Function at 0x49a311
Capabilities:
Hide graphical window
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x5b4
push ebx
push esi
push edi
mov dword [ebp - 0x5a8], 0
mov dword [ebp - 0x4c0], 0
mov dword [ebp - 0x4e0], 0
mov dword [ebp - 0x4d8], 0
mov dword [ebp - 0x5b0], 0
mov dword [ebp - 0x59c], 0
mov dword [ebp - 0x4bc], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0x4d4], 0
mov dword [ebp - 0x4b8], 0
mov dword [ebp - 0x4b4], 0
mov dword [ebp - 0x598], 0
mov dword [ebp - 0x5ac], 0
mov dword [ebp - 0x5a4], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x594], 0
mov dword [ebp - 0x58c], 0
mov eax, dword [ebp + 0xc]
test byte [eax + 0x22], 4
jne 0x49a3db
mov eax, dword [ebp + 0xc]
test byte [eax + 0x22], 2
jne 0x49a3e5
mov dword [ebp - 0x58c], 1
push 0
push 4
mov eax, dword [ebp + 0xc]
add eax, 0x22
push eax
call fcn.004e43fc
add esp, 0xc
push 1
push 2
mov eax, dword [ebp + 0xc]
add eax, 0x22
push eax
call fcn.004e43fc
add esp, 0xc
push 0
push 0x10
mov eax, dword [ebp + 0xc]
add eax, 0x22
push eax
call fcn.004e43fc
add esp, 0xc
push 1
push 0x200
mov eax, dword [ebp + 0xc]
add eax, 0x22
push eax
call fcn.004e43fc
add esp, 0xc
push 1
push 0x400
mov eax, dword [ebp + 0xc]
add eax, 0x22
push eax
call fcn.004e43fc
add esp, 0xc
mov eax, dword [ebp + 0xc]
mov dword [eax + 0x2a], 3
mov eax, dword [ebp + 0xc]
mov ecx, dword [0x52d088]
cmp dword [eax + 0x1d2], ecx
je 0x49a481
mov eax, dword [0x52d088]
mov ecx, dword [ebp + 0xc]
mov dword [ecx + 0x1d2], eax
mov dword [ebp - 0x5a8], 1
xor eax, eax
mov al, byte [0x531b68]
push eax
push 0x52d810
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x1c6]
push eax
call fcn.004de01e
add esp, 0xc
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jge 0x49a4c7
push 0x531aa0
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x1c6]
push eax
call fcn.004ddf8c
add esp, 8
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jge 0x49a4f5
mov eax, dword [0x52d0fc]
push eax
mov eax, 0x52cff0
add eax, 0x22
push eax
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x1c6]
push eax
call fcn.004de01e
add esp, 0xc
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jge 0x49a506
mov dword [ebp - 0x24], 0
mov eax, dword [ebp - 0x24]
push eax
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0xb6]
push eax
call fcn.004de0d1
add esp, 8
mov ecx, dword [ebp + 0xc]
mov dword [ecx + 0x24a], eax
mov eax, dword [ebp + 0xc]
mov dword [eax + 0x24e], 0xe
mov eax, dword [ebp + 0xc]
mov dword [eax + 0x252], 0
mov eax, dword [ebp + 0xc]
mov dword [eax + 0x1fe], 0x19
mov eax, dword [ebp + 0xc]
mov dword [eax + 0x1f6], 0
mov eax, dword [ebp + 0xc]
mov dword [eax + 0x252], 0
mov eax, dword [ebp + 0xc]
mov dword [eax + 0xa6], 0
mov eax, dword [ebp + 0xc]
mov dword [eax + 0xaa], 0
lea eax, [ebp - 0x1c]
push eax
push 0x66
push 0x64
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x26]
push eax
call fcn.00476b89
add esp, 0x10
mov dword [ebp - 0x568], eax
cmp dword [ebp - 0x568], 0
je 0x49a5b5
mov eax, dword [ebp - 0x568]
jmp 0x49bc35
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0xbe]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov dword [ebp - 0x4cc], eax
mov dword [ebp - 0x580], 0
jmp 0x49a5e0
inc dword [ebp - 0x580]
cmp dword [ebp - 0x580], 6
jge 0x49a7bc
mov eax, dword [ebp - 0x580]
mov dword [ebp - 0x5b4], eax
jmp 0x49a7a5
mov eax, dword [ebp - 0x580]
push eax
mov eax, dword [ebp - 0x1c]
push eax
call fcn.004d96e6
add esp, 8
mov dword [ebp - 0x4d0], eax
cmp dword [ebp - 0x4d0], 0
je 0x49a6fa
mov eax, dword [ebp - 0x4d0]
mov eax, dword [eax + 0x14]
shl eax, 4
lea eax, [eax + eax*2]
add eax, dword [ebp - 0x4d0]
add eax, 0x50
mov dword [ebp - 0x590], eax
mov dword [ebp - 0x588], 0
jmp 0x49a657
inc dword [ebp - 0x588]
mov eax, dword [ebp - 0x4d0]
mov ecx, dword [ebp - 0x588]
cmp dword [eax + 0x10], ecx
jle 0x49a6ee
mov eax, dword [ebp - 0x588]
lea eax, [eax + eax*4]
shl eax, 4
mov ecx, dword [ebp - 0x590]
test byte [eax + ecx + 8], 4
je 0x49a6e9
push 0
push 4
mov eax, dword [ebp - 0x588]
lea eax, [eax + eax*4]
shl eax, 4
add eax, dword [ebp - 0x590]
add eax, 8
push eax
call fcn.004e43fc
add esp, 0xc
mov dword [ebp - 0x594], 1
mov eax, dword [ebp - 0x588]
lea eax, [eax + eax*4]
shl eax, 4
mov ecx, dword [ebp - 0x590]
mov dword [eax + ecx + 0x34], 0
mov eax, dword [ebp - 0x588]
lea eax, [eax + eax*4]
shl eax, 4
mov ecx, dword [ebp - 0x590]
mov dword [eax + ecx + 0x38], 0
jmp 0x49a651
mov eax, dword [ebp - 0x1c]
push eax
call fcn.004d9749
add esp, 4
jmp 0x49a7b7
mov eax, dword [ebp - 0x580]
push eax
mov eax, dword [ebp - 0x1c]
push eax
call fcn.004d96e6
add esp, 8
mov dword [ebp - 0x4d0], eax
cmp dword [ebp - 0x4d0], 0
je 0x49a765
mov eax, dword [ebp - 0x4d0]
cmp dword [eax + 0x18], 0
je 0x49a765
mov dword [ebp - 0x4b4], 1
mov eax, dword [ebp - 0x1c]
push eax
call fcn.004d9749
add esp, 4
push 1
mov eax, dword [ebp - 0x580]
push eax
mov eax, dword [ebp - 0x1c]
push eax
call fcn.004d992f
add esp, 0xc
jmp 0x49a771
mov eax, dword [ebp - 0x1c]
push eax
call fcn.004d9749
add esp, 4
push 1
push 0x400
mov eax, dword [ebp - 0x580]
mov ecx, eax
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
shl eax, 2
add eax, dword [ebp - 0x4cc]
add eax, 0x40
push eax
call fcn.004e43fc
add esp, 0xc
jmp 0x49a7b7
cmp dword [ebp - 0x5b4], 1
je 0x49a5fe
jmp 0x49a6ff
jmp 0x49a5da
mov eax, dword [ebp - 0x1c]
push eax
call fcn.004796fa
add esp, 4
mov eax, dword [ebp - 0x1c]
push eax
call fcn.0047947b
add esp, 4
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0xbe]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0xbe]
push eax
call fcn.004796fa
add esp, 4
lea eax, [ebp - 0x4d4]
push eax
mov eax, dword [ebp + 0xc]
push eax
call fcn.0049a274
add esp, 8
mov dword [ebp - 0x568], eax
cmp dword [ebp - 0x568], 0
je 0x49a827
mov eax, dword [ebp - 0x568]
jmp 0x49bc35
mov eax, dword [ebp + 0xc]
add eax, 0xce
push eax
push 0x67
push 0x64
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x26]
push eax
call fcn.00476c98
add esp, 0x10
mov dword [ebp - 0x568], eax
cmp dword [ebp - 0x568], 0
je 0x49a861
mov eax, dword [ebp - 0x568]
jmp 0x49bc35
mov dword [ebp - 0x580], 0
jmp 0x49a876
inc dword [ebp - 0x580]
cmp dword [ebp - 0x580], 0x1e
jge 0x49a91c
mov eax, dword [ebp - 0x580]
push eax
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0xce]
push eax
call fcn.004d96e6
add esp, 8
mov dword [ebp - 0x4d0], eax
cmp dword [ebp - 0x4d0], 0
je 0x49a8f4
mov eax, dword [ebp - 0x4d0]
cmp dword [eax], 0
jne 0x49a8d4
mov eax, dword [ebp - 0x580]
mov dword [ebp + eax*4 - 0x558], 1
jmp 0x49a8ef
mov dword [ebp - 0x4bc], 1
mov eax, dword [ebp - 0x580]
mov dword [ebp + eax*4 - 0x558], 0
jmp 0x49a905
mov eax, dword [ebp - 0x580]
mov dword [ebp + eax*4 - 0x558], 0
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0xce]
push eax
call fcn.004d9749
add esp, 4
jmp 0x49a870
mov dword [ebp - 0x57c], 0
lea eax, [ebp - 0x558]
push eax
lea eax, [ebp - 0x57c]
push eax
mov eax, dword [ebp + 0xc]
push eax
call fcn.004997f1
add esp, 0xc
mov dword [ebp - 0x568], eax
cmp dword [ebp - 0x568], 0
je 0x49a95e
mov eax, dword [ebp - 0x568]
jmp 0x49bc35
lea eax, [ebp - 0x57c]
push eax
mov eax, dword [ebp + 0xc]
push eax
call fcn.00499e67
add esp, 8
mov dword [ebp - 0x568], eax
cmp dword [ebp - 0x568], 0
je 0x49a98f
mov eax, dword [ebp - 0x568]
jmp 0x49bc35
lea eax, [ebp - 0x5a4]
push eax
lea eax, [ebp - 0x5ac]
push eax
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x57c]
push eax
mov eax, dword [ebp + 0xc]
push eax
call fcn.004999df
add esp, 0x14
mov dword [ebp - 0x568], eax
cmp dword [ebp - 0x568], 0
je 0x49a9d2
mov eax, dword [ebp - 0x568]
jmp 0x49bc35
lea eax, [ebp - 0x4dc]
push eax
push 0x66
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x26]
push eax
call fcn.0047a899
add esp, 0xc
mov dword [ebp - 0x568], eax
cmp dword [ebp - 0x568], 0
je 0x49aa08
mov eax, dword [ebp - 0x568]
jmp 0x49bc35
mov dword [ebp - 0x580], 0
jmp 0x49aa1d
inc dword [ebp - 0x580]
mov eax, dword [ebp - 0x4dc]
cmp dword [ebp - 0x580], eax
jge 0x49aed6
lea eax, [ebp - 0x5a0]
push eax
mov eax, dword [ebp - 0x580]
push eax
push 0x66
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x26]
push eax
call fcn.0047a9aa
add esp, 0x10
mov dword [ebp - 0x568], eax
cmp dword [ebp - 0x568], 0
je 0x49aa6c
mov eax, dword [ebp - 0x568]
jmp 0x49bc35
lea eax, [ebp - 0x1c]
push eax
mov eax, dword [ebp - 0x5a0]
push eax
push 0x66
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x26]
push eax
call fcn.00476b89
add esp, 0x10
mov dword [ebp - 0x568], eax
cmp dword [ebp - 0x568], 0
je 0x49aaa6
mov eax, dword [ebp - 0x568]
jmp 0x49bc35
cmp dword [ebp - 0x4bc], 0
je 0x49aac6
mov eax, dword [ebp - 0x1c]
push eax
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x26]
push eax
call fcn.0040c3ef
add esp, 8
mov dword [ebp - 0x584], 0
jmp 0x49aadb
inc dword [ebp - 0x584]
cmp dword [ebp - 0x584], 0x1e
jge 0x49aeb9
mov eax, dword [ebp - 0x584]
push eax
mov eax, dword [ebp - 0x1c]
push eax
call fcn.004d96e6
add esp, 8
mov dword [ebp - 0x4d0], eax
cmp dword [ebp - 0x4d0], 0
je 0x49ab4e
mov eax, dword [ebp - 0x4d0]
test byte [eax + 0x21], 0x10
je 0x49ab4e
push 0
push 0x1000
mov eax, dword [ebp - 0x4d0]
add eax, 0x20
push eax
call fcn.004e43fc
add esp, 0xc
mov dword [ebp - 0x5b0], 1
mov eax, dword [ebp - 0x4d0]
mov dword [eax + 0x3c], 0xffffffff
cmp dword [ebp - 0x4d0], 0
je 0x49abb8
mov eax, dword [ebp - 0x4d0]
test byte [eax + 0x21], 0x40
je 0x49abb8
push 0
push 0x4000
mov eax, dword [ebp - 0x4d0]
add eax, 0x20
push eax
call fcn.004e43fc
add esp, 0xc
mov eax, dword [ebp - 0x4d0]
cmp dword [eax + 0x4c], 0
je 0x49abab
mov dword [ebp - 0x598], 1
mov eax, dword [ebp - 0x4d0]
mov dword [eax + 0x4c], 0
mov eax, dword [ebp - 0x4d0]
mov dword [eax + 0x3c], 0xffffffff
cmp dword [ebp - 0x4d0], 0
je 0x49ac9c
mov eax, dword [ebp - 0x4d0]
mov eax, dword [eax + 0x14]
shl eax, 4
lea eax, [eax + eax*2]
add eax, dword [ebp - 0x4d0]
add eax, 0x50
mov dword [ebp - 0x590], eax
mov dword [ebp - 0x588], 0
jmp 0x49abf8
inc dword [ebp - 0x588]
mov eax, dword [ebp - 0x4d0]
mov ecx, dword [ebp - 0x588]
cmp dword [eax + 0x10], ecx
jle 0x49ac9c
mov eax, dword [ebp - 0x588]
lea eax, [eax + eax*4]
shl eax, 4
mov ecx, dword [ebp - 0x590]
test byte [eax + ecx + 8], 4
je 0x49ac97
push 0
push 4
mov eax, dword [ebp - 0x588]
lea eax, [eax + eax*4]
shl eax, 4
add eax, dword [ebp - 0x590]
add eax, 8
push eax
call fcn.004e43fc
add esp, 0xc
mov dword [ebp - 0x594], 1
mov eax, dword [ebp - 0x588]
lea eax, [eax + eax*4]
shl eax, 4
mov ecx, dword [ebp - 0x590]
mov dword [eax + ecx + 0x34], 0
mov eax, dword [ebp - 0x588]
lea eax, [eax + eax*4]
shl eax, 4
mov ecx, dword [ebp - 0x590]
mov dword [eax + ecx + 0x38], 0
mov eax, dword [ebp - 0x4d0]
mov dword [eax + 0x3c], 0xffffffff
jmp 0x49abf2
cmp dword [ebp - 0x4d0], 0
je 0x49ae5e
mov eax, dword [ebp - 0x4d0]
test byte [eax + 0x20], 2
je 0x49ae5e
push 0
push 2
mov eax, dword [ebp - 0x4d0]
add eax, 0x20
push eax
call fcn.004e43fc
add esp, 0xc
mov dword [ebp - 0x59c], 1
mov eax, dword [ebp - 0x4d0]
mov dword [eax + 0x3c], 0xffffffff
mov eax, dword [ebp - 0x4d0]
mov eax, dword [eax + 0x14]
shl eax, 4
lea eax, [eax + eax*2]
mov ecx, dword [ebp - 0x4d0]
mov ecx, dword [ecx + 0x10]
lea ecx, [ecx + ecx*4]
shl ecx, 4
add eax, ecx
add eax, dword [ebp - 0x4d0]
add eax, 0x50
mov dword [ebp - 0x4c8], eax
mov eax, dword [ebp - 0x4d0]
mov eax, dword [eax + 0x18]
push eax
push 0xd
mov eax, dword [ebp - 0x4c8]
push eax
call fcn.00523154
add esp, 0xc
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x49ae5e
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 0x4c8]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x4d0]
mov eax, dword [eax + 0x18]
dec eax
cmp eax, dword [ebp - 0x10]
jle 0x49ae5e
mov dword [ebp - 0x14], 1
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x4d0]
mov dword [ecx + 0x18], eax
mov eax, dword [ebp - 0x4d0]
mov eax, dword [eax + 0x14]
shl eax, 4
lea eax, [eax + eax*2]
add eax, dword [ebp - 0x4d0]
add eax, 0x50
mov dword [ebp - 0x590], eax
mov dword [ebp - 0x588], 0
jmp 0x49ada2
inc dword [ebp - 0x588]
mov eax, dword [ebp - 0x4d0]
mov ecx, dword [ebp - 0x588]
cmp dword [eax + 0x10], ecx
jle 0x49ae5e
mov eax, dword [ebp - 0x588]
lea eax, [eax + eax*4]
shl eax, 4
mov ecx, dword [ebp - 0x590]
mov edx, dword [ebp - 0x10]
cmp dword [eax + ecx + 0x2c], edx
jl 0x49adf5
mov eax, dword [ebp - 0x588]
lea eax, [eax + eax*4]
shl eax, 4
mov ecx, dword [ebp - 0x590]
mov dword [eax + ecx + 0x30], 0
jmp 0x49ae59
mov eax, dword [ebp - 0x588]
lea eax, [eax + eax*4]
shl eax, 4
mov ecx, dword [ebp - 0x590]
mov eax, dword [eax + ecx + 0x2c]
mov ecx, dword [ebp - 0x588]
lea ecx, [ecx + ecx*4]
shl ecx, 4
mov edx, dword [ebp - 0x590]
add eax, dword [ecx + edx + 0x30]
cmp eax, dword [ebp - 0x10]
jle 0x49ae59
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x588]
lea ecx, [ecx + ecx*4]
shl ecx, 4
mov edx, dword [ebp - 0x590]
sub eax, dword [ecx + edx + 0x2c]
mov ecx, dword [ebp - 0x588]
lea ecx, [ecx + ecx*4]
shl ecx, 4
mov edx, dword [ebp - 0x590]
mov dword [ecx + edx + 0x30], eax
jmp 0x49ad9c
mov eax, dword [ebp - 0x1c]
push eax
call fcn.004d9749
add esp, 4
cmp dword [ebp - 0x4d0], 0
je 0x49aeb4
mov eax, dword [ebp - 0x584]
push eax
lea eax, [ebp - 0x57c]
push eax
call fcn.004995fd
add esp, 8
test eax, eax
je 0x49aeb4
push 1
mov eax, dword [ebp - 0x584]
push eax
mov eax, dword [ebp - 0x1c]
push eax
call fcn.004d992f
add esp, 0xc
mov dword [ebp - 0x4b8], 1
jmp 0x49aad5
mov eax, dword [ebp - 0x1c]
push eax
call fcn.004796fa
add esp, 4
mov eax, dword [ebp - 0x1c]
push eax
call fcn.0047947b
add esp, 4
jmp 0x49aa17
lea eax, [ebp - 0x4dc]
push eax
push 0x69
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x26]
push eax
call fcn.0047a899
add esp, 0xc
mov dword [ebp - 0x568], eax
cmp dword [ebp - 0x568], 0
je 0x49af0c
mov eax, dword [ebp - 0x568]
jmp 0x49bc35
mov dword [ebp - 0x580], 0
jmp 0x49af21
inc dword [ebp - 0x580]
mov eax, dword [ebp - 0x4dc]
cmp dword [ebp - 0x580], eax
jge 0x49b0f7
lea eax, [ebp - 0x5a0]
push eax
mov eax, dword [ebp - 0x580]
push eax
push 0x69
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x26]
push eax
call fcn.0047a9aa
add esp, 0x10
mov dword [ebp - 0x568], eax
cmp dword [ebp - 0x568], 0
je 0x49af70
mov eax, dword [ebp - 0x568]
jmp 0x49bc35
lea eax, [ebp - 0x1c]
push eax
mov eax, dword [ebp - 0x5a0]
push eax
push 0x69
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x26]
push eax
call fcn.00476b89
add esp, 0x10
mov dword [ebp - 0x568], eax
cmp dword [ebp - 0x568], 0
je 0x49afaa
mov eax, dword [ebp - 0x568]
jmp 0x49bc35
mov dword [ebp - 0x584], 0
jmp 0x49afbf
inc dword [ebp - 0x584]
cmp dword [ebp - 0x584], 1
jge 0x49b0da
mov eax, dword [ebp - 0x584]
push eax
mov eax, dword [ebp - 0x1c]
push eax
call fcn.004d96e6
add esp, 8
mov dword [ebp - 0x4d0], eax
cmp dword [ebp - 0x4d0], 0
je 0x49b0c9
mov eax, dword [ebp - 0x4d0]
mov eax, dword [eax + 0x14]
shl eax, 4
lea eax, [eax + eax*2]
add eax, dword [ebp - 0x4d0]
add eax, 0x50
mov dword [ebp - 0x590], eax
mov dword [ebp - 0x588], 0
jmp 0x49b025
inc dword [ebp - 0x588]
mov eax, dword [ebp - 0x4d0]
mov ecx, dword [ebp - 0x588]
cmp dword [eax + 0x10], ecx
jle 0x49b0c9
mov eax, dword [ebp - 0x588]
lea eax, [eax + eax*4]
shl eax, 4
mov ecx, dword [ebp - 0x590]
test byte [eax + ecx + 8], 4
je 0x49b0c4
push 0
push 4
mov eax, dword [ebp - 0x588]
lea eax, [eax + eax*4]
shl eax, 4
add eax, dword [ebp - 0x590]
add eax, 8
push eax
call fcn.004e43fc
add esp, 0xc
mov eax, dword [ebp - 0x4d0]
mov dword [eax + 0x3c], 0xffffffff
mov dword [ebp - 0x594], 1
mov eax, dword [ebp - 0x588]
lea eax, [eax + eax*4]
shl eax, 4
mov ecx, dword [ebp - 0x590]
mov dword [eax + ecx + 0x34], 0
mov eax, dword [ebp - 0x588]
lea eax, [eax + eax*4]
shl eax, 4
mov ecx, dword [ebp - 0x590]
mov dword [eax + ecx + 0x38], 0
jmp 0x49b01f
mov eax, dword [ebp - 0x1c]
push eax
call fcn.004d9749
add esp, 4
jmp 0x49afb9
mov eax, dword [ebp - 0x1c]
push eax
call fcn.004796fa
add esp, 4
mov eax, dword [ebp - 0x1c]
push eax
call fcn.0047947b
add esp, 4
jmp 0x49af1b
lea eax, [ebp - 0x4dc]
push eax
push 0x65
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x26]
push eax
call fcn.0047a899
add esp, 0xc
mov dword [ebp - 0x568], eax
cmp dword [ebp - 0x568], 0
je 0x49b12d
mov eax, dword [ebp - 0x568]
jmp 0x49bc35
mov dword [ebp - 0x580], 0
jmp 0x49b142
inc dword [ebp - 0x580]
mov eax, dword [ebp - 0x4dc]
cmp dword [ebp - 0x580], eax
jge 0x49b451
lea eax, [ebp - 0x5a0]
push eax
mov eax, dword [ebp - 0x580]
push eax
push 0x65
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x26]
push eax
call fcn.0047a9aa
add esp, 0x10
mov dword [ebp - 0x568], eax
cmp dword [ebp - 0x568], 0
je 0x49b191
mov eax, dword [ebp - 0x568]
jmp 0x49bc35
lea eax, [ebp - 0x564]
push eax
mov eax, dword [ebp - 0x5a0]
push eax
push 0x65
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x26]
push eax
call fcn.00476b89
add esp, 0x10
mov dword [ebp - 0x568], eax
cmp dword [ebp - 0x568], 0
je 0x49b1ce
mov eax, dword [ebp - 0x568]
jmp 0x49bc35
mov eax, dword [ebp - 0x564]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0x4c0]
push eax
mov eax, dword [ebp - 0xc]
push eax
call fcn.0049949b
add esp, 8
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x78]
cmp dword [0x52d08c], eax
jne 0x49b23f
mov eax, dword [ebp - 0xc]
mov ecx, dword [0x52d090]
cmp dword [eax + 0x7c], ecx
jne 0x49b23f
mov eax, dword [ebp - 0xc]
mov ecx, dword [0x52d094]
cmp dword [eax + 0x80], ecx
jne 0x49b23f
mov eax, dword [ebp - 0xc]
mov ecx, dword [0x52d098]
cmp dword [eax + 0x84], ecx
je 0x49b278
mov dword [ebp - 0x5a8], 1
mov eax, dword [0x52d098]
push eax
push 0
mov eax, dword [0x52d094]
push eax
mov eax, dword [0x52d090]
push eax
mov eax, dword [0x52d08c]
push eax
mov eax, dword [0x52d088]
push eax
mov eax, dword [ebp - 0x564]
push eax
call fcn.0042a1af
add esp, 0x1c
mov dword [ebp - 0x584], 0
jmp 0x49b28d
inc dword [ebp - 0x584]
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x584]
cmp dword [eax + 0x8c], ecx
jle 0x49b421
mov eax, dword [ebp - 0x584]
push eax
mov eax, dword [ebp - 0xc]
push eax
call fcn.004379c0
add esp, 8
mov dword [ebp - 0x4c4], eax
mov eax, dword [ebp - 0x4c4]
cmp dword [eax + 0xc0], 0x67
jne 0x49b2e1
mov eax, dword [ebp - 0x4c4]
cmp dword [eax + 0xbc], 0
je 0x49b308
mov dword [ebp - 8], 1
mov eax, dword [ebp - 0x4c4]
mov dword [eax + 0xc0], 0x67
mov eax, dword [ebp - 0x4c4]
mov dword [eax + 0xbc], 0
push 0
push 0x1000
mov eax, dword [ebp - 0x4c4]
add eax, 0x2c
push eax
call fcn.004e43fc
add esp, 0xc
push 0
push 0x100
mov eax, dword [ebp - 0x4c4]
add eax, 0xf4
push eax
call fcn.004e43fc
add esp, 0xc
mov eax, dword [ebp - 0x4c4]
test byte [eax + 0xf4], 0x80
jne 0x49b3ff
mov eax, dword [ebp - 0x4c4]
mov ecx, dword [0x52d0a0]
cmp dword [eax + 0x4c], ecx
jne 0x49b379
mov eax, dword [ebp - 0x4c4]
mov ecx, dword [0x52d0a4]
cmp dword [eax + 0x48], ecx
je 0x49b39f
mov eax, dword [0x52d0a0]
mov ecx, dword [ebp - 0x4c4]
mov dword [ecx + 0x4c], eax
mov eax, dword [0x52d0a4]
mov ecx, dword [ebp - 0x4c4]
mov dword [ecx + 0x48], eax
mov dword [ebp - 0x4e0], 1
mov eax, dword [ebp - 0x4c4]
test byte [eax + 0xf4], 1
je 0x49b3c5
mov eax, dword [ebp - 0x4c4]
test byte [eax + 0xf4], 2
jne 0x49b3ff
push 1
push 1
mov eax, dword [ebp - 0x4c4]
add eax, 0xf4
push eax
call fcn.004e43fc
add esp, 0xc
push 1
push 2
mov eax, dword [ebp - 0x4c4]
add eax, 0xf4
push eax
call fcn.004e43fc
add esp, 0xc
mov dword [ebp - 0x4e0], 1
mov eax, dword [ebp - 0x4c4]
test byte [eax + 0xf4], 4
je 0x49b41c
mov dword [ebp - 0x4d8], 1
jmp 0x49b287
mov eax, dword [ebp - 0x564]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov eax, dword [ebp - 0x564]
push eax
call fcn.004796fa
add esp, 4
mov eax, dword [ebp - 0x564]
push eax
call fcn.0047947b
add esp, 4
jmp 0x49b13c
cmp dword [ebp - 0x4d8], 0
je 0x49b46e
push 1
push 0
mov eax, dword [ebp + 8]
push eax
call fcn.0040d3ea
add esp, 0xc
cmp dword [ebp - 0x4e0], 0
jne 0x49b53b
cmp dword [ebp - 0x4c0], 0
jne 0x49b53b
cmp dword [ebp - 0x5a8], 0
jne 0x49b53b
cmp dword [ebp - 0x4d8], 0
jne 0x49b53b
cmp dword [ebp - 0x5b0], 0
jne 0x49b53b
cmp dword [ebp - 0x59c], 0
jne 0x49b53b
cmp dword [ebp - 0x4bc], 0
jne 0x49b53b
cmp dword [ebp - 8], 0
jne 0x49b53b
cmp dword [ebp - 0x4d4], 0
jne 0x49b53b
cmp dword [ebp - 0x4b8], 0
jne 0x49b53b
cmp dword [ebp - 0x5ac], 0
jne 0x49b53b
cmp dword [ebp - 0x598], 0
jne 0x49b53b
cmp dword [ebp - 0x5a4], 0
jne 0x49b53b
cmp dword [ebp - 0x4b4], 0
jne 0x49b53b
cmp dword [ebp - 0x594], 0
jne 0x49b53b
cmp dword [0x531870], 0
je 0x49bc07
lea eax, [ebp - 0x4b0]
push eax
push 0x2cec
call fcn.004e3fc4
add esp, 8
lea eax, [ebp - 0x4b0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x560], eax
cmp dword [ebp - 0x4d8], 0
je 0x49b59d
mov eax, dword [ebp - 0x560]
lea eax, [ebp + eax - 0x4b0]
push eax
push 0x2cf0
call fcn.004e3fc4
add esp, 8
lea eax, [ebp - 0x4b0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x560], eax
cmp dword [ebp - 0x4c0], 0
je 0x49b5d8
mov eax, dword [ebp - 0x560]
lea eax, [ebp + eax - 0x4b0]
push eax
push 0x2ced
call fcn.004e3fc4
add esp, 8
lea eax, [ebp - 0x4b0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x560], eax
cmp dword [ebp - 0x4e0], 0
je 0x49b623
cmp dword [ebp - 0x560], 0x384
jge 0x49b623
mov eax, dword [ebp - 0x560]
lea eax, [ebp + eax - 0x4b0]
push eax
push 0x2cef
call fcn.004e3fc4
add esp, 8
lea eax, [ebp - 0x4b0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x560], eax
cmp dword [ebp - 0x5a8], 0
je 0x49b66e
cmp dword [ebp - 0x560], 0x384
jge 0x49b66e
mov eax, dword [ebp - 0x560]
lea eax, [ebp + eax - 0x4b0]
push eax
push 0x2cee
call fcn.004e3fc4
add esp, 8
lea eax, [ebp - 0x4b0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x560], eax
cmp dword [ebp - 0x5b0], 0
je 0x49b6b9
cmp dword [ebp - 0x560], 0x384
jge 0x49b6b9
mov eax, dword [ebp - 0x560]
lea eax, [ebp + eax - 0x4b0]
push eax
push 0x2cf1
call fcn.004e3fc4
add esp, 8
lea eax, [ebp - 0x4b0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x560], eax
cmp dword [ebp - 0x59c], 0
je 0x49b704
cmp dword [ebp - 0x560], 0x384
jge 0x49b704
mov eax, dword [ebp - 0x560]
lea eax, [ebp + eax - 0x4b0]
push eax
push 0x2cf2
call fcn.004e3fc4
add esp, 8
lea eax, [ebp - 0x4b0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x560], eax
cmp dword [ebp - 0x14], 0
je 0x49b74c
cmp dword [ebp - 0x560], 0x384
jge 0x49b74c
mov eax, dword [ebp - 0x560]
lea eax, [ebp + eax - 0x4b0]
push eax
push 0x2cfa
call fcn.004e3fc4
add esp, 8
lea eax, [ebp - 0x4b0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x560], eax
cmp dword [ebp - 0x598], 0
je 0x49b797
cmp dword [ebp - 0x560], 0x384
jge 0x49b797
mov eax, dword [ebp - 0x560]
lea eax, [ebp + eax - 0x4b0]
push eax
push 0x2cf7
call fcn.004e3fc4
add esp, 8
lea eax, [ebp - 0x4b0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x560], eax
cmp dword [ebp - 0x4bc], 0
je 0x49b7e2
cmp dword [ebp - 0x560], 0x384
jge 0x49b7e2
mov eax, dword [ebp - 0x560]
lea eax, [ebp + eax - 0x4b0]
push eax
push 0x2cf3
call fcn.004e3fc4
add esp, 8
lea eax, [ebp - 0x4b0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x560], eax
cmp dword [ebp - 0x4d4], 0
je 0x49b82d
cmp dword [ebp - 0x560], 0x384
jge 0x49b82d
mov eax, dword [ebp - 0x560]
lea eax, [ebp + eax - 0x4b0]
push eax
push 0x2cf5
call fcn.004e3fc4
add esp, 8
lea eax, [ebp - 0x4b0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x560], eax
cmp dword [ebp - 0x4b8], 0
je 0x49b878
cmp dword [ebp - 0x560], 0x384
jge 0x49b878
mov eax, dword [ebp - 0x560]
lea eax, [ebp + eax - 0x4b0]
push eax
push 0x2cf6
call fcn.004e3fc4
add esp, 8
lea eax, [ebp - 0x4b0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x560], eax
cmp dword [ebp - 0x5ac], 0
je 0x49b8c3
cmp dword [ebp - 0x560], 0x384
jge 0x49b8c3
mov eax, dword [ebp - 0x560]
lea eax, [ebp + eax - 0x4b0]
push eax
push 0x2cf4
call fcn.004e3fc4
add esp, 8
lea eax, [ebp - 0x4b0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x560], eax
cmp dword [ebp - 0x5a4], 0
je 0x49b90e
cmp dword [ebp - 0x560], 0x384
jge 0x49b90e
mov eax, dword [ebp - 0x560]
lea eax, [ebp + eax - 0x4b0]
push eax
push 0x2cf8
call fcn.004e3fc4
add esp, 8
lea eax, [ebp - 0x4b0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x560], eax
cmp dword [ebp - 0x4b4], 0
je 0x49b959
cmp dword [ebp - 0x560], 0x384
jge 0x49b959
mov eax, dword [ebp - 0x560]
lea eax, [ebp + eax - 0x4b0]
push eax
push 0x2cf9
call fcn.004e3fc4
add esp, 8
lea eax, [ebp - 0x4b0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x560], eax
cmp dword [ebp - 0x594], 0
je 0x49b9a4
cmp dword [ebp - 0x560], 0x384
jge 0x49b9a4
mov eax, dword [ebp - 0x560]
lea eax, [ebp + eax - 0x4b0]
push eax
push 0x2cfb
call fcn.004e3fc4
add esp, 8
lea eax, [ebp - 0x4b0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x560], eax
cmp dword [0x531870], 0
je 0x49b9ef
cmp dword [ebp - 0x560], 0x384
jge 0x49b9ef
mov eax, dword [ebp - 0x560]
lea eax, [ebp + eax - 0x4b0]
push eax
push 0x2cfc
call fcn.004e3fc4
add esp, 8
lea eax, [ebp - 0x4b0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x560], eax
mov eax, dword [ebp - 0x560]
lea eax, [ebp + eax - 0x4b0]
push eax
push 0x2d1e
call fcn.004e3fc4
add esp, 8
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_IsWindowVisible]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je 0x49ba2d
push 0
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov dword [ebp - 0x568], 0
cmp dword [ebp - 0x4e0], 0
jne 0x49bafa
cmp dword [ebp - 0x4c0], 0
jne 0x49bafa
cmp dword [ebp - 0x5a8], 0
jne 0x49bafa
cmp dword [ebp - 0x4d8], 0
jne 0x49bafa
cmp dword [ebp - 0x5b0], 0
jne 0x49bafa
cmp dword [ebp - 0x59c], 0
jne 0x49bafa
cmp dword [ebp - 0x4bc], 0
jne 0x49bafa
cmp dword [ebp - 0x4d4], 0
jne 0x49bafa
cmp dword [ebp - 0x4b8], 0
jne 0x49bafa
cmp dword [ebp - 0x5ac], 0
jne 0x49bafa
cmp dword [ebp - 0x598], 0
jne 0x49bafa
cmp dword [ebp - 0x5a4], 0
jne 0x49bafa
cmp dword [ebp - 0x4b4], 0
jne 0x49bafa
cmp dword [ebp - 0x594], 0
jne 0x49bafa
cmp dword [0x531870], 0
je 0x49bb8e
mov eax, dword [0x533660]
mov dword [ebp - 0x55c], eax
mov dword [0x533660], 1
mov dword [ebp - 0x20], sym.MSOCht32.EXE_MiscFilter
mov eax, dword [ebp - 0x20]
push eax
push 0xffffffffffffffff
call dword [sym.imp.USER32.dll_SetWindowsHookA]
mov dword [0x53366c], eax
mov dword [0x52ceb8], 0xf
push 1
push 0x52d870
lea eax, [ebp - 0x4b0]
push eax
mov eax, dword [0x533644]
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
mov dword [ebp - 0x568], eax
mov eax, dword [ebp - 0x20]
push eax
push 0xffffffffffffffff
call dword [sym.imp.USER32.dll_UnhookWindowsHook]
mov eax, dword [ebp - 0x55c]
mov dword [0x533660], eax
cmp dword [ebp - 0x568], 2
jne 0x49bb84
mov dword [ebp - 0x568], 0xffffffff
jmp 0x49bb8e
mov dword [ebp - 0x568], 0
cmp dword [ebp - 0x18], 0
je 0x49bbc6
cmp dword [ebp - 0x568], 0
jne 0x49bbc6
push 8
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 1
push 0
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_GetParent]
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
cmp dword [ebp - 0x594], 0
je 0x49bbdf
mov eax, dword [ebp + 0xc]
push eax
call fcn.004ad5c9
add esp, 4
cmp dword [ebp - 0x568], 0
jne 0x49bc02
mov eax, dword [ebp + 0xc]
push eax
mov eax, dword [ebp + 8]
push eax
call fcn.004991b0
add esp, 8
mov dword [ebp - 0x568], eax
jmp 0x49bc2a
cmp dword [ebp - 0x58c], 0
je 0x49bc2a
mov eax, dword [ebp + 0xc]
push eax
mov eax, dword [ebp + 8]
push eax
call fcn.004991b0
add esp, 8
mov dword [ebp - 0x568], eax
mov eax, dword [ebp - 0x568]
jmp 0x49bc35
pop edi
pop esi
pop ebx
leave
ret