Function at 0x4c1250
Capabilities:
Get common file path
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5be835
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x820
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, ecx
mov dword [ebp - 0x28], edi
test esi, esi
je 0x4c2261
mov eax, dword [ebp + 0xc]
shr eax, 0x10
cmp eax, 0x2a1
ja 0x4c12af
je 0x4c2261
sub eax, 0
je 0x4c12ba
sub eax, 1
je 0x4c12ba
pop edi
pop esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
cmp eax, 0x400
jne 0x4c2261
mov ecx, esi
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x10], 0xf
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4c12d4
push ebx
sub ecx, edx
push ecx
push esi
lea ecx, [ebp - 0x24]
call fcn.00449cf0
cmp dword [ebp - 0x10], 0x10
lea ecx, [ebp - 0x24]
mov ebx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x14]
cmovae ecx, ebx
push 0x11
push str.settings_cb_proxy
call fcn.00457de0
mov byte [ebp + 0xb], al
add esp, 8
mov eax, dword [ebp - 0x10]
cmp eax, 0x10
jb 0x4c133d
lea ecx, [eax + 1]
mov eax, ebx
cmp ecx, 0x1000
jb 0x4c1333
mov ebx, dword [eax - 4]
add ecx, 0x23
sub eax, ebx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4c2273
push ecx
push ebx
call fcn.00583877
add esp, 8
cmp byte [ebp + 0xb], 0
je 0x4c13af
mov eax, dword [edi + 0xa8]
push 0
push 1
push 0xf0
push dword [eax + 8]
call dword [sym.imp.USER32.dll_SendMessageW]
mov ebx, dword [ebp - 0x28]
mov esi, dword [sym.imp.USER32.dll_EnableWindow]
lea edi, [eax - 1]
mov ecx, dword [ebx + 0xac]
neg edi
sbb edi, edi
inc edi
push edi
push dword [ecx + 8]
call esi
mov eax, dword [ebx + 0xb0]
push edi
push dword [eax + 8]
call esi
mov eax, dword [ebx + 0xb4]
push edi
push dword [eax + 8]
call esi
mov eax, dword [ebx + 0xb8]
push edi
push dword [eax + 8]
call esi
pop ebx
pop edi
pop esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
push esi
lea ecx, [ebp - 0x24]
call fcn.004471f0
cmp dword [eax + 0x14], 0x10
mov edx, dword [eax + 0x10]
jb 0x4c13c3
mov eax, dword [eax]
push 0x10
push str.settings_cb_auto
mov ecx, eax
call fcn.00457de0
add esp, 8
lea ecx, [ebp - 0x24]
mov bl, al
call fcn.004470b0
test bl, bl
je 0x4c1425
mov eax, dword [edi + 0xf4]
push 0
push 1
push 0xf0
push dword [eax + 8]
call dword [sym.imp.USER32.dll_SendMessageW]
xor ecx, ecx
cmp eax, 1
mov eax, dword [edi + 0xf8]
setne cl
push ecx
push dword [eax + 8]
call dword [sym.imp.USER32.dll_EnableWindow]
pop ebx
pop edi
pop esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
push esi
lea ecx, [ebp - 0x24]
call fcn.004471f0
cmp dword [eax + 0x14], 0x10
mov edx, dword [eax + 0x10]
jb 0x4c1439
mov eax, dword [eax]
push 0x13
push str.settings_btn_cancel
mov ecx, eax
call fcn.00457de0
add esp, 8
lea ecx, [ebp - 0x24]
mov bl, al
call fcn.004470b0
test bl, bl
jne 0x4c2257
push esi
lea ecx, [ebp - 0x24]
call fcn.004471f0
cmp dword [eax + 0x14], 0x10
mov edx, dword [eax + 0x10]
jb 0x4c1470
mov eax, dword [eax]
push 0xf
push str.settings_fmpath
mov ecx, eax
call fcn.00457de0
add esp, 8
lea ecx, [ebp - 0x24]
mov bl, al
call fcn.004470b0
lea ecx, [ebp - 0x24]
test bl, bl
je 0x4c14f5
call fcn.00529500
cmp dword [ebp - 0x14], 0
jbe 0x4c14b8
cmp dword [ebp - 0x10], 8
lea eax, [ebp - 0x24]
cmovae eax, dword [ebp - 0x24]
push eax
mov eax, dword [edi + 0x10c]
push dword [eax + 8]
call dword [sym.imp.USER32.dll_SetWindowTextW]
mov ecx, dword [ebp - 0x10]
cmp ecx, 8
jb 0x4c2260
mov edx, dword [ebp - 0x24]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4c16b9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4c2278
jmp 0x4c16b9
push esi
call fcn.004471f0
cmp dword [eax + 0x14], 0x10
mov edx, dword [eax + 0x10]
jb 0x4c1506
mov eax, dword [eax]
push 0x16
push str.settings_contacts_path
mov ecx, eax
call fcn.00457de0
add esp, 8
lea ecx, [ebp - 0x24]
mov bl, al
call fcn.004470b0
lea ecx, [ebp - 0x24]
test bl, bl
je 0x4c154a
call fcn.00529500
cmp dword [ebp - 0x14], 0
jbe 0x4c14b8
cmp dword [ebp - 0x10], 8
lea eax, [ebp - 0x24]
cmovae eax, dword [ebp - 0x24]
push eax
mov eax, dword [edi + 0x114]
jmp 0x4c14af
push esi
call fcn.004471f0
cmp dword [eax + 0x14], 0x10
mov edx, dword [eax + 0x10]
jb 0x4c155b
mov eax, dword [eax]
push 0x22
push str.settings_contacts_set_default_path
mov ecx, eax
call fcn.00457de0
add esp, 8
lea ecx, [ebp - 0x24]
mov bl, al
call fcn.004470b0
test bl, bl
je 0x4c1604
lea eax, [ebp - 0x32c]
push eax
push 0
push 0
push 0x23
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
lea ecx, [ebp - 0x32c]
add ecx, 0xfffffffe
lea esp, [esp]
mov ax, word [ecx + 2]
lea ecx, [ecx + 2]
test ax, ax
jne 0x4c15a0
mov eax, dword [str.Aeroadmin_]
mov dword [ecx], eax
mov eax, dword [0x5eeed4]
mov dword [ecx + 4], eax
mov eax, dword [0x5eeed8]
mov dword [ecx + 8], eax
mov eax, dword [0x5eeedc]
mov dword [ecx + 0xc], eax
mov eax, dword [0x5eeee0]
mov dword [ecx + 0x10], eax
mov eax, dword [0x5eeee4]
mov dword [ecx + 0x14], eax
lea eax, [ebp - 0x32c]
push eax
mov eax, dword [edi + 0x114]
push dword [eax + 8]
call dword [sym.imp.USER32.dll_SetWindowTextW]
pop ebx
pop edi
pop esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
push esi
lea ecx, [ebp - 0x24]
call fcn.004471f0
cmp dword [eax + 0x14], 0x10
mov edx, dword [eax + 0x10]
jb 0x4c1618
mov eax, dword [eax]
push 0x14
push str.settings_ffmpeg_path
mov ecx, eax
call fcn.00457de0
add esp, 8
lea ecx, [ebp - 0x24]
mov bl, al
call fcn.004470b0
lea ecx, [ebp - 0x24]
test bl, bl
je 0x4c1660
call fcn.00529430
cmp dword [ebp - 0x14], 0
jbe 0x4c14b8
cmp dword [ebp - 0x10], 8
lea eax, [ebp - 0x24]
cmovae eax, dword [ebp - 0x24]
push eax
mov eax, dword [edi + 0x110]
jmp 0x4c14af
push esi
call fcn.004471f0
cmp dword [eax + 0x14], 0x10
mov edx, dword [eax + 0x10]
jb 0x4c1671
mov eax, dword [eax]
push 0x1d
push str.settings_recording_path_video
mov ecx, eax
call fcn.00457de0
add esp, 8
lea ecx, [ebp - 0x24]
mov bl, al
call fcn.004470b0
lea ecx, [ebp - 0x24]
test bl, bl
je 0x4c16d6
call fcn.00529500
cmp dword [ebp - 0x14], 0
jbe 0x4c14b8
cmp dword [ebp - 0x10], 8
lea eax, [ebp - 0x24]
cmovae eax, dword [ebp - 0x24]
push eax
mov eax, dword [edi + 0x12c]
jmp 0x4c14af
push ecx
push edx
call fcn.00583877
add esp, 8
pop ebx
pop edi
pop esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
push esi
call fcn.004471f0
cmp dword [eax + 0x14], 0x10
mov edx, dword [eax + 0x10]
jb 0x4c16e7
mov eax, dword [eax]
push 0x25
push str.settings_recording_default_path_video
mov ecx, eax
call fcn.00457de0
add esp, 8
lea ecx, [ebp - 0x24]
mov bl, al
call fcn.004470b0
test bl, bl
je 0x4c176a
lea eax, [ebp - 0x32c]
push eax
push 0
push 0
push 0x23
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
lea edi, [ebp - 0x32c]
add edi, 0xfffffffe
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x4c1724
mov ebx, dword [ebp - 0x28]
lea eax, [ebp - 0x32c]
mov ecx, 0xb
mov esi, str.AeroadminRecordings_
rep movsd dword es:[edi], dword [esi]
push eax
mov eax, dword [ebx + 0x12c]
movsw word es:[edi], word [esi]
push dword [eax + 8]
call dword [sym.imp.USER32.dll_SetWindowTextW]
pop ebx
pop edi
pop esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
push esi
lea ecx, [ebp - 0x24]
call fcn.004471f0
cmp dword [eax + 0x14], 0x10
mov edx, dword [eax + 0x10]
jb 0x4c177e
mov eax, dword [eax]
push 0x20
push str.settings_cb_auto_start_recording
mov ecx, eax
call fcn.00457de0
add esp, 8
lea ecx, [ebp - 0x24]
mov bl, al
call fcn.004470b0
test bl, bl
je 0x4c17c8
mov eax, dword [edi + 0x130]
push 0
push 1
push 0xf0
push dword [eax + 8]
call dword [sym.imp.USER32.dll_SendMessageW]
pop ebx
pop edi
pop esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
push esi
lea ecx, [ebp - 0x24]
call fcn.004471f0
cmp dword [eax + 0x14], 0x10
mov edx, dword [eax + 0x10]
jb 0x4c17dc
mov eax, dword [eax]
push 0x1a
push str.settings_cb_show_btnrec_mw
mov ecx, eax
call fcn.00457de0
add esp, 8
lea ecx, [ebp - 0x24]
mov bl, al
call fcn.004470b0
test bl, bl
je 0x4c1826
mov eax, dword [edi + 0x134]
push 0
push 1
push 0xf0
push dword [eax + 8]
call dword [sym.imp.USER32.dll_SendMessageW]
pop ebx
pop edi
pop esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
push esi
lea ecx, [ebp - 0x24]
call fcn.004471f0
cmp dword [eax + 0x14], 0x10
mov edx, dword [eax + 0x10]
jb 0x4c183a
mov eax, dword [eax]
push 0xf
push str.settings_btn_ok
mov ecx, eax
call fcn.00457de0
add esp, 8
lea ecx, [ebp - 0x24]
mov bl, al
call fcn.004470b0
test bl, bl
je 0x4c2260
push 0x100
lea eax, [ebp - 0x32c]
push eax
mov eax, dword [edi + 0x10c]
push dword [eax + 8]
call dword [sym.imp.USER32.dll_GetWindowTextW]
call fcn.005201a0
mov esi, eax
lea ecx, [ebp - 0x24]
lea eax, [ebp - 0x32c]
push eax
call fcn.00446ee0
lea eax, [ebp - 0x24]
mov dword [ebp - 4], 0
push eax
push 0
lea eax, [esi + 0x128]
push eax
call fcn.0044c7c0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x10]
cmp ecx, 8
jb 0x4c18e8
mov edx, dword [ebp - 0x24]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4c18de
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4c2278
push ecx
push edx
call fcn.00583877
add esp, 8
call fcn.005201a0
mov ecx, dword [edi + 0x11c]
mov esi, eax
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 1
push 0xf0
push dword [ecx + 8]
call ebx
cmp eax, 1
lea eax, [ebp + 0xb]
push eax
push 0
lea eax, [esi + 0x130]
sete byte [ebp + 0xb]
push eax
call fcn.0044c910
call fcn.005201a0
mov ecx, dword [edi + 0x120]
mov esi, eax
push 0
push 1
push 0xf0
push dword [ecx + 8]
call ebx
cmp eax, 1
lea eax, [ebp + 0xb]
push eax
push 0
lea eax, [esi + 0x138]
sete byte [ebp + 0xb]
push eax
call fcn.0044c910
call fcn.005201a0
mov ecx, dword [edi + 0x124]
mov esi, eax
push 0
push 1
push 0xf0
push dword [ecx + 8]
call ebx
cmp eax, 1
lea eax, [ebp + 0xb]
push eax
push 0
lea eax, [esi + 0x140]
sete byte [ebp + 0xb]
push eax
call fcn.0044c910
call fcn.005201a0
mov ecx, dword [edi + 0x128]
mov esi, eax
push 0
push 1
push 0xf0
push dword [ecx + 8]
call ebx
cmp eax, 1
lea eax, [ebp + 0xb]
push eax
push 0
lea eax, [esi + 0x148]
sete byte [ebp + 0xb]
push eax
call fcn.0044c910
push 0x100
lea eax, [ebp - 0x32c]
push eax
mov eax, dword [edi + 0x114]
push dword [eax + 8]
call dword [sym.imp.USER32.dll_GetWindowTextW]
call fcn.005201a0
mov esi, eax
lea ecx, [ebp - 0x24]
lea eax, [ebp - 0x32c]
push eax
call fcn.00446ee0
lea eax, [ebp - 0x24]
mov dword [ebp - 4], 1
push eax
push 0
lea eax, [esi + 0x160]
push eax
call fcn.0044c7c0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x10]
cmp ecx, 8
jb 0x4c1a49
mov edx, dword [ebp - 0x24]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4c1a3f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4c2278
push ecx
push edx
call fcn.00583877
add esp, 8
call fcn.005201a0
mov ecx, dword [edi + 0xdc]
mov esi, eax
push 0
push 1
push 0xf0
push dword [ecx + 8]
call ebx
cmp eax, 1
lea eax, [ebp + 0xb]
push eax
push 0
lea eax, [esi + 0x170]
sete byte [ebp + 0xb]
push eax
call fcn.0044c910
call fcn.005201a0
mov ecx, dword [edi + 0xe0]
mov esi, eax
push 0
push 1
push 0xf0
push dword [ecx + 8]
call ebx
cmp eax, 1
lea eax, [ebp + 0xb]
push eax
push 0
lea eax, [esi + 0x178]
sete byte [ebp + 0xb]
push eax
call fcn.0044c910
mov ebx, dword [sym.imp.USER32.dll_GetWindowTextA]
lea eax, [ebp - 0x12c]
push 0x100
push eax
mov eax, dword [edi + 0xf0]
push dword [eax + 8]
call ebx
call fcn.005201a0
mov esi, eax
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.00597d06
add esp, 8
lea eax, [ebp + 8]
fstp dword [ebp + 8]
push eax
push 0
lea eax, [esi + 0x180]
push eax
call fcn.0044cb80
call fcn.005201a0
mov ecx, dword [edi + 0xf4]
mov esi, eax
push 0
push 1
push 0xf0
push dword [ecx + 8]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp eax, 1
lea eax, [ebp + 0xb]
push eax
push 0
lea eax, [esi + 0x188]
sete byte [ebp + 0xb]
push eax
call fcn.0044c910
push 0x100
lea eax, [ebp - 0x12c]
push eax
mov eax, dword [edi + 0xf8]
push dword [eax + 8]
call ebx
call fcn.005201a0
mov esi, eax
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.00597d06
add esp, 8
lea eax, [ebp + 8]
fstp dword [ebp + 8]
push eax
push 0
lea eax, [esi + 0x190]
push eax
call fcn.0044cb80
call fcn.005201a0
mov ecx, dword [edi + 0xe4]
mov esi, eax
push 0
push 1
push 0xf0
push dword [ecx + 8]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp eax, 1
lea eax, [ebp + 0xb]
push eax
push 0
lea eax, [esi + 0x198]
sete byte [ebp + 0xb]
push eax
call fcn.0044c910
call fcn.005201a0
mov ecx, dword [edi + 0xe8]
mov esi, eax
push 0
push 1
push 0xf0
push dword [ecx + 8]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp eax, 1
lea eax, [ebp + 0xb]
push eax
push 0
lea eax, [esi + 0x1a0]
sete byte [ebp + 0xb]
push eax
call fcn.0044c910
call fcn.005201a0
mov ecx, dword [edi + 0xec]
mov esi, eax
push 0
push 1
push 0xf0
push dword [ecx + 8]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp eax, 1
lea eax, [ebp + 0xb]
push eax
push 0
lea eax, [esi + 0x1a8]
sete byte [ebp + 0xb]
push eax
call fcn.0044c910
push 0x100
lea eax, [ebp - 0x62c]
push eax
mov eax, dword [edi + 0x110]
push dword [eax + 8]
call dword [sym.imp.USER32.dll_GetWindowTextW]
call fcn.005201a0
mov esi, eax
lea ecx, [ebp - 0x24]
lea eax, [ebp - 0x62c]
push eax
call fcn.00446ee0
lea eax, [ebp - 0x24]
mov dword [ebp - 4], 2
push eax
push 0
lea eax, [esi + 0x1b0]
push eax
call fcn.0044c7c0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x10]
cmp ecx, 8
jb 0x4c1cae
mov edx, dword [ebp - 0x24]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4c1ca4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4c2278
push ecx
push edx
call fcn.00583877
add esp, 8
push 0x100
lea eax, [ebp - 0x82c]
push eax
mov eax, dword [edi + 0x12c]
push dword [eax + 8]
call dword [sym.imp.USER32.dll_GetWindowTextW]
call fcn.005201a0
mov esi, eax
lea ecx, [ebp - 0x24]
lea eax, [ebp - 0x82c]
push eax
call fcn.00446ee0
lea eax, [ebp - 0x24]
mov dword [ebp - 4], 3
push eax
push 0
lea eax, [esi + 0x1b8]
push eax
call fcn.0044c7c0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x10]
cmp ecx, 8
jb 0x4c1d39
mov edx, dword [ebp - 0x24]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4c1d2f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4c2278
push ecx
push edx
call fcn.00583877
add esp, 8
call fcn.005201a0
mov ecx, dword [edi + 0x130]
mov esi, eax
push 0
push 1
push 0xf0
push dword [ecx + 8]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp eax, 1
lea eax, [ebp + 0xb]
push eax
push 0
lea eax, [esi + 0x1c0]
sete byte [ebp + 0xb]
push eax
call fcn.0044c910
call fcn.005201a0
mov ecx, dword [edi + 0x134]
mov esi, eax
push 0
push 1
push 0xf0
push dword [ecx + 8]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp eax, 1
lea eax, [ebp + 0xb]
push eax
push 0
lea eax, [esi + 0x1c8]
sete byte [ebp + 0xb]
push eax
call fcn.0044c910
push 0x100
lea eax, [ebp - 0x12c]
push eax
mov eax, dword [edi + 0x138]
push dword [eax + 8]
call ebx
call fcn.005201a0
mov esi, eax
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.00597d06
add esp, 8
lea eax, [ebp + 8]
fstp dword [ebp + 8]
push eax
push 0
lea eax, [esi + 0x1d0]
push eax
call fcn.0044cb80
push 0x100
lea eax, [ebp - 0x42c]
push eax
mov eax, dword [edi + 0x13c]
push dword [eax + 8]
call ebx
call fcn.005201a0
mov esi, eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x42c]
push eax
call fcn.00597d06
add esp, 8
call fcn.00584520
mov dword [ebp + 8], eax
lea eax, [ebp + 8]
push eax
push 0
lea eax, [esi + 0x1d8]
push eax
call fcn.0044ccd0
call fcn.005201a0
mov ecx, dword [edi + 0xa8]
mov esi, eax
push 0
push 1
push 0xf0
push dword [ecx + 8]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp eax, 1
lea eax, [ebp + 0xb]
push eax
push 0
lea eax, [esi + 0x200]
sete byte [ebp + 0xb]
push eax
call fcn.0044c910
push 0x100
lea eax, [ebp - 0x12c]
push eax
mov eax, dword [edi + 0xac]
push dword [eax + 8]
call ebx
call fcn.005201a0
lea ecx, [ebp - 0x12c]
mov dword [ebp - 0x24], 0
mov esi, eax
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x10], 0xf
lea edx, [ecx + 1]
mov byte [ebp - 0x24], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4c1eb2
sub ecx, edx
lea eax, [ebp - 0x12c]
push ecx
push eax
lea ecx, [ebp - 0x24]
call fcn.00449cf0
lea eax, [ebp - 0x24]
mov dword [ebp - 4], 4
push eax
push 0
lea eax, [esi + 0x208]
push eax
call fcn.0044ca30
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x10]
cmp ecx, 0x10
jb 0x4c1f1f
mov edx, dword [ebp - 0x24]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4c1f15
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4c2278
push ecx
push edx
call fcn.00583877
add esp, 8
push 0x100
lea eax, [ebp - 0x12c]
push eax
mov eax, dword [edi + 0xb0]
push dword [eax + 8]
call ebx
call fcn.005201a0
push 0xa
mov esi, eax
lea eax, [ebp - 0x12c]
push 0
push eax
call fcn.00593448
add esp, 0xc
mov dword [ebp + 8], eax
lea eax, [ebp + 8]
push eax
push 0
lea eax, [esi + 0x220]
push eax
call fcn.0044ccd0
push 0x100
lea eax, [ebp - 0x12c]
push eax
mov eax, dword [edi + 0xb4]
push dword [eax + 8]
call ebx
call fcn.005201a0
lea ecx, [ebp - 0x12c]
mov dword [ebp - 0x24], 0
mov esi, eax
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x10], 0xf
lea edx, [ecx + 1]
mov byte [ebp - 0x24], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4c1fa5
sub ecx, edx
lea eax, [ebp - 0x12c]
push ecx
push eax
lea ecx, [ebp - 0x24]
call fcn.00449cf0
lea eax, [ebp - 0x24]
mov dword [ebp - 4], 5
push eax
push 0
lea eax, [esi + 0x210]
push eax
call fcn.0044ca30
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x10]
cmp ecx, 0x10
jb 0x4c2012
mov edx, dword [ebp - 0x24]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4c2008
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4c2278
push ecx
push edx
call fcn.00583877
add esp, 8
push 0x100
lea eax, [ebp - 0x12c]
push eax
mov eax, dword [edi + 0xb8]
push dword [eax + 8]
call ebx
call fcn.005201a0
lea ecx, [ebp - 0x12c]
mov dword [ebp - 0x24], 0
mov esi, eax
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x10], 0xf
lea edx, [ecx + 1]
mov byte [ebp - 0x24], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4c2052
sub ecx, edx
lea eax, [ebp - 0x12c]
push ecx
push eax
lea ecx, [ebp - 0x24]
call fcn.00449cf0
lea eax, [ebp - 0x24]
mov dword [ebp - 4], 6
push eax
push 0
lea eax, [esi + 0x218]
push eax
call fcn.0044ca30
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x10]
cmp ecx, 0x10
jb 0x4c20bf
mov edx, dword [ebp - 0x24]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4c20b5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4c2278
push ecx
push edx
call fcn.00583877
add esp, 8
push 0x100
lea eax, [ebp - 0x12c]
push eax
mov eax, dword [edi + 0xbc]
push dword [eax + 8]
call ebx
call fcn.005201a0
lea ecx, [ebp - 0x12c]
mov dword [ebp - 0x24], 0
mov esi, eax
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x10], 0xf
lea edx, [ecx + 1]
mov byte [ebp - 0x24], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4c2100
sub ecx, edx
lea eax, [ebp - 0x12c]
push ecx
push eax
lea ecx, [ebp - 0x24]
call fcn.00449cf0
lea eax, [ebp - 0x24]
mov dword [ebp - 4], 7
push eax
push 0
lea eax, [esi + 0x228]
push eax
call fcn.0044ca30
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x10]
cmp ecx, 0x10
jb 0x4c216d
mov edx, dword [ebp - 0x24]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4c2163
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4c2278
push ecx
push edx
call fcn.00583877
add esp, 8
push 0x100
lea eax, [ebp - 0x12c]
push eax
mov eax, dword [edi + 0xc0]
push dword [eax + 8]
call ebx
call fcn.005201a0
push 0xa
mov esi, eax
lea eax, [ebp - 0x12c]
push 0
push eax
call fcn.00593448
add esp, 0xc
mov dword [ebp + 8], eax
lea eax, [ebp + 8]
push eax
push 0
lea eax, [esi + 0x238]
push eax
call fcn.0044ccd0
push 0x100
lea eax, [ebp - 0x12c]
push eax
mov eax, dword [edi + 0xc4]
push dword [eax + 8]
call ebx
call fcn.005201a0
push 0xa
mov esi, eax
lea eax, [ebp - 0x12c]
push 0
push eax
call fcn.00593448
add esp, 0xc
mov dword [ebp + 8], eax
lea eax, [ebp + 8]
push eax
push 0
lea eax, [esi + 0x240]
push eax
call fcn.0044ccd0
push 0x100
lea eax, [ebp - 0x12c]
push eax
mov eax, dword [edi + 0xc8]
push dword [eax + 8]
call ebx
call fcn.005201a0
push 0xa
mov esi, eax
lea eax, [ebp - 0x12c]
push 0
push eax
call fcn.00593448
add esp, 0xc
mov dword [ebp + 8], eax
lea eax, [ebp + 8]
push eax
push 0
lea eax, [esi + 0x248]
push eax
call fcn.0044ccd0
call fcn.005201a0
mov ecx, eax
call fcn.0051ae80
call fcn.005201a0
mov ecx, eax
call fcn.00520ac0
push dword [edi + 0x10]
call dword [sym.imp.USER32.dll_DestroyWindow]
pop ebx
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
call fcn.00591c98
call fcn.00591c98
int3