Function at 0x1004d980
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x100b548d
mov eax, dword fs:[0]
push eax
sub esp, 0x118
mov eax, dword [0x100d3020]
xor eax, esp
mov dword [esp + 0x110], eax
push ebx
push esi
push edi
mov eax, dword [0x100d3020]
xor eax, esp
push eax
lea eax, [esp + 0x128]
mov dword fs:[0], eax
mov edi, dword [ebp + 0xc]
cmp edi, 0x2e
mov esi, dword [ebp + 8]
mov ebx, ecx
mov ecx, dword [ebp + 0x10]
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], ecx
ja case.default.0x1004d9e3
movzx eax, byte [edi + 0x1004e544]
jmp dword [eax*4 + 0x1004e504]
push esi
lea ecx, [esp + 0x18]
push ecx
lea ecx, [ebx - 4]
call fcn.1004d070
mov dword [esp + 0x130], 0
mov esi, dword [esp + 0x14]
test esi, esi
je case.default.0x1004d9e3
mov edx, dword [esp + 0x18]
push edx
push edi
mov eax, esi
call fcn.1002b560
mov dword [esp + 0x130], 0xffffffff
mov edi, eax
mov eax, dword [esi]
mov edx, dword [eax + 4]
mov ecx, esi
call edx
mov eax, edi
jmp 0x1004e4db
mov eax, dword [ebx]
mov edx, dword [eax + 0x7c]
lea ecx, [esp + 0x20]
push ecx
mov ecx, ebx
call edx
xor edi, edi
mov dword [esp + 0x130], 1
mov dword [esp + 0x28], edi
mov byte [esp + 0x130], 2
mov eax, dword [esp + 0x20]
test eax, eax
je 0x1004da78
mov edi, dword [eax + 0x28]
lea esi, [esp + 0x28]
call fcn.10024e50
mov edi, dword [esp + 0x28]
mov eax, dword [edi]
mov edx, dword [eax + 0x10]
lea ecx, [esp + 0x14]
push ecx
mov ecx, edi
call edx
mov byte [esp + 0x130], 3
mov ecx, dword [esp + 0x14]
xor esi, esi
test ecx, ecx
je 0x1004daa1
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
call edx
mov esi, eax
cmp dword [esp + 0x20], 0
je 0x1004dae0
push esi
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x1004dae0
push esi
call dword [sym.imp.USER32.dll_IsWindowEnabled]
test eax, eax
je 0x1004dae0
mov eax, dword [edi]
mov edx, dword [eax + 0xc0]
mov ecx, edi
call edx
test al, al
je 0x1004dae0
mov eax, dword [esp + 0x18]
push eax
mov eax, dword [esp + 0x24]
push 0x2e
call fcn.1002b560
jmp 0x1004db54
xor eax, eax
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], eax
mov dword [esp + 0xd8], eax
mov edx, str.http:__ie.2345.com_skins_v4_skins.htm
lea eax, [esp + 0xe8]
mov byte [esp + 0x130], 4
call fcn.1000b220
lea ecx, [esp + 0xe8]
push ecx
lea esi, [esp + 0xd0]
mov byte [esp + 0x134], 5
call fcn.10016580
mov edx, dword [edi]
mov eax, dword [edx + 0x34]
push 0
mov ecx, edi
call eax
push eax
mov ecx, esi
push ecx
lea ecx, [ebx - 4]
call fcn.1004f580
lea ecx, [esp + 0xe8]
call fcn.10002160
call fcn.10016360
mov byte [esp + 0x130], 2
mov ecx, dword [esp + 0x14]
test ecx, ecx
je 0x1004db6b
mov edx, dword [ecx]
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x130], 1
mov edx, dword [edi]
mov eax, dword [edx + 4]
mov ecx, edi
call eax
mov dword [esp + 0x130], 0xffffffff
mov ecx, dword [esp + 0x20]
test ecx, ecx
je 0x1004db96
mov edx, dword [ecx]
mov eax, dword [edx + 4]
call eax
xor eax, eax
jmp 0x1004e4db
cmp ecx, 0xe
jne 0x1004dbaf
lea ecx, [ebx - 4]
call fcn.10053d80
jmp case.default.0x1004d9e3
lea edx, [ebx - 4]
call fcn.10053c50
jmp case.default.0x1004d9e3
lea ecx, [ebx - 4]
call fcn.10053e00
jmp case.default.0x1004d9e3
lea edx, [ebx - 4]
call fcn.10053e80
jmp case.default.0x1004d9e3
mov ecx, dword [ebx + 0x14]
test ecx, ecx
je case.default.0x1004d9e3
mov edx, dword [ecx]
mov eax, dword [edx + 0x20]
call eax
mov esi, eax
test esi, esi
mov dword [esp + 0x28], esi
je 0x1004dbfa
mov edx, dword [esi]
mov eax, dword [edx]
mov ecx, esi
call eax
test esi, esi
mov dword [esp + 0x130], 6
je case.default.0x1004d9e3
mov edx, dword [esi]
mov eax, dword [edx + 0x14]
mov ecx, esi
call eax
mov edi, eax
test edi, edi
mov dword [esp + 0x20], edi
je 0x1004dc28
mov edx, dword [edi]
mov eax, dword [edx]
mov ecx, edi
call eax
test edi, edi
mov byte [esp + 0x130], 7
jne 0x1004dc4d
mov dword [esp + 0x130], 0xffffffff
mov edx, dword [esi]
mov eax, dword [edx + 4]
mov ecx, esi
call eax
jmp case.default.0x1004d9e3
mov edx, dword [edi]
mov eax, dword [edx + 0x30]
mov ecx, edi
call eax
test al, al
je 0x1004dc9d
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [ebx]
mov edx, dword [edx + 0x20]
push eax
push 0x13
push ecx
mov ecx, ebx
call edx
mov byte [esp + 0x130], 6
mov ebx, eax
mov eax, dword [edi]
mov edx, dword [eax + 4]
mov ecx, edi
call edx
mov dword [esp + 0x130], 0xffffffff
mov eax, dword [esi]
mov edx, dword [eax + 4]
mov ecx, esi
call edx
mov eax, ebx
jmp 0x1004e4db
mov eax, dword [esp + 0x14]
push eax
lea ecx, [esp + 0x18]
push ecx
lea ecx, [ebx - 4]
call fcn.1004d070
mov byte [esp + 0x130], 8
mov ebx, dword [esp + 0x14]
test ebx, ebx
je 0x1004dd10
mov edx, dword [esp + 0x18]
push edx
push 0x12
mov eax, ebx
call fcn.1002b560
mov byte [esp + 0x130], 7
mov dword [esp + 0x14], eax
mov eax, dword [ebx]
mov edx, dword [eax + 4]
mov ecx, ebx
call edx
mov byte [esp + 0x130], 6
mov eax, dword [edi]
mov edx, dword [eax + 4]
mov ecx, edi
call edx
mov dword [esp + 0x130], 0xffffffff
mov eax, dword [esi]
mov edx, dword [eax + 4]
mov ecx, esi
call edx
mov eax, dword [esp + 0x14]
jmp 0x1004e4db
mov byte [esp + 0x130], 6
mov eax, dword [edi]
mov edx, dword [eax + 4]
mov ecx, edi
call edx
mov dword [esp + 0x130], 0xffffffff
mov eax, dword [esi]
mov ecx, esi
jmp 0x1004e4d1
xor edi, edi
mov dword [esp + 0x100], 7
mov dword [esp + 0xfc], edi
mov word [esp + 0xec], di
mov dword [esp + 0x130], 9
mov ecx, dword [ebx + 0x14]
mov eax, dword [ecx]
mov edx, dword [eax + 0x4c]
call edx
mov esi, eax
cmp esi, edi
mov dword [esp + 0x14], esi
mov dword [esp + 0x28], esi
je 0x1004dd7c
mov eax, dword [esi]
mov edx, dword [eax]
mov ecx, esi
call edx
test byte [esp + 0x18], 1
mov byte [esp + 0x130], 0xa
je 0x1004dd9d
lea eax, [esp + 0xe8]
push eax
mov edx, str.MyFavChangedLType___
call fcn.10023290
test byte [esp + 0x18], 2
je 0x1004ddb6
lea ecx, [esp + 0xe8]
push ecx
mov edx, str.MyFavShow___
call fcn.10023290
test byte [esp + 0x18], 4
je 0x1004ddcf
lea edx, [esp + 0xe8]
push edx
mov edx, str.MyFavShowJGG___
call fcn.10023290
test byte [esp + 0x18], 8
je 0x1004dde8
lea eax, [esp + 0xe8]
push eax
mov edx, str.change_search___
call fcn.10023290
cmp dword [esp + 0xfc], edi
jne 0x1004de17
cmp esi, edi
mov byte [esp + 0x130], 9
je 0x1004de06
mov edx, dword [esi]
mov eax, dword [edx + 4]
mov ecx, esi
call eax
lea ecx, [esp + 0xe8]
call fcn.10002160
jmp case.default.0x1004d9e3
mov ecx, dword [ebx + 0x20]
cmp ecx, edi
je 0x1004df79
cmp dword [ebx + 0x14], edi
je 0x1004df79
mov edx, dword [ecx]
mov eax, dword [edx + 0x4c]
call eax
cmp dword [esp + 0xfc], edi
jne 0x1004de63
cmp esi, edi
mov byte [esp + 0x130], 9
je 0x1004de50
mov edx, dword [esi]
mov eax, dword [edx + 4]
mov ecx, esi
call eax
lea ecx, [esp + 0xe8]
call fcn.10002160
xor eax, eax
jmp 0x1004e4db
mov dword [esp + 0xd0], edi
mov dword [esp + 0xd4], edi
mov dword [esp + 0xd8], edi
mov byte [esp + 0x130], 0xb
mov ebx, dword [ebx + 0x20]
mov edx, dword [ebx]
mov edx, dword [edx + 0x44]
push 1
lea eax, [esp + 0xd0]
push eax
mov ecx, ebx
call edx
test al, al
je 0x1004df5f
lea esi, [esp + 0x20]
lea edi, [esp + 0xcc]
call fcn.10060920
lea esi, [esp + 0x30]
call fcn.10023d80
mov esi, eax
lea edi, [esp + 0x20]
call fcn.10024c00
test al, al
je 0x1004df5f
mov bl, 0xc
lea esp, [esp]
lea esi, [esp + 0x20]
call fcn.10028690
mov ecx, dword [eax]
mov eax, dword [ecx]
mov eax, dword [eax + 0x54]
lea edx, [esp + 0x104]
push edx
call eax
lea eax, [esp + 0x104]
mov ecx, str.2345:home
mov byte [esp + 0x130], bl
call fcn.1007efe0
test al, al
je 0x1004df1f
call fcn.10028690
mov ecx, dword [eax]
mov edx, dword [ecx]
mov edx, dword [edx + 0x94]
lea eax, [esp + 0xe8]
push eax
call edx
lea ecx, [esp + 0x104]
mov byte [esp + 0x130], 0xb
call fcn.10002160
lea esi, [esp + 0x20]
call fcn.100286c0
lea esi, [esp + 0x30]
lea edi, [esp + 0xcc]
call fcn.10023d80
mov esi, eax
lea edi, [esp + 0x20]
call fcn.10024c00
test al, al
jne 0x1004ded0
lea ebx, [esp + 0xcc]
mov byte [esp + 0x130], 0xa
call fcn.10055160
mov esi, dword [esp + 0x14]
xor edi, edi
cmp esi, edi
mov byte [esp + 0x130], 9
je 0x1004df8e
mov eax, dword [esi]
mov edx, dword [eax + 4]
mov ecx, esi
call edx
lea ecx, [esp + 0xe8]
call fcn.10002160
jmp case.default.0x1004d9e3
mov eax, dword [ebx + 0x20]
xor edx, edx
cmp eax, edx
je case.default.0x1004d9e3
cmp dword [ebx + 0x14], edx
je case.default.0x1004d9e3
cmp ecx, 5
mov dword [esp + 0x14], edx
jb 0x1004e095
cmp ecx, 0x3e8
ja 0x1004e095
mov dword [esp + 0xd0], edx
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], edx
mov dword [esp + 0x130], 0xd
mov esi, dword [eax]
push edx
mov edx, dword [esi + 0x44]
lea ecx, [esp + 0xd0]
push ecx
mov ecx, eax
call edx
test al, al
je 0x1004e07e
lea esi, [esp + 0x28]
lea edi, [esp + 0xcc]
call fcn.10060920
lea esi, [esp + 0x38]
call fcn.10023d80
mov esi, eax
lea edi, [esp + 0x28]
call fcn.10024c00
test al, al
je 0x1004e07e
lea esp, [esp]
lea esi, [esp + 0x28]
call fcn.10028690
mov ecx, dword [eax]
mov eax, dword [ecx]
mov edx, dword [esp + 0x18]
mov eax, dword [eax + 0x88]
push edx
call eax
test al, al
jne 0x1004e056
mov dword [esp + 0x14], 1
lea esi, [esp + 0x28]
call fcn.100286c0
lea esi, [esp + 0x38]
lea edi, [esp + 0xcc]
call fcn.10023d80
mov esi, eax
lea edi, [esp + 0x28]
call fcn.10024c00
test al, al
jne 0x1004e030
lea ebx, [esp + 0xcc]
mov dword [esp + 0x130], 0xffffffff
call fcn.10055160
mov eax, dword [esp + 0x14]
jmp 0x1004e4db
mov ecx, dword [ebx + 0x30]
test ecx, ecx
je case.default.0x1004d9e3
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
call eax
mov esi, eax
test esi, esi
mov dword [esp + 0x14], esi
je 0x1004e0c2
mov edx, dword [esi]
mov eax, dword [edx]
mov ecx, esi
call eax
test esi, esi
mov dword [esp + 0x130], 0xe
je case.default.0x1004d9e3
mov edx, dword [esi]
mov eax, dword [esp + 0x18]
mov edx, dword [edx + 0x18]
push eax
mov ecx, esi
call edx
jmp 0x1004da1c
mov edx, str.GlobalUserOffline
lea eax, [esp + 0x5c]
call fcn.1000b220
mov edx, str.SoftwareMicrosoftWindowsCurrentVersionInternet_Settings
lea eax, [esp + 0x40]
mov dword [esp + 0x130], 0xf
call fcn.1000b220
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x60]
lea eax, [esp + 0x44]
mov edx, 0x80000001
call fcn.1009d610
lea ecx, [esp + 0x40]
call fcn.10002160
lea ecx, [esp + 0x5c]
mov dword [esp + 0x130], 0xffffffff
call fcn.10002160
xor ecx, ecx
cmp dword [esp + 0x20], ecx
mov edx, str.GlobalUserOffline
sete cl
lea eax, [esp + 0x94]
mov dword [esp + 0x20], ecx
call fcn.1000b220
mov edx, str.SoftwareMicrosoftWindowsCurrentVersionInternet_Settings
lea eax, [esp + 0x78]
mov dword [esp + 0x130], 0x10
call fcn.1000b220
lea edx, [esp + 0x20]
push edx
push 0x80000001
lea ecx, [esp + 0x9c]
lea eax, [esp + 0x80]
call fcn.1009d6b0
lea ecx, [esp + 0x78]
call fcn.10002160
lea ecx, [esp + 0x94]
call fcn.10002160
push 0
push 0
push 0x27
push 0
call dword [sym.imp.WININET.dll_InternetSetOptionW]
xor eax, eax
jmp 0x1004e4db
xor eax, eax
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], eax
mov dword [esp + 0xd8], eax
cmp esi, eax
mov dword [esp + 0x130], 0x11
mov byte [esp + 0x18], al
mov dword [esp + 0x14], eax
je 0x1004e242
mov eax, dword [esi]
mov edx, dword [eax + 0x34]
mov ecx, esi
call edx
sub edi, 1
mov dword [esp + 0x14], eax
jne 0x1004e247
mov eax, dword [esi]
mov edx, dword [eax + 0x3c]
mov ecx, esi
call edx
mov byte [esp + 0x18], al
mov edx, dword [esp + 0x18]
mov eax, dword [ebx - 4]
mov eax, dword [eax + 0x10]
push 1
push edx
mov edx, dword [esp + 0x1c]
lea ecx, [ebx - 4]
push edx
lea edx, [esp + 0xd8]
push edx
call eax
lea esi, [esp + 0xcc]
mov edi, eax
call fcn.10016360
mov eax, edi
jmp 0x1004e4db
sub edi, 1
je 0x1004e20a
sub edi, 1
jne 0x1004e20e
mov byte [esp + 0x18], 1
jmp 0x1004e20e
push ecx
add ebx, 0xfffffffc
push ebx
call fcn.1004ef70
test al, al
je case.default.0x1004d9e3
xor eax, eax
jmp 0x1004e4db
push ecx
add ebx, 0xfffffffc
push ebx
call fcn.100536c0
test al, al
je case.default.0x1004d9e3
xor eax, eax
jmp 0x1004e4db
xor edi, edi
mov dword [esp + 0x14], edi
mov dword [esp + 0x130], 0x12
mov ecx, dword [ebx + 0x30]
test ecx, ecx
je 0x1004e2b3
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
call eax
mov edi, eax
lea esi, [esp + 0x14]
call fcn.10024e50
mov edi, dword [esp + 0x14]
mov edx, dword [edi]
mov eax, dword [edx + 0x10]
push 1
mov ecx, edi
call eax
test al, al
jne 0x1004e3f9
mov edx, str.__config
lea eax, [esp + 0xe8]
call fcn.1000b220
lea ecx, [esp + 0xe8]
push ecx
mov edx, 0x100b709c
mov byte [esp + 0x134], 0x13
call fcn.10023290
lea edx, [esp + 0xe8]
push edx
mov edx, 0x100b70a0
call fcn.10023290
lea eax, [esp + 0xcc]
push eax
call fcn.1008c0b0
add esp, 4
lea eax, [esp + 0xb0]
mov byte [esp + 0x130], 0x14
call fcn.1008c230
push eax
lea ecx, [esp + 0xd0]
push ecx
lea ecx, [esp + 0x10c]
mov byte [esp + 0x138], 0x15
call fcn.10080d50
add esp, 8
lea ecx, [esp + 0xb0]
mov byte [esp + 0x130], 0x17
call fcn.10002160
push 0x1b58
push 1
sub esp, 0x1c
mov edx, 0x100b6894
mov eax, esp
mov dword [esp + 0x4c], esp
call fcn.1000b220
sub esp, 0x1c
mov byte [esp + 0x170], 0x18
lea edx, [esp + 0x144]
mov esi, esp
mov dword [esp + 0x60], esp
push edx
call fcn.10005260
mov eax, dword [esp + 0x58]
push eax
lea ecx, [esp + 0x12c]
mov byte [esp + 0x174], 0x17
call fcn.1008b050
add esp, 0x44
test al, al
mov byte [esp + 0x1f], al
je 0x1004e3c6
mov edx, dword [edi]
mov eax, dword [edx + 0x10]
push 1
mov ecx, edi
call eax
mov byte [esp + 0x1f], al
lea ecx, [esp + 0x104]
call fcn.10002160
lea ecx, [esp + 0xcc]
call fcn.10002160
lea ecx, [esp + 0xe8]
mov byte [esp + 0x130], 0x12
call fcn.10002160
cmp byte [esp + 0x1f], 0
je 0x1004e422
mov edx, dword [esp + 0x18]
push 1
lea ecx, [ebx - 4]
call fcn.1004f6b0
mov dword [esp + 0x130], 0xffffffff
mov edx, dword [edi]
mov eax, dword [edx + 4]
mov ecx, edi
call eax
xor eax, eax
jmp 0x1004e4db
mov edx, dword [esp + 0x18]
push 0
lea ecx, [ebx - 4]
call fcn.1004f6b0
mov dword [esp + 0x130], 0xffffffff
mov edx, dword [edi]
mov eax, dword [edx + 4]
mov ecx, edi
call eax
jmp case.default.0x1004d9e3
push 0
lea ecx, [ebx - 4]
push ecx
call fcn.1004c980
mov edx, dword [ebx]
mov eax, dword [edx + 0x50]
mov ecx, ebx
call eax
xor eax, eax
jmp 0x1004e4db
push esi
lea ecx, [esp + 0x18]
push ecx
lea ecx, [ebx - 4]
call fcn.1004d070
mov dword [esp + 0x130], 0x19
mov edi, dword [esp + 0x14]
test edi, edi
je 0x1004e4be
lea edx, [esp + 0xcc]
lea esi, [ebx + 0x74]
push edx
mov ecx, esi
call fcn.10016250
push 1
push edi
lea ecx, [esp + 0xd4]
mov byte [esp + 0x138], 0x1a
call fcn.10030cb0
mov eax, esi
call fcn.10016ae0
lea esi, [esp + 0xcc]
call fcn.10016360
test edi, edi
mov dword [esp + 0x130], 0xffffffff
je case.default.0x1004d9e3
mov eax, dword [edi]
mov ecx, edi
mov edx, dword [eax + 4]
call edx
mov eax, 1
mov ecx, dword [esp + 0x128]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x110]
xor ecx, esp
call fcn.100a4489
mov esp, ebp
pop ebp
ret 0xc