edx
mov ecx, 0x676278
mov dword [esp + 0x18], 0xde
call fcn.00492170
mov eax, dword [esp + 0x48]
lea ecx, [esp + 0x10]
push 4
add eax, 8
push ecx
mov ecx, 0x676278
mov dword [esp + 0x18], eax
call fcn.00492170
lea edx, [esp + 0x10]
push 4
push edx
mov ecx, 0x676278
mov dword [esp + 0x18], 0
call fcn.00492170
lea eax, [esp + 0x10]
push 4
push eax
mov ecx, 0x676278
mov dword [esp + 0x18], ebp
call fcn.00492170
mov ecx, dword [esp + 0x48]
mov ebx, dword [esp + 0x40]
mov eax, ecx
push ecx
neg eax
sbb eax, eax
mov ecx, 0x676278
and eax, ebx
push eax
call fcn.00492170
test ebp, ebp
jle 0x4a9780
mov ecx, esi
call fcn.00469ad0
lea ecx, [esp + 0x4c]
mov byte [esp + 0x498], 0xac
mov dword [esp + 0x4c], edi
call fcn.00491ab0
lea ecx, [esp + 0x38]
mov byte [esp + 0x498], 0xab
mov dword [esp + 0x38], edi
call fcn.00491ab0
lea ecx, [esp + 0x68]
mov byte [esp + 0x498], 0
mov dword [esp + 0x68], edi
call fcn.00491ab0
jmp case.0x4aa170.6
mov ecx, dword [esi + 0x3f8]
not ecx
test cl, 1
jne case.0x4aa170.6
mov eax, dword [esi + 0x94c]
push 0
add eax, 0x5f4
push 9
push 0x110a
mov edx, dword [eax + 0x1c]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
test eax, eax
je case.0x4aa170.6
mov ecx, dword [esi + 0x94c]
push eax
add ecx, 0x5f4
call fcn.005b9fc7
mov ecx, eax
and ecx, 0xf0000000
cmp ecx, 0xf0000000
jne case.0x4aa170.6
and eax, 0xfffffff
je case.0x4aa170.6
push 0
push eax
lea ecx, [esi + 0xc0]
call fcn.00462180
mov edi, eax
test edi, edi
je case.0x4aa170.6
mov edx, dword [esi + 0x94c]
lea ecx, [esp + 0x3f4]
push edx
call fcn.00455e90
lea ebx, [edi + 0xc]
lea ecx, [esp + 0x48c]
push ebx
mov byte [esp + 0x49c], 0xaf
call fcn.005bc55a
lea ecx, [esp + 0x3f4]
call fcn.005bcf16
cmp eax, 1
jne 0x4a99e8
mov eax, dword [ebx]
push eax
mov eax, dword [esp + 0x490]
push eax
call fcn.0052d7b8
add esp, 8
test eax, eax
je 0x4a99e8
cmp dword [0x67625c], 0xffffffff
je 0x4a9991
lea ecx, [esp + 0x10]
push 2
push ecx
mov ecx, 0x676278
mov dword [esp + 0x18], 0xdf
call fcn.00492170
mov edx, dword [esp + 0x48c]
mov ebp, dword [ebx]
push edx
call fcn.00492830
mov edx, eax
push ebp
mov dword [esp + 0x18], edx
call fcn.00492830
mov ecx, dword [esp + 0x18]
add esp, 8
lea edx, [ecx + eax + 4]
lea eax, [esp + 0x10]
push 4
push eax
mov ecx, 0x676278
mov dword [esp + 0x18], edx
call fcn.00492170
mov ecx, dword [edi + 4]
lea edx, [esp + 0x10]
mov dword [esp + 0x10], ecx
push 4
push edx
mov ecx, 0x676278
call fcn.00492170
mov edi, dword [ebx]
push edi
call fcn.00492700
add esp, 4
cmp eax, 1
jne 0x4a993d
push 0x5fe67c
call fcn.00492830
add esp, 4
push eax
push 0x5fe67c
jmp 0x4a9948
push edi
call fcn.00492830
add esp, 4
push eax
push edi
mov ecx, 0x676278
call fcn.00492170
mov edi, dword [esp + 0x48c]
push edi
call fcn.00492700
add esp, 4
cmp eax, 1
jne 0x4a997c
push 0x5fe67c
call fcn.00492830
add esp, 4
push eax
push 0x5fe67c
jmp 0x4a9987
push edi
call fcn.00492830
add esp, 4
push eax
push edi
mov ecx, 0x676278
call fcn.00492170
lea eax, [esp + 0x48c]
mov ecx, ebx
push eax
call fcn.005bc55a
mov ecx, esi
call fcn.00469ad0
lea ecx, [esp + 0x48c]
mov byte [esp + 0x498], 0xb3
call fcn.005bc421
lea ecx, [esp + 0x450]
mov byte [esp + 0x498], 0xb2
call fcn.005d1625
lea ecx, [esp + 0x3f4]
mov byte [esp + 0x498], 0
call fcn.005bcb4c
jmp case.0x4aa170.6
lea ecx, [esp + 0x48c]
mov byte [esp + 0x498], 0xb1
call fcn.005bc421
lea ecx, [esp + 0x450]
mov byte [esp + 0x498], 0xb0
call fcn.005d1625
lea ecx, [esp + 0x3f4]
mov byte [esp + 0x498], 0
call fcn.005bcb4c
jmp case.0x4aa170.6
mov ecx, dword [esi + 0x3f8]
not ecx
test cl, 1
jne case.0x4aa170.6
mov eax, dword [esi + 0x210]
test eax, eax
je case.0x4aa170.6
mov edx, dword [esi + 0x94c]
lea ecx, [esp + 0x88]
push edx
call fcn.004870f0
mov eax, dword [esi + 0x94c]
push 0
add eax, 0x5f4
push 9
push 0x110a
mov byte [esp + 0x4a4], 0xb4
mov eax, dword [eax + 0x1c]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
test eax, eax
je 0x4a9aff
mov ecx, dword [esi + 0x94c]
push eax
add ecx, 0x5f4
call fcn.005b9fc7
mov ecx, eax
shr ecx, 0x1c
cmp ecx, 0xf
jne 0x4a9aaf
and eax, 0xfffffff
mov dword [esp + 0x24c], eax
jmp 0x4a9aff
cmp ecx, 2
jne 0x4a9ac1
mov dword [esp + 0x250], 0x5000000
jmp 0x4a9aff
cmp ecx, 3
jne 0x4a9ad3
mov dword [esp + 0x250], 0x1000000
jmp 0x4a9aff
cmp ecx, 4
jne 0x4a9ae5
mov dword [esp + 0x250], 0xa000000
jmp 0x4a9aff
sub ecx, 5
neg ecx
sbb ecx, ecx
and ecx, 0x7000000
add ecx, 0x2000000
mov dword [esp + 0x250], ecx
lea ecx, [esp + 0x88]
call fcn.005bcf16
cmp eax, 1
jne 0x4a9d4b
mov eax, dword [esp + 0x268]
test eax, eax
je 0x4a9d4b
cmp dword [0x67625c], 0xffffffff
je 0x4a9d16
lea ecx, [esp + 0x38]
call fcn.004918b0
lea ecx, [esp + 0x4c]
mov byte [esp + 0x498], 0xb5
call fcn.004918b0
lea ecx, [esp + 0x68]
mov byte [esp + 0x498], 0xb6
call fcn.004918b0
mov eax, dword [esi + 0x210]
xor ebx, ebx
xor ebp, ebp
xor edi, edi
test eax, eax
mov byte [esp + 0x498], 0xb7
mov dword [esp + 0x14], eax
jle 0x4a9bc1
mov ecx, dword [esi + 0x20c]
lea edx, [esp + 0x68]
push edx
mov ecx, dword [ecx + edi*4]
call fcn.00461db0
test eax, eax
je 0x4a9bb8
mov eax, dword [esp + 0x78]
lea ecx, [esp + 0x38]
push eax
call fcn.00491be0
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x70]
mov eax, ecx
push ecx
neg eax
sbb eax, eax
lea ecx, [esp + 0x3c]
and eax, edx
push eax
call fcn.00492170
inc ebx
mov eax, dword [esp + 0x14]
inc edi
cmp edi, eax
jl 0x4a9b77
mov eax, dword [esp + 0x25c]
xor edi, edi
test eax, eax
mov dword [esp + 0x14], eax
jle 0x4a9c1d
mov ecx, dword [esp + 0x258]
lea edx, [esp + 0x68]
push edx
mov ecx, dword [ecx + edi*4]
call fcn.00461db0
test eax, eax
je 0x4a9c14
mov eax, dword [esp + 0x78]
lea ecx, [esp + 0x4c]
push eax
call fcn.00491be0
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x70]
mov eax, ecx
push ecx
neg eax
sbb eax, eax
lea ecx, [esp + 0x50]
and eax, edx
push eax
call fcn.00492170
inc ebp
mov eax, dword [esp + 0x14]
inc edi
cmp edi, eax
jl 0x4a9bd2
lea ecx, [esp + 0x10]
push 2
push ecx
mov ecx, 0x676278
mov dword [esp + 0x18], 0xe0
call fcn.00492170
mov edx, dword [esp + 0x5c]
mov eax, dword [esp + 0x48]
push 4
lea ecx, [edx + eax + 0xc]
lea edx, [esp + 0x14]
mov dword [esp + 0x14], ecx
push edx
mov ecx, 0x676278
call fcn.00492170
lea eax, [esp + 0x10]
push 4
push eax
mov ecx, 0x676278
mov dword [esp + 0x18], ebx
call fcn.00492170
lea ecx, [esp + 0x10]
push 4
push ecx
mov ecx, 0x676278
mov dword [esp + 0x18], ebp
call fcn.00492170
mov edx, dword [esp + 0x48]
lea eax, [esp + 0x10]
push 4
push eax
mov ecx, 0x676278
mov dword [esp + 0x18], edx
call fcn.00492170
mov ecx, dword [esp + 0x48]
mov edi, dword [esp + 0x40]
mov eax, ecx
push ecx
neg eax
sbb eax, eax
mov ecx, 0x676278
and eax, edi
push eax
call fcn.00492170
mov ecx, dword [esp + 0x5c]
mov edi, dword [esp + 0x54]
mov eax, ecx
push ecx
neg eax
sbb eax, eax
mov ecx, 0x676278
and eax, edi
push eax
call fcn.00492170
mov edi, 0x5f7940
lea ecx, [esp + 0x68]
mov byte [esp + 0x498], 0xb6
mov dword [esp + 0x68], edi
call fcn.00491ab0
lea ecx, [esp + 0x4c]
mov byte [esp + 0x498], 0xb5
mov dword [esp + 0x4c], edi
call fcn.00491ab0
lea ecx, [esp + 0x38]
mov byte [esp + 0x498], 0xb4
mov dword [esp + 0x38], edi
call fcn.00491ab0
lea edi, [esi + 0x208]
push edi
call fcn.00461bd0
add esp, 4
lea ecx, [esp + 0x254]
push ecx
mov ecx, edi
call fcn.005bb360
push 0xffffffffffffffff
push 0
lea ecx, [esp + 0x25c]
call fcn.005bb4dc
mov ecx, esi
call fcn.00469ad0
lea ecx, [esp + 0x88]
mov byte [esp + 0x498], 0
call fcn.00487230
jmp case.0x4aa170.6
mov edx, dword [esi + 0x3f8]
not edx
test dl, 1
jne case.0x4aa170.6
lea eax, [esp + 0x10]
push 2
push eax
mov ecx, 0x676278
mov dword [esp + 0x18], 0xe1
call fcn.00492170
mov edi, dword [esp + 0x4a8]
push edi
call fcn.00492830
add esp, 4
lea ecx, [esp + 0x10]
add eax, 4
push 4
push ecx
mov ecx, 0x676278
mov dword [esp + 0x18], eax
call fcn.00492170
mov eax, dword [esi + 0x290]
lea edx, [esp + 0x10]
push 4
push edx
mov ecx, 0x676278
mov dword [esp + 0x18], eax
call fcn.00492170
push edi
call fcn.00492700
add esp, 4
cmp eax, 1
jne 0x4a9df4
push 0x5fe67c
call fcn.00492830
add esp, 4
push eax
push 0x5fe67c
jmp 0x4a9dff
push edi
call fcn.00492830
add esp, 4
push eax
push edi
mov ecx, 0x676278
call fcn.00492170
mov eax, dword [esi + 0x290]
lea ecx, [esi + 0x288]
push edi
push eax
call fcn.005bb0cc
mov ecx, esi
call fcn.00469ad0
jmp case.0x4aa170.6
cmp ebx, 0x82020017
ja 0x4aa26b
je 0x4aa11b
cmp ebx, 0x2020089
je 0x4aa06a
cmp ebx, 0x82020016
jne case.0x4a8b26.33685638
mov ecx, esi
call fcn.004699d0
mov ebx, eax
mov eax, dword [esi + 0x94c]
add eax, 0x5f4
push edi
push 9
push 0x110a
mov eax, dword [eax + 0x1c]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov ebp, eax
cmp ebp, edi
je case.0x4aa170.6
mov ecx, dword [esi + 0x94c]
push ebp
add ecx, 0x5f4
call fcn.005b9fc7
mov edi, eax
shr eax, 0x1c
je case.0x4aa170.6
dec eax
cmp eax, 8
ja case.default.0x4a9ea9
jmp dword [eax*4 + 0x4aa47c]
test edi, 0xffff
jbe 0x4a9eea
test ebx, ebx
je case.0x4aa170.6
cmp dword [ebx + 0x3c], 1
jne case.0x4aa170.6
mov eax, dword [esp + 0x4a4]
mov edx, dword [ebx]
push 0
push 0
push eax
push 0x2020009
mov ecx, ebx
call dword [edx + 0xe0]
jmp case.0x4aa170.6
shr edi, 0x10
and edi, 0xfff
lea ecx, [esp + 0x10]
dec edi
push ecx
push edi
lea ecx, [esi + 0x340]
call fcn.004f48d0
test eax, eax
je 0x4a9f2a
mov edx, dword [esp + 0x10]
mov eax, dword [edx + 0x44]
test eax, eax
je 0x4a9f2a
mov eax, dword [esp + 0x4a4]
push 0
push 0
push eax
push 0x202006a
jmp 0x4aa324
mov ecx, dword [esp + 0x4a4]
push 0
push 0
push ecx
push 0x202000d
jmp 0x4aa324
mov edx, dword [esp + 0x4a4]
push 0
push 0
push edx
push 0x202000b
mov ecx, esi
call fcn.0046a390
jmp 0x4aa03b
mov eax, dword [esp + 0x4a4]
push 0
push 0
push eax
push 0x202000a
mov ecx, esi
call fcn.0046a390
jmp 0x4aa03b
mov ecx, dword [esp + 0x4a4]
push 0
push 0
push ecx
push 0x202000c
mov ecx, esi
call fcn.0046a390
jmp 0x4aa03b
mov edx, dword [esp + 0x4a4]
push 0
push 0
push edx
push 0x2020037
mov ecx, esi
call fcn.0046a390
jmp 0x4aa03b
mov eax, dword [esp + 0x4a4]
push 0
push 0
push eax
push 0x2020010
mov ecx, esi
call fcn.0046a390
jmp 0x4aa03b
mov eax, edi
and eax, 0xfffffff
cmp eax, 1
jne 0x4a9ff4
mov ecx, dword [esp + 0x4a4]
push 0
push 0
push ecx
push 0x2020011
mov ecx, esi
call fcn.0046a390
jmp 0x4aa03b
cmp eax, 2
jne 0x4aa03b
mov edx, dword [esp + 0x4a4]
push 0
push 0
push edx
push 0x2020012
mov ecx, esi
call fcn.0046a390
jmp 0x4aa03b
mov ecx, esi
call fcn.00483660
test eax, eax
jne 0x4aa03b
jmp case.0x4aa170.6
mov ecx, esi
call fcn.004837e0
test eax, eax
jne 0x4aa03b
jmp case.0x4aa170.6
test eax, eax
je case.0x4aa170.6
test edi, 0xfffffff
jne case.0x4aa170.6
mov esi, dword [esi + 0x94c]
push ebp
add esi, 0x5f4
push 2
push 0x1102
mov eax, dword [esi + 0x1c]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
jmp case.0x4aa170.6
mov ecx, dword [esi + 0x28c]
mov ebx, dword [esp + 0x4a8]
lea edx, [esp + 0x10]
push 2
mov edi, dword [ecx + ebx*4]
push edx
mov ecx, 0x676278
mov dword [esp + 0x18], 0xe2
call fcn.00492170
push edi
call fcn.00492830
add eax, 4
add esp, 4
mov dword [esp + 0x10], eax
lea eax, [esp + 0x10]
push 4
push eax
mov ecx, 0x676278
call fcn.00492170
lea ecx, [esp + 0x10]
push 4
push ecx
mov ecx, 0x676278
mov dword [esp + 0x18], ebx
call fcn.00492170
push edi
call fcn.00492700
add esp, 4
cmp eax, 1
jne 0x4aa0ec
push 0x5fe67c
call fcn.00492830
add esp, 4
push eax
push 0x5fe67c
jmp 0x4aa0f7
push edi
call fcn.00492830
add esp, 4
push eax
push edi
mov ecx, 0x676278
call fcn.00492170
push 1
push ebx
lea ecx, [esi + 0x288]
call fcn.005bb201
mov ecx, esi
call fcn.00469ad0
jmp case.0x4aa170.6
mov eax, dword [esi + 0x94c]
push edi
add eax, 0x5f4
push 9
push 0x110a
mov edx, dword [eax + 0x1c]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp eax, edi
je case.0x4aa170.6
mov ecx, dword [esi + 0x94c]
push eax
add ecx, 0x5f4
call fcn.005b9fc7
mov edx, eax
shr edx, 0x1c
je case.0x4aa170.6
mov ecx, eax
dec edx
and ecx, 0xfffffff
dec ecx
cmp edx, 8
ja case.0x4aa170.6
jmp dword [edx*4 + 0x4aa4a0]
mov ecx, eax
and ecx, 0xffff
jbe 0x4aa19f
shr eax, 0x10
and eax, 0xfff
dec ecx
dec eax
push ecx
push eax
mov eax, dword [esp + 0x4ac]
push eax
push 0x2020019
jmp 0x4aa324
mov ecx, dword [esp + 0x4a4]
push 0
shr eax, 0x10
and eax, 0xfff
dec eax
push eax
push ecx
push 0x202001a
jmp 0x4aa324
test ecx, ecx
jl case.0x4aa170.6
mov edx, dword [esp + 0x4a4]
push 0
push ecx
push edx
push 0x202001b
jmp 0x4aa324
test ecx, ecx
jl case.0x4aa170.6
mov eax, dword [esp + 0x4a4]
push 0
push ecx
push eax
push 0x202001c
jmp 0x4aa324
test ecx, ecx
jl case.0x4aa170.6
push 0
push ecx
mov ecx, dword [esp + 0x4ac]
push ecx
push 0x202001d
jmp 0x4aa324
test ecx, ecx
jl case.0x4aa170.6
mov edx, dword [esp + 0x4a4]
push 0
push ecx
push edx
push 0x2020038
jmp 0x4aa324
test ecx, ecx
jl case.0x4aa170.6
mov eax, dword [esp + 0x4a4]
push 0
push ecx
push eax
push 0x202007a
jmp 0x4aa324
test ecx, ecx
jl case.0x4aa170.6
push 0
push ecx
mov ecx, dword [esp + 0x4ac]
push ecx
push 0x2020089
jmp 0x4aa324
cmp ebx, 0x82020078
je 0x4aa2ad
cmp ebx, 0x8202007c
je 0x4aa2ad
cmp ebp, 1
jne 0x4aa28a
mov ecx, 0x676258
call fcn.0050bf00
lea ecx, [esp + 0x24]
mov dword [esp + 0x498], 0xffffffff
mov dword [esp + 0x24], 0x5f7940
call fcn.00491ab0
xor eax, eax
jmp 0x4aa36e
mov eax, dword [esi + 0x94c]
push edi
add eax, 0x5f4
push 9
push 0x110a
mov edx, dword [eax + 0x1c]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp eax, edi
je case.0x4aa170.6
mov ecx, dword [esi + 0x94c]
push eax
add ecx, 0x5f4
call fcn.005b9fc7
mov ecx, eax
and ecx, 0xf0000000
cmp ecx, 0x80000000
jne case.0x4aa170.6
and eax, 0xfffffff
dec eax
cmp ebx, 0x82020078
jne 0x4aa310
mov edx, dword [esp + 0x4a4]
push 0
push eax
push edx
push 0x2020079
jmp 0x4aa324
test eax, eax
jl case.0x4aa170.6
push 0
push eax
mov eax, dword [esp + 0x4ac]
push eax
push 0x202007d
mov ecx, esi
call fcn.0046a390
cmp dword [esp + 0x7c], 1
jne 0x4aa34d
mov eax, dword [esp + 0x34]
test eax, eax
jne 0x4aa33e
push 0
jmp 0x4aa343
lea ecx, [esp + 0x24]
push ecx
mov ecx, 0x676258
call fcn.0050bf30
lea ecx, [esp + 0x24]
mov dword [esp + 0x498], 0xffffffff
mov dword [esp + 0x24], 0x5f7940
call fcn.00491ab0
mov eax, 1
mov ecx, dword [esp + 0x490]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x48c
ret 0x10