Function at 0x49db70
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x55fa70
mov eax, dword fs:[0]
push eax
sub esp, 0x98
mov eax, dword [0x5c5244]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
lea eax, [ebp - 0x30]
xorps xmm0, xmm0
push eax
push dword [ebx + 4]
movups xmmword [ebp - 0x30], xmm0
call dword [sym.imp.USER32.dll_GetClientRect]
xorps xmm0, xmm0
push 0x54
movups xmmword [ebp - 0x20], xmm0
call fcn.004d9f7d
add esp, 4
mov dword [ebp - 0x68], eax
mov dword [ebp - 4], 0
test eax, eax
je 0x49dbdc
mov ecx, eax
call fcn.00465ec0
jmp 0x49dbde
xor eax, eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4]
push dword [ebp - 0x68]
mov dword [ebp - 0xa4], 0
push eax
mov dword [ebp - 0xa0], 0
call fcn.0049b8f0
mov dword [ebp - 4], 1
mov esi, dword [ebp - 0xa4]
mov ecx, esi
push 0x64
push 0x574938
push 0xd3
push dword [ebx + 4]
call fcn.00466020
movaps xmm0, xmmword [0x57d310]
lea ecx, [ebp - 0x20]
movups xmmword [ebp - 0x20], xmm0
mov eax, dword [esi]
push ecx
push esi
call dword [eax + 0x18]
mov eax, dword [esi]
push 0
push esi
call dword [eax + 0x54]
mov eax, dword [ebp - 0xa0]
sub esp, 8
mov dword [ebp - 0x68], esp
mov ecx, esp
mov dword [ecx], 0
mov dword [ecx + 4], 0
test eax, eax
je 0x49dc6b
lock inc dword [eax + 4]
mov dword [ecx], esi
mov dword [ecx + 4], eax
mov byte [ebp - 4], 2
lea edi, [ebx + 0x28]
mov byte [ebp - 4], 1
mov ecx, edi
call fcn.0049cbe0
movaps xmm0, xmmword [0x57d320]
push 0x78
movups xmmword [ebp - 0x20], xmm0
call fcn.004d9f7d
add esp, 4
mov dword [ebp - 0x68], eax
mov byte [ebp - 4], 3
test eax, eax
je 0x49dcab
mov ecx, eax
call fcn.00467f70
jmp 0x49dcad
xor eax, eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x9c]
push dword [ebp - 0x68]
mov dword [ebp - 0x9c], 0
push eax
mov dword [ebp - 0x98], 0
call fcn.0049b9a0
mov byte [ebp - 4], 4
lea eax, [ebp - 0x20]
mov esi, dword [ebp - 0x9c]
mov ecx, esi
push 0x65
push 0x56f6b0
push 0
push eax
push dword [ebx + 4]
call fcn.00468380
push 0xffffff
mov ecx, esi
call fcn.00468560
mov eax, dword [esi]
push 1
push esi
call dword [eax + 0x54]
mov eax, dword [ebp - 0x98]
sub esp, 8
mov dword [ebp - 0x68], esp
mov ecx, esp
mov dword [ecx], 0
mov dword [ecx + 4], 0
test eax, eax
je 0x49dd2c
lock inc dword [eax + 4]
mov dword [ecx], esi
mov dword [ecx + 4], eax
mov byte [ebp - 4], 5
mov byte [ebp - 4], 4
mov ecx, edi
call fcn.0049cbe0
mov eax, dword [ebp - 0x28]
push 0x19
push eax
push 0
lea ecx, [eax - 0x20]
push ecx
lea eax, [ebp - 0x20]
push eax
call dword [sym.imp.USER32.dll_SetRect]
push 0x74
call fcn.004d9f7d
add esp, 4
mov dword [ebp - 0x68], eax
mov byte [ebp - 4], 6
test eax, eax
je 0x49dd74
mov ecx, eax
call fcn.00464c00
jmp 0x49dd76
xor eax, eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x94]
push dword [ebp - 0x68]
mov dword [ebp - 0x94], 0
push eax
mov dword [ebp - 0x90], 0
call fcn.0049b790
mov byte [ebp - 4], 7
mov esi, dword [ebp - 0x94]
mov ecx, esi
push 0
push 4
push 0xd4
push 0x66
push dword [ebx + 4]
call fcn.00464e20
mov eax, dword [esi]
lea ecx, [ebp - 0x20]
push ecx
push esi
call dword [eax + 0x18]
mov eax, dword [ebp - 0x90]
sub esp, 8
mov dword [ebp - 0x68], esp
mov ecx, esp
mov dword [ecx], 0
mov dword [ecx + 4], 0
test eax, eax
je 0x49dde9
lock inc dword [eax + 4]
mov dword [ecx], esi
mov dword [ecx + 4], eax
mov byte [ebp - 4], 8
mov byte [ebp - 4], 7
mov ecx, edi
call fcn.0049cbe0
cmp dword [ebx + 0x4c], 0
je 0x49e442
push 0x68
call fcn.004d9f7d
add esp, 4
mov dword [ebp - 0x68], eax
mov byte [ebp - 4], 9
test eax, eax
je 0x49de25
mov ecx, eax
call fcn.004653a0
jmp 0x49de27
xor eax, eax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x8c]
push dword [ebp - 0x68]
mov dword [ebp - 0x8c], 0
push eax
mov dword [ebp - 0x88], 0
call fcn.0049b840
mov byte [ebp - 4], 0xa
mov esi, dword [ebp - 0x8c]
mov ecx, esi
push 0xe7
push 0x6b
push dword [ebx + 4]
call fcn.004655a0
movaps xmm0, xmmword [0x57d340]
lea ecx, [ebp - 0x20]
movups xmmword [ebp - 0x20], xmm0
mov eax, dword [esi]
push ecx
push esi
call dword [eax + 0x18]
push 0
push 0
mov ecx, esi
call fcn.00465760
mov eax, dword [ebp - 0x88]
sub esp, 8
mov dword [ebp - 0x68], esp
mov ecx, esp
mov dword [ecx], 0
mov dword [ecx + 4], 0
test eax, eax
je 0x49deac
lock inc dword [eax + 4]
mov dword [ecx], esi
mov dword [ecx + 4], eax
mov byte [ebp - 4], 0xb
mov byte [ebp - 4], 0xa
mov ecx, edi
call fcn.0049cbe0
movaps xmm0, xmmword [0x57d330]
lea esi, [ebx + 0x70]
mov eax, dword [ebx + 4]
movups xmmword [ebp - 0x20], xmm0
mov dword [ebp - 0x68], eax
call fcn.0049d980
cmp dword [eax + 0x30], 0
jne 0x49deeb
call fcn.0049d980
mov dword [eax + 0x30], str.COMBOBOX
call fcn.0049d980
push dword [ebp - 0x68]
lea ecx, [esi + 0x20]
push ecx
push eax
push 0x5c6e70
push 0x5ce33c
call fcn.00423fd0
movzx edi, ax
add esp, 0x14
mov eax, dword [esi + 0x14]
test eax, eax
jne 0x49df2a
call fcn.004b2594
mov dword [esi + 0x14], eax
test eax, eax
jne 0x49df2a
push 0xe
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x49df79
push 0
push 0
push eax
call fcn.004b2696
test di, di
je 0x49df79
push esi
lea eax, [esi + 8]
mov ecx, 0x5c6e70
push eax
call fcn.00423b30
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x1c]
sub eax, edx
mov ecx, dword [ebp - 0x20]
push 0
push dword [0x5ce340]
push 0x6c
push dword [ebp - 0x68]
push eax
mov eax, dword [ebp - 0x18]
sub eax, ecx
push eax
push edx
push ecx
push 0x56200002
push 0
push edi
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov eax, dword [0x5cc5e8]
test eax, eax
jne 0x49dfab
push 0x10
call fcn.004d9f7d
add esp, 4
mov dword [ebp - 0x68], eax
mov byte [ebp - 4], 0xc
test eax, eax
je 0x49dfa0
mov ecx, eax
call fcn.00455f70
jmp 0x49dfa2
xor eax, eax
mov byte [ebp - 4], 0xa
mov dword [0x5cc5e8], eax
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 1
push dword [eax + 4]
push 0x30
push dword [ebx + 0x74]
call esi
push 0x14
call fcn.004d9f7d
add esp, 4
mov dword [ebp - 0x68], eax
mov byte [ebp - 4], 0xd
test eax, eax
je 0x49dfdb
mov ecx, eax
call fcn.00457fb0
jmp 0x49dfdd
xor eax, eax
mov byte [ebp - 4], 0xa
mov dword [ebx + 0xa0], eax
test eax, eax
je 0x49e009
push 0x574938
push 0xf0
mov ecx, eax
call fcn.00458590
mov ecx, dword [ebx + 0xa0]
push 0x12
call fcn.00458750
push 0x14
push 0xffffffffffffffff
push 0x153
push dword [ebx + 0x74]
call esi
push 0x14
push 0
push 0x153
push dword [ebx + 0x74]
call esi
push 0
push 8
push 0x1701
push dword [ebx + 0x74]
call esi
push 0x57d210
push 0
push 0x14a
push dword [ebx + 0x74]
call esi
push 0x1b7740
push 0
push 0x151
push dword [ebx + 0x74]
call esi
call fcn.004287b0
mov ecx, eax
test ecx, ecx
je 0x49e893
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x68], eax
mov byte [ebp - 4], 0xf
mov edi, 1
mov dword [ebp - 0x6c], 0x36ee80
nop
push edi
lea eax, [ebp - 0x68]
push 0x57d21c
push eax
call fcn.0042de00
mov esi, dword [ebp - 0x68]
add esp, 0xc
push esi
push edi
push 0x14a
push dword [ebx + 0x74]
call dword [sym.imp.USER32.dll_SendMessageW]
push dword [ebp - 0x6c]
push edi
push 0x151
push dword [ebx + 0x74]
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [ebp - 0x6c]
inc edi
add eax, 0x36ee80
mov dword [ebp - 0x6c], eax
cmp eax, 0x44aa200
jle 0x49e080
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0
push 0x14e
push dword [ebx + 0x74]
call edi
lea eax, [ebp - 0x64]
mov dword [ebp - 0x64], 0x34
push eax
xorps xmm0, xmm0
push 0
push 0x164
push dword [ebx + 0x74]
movlpd qword [ebp - 0x60], xmm0
movlpd qword [ebp - 0x58], xmm0
movlpd qword [ebp - 0x50], xmm0
movlpd qword [ebp - 0x48], xmm0
movlpd qword [ebp - 0x40], xmm0
movlpd qword [ebp - 0x38], xmm0
call edi
mov edi, dword [ebp - 0x38]
push edi
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x49e154
push 0
push 1
push 0xcf
push edi
call dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0xffffffffffffffff
push 0xb1
push edi
call dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0
push 0xb7
push edi
call dword [sym.imp.USER32.dll_SendMessageW]
movaps xmm0, xmmword [0x57d360]
push 0x78
movups xmmword [ebp - 0x20], xmm0
call fcn.004d9f7d
add esp, 4
mov dword [ebp - 0x6c], eax
mov byte [ebp - 4], 0x10
test eax, eax
je 0x49e17d
mov ecx, eax
call fcn.00467f70
jmp 0x49e17f
xor eax, eax
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x84]
push dword [ebp - 0x68]
mov dword [ebp - 0x84], 0
push eax
mov dword [ebp - 0x80], 0
call fcn.0049b9a0
mov byte [ebp - 4], 0x11
lea eax, [ebp - 0x20]
mov edi, dword [ebp - 0x84]
mov ecx, edi
push 0x6d
push 0x57d228
push 0
push eax
push dword [ebx + 4]
call fcn.00468380
push 0x333333
mov ecx, edi
call fcn.00468560
push 0xd
mov ecx, edi
call fcn.004685c0
push 0
mov ecx, edi
call fcn.00468540
mov eax, dword [ebp - 0x80]
sub esp, 8
mov dword [ebp - 0x6c], esp
mov ecx, esp
mov dword [ecx], 0
mov dword [ecx + 4], 0
test eax, eax
je 0x49e202
lock inc dword [eax + 4]
mov dword [ecx], edi
mov dword [ecx + 4], eax
mov byte [ebp - 4], 0x12
mov byte [ebp - 4], 0x11
lea edi, [ebx + 0x28]
mov ecx, edi
call fcn.0049cbe0
movaps xmm0, xmmword [0x57d380]
push 0x78
movups xmmword [ebp - 0x20], xmm0
call fcn.004d9f7d
add esp, 4
mov dword [ebp - 0x6c], eax
mov byte [ebp - 4], 0x13
test eax, eax
je 0x49e242
mov ecx, eax
call fcn.00467f70
jmp 0x49e244
xor eax, eax
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x74]
push dword [ebp - 0x68]
mov dword [ebp - 0x74], 0
push eax
mov dword [ebp - 0x70], 0
call fcn.0049b9a0
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x20]
mov ecx, dword [ebp - 0x74]
push 0x6e
push 0x57d240
push 0
push eax
push dword [ebx + 4]
call fcn.00468380
mov ecx, dword [ebp - 0x74]
push 0x333333
call fcn.00468560
mov ecx, dword [ebp - 0x74]
push 0xd
call fcn.004685c0
mov ecx, dword [ebp - 0x74]
push 0
call fcn.00468540
mov eax, dword [ebp - 0x70]
sub esp, 8
mov dword [ebp - 0x6c], esp
mov edx, esp
mov dword [edx], 0
mov dword [edx + 4], 0
test eax, eax
je 0x49e2bf
lock inc dword [eax + 4]
mov ecx, dword [ebp - 0x74]
mov dword [edx], ecx
mov dword [edx + 4], eax
mov byte [ebp - 4], 0x15
mov byte [ebp - 4], 0x14
mov ecx, edi
call fcn.0049cbe0
push 0x74
call fcn.004d9f7d
add esp, 4
mov dword [ebp - 0x6c], eax
mov byte [ebp - 4], 0x16
test eax, eax
je 0x49e2f4
mov ecx, eax
call fcn.00464c00
jmp 0x49e2f6
xor eax, eax
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x7c]
push dword [ebp - 0x68]
mov dword [ebp - 0x7c], 0
push eax
mov dword [ebp - 0x78], 0
call fcn.0049b790
mov byte [ebp - 4], 0x17
push 1
push 4
push 0xe6
push 0x6f
push dword [ebx + 4]
mov ebx, dword [ebp - 0x7c]
mov ecx, ebx
call fcn.00464e20
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
add edx, 0xffffff9b
add ecx, 0xffffffda
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x1c], ecx
lea eax, [edx + 0x4b]
mov dword [ebp - 0x18], eax
lea eax, [ecx + 0x1a]
mov dword [ebp - 0x14], eax
lea ecx, [ebp - 0x20]
mov eax, dword [ebx]
push ecx
push ebx
call dword [eax + 0x18]
mov eax, dword [ebx]
push 0x57d14c
push ebx
call dword [eax + 0x28]
mov ebx, dword [ebp - 0x78]
sub esp, 8
mov dword [ebp - 0x6c], esp
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
test ebx, ebx
je 0x49e383
lock inc dword [ebx + 4]
mov ecx, dword [ebp - 0x7c]
mov dword [eax], ecx
mov dword [eax + 4], ebx
mov byte [ebp - 4], 0x18
mov byte [ebp - 4], 0x17
mov ecx, edi
call fcn.0049cbe0
mov byte [ebp - 4], 0x14
or edi, 0xffffffff
test ebx, ebx
je 0x49e3c4
mov eax, edi
lock xadd dword [ebx + 4], eax
jne 0x49e3c4
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax]
mov eax, edi
lock xadd dword [ebx + 8], eax
jne 0x49e3c4
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 4]
mov byte [ebp - 4], 0x11
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x49e3ee
mov eax, edi
lock xadd dword [ebx + 4], eax
jne 0x49e3ee
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax]
mov eax, edi
lock xadd dword [ebx + 8], eax
jne 0x49e3ee
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 4]
mov byte [ebp - 4], 0xf
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x49e418
mov eax, edi
lock xadd dword [ebx + 4], eax
jne 0x49e418
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax]
mov eax, edi
lock xadd dword [ebx + 8], eax
jne 0x49e418
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 4]
mov byte [ebp - 4], 0xa
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x49e433
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 7
mov ebx, dword [ebp - 0x88]
jmp 0x49e7cb
push 0x54
call fcn.004d9f7d
add esp, 4
mov dword [ebp - 0x68], eax
mov byte [ebp - 4], 0x1a
test eax, eax
je 0x49e460
mov ecx, eax
call fcn.00465ec0
jmp 0x49e462
xor eax, eax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x7c]
push dword [ebp - 0x68]
mov dword [ebp - 0x7c], 0
push eax
mov dword [ebp - 0x78], 0
call fcn.0049b8f0
mov byte [ebp - 4], 0x1b
mov esi, dword [ebp - 0x7c]
mov ecx, esi
push 0x68
push 0x574938
push 0xda
push dword [ebx + 4]
call fcn.00466020
movaps xmm0, xmmword [0x57d350]
lea ecx, [ebp - 0x20]
movups xmmword [ebp - 0x20], xmm0
mov eax, dword [esi]
push ecx
push esi
call dword [eax + 0x18]
mov eax, dword [esi]
push 0
push esi
call dword [eax + 0x54]
mov eax, dword [ebp - 0x78]
sub esp, 8
mov dword [ebp - 0x68], esp
mov ecx, esp
mov dword [ecx], 0
mov dword [ecx + 4], 0
test eax, eax
je 0x49e4da
lock inc dword [eax + 4]
mov dword [ecx], esi
mov dword [ecx + 4], eax
mov byte [ebp - 4], 0x1c
mov byte [ebp - 4], 0x1b
mov ecx, edi
call fcn.0049cbe0
movaps xmm0, xmmword [0x57d370]
push 0x78
movups xmmword [ebp - 0x20], xmm0
call fcn.004d9f7d
add esp, 4
mov dword [ebp - 0x68], eax
mov byte [ebp - 4], 0x1d
test eax, eax
je 0x49e517
mov ecx, eax
call fcn.00467f70
jmp 0x49e519
xor eax, eax
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x8c]
push dword [ebp - 0x68]
mov dword [ebp - 0x8c], 0
push eax
mov dword [ebp - 0x88], 0
call fcn.0049b9a0
mov byte [ebp - 4], 0x1e
lea eax, [ebp - 0x20]
mov esi, dword [ebp - 0x8c]
mov ecx, esi
push 0x69
push 0x57d270
push 0
push eax
push dword [ebx + 4]
call fcn.00468380
push 0x333333
mov ecx, esi
call fcn.00468560
push 0xd
mov ecx, esi
call fcn.004685c0
push 0
mov ecx, esi
call fcn.00468540
mov esi, dword [ebp - 0x88]
sub esp, 8
mov dword [ebp - 0x68], esp
mov ecx, esp
mov dword [ecx], 0
mov dword [ecx + 4], 0
test esi, esi
je 0x49e5a2
lock inc dword [esi + 4]
mov eax, dword [ebp - 0x8c]
mov dword [ecx], eax
mov dword [ecx + 4], esi
mov byte [ebp - 4], 0x1f
mov byte [ebp - 4], 0x1e
mov ecx, edi
call fcn.0049cbe0
push 0x68
call fcn.004d9f7d
add esp, 4
mov dword [ebp - 0x68], eax
mov byte [ebp - 4], 0x20
test eax, eax
je 0x49e5da
mov ecx, eax
call fcn.004653a0
jmp 0x49e5dc
xor eax, eax
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x74]
push dword [ebp - 0x68]
mov dword [ebp - 0x74], 0
push eax
mov dword [ebp - 0x70], 0
call fcn.0049b840
mov byte [ebp - 4], 0x21
mov ecx, dword [ebp - 0x74]
push 0xe7
push 0x67
push dword [ebx + 4]
call fcn.004655a0
mov ecx, dword [ebp - 0x74]
lea edx, [ebp - 0x20]
movaps xmm0, xmmword [0x57d390]
movups xmmword [ebp - 0x20], xmm0
push edx
mov eax, dword [ecx]
push ecx
call dword [eax + 0x18]
mov ecx, dword [ebp - 0x74]
push 0x57d29c
push ecx
mov eax, dword [ecx]
call dword [eax + 0x28]
mov ecx, dword [ebp - 0x74]
push 0
push 0
call fcn.00465760
mov eax, dword [ebp - 0x70]
sub esp, 8
mov dword [ebp - 0x68], esp
mov edx, esp
mov dword [edx], 0
mov dword [edx + 4], 0
test eax, eax
je 0x49e662
lock inc dword [eax + 4]
mov ecx, dword [ebp - 0x74]
mov dword [edx], ecx
mov dword [edx + 4], eax
mov byte [ebp - 4], 0x22
mov byte [ebp - 4], 0x21
mov ecx, edi
call fcn.0049cbe0
push 0x74
call fcn.004d9f7d
add esp, 4
mov dword [ebp - 0x68], eax
mov byte [ebp - 4], 0x23
test eax, eax
je 0x49e697
mov ecx, eax
call fcn.00464c00
jmp 0x49e699
xor eax, eax
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x84]
push dword [ebp - 0x68]
mov dword [ebp - 0x84], 0
push eax
mov dword [ebp - 0x80], 0
call fcn.0049b790
mov byte [ebp - 4], 0x24
push 1
push 4
push 0xe6
push 0x6a
push dword [ebx + 4]
mov ebx, dword [ebp - 0x84]
mov ecx, ebx
call fcn.00464e20
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
add edx, 0xffffff9b
add ecx, 0xffffffda
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x1c], ecx
lea eax, [edx + 0x4b]
mov dword [ebp - 0x18], eax
lea eax, [ecx + 0x1a]
mov dword [ebp - 0x14], eax
lea ecx, [ebp - 0x20]
mov eax, dword [ebx]
push ecx
push ebx
call dword [eax + 0x18]
mov eax, dword [ebx]
push 0x57d14c
push ebx
call dword [eax + 0x28]
mov ebx, dword [ebp - 0x80]
sub esp, 8
mov dword [ebp - 0x68], esp
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
test ebx, ebx
je 0x49e72f
lock inc dword [ebx + 4]
mov ecx, dword [ebp - 0x84]
mov dword [eax], ecx
mov dword [eax + 4], ebx
mov byte [ebp - 4], 0x25
mov byte [ebp - 4], 0x24
mov ecx, edi
call fcn.0049cbe0
mov byte [ebp - 4], 0x21
or edi, 0xffffffff
test ebx, ebx
je 0x49e773
mov eax, edi
lock xadd dword [ebx + 4], eax
jne 0x49e773
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax]
mov eax, edi
lock xadd dword [ebx + 8], eax
jne 0x49e773
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 4]
mov byte [ebp - 4], 0x1e
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x49e79d
mov eax, edi
lock xadd dword [ebx + 4], eax
jne 0x49e79d
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax]
mov eax, edi
lock xadd dword [ebx + 8], eax
jne 0x49e79d
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 4]
mov byte [ebp - 4], 0x1b
test esi, esi
je 0x49e7c4
mov eax, edi
lock xadd dword [esi + 4], eax
jne 0x49e7c4
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
mov eax, edi
lock xadd dword [esi + 8], eax
jne 0x49e7c4
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov byte [ebp - 4], 7
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x49e7ee
mov eax, edi
lock xadd dword [ebx + 4], eax
jne 0x49e7ee
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax]
mov eax, edi
lock xadd dword [ebx + 8], eax
jne 0x49e7ee
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 4]
mov byte [ebp - 4], 4
mov ebx, dword [ebp - 0x90]
test ebx, ebx
je 0x49e81b
mov eax, edi
lock xadd dword [ebx + 4], eax
jne 0x49e81b
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax]
mov eax, edi
lock xadd dword [ebx + 8], eax
jne 0x49e81b
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 4]
mov byte [ebp - 4], 1
mov ebx, dword [ebp - 0x98]
test ebx, ebx
je 0x49e848
mov eax, edi
lock xadd dword [ebx + 4], eax
jne 0x49e848
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax]
mov eax, edi
lock xadd dword [ebx + 8], eax
jne 0x49e848
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov ebx, dword [ebp - 0xa0]
test ebx, ebx
je 0x49e877
mov eax, edi
lock xadd dword [ebx + 4], eax
jne 0x49e877
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax]
lock xadd dword [ebx + 8], edi
dec edi
jne 0x49e877
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004da3bd
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.004225f0
int3