Function at 0x4d06dc
Capabilities:
Check mutex on windows
Query environment variable

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0xaf
push 0
push 0
dec ecx
jne 0x4d06e4
push ecx
push ebx
push esi
push edi
mov ebx, eax
mov esi, dword [0x4eccc0]
xor eax, eax
push ebp
push 0x4d24a7
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov dword [ebp - 4], eax
xor eax, eax
mov dword [0x577a64], eax
mov edx, 0x4d24b8
mov eax, 2
call fcn.00453298
lea edx, [ebp - 0x258]
mov eax, dword [0x4eccb8]
mov eax, dword [eax]
call fcn.0044b018
mov eax, dword [ebp - 0x258]
lea edx, [ebp - 0x254]
call fcn.004088ac
mov edx, dword [ebp - 0x254]
lea eax, [ebp - 0x150]
mov ecx, 0xff
call fcn.00403f10
cmp byte [ebp - 0x150], 3
jbe 0x4d0782
lea eax, [ebp - 0x150]
push eax
xor ecx, ecx
mov cl, byte [ebp - 0x150]
dec ecx
mov edx, 1
lea eax, [ebp - 0x150]
call fcn.00402824
lea eax, [ebp - 0x254]
lea edx, [ebp - 0x150]
call fcn.00403ed8
mov eax, dword [ebp - 0x254]
call fcn.00402808
mov ecx, dword [0x4ecda0]
mov ecx, dword [ecx]
mov edx, dword [0x4eccb0]
mov edx, dword [edx]
lea eax, [ebp - 0x254]
call fcn.00403f80
mov edx, dword [ebp - 0x254]
mov eax, dword [0x4eca0c]
mov eax, dword [eax]
mov ecx, 1
call fcn.0045a958
test eax, eax
je 0x4d0801
push 0x10
mov eax, dword [0x4ecda0]
mov eax, dword [eax]
call fcn.004040f8
mov ecx, eax
mov edx, 0x4d24c4
mov eax, dword [0x4eccb8]
mov eax, dword [eax]
call fcn.0044aca8
mov dword [ebp - 4], 0xffffffff
jmp 0x4d2451
lea ecx, [ebp - 0x254]
mov eax, dword [0x4eca0c]
mov eax, dword [eax]
mov edx, 2
call fcn.0045b468
mov edx, dword [ebp - 0x254]
mov eax, dword [0x4eccb8]
mov eax, dword [eax]
call fcn.0044a6dc
mov eax, ebx
call fcn.004d331c
lea ecx, [ebp - 0x254]
mov eax, dword [0x4eca0c]
mov eax, dword [eax]
mov edx, 2
call fcn.0045b468
mov edx, dword [ebp - 0x254]
mov eax, dword [0x4eca08]
call fcn.00403d0c
mov eax, dword [0x4ece48]
mov byte [eax], 0x2e
mov eax, dword [0x4ecc6c]
mov edx, dword [0x4ec9a8]
mov edx, dword [edx]
call fcn.00403d0c
mov eax, dword [0x4eccb8]
mov eax, dword [eax]
mov byte [eax + 0x41], 0
mov eax, dword [0x4ecb88]
mov word [eax], 0x32
push 0x4d24f0
call sub.user32.dll_RegisterWindowMessageA
mov edi, eax
push 0x4d2508
call sub.user32.dll_RegisterWindowMessageA
mov dword [0x577a60], eax
call fcn.004029f0
cmp eax, 2
jne 0x4d08e3
lea edx, [ebp - 0x258]
mov eax, 1
call fcn.00402a50
mov eax, dword [ebp - 0x258]
lea edx, [ebp - 0x254]
call fcn.00408154
mov eax, dword [ebp - 0x254]
mov edx, 0x4d2524
call fcn.00404044
je 0x4d09c0
push 0x4d2530
push 0xffffffffffffffff
push 0
call sub.kernel32.dll_CreateMutexA
mov dword [0x577a5c], eax
call sub.kernel32.dll_GetLastError_1
cmp eax, 0xb7
jne 0x4d09c0
lea edx, [ebp - 0x20]
mov eax, dword [0x4ecd00]
mov eax, dword [eax]
call fcn.0042e724
lea edx, [ebp - 0x25c]
mov eax, dword [0x4ecd00]
mov eax, dword [eax]
call fcn.0042e724
lea eax, [ebp - 0x25c]
mov edx, 0x4d2544
call fcn.00403f3c
mov edx, dword [ebp - 0x25c]
mov eax, dword [0x4ecd00]
mov eax, dword [eax]
call fcn.0042e754
mov edx, 0x4d2548
lea eax, [ebp - 0x35c]
call fcn.00402c18
mov eax, dword [ebp - 0x20]
call fcn.004040f8
mov edx, eax
lea eax, [ebp - 0x45c]
call fcn.00402e84
lea edx, [ebp - 0x45c]
lea eax, [ebp - 0x35c]
call fcn.00402bc0
lea edx, [ebp - 0x35c]
xor eax, eax
call fcn.00453298
mov eax, dword [ebp - 0x20]
call fcn.004040f8
push eax
push 0x4d255c
call sub.user32.dll_FindWindowA
test eax, eax
je 0x4d09c0
push 0
push 1
mov edx, dword [0x577a60]
push edx
push eax
call sub.user32.dll_PostMessageA
mov dword [ebp - 4], 0x7b
jmp 0x4d2451
mov ecx, 0x4d2568
mov dl, 1
mov eax, dword [0x474b38]
call fcn.00474ba8
mov dword [esi], eax
mov eax, dword [esi]
push esi
push edi
lea edi, [eax + 0x314]
mov esi, 0x4d256c
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
pop edi
pop esi
mov eax, dword [esi]
mov dword [eax + 0x414], 0x30363503
mov eax, dword [esi]
push esi
push edi
lea edi, [eax + 0x514]
mov esi, 0x4d2574
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
pop edi
pop esi
mov eax, dword [esi]
push esi
push edi
lea edi, [eax + 0x614]
mov esi, 0x4d2580
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
pop edi
pop esi
push 0x4d2590
lea ecx, [ebp - 0x254]
mov eax, dword [0x4eca0c]
mov eax, dword [eax]
mov edx, 0xb
call fcn.0045b468
push dword [ebp - 0x254]
push 0x4d25d8
mov eax, dword [0x4eca0c]
mov eax, dword [eax]
mov edx, 0xb
call fcn.0045b180
mov edx, eax
lea eax, [ebp - 0x258]
call fcn.00403e6c
push dword [ebp - 0x258]
mov eax, dword [esi]
add eax, 0x714
mov edx, 4
call fcn.00403ff4
lea eax, [ebp - 0x254]
mov edx, dword [esi]
add edx, 0x81d
call fcn.00403ed8
mov eax, dword [ebp - 0x254]
call fcn.00402808
push 0x4d25e0
push 0
call sub.user32.dll_FindWindowA
test eax, eax
je 0x4d0aba
push 0
push 0
push edi
push eax
call sub.user32.dll_PostMessageA
push 0x5dc
call sub.kernel32.dll_Sleep
mov eax, dword [esi]
lea edx, [eax + 0x81d]
lea eax, [ebp - 0x35c]
call fcn.00402c18
mov edx, 0x4d25f4
lea eax, [ebp - 0x35c]
call fcn.00402bc0
lea edx, [ebp - 0x35c]
lea eax, [ebp - 0x254]
call fcn.00403ed8
mov eax, dword [ebp - 0x254]
call fcn.0040871c
cmp al, 1
je 0x4d0b07
mov eax, dword [0x4eccb0]
cmp dword [eax], 0
je 0x4d0b45
mov eax, dword [esi]
lea edx, [eax + 0x81d]
mov eax, 0x4d25f4
call fcn.0045501c
test al, al
jne 0x4d0b51
push 0x10
mov eax, dword [0x4eca0c]
mov eax, dword [eax]
mov edx, 1
call fcn.0045b37c
mov ecx, eax
mov edx, 0x4d2600
mov eax, dword [0x4eccb8]
mov eax, dword [eax]
call fcn.0044aca8
jmp 0x4d0b51
mov dword [ebp - 4], 0xffffffff
jmp 0x4d2451
lea ecx, [ebp - 0x254]
mov eax, dword [0x4eca90]
mov eax, dword [eax]
mov edx, 0x4d2648
call fcn.00454818
mov edx, dword [ebp - 0x254]
lea eax, [ebp - 0x35c]
mov ecx, 0xff
call fcn.00403f10
lea edx, [ebp - 0x35c]
mov eax, dword [0x4eca0c]
mov eax, dword [eax]
call fcn.0045a6c8
lea edx, [ebp - 0x35c]
mov eax, dword [0x47066c]
call fcn.00473900
lea edx, [ebp - 0x35c]
lea eax, [ebp - 0x48]
call fcn.00403ed8
call fcn.004029f0
cmp eax, 2
jne 0x4d0bf8
lea edx, [ebp - 0x258]
mov eax, 1
call fcn.00402a50
mov eax, dword [ebp - 0x258]
lea edx, [ebp - 0x254]
call fcn.00408154
mov eax, dword [ebp - 0x254]
mov edx, 0x4d2524
call fcn.00404044
jne 0x4d0bf8
lea edx, [ebp - 0x48]
mov eax, 2
call fcn.00402a50
cmp dword [ebp - 0x48], 0
jne 0x4d0c46
push 0x30
mov eax, dword [0x4eca0c]
mov eax, dword [eax]
mov edx, 1
call fcn.0045b37c
push eax
mov eax, dword [0x4eca0c]
mov eax, dword [eax]
mov edx, 0x178
call fcn.0045b180
mov edx, eax
mov eax, dword [0x4eccb8]
mov eax, dword [eax]
pop ecx
call fcn.0044aca8
mov edx, 0x4d2568
mov eax, 0x4d2658
call fcn.00454e0c
jmp 0x4d0dbf
mov eax, dword [0x4eca90]
mov eax, dword [eax]
mov edx, 0x4d266c
call fcn.0045491c
cmp al, 1
jne 0x4d0d7b
mov eax, dword [esi]
lea edx, [eax + 0x71d]
lea eax, [ebp - 0x35c]
call fcn.00402c18
lea edx, [ebp - 0x45c]
mov eax, dword [0x47066c]
call fcn.00473900
lea edx, [ebp - 0x45c]
lea eax, [ebp - 0x35c]
call fcn.00402bc0
mov edx, 0x4d2680
lea eax, [ebp - 0x35c]
call fcn.00402bc0
lea edx, [ebp - 0x35c]
lea eax, [ebp - 0x254]
call fcn.00403ed8
mov eax, dword [ebp - 0x254]
call fcn.0040871c
test al, al
jne 0x4d0d7b
push 0x30
lea ecx, [ebp - 0x258]
mov eax, dword [0x4eca0c]
mov eax, dword [eax]
mov edx, 0x179
call fcn.0045b468
push dword [ebp - 0x258]
push 0x4d2690
lea ecx, [ebp - 0x460]
mov eax, dword [0x4eca0c]
mov eax, dword [eax]
mov edx, 0x17a
call fcn.0045b468
push dword [ebp - 0x460]
push 0x4d2690
lea ecx, [ebp - 0x464]
mov eax, dword [0x4eca0c]
mov eax, dword [eax]
mov edx, 0x17b
call fcn.0045b468
push dword [ebp - 0x464]
lea eax, [ebp - 0x254]
mov edx, 5
call fcn.00403ff4
mov eax, dword [ebp - 0x254]
call fcn.004040f8
push eax
mov eax, dword [0x4eca0c]
mov eax, dword [eax]
mov edx, 0x17c
call fcn.0045b180
mov ecx, eax
mov eax, dword [0x4eccb8]
mov eax, dword [eax]
pop edx
call fcn.0044aca8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x4ec970]
xor edx, edx
mov dword [eax], edx
jmp 0x4d2451
lea eax, [ebp - 0x254]
mov ecx, 0x4d269c
mov edx, dword [ebp - 0x48]
call fcn.00403f80
mov edx, dword [ebp - 0x254]
lea eax, [ebp - 0x35c]
mov ecx, 0xff
call fcn.00403f10
lea eax, [ebp - 0x35c]
mov edx, dword [esi]
add edx, 0x71d
call fcn.00454e0c
test al, al
je 0x4d2451
mov eax, dword [esi]
lea edx, [eax + 0x71d]
lea eax, [ebp - 0x35c]
call fcn.00402c18
mov edx, 0x4d2568
lea eax, [ebp - 0x35c]
call fcn.00402bc0
lea edx, [ebp - 0x35c]
lea eax, [ebp - 0x258]
call fcn.00403ed8
push dword [ebp - 0x258]
push dword [ebp - 0x48]
push 0x4d26ac
lea eax, [ebp - 0x254]
mov edx, 3
call fcn.00403ff4
mov eax, dword [ebp - 0x254]
call fcn.0040871c
cmp al, 1
jne 0x4d0f34
mov eax, dword [esi]
lea edx, [eax + 0x71d]
lea eax, [ebp - 0x35c]
call fcn.00402c18
mov edx, 0x4d2568
lea eax, [ebp - 0x35c]
call fcn.00402bc0
lea edx, [ebp - 0x35c]
lea eax, [ebp - 0x258]
call fcn.00403ed8
push dword [ebp - 0x258]
push dword [ebp - 0x48]
push 0x4d26ac
lea eax, [ebp - 0x254]
mov edx, 3
call fcn.00403ff4
mov eax, dword [ebp - 0x254]
call fcn.00408814
mov eax, dword [0x4eca90]
mov eax, dword [eax]
mov edx, 0x4d26bc
call fcn.0045491c
test al, al
jne 0x4d0f34
lea eax, [ebp - 0x254]
mov edx, dword [esi]
add edx, 0x81d
call fcn.00403ed8
mov eax, dword [ebp - 0x254]
push eax
mov eax, dword [esi]
lea edx, [eax + 0x81d]
lea eax, [ebp - 0x35c]
call fcn.00402c18
mov edx, 0x4d26cc
lea eax, [ebp - 0x35c]
call fcn.00402bc0
lea edx, [ebp - 0x35c]
lea eax, [ebp - 0x258]
call fcn.00403ed8
mov eax, dword [ebp - 0x258]
pop edx
call fcn.00457490
test al, al
je 0x4d0f0e
mov eax, dword [0x4eccb8]
mov eax, dword [eax]
call fcn.0044ac04
call fcn.00403b04
jmp 0x4d2451
push 0x30
mov eax, dword [0x4eca0c]
mov eax, dword [eax]
mov edx, 1
call fcn.0045b37c
mov ecx, eax
mov edx, 0x4d26e0
mov eax, dword [0x4eccb8]
mov eax, dword [eax]
call fcn.0044aca8
mov eax, dword [0x4ec970]
mov eax, dword [eax]
mov edx, 0x4d2704
call fcn.004549f0
fcomp dword [0x4d2714]
fnstsw ax
sahf
jne 0x4d0f6d
call fcn.00409788
add esp, 0xfffffffc
fstp dword [esp]
wait
mov eax, dword [0x4ec970]
mov eax, dword [eax]
mov edx, 0x4d2704
call fcn.00454c14
call fcn.00409788
add esp, 0xfffffffc
fstp dword [esp]
wait
mov eax, dword [0x4ec970]
mov eax, dword [eax]
mov edx, 0x4d2720
call fcn.00454c14
mov eax, dword [0x4ec970]
mov eax, dword [eax]
mov ecx, 0x4d2738
mov edx, 0x4d274c
call fcn.00454aa4
lea eax, [ebp - 0x254]
mov edx, dword [esi]
add edx, 0x81d
call fcn.00403ed8
mov ecx, dword [ebp - 0x254]
mov eax, dword [0x4ec970]
mov eax, dword [eax]
mov edx, 0x4d275c
call fcn.00454aa4
mov eax, dword [0x4ec970]
mov eax, dword [eax]
mov edx, 0x4d2770
call fcn.004548c4
add eax, 1
adc edx, 0
push edx
push eax
mov eax, dword [0x4ec970]
mov eax, dword [eax]
mov edx, 0x4d2770
call fcn.00454b64
mov eax, dword [esi]
call fcn.00475b9c
mov eax, dword [0x4ecb3c]
mov eax, dword [eax]
xor edx, edx
call fcn.00474aac
mov eax, dword [0x4eccb0]
cmp dword [eax], 0
jne 0x4d10f0
lea ecx, [ebp - 0x254]
mov eax, dword [0x4eca90]
mov eax, dword [eax]
mov edx, 0x4d2784
call fcn.00454818
cmp dword [ebp - 0x254], 0
je 0x4d10f0
lea eax, [ebp - 0x460]
mov edx, dword [esi]
add edx, 0x91d
call fcn.00403ed8
push dword [ebp - 0x460]
lea ecx, [ebp - 0x464]
mov eax, dword [0x4eca90]
mov eax, dword [eax]
mov edx, 0x4d2784
call fcn.00454818
push dword [ebp - 0x464]
push 0x4d279c
lea eax, [ebp - 0x258]
mov edx, 3
call fcn.00403ff4
mov eax, dword [ebp - 0x258]
call fcn.0040871c
test al, al
jne 0x4d10f0
push 0x4d27ac
lea ecx, [ebp - 0x258]
mov eax, dword [0x4eca90]
mov eax, dword [eax]
mov edx, 0x4d2784
call fcn.00454818
push dword [ebp - 0x258]
push 0x4d27c8
lea eax, [ebp - 0x254]
mov edx, 3
call fcn.00403ff4
mov edx, dword [ebp - 0x254]
lea eax, [ebp - 0x35c]
mov ecx, 0xff
call fcn.00403f10
lea edx, [ebp - 0x35c]
or eax, 0xffffffff
call fcn.0045e3e4
mov eax, dword [0x4eccb0]
cmp dword [eax], 0
jne 0x4d11bf
lea ecx, [ebp - 0x254]
mov eax, dword [0x4eca90]
mov eax, dword [eax]
mov edx, 0x4d27d8
call fcn.00454818
cmp dword [ebp - 0x254], 0
je 0x4d11bf
lea eax, [ebp - 0x258]
mov edx, dword [esi]
add edx, 0x91d
call fcn.00403ed8
lea eax, [ebp - 0x258]
push eax
lea ecx, [ebp - 0x460]
mov eax, dword [0x4eca90]
mov eax, dword [eax]
mov edx, 0x4d27d8
call fcn.00454818
mov edx, dword [ebp - 0x460]
pop eax
call fcn.00403f3c
mov eax, dword [ebp - 0x258]
call fcn.0040871c
test al, al
jne 0x4d11bf
lea ecx, [ebp - 0x258]
mov eax, dword [0x4eca90]
mov eax, dword [eax]
mov edx, 0x4d27d8
call fcn.00454818
mov ecx, dword [ebp - 0x258]
lea eax, [ebp - 0x254]
mov edx, 0x4d27f0
call fcn.00403f80
mov edx, dword [ebp - 0x254]
lea eax, [ebp - 0x35c]
mov ecx, 0xff
call fcn.00403f10
lea edx, [ebp - 0x35c]
or eax, 0xffffffff
call fcn.0045e3e4
mov eax, dword [0x4eccb8]
mov eax, dword [eax]
mov dword [eax + 0xd4], ebx
mov dword [eax + 0xd0], 0x4d3210
mov eax, dword [0x4eca90]
mov eax, dword [eax]
mov edx, 0x4d280c
call fcn.0045491c
cmp al, 1
jne 0x4d1218
mov eax, dword [0x4ecd00]
mov eax, dword [eax]
mov eax, dword [eax + 0x2d4]
xor edx, edx
call fcn.0042e63c
mov eax, dword [0x4ecd00]
mov eax, dword [eax]
mov eax, dword [eax + 0x300]
xor edx, edx
call fcn.0042e63c
jmp 0x4d12ea
lea ecx, [ebp - 0x254]
mov eax, dword [0x4eca90]
mov eax, dword [eax]
mov edx, 0x4d2820
call fcn.00454818
cmp dword [ebp - 0x254], 0
je 0x4d126d
lea ecx, [ebp - 0x254]
mov eax, dword [0x4eca90]
mov eax, dword [eax]
mov edx, 0x4d2820
call fcn.00454818
mov edx, dword [ebp - 0x254]
mov eax, dword [0x4ecd00]
mov eax, dword [eax]
mov eax, dword [eax + 0x2d4]
mov eax, dword [eax + 0x118]
call fcn.0041b79c
lea ecx, [ebp - 0x254]
mov eax, dword [0x4eca90]
mov eax, dword [eax]
mov edx, 0x4d2834
call fcn.00454818
cmp dword [ebp - 0x254], 0
je 0x4d12c2
lea ecx, [ebp - 0x254]
mov eax, dword [0x4eca90]
mov eax, dword [eax]
mov edx, 0x4d2834
call fcn.00454818
mov edx, dword [ebp - 0x254]
mov eax, dword [0x4ecd00]
mov eax, dword [eax]
mov eax, dword [eax + 0x300]
mov eax, dword [eax + 0x118]
call fcn.0041b79c
mov eax, dword [0x4ecd00]
mov eax, dword [eax]
mov eax, dword [eax + 0x2d4]
mov dl, 1
call fcn.0042e63c
mov eax, dword [0x4ecd00]
mov eax, dword [eax]
mov eax, dword [eax + 0x300]
mov dl, 1
call fcn.0042e63c
cmp word [ebx + 6], 0
je 0x4d12f9
mov edx, ebx
mov eax, dword [ebx + 8]
call dword [ebx + 4]
mov eax, dword [0x4ecd00]
mov eax, dword [eax]
mov dword [eax + 0x544], ebx
mov dword [eax + 0x540], 0x4d3414
mov eax, dword [0x4ecd00]
mov eax, dword [eax]
mov eax, dword [eax + 0x318]
mov dword [eax + 0x108], ebx
mov dword [eax + 0x104], 0x4d2d60
mov eax, dword [0x4ecd00]
mov eax, dword [eax]
mov eax, dword [eax + 0x304]
mov dword [eax + 0x108], ebx
mov dword [eax + 0x104], 0x4d3414
mov eax, dword [0x4ecd00]
mov eax, dword [eax]
mov dl, 1
call fcn.004a472c
lea ecx, [ebp - 0x254]
mov eax, dword [0x4eca0c]
mov eax, dword [eax]
mov edx, 0x189
call fcn.0045b468
mov edx, dword [ebp - 0x254]
lea eax, [ebp - 0x35c]
mov ecx, 0xff
call fcn.00403f10
lea edx, [ebp - 0x35c]
mov eax, dword [0x4ecd00]
mov eax, dword [eax]
call fcn.004a4760
mov eax, dword [0x4ecd00]
mov eax, dword [eax]
call fcn.00447a84
mov eax, dword [0x4ecd00]
mov eax, dword [eax]
mov dl, 2
call fcn.0044592c
mov eax, dword [0x4ecd00]
mov eax, dword [eax]
call fcn.0042ec10
mov eax, 0x4d2848
call fcn.0040871c
test al, al
je 0x4d1430
mov ecx, dword [0x4ecb8c]
mov eax, dword [0x4eccb8]
mov eax, dword [eax]
mov edx, dword [0x4cded8]
call fcn.0044aad0
mov eax, dword [0x4ecb8c]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov eax, dword [eax + 0x118]
mov edx, 0x4d2848
call fcn.0041b79c
mov eax, dword [0x4ecb8c]
mov eax, dword [eax]
call fcn.00447a84
mov eax, dword [0x4ecb8c]
mov eax, dword [eax]
call fcn.0042ec10
push 0xbb8
call sub.kernel32.dll_Sleep
mov eax, dword [0x4ecb8c]
mov eax, dword [eax]
mov dl, 1
mov ecx, dword [eax]
call dword [ecx - 4]
call fcn.004557d0
test al, al
je 0x4d1442
xor edx, edx
xor eax, eax
call fcn.00455440
mov eax, dword [0x4eca90]
mov eax, dword [eax]
mov edx, 0x4d2860
call fcn.0045491c
cmp al, 1
je 0x4d146c
mov eax, dword [0x4ecd00]
mov eax, dword [eax]
call fcn.004a4f6c
cmp eax, 8
jg 0x4d1528
mov eax, dword [0x4ec970]
mov eax, dword [eax]
mov edx, 0x4d2874
call fcn.0045491c
test al, al
jne 0x4d14dd
mov eax, dword [0x4eca90]
mov eax, dword [eax]
mov edx, 0x4d2860
call fcn.0045491c
test al, al
jne 0x4d14dd
push 0x40
mov eax, dword [0x4eca0c]
mov eax, dword [eax]
mov edx, 1
call fcn.0045b37c
push eax
mov eax, dword [0x4eca0c]
mov eax, dword [eax]
mov edx, 0x56d
call fcn.0045b180
mov edx, eax
mov eax, dword [0x4eccb8]
mov eax, dword [eax]
pop ecx
call fcn.0044aca8
mov eax, dword [0x4ec970]
mov eax, dword [eax]
mov cl, 1
mov edx, 0x4d2874
call fcn.00454bbc
mov eax, dword [0x4ecdb4]
mov byte [eax], 1
mov al, 1
call fcn.0049cd00
mov edx, dword [0x4ecca4]
mov edx, dword [edx]
mov eax, dword [0x4ecd00]
mov eax, dword [eax]
call fcn.0042e8b0
mov eax, dword [0x4ecd00]
mov eax, dword [eax]
mov eax, dword [eax + 0x2d4]
xor edx, edx
call fcn.0042e63c
mov eax, dword [0x4ecd00]
mov eax, dword [eax]
mov eax, dword [eax + 0x2d0]
xor edx, edx
call fcn.0042e63c
push 0x10
call sub.user32.dll_GetSystemMetrics
cmp eax, 0x280
jg 0x4d1624
push 0x44
lea ecx, [ebp - 0x254]
mov eax, dword [0x4eca0c]
mov eax, dword [eax]
mov edx, 1
call fcn.0045b468
mov eax, dword [ebp - 0x254]
call fcn.004040f8
push eax
push 0xaa
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
lea eax, [ebp - 0x258]
push eax
mov eax, dword [0x4eca0c]
mov eax, dword [eax]
mov ecx, 0xa9
mov edx, 0xa8
call fcn.0045b1d4
mov eax, dword [ebp - 0x258]
call fcn.004040f8
mov edx, eax
mov eax, dword [0x4eccb8]
mov eax, dword [eax]
pop ecx
call fcn.0044aca8
cmp eax, 6
jne 0x4d1624
push 0x40
lea ecx, [ebp - 0x254]
mov eax, dword [0x4eca0c]
mov eax, dword [eax]
mov edx, 1
call fcn.0045b468
mov eax, dword [ebp - 0x254]
call fcn.004040f8
push eax
push 0xad
push 0xae
push 0xaf
push 0xb0
push 0xb1
push 0xb2
lea eax, [ebp - 0x258]
push eax
mov eax, dword [0x4eca0c]
mov eax, dword [eax]
mov ecx, 0xac
mov edx, 0xab
call fcn.0045b1d4
mov eax, dword [ebp - 0x258]
call fcn.004040f8
mov edx, eax
mov eax, dword [0x4eccb8]
mov eax, dword [eax]
pop ecx
call fcn.0044aca8
push 0x4d2880
mov eax, dword [0x4ecc28]
mov eax, dword [eax]
push eax
call sub.user32.dll_LoadCursorA
mov ecx, eax
mov eax, dword [0x4ece6c]
mov eax, dword [eax]
mov edx, 0x5a
call fcn.00448fc8
mov byte [0x577958], 0
mov eax, dword [0x4ecd00]
mov eax, dword [eax]
mov dword [eax + 0x270], ebx
mov dword [eax + 0x26c], fcn.004d2d84
mov edx, 0x4d2888
mov eax, 1
call fcn.004559f8
mov edx, 0x4d2894
mov eax, 2
call fcn.004559f8
mov edx, 0x4d28a0
mov eax, 3
call fcn.004559f8
mov edx, 0x4d28ac
mov eax, 4
call fcn.004559f8
mov byte [0x57795c], 0
call fcn.004029f0
dec eax
jne 0x4d16f5
lea edx, [ebp - 0x258]
mov eax, 1
call fcn.00402a50
mov eax, dword [ebp - 0x258]
lea edx, [ebp - 0x254]
call fcn.00408154
mov eax, dword [ebp - 0x254]
mov edx, 0x4d28c0
call fcn.00404044
jne 0x4d16f5
push esi
mov esi, 0x4d28cc
mov edi, 0x57795c
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop esi
call fcn.004029f0
dec eax
jne 0x4d1743
lea edx, [ebp - 0x258]
mov eax, 1
call fcn.00402a50
mov eax, dword [ebp - 0x258]
lea edx, [ebp - 0x254]
call fcn.00408154
mov eax, dword [ebp - 0x254]
mov edx, 0x4d28e0
call fcn.00404044
jne 0x4d1743
push esi
mov esi, 0x4d28ec
mov edi, 0x57795c
mov ecx, 5
rep movsd dword es:[edi], dword [esi]
pop esi
call fcn.004029f0
dec eax
jne 0x4d1798
lea edx, [ebp - 0x258]
mov eax, 1
call fcn.00402a50
mov eax, dword [ebp - 0x258]
lea edx, [ebp - 0x254]
call fcn.00408154
mov eax, dword [ebp - 0x254]
mov edx, 0x4d2908
call fcn.00404044
jne 0x4d1798
mov eax, dword [esi]
mov byte [eax + 0x71c], 1
mov eax, dword [0x4ecd00]
mov eax, dword [eax]
mov edx, 0x4d2920
call fcn.0042e754
mov eax, dword [0x4ecbdc]
cmp dword [eax], 2
jne 0x4d17d9
mov eax, dword [0x4ec940]
mov eax, dword [eax]
mov edx, 0x4d2938
call fcn.00404044
jne 0x4d17c8
mov eax, dword [0x4ecd08]
mov eax, dword [eax]
mov dword [eax + 8], 1
jmp 0x4d1c92
mov eax, dword [0x4ecd08]
mov eax, dword [eax]
xor edx, edx
mov dword [eax + 8], edx
jmp 0x4d1c92
mov eax, dword [esi]
lea edx, [eax + 0xb1d]
mov eax, dword [0x4ecd08]
mov eax, dword [eax]
call fcn.004a149c
mov edi, eax
mov eax, dword [0x4ecd08]
mov eax, dword [eax]
cmp dword [eax + 0x114], 0
jle 0x4d1927
mov eax, dword [0x4ecd08]
mov eax, dword [eax]
mov edx, dword [eax + 0x114]
mov eax, dword [esi]
call fcn.00475d0c
test eax, eax
jne 0x4d1ae7
push 0x30
lea ecx, [ebp - 0x258]
mov eax, dword [0x4eca0c]
mov eax, dword [eax]
mov edx, 0x17e
call fcn.0045b468
push dword [ebp - 0x258]
push 0x4d2690
lea ecx, [ebp - 0x460]
mov eax, dword [0x4eca0c]
mov eax, dword [eax]
mov edx, 0x17f
call fcn.0045b468
push dword [ebp - 0x460]
lea edx, [ebp - 0x464]
mov eax, dword [0x4ecd08]
mov eax, dword [eax]
mov eax, dword [eax + 0x114]
call fcn.004084b4
push dword [ebp - 0x464]
lea ecx, [ebp - 0x468]
mov eax, dword [0x4eca0c]
mov eax, dword [eax]
mov edx, 0x180
call fcn.0045b468
push dword [ebp - 0x468]
push 0x4d2690
lea ecx, [ebp - 0x46c]
mov eax, dword [0x4eca0c]
mov eax, dword [eax]
mov edx, 0x181
call fcn.0045b468
push dword [ebp - 0x46c]
push 0x4d2690
lea ecx, [ebp - 0x470]
mov eax, dword [0x4eca0c]
mov eax, dword [eax]
mov edx, 0x182
call fcn.0045b468
push dword [ebp - 0x470]
lea eax, [ebp - 0x254]
mov edx, 9
call fcn.00403ff4
mov eax, dword [ebp - 0x254]
call fcn.004040f8
push eax
mov eax, dword [0x4eca0c]
mov eax, dword [eax]
mov edx, 1
call fcn.0045b37c
mov ecx, eax
mov eax, dword [0x4eccb8]
mov eax, dword [eax]
pop edx
call fcn.0044aca8
mov dword [ebp - 4], 0xffffffff
jmp 0x4d2451
cmp edi, 1
jne 0x4d19cd
mov eax, dword [esi]
mov edx, 1
call fcn.00475d0c
test eax, eax
jne 0x4d1ae7
push 0x30
lea ecx, [ebp - 0x258]
mov eax, dword [0x4eca0c]
mov eax, dword [eax]
mov edx, 0x183
call fcn.0045b468
push dword [ebp - 0x258]
push 0x4d2690
lea ecx, [ebp - 0x460]
mov eax, dword [0x4eca0c]
mov eax, dword [eax]
mov edx, 0x184
call fcn.0045b468
push dword [ebp - 0x460]
lea eax, [ebp - 0x254]
mov edx, 3
call fcn.00403ff4
mov eax, dword [ebp - 0x254]
call fcn.004040f8
push eax
mov eax, dword [0x4eca0c]
mov eax, dword [eax]
mov edx, 1
call fcn.0045b37c
mov ecx, eax
mov eax, dword [0x4eccb8]
mov eax, dword [eax]
pop edx
call fcn.0044aca8
mov dword [ebp - 4], 0xffffffff
jmp 0x4d2451
test edi, edi
je 0x4d1ae7
cmp edi, 0x1869f
jge 0x4d1ae7
mov eax, dword [esi]
add eax, 0x71d
mov edx, edi
call fcn.004a0834
test al, al
jne 0x4d1ae7
push 0x30
lea ecx, [ebp - 0x258]
mov eax, dword [0x4eca0c]
mov eax, dword [eax]
mov edx, 0x185
call fcn.0045b468
push dword [ebp - 0x258]
push 0x4d2690
lea ecx, [ebp - 0x460]
mov eax, dword [0x4eca0c]
mov eax, dword [eax]
mov edx, 0x3f4
call fcn.0045b468
push dword [ebp - 0x460]
push 0x4d2690
lea ecx, [ebp - 0x464]
mov eax, dword [0x4eca0c]
mov eax, dword [eax]
mov edx, 0x3f5
call fcn.0045b468
push dword [ebp - 0x464]
lea edx, [ebp - 0x468]
mov eax, edi
call fcn.004084b4
push dword [ebp - 0x468]
lea ecx, [ebp - 0x46c]
mov eax, dword [0x4eca0c]
mov eax, dword [eax]
mov edx, 0x3f6
call fcn.0045b468
push dword [ebp - 0x46c]
lea eax, [ebp - 0x254]
mov edx, 7
call fcn.00403ff4
mov eax, dword [ebp - 0x254]
call fcn.004040f8
push eax
mov eax, dword [0x4eca0c]
mov eax, dword [eax]
mov edx, 0x3f7
call fcn.0045b37c
mov ecx, eax
mov eax, dword [0x4eccb8]
mov eax, dword [eax]
pop edx
call fcn.0044aca8
mov eax, dword [0x4ec970]
mov eax, dword [eax]
mov edx, 0x4d2948
call fcn.0045491c
test al, al
jne 0x4d1ae7
mov dword [ebp - 4], 0xffffffff
jmp 0x4d2451
mov eax, dword [0x4ec970]
mov eax, dword [eax]
mov cl, 1
mov edx, 0x4d2948
call fcn.00454bbc
mov eax, dword [0x4ec970]
mov eax, dword [eax]
mov edx, 0x4d2704
call fcn.004549f0
call fcn.00402b54
fstp xword [ebp - 0x47c]
wait
mov eax, dword [0x4ec970]
mov eax, dword [eax]
mov edx, 0x4d2720
call fcn.004549f0
call fcn.00402b54
fld xword [ebp - 0x47c]
fcompp
fnstsw ax
sahf
je 0x4d1bd9
call fcn.00402ae8
mov eax, dword [0x4ec970]
mov eax, dword [eax]
mov edx, 0x4d2770
call fcn.004548c4
push edx
push eax
mov eax, 0xf
call fcn.00402d78
add eax, 5
cdq
cmp edx, dword [esp + 4]
jne 0x4d1b73
cmp eax, dword [esp]
pop edx
pop eax
jae 0x4d1bd9
jmp 0x4d1b77
pop edx
pop eax
jge 0x4d1bd9
mov eax, dword [0x4ec970]
mov eax, dword [eax]
mov edx, 0x4d2964
call fcn.0045491c
test al, al
je 0x4d1bd9
mov eax, dword [0x4ec970]
mov eax, dword [eax]
xor ecx, ecx
mov edx, 0x4d2964
call fcn.00454bbc
mov eax, dword [0x4ec970]
mov eax, dword [eax]
mov cl, 1
mov edx, 0x4d297c
call fcn.00454bbc
push 0x4d298c
push 1
mov eax, dword [esi]
lea edx, [eax + 0xb1d]
mov eax, dword [0x4ecd08]
mov eax, dword [eax]
mov ecx, 0x4d2994
call fcn.004a1dc8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x4ec970]
mov eax, dword [eax]
mov edx, 0x4d29a8
call fcn.0045491c
test al, al
je 0x4d1c66
mov eax, dword [0x4ec970]
mov eax, dword [eax]
xor ecx, ecx
mov edx, 0x4d29a8
call fcn.00454bbc
mov eax, dword [0x4ecd08]
mov eax, dword [eax]
mov eax, dword [eax + 0x10c]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x4d1c66
mov eax, dword [0x4ecd08]
mov eax, dword [eax]
mov eax, dword [eax + 0x10c]
mov edx, dword [eax]
call dword [edx + 0x14]
mov edx, eax
dec edx
lea ecx, [ebp - 0x254]
mov eax, dword [0x4ecd08]
mov eax, dword [eax]
mov eax, dword [eax + 0x10c]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x254]
call fcn.00457ac4
test eax, eax
jne 0x4d1c66
mov eax, dword [0x4ec970]
mov eax, dword [eax]
mov cl, 1
mov edx, 0x4d2964
call fcn.00454bbc
mov eax, dword [0x4ece74]
fld qword [eax]
fcomp dword [0x4d29b0]
fnstsw ax
sahf
jbe 0x4d1c92
mov eax, dword [0x4ecd08]
mov eax, dword [eax]
mov byte [eax + 0x110], 0
mov eax, dword [0x4ecd08]
mov eax, dword [eax]
xor edx, edx
mov dword [eax + 8], edx
mov eax, dword [0x4ecbdc]
cmp dword [eax], 2
je 0x4d1fb6
lea ecx, [ebp - 0x254]
mov eax, dword [0x4ec970]
mov eax, dword [eax]
mov edx, 0x4d29bc
call fcn.00454818
cmp dword [ebp - 0x254], 0
setne byte [ebp - 0x21]
lea ecx, [ebp - 0x254]
mov eax, dword [0x4eca90]
mov eax, dword [eax]
mov edx, 0x4d29d4
call fcn.00454818
cmp dword [ebp - 0x254], 0
setne byte [ebp - 0x22]
mov eax, dword [0x4eca90]
mov eax, dword [eax]
mov edx, 0x4d29e8
call fcn.0045491c
cmp al, 1
jne 0x4d1cfd
mov byte [ebp - 0x22], 1
cmp byte [ebp - 0x21], 0
je 0x4d1dcf
lea ecx, [ebp - 0x28]
mov eax, dword [0x4ec970]
mov eax, dword [eax]
mov edx, 0x4d29bc
call fcn.00454818
lea eax, [ebp - 0x254]
mov ecx, dword [ebp - 0x28]
mov edx, 0x4d2a04
call fcn.00403f80
mov edx, dword [ebp - 0x254]
lea eax, [ebp - 0x35c]
mov ecx, 0xff
call fcn.00403f10
lea edx, [ebp - 0x35c]
xor eax, eax
call fcn.00453298
push 2
push 0xffffffffffffffff
lea eax, [ebp - 0x35c]
mov edx, dword [ebp - 0x28]
mov ecx, 0xff
call fcn.00403f10
lea edx, [ebp - 0x35c]
xor ecx, ecx
mov eax, dword [0x47066c]
call fcn.00471e0c
mov edx, dword [0x4ecb3c]
mov dword [edx], eax
mov eax, dword [0x4ecb3c]
cmp dword [eax], 0
jne 0x4d1db7
lea eax, [ebp - 0x35c]
mov edx, dword [ebp - 0x28]
mov ecx, 0xff
call fcn.00403f10
lea edx, [ebp - 0x35c]
mov eax, dword [0x47066c]
call fcn.00472f08
mov edx, dword [0x4ecb3c]
mov dword [edx], eax
mov eax, dword [0x4ec970]
mov eax, dword [eax]
xor ecx, ecx
mov edx, 0x4d29bc
call fcn.00454aa4
jmp 0x4d1f77
cmp byte [ebp - 0x22], 0
jne 0x4d1e79
mov dl, 1
mov eax, dword [0x4cf1fc]
call fcn.004cf29c
mov edi, eax
mov byte [edi + 0x134], 0
mov edx, 0x4d2a20
lea eax, [ebp - 0x35c]
call fcn.00402c18
lea edx, [ebp - 0x45c]
mov eax, dword [0x47066c]
call fcn.0047387c
lea edx, [ebp - 0x45c]
lea eax, [ebp - 0x35c]
call fcn.00402bc0
lea edx, [ebp - 0x35c]
lea eax, [ebp - 0x258]
call fcn.00403ed8
mov edx, dword [ebp - 0x258]
lea ecx, [ebp - 0x254]
mov eax, dword [0x4ec970]
mov eax, dword [eax]
call fcn.00454818
mov edx, dword [ebp - 0x254]
lea eax, [edi + 0x138]
call fcn.00403d0c
mov eax, edi
mov edx, dword [eax]
call dword [edx + 0x18]
mov dword [ebp - 8], eax
mov eax, edi
call fcn.00403080
cmp dword [ebp - 8], 1
jne 0x4d2451
jmp 0x4d1f77
lea ecx, [ebp - 0x28]
mov eax, dword [0x4eca90]
mov eax, dword [eax]
mov edx, 0x4d29d4
call fcn.00454818
mov eax, 0x64
call fcn.004026fc
mov edi, eax
mov eax, 0x64
call fcn.004026fc
mov dword [ebp - 0x30], eax
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x30]
call fcn.00408ac4
push 0x63
push edi
mov eax, dword [ebp - 0x30]
push eax
call sub.kernel32.dll_ExpandEnvironmentStringsA
lea eax, [ebp - 0x28]
mov edx, edi
call fcn.00403e6c
mov eax, edi
call fcn.00402714
mov eax, dword [ebp - 0x30]
call fcn.00402714
lea edx, [ebp - 0x254]
mov eax, dword [ebp - 0x28]
call fcn.00408154
mov eax, dword [ebp - 0x254]
mov edx, 0x4d2a34
call fcn.00404044
je 0x4d1f0b
mov eax, dword [0x4eca90]
mov eax, dword [eax]
mov edx, 0x4d29e8
call fcn.0045491c
cmp al, 1
jne 0x4d1f4c
lea edx, [ebp - 0x35c]
mov eax, dword [0x47066c]
call fcn.0047387c
cmp byte [ebp - 0x35c], 0
jne 0x4d1f2e
lea eax, [ebp - 0x28]
call fcn.00403cb8
jmp 0x4d1f4c
lea edx, [ebp - 0x35c]
mov eax, dword [0x47066c]
call fcn.0047387c
lea edx, [ebp - 0x35c]
lea eax, [ebp - 0x28]
call fcn.00403ed8
lea eax, [ebp - 0x35c]
mov edx, dword [ebp - 0x28]
mov ecx, 0xff
call fcn.00403f10
lea edx, [ebp - 0x35c]
mov eax, dword [0x47066c]
call fcn.00472f08
mov edx, dword [0x4ecb3c]
mov dword [edx], eax
lea ecx, [ebp - 0x254]
mov eax, dword [0x4eca0c]
mov eax, dword [eax]
mov edx, 2
call fcn.0045b468
mov edx, dword [ebp - 0x254]
lea eax, [ebp - 0x35c]
mov ecx, 0xff
call fcn.00403f10
lea edx, [ebp - 0x35c]
mov eax, dword [0x4ecd00]
mov eax, dword [eax]
call fcn.004a4760
mov eax, dword [0x4ecb3c]
cmp dword [eax], 0
jne 0x4d2000
push 0
mov eax, dword [0x4eca0c]
mov eax, dword [eax]
mov edx, 1
call fcn.0045b37c
push eax
mov eax, dword [0x4eca0c]
mov eax, dword [eax]
mov edx, 0x18a
call fcn.0045b180
mov edx, eax
mov eax, dword [0x4eccb8]
mov eax, dword [eax]
pop ecx
call fcn.0044aca8
mov dword [ebp - 4], 0xffffffff
jmp 0x4d2451
mov eax, dword [0x4ecb3c]
mov eax, dword [eax]
mov edx, 0x4d2a48
call fcn.0045486c
mov ecx, eax
inc ecx
mov eax, dword [0x4ecb3c]
mov eax, dword [eax]
mov edx, 0x4d2a48
call fcn.00454b0c
call fcn.00409728
add esp, 0xfffffffc
fstp dword [esp]
wait
mov eax, dword [0x4ecb3c]
mov eax, dword [eax]
mov edx, 0x4d2a5c
call fcn.00454c14
call fcn.00409754
add esp, 0xfffffffc
fstp dword [esp]
wait
mov eax, dword [0x4ecb3c]
mov eax, dword [eax]
mov edx, 0x4d2a74
call fcn.00454c14
lea eax, [ebp - 0x35c]
push eax
mov eax, dword [0x4ecb3c]
mov eax, dword [eax]
mov ecx, 1
mov edx, 0x4d2a84
mov edi, dword [eax]
call dword [edi]
lea edx, [ebp - 0x35c]
mov eax, dword [0x4eca0c]
mov eax, dword [eax]
call fcn.0045a6c8
cmp al, 1
jne 0x4d20a0
cmp word [ebx + 6], 0
je 0x4d20a0
mov edx, ebx
mov eax, dword [ebx + 8]
call dword [ebx + 4]
mov eax, 2
call fcn.004a8c70
lea eax, [ebp - 0x250]
push eax
mov eax, dword [esi]
xor ecx, ecx
mov edx, 0x4d2a94
call fcn.00475684
mov dl, 1
mov eax, dword [0x45fa2c]
call fcn.0045faa8
mov edx, dword [0x4ecd5c]
mov dword [edx], eax
mov eax, dword [esi]
lea edx, [eax + 0xa1d]
lea eax, [ebp - 0x35c]
call fcn.00402c18
lea edx, [ebp - 0x250]
lea eax, [ebp - 0x35c]
call fcn.00402bc0
lea edx, [ebp - 0x35c]
mov eax, dword [0x4ecd5c]
mov eax, dword [eax]
call fcn.0045ffa8
inc eax
jne 0x4d2149
lea edx, [ebp - 0x250]
lea eax, [ebp - 0x35c]
call fcn.00402c18
mov edx, 0x4d2aa0
lea eax, [ebp - 0x35c]
call fcn.00402bc0
lea edx, [ebp - 0x35c]
mov eax, 0xfffffe0c
call fcn.0045e3e4
mov dword [ebp - 4], 0xffffffff
jmp 0x4d2451
mov eax, dword [0x4eca90]
mov eax, dword [eax]
mov edx, 0x4d2ab4
call fcn.0045491c
test al, al
jne 0x4d216c
mov eax, dword [0x4ecd5c]
mov eax, dword [eax]
xor edx, edx
call fcn.0045fc4c
mov eax, dword [0x4ecb3c]
mov eax, dword [eax]
mov ecx, 1
mov edx, 0x4d2acc
mov edi, dword [eax]
call dword [edi + 8]
cmp al, 1
jne 0x4d2190
mov eax, dword [0x4ecbc4]
mov byte [eax], 1
jmp 0x4d2198
mov eax, dword [0x4ecbc4]
mov byte [eax], 0
lea edx, [ebp - 0x35c]
mov eax, dword [0x4ecb3c]
mov eax, dword [eax]
call fcn.004708c8
lea edx, [ebp - 0x35c]
lea eax, [ebp - 0x258]
call fcn.00403ed8
mov eax, dword [ebp - 0x258]
lea edx, [ebp - 0x254]
call fcn.00408154
mov eax, dword [ebp - 0x254]
mov edx, 0x4d2adc
call fcn.00404044
jne 0x4d226e
push 0
lea ecx, [ebp - 0x258]
mov eax, dword [0x4eca0c]
mov eax, dword [eax]
mov edx, 0xb3
call fcn.0045b468
push dword [ebp - 0x258]
push 0x4d2690
push 0x4d2690
lea ecx, [ebp - 0x460]
mov eax, dword [0x4eca0c]
mov eax, dword [eax]
mov edx, 0xb4
call fcn.0045b468
push dword [ebp - 0x460]
push 0x4d2690
lea ecx, [ebp - 0x464]
mov eax, dword [0x4eca0c]
mov eax, dword [eax]
mov edx, 0xb5
call fcn.0045b468
push dword [ebp - 0x464]
lea eax, [ebp - 0x254]
mov edx, 6
call fcn.00403ff4
mov eax, dword [ebp - 0x254]
mov cx, word [0x4d2ae8]
mov dl, 4
call fcn.00451a60
lea edx, [ebp - 0x35c]
mov eax, dword [0x4ecb3c]
mov eax, dword [eax]
call fcn.004708c8
lea edx, [ebp - 0x35c]
lea eax, [ebp - 0x258]
call fcn.00403ed8
mov eax, dword [ebp - 0x258]
lea edx, [ebp - 0x254]
call fcn.00408154
mov eax, dword [ebp - 0x254]
mov edx, 0x4d2adc
call fcn.00404044
je 0x4d2333
lea edx, [ebp - 0x35c]
mov eax, dword [0x4ecb3c]
mov eax, dword [eax]
call fcn.004708c8
lea edx, [ebp - 0x35c]
lea eax, [ebp - 0x254]
call fcn.00403ed8
mov eax, dword [ebp - 0x254]
push eax
mov edx, 0x4d2a20
lea eax, [ebp - 0x45c]
call fcn.00402c18
lea edx, [ebp - 0x57c]
mov eax, dword [0x47066c]
call fcn.0047387c
lea edx, [ebp - 0x57c]
lea eax, [ebp - 0x45c]
call fcn.00402bc0
lea edx, [ebp - 0x45c]
lea eax, [ebp - 0x258]
call fcn.00403ed8
mov edx, dword [ebp - 0x258]
mov eax, dword [0x4ec970]
mov eax, dword [eax]
pop ecx
call fcn.00454aa4
lea edx, [ebp - 0x35c]
mov eax, dword [0x4ecb3c]
mov eax, dword [eax]
call fcn.004708c8
lea edx, [ebp - 0x35c]
lea eax, [ebp - 0x254]
call fcn.00403ed8
mov ecx, dword [ebp - 0x254]
mov eax, dword [0x4ec970]
mov eax, dword [eax]
mov edx, 0x4d2af4
call fcn.00454aa4
mov eax, dword [0x4ecd08]
mov eax, dword [eax]
jmp 0x629db1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4d24ae
lea eax, [ebp - 0x470]
mov edx, 5
call fcn.00403cdc
lea eax, [ebp - 0x25c]
call fcn.00403cb8
lea eax, [ebp - 0x258]
mov edx, 2
call fcn.00403cdc
lea eax, [ebp - 0x4c]
mov edx, 2
call fcn.00403cdc
lea eax, [ebp - 0x28]
call fcn.00403cb8
lea eax, [ebp - 0x20]
call fcn.00403cb8
ret