Function at 0x490100
Capabilities:
Check for unmoving mouse cursor
Parse credit card information

Disassembly:
push 0xffffffffffffffff
push 0x4ec029
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x158
mov eax, dword [esp + 0x170]
test eax, eax
push ebx
push ebp
push esi
mov ebp, ecx
push edi
mov dword [esp + 0x38], ebp
mov dword [esp + 0x34], 0
jne 0x490142
mov eax, dword [ebp + 0x2c]
mov dword [esp + 0x180], eax
mov ecx, dword [esp + 0x178]
lea edx, [esp + 0x50]
push edx
mov dword [esp + 0x54], ecx
call fcn.00443850
mov eax, dword [esp + 0x54]
lea ecx, [esp + 0x7c]
xor ebx, ebx
mov edi, ecx
mov word [esp + 0x7c], bx
mov dword [esp + 0x14], ecx
mov cx, word [eax]
add esp, 4
test cx, cx
mov esi, eax
mov dword [esp + 0x4c], edi
je 0x4901a0
lea ecx, [ecx]
cmp cx, 0x3d
je 0x490194
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x490180
jmp 0x4901a0
lea edi, [eax + 2]
mov word [eax], 0
mov dword [esp + 0x4c], edi
push esi
call fcn.004201fa
xor eax, eax
add esp, 4
mov dword [esp + 0x14], eax
mov dword [esp + 0x170], eax
mov al, byte [ebp + 0x8e]
test al, al
jne 0x4901d9
test byte [ebp + 0xb], 0xf
jne 0x4901d9
push 1
push 0
lea edx, [esp + 0x1c]
push edx
push esi
mov ecx, ebp
call fcn.004541d0
jmp 0x4901ea
push 1
push 0
lea eax, [esp + 0x1c]
push eax
push esi
mov ecx, ebp
call fcn.00452ca0
push 2
call fcn.00449130
add esp, 4
test eax, eax
mov dword [esp + 0x1c], eax
je 0x490201
mov word [eax], 0
mov al, byte [ebp + 0x8e]
test al, al
mov byte [esp + 0x170], 1
jne 0x49022c
test byte [ebp + 0xb], 0xf
jne 0x49022c
push 1
push 0
lea ecx, [esp + 0x24]
push ecx
push edi
mov ecx, ebp
call fcn.004541d0
jmp 0x49023d
push 1
push 0
lea edx, [esp + 0x24]
push edx
push edi
mov ecx, ebp
call fcn.00452ca0
mov edi, dword [esp + 0x1c]
mov eax, dword [esp + 0x14]
mov esi, dword [sym.imp.KERNEL32.dll_lstrcmpiW]
mov dword [esp + 0x10], edi
cmp word [eax], 0x40
jne 0x49051f
push str._DeskTopFresh
mov ecx, eax
push ecx
call esi
test eax, eax
jne 0x49041c
mov ecx, dword [esp + 0x10]
mov ax, word [ecx]
test ax, ax
mov edx, ecx
mov dword [esp + 0x4c], edx
je 0x4902ba
lea ecx, [ecx]
cmp ax, 0x2c
je 0x4902a6
cmp ax, 0x3b
je 0x4902a6
cmp ax, 0x3a
je 0x4902a6
cmp ax, 0x23
je 0x4902a6
mov ax, word [edx + 2]
add edx, 2
test ax, ax
jne 0x490280
jmp 0x4902b6
mov word [edx], 0
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x4c], edx
add edx, 2
mov dword [esp + 0x4c], edx
mov edx, str.clearicon
nop
mov al, byte [edx]
test al, al
mov ebx, dword [sym.imp.KERNEL32.dll_HeapFree]
jne 0x4902d2
cmp word [ecx], 0
je 0x4902e8
movzx esi, word [ecx]
movsx eax, al
or esi, 0x20
or eax, 0x20
add ecx, 2
inc edx
cmp eax, esi
je 0x4902c0
jmp 0x490361
push 2
call fcn.00449130
add esp, 4
test eax, eax
mov dword [esp + 0x50], eax
je 0x4902ff
mov word [eax], 0
mov ecx, 0x23
mov esi, str._userprofile_AppDataLocalMicrosoftWindowsExplorer_thumbcache.db
lea edi, [esp + 0xa0]
rep movsd dword es:[edi], dword [esi]
push 1
push 0
lea ecx, [esp + 0x58]
push ecx
lea edx, [esp + 0xac]
push edx
mov ecx, ebp
mov byte [esp + 0x180], 2
movsw word es:[edi], word [esi]
call fcn.00452ca0
mov esi, dword [esp + 0x50]
push 1
push esi
call fcn.004346d2
add esp, 8
test esi, esi
mov byte [esp + 0x170], 1
je 0x49035d
mov eax, dword [0x51d3c8]
add esi, 0xfffffff8
push esi
push 0
push eax
call ebx
mov edi, dword [esp + 0x1c]
lea ecx, [esp + 0x40]
push ecx
lea edx, [esp + 0x50]
push edx
mov dword [esp + 0x48], 0xfff80000
mov dword [esp + 0x4c], 0xffffffff
call fcn.0044cd70
add esp, 8
test eax, eax
jle 0x4903f4
mov ecx, dword [esp + 0x4c]
test ecx, ecx
je 0x4903aa
nop
mov ax, word [ecx]
cmp ax, 9
jb 0x49039f
cmp ax, 0xd
jbe 0x4903a5
cmp ax, 0x20
jne 0x4903aa
add ecx, 2
jmp 0x490390
mov eax, dword [esp + 0x40]
cmp eax, 2
jne 0x4903eb
mov eax, dword [0x51d3ec]
test eax, eax
jne 0x4903e7
push str.USER32.DLL
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
test eax, eax
je 0x4903e0
push str.UpdatePerUserSystemParameters
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x51d3ec], eax
call eax
jmp 0x4903f4
xor eax, eax
mov dword [0x51d3ec], eax
call eax
jmp 0x4903f4
test eax, eax
jl 0x4903f4
call fcn.004a27d0
test edi, edi
je 0x490406
mov eax, dword [0x51d3c8]
add edi, 0xfffffff8
push edi
push 0
push eax
call ebx
mov ecx, dword [esp + 0x14]
mov edx, dword [0x51d3c8]
add ecx, 0xfffffff8
push ecx
push 0
push edx
jmp 0x492b1d
mov eax, dword [esp + 0x14]
push str._TaskIcoMenu
push eax
call esi
test eax, eax
jne 0x49051f
mov esi, dword [esp + 0x10]
push esi
push 0x4f64a0
call fcn.00444a10
add esp, 8
test al, al
jne 0x4904b3
push esi
push 0x4fa540
call fcn.00444a10
add esp, 8
test al, al
jne 0x490477
push esi
push 0x4f5ef0
call fcn.00444a10
add esp, 8
test al, al
je 0x4904ef
mov al, byte [0x51d1c4]
test al, al
je 0x4904b3
push 0x51d5ec
mov byte [0x51d1c4], 0
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov al, byte [0x519730]
test al, al
je 0x49049f
push 0x51973c
push 2
call dword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
push 0x51d5ec
mov byte [0x519730], 0
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x4904ef
mov al, byte [0x522003]
test al, al
je 0x4904cc
mov ecx, dword [0x51d1d0]
mov byte [0x51d1c4], 1
push ecx
jmp 0x4904e7
mov eax, dword [0x51d2cc]
test eax, eax
je 0x4904ef
mov ecx, dword [eax + 0x18]
test ecx, ecx
je 0x4904ef
mov byte [0x51d1c4], 1
mov edx, dword [eax + 0x18]
push edx
call fcn.00421087
add esp, 4
test edi, edi
mov esi, dword [sym.imp.KERNEL32.dll_HeapFree]
je 0x490507
add edi, 0xfffffff8
push edi
mov eax, dword [0x51d3c8]
push 0
push eax
call esi
mov ecx, dword [esp + 0x14]
mov edx, dword [0x51d3c8]
add ecx, 0xfffffff8
push ecx
push 0
push edx
call esi
jmp 0x492b1f
mov eax, dword [esp + 0x14]
mov ax, word [eax]
test ax, ax
jne 0x490564
push ebp
call fcn.004216e2
mov esi, dword [sym.imp.KERNEL32.dll_HeapFree]
add esp, 4
test edi, edi
je 0x49054d
mov ecx, dword [0x51d3c8]
add edi, 0xfffffff8
push edi
push 0
push ecx
call esi
mov edx, dword [esp + 0x14]
mov eax, dword [0x51d3c8]
add edx, 0xfffffff8
push edx
push 0
push eax
call esi
jmp 0x492b1f
cmp ax, 0x40
je 0x4905ad
push ebp
call fcn.004216e2
mov eax, dword [esp + 0x184]
add esp, 4
test eax, eax
jne 0x4905b8
test edi, edi
mov esi, dword [sym.imp.KERNEL32.dll_HeapFree]
je 0x49054d
mov ecx, dword [0x51d3c8]
add edi, 0xfffffff8
push edi
push eax
push ecx
call esi
mov edx, dword [esp + 0x14]
mov eax, dword [0x51d3c8]
add edx, 0xfffffff8
push edx
push 0
push eax
call esi
jmp 0x492b1f
mov eax, dword [esp + 0x180]
test eax, eax
je 0x4905bd
mov esi, dword [eax + 0x6c]
jmp 0x4905c2
mov esi, 0x4efd50
test esi, esi
mov ebp, dword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [esp + 0x20], 0
je 0x4905fd
push esi
call ebp
lea edi, [eax + eax + 2]
lea ecx, [edi + 2]
push ecx
call fcn.00449130
mov ecx, edi
mov edx, ecx
shr ecx, 2
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
add esp, 4
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov dword [esp + 0x20], eax
mov edi, dword [esp + 0x14]
push edi
call ebp
lea esi, [eax + eax + 2]
lea eax, [esi + 2]
push eax
call fcn.00449130
mov ecx, esi
mov edx, ecx
mov esi, edi
shr ecx, 2
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
add esp, 4
mov dword [esp + 0x2c], eax
rep movsb byte es:[edi], byte [esi]
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x14]
xor ecx, ecx
mov cx, word [eax]
test cx, cx
mov byte [esp + 0x170], 4
je 0x490660
cmp cx, 0x2e
jne 0x49064e
mov ebx, eax
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x490646
test ebx, ebx
je 0x490660
mov eax, ebx
xor edx, edx
cmp word [eax], 0x2e
mov dword [esp + 0x64], edx
jne 0x490678
mov word [eax], dx
add eax, 2
mov edx, eax
mov dword [esp + 0x64], edx
test eax, eax
je 0x49069a
lea esp, [esp]
mov cx, word [eax]
cmp cx, 9
jb 0x49068f
cmp cx, 0xd
jbe 0x490695
cmp cx, 0x20
jne 0x49069a
add eax, 2
jmp 0x490680
test edx, edx
je 0x4906d3
mov cx, word [eax]
test cx, cx
mov dword [esp + 0x64], eax
je 0x4906ce
lea ebx, [ebx]
cmp cx, 9
jb 0x4906bc
cmp cx, 0xd
jbe 0x4906ce
cmp cx, 0x20
je 0x4906ce
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x4906b0
mov word [eax], 0
mov ebp, dword [esp + 0x17c]
xor bl, bl
xor dl, dl
test ebp, ebp
mov byte [esp + 0x4a], bl
mov byte [esp + 0x28], dl
mov edi, 0x2a
je 0x49078d
cmp word [ebp], 0
mov eax, ebp
je 0x49078d
mov esi, 0x7e
mov cx, word [eax]
cmp cx, 9
jb 0x490714
cmp cx, 0xd
jbe 0x490785
cmp cx, 0x20
je 0x490785
cmp cx, 0x2e
je 0x49077a
cmp cx, 0x24
je 0x49077a
cmp cx, 0x25
je 0x49077a
cmp cx, di
jne 0x490736
or dl, 4
jmp 0x49077c
cmp cx, si
jne 0x49077c
cmp word [eax + 2], si
jne 0x490749
or dl, 2
add eax, 2
jmp 0x49077c
cmp cx, si
jne 0x49077c
cmp word [eax + 2], 0x2e
jne 0x49075d
or dl, 8
add eax, 2
jmp 0x49077c
cmp cx, si
jne 0x49077c
cmp word [eax + 2], di
jne 0x490770
or dl, 0xa
add eax, 2
jmp 0x49077c
cmp cx, si
jne 0x49077c
or dl, 1
jmp 0x49077c
mov bl, byte [eax]
add eax, 2
cmp word [eax], 0
jne 0x490705
mov byte [esp + 0x4a], bl
mov byte [esp + 0x28], dl
test dl, dl
mov dword [esp + 0x40], 0
je 0x4907b0
mov eax, dword [esp + 0x28]
push eax
lea ecx, [esp + 0x20]
push ecx
mov ecx, dword [esp + 0x40]
call fcn.0046c9c0
mov dword [esp + 0x10], eax
push 2
call fcn.00449130
add esp, 4
test eax, eax
mov dword [esp + 0x24], eax
je 0x4907c7
mov word [eax], 0
test bl, bl
je 0x4907e8
cmp bl, 0x2e
je 0x4907e8
lea edx, [esp + 0x40]
push edx
push ebp
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x1c]
push ecx
call fcn.0045d7c0
add esp, 0x10
mov edi, dword [esp + 0x14]
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea esi, [eax + eax + 2]
lea edx, [esi + 2]
push edx
call fcn.00449130
mov ecx, esi
mov ebx, eax
mov eax, ecx
mov esi, edi
shr ecx, 2
mov edi, ebx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
add esp, 4
mov dword [esp + 0x3c], ebx
rep movsb byte es:[edi], byte [esi]
mov dword [esp + 0x6c], ebx
mov eax, dword [esp + 0x64]
xor ebp, ebp
cmp eax, ebp
mov byte [esp + 0x170], 6
mov dword [esp + 0x50], ebx
jne 0x49083f
mov dword [esp + 0x64], 0x4efd50
mov edi, dword [esp + 0x14]
cmp word [edi], 0x40
je 0x49210c
push 0x51d5ec
mov dword [esp + 0x44], ebp
mov dword [esp + 0x1c], 0x51d5ec
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [esp + 0x38]
mov byte [esp + 0x170], 0x10
mov byte [esp + 0x63], 1
mov byte [esp + 0x33], 0
mov byte [esp + 0x4b], 0
mov dword [esp + 0x58], ecx
mov al, byte [esp + 0x33]
test al, al
mov edi, dword [esp + 0x28]
lea ecx, [ecx]
je 0x490897
mov byte [esp + 0x4b], 1
test ebx, ebx
mov esi, ebx
mov dword [esp + 0x70], esi
mov eax, ebx
je 0x4908c2
xor ecx, ecx
mov cx, word [ebx]
test cx, cx
je 0x4908c2
lea ecx, [ecx]
cmp cx, 0x3a
je 0x4908c2
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x4908b0
cmp word [eax], 0x3a
mov byte [esp + 0x33], 0
jne 0x4908e4
lea ebx, [eax + 2]
mov word [eax], 0
cmp word [ebx], 0
mov dword [esp + 0x50], ebx
je 0x4908e4
mov byte [esp + 0x33], 1
mov al, byte [esp + 0x63]
test al, al
je 0x490922
mov eax, esi
mov edx, str.this
mov cl, byte [edx]
test cl, cl
jne 0x4908ff
cmp word [eax], 0
je 0x490915
movzx ebp, word [eax]
movsx ecx, cl
or ebp, 0x20
or ecx, 0x20
add eax, 2
inc edx
cmp ecx, ebp
je 0x4908f3
jmp 0x490922
mov esi, dword [esp + 0x20]
mov byte [esp + 0x4b], 1
mov dword [esp + 0x70], esi
mov edx, dword [esp + 0x58]
mov ebp, dword [edx + 0x2c]
mov byte [esp + 0x63], 0
mov eax, esi
mov ecx, 0x4f43c4
mov dl, byte [ecx]
test dl, dl
jne 0x490941
cmp word [eax], 0
je 0x49095a
movzx esi, word [eax]
movsx edx, dl
or esi, 0x20
or edx, 0x20
add eax, 2
inc ecx
cmp edx, esi
je 0x490935
jmp 0x4909fe
mov eax, dword [esp + 0x58]
mov eax, dword [eax + 0x28]
mov ebp, dword [eax + 0x2c]
test ebp, ebp
mov dword [esp + 0x58], eax
je 0x490971
lea eax, [ebp + 0x6c]
jmp 0x4909b8
push 0x4efd50
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea esi, [eax + eax + 2]
lea ecx, [esi + 2]
push ecx
call fcn.00449130
mov ecx, esi
mov edx, ecx
shr ecx, 2
mov edi, eax
mov esi, 0x4efd50
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0x38]
add esp, 4
mov edi, eax
or ecx, 1
mov dword [esp + 0x28], edi
lea eax, [esp + 0x28]
mov dword [esp + 0x34], ecx
mov eax, dword [eax]
mov dword [esp + 0x70], eax
test byte [esp + 0x34], 1
je 0x4909ed
mov ecx, dword [esp + 0x34]
and ecx, 0xfffffffe
test edi, edi
mov dword [esp + 0x34], ecx
je 0x4909e7
mov ecx, dword [0x51d3c8]
add edi, 0xfffffff8
push edi
push 0
push ecx
call dword [sym.imp.KERNEL32.dll_HeapFree]
xor edi, edi
mov dword [esp + 0x28], edi
mov al, byte [esp + 0x33]
test al, al
mov byte [esp + 0x4b], 1
jne 0x490892
test ebp, ebp
je 0x490b01
cmp ebp, dword [esp + 0x40]
je 0x490b01
mov al, byte [esp + 0x33]
test al, al
jne 0x490a2f
mov edx, dword [esp + 0x70]
mov eax, dword [ebp + 0x6c]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
je 0x490b4c
mov eax, dword [ebp + 0x74]
xor ebx, ebx
test eax, eax
jle 0x490a80
xor edi, edi
lea ebx, [ebx]
mov eax, dword [ebp + 0x70]
mov esi, dword [eax + edi + 4]
add eax, edi
test esi, esi
je 0x490a75
mov ecx, dword [eax]
push ecx
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x490a75
mov eax, dword [esi + 0x6c]
test eax, eax
je 0x490a75
mov edx, dword [esp + 0x70]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
je 0x490b4a
mov eax, dword [ebp + 0x74]
inc ebx
add edi, 0x10
cmp ebx, eax
jl 0x490a40
mov eax, dword [ebp + 0xac]
mov ecx, dword [eax]
xor ebx, ebx
test ecx, ecx
jle 0x490ad5
mov edi, edi
mov ecx, dword [ebp + 0xa8]
mov edx, dword [ecx]
mov esi, dword [edx + ebx*4]
test esi, esi
je 0x490ac8
mov eax, dword [esi + 8]
test eax, eax
je 0x490ac8
mov ecx, dword [esp + 0x70]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x490ac8
mov al, byte [esp + 0x33]
test al, al
je 0x4914c5
cmp dword [esi + 4], 0xf
je 0x490b38
mov edx, dword [ebp + 0xac]
mov eax, dword [edx]
inc ebx
cmp ebx, eax
jl 0x490a90
mov al, byte [esp + 0x33]
test al, al
jne 0x490f28
mov edx, dword [esp + 0x70]
push edx
lea eax, [ebp + 0x14c]
push eax
call fcn.004a34c0
mov ebx, eax
xor edi, edi
add esp, 8
cmp ebx, edi
jne 0x490fe5
mov al, byte [esp + 0x4b]
test al, al
jne 0x49140b
mov ecx, dword [esp + 0x58]
mov eax, dword [ecx + 0x28]
test eax, eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x40], ebp
je 0x4914ad
cmp eax, 0x51d2a0
je 0x4914ad
mov ebx, dword [esp + 0x50]
jmp 0x490883
mov eax, dword [esi + 0x1c]
mov ecx, dword [eax + 0x13c]
mov ebx, dword [esp + 0x50]
jmp 0x49087f
mov ebp, esi
mov edi, dword [esp + 0x64]
mov eax, edi
mov edx, str.MouseCapture
xor ebx, ebx
lea esp, [esp]
mov cl, byte [edx]
test cl, cl
jne 0x490b6f
cmp word [eax], bx
je 0x4914f1
movzx esi, word [eax]
movsx ecx, cl
or esi, 0x20
or ecx, 0x20
add eax, 2
inc edx
cmp ecx, esi
je 0x490b60
mov eax, edi
mov edx, str.POSTMSG
lea ebx, [ebx]
mov cl, byte [edx]
test cl, cl
jne 0x490b9f
cmp word [eax], bx
je 0x490c67
movzx esi, word [eax]
movsx ecx, cl
or esi, 0x20
or ecx, 0x20
add eax, 2
inc edx
cmp ecx, esi
je 0x490b90
mov eax, edi
mov edx, str.SENDMSG
lea ebx, [ebx]
mov cl, byte [edx]
test cl, cl
jne 0x490bcf
cmp word [eax], bx
je 0x490d1c
movzx esi, word [eax]
movsx ecx, cl
or esi, 0x20
or ecx, 0x20
add eax, 2
inc edx
cmp ecx, esi
je 0x490bc0
mov eax, edi
mov edx, 0x4f39ec
lea ebx, [ebx]
mov cl, byte [edx]
test cl, cl
jne 0x490bff
cmp word [eax], bx
je 0x490dd5
movzx esi, word [eax]
movsx ecx, cl
or esi, 0x20
or ecx, 0x20
add eax, 2
inc edx
cmp ecx, esi
je 0x490bf0
mov eax, edi
mov edx, 0x4fb28c
lea ebx, [ebx]
mov cl, byte [edx]
test cl, cl
jne 0x490c2f
cmp word [eax], bx
je 0x49182f
movzx esi, word [eax]
movsx ecx, cl
or esi, 0x20
or ecx, 0x20
add eax, 2
inc edx
cmp ecx, esi
je 0x490c20
push edi
push 0x4fb288
call fcn.00444a10
add esp, 8
test al, al
je 0x490eec
mov ebp, dword [ebp + 0x18]
mov edi, dword [esp + 0x10]
xor ebx, ebx
jmp 0x491600
mov edx, dword [esp + 0x38]
mov eax, dword [esp + 0x4c]
mov ecx, dword [ebp + 0xe0]
push ebx
push ebx
push edx
push ebp
push eax
call fcn.004ab9d4
mov edi, eax
mov eax, dword [esp + 0x18]
cmp eax, ebx
je 0x490c90
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [esp + 0x3c]
cmp eax, ebx
mov esi, dword [sym.imp.KERNEL32.dll_HeapFree]
je 0x490cac
mov ecx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push ebx
push ecx
call esi
mov eax, dword [esp + 0x24]
cmp eax, ebx
je 0x490cc2
mov edx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push ebx
push edx
call esi
mov eax, dword [esp + 0x2c]
cmp eax, ebx
je 0x490cd7
add eax, 0xfffffff8
push eax
mov eax, dword [0x51d3c8]
push ebx
push eax
call esi
mov eax, dword [esp + 0x20]
cmp eax, ebx
je 0x490ced
mov ecx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push ebx
push ecx
call esi
mov eax, dword [esp + 0x1c]
cmp eax, ebx
je 0x490d03
mov edx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push ebx
push edx
call esi
mov eax, dword [esp + 0x14]
mov ecx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push ebx
push ecx
call esi
mov eax, edi
jmp 0x492b21
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x4c]
lea edx, [esp + 0x18]
push edx
push 1
push eax
push ebp
push ecx
mov ecx, dword [ebp + 0xe0]
call fcn.004ab9d4
mov edi, eax
mov eax, dword [esp + 0x18]
cmp eax, ebx
je 0x490d4a
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [esp + 0x3c]
cmp eax, ebx
mov esi, dword [sym.imp.KERNEL32.dll_HeapFree]
je 0x490d66
mov edx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push ebx
push edx
call esi
mov eax, dword [esp + 0x24]
cmp eax, ebx
je 0x490d7b
add eax, 0xfffffff8
push eax
mov eax, dword [0x51d3c8]
push ebx
push eax
call esi
mov eax, dword [esp + 0x2c]
cmp eax, ebx
je 0x490d91
mov ecx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push ebx
push ecx
call esi
mov eax, dword [esp + 0x20]
cmp eax, ebx
je 0x490da7
mov edx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push ebx
push edx
call esi
mov eax, dword [esp + 0x1c]
cmp eax, ebx
je 0x490dbc
add eax, 0xfffffff8
push eax
mov eax, dword [0x51d3c8]
push ebx
push eax
call esi
mov ecx, dword [esp + 0x14]
mov edx, dword [0x51d3c8]
add ecx, 0xfffffff8
push ecx
push ebx
push edx
call esi
mov eax, edi
jmp 0x492b21
mov eax, dword [esp + 0x4c]
mov edx, dword [ebp + 0xe0]
mov ecx, dword [esp + 0x38]
mov esi, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0x18]
cmp eax, ebx
mov dword [esp + 0x84], edx
mov edx, dword [ebp + 0x18]
mov dword [esp + 0x7c], 3
mov dword [esp + 0x80], ebx
mov dword [esp + 0x8c], ecx
mov dword [esp + 0x90], edx
mov dword [esp + 0x94], ebx
mov dword [esp + 0x98], 1
mov dword [esp + 0x9c], ebx
je 0x490e3f
push eax
mov dword [esp + 0x1c], ebx
call esi
mov ecx, dword [ebp + 0x18]
lea eax, [esp + 0x7c]
push eax
push ebp
push 0x465
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov edi, eax
mov eax, dword [esp + 0x18]
cmp eax, ebx
je 0x490e61
push eax
call esi
mov eax, dword [esp + 0x3c]
cmp eax, ebx
mov esi, dword [sym.imp.KERNEL32.dll_HeapFree]
je 0x490e7d
mov edx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push ebx
push edx
call esi
mov eax, dword [esp + 0x24]
cmp eax, ebx
je 0x490e92
add eax, 0xfffffff8
push eax
mov eax, dword [0x51d3c8]
push ebx
push eax
call esi
mov eax, dword [esp + 0x2c]
cmp eax, ebx
je 0x490ea8
mov ecx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push ebx
push ecx
call esi
mov eax, dword [esp + 0x20]
cmp eax, ebx
je 0x490ebe
mov edx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push ebx
push edx
call esi
mov eax, dword [esp + 0x1c]
cmp eax, ebx
je 0x490ed3
add eax, 0xfffffff8
push eax
mov eax, dword [0x51d3c8]
push ebx
push eax
call esi
mov ecx, dword [esp + 0x14]
mov edx, dword [0x51d3c8]
add ecx, 0xfffffff8
push ecx
push ebx
push edx
call esi
mov eax, edi
jmp 0x492b21
mov eax, dword [esp + 0x18]
cmp eax, ebx
mov esi, dword [ebp + 0x18]
je 0x490f02
push eax
mov dword [esp + 0x1c], ebx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x38]
push ebx
push ebp
push edx
push edi
push eax
push esi
push ecx
call fcn.00443af0
mov esi, dword [sym.imp.KERNEL32.dll_HeapFree]
add esp, 0x1c
jmp 0x491a9f
mov eax, dword [esp + 0x18]
test eax, eax
je 0x490f37
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [esp + 0x3c]
test eax, eax
je 0x490f53
mov edx, eax
mov eax, dword [0x51d3c8]
add edx, 0xfffffff8
push edx
push 0
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [esp + 0x24]
test eax, eax
je 0x490f70
mov edx, dword [0x51d3c8]
mov ecx, eax
add ecx, 0xfffffff8
push ecx
push 0
push edx
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x490f8b
mov ecx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push 0
push ecx
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [esp + 0x20]
test eax, eax
je 0x490fa7
mov edx, eax
mov eax, dword [0x51d3c8]
add edx, 0xfffffff8
push edx
push 0
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x490fc4
mov edx, dword [0x51d3c8]
mov ecx, eax
add ecx, 0xfffffff8
push ecx
push 0
push edx
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [esp + 0x14]
mov ecx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push 0
push ecx
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, 0x80070057
jmp 0x492b21
mov esi, dword [esp + 0x64]
cmp word [esi], di
jne 0x49101b
mov edx, dword [esp + 0x10]
push edx
lea ecx, [ebx + 4]
call fcn.004566f0
mov ebx, dword [ebx + 0xc]
cmp word [ebx], di
je 0x491386
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x38]
push eax
push ebx
call fcn.00448be0
jmp 0x491386
push esi
push str.Enable
call fcn.00444a10
add esp, 8
test al, al
je 0x4911f3
mov ecx, dword [esp + 0x10]
mov ax, word [ecx]
xor esi, esi
cmp ax, 0x30
jb 0x49104a
cmp ax, 0x39
jbe 0x4910e7
mov eax, dword [esp + 0x18]
cmp eax, edi
je 0x491059
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [esp + 0x3c]
cmp eax, edi
mov esi, dword [sym.imp.KERNEL32.dll_HeapFree]
je 0x491075
mov edx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push edi
push edx
call esi
mov eax, dword [esp + 0x24]
cmp eax, edi
je 0x49108a
add eax, 0xfffffff8
push eax
mov eax, dword [0x51d3c8]
push edi
push eax
call esi
mov eax, dword [esp + 0x2c]
cmp eax, edi
je 0x4910a0
mov ecx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push edi
push ecx
call esi
mov eax, dword [esp + 0x20]
cmp eax, edi
je 0x4910b6
mov edx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push edi
push edx
call esi
mov eax, dword [esp + 0x1c]
cmp eax, edi
je 0x4910cb
add eax, 0xfffffff8
push eax
mov eax, dword [0x51d3c8]
push edi
push eax
call esi
mov ecx, dword [esp + 0x14]
mov edx, dword [0x51d3c8]
add ecx, 0xfffffff8
push ecx
push edi
push edx
call esi
mov eax, 0x80070057
jmp 0x492b21
mov eax, dword [ebp + 0x18]
push eax
call dword [sym.imp.USER32.dll_GetMenu]
lea ecx, [esp + 0x40]
push ecx
lea edx, [esp + 0x14]
push edx
mov ebp, eax
mov dword [esp + 0x48], edi
mov dword [esp + 0x4c], edi
call fcn.0044cd70
add esp, 8
test eax, eax
jle 0x491142
mov ecx, dword [esp + 0x10]
cmp ecx, edi
je 0x49113e
lea esp, [esp]
mov ax, word [ecx]
cmp ax, 9
jb 0x49112f
cmp ax, 0xd
jbe 0x491135
cmp ax, 0x20
jne 0x49113e
add ecx, 2
mov dword [esp + 0x10], ecx
jmp 0x491120
mov esi, dword [esp + 0x40]
cmp ebp, edi
je 0x491165
mov ecx, dword [ebx + 0x14]
mov edx, dword [ebx + 0x10]
xor eax, eax
cmp esi, edi
setne al
dec eax
and eax, 3
or eax, 0x400
push eax
push ecx
push edx
call dword [sym.imp.USER32.dll_EnableMenuItem]
cmp esi, edi
mov al, byte [ebx]
je 0x49116f
and al, 0xfe
jmp 0x491171
or al, 1
mov esi, dword [ebx + 0xc]
push esi
mov byte [ebx], al
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea edi, [eax + eax + 2]
push edi
call fcn.00449130
mov ecx, edi
mov edx, ecx
shr ecx, 2
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
add esp, 4
rep movsb byte es:[edi], byte [esi]
mov dword [esp + 0x40], eax
push str..Enable
lea ecx, [esp + 0x44]
mov byte [esp + 0x174], 0x15
call fcn.00449510
test byte [ebx], 1
mov eax, 0x4f24cc
jne 0x4911c5
mov eax, 0x4f24d0
mov esi, dword [esp + 0x40]
mov ecx, dword [esp + 0x38]
push eax
push esi
call fcn.00466e80
test esi, esi
je 0x491386
mov eax, dword [0x51d3c8]
add esi, 0xfffffff8
push esi
push 0
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x491386
push esi
push 0x4fb27c
call fcn.00444a10
add esp, 8
test al, al
je 0x491386
mov ecx, dword [esp + 0x10]
cmp word [ecx], 0x3f
jne 0x49121c
mov eax, ecx
add eax, 2
mov dword [esp + 0x10], eax
push 2
mov dword [esp + 0x5c], edi
call fcn.00449130
add esp, 4
cmp eax, edi
mov dword [esp + 0x58], eax
je 0x491235
mov word [eax], di
push 2
mov dword [esp + 0x38], edi
call fcn.00449130
add esp, 4
cmp eax, edi
mov dword [esp + 0x34], eax
je 0x49124e
mov word [eax], di
push 2
mov dword [esp + 0x2c], edi
call fcn.00449130
add esp, 4
cmp eax, edi
mov dword [esp + 0x28], eax
je 0x491267
mov word [eax], di
mov ebp, dword [esp + 0x38]
push 0x2c
push 0x3b
lea edx, [esp + 0x60]
push edx
lea eax, [esp + 0x1c]
push eax
mov ecx, ebp
mov byte [esp + 0x180], 0x18
call fcn.0043de70
push 0x2c
push 0x3b
lea ecx, [esp + 0x3c]
push ecx
lea edx, [esp + 0x1c]
push edx
mov ecx, ebp
call fcn.0043de70
push 0x2c
push 0x3b
lea eax, [esp + 0x30]
push eax
lea ecx, [esp + 0x1c]
push ecx
mov ecx, ebp
call fcn.0043de70
mov edx, dword [ebx + 0x10]
mov esi, dword [sym.imp.USER32.dll_wsprintfW]
push edx
lea eax, [esp + 0xa4]
push str.0x_p
push eax
call esi
mov edx, dword [esp + 0x64]
add esp, 0xc
lea ecx, [esp + 0xa0]
push ecx
push edx
mov ecx, ebp
call fcn.00448be0
movzx eax, word [ebx + 2]
push eax
lea ecx, [esp + 0xa4]
push str.0x_X
push ecx
call esi
mov eax, dword [esp + 0x40]
add esp, 0xc
lea edx, [esp + 0xa0]
push edx
push eax
mov ecx, ebp
call fcn.00448be0
mov ecx, dword [ebx + 0x14]
push ecx
lea edx, [esp + 0xa4]
push str.0x_X
push edx
call esi
mov ecx, dword [esp + 0x34]
add esp, 0xc
lea eax, [esp + 0xa0]
push eax
push ecx
mov ecx, ebp
call fcn.00448be0
mov eax, dword [esp + 0x28]
cmp eax, edi
mov esi, dword [sym.imp.KERNEL32.dll_HeapFree]
je 0x491353
mov edx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push edi
push edx
call esi
mov eax, dword [esp + 0x34]
cmp eax, edi
mov dword [esp + 0x28], edi
je 0x49136c
add eax, 0xfffffff8
push eax
mov eax, dword [0x51d3c8]
push edi
push eax
call esi
mov eax, dword [esp + 0x58]
cmp eax, edi
mov dword [esp + 0x34], edi
je 0x491386
mov ecx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push edi
push ecx
call esi
mov eax, dword [esp + 0x18]
test eax, eax
je 0x491395
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [esp + 0x3c]
test eax, eax
mov esi, dword [sym.imp.KERNEL32.dll_HeapFree]
je 0x4913b2
mov edx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push 0
push edx
call esi
mov eax, dword [esp + 0x24]
test eax, eax
je 0x4913c8
add eax, 0xfffffff8
push eax
mov eax, dword [0x51d3c8]
push 0
push eax
call esi
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x4913df
mov ecx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push 0
push ecx
call esi
mov eax, dword [esp + 0x20]
test eax, eax
je 0x4913f6
mov edx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push 0
push edx
call esi
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x490507
add eax, 0xfffffff8
push eax
jmp 0x4904fd
mov eax, dword [esp + 0x18]
test eax, eax
je 0x49141a
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [esp + 0x3c]
test eax, eax
mov esi, dword [sym.imp.KERNEL32.dll_HeapFree]
je 0x491436
add eax, 0xfffffff8
push eax
mov eax, dword [0x51d3c8]
push 0
push eax
call esi
mov eax, dword [esp + 0x24]
test eax, eax
je 0x49144d
mov ecx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push 0
push ecx
call esi
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x491464
mov edx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push 0
push edx
call esi
mov eax, dword [esp + 0x20]
test eax, eax
je 0x49147a
add eax, 0xfffffff8
push eax
mov eax, dword [0x51d3c8]
push 0
push eax
call esi
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x491491
mov ecx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push 0
push ecx
call esi
mov edx, dword [esp + 0x14]
mov eax, dword [0x51d3c8]
add edx, 0xfffffff8
push edx
push 0
push eax
call esi
mov eax, 0x80070057
jmp 0x492b21
mov eax, dword [esp + 0x18]
test eax, eax
je 0x4928ba
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x4928ba
mov edx, dword [esp + 0x64]
push edx
push str.MouseCapture
call fcn.00444a10
mov edi, dword [esp + 0x18]
add esp, 8
test al, al
je 0x4915da
cmp word [edi], 0x23
je 0x4915da
mov ebp, esi
jmp 0x4914f5
mov edi, dword [esp + 0x10]
cmp word [edi], 0x23
sete bl
test bl, bl
je 0x491507
add edi, 2
mov dword [esp + 0x10], edi
lea eax, [esp + 0x40]
push eax
lea ecx, [esp + 0x14]
or esi, 0xffffffff
push ecx
mov dword [esp + 0x48], esi
mov dword [esp + 0x4c], esi
call fcn.0044cd70
add esp, 8
test eax, eax
jle 0x491552
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x49154e
mov ax, word [ecx]
cmp ax, 9
jb 0x49153f
cmp ax, 0xd
jbe 0x491545
cmp ax, 0x20
jne 0x49154e
add ecx, 2
mov dword [esp + 0x10], ecx
jmp 0x491530
mov esi, dword [esp + 0x40]
test bl, bl
mov edi, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
je 0x4915ae
test esi, esi
jle 0x491574
mov edx, dword [ebp + 0x18]
mov ebx, dword [ebp + 0xe0]
push edx
call fcn.00446820
add esp, 4
jmp 0x4915c6
jne 0x4915c6
push 0x51d5ec
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x51d570]
xor esi, esi
cmp eax, esi
je 0x4915a5
push eax
call dword [sym.imp.USER32.dll_UnhookWindowsHookEx]
mov dword [0x51d570], esi
mov dword [0x51d574], esi
mov dword [0x51d578], esi
push 0x51d5ec
call edi
jmp 0x4915c6
test esi, esi
jle 0x4915be
mov eax, dword [ebp + 0x18]
push eax
call dword [sym.imp.USER32.dll_SetCapture]
jmp 0x4915c6
jne 0x4915c6
call dword [sym.imp.USER32.dll_ReleaseCapture]
mov eax, dword [esp + 0x18]
test eax, eax
je 0x4928ba
push eax
call edi
jmp 0x4928ba
mov edx, dword [esp + 0x64]
push edx
push 0x4fb288
call fcn.00444a10
add esp, 8
test al, al
je 0x49180f
mov eax, dword [esi + 0x1c]
mov ebp, dword [eax + 0x18]
add ebx, 0x1000
test edi, edi
je 0x491622
mov ax, word [edi]
cmp ax, 9
jb 0x491613
cmp ax, 0xd
jbe 0x491619
cmp ax, 0x20
jne 0x491622
add edi, 2
mov dword [esp + 0x10], edi
jmp 0x491604
cmp word [edi], 0x3f
je 0x491665
mov eax, dword [esp + 0x18]
test eax, eax
je 0x49163b
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov edi, dword [esp + 0x10]
test edi, edi
je 0x4924fd
mov ax, word [edi]
cmp ax, 9
jb 0x491652
cmp ax, 0xd
jbe 0x49165c
cmp ax, 0x20
jne 0x4924fd
add edi, 2
mov dword [esp + 0x10], edi
jmp 0x491643
push 2
call fcn.00449130
add esp, 4
test eax, eax
mov dword [esp + 0x50], eax
je 0x49167c
mov word [eax], 0
mov edi, 2
push edi
call fcn.00449130
mov esi, eax
add esp, 4
test esi, esi
mov dword [esp + 0x40], esi
je 0x491699
mov word [esi], 0
mov edx, dword [esp + 0x10]
push 0x2c
add edx, edi
push 0x3b
lea ecx, [esp + 0x58]
mov dword [esp + 0x18], edx
push ecx
lea edx, [esp + 0x1c]
push edx
mov byte [esp + 0x180], 0x1a
call fcn.0044c830
mov eax, dword [esp + 0x20]
add esp, 0x10
cmp word [eax], 0
je 0x4916eb
push 0x2c
push 0x3b
lea ecx, [esp + 0x48]
push ecx
lea edx, [esp + 0x1c]
add eax, edi
push edx
mov dword [esp + 0x20], eax
call fcn.0044c830
mov esi, dword [esp + 0x50]
add esp, 0x10
mov eax, ebp
cdq
push str.0x_I64X
push edx
push eax
lea eax, [esp + 0xac]
push eax
call fcn.004a4880
mov edi, dword [esp + 0x60]
mov ebp, dword [esp + 0x48]
add esp, 0x10
lea ecx, [esp + 0xa0]
push ecx
push edi
mov ecx, ebp
call fcn.00448be0
push ebx
lea edx, [esp + 0xa4]
push str.0x_X
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea eax, [esp + 0xa0]
push eax
push esi
mov ecx, ebp
call fcn.00448be0
test esi, esi
je 0x49175f
mov ecx, dword [0x51d3c8]
add esi, 0xfffffff8
push esi
mov esi, dword [sym.imp.KERNEL32.dll_HeapFree]
push 0
push ecx
call esi
jmp 0x491765
mov esi, dword [sym.imp.KERNEL32.dll_HeapFree]
test edi, edi
je 0x491778
mov edx, dword [0x51d3c8]
add edi, 0xfffffff8
push edi
push 0
push edx
call esi
mov eax, dword [esp + 0x18]
test eax, eax
je 0x491787
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [esp + 0x3c]
test eax, eax
je 0x49179d
add eax, 0xfffffff8
push eax
mov eax, dword [0x51d3c8]
push 0
push eax
call esi
mov eax, dword [esp + 0x24]
test eax, eax
je 0x4917b4
mov ecx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push 0
push ecx
call esi
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x4917cb
mov edx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push 0
push edx
call esi
mov eax, dword [esp + 0x20]
test eax, eax
je 0x4917e1
add eax, 0xfffffff8
push eax
mov eax, dword [0x51d3c8]
push 0
push eax
call esi
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x4917f8
mov ecx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push 0
push ecx
call esi
mov edx, dword [esp + 0x14]
mov eax, dword [0x51d3c8]
add edx, 0xfffffff8
push edx
push 0
push eax
call esi
jmp 0x492b1f
mov ebx, dword [esp + 0x64]
push ebx
push 0x4fb28c
call fcn.00444a10
add esp, 8
test al, al
je 0x491ab7
mov ebp, esi
xor ebx, ebx
jmp 0x491833
mov edi, dword [esp + 0x10]
cmp edi, ebx
je 0x491855
mov ax, word [edi]
cmp ax, 9
jb 0x491846
cmp ax, 0xd
jbe 0x49184c
cmp ax, 0x20
jne 0x491855
add edi, 2
mov dword [esp + 0x10], edi
jmp 0x491837
cmp word [edi], 0x3f
je 0x491866
mov eax, dword [esp + 0x18]
cmp eax, ebx
jmp 0x49162e
lea ecx, [esp + 0x58]
push ecx
call dword [sym.imp.USER32.dll_GetCursorPos]
mov edx, dword [esp + 0x58]
mov eax, dword [esp + 0x5c]
lea ecx, [esp + 0x70]
mov dword [esp + 0x70], edx
mov edx, dword [ebp + 0x18]
push ecx
push edx
mov dword [esp + 0x7c], eax
call dword [sym.imp.USER32.dll_ScreenToClient]
push 2
call fcn.00449130
add esp, 4
cmp eax, ebx
mov dword [esp + 0x34], eax
je 0x4918a5
mov word [eax], bx
mov esi, 2
push esi
call fcn.00449130
mov ebp, eax
add esp, 4
test ebp, ebp
mov dword [esp + 0x28], ebp
je 0x4918c3
mov word [ebp], 0
push esi
call fcn.00449130
mov ebx, eax
add esp, 4
test ebx, ebx
mov dword [esp + 0x50], ebx
je 0x4918db
mov word [ebx], 0
push esi
call fcn.00449130
mov edi, eax
add esp, 4
test edi, edi
mov dword [esp + 0x40], edi
je 0x4918f3
mov word [edi], 0
mov ecx, dword [esp + 0x10]
push 0x2c
add ecx, esi
push 0x3b
lea eax, [esp + 0x3c]
mov dword [esp + 0x18], ecx
push eax
lea ecx, [esp + 0x1c]
push ecx
mov byte [esp + 0x180], 0x14
call fcn.0044c830
mov edx, dword [esp + 0x20]
add esp, 0x10
cmp word [edx], 0
je 0x49199d
push 0x2c
push 0x3b
lea eax, [esp + 0x30]
push eax
lea ecx, [esp + 0x1c]
add edx, esi
push ecx
mov dword [esp + 0x20], edx
call fcn.0044c830
mov edx, dword [esp + 0x20]
add esp, 0x10
cmp word [edx], 0
je 0x491999
mov ecx, edx
push 0x2c
add ecx, esi
push 0x3b
lea eax, [esp + 0x58]
mov dword [esp + 0x18], ecx
push eax
lea ecx, [esp + 0x1c]
push ecx
call fcn.0044c830
mov edx, dword [esp + 0x20]
add esp, 0x10
cmp word [edx], 0
je 0x491995
push 0x2c
push 0x3b
lea eax, [esp + 0x48]
mov ebp, edx
push eax
lea ecx, [esp + 0x1c]
add ebp, esi
push ecx
mov dword [esp + 0x20], ebp
call fcn.0044c830
mov edi, dword [esp + 0x50]
add esp, 0x10
mov ebx, dword [esp + 0x50]
mov ebp, dword [esp + 0x28]
mov edx, dword [esp + 0x58]
mov esi, dword [sym.imp.USER32.dll_wsprintfW]
push edx
lea eax, [esp + 0xa4]
push 0x4f40fc
push eax
call esi
mov edx, dword [esp + 0x40]
add esp, 0xc
lea ecx, [esp + 0xa0]
push ecx
mov ecx, dword [esp + 0x3c]
push edx
call fcn.00448be0
mov eax, dword [esp + 0x5c]
push eax
lea ecx, [esp + 0xa4]
push 0x4f40fc
push ecx
call esi
mov ecx, dword [esp + 0x44]
add esp, 0xc
lea edx, [esp + 0xa0]
push edx
push ebp
call fcn.00448be0
mov eax, dword [esp + 0x70]
push eax
lea ecx, [esp + 0xa4]
push 0x4f40fc
push ecx
call esi
mov ecx, dword [esp + 0x44]
add esp, 0xc
lea edx, [esp + 0xa0]
push edx
push ebx
call fcn.00448be0
mov eax, dword [esp + 0x74]
push eax
lea ecx, [esp + 0xa4]
push 0x4f40fc
push ecx
call esi
mov ecx, dword [esp + 0x44]
add esp, 0xc
lea edx, [esp + 0xa0]
push edx
push edi
call fcn.00448be0
test edi, edi
mov esi, dword [sym.imp.KERNEL32.dll_HeapFree]
je 0x491a63
mov eax, dword [0x51d3c8]
add edi, 0xfffffff8
push edi
push 0
push eax
call esi
test ebx, ebx
je 0x491a76
mov ecx, dword [0x51d3c8]
add ebx, 0xfffffff8
push ebx
push 0
push ecx
call esi
test ebp, ebp
je 0x491a89
mov edx, dword [0x51d3c8]
add ebp, 0xfffffff8
push ebp
push 0
push edx
call esi
mov eax, dword [esp + 0x34]
test eax, eax
je 0x491a9f
add eax, 0xfffffff8
push eax
mov eax, dword [0x51d3c8]
push 0
push eax
call esi
mov eax, dword [esp + 0x18]
test eax, eax
je 0x4928c0
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x4928c0
mov eax, dword [esi + 4]
cmp eax, 3
je 0x491ac4
cmp eax, 1
jne 0x491afa
cmp word [ebx], 0
jne 0x491afa
mov cl, byte [esp + 0x4a]
test cl, cl
jne 0x491afa
cmp eax, 3
mov ecx, 0x1000000
jne 0x491ae1
test dword [esi + 0x40], ecx
jne 0x491aeb
cmp eax, 1
jne 0x491afa
test dword [esi + 0x58], ecx
je 0x491afa
push 0
push edi
call fcn.00423b0c
mov edi, dword [esp + 0x18]
add esp, 8
push ebx
push str.POSTMSG
call fcn.00444a10
add esp, 8
test al, al
je 0x491bcc
mov edx, dword [esp + 0x38]
mov eax, dword [esi + 0x1c]
mov ecx, dword [esp + 0x4c]
push 0
push 0
push edx
push eax
push ecx
lea ecx, [esi + 0x34]
call fcn.004ab9d4
mov edi, eax
mov eax, dword [esp + 0x18]
test eax, eax
je 0x491b3b
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [esp + 0x3c]
test eax, eax
mov esi, dword [sym.imp.KERNEL32.dll_HeapFree]
je 0x491b58
mov edx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push 0
push edx
call esi
mov eax, dword [esp + 0x24]
test eax, eax
je 0x491b6e
add eax, 0xfffffff8
push eax
mov eax, dword [0x51d3c8]
push 0
push eax
call esi
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x491b85
mov ecx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push 0
push ecx
call esi
mov eax, dword [esp + 0x20]
test eax, eax
je 0x491b9c
mov edx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push 0
push edx
call esi
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x491bb2
add eax, 0xfffffff8
push eax
mov eax, dword [0x51d3c8]
push 0
push eax
call esi
mov ecx, dword [esp + 0x14]
mov edx, dword [0x51d3c8]
add ecx, 0xfffffff8
push ecx
push 0
push edx
call esi
mov eax, edi
jmp 0x492b21
push ebx
push str.SENDMSG
call fcn.00444a10
add esp, 8
test al, al
je 0x491ca2
mov ecx, dword [esp + 0x38]
mov edx, dword [esi + 0x1c]
lea eax, [esp + 0x18]
push eax
mov eax, dword [esp + 0x50]
push 1
push ecx
push edx
push eax
lea ecx, [esi + 0x34]
call fcn.004ab9d4
mov edi, eax
mov eax, dword [esp + 0x18]
test eax, eax
je 0x491c10
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [esp + 0x3c]
test eax, eax
mov esi, dword [sym.imp.KERNEL32.dll_HeapFree]
je 0x491c2d
mov ecx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push 0
push ecx
call esi
mov eax, dword [esp + 0x24]
test eax, eax
je 0x491c44
mov edx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push 0
push edx
call esi
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x491c5a
add eax, 0xfffffff8
push eax
mov eax, dword [0x51d3c8]
push 0
push eax
call esi
mov eax, dword [esp + 0x20]
test eax, eax
je 0x491c71
mov ecx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push 0
push ecx
call esi
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x491c88
mov edx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push 0
push edx
call esi
mov eax, dword [esp + 0x14]
mov ecx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push 0
push ecx
call esi
mov eax, edi
jmp 0x492b21
push ebx
push 0x4f39ec
call fcn.00444a10
add esp, 8
test al, al
je 0x491e75
mov eax, dword [esi + 0x1c]
xor edi, edi
cmp eax, edi
jne 0x491d62
mov eax, dword [esp + 0x18]
cmp eax, edi
je 0x491cd4
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [esp + 0x3c]
cmp eax, edi
mov esi, dword [sym.imp.KERNEL32.dll_HeapFree]
je 0x491cf0
mov edx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push edi
push edx
call esi
mov eax, dword [esp + 0x24]
cmp eax, edi
je 0x491d05
add eax, 0xfffffff8
push eax
mov eax, dword [0x51d3c8]
push edi
push eax
call esi
mov eax, dword [esp + 0x2c]
cmp eax, edi
je 0x491d1b
mov ecx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push edi
push ecx
call esi
mov eax, dword [esp + 0x20]
cmp eax, edi
je 0x491d31
mov edx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push edi
push edx
call esi
mov eax, dword [esp + 0x1c]
cmp eax, edi
je 0x491d46
add eax, 0xfffffff8
push eax
mov eax, dword [0x51d3c8]
push edi
push eax
call esi
mov ecx, dword [esp + 0x14]
mov edx, dword [0x51d3c8]
add ecx, 0xfffffff8
push ecx
push edi
push edx
call esi
mov eax, 0x80070057
jmp 0x492b21
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x38]
add esi, 0x34
mov dword [esp + 0x84], esi
mov esi, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov dword [esp + 0x7c], 3
mov dword [esp + 0x80], edi
mov dword [esp + 0x88], ecx
mov dword [esp + 0x8c], edx
mov eax, dword [eax + 0x18]
mov dword [esp + 0x90], eax
mov eax, dword [esp + 0x18]
cmp eax, edi
mov dword [esp + 0x94], edi
mov dword [esp + 0x98], 1
mov dword [esp + 0x9c], edi
je 0x491dc9
push eax
mov dword [esp + 0x1c], edi
call esi
mov edx, dword [ebp + 0x18]
lea ecx, [esp + 0x7c]
push ecx
push ebp
push 0x465
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
mov ebx, eax
mov eax, dword [esp + 0x18]
cmp eax, edi
je 0x491deb
push eax
call esi
mov eax, dword [esp + 0x3c]
cmp eax, edi
mov esi, dword [sym.imp.KERNEL32.dll_HeapFree]
je 0x491e06
add eax, 0xfffffff8
push eax
mov eax, dword [0x51d3c8]
push edi
push eax
call esi
mov eax, dword [esp + 0x24]
cmp eax, edi
je 0x491e1c
mov ecx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push edi
push ecx
call esi
mov eax, dword [esp + 0x2c]
cmp eax, edi
je 0x491e32
mov edx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push edi
push edx
call esi
mov eax, dword [esp + 0x20]
cmp eax, edi
je 0x491e47
add eax, 0xfffffff8
push eax
mov eax, dword [0x51d3c8]
push edi
push eax
call esi
mov eax, dword [esp + 0x1c]
cmp eax, edi
je 0x491e5d
mov ecx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push edi
push ecx
call esi
mov edx, dword [esp + 0x14]
mov eax, dword [0x51d3c8]
add edx, 0xfffffff8
push edx
push edi
push eax
call esi
mov eax, ebx
jmp 0x492b21
push ebx
push str.bkcolor
call fcn.00444a10
add esp, 8
test al, al
jne 0x491eff
push ebx
push str.Cursor
call fcn.00444a10
add esp, 8
test al, al
jne 0x491eff
push ebx
push 0x4fb25c
call fcn.00444a10
add esp, 8
test al, al
jne 0x491eff
push ebx
push str.font
call fcn.00444a10
add esp, 8
test al, al
jne 0x491eff
push ebx
push str.trans
call fcn.00444a10
add esp, 8
test al, al
jne 0x491eff
push ebx
push str.style
call fcn.00444a10
add esp, 8
test al, al
jne 0x491eff
push ebx
push 0x4f41c4
call fcn.00444a10
add esp, 8
test al, al
je 0x491fae
mov edi, dword [esp + 0x4c]
mov dword [esp + 0x10], edi
mov ebx, dword [esi + 0x1c]
test ebx, ebx
mov eax, dword [esp + 0x18]
jne 0x492039
test eax, eax
je 0x491f19
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [esp + 0x3c]
test eax, eax
mov esi, dword [sym.imp.KERNEL32.dll_HeapFree]
je 0x491f36
mov ecx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push 0
push ecx
call esi
mov eax, dword [esp + 0x24]
test eax, eax
je 0x491f4d
mov edx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push 0
push edx
call esi
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x491f63
add eax, 0xfffffff8
push eax
mov eax, dword [0x51d3c8]
push 0
push eax
call esi
mov eax, dword [esp + 0x20]
test eax, eax
je 0x491f7a
mov ecx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push 0
push ecx
call esi
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x491f91
mov edx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push 0
push edx
call esi
mov eax, dword [esp + 0x14]
mov ecx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push 0
push ecx
call esi
mov eax, 0x80070057
jmp 0x492b21
cmp dword [esi + 4], 9
jne 0x491fd3
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x4c]
lea ecx, [esp + 0x18]
push ecx
mov ecx, dword [esp + 0x3c]
push edx
push ebx
push edi
push eax
push ecx
mov ecx, esi
call fcn.00451370
jmp 0x491feb
mov ecx, dword [esp + 0x2c]
mov edx, dword [esi]
lea eax, [esp + 0x18]
push eax
mov eax, dword [esp + 0x3c]
push ecx
push ebx
push edi
push eax
mov ecx, esi
call dword [edx + 4]
mov esi, eax
mov eax, dword [esp + 0x18]
test eax, eax
je 0x491ffc
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea ecx, [esp + 0x6c]
call fcn.00443880
lea ecx, [esp + 0x24]
call fcn.00443880
lea ecx, [esp + 0x68]
call fcn.00443880
lea ecx, [esp + 0x20]
call fcn.00443880
lea ecx, [esp + 0x1c]
call fcn.00443880
lea ecx, [esp + 0x14]
call fcn.00443880
mov eax, esi
jmp 0x492b21
test eax, eax
mov ebp, dword [ebx + 0x18]
je 0x492053
push eax
mov dword [esp + 0x1c], 0
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov edi, dword [esp + 0x10]
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x38]
push esi
push ebx
push edx
push eax
push edi
push ebp
push ecx
call fcn.00443af0
mov eax, dword [esp + 0x34]
add esp, 0x1c
test eax, eax
je 0x49207d
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [esp + 0x3c]
test eax, eax
mov esi, dword [sym.imp.KERNEL32.dll_HeapFree]
je 0x49209a
mov edx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push 0
push edx
call esi
mov eax, dword [esp + 0x24]
test eax, eax
je 0x4920b0
add eax, 0xfffffff8
push eax
mov eax, dword [0x51d3c8]
push 0
push eax
call esi
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x4920c7
mov ecx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push 0
push ecx
call esi
mov eax, dword [esp + 0x20]
test eax, eax
je 0x4920de
mov edx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push 0
push edx
call esi
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x4920f4
add eax, 0xfffffff8
push eax
mov eax, dword [0x51d3c8]
push 0
push eax
call esi
mov ecx, dword [esp + 0x14]
mov edx, dword [0x51d3c8]
add ecx, 0xfffffff8
push ecx
push 0
push edx
call esi
jmp 0x492b1f
mov eax, edi
mov edx, str._Cur
mov cl, byte [edx]
test cl, cl
jne 0x492122
cmp word [eax], bp
je 0x4922f2
movzx esi, word [eax]
movsx ecx, cl
or esi, 0x20
or ecx, 0x20
add eax, 2
inc edx
cmp ecx, esi
je 0x492113
mov eax, edi
mov edx, str._EATEKEYS
lea ecx, [ecx]
mov cl, byte [edx]
test cl, cl
jne 0x49214f
cmp word [eax], bp
je 0x49267c
movzx esi, word [eax]
movsx ecx, cl
or esi, 0x20
or ecx, 0x20
add eax, 2
inc edx
cmp ecx, esi
je 0x492140
mov eax, edi
mov edx, str._POSTMSG
lea ebx, [ebx]
mov cl, byte [edx]
test cl, cl
jne 0x49217f
cmp word [eax], bp
je 0x49271e
movzx esi, word [eax]
movsx ecx, cl
or esi, 0x20
or ecx, 0x20
add eax, 2
inc edx
cmp ecx, esi
je 0x492170
push edi
push str._SENDMSG
call fcn.00444a10
add esp, 8
test al, al
je 0x492728
mov byte [esp + 0x28], 1
xor ebp, ebp
push 2
mov dword [esp + 0x74], ebp
mov dword [esp + 0x5c], ebp
mov dword [esp + 0x38], ebp
call fcn.00449130
mov ebx, eax
add esp, 4
cmp ebx, ebp
mov dword [esp + 0x50], ebx
je 0x4921d3
mov word [ebx], bp
mov edx, dword [esp + 0x10]
cmp word [edx], 0x3a
mov byte [esp + 0x170], 0xf
jne 0x49229d
mov eax, edx
add eax, 2
mov dword [esp + 0x10], eax
lea eax, [esp + 0x10]
push eax
call fcn.00443850
mov ecx, dword [esp + 0x14]
mov ax, word [ecx]
add esp, 4
cmp ax, bp
mov esi, ecx
je 0x492231
lea ecx, [ecx]
cmp ax, 0x2c
je 0x492231
cmp ax, 0x3b
je 0x492231
cmp ax, 0x3a
je 0x492231
add ecx, 2
mov dword [esp + 0x10], ecx
mov ax, word [ecx]
cmp ax, bp
jne 0x492210
sub ecx, esi
sar ecx, 1
mov edi, ecx
cmp edi, ebp
jge 0x492244
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov edi, eax
lea eax, [edi + edi + 4]
push ebx
call fcn.00449190
add esp, 4
cmp eax, ebp
mov dword [esp + 0x50], eax
je 0x49225e
mov word [eax + edi*2 + 2], bp
lea edx, [edi + edi]
mov ecx, edx
mov ebx, ecx
shr ecx, 2
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov word [edx + eax], bp
mov ecx, dword [esp + 0x10]
cmp word [ecx], bp
je 0x492289
mov eax, ecx
add eax, 2
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x38]
push 1
lea edx, [esp + 0x54]
push edx
call fcn.004166b6
mov ebx, dword [esp + 0x50]
lea eax, [esp + 0x40]
push eax
lea ecx, [esp + 0x14]
push ecx
mov dword [esp + 0x48], ebp
mov dword [esp + 0x4c], ebp
call fcn.0044cd70
add esp, 8
test eax, eax
jle 0x492e4b
mov eax, dword [esp + 0x10]
cmp eax, ebp
je 0x492e3f
jmp 0x4922d0
mov cx, word [eax]
cmp cx, 9
jb 0x4922df
cmp cx, 0xd
jbe 0x4922e9
cmp cx, 0x20
jne 0x492e3f
add eax, 2
mov dword [esp + 0x10], eax
jmp 0x4922d0
mov edi, dword [esp + 0x10]
cmp word [edi], 0x3f
sete al
test al, al
je 0x49163b
push 2
mov dword [esp + 0x38], ebp
call fcn.00449130
add esp, 4
cmp eax, ebp
mov dword [esp + 0x34], eax
je 0x49231e
mov word [eax], bp
push 2
mov dword [esp + 0x2c], ebp
call fcn.00449130
add esp, 4
cmp eax, ebp
mov dword [esp + 0x28], eax
je 0x492337
mov word [eax], bp
push 2
mov dword [esp + 0x5c], ebp
call fcn.00449130
add esp, 4
cmp eax, ebp
mov dword [esp + 0x58], eax
je 0x492350
mov word [eax], bp
mov ecx, dword [esp + 0x10]
mov ebx, dword [esp + 0x38]
push 0x2c
push 0x3b
add ecx, 2
lea edx, [esp + 0x3c]
push edx
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], ecx
push eax
mov ecx, ebx
mov byte [esp + 0x180], 9
call fcn.0043de70
push 0x2c
push 0x3b
lea ecx, [esp + 0x30]
push ecx
lea edx, [esp + 0x1c]
push edx
mov ecx, ebx
call fcn.0043de70
push 0x2c
push 0x3b
lea eax, [esp + 0x60]
push eax
lea ecx, [esp + 0x1c]
push ecx
mov ecx, ebx
call fcn.0043de70
lea edx, [esp + 0x40]
push edx
call dword [sym.imp.USER32.dll_GetCursorPos]
mov eax, dword [esp + 0x40]
mov edi, dword [sym.imp.USER32.dll_wsprintfW]
mov esi, dword [esp + 0x34]
push eax
lea ecx, [esp + 0xa4]
push 0x4f40fc
push ecx
call edi
add esp, 0xc
lea edx, [esp + 0xa0]
push edx
push esi
mov ecx, ebx
call fcn.00448be0
mov eax, dword [esp + 0x44]
mov esi, dword [esp + 0x28]
push eax
lea ecx, [esp + 0xa4]
push 0x4f40fc
push ecx
call edi
add esp, 0xc
lea edx, [esp + 0xa0]
push edx
push esi
mov ecx, ebx
call fcn.00448be0
mov edx, dword [esp + 0x58]
push ebp
lea eax, [esp + 0x5c]
push eax
push 8
lea ecx, [esp + 0x4c]
push ecx
push edx
push ebx
call fcn.0045e250
mov eax, dword [esp + 0x70]
mov esi, dword [sym.imp.KERNEL32.dll_HeapFree]
add esp, 0x18
cmp eax, ebp
je 0x492443
add eax, 0xfffffff8
push eax
mov eax, dword [0x51d3c8]
push ebp
push eax
call esi
mov eax, dword [esp + 0x28]
cmp eax, ebp
mov dword [esp + 0x58], ebp
je 0x49245d
mov ecx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push ebp
push ecx
call esi
mov eax, dword [esp + 0x34]
cmp eax, ebp
mov dword [esp + 0x28], ebp
je 0x492477
mov edx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push ebp
push edx
call esi
mov eax, dword [esp + 0x3c]
cmp eax, ebp
mov dword [esp + 0x34], ebp
je 0x492490
add eax, 0xfffffff8
push eax
mov eax, dword [0x51d3c8]
push ebp
push eax
call esi
mov eax, dword [esp + 0x24]
cmp eax, ebp
je 0x4924a6
mov ecx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push ebp
push ecx
call esi
mov eax, dword [esp + 0x2c]
cmp eax, ebp
je 0x4924bc
mov edx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push ebp
push edx
call esi
mov eax, dword [esp + 0x20]
cmp eax, ebp
je 0x4924d1
add eax, 0xfffffff8
push eax
mov eax, dword [0x51d3c8]
push ebp
push eax
call esi
mov eax, dword [esp + 0x1c]
cmp eax, ebp
je 0x4924e7
mov ecx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push ebp
push ecx
call esi
mov edx, dword [esp + 0x14]
mov eax, dword [0x51d3c8]
add edx, 0xfffffff8
push edx
push ebp
push eax
call esi
jmp 0x492b1f
xor bl, bl
cmp word [edi], 0x2a
jne 0x49250e
mov bl, byte [edi]
add edi, 2
mov dword [esp + 0x10], edi
lea ecx, [esp + 0x40]
push ecx
lea edx, [esp + 0x14]
or esi, 0xffffffff
push edx
mov dword [esp + 0x48], esi
mov dword [esp + 0x4c], esi
call fcn.0044cd70
add esp, 8
test eax, eax
jle 0x4925ee
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x49255e
jmp 0x492540
mov ax, word [ecx]
cmp ax, 9
jb 0x49254f
cmp ax, 0xd
jbe 0x492555
cmp ax, 0x20
jne 0x49255e
add ecx, 2
mov dword [esp + 0x10], ecx
jmp 0x492540
test bl, bl
je 0x49257e
mov eax, dword [esp + 0x40]
test eax, eax
jl 0x4925ee
xor ecx, ecx
test eax, eax
setne cl
push ecx
call dword [sym.imp.USER32.dll_ShowCursor]
jmp 0x4925ee
mov ax, word [ecx]
test ax, ax
je 0x4925ee
cmp ax, 0x30
jb 0x492592
cmp ax, 0x39
jbe 0x4925ee
lea edx, [esp + 0x50]
push edx
lea eax, [esp + 0x14]
add ecx, 2
push eax
mov dword [esp + 0x18], ecx
mov dword [esp + 0x58], esi
mov dword [esp + 0x5c], esi
call fcn.0044cd70
add esp, 8
test eax, eax
jle 0x4925ee
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x4925de
nop
mov ax, word [ecx]
cmp ax, 9
jb 0x4925cf
cmp ax, 0xd
jbe 0x4925d5
cmp ax, 0x20
jne 0x4925de
add ecx, 2
mov dword [esp + 0x10], ecx
jmp 0x4925c0
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x40]
push ecx
push edx
call dword [sym.imp.USER32.dll_SetCursorPos]
mov eax, dword [esp + 0x3c]
test eax, eax
mov esi, dword [sym.imp.KERNEL32.dll_HeapFree]
je 0x49260a
add eax, 0xfffffff8
push eax
mov eax, dword [0x51d3c8]
push 0
push eax
call esi
mov eax, dword [esp + 0x24]
test eax, eax
je 0x492621
mov ecx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push 0
push ecx
call esi
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x492638
mov edx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push 0
push edx
call esi
mov eax, dword [esp + 0x20]
test eax, eax
je 0x49264e
add eax, 0xfffffff8
push eax
mov eax, dword [0x51d3c8]
push 0
push eax
call esi
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x492665
mov ecx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push 0
push ecx
call esi
mov edx, dword [esp + 0x14]
mov eax, dword [0x51d3c8]
add edx, 0xfffffff8
push edx
push 0
push eax
call esi
jmp 0x492b1f
mov edx, dword [esp + 0x38]
mov eax, dword [esp + 0x10]
push edx
push eax
call fcn.004a7d30
mov esi, dword [sym.imp.KERNEL32.dll_HeapFree]
xor ecx, ecx
add esp, 8
test eax, eax
setl cl
cmp ebx, ebp
mov edi, ecx
je 0x4926af
mov edx, dword [0x51d3c8]
add ebx, 0xfffffff8
push ebx
push ebp
push edx
call esi
mov eax, dword [esp + 0x24]
cmp eax, ebp
je 0x4926c4
add eax, 0xfffffff8
push eax
mov eax, dword [0x51d3c8]
push ebp
push eax
call esi
mov eax, dword [esp + 0x2c]
cmp eax, ebp
je 0x4926da
mov ecx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push ebp
push ecx
call esi
mov eax, dword [esp + 0x20]
cmp eax, ebp
je 0x4926f0
mov edx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push ebp
push edx
call esi
mov eax, dword [esp + 0x1c]
cmp eax, ebp
je 0x492705
add eax, 0xfffffff8
push eax
mov eax, dword [0x51d3c8]
push ebp
push eax
call esi
mov ecx, dword [esp + 0x14]
mov edx, dword [0x51d3c8]
add ecx, 0xfffffff8
push ecx
push ebp
push edx
call esi
mov eax, edi
jmp 0x492b21
mov byte [esp + 0x28], 0
jmp 0x4921ae
push edi
push str._percent
call fcn.00444a10
add esp, 8
test al, al
je 0x49280d
lea edx, [esp + 0x40]
push edx
lea eax, [esp + 0x14]
push eax
mov dword [esp + 0x48], ebp
mov dword [esp + 0x4c], ebp
call fcn.0044cd70
add esp, 8
test eax, eax
jle 0x492769
lea ecx, [esp + 0x10]
push ecx
call fcn.00443850
add esp, 4
mov eax, dword [esp + 0x10]
cmp word [eax], bp
je 0x492779
add eax, 2
mov dword [esp + 0x10], eax
mov edx, dword [esp + 0x40]
push eax
push edx
push 0x51d2a0
call fcn.0043f040
mov esi, dword [sym.imp.KERNEL32.dll_HeapFree]
add esp, 0xc
cmp ebx, ebp
je 0x4927a3
mov eax, dword [0x51d3c8]
add ebx, 0xfffffff8
push ebx
push ebp
push eax
call esi
mov eax, dword [esp + 0x24]
cmp eax, ebp
je 0x4927b9
mov ecx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push ebp
push ecx
call esi
mov eax, dword [esp + 0x2c]
cmp eax, ebp
je 0x4927cf
mov edx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push ebp
push edx
call esi
mov eax, dword [esp + 0x20]
cmp eax, ebp
je 0x4927e4
add eax, 0xfffffff8
push eax
mov eax, dword [0x51d3c8]
push ebp
push eax
call esi
mov eax, dword [esp + 0x1c]
cmp eax, ebp
je 0x4927fa
mov ecx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push ebp
push ecx
call esi
mov edx, dword [0x51d3c8]
add edi, 0xfffffff8
push edi
push ebp
push edx
call esi
jmp 0x492b1f
push edi
push str._POS
call fcn.00444a10
add esp, 8
test al, al
je 0x49294a
mov eax, dword [esp + 0x10]
cmp word [eax], 0x3f
sete bl
test bl, bl
je 0x492839
add eax, 2
mov dword [esp + 0x10], eax
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x14]
push edx
mov dword [esp + 0x20], 0xffffffff
call fcn.0044ce90
mov edx, dword [esp + 0x20]
add esp, 8
test edx, edx
jle 0x49141a
mov eax, dword [esp + 0x10]
mov cx, word [eax]
test cx, cx
je 0x49287e
cmp cx, 0x30
jb 0x492877
cmp cx, 0x39
jbe 0x49287e
add eax, 2
mov dword [esp + 0x10], eax
test bl, bl
je 0x492892
sub eax, 2
mov dword [esp + 0x10], eax
mov word [eax], 0x3f
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x180]
test ecx, ecx
je 0x4928a5
mov ecx, dword [ecx + 0x148]
jmp 0x4928a7
xor ecx, ecx
push ecx
mov ecx, dword [esp + 0x3c]
push 0
push ecx
push ecx
push eax
push edx
call fcn.0045a640
add esp, 0x18
mov esi, dword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [esp + 0x3c]
test eax, eax
je 0x4928d7
mov ecx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push 0
push ecx
call esi
mov eax, dword [esp + 0x24]
test eax, eax
je 0x4928ee
mov edx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push 0
push edx
call esi
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x492904
add eax, 0xfffffff8
push eax
mov eax, dword [0x51d3c8]
push 0
push eax
call esi
mov eax, dword [esp + 0x20]
test eax, eax
je 0x49291b
mov ecx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push 0
push ecx
call esi
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x492932
mov edx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push 0
push edx
call esi
mov eax, dword [esp + 0x14]
mov ecx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push 0
push ecx
call esi
jmp 0x492b1f
mov esi, dword [esp + 0x14]
push esi
push str._RMENU
call fcn.00444a10
mov ebx, dword [sym.imp.KERNEL32.dll_HeapFree]
add esp, 8
test al, al
je 0x492b3c
push 2
mov dword [esp + 0x38], ebp
call fcn.00449130
add esp, 4
cmp eax, ebp
mov dword [esp + 0x34], eax
je 0x492983
mov word [eax], bp
push 2
mov dword [esp + 0x5c], ebp
call fcn.00449130
add esp, 4
cmp eax, ebp
mov dword [esp + 0x40], eax
je 0x49299c
mov word [eax], bp
push 0x3a
push 0x3b
lea edx, [esp + 0x48]
push edx
lea eax, [esp + 0x1c]
push eax
mov byte [esp + 0x180], 0xb
call fcn.0044c830
mov ecx, dword [esp + 0x20]
add esp, 0x10
cmp word [ecx], bp
je 0x4929cc
mov eax, ecx
add eax, 2
mov dword [esp + 0x10], eax
lea edx, [esp + 0x10]
push edx
call fcn.00443850
mov eax, dword [esp + 0x14]
push eax
call fcn.00422077
push 2
mov dword [esp + 0x1c], eax
mov dword [esp + 0x34], ebp
call fcn.00449130
add esp, 0xc
cmp eax, ebp
mov dword [esp + 0x28], eax
je 0x4929fd
mov word [eax], bp
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x50]
push ecx
lea edx, [esp + 0x2c]
push edx
push eax
mov byte [esp + 0x17c], 0xc
mov dword [esp + 0x5c], ebp
call fcn.004a2600
mov eax, dword [esp + 0x5c]
add esp, 0xc
cmp eax, ebp
je 0x492a4e
cmp word [eax], bp
je 0x492a4e
push ebp
lea ecx, [esp + 0x38]
push ecx
mov word [eax - 2], bp
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x30]
lea edx, [esp + 0x60]
push edx
push eax
push ecx
call fcn.00419447
add esp, 0x14
mov edx, dword [esp + 0x34]
mov esi, dword [esp + 0x40]
mov ecx, dword [esp + 0x38]
push edx
push esi
call fcn.00448be0
mov eax, dword [esp + 0x28]
cmp eax, ebp
je 0x492a76
add eax, 0xfffffff8
push eax
mov eax, dword [0x51d3c8]
push ebp
push eax
call ebx
cmp esi, ebp
mov dword [esp + 0x28], ebp
je 0x492a8c
mov ecx, dword [0x51d3c8]
add esi, 0xfffffff8
push esi
push ebp
push ecx
call ebx
mov eax, dword [esp + 0x34]
cmp eax, ebp
je 0x492aa2
mov edx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push ebp
push edx
call ebx
mov eax, dword [esp + 0x3c]
cmp eax, ebp
je 0x492ab7
add eax, 0xfffffff8
push eax
mov eax, dword [0x51d3c8]
push ebp
push eax
call ebx
mov eax, dword [esp + 0x24]
cmp eax, ebp
je 0x492acd
mov ecx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push ebp
push ecx
call ebx
mov eax, dword [esp + 0x2c]
cmp eax, ebp
je 0x492ae3
mov edx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push ebp
push edx
call ebx
mov eax, dword [esp + 0x20]
cmp eax, ebp
je 0x492af8
add eax, 0xfffffff8
push eax
mov eax, dword [0x51d3c8]
push ebp
push eax
call ebx
mov eax, dword [esp + 0x1c]
cmp eax, ebp
je 0x492b0e
mov ecx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push ebp
push ecx
call ebx
mov edx, dword [esp + 0x14]
mov eax, dword [0x51d3c8]
add edx, 0xfffffff8
push edx
push ebp
push eax
call ebx
xor eax, eax
mov ecx, dword [esp + 0x168]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x164
ret 0xc
push esi
push str._IsWindow
call fcn.00444a10
add esp, 8
test al, al
je 0x492bfe
lea eax, [esp + 0x10]
push eax
call fcn.00443850
mov ecx, dword [eax]
mov si, word [ecx]
add esp, 4
cmp si, 0x3f
jne 0x492b6f
add dword [esp + 0x10], 2
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x14]
push eax
mov dword [esp + 0x20], 0xffffffff
call fcn.0044ce90
mov ecx, dword [esp + 0x18]
mov ax, word [ecx]
add esp, 8
cmp ax, 0x3b
je 0x492b9c
cmp ax, 0x3a
jne 0x492ba1
add dword [esp + 0x10], 2
cmp si, 0x3f
jne 0x492db6
lea ecx, [esp + 0x50]
call fcn.00449480
push 0x3a
push 0x3b
lea edx, [esp + 0x58]
push edx
lea eax, [esp + 0x1c]
push eax
mov byte [esp + 0x180], 0xd
call fcn.0044c830
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0x28]
add esp, 0x10
push ecx
push edx
call dword [sym.imp.USER32.dll_IsWindow]
push eax
mov eax, dword [esp + 0x40]
push eax
call fcn.0044bf10
add esp, 0xc
lea ecx, [esp + 0x50]
call fcn.00443880
jmp 0x492aa2
push esi
push str._Enable
call fcn.00444a10
add esp, 8
test al, al
je 0x492cfe
lea ecx, [esp + 0x10]
push ecx
call fcn.00443850
mov edx, dword [eax]
mov di, word [edx]
add esp, 4
cmp di, 0x3f
jne 0x492c31
add dword [esp + 0x10], 2
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
push ecx
mov dword [esp + 0x20], 0xffffffff
call fcn.0044ce90
mov edx, dword [esp + 0x18]
mov ax, word [edx]
add esp, 8
cmp ax, 0x3b
je 0x492c5e
cmp ax, 0x3a
jne 0x492c63
add dword [esp + 0x10], 2
mov esi, dword [esp + 0x18]
cmp esi, ebp
jle 0x492db6
cmp di, 0x3f
jne 0x492cc4
lea ecx, [esp + 0x50]
call fcn.00449480
push 0x3a
push 0x3b
lea eax, [esp + 0x58]
push eax
lea ecx, [esp + 0x1c]
push ecx
mov byte [esp + 0x180], 0xe
call fcn.0044c830
mov edx, dword [esp + 0x60]
add esp, 0x10
push edx
push esi
call dword [sym.imp.USER32.dll_IsWindowEnabled]
push eax
mov eax, dword [esp + 0x40]
push eax
call fcn.0044bf10
add esp, 0xc
lea ecx, [esp + 0x50]
call fcn.00443880
jmp 0x492e04
lea ecx, [esp + 0x40]
push ecx
lea edx, [esp + 0x14]
push edx
mov dword [esp + 0x48], 0xfffffc18
call fcn.0044ce90
mov eax, dword [esp + 0x48]
add esp, 8
cmp eax, ebp
jl 0x492aa2
xor ecx, ecx
cmp eax, ebp
setne cl
push ecx
push esi
call dword [sym.imp.USER32.dll_EnableWindow]
jmp 0x492aa2
push esi
push str._Visable
call fcn.00444a10
add esp, 8
test al, al
je 0x492d7e
lea edx, [esp + 0x10]
push edx
call fcn.00443850
mov eax, dword [eax]
mov si, word [eax]
add esp, 4
cmp si, 0x3f
jne 0x492d2d
add dword [esp + 0x10], 2
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x14]
push edx
mov dword [esp + 0x20], 0xffffffff
call fcn.0044ce90
mov eax, dword [esp + 0x18]
mov cx, word [eax]
add esp, 8
cmp cx, 0x3b
je 0x492d5a
cmp cx, 0x3a
jne 0x492d61
add eax, 2
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x18]
cmp ecx, ebp
jle 0x492db6
push esi
push eax
mov eax, dword [esp + 0x40]
push ecx
push eax
call fcn.0045b4b0
add esp, 0x10
jmp 0x492aa2
push esi
push str._style
call fcn.00444a10
add esp, 8
test al, al
je 0x492aa2
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x14]
push edx
mov dword [esp + 0x20], 0xffffffff
call fcn.0043e210
mov eax, dword [esp + 0x20]
add esp, 8
cmp eax, ebp
jg 0x492df6
lea ecx, [esp + 0x6c]
call fcn.00443880
lea ecx, [esp + 0x24]
call fcn.00443880
lea ecx, [esp + 0x68]
call fcn.00443880
lea ecx, [esp + 0x20]
call fcn.00443880
lea ecx, [esp + 0x1c]
call fcn.00443880
lea ecx, [esp + 0x14]
call fcn.00443880
mov eax, 0x80070057
jmp 0x492b21
mov ecx, dword [esp + 0x10]
push ecx
push eax
call fcn.0045b7c0
add esp, 8
lea ecx, [esp + 0x6c]
call fcn.00443880
lea ecx, [esp + 0x24]
call fcn.00443880
lea ecx, [esp + 0x68]
call fcn.00443880
lea ecx, [esp + 0x20]
call fcn.00443880
lea ecx, [esp + 0x1c]
call fcn.00443880
lea ecx, [esp + 0x14]
call fcn.00443880
jmp 0x492b1f
mov edi, dword [esp + 0x40]
cmp edi, ebp
jne 0x492eea
cmp ebx, ebp
mov esi, dword [sym.imp.KERNEL32.dll_HeapFree]
je 0x492e63
mov edx, dword [0x51d3c8]
add ebx, 0xfffffff8
push ebx
push ebp
push edx
call esi
mov eax, dword [esp + 0x3c]
cmp eax, ebp
je 0x492e78
add eax, 0xfffffff8
push eax
mov eax, dword [0x51d3c8]
push ebp
push eax
call esi
mov eax, dword [esp + 0x24]
cmp eax, ebp
je 0x492e8e
mov ecx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push ebp
push ecx
call esi
mov eax, dword [esp + 0x2c]
cmp eax, ebp
je 0x492ea4
mov edx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push ebp
push edx
call esi
mov eax, dword [esp + 0x20]
cmp eax, ebp
je 0x492eb9
add eax, 0xfffffff8
push eax
mov eax, dword [0x51d3c8]
push ebp
push eax
call esi
mov eax, dword [esp + 0x1c]
cmp eax, ebp
je 0x492ecf
mov ecx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push ebp
push ecx
call esi
mov edx, dword [esp + 0x14]
mov eax, dword [0x51d3c8]
add edx, 0xfffffff8
push edx
push ebp
push eax
call esi
mov eax, 0x80070057
jmp 0x492b21
mov cx, word [eax]
cmp cx, 0x3b
je 0x492ef9
cmp cx, 0x3a
jne 0x492f68
add eax, 2
mov dword [esp + 0x10], eax
xor esi, esi
cmp word [eax], 0x23
jne 0x492f14
add eax, 2
mov dword [esp + 0x10], eax
mov esi, 0x5000
lea ecx, [esp + 0x40]
push ecx
lea edx, [esp + 0x14]
push edx
mov dword [esp + 0x48], ebp
mov dword [esp + 0x4c], ebp
call fcn.0044cd70
add esp, 8
test eax, eax
mov eax, dword [esp + 0x10]
jle 0x492f68
cmp eax, ebp
je 0x492f5e
lea ebx, [ebx]
mov cx, word [eax]
cmp cx, 9
jb 0x492f4f
cmp cx, 0xd
jbe 0x492f55
cmp cx, 0x20
jne 0x492f5e
add eax, 2
mov dword [esp + 0x10], eax
jmp 0x492f40
mov ecx, dword [esp + 0x40]
add ecx, esi
mov dword [esp + 0x70], ecx
mov edx, dword [esp + 0x28]
mov esi, dword [esp + 0x38]
push edx
lea ecx, [esp + 0x38]
push ecx
lea edx, [esp + 0x60]
push edx
push eax
push esi
call fcn.0044d440
add esp, 0x14
test eax, eax
je 0x49302d
cmp ebx, ebp
mov esi, dword [sym.imp.KERNEL32.dll_HeapFree]
je 0x492fa4
mov eax, dword [0x51d3c8]
add ebx, 0xfffffff8
push ebx
push ebp
push eax
call esi
mov eax, dword [esp + 0x3c]
cmp eax, ebp
je 0x492fba
mov ecx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push ebp
push ecx
call esi
mov eax, dword [esp + 0x24]
cmp eax, ebp
je 0x492fd0
mov edx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push ebp
push edx
call esi
mov eax, dword [esp + 0x2c]
cmp eax, ebp
je 0x492fe5
add eax, 0xfffffff8
push eax
mov eax, dword [0x51d3c8]
push ebp
push eax
call esi
mov eax, dword [esp + 0x20]
cmp eax, ebp
je 0x492ffb
mov ecx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push ebp
push ecx
call esi
mov eax, dword [esp + 0x1c]
cmp eax, ebp
je 0x493011
mov edx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push ebp
push edx
call esi
mov eax, dword [esp + 0x14]
mov ecx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push ebp
push ecx
call esi
mov eax, 0x80070057
jmp 0x492b21
mov al, byte [esp + 0x28]
mov edx, dword [esp + 0x34]
mov ecx, dword [esp + 0x70]
push edx
test al, al
mov eax, dword [esp + 0x5c]
push eax
push ecx
push edi
jne 0x49304d
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x493053
call dword [sym.imp.USER32.dll_SendMessageW]
cmp word [ebx], bp
je 0x49307f
push eax
lea edx, [esp + 0xa4]
push 0x4f93cc
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea eax, [esp + 0xa0]
push eax
push ebx
mov ecx, esi
call fcn.00448be0
mov ecx, dword [0x51d3c8]
mov esi, dword [sym.imp.KERNEL32.dll_HeapFree]
add ebx, 0xfffffff8
push ebx
push ebp
push ecx
call esi
mov eax, dword [esp + 0x3c]
cmp eax, ebp
je 0x4930a9
mov edx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push ebp
push edx
call esi
mov eax, dword [esp + 0x24]
cmp eax, ebp
je 0x4930be
add eax, 0xfffffff8
push eax
mov eax, dword [0x51d3c8]
push ebp
push eax
call esi
mov eax, dword [esp + 0x2c]
cmp eax, ebp
je 0x4930d4
mov ecx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push ebp
push ecx
call esi
mov eax, dword [esp + 0x20]
cmp eax, ebp
je 0x4930ea
mov edx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push ebp
push edx
call esi
mov eax, dword [esp + 0x1c]
cmp eax, ebp
je 0x4930ff
add eax, 0xfffffff8
push eax
mov eax, dword [0x51d3c8]
push ebp
push eax
call esi
mov ecx, dword [esp + 0x14]
mov edx, dword [0x51d3c8]
add ecx, 0xfffffff8
push ecx
push ebp
push edx
call esi
jmp 0x492b1f