Function at 0x4bb850
Capabilities:
Enumerate gui resources

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0xb
push 0
push 0
dec ecx
jne 0x4bb858
push ecx
push ebx
push esi
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call fcn.00404b70
mov esi, 0x4f2ee4
xor eax, eax
push ebp
push 0x4bcb6f
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 5], 0
mov edx, dword [ebp - 4]
mov eax, 0x4bcb88
call fcn.00404cc4
test eax, eax
jle 0x4bb8ce
lea edx, [ebp - 0x10]
mov eax, 0x4bcba0
call fcn.004b57fc
mov edx, dword [ebp - 0x10]
mov eax, 0x4cad44
call fcn.00404714
lea edx, [ebp - 0x14]
mov eax, 0x4bcbac
call fcn.004b57fc
mov edx, dword [ebp - 0x14]
mov eax, 0x4cad48
call fcn.00404714
jmp 0x4bcb19
mov edx, dword [ebp - 4]
mov eax, 0x4bcbb8
call fcn.00404cc4
test eax, eax
jle 0x4bca9f
mov byte [ebp - 5], 1
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 4]
call fcn.00408970
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0xc]
mov edx, 0x4bcbc8
call fcn.004b4e64
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 4]
mov edx, 0x4bcbd4
call fcn.00404acc
jne 0x4bbcdb
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 8]
mov eax, 0x4bcbe8
call fcn.00404cc4
test eax, eax
jle 0x4bb9b2
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
mov edx, 0x4bcbf8
call fcn.00404acc
jne 0x4bb971
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x10]
call fcn.00408e20
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
mov edx, dword [esi + 0x349]
lea eax, [edx + eax + 5]
push eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
call fcn.00408e20
pop edx
mov dword [edx], eax
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
mov edx, 0x4bcc08
call fcn.00404acc
jne 0x4bb9b2
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x10]
call fcn.00408e20
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
mov edx, dword [esi + 0x349]
lea eax, [edx + eax + 0xd]
push eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
call fcn.00408e20
pop edx
mov dword [edx], eax
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 8]
mov eax, 0x4bcc18
call fcn.00404cc4
test eax, eax
jle 0x4bba42
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
mov edx, 0x4bcc28
call fcn.00404acc
jne 0x4bba04
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x10]
call fcn.00408e20
imul eax, eax, 0xb
mov edx, dword [esi + 0x34d]
lea eax, [edx + eax*2 + 6]
push eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
call fcn.00408e20
pop edx
mov dword [edx], eax
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
mov edx, 0x4bcc08
call fcn.00404acc
jne 0x4bba42
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x10]
call fcn.00408e20
imul eax, eax, 0xb
mov edx, dword [esi + 0x34d]
lea eax, [edx + eax*2 + 0xa]
push eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
call fcn.00408e20
pop edx
mov dword [edx], eax
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 8]
mov eax, 0x4bcc38
call fcn.00404cc4
test eax, eax
jle 0x4bbaa0
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
mov edx, 0x4bcc48
call fcn.00404acc
jne 0x4bba7b
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
call fcn.00408e20
mov dword [esi + 0x3a], eax
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
mov edx, 0x4bcc5c
call fcn.00404acc
jne 0x4bbaa0
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
call fcn.00408e20
mov dword [esi + 0x43], eax
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 8]
mov eax, 0x4bcc70
call fcn.00404cc4
test eax, eax
jle 0x4bbaf2
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
mov edx, 0x4bcc08
call fcn.00404acc
jne 0x4bbaf2
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x10]
call fcn.00408e20
lea eax, [eax + eax*8]
mov edx, dword [esi + 0x351]
lea eax, [edx + eax + 5]
push eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
call fcn.00408e20
pop edx
mov dword [edx], eax
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 8]
mov eax, 0x4bcc80
call fcn.00404cc4
test eax, eax
jle 0x4bbb2b
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
mov edx, 0x4bcc90
call fcn.00404acc
jne 0x4bbb2b
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
call fcn.00408e20
mov dword [esi + 0x52], eax
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 8]
mov eax, 0x4bcca0
call fcn.00404cc4
test eax, eax
jle 0x4bbb64
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
mov edx, 0x4bccb0
call fcn.00404acc
jne 0x4bbb64
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
call fcn.00408e20
mov dword [esi + 0x49], eax
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 8]
mov eax, 0x4bccc0
call fcn.00404cc4
test eax, eax
jle 0x4bbbe4
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
mov edx, 0x4bccd0
call fcn.00404acc
jne 0x4bbbae
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
call fcn.00408e20
mov ebx, eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x10]
call fcn.00408e20
imul eax, eax, 0x67
mov dword [esi + eax + 0x70], ebx
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
mov edx, 0x4bcc08
call fcn.00404acc
jne 0x4bbbe4
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
call fcn.00408e20
mov ebx, eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x10]
call fcn.00408e20
imul eax, eax, 0x67
mov dword [esi + eax + 0x78], ebx
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 8]
mov eax, 0x4bcce0
call fcn.00404cc4
test eax, eax
jle 0x4bbc20
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
mov edx, 0x4bcc28
call fcn.00404acc
jne 0x4bbc20
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
call fcn.00408e20
mov dword [esi + 0x33d], eax
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 8]
mov eax, 0x4bccf0
call fcn.00404cc4
test eax, eax
jle 0x4bbc59
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
mov edx, 0x4bcd00
call fcn.00404acc
jne 0x4bbc59
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
call fcn.00408e20
mov dword [esi + 0xd], eax
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 8]
mov eax, 0x4bcd14
call fcn.00404cc4
test eax, eax
jle 0x4bbcd2
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
mov edx, 0x4bcd24
call fcn.00404acc
jne 0x4bbcd2
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
call fcn.00408e20
mov dword [esi + 0x19], eax
fld dword [0x4cad50]
call fcn.00402bf4
mov dword [esi + 0x1d], eax
fld dword [0x4cad58]
call fcn.00402bf4
mov dword [esi + 0x21], eax
mov eax, dword [esi + 0x1d]
sub eax, dword [esi + 0x19]
mov dword [esi + 0x25], eax
mov eax, dword [esi + 0x21]
sub eax, dword [esi + 0x19]
mov dword [esi + 0x29], eax
mov eax, dword [esi + 0x1d]
add eax, dword [esi + 0x19]
mov dword [esi + 0x2d], eax
mov eax, dword [esi + 0x21]
add eax, dword [esi + 0x19]
mov dword [esi + 0x31], eax
jmp 0x4bcb19
mov byte [ebp - 5], 1
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 4]
mov edx, 0x4bcd38
call fcn.00404acc
jne 0x4bc291
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 8]
mov eax, 0x4bcbe8
call fcn.00404cc4
test eax, eax
jle 0x4bbd4c
xor ebx, ebx
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, 0x4bcd50
call fcn.00404acc
jne 0x4bbd1b
mov bl, 1
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
mov edx, 0x4bcd60
call fcn.00404acc
jne 0x4bbd4c
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x10]
call fcn.00408e20
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
mov edx, dword [esi + 0x349]
mov byte [edx + eax], bl
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 8]
mov eax, 0x4bcc18
call fcn.00404cc4
test eax, eax
jle 0x4bbe18
xor ebx, ebx
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, 0x4bcd50
call fcn.00404acc
jne 0x4bbd7a
mov bl, 1
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
mov edx, 0x4bcd60
call fcn.00404acc
jne 0x4bbdc9
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x10]
call fcn.00408e20
imul eax, eax, 0xb
mov edx, dword [esi + 0x34d]
mov byte [edx + eax*2 + 1], bl
test bl, bl
je 0x4bcb19
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x10]
call fcn.00408e20
imul eax, eax, 0xb
mov edx, dword [esi + 0x34d]
mov byte [edx + eax*2], 0
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
mov edx, 0x4bcd70
call fcn.00404acc
jne 0x4bbe18
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x10]
call fcn.00408e20
imul eax, eax, 0xb
mov edx, dword [esi + 0x34d]
mov byte [edx + eax*2], bl
test bl, bl
je 0x4bcb19
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x10]
call fcn.00408e20
imul eax, eax, 0xb
mov edx, dword [esi + 0x34d]
mov byte [edx + eax*2 + 1], 0
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 8]
mov eax, 0x4bcd80
call fcn.00404cc4
test eax, eax
jle 0x4bbe90
xor ebx, ebx
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, 0x4bcd50
call fcn.00404acc
jne 0x4bbe42
mov bl, 1
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
mov edx, 0x4bcd90
call fcn.00404acc
jne 0x4bbe5c
mov byte [esi + 0x35], bl
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
mov edx, 0x4bcda8
call fcn.00404acc
jne 0x4bbe76
mov byte [esi + 0x3e], bl
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
mov edx, 0x4bcdc0
call fcn.00404acc
jne 0x4bbe90
mov byte [esi + 9], bl
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 8]
mov eax, 0x4bcdd4
call fcn.00404cc4
test eax, eax
jle 0x4bbf08
xor ebx, ebx
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, 0x4bcd50
call fcn.00404acc
jne 0x4bbeba
mov bl, 1
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
mov edx, 0x4bcde4
call fcn.00404acc
jne 0x4bbed4
mov byte [esi + 0x47], bl
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
mov edx, 0x4bcdfc
call fcn.00404acc
jne 0x4bbeee
mov byte [esi + 0xa], bl
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
mov edx, 0x4bce14
call fcn.00404acc
jne 0x4bbf08
mov byte [esi + 0x17], bl
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 8]
mov eax, 0x4bcc70
call fcn.00404cc4
test eax, eax
jle 0x4bbf60
xor ebx, ebx
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, 0x4bcd50
call fcn.00404acc
jne 0x4bbf32
mov bl, 1
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
mov edx, 0x4bcd60
call fcn.00404acc
jne 0x4bbf60
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x10]
call fcn.00408e20
lea eax, [eax + eax*8]
mov edx, dword [esi + 0x351]
mov byte [edx + eax], bl
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 8]
mov eax, 0x4bcc80
call fcn.00404cc4
test eax, eax
jle 0x4bbfa4
xor ebx, ebx
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, 0x4bcd50
call fcn.00404acc
jne 0x4bbf8a
mov bl, 1
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
mov edx, 0x4bce28
call fcn.00404acc
jne 0x4bbfa4
mov byte [esi + 0x51], bl
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 8]
mov eax, 0x4bcca0
call fcn.00404cc4
test eax, eax
jle 0x4bbfe8
xor ebx, ebx
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, 0x4bcd50
call fcn.00404acc
jne 0x4bbfce
mov bl, 1
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
mov edx, 0x4bce3c
call fcn.00404acc
jne 0x4bbfe8
mov byte [esi + 0x48], bl
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 8]
mov eax, 0x4bccc0
call fcn.00404cc4
test eax, eax
jle 0x4bc0c5
xor ebx, ebx
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, 0x4bcd50
call fcn.00404acc
jne 0x4bc016
mov bl, 1
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
mov edx, 0x4bce50
call fcn.00404acc
jne 0x4bc03f
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x10]
call fcn.00408e20
imul eax, eax, 0x67
mov byte [esi + eax + 0x6f], bl
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
mov edx, 0x4bce60
call fcn.00404acc
jne 0x4bc068
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x10]
call fcn.00408e20
imul eax, eax, 0x67
mov byte [esi + eax + 0x6d], bl
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
mov edx, 0x4bce74
call fcn.00404acc
jne 0x4bc091
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x10]
call fcn.00408e20
imul eax, eax, 0x67
mov byte [esi + eax + 0x6e], bl
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
mov edx, 0x4bce84
call fcn.00404acc
jne 0x4bc0ab
mov byte [esi + 0x5a], bl
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
mov edx, 0x4bce94
call fcn.00404acc
jne 0x4bc0c5
mov byte [esi + 0x5b], bl
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 8]
mov eax, 0x4bcce0
call fcn.00404cc4
test eax, eax
jle 0x4bc146
xor ebx, ebx
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, 0x4bcd50
call fcn.00404acc
jne 0x4bc0ef
mov bl, 1
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
mov edx, 0x4bcea8
call fcn.00404acc
jne 0x4bc10c
mov byte [esi + 0x33b], bl
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
mov edx, 0x4bcebc
call fcn.00404acc
jne 0x4bc129
mov byte [esi + 0x33c], bl
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
mov edx, 0x4bced0
call fcn.00404acc
jne 0x4bc146
mov byte [esi + 0x33a], bl
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 8]
mov eax, 0x4bccf0
call fcn.00404cc4
test eax, eax
jle 0x4bc244
xor ebx, ebx
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, 0x4bcd50
call fcn.00404acc
jne 0x4bc174
mov bl, 1
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
mov edx, 0x4bcee4
call fcn.00404acc
jne 0x4bc18e
mov byte [esi + 0xb], bl
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
mov edx, 0x4bcef8
call fcn.00404acc
jne 0x4bc1a8
mov byte [esi + 0xc], bl
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
mov edx, 0x4bcf0c
call fcn.00404acc
jne 0x4bc1c2
mov byte [esi + 0x12], bl
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
mov edx, 0x4bcf20
call fcn.00404acc
jne 0x4bc1dc
mov byte [esi + 0x11], bl
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
mov edx, 0x4bcf34
call fcn.00404acc
jne 0x4bc1f6
mov byte [esi + 0x13], bl
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
mov edx, 0x4bcf4c
call fcn.00404acc
jne 0x4bc210
mov byte [esi + 0x14], bl
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
mov edx, 0x4bcf60
call fcn.00404acc
jne 0x4bc22a
mov byte [esi + 0x15], bl
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
mov edx, 0x4bcf74
call fcn.00404acc
jne 0x4bc244
mov byte [esi + 0x16], bl
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 8]
mov eax, 0x4bcd14
call fcn.00404cc4
test eax, eax
jle 0x4bc288
xor ebx, ebx
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, 0x4bcd50
call fcn.00404acc
jne 0x4bc26e
mov bl, 1
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
mov edx, 0x4bcf88
call fcn.00404acc
jne 0x4bc288
mov byte [esi + 0x18], bl
jmp 0x4bcb19
mov byte [ebp - 5], 1
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 4]
mov edx, 0x4bcf9c
call fcn.00404acc
jne 0x4bc4c2
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 8]
mov eax, 0x4bcbe8
call fcn.00404cc4
test eax, eax
jle 0x4bc341
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
mov edx, 0x4bcfb4
call fcn.00404acc
jne 0x4bc300
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x10]
call fcn.00408e20
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
mov edx, dword [esi + 0x349]
lea eax, [edx + eax + 9]
push eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
call fcn.00408e20
pop edx
mov dword [edx], eax
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
mov edx, 0x4bcfc0
call fcn.00404acc
jne 0x4bc341
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x10]
call fcn.00408e20
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
mov edx, dword [esi + 0x349]
lea eax, [edx + eax + 1]
push eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
call fcn.00408e20
pop edx
mov dword [edx], eax
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 8]
mov eax, 0x4bcc18
call fcn.00404cc4
test eax, eax
jle 0x4bc393
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
mov edx, 0x4bcfb4
call fcn.00404acc
jne 0x4bc393
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x10]
call fcn.00408e20
imul eax, eax, 0xb
mov edx, dword [esi + 0x34d]
lea eax, [edx + eax*2 + 2]
push eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
call fcn.00408e20
pop edx
mov dword [edx], eax
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 8]
mov eax, 0x4bcc70
call fcn.00404cc4
test eax, eax
jle 0x4bc3e5
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
mov edx, 0x4bcfb4
call fcn.00404acc
jne 0x4bc3e5
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x10]
call fcn.00408e20
lea eax, [eax + eax*8]
mov edx, dword [esi + 0x351]
lea eax, [edx + eax + 1]
push eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
call fcn.00408e20
pop edx
mov dword [edx], eax
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 8]
mov eax, 0x4bccc0
call fcn.00404cc4
test eax, eax
jle 0x4bc47d
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
mov edx, 0x4bcfd0
call fcn.00404acc
jne 0x4bc433
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
call fcn.00408e20
mov ebx, eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x10]
call fcn.00408e20
imul eax, eax, 0x67
mov dword [esi + eax + 0x74], ebx
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
mov edx, 0x4bcfe0
call fcn.00404acc
jne 0x4bc458
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
call fcn.00408e20
mov dword [esi + 0x5d], eax
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
mov edx, 0x4bcff0
call fcn.00404acc
jne 0x4bc47d
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
call fcn.00408e20
mov dword [esi + 0x61], eax
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 8]
mov eax, 0x4bcce0
call fcn.00404cc4
test eax, eax
jle 0x4bc4b9
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
mov edx, 0x4bcfb4
call fcn.00404acc
jne 0x4bc4b9
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
call fcn.00408e20
mov dword [esi + 0x341], eax
jmp 0x4bcb19
mov byte [ebp - 5], 1
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 4]
mov edx, 0x4bd000
call fcn.00404acc
jne 0x4bc972
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 8]
mov eax, 0x4bd014
call fcn.00404cc4
test eax, eax
jle 0x4bc4f6
call fcn.004b9464
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 8]
mov eax, 0x4bd034
call fcn.00404cc4
test eax, eax
jle 0x4bc51f
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
call fcn.00408e20
call fcn.004b9128
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 8]
mov eax, 0x4bd054
call fcn.00404cc4
test eax, eax
jle 0x4bc53d
call fcn.004b93a0
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 8]
mov eax, 0x4bd074
call fcn.00404cc4
test eax, eax
jle 0x4bc566
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
call fcn.00408e20
call fcn.004b9044
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 8]
mov eax, 0x4bd094
call fcn.00404cc4
test eax, eax
jle 0x4bc584
call fcn.004b92f0
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 8]
mov eax, 0x4bd0b0
call fcn.00404cc4
test eax, eax
jle 0x4bc5ad
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
call fcn.00408e20
call fcn.004b920c
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 8]
mov eax, 0x4bd0cc
call fcn.00404cc4
test eax, eax
jle 0x4bc5de
lea edx, [ebp - 0x1c]
mov eax, 0x4bd0e4
call fcn.004b57fc
mov edx, dword [ebp - 0x1c]
mov eax, dword [esi + 0x56]
mov ecx, dword [eax]
call dword [ecx + 0x2c]
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 8]
mov eax, 0x4bd0f8
call fcn.00404cc4
test eax, eax
jle 0x4bc60f
lea edx, [ebp - 0x20]
mov eax, 0x4bd110
call fcn.004b57fc
mov edx, dword [ebp - 0x20]
mov eax, dword [esi + 0x4d]
mov ecx, dword [eax]
call dword [ecx + 0x2c]
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 8]
mov eax, 0x4bd124
call fcn.00404cc4
test eax, eax
jle 0x4bc657
call fcn.004b4bc8
lea eax, [ebp - 0x24]
call fcn.004b6c0c
mov edx, dword [ebp - 0x24]
mov eax, 0x4bccc0
call fcn.004b56dc
lea eax, [ebp - 0x28]
call fcn.004b6a10
mov edx, dword [ebp - 0x28]
mov eax, 0x4bd140
call fcn.004b56dc
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 8]
mov eax, 0x4bd158
call fcn.00404cc4
test eax, eax
jle 0x4bc68b
lea edx, [ebp - 0x2c]
mov eax, 0x4bd170
call fcn.004b57fc
mov edx, dword [ebp - 0x2c]
mov eax, dword [esi + 0x345]
mov ecx, dword [eax]
call dword [ecx + 0x2c]
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 8]
mov eax, 0x4bd184
call fcn.00404cc4
test eax, eax
jle 0x4bc6b9
lea eax, [ebp - 0x30]
call fcn.004b80e4
mov edx, dword [ebp - 0x30]
mov eax, 0x4bd19c
call fcn.004b56dc
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 8]
mov eax, 0x4bd1b0
call fcn.00404cc4
test eax, eax
jle 0x4bc6d7
call fcn.004bf694
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 8]
mov eax, 0x4bd1c4
call fcn.00404cc4
test eax, eax
jle 0x4bc6f5
call fcn.004bf1ac
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 8]
mov eax, 0x4bd1d8
call fcn.00404cc4
test eax, eax
jle 0x4bc743
mov eax, dword [0x4f2e6c]
mov edx, dword [eax]
call dword [edx + 0x44]
mov eax, dword [0x4f2e70]
mov edx, dword [eax]
call dword [edx + 0x44]
push 0
push 0x4ba630
call sub.user32.dll_EnumWindows
lea eax, [ebp - 0x34]
call fcn.004b7e28
mov edx, dword [ebp - 0x34]
mov eax, 0x4bd1f0
call fcn.004b56dc
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 8]
mov eax, 0x4bd204
call fcn.00404cc4
test eax, eax
jle 0x4bc7ad
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
call fcn.00408e20
cdq
push edx
push eax
mov eax, dword [0x4cad08]
call fcn.00446a04
xor edx, edx
cmp edx, dword [esp + 4]
jne 0x4bc77a
cmp eax, dword [esp]
pop edx
pop eax
je 0x4bcb19
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
call fcn.00408e20
mov dword [0x4cad20], eax
mov eax, dword [0x4cad20]
push eax
mov eax, dword [0x4cad1c]
push eax
call sub.user32.dll_SetParent
call fcn.004ba20c
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 8]
mov eax, 0x4bd21c
call fcn.00404cc4
test eax, eax
jle 0x4bc80e
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
mov edx, 0x4bcd50
call fcn.00404acc
jne 0x4bc7f2
push 0x83
push 0
push 0
push 0
push 0
push 0xfffffffffffffffe
mov eax, dword [0x4f2e5c]
push eax
call sub.user32.dll_SetWindowPos
jmp 0x4bcb19
push 0x43
push 0
push 0
push 0
push 0
push 0xfffffffffffffffe
mov eax, dword [0x4f2e5c]
push eax
call sub.user32.dll_SetWindowPos
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 8]
mov eax, 0x4bd238
call fcn.00404cc4
test eax, eax
jle 0x4bc874
cmp dword [0x4cad20], 0
jne 0x4bc843
mov dl, 1
mov eax, dword [0x4cad08]
call fcn.004510b8
mov eax, dword [0x4cad08]
call fcn.004534cc
jmp 0x4bc85d
push 0x83
push 0
push 0
push 0
push 0
push 0xfffffffffffffffe
mov eax, dword [0x4cad20]
push eax
call sub.user32.dll_SetWindowPos
mov eax, dword [0x4cad08]
mov eax, dword [eax + 0x300]
mov dl, 1
mov ecx, dword [eax]
call dword [ecx + 0x30]
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 8]
mov eax, 0x4bd250
call fcn.00404cc4
test eax, eax
jle 0x4bc892
call fcn.004bb660
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 8]
mov eax, 0x4bd26c
call fcn.00404cc4
test eax, eax
jle 0x4bc8bb
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
call fcn.00408e20
call fcn.004bb310
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 8]
mov eax, 0x4bd28c
call fcn.00404cc4
test eax, eax
jle 0x4bc8d9
call fcn.004bad94
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 8]
mov eax, 0x4bd2a8
call fcn.00404cc4
test eax, eax
jle 0x4bc969
fld dword [0x4cad50]
call fcn.00402bf4
mov dword [esi + 0x1d], eax
fld dword [0x4cad58]
call fcn.00402bf4
mov dword [esi + 0x21], eax
mov eax, dword [esi + 0x1d]
sub eax, dword [esi + 0x19]
mov dword [esi + 0x25], eax
mov eax, dword [esi + 0x21]
sub eax, dword [esi + 0x19]
mov dword [esi + 0x29], eax
mov eax, dword [esi + 0x1d]
add eax, dword [esi + 0x19]
mov dword [esi + 0x2d], eax
mov eax, dword [esi + 0x21]
add eax, dword [esi + 0x19]
mov dword [esi + 0x31], eax
lea eax, [ebp - 0x38]
push eax
mov eax, dword [esi + 0x1d]
mov dword [ebp - 0x48], eax
mov byte [ebp - 0x44], 0
mov eax, dword [esi + 0x21]
mov dword [ebp - 0x40], eax
mov byte [ebp - 0x3c], 0
lea edx, [ebp - 0x48]
mov ecx, 1
mov eax, 0x4bd2c0
call fcn.00409bbc
mov edx, dword [ebp - 0x38]
mov eax, 0x4bd2a8
call fcn.004b56dc
jmp 0x4bcb19
mov byte [ebp - 5], 1
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 4]
mov edx, 0x4bd2d8
call fcn.00404acc
jne 0x4bca11
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax + 8]
mov eax, 0x4f331c
mov edx, 0x4bd2ec
call fcn.004049cc
lea eax, [ebp - 0x50]
mov ecx, 0x4bd2fc
mov edx, dword [0x4f331c]
call fcn.004049cc
mov edx, dword [ebp - 0x50]
lea eax, [ebp - 0x4c]
call fcn.00404f40
mov edx, dword [ebp - 0x4c]
mov eax, dword [0x4cad08]
mov eax, dword [eax + 0x304]
call fcn.004ac800
xor edx, edx
mov eax, dword [0x4cad08]
mov ecx, dword [eax]
call dword [ecx + 0x64]
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
call fcn.00408e20
mov edx, eax
mov eax, dword [0x4cad08]
call fcn.0044ff60
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x10]
call fcn.00408e20
mov edx, eax
mov eax, dword [0x4cad08]
call fcn.0044ff90
mov byte [ebp - 5], 1
jmp 0x4bcb19
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 4]
mov edx, 0x4bd310
call fcn.00404acc
jne 0x4bca9f
mov eax, dword [ebp - 0xc]
push dword [eax + 8]
push 0x4bcbc8
mov eax, dword [ebp - 0xc]
push dword [eax + 0xc]
lea eax, [ebp - 0x58]
mov edx, 3
call fcn.00404a40
mov edx, dword [ebp - 0x58]
lea eax, [ebp - 0x54]
call fcn.00404f40
mov edx, dword [ebp - 0x54]
mov eax, dword [0x4cad08]
mov eax, dword [eax + 0x304]
call fcn.004ac800
xor edx, edx
mov eax, dword [0x4cad08]
mov ecx, dword [eax]
call dword [ecx + 0x64]
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x10]
call fcn.00408e20
mov edx, eax
mov eax, dword [0x4cad08]
call fcn.0044ff60
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
call fcn.00408e20
mov edx, eax
mov eax, dword [0x4cad08]
call fcn.0044ff90
mov byte [ebp - 5], 1
jmp 0x4bcb19
mov edx, dword [ebp - 4]
mov eax, 0x4bd324
call fcn.00404cc4
test eax, eax
jle 0x4bcb19
mov byte [ebp - 5], 1
lea edx, [ebp - 0x5c]
mov eax, dword [ebp - 4]
call fcn.00408970
mov eax, dword [ebp - 0x5c]
lea ecx, [ebp - 0xc]
mov edx, 0x4bcbc8
call fcn.004b4e64
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 4]
mov edx, 0x4bd334
call fcn.00404acc
jne 0x4bcb19
mov ecx, dword [0x4c6cf0]
mov eax, dword [0x4c6d64]
mov eax, dword [eax]
mov edx, dword [0x4af440]
call fcn.0045699c
mov eax, dword [0x4c6cf0]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0xec]
dec eax
jne 0x4bcb15
mov eax, dword [0x4cad08]
call fcn.0045332c
mov byte [ebp - 5], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4bcb76
lea eax, [ebp - 0x5c]
mov edx, 2
call fcn.004046e4
lea eax, [ebp - 0x54]
call fcn.00404df4
lea eax, [ebp - 0x50]
call fcn.004046c0
lea eax, [ebp - 0x4c]
call fcn.00404df4
lea eax, [ebp - 0x38]
mov edx, 0xb
call fcn.004046e4
lea eax, [ebp - 0xc]
mov edx, dword [0x476cdc]
call fcn.00405a80
lea eax, [ebp - 4]
call fcn.004046c0
ret