Function at 0x4cb0a4
Capabilities:
Get common file path
Get number of processors

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x2d
push 0
push 0
dec ecx
jne 0x4cb0ad
push ecx
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 8]
call fcn.004047f0
mov eax, dword [ebp - 0xc]
call fcn.004047f0
mov eax, dword [ebp + 8]
call fcn.004047f0
xor eax, eax
push ebp
push 0x4ce42c
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
lea eax, [ebp - 0x54]
push eax
xor ecx, ecx
xor edx, edx
xor eax, eax
call fcn.004069fc
push 0
lea eax, [ebp - 0x64]
push eax
xor ecx, ecx
xor edx, edx
xor eax, eax
call fcn.004069fc
xor eax, eax
mov dword [ebp - 0x30], eax
xor eax, eax
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
add eax, 0x34
call fcn.00404340
mov eax, dword [ebp - 4]
mov byte [eax + 0x27], 0
mov byte [ebp - 0xd], 0
mov eax, 0x52be18
mov edx, dword [ebp + 8]
call fcn.00404394
mov eax, 0x52be1c
mov edx, dword [ebp - 0xc]
call fcn.00404394
lea eax, [ebp - 0x20]
mov edx, pe_nt_image_headers32
call fcn.0040498c
push pe_nt_image_headers32
mov eax, dword [ebp - 0x20]
call fcn.00404800
push eax
call sub.kernel32.dll_GetSystemDirectoryA
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
mov edx, 0x4ce44c
call fcn.0040474c
jne 0x4cb374
lea eax, [ebp - 0x6c]
mov edx, dword [ebp - 0x20]
mov dl, byte [edx]
call fcn.00404528
lea eax, [ebp - 0x6c]
mov edx, 0x4ce458
call fcn.00404608
mov eax, dword [ebp - 0x6c]
call fcn.00404800
mov edx, eax
lea eax, [ebp - 0x68]
call fcn.00404538
mov ecx, dword [ebp - 0x68]
mov edx, dword [0x52be1c]
mov eax, dword [ebp - 4]
call fcn.004d8ad8
xor eax, eax
push ebp
push 0x4cb33a
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, 0x1388
mov eax, dword [ebp - 4]
call fcn.004da0d0
test al, al
jne 0x4cb1e5
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4ce2ec
mov eax, dword [ebp - 4]
add eax, 0x30
mov edx, 0x4ce490
call fcn.00404394
lea edx, [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004cecec
mov edx, 0x64
mov eax, dword [ebp - 4]
call fcn.004da0d0
test al, al
jne 0x4cb21e
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4ce2ec
cmp dword [ebp - 0x14], 0
jne 0x4cb231
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4ce2ec
cmp dword [ebp - 0x14], 0
je 0x4cb330
push 0
push 0xf030
push 0x112
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
push eax
call sub.user32.dll_SendMessageA
mov edx, 0xbb8
mov eax, dword [ebp - 4]
call fcn.004da0d0
test al, al
jne 0x4cb271
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4ce2ec
lea ecx, [ebp - 0x1c]
xor edx, edx
xor eax, eax
call fcn.00406a18
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4ce4a8
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004da144
mov edx, 0x64
mov eax, dword [ebp - 4]
call fcn.004da0d0
test al, al
jne 0x4cb2af
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4ce2ec
cmp dword [ebp - 0x1c], 0
jne 0x4cb2cc
cmp dword [ebp - 0x18], 0
jne 0x4cb2cc
mov byte [ebp - 0xd], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4ce2ec
cmp dword [ebp - 0x1c], 0
je 0x4cb330
cmp dword [ebp - 0x18], 0
je 0x4cb330
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 7
mov eax, 0x14
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
mov edx, 0x64
mov eax, dword [ebp - 4]
call fcn.004da0d0
test al, al
jne 0x4cb318
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4ce2ec
mov eax, dword [ebp - 4]
call fcn.004d8884
mov eax, dword [ebp - 4]
add eax, 0x30
mov edx, 0x4ce4b8
call fcn.00404394
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4cb344
mov eax, dword [ebp - 4]
add eax, 0x34
mov edx, 0x4ce4d0
call fcn.00404394
mov edx, 0x3a98
mov eax, dword [ebp - 4]
call fcn.004da0d0
mov eax, dword [ebp - 4]
mov byte [eax + 0x27], 1
mov byte [ebp - 0xd], 1
mov eax, dword [ebp - 4]
call fcn.004cacf8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
mov edx, 0x4ce44c
call fcn.0040474c
je 0x4ce2ec
lea eax, [ebp - 0x7c]
mov edx, dword [ebp - 0x20]
mov dl, byte [edx]
call fcn.00404528
lea eax, [ebp - 0x7c]
mov edx, 0x4ce458
call fcn.00404608
mov eax, dword [ebp - 0x7c]
call fcn.00404800
mov edx, eax
lea eax, [ebp - 0x78]
call fcn.00404538
mov ecx, dword [ebp - 0x78]
mov edx, 0x4ce4dc
mov eax, dword [ebp - 4]
call fcn.004d8ad8
mov edx, 0x7d0
mov eax, dword [ebp - 4]
call fcn.004da0d0
xor edx, edx
push ebp
push 0x4ce2e2
push dword fs:[edx]
mov dword fs:[edx], esp
xor edx, edx
push ebp
push 0x4ce219
push dword fs:[edx]
mov dword fs:[edx], esp
mov edx, 0x4ce4f0
mov eax, dword [ebp - 4]
call fcn.004d9f54
push 0
push 0x4ce4f4
call sub.user32.dll_FindWindowA
mov dword [ebp - 0x28], eax
mov edx, 0x3e8
mov eax, dword [ebp - 4]
call fcn.004da0d0
test al, al
jne 0x4cb42e
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00403d88
jmp 0x4ce2ec
inc dword [ebp - 0x30]
cmp dword [ebp - 0x28], 0
jne 0x4cb43d
cmp dword [ebp - 0x30], 0xa
jl 0x4cb3fc
cmp dword [ebp - 0x28], 0
jne 0x4cb455
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00403d88
jmp 0x4ce2ec
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 4]
call fcn.004ca7fc
mov edx, 0x4ce504
mov eax, dword [ebp - 4]
call fcn.004d9f54
mov edx, 0x3e8
mov eax, dword [ebp - 4]
call fcn.004da0d0
test al, al
jne 0x4cb490
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00403d88
jmp 0x4ce2ec
xor eax, eax
push ebp
push 0x4cb4b9
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004cecec
cmp dword [ebp - 0x14], 0
je 0x4cb49e
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4cb4c3
mov edx, 0x4ce510
mov eax, dword [ebp - 4]
call fcn.004d9f54
cmp dword [ebp - 0x14], 0
jne 0x4cb4e8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00403d88
jmp 0x4ce2ec
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 4]
call fcn.004ca8c0
test al, al
jne 0x4cb53f
lea eax, [ebp - 0x80]
mov edx, dword [0x52be18]
call fcn.00404bc8
mov eax, dword [ebp - 0x80]
push eax
lea eax, [ebp - 0x84]
call fcn.004061e8
push eax
mov eax, dword [ebp - 0x14]
push eax
mov eax, dword [eax]
call dword [eax + 0x1b0]
call fcn.004062f8
mov eax, dword [ebp - 0x84]
push eax
mov eax, dword [eax]
call dword [eax + 0x84]
call fcn.004062f8
jmp 0x4cb98c
mov edx, 0x4ce51c
mov eax, dword [ebp - 4]
call fcn.004d9f54
lea eax, [ebp - 0x54]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x38]
push eax
call sub.user32.dll_GetWindowRect
cmp dword [ebp - 0x54], 0
jne 0x4cb57a
cmp dword [ebp - 0x50], 0
jne 0x4cb57a
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00403d88
jmp 0x4ce2ec
lea eax, [ebp - 0x64]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3c]
push eax
call sub.user32.dll_GetWindowRect
cmp dword [ebp - 0x64], 0
jne 0x4cb5a8
cmp dword [ebp - 0x60], 0
jne 0x4cb5a8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00403d88
jmp 0x4ce2ec
mov eax, dword [0x52be18]
mov edx, 0x4ce528
call fcn.0040474c
jne 0x4cb5cd
mov eax, 0x52be28
mov edx, 0x4ce548
call fcn.00404394
jmp 0x4cb80f
mov eax, dword [0x52be18]
mov edx, 0x4ce558
call fcn.0040474c
jne 0x4cb5f2
mov eax, 0x52be28
mov edx, 0x4ce57c
call fcn.00404394
jmp 0x4cb80f
mov eax, dword [0x52be18]
mov edx, 0x4ce58c
call fcn.0040474c
jne 0x4cb617
mov eax, 0x52be28
mov edx, 0x4ce5a8
call fcn.00404394
jmp 0x4cb80f
mov eax, dword [0x52be18]
mov edx, 0x4ce5b8
call fcn.0040474c
jne 0x4cb63c
mov eax, 0x52be28
mov edx, 0x4ce5d8
call fcn.00404394
jmp 0x4cb80f
mov eax, dword [0x52be18]
mov edx, 0x4ce5e8
call fcn.0040474c
jne 0x4cb661
mov eax, 0x52be28
mov edx, 0x4ce608
call fcn.00404394
jmp 0x4cb80f
mov eax, dword [0x52be18]
mov edx, 0x4ce618
call fcn.0040474c
jne 0x4cb686
mov eax, 0x52be28
mov edx, 0x4ce63c
call fcn.00404394
jmp 0x4cb80f
mov eax, dword [0x52be18]
mov edx, 0x4ce64c
call fcn.0040474c
jne 0x4cb6ab
mov eax, 0x52be28
mov edx, 0x4ce668
call fcn.00404394
jmp 0x4cb80f
mov eax, dword [0x52be18]
mov edx, 0x4ce678
call fcn.0040474c
jne 0x4cb6d0
mov eax, 0x52be28
mov edx, 0x4ce698
call fcn.00404394
jmp 0x4cb80f
mov eax, dword [0x52be18]
mov edx, 0x4ce6ac
call fcn.0040474c
jne 0x4cb6f5
mov eax, 0x52be28
mov edx, 0x4ce6cc
call fcn.00404394
jmp 0x4cb80f
mov eax, dword [0x52be18]
mov edx, 0x4ce6e0
call fcn.0040474c
jne 0x4cb71a
mov eax, 0x52be28
mov edx, 0x4ce700
call fcn.00404394
jmp 0x4cb80f
mov eax, dword [0x52be18]
mov edx, 0x4ce714
call fcn.0040474c
jne 0x4cb73f
mov eax, 0x52be28
mov edx, 0x4ce734
call fcn.00404394
jmp 0x4cb80f
mov eax, dword [0x52be18]
mov edx, 0x4ce748
call fcn.0040474c
jne 0x4cb764
mov eax, 0x52be28
mov edx, 0x4ce768
call fcn.00404394
jmp 0x4cb80f
mov eax, dword [0x52be18]
mov edx, 0x4ce77c
call fcn.0040474c
jne 0x4cb789
mov eax, 0x52be28
mov edx, 0x4ce79c
call fcn.00404394
jmp 0x4cb80f
mov eax, dword [0x52be18]
mov edx, 0x4ce7ac
call fcn.0040474c
jne 0x4cb7ab
mov eax, 0x52be28
mov edx, 0x4ce7cc
call fcn.00404394
jmp 0x4cb80f
mov eax, dword [0x52be18]
mov edx, 0x4ce7dc
call fcn.0040474c
jne 0x4cb7cd
mov eax, 0x52be28
mov edx, 0x4ce7f8
call fcn.00404394
jmp 0x4cb80f
mov eax, dword [0x52be18]
mov edx, 0x4ce80c
call fcn.0040474c
jne 0x4cb7ef
mov eax, 0x52be28
mov edx, 0x4ce82c
call fcn.00404394
jmp 0x4cb80f
mov eax, dword [0x52be18]
mov edx, 0x4ce83c
call fcn.0040474c
jne 0x4cb80f
mov eax, 0x52be28
mov edx, 0x4ce85c
call fcn.00404394
push 0x4ce86c
push dword [0x52be28]
push 0x4ce87c
mov eax, dword [ebp - 4]
add eax, 0x30
mov edx, 3
call fcn.004046c0
push 0x32
lea ecx, [ebp - 0x74]
xor edx, edx
mov eax, 0x14
call fcn.00406a18
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x8c]
mov edx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x54]
call fcn.00406a18
lea edx, [ebp - 0x8c]
mov eax, dword [ebp - 4]
pop ecx
call fcn.004d88a8
mov eax, dword [ebp - 4]
call fcn.004d8884
mov edx, 0x4ce88c
mov eax, dword [ebp - 4]
call fcn.004d9f54
push 0x4ce890
push 0
push 0xc
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x38]
push eax
call sub.user32.dll_SendMessageA
mov eax, dword [0x52be18]
call fcn.00404600
mov ebx, eax
test ebx, ebx
jl 0x4cb906
inc ebx
xor esi, esi
push 0x4ce890
push 0
push 0xc
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x38]
push eax
call sub.user32.dll_SendMessageA
lea eax, [ebp - 0x90]
push eax
mov ecx, esi
mov edx, 1
mov eax, dword [0x52be18]
call fcn.00438300
mov eax, dword [ebp - 0x90]
push eax
call fcn.0043814c
pop edx
call fcn.00437dec
push 0
push 0
push 0x302
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x38]
push eax
call sub.user32.dll_SendMessageA
mov edx, 0xfa
mov eax, dword [ebp - 4]
call fcn.004da0d0
inc esi
dec ebx
jne 0x4cb8a1
mov edx, 0x3e8
mov eax, dword [ebp - 4]
call fcn.004da0d0
test al, al
jne 0x4cb929
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00403d88
jmp 0x4ce2ec
mov edx, 0x3e8
mov eax, dword [ebp - 4]
call fcn.004da0d0
test al, al
jne 0x4cb94c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00403d88
jmp 0x4ce2ec
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 5
mov eax, 0xa
call fcn.00406a18
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x8c]
mov edx, dword [ebp - 0x60]
mov eax, dword [ebp - 0x64]
call fcn.00406a18
lea edx, [ebp - 0x8c]
mov eax, dword [ebp - 4]
pop ecx
call fcn.004d88a8
mov eax, dword [ebp - 4]
call fcn.004d8884
mov edx, 0x1388
mov eax, dword [ebp - 4]
call fcn.004da0d0
test al, al
jne 0x4cb9af
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00403d88
jmp 0x4ce2ec
mov edx, 0x64
mov eax, dword [ebp - 4]
call fcn.004da0d0
test al, al
jne 0x4cb9d2
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00403d88
jmp 0x4ce2ec
lea edx, [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004d90c0
mov eax, dword [0x52be18]
mov edx, 0x4ce528
call fcn.0040474c
jne 0x4cba09
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
push eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4ce89c
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004cef44
mov eax, dword [0x52be18]
mov edx, 0x4ce58c
call fcn.0040474c
jne 0x4cba35
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
push eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4ce8a8
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004cef44
mov eax, dword [0x52be18]
mov edx, 0x4ce5e8
call fcn.0040474c
jne 0x4cba61
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
push eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4ce8b8
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004cef44
mov eax, dword [0x52be18]
mov edx, 0x4ce558
call fcn.0040474c
jne 0x4cba8d
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
push eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4ce8b8
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004cef44
mov eax, dword [0x52be18]
mov edx, 0x4ce5b8
call fcn.0040474c
jne 0x4cbab9
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
push eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4ce8c4
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004cef44
mov eax, dword [0x52be18]
mov edx, 0x4ce618
call fcn.0040474c
jne 0x4cbae5
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
push eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4ce8b8
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004cef44
mov eax, dword [0x52be18]
mov edx, 0x4ce64c
call fcn.0040474c
jne 0x4cbb11
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
push eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4ce8d4
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004cef44
mov eax, dword [0x52be18]
mov edx, 0x4ce678
call fcn.0040474c
jne 0x4cbb3d
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
push eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4ce8e8
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004cef44
mov eax, dword [0x52be18]
mov edx, 0x4ce6ac
call fcn.0040474c
jne 0x4cbb69
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
push eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4ce89c
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004cef44
mov eax, dword [0x52be18]
mov edx, 0x4ce6e0
call fcn.0040474c
jne 0x4cbb95
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
push eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4ce89c
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004cef44
mov eax, dword [0x52be18]
mov edx, 0x4ce714
call fcn.0040474c
jne 0x4cbbc1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
push eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4ce900
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004cef44
mov eax, dword [0x52be18]
mov edx, 0x4ce748
call fcn.0040474c
jne 0x4cbbed
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
push eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4ce90c
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004cf1e0
mov eax, dword [0x52be18]
mov edx, 0x4ce77c
call fcn.0040474c
jne 0x4cbc19
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
push eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4ce8c4
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004cef44
mov eax, dword [0x52be18]
mov edx, 0x4ce7ac
call fcn.0040474c
jne 0x4cbc45
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
push eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4ce91c
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004cef44
mov eax, dword [0x52be18]
mov edx, 0x4ce7dc
call fcn.0040474c
jne 0x4cbc71
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
push eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4ce92c
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004cef44
mov eax, dword [0x52be18]
mov edx, 0x4ce80c
call fcn.0040474c
jne 0x4cbc9d
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
push eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4ce93c
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004cf40c
mov eax, dword [0x52be18]
mov edx, 0x4ce83c
call fcn.0040474c
jne 0x4cbcc9
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
push eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4ce94c
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004cef44
mov edx, 0x4ce958
mov eax, dword [ebp - 4]
call fcn.004d9f54
cmp dword [ebp - 0x1c], 0
jne 0x4cbcf4
cmp dword [ebp - 0x18], 0
jne 0x4cbcf4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00403d88
jmp 0x4ce2ec
mov edx, 0x64
mov eax, dword [ebp - 4]
call fcn.004da0d0
test al, al
jne 0x4cbd17
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00403d88
jmp 0x4ce2ec
mov eax, dword [ebp - 4]
add eax, 0x30
mov edx, 0x4ce964
call fcn.00404394
mov eax, dword [0x52be18]
mov edx, 0x4ce64c
call fcn.0040474c
jne 0x4cbd99
mov edx, dword [0x52a0bc]
mov edx, dword [edx]
mov eax, 0x4ce97c
call fcn.00404944
test eax, eax
jle 0x4cbd72
push 0x32
lea ecx, [ebp - 0x74]
xor edx, edx
mov eax, 0x14
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
jmp 0x4cbe99
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 0xfffffff6
mov eax, 0x14
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
jmp 0x4cbe99
mov eax, dword [0x52be18]
mov edx, 0x4ce558
call fcn.0040474c
jne 0x4cbe0b
mov edx, dword [0x52a0bc]
mov edx, dword [edx]
mov eax, 0x4ce97c
call fcn.00404944
test eax, eax
jle 0x4cbde4
push 0x32
lea ecx, [ebp - 0x74]
xor edx, edx
mov eax, 5
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
jmp 0x4cbe99
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 0xa
mov eax, 0x14
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
jmp 0x4cbe99
mov eax, dword [0x52be18]
mov edx, 0x4ce528
call fcn.0040474c
jne 0x4cbe77
mov edx, dword [0x52a0bc]
mov edx, dword [edx]
mov eax, 0x4ce97c
call fcn.00404944
test eax, eax
jle 0x4cbe53
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 5
xor eax, eax
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
jmp 0x4cbe99
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 0xa
mov eax, 0x14
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
jmp 0x4cbe99
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 0xa
mov eax, 0x14
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
mov edx, 0x4ce988
mov eax, dword [ebp - 4]
call fcn.004d9f54
mov edx, 0x1f4
mov eax, dword [ebp - 4]
call fcn.004da0d0
test al, al
jne 0x4cbec9
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00403d88
jmp 0x4ce2ec
mov eax, dword [0x52be18]
mov edx, 0x4ce528
call fcn.0040474c
jne 0x4cbeff
lea eax, [ebp - 0x94]
mov edx, dword [ebp - 8]
call fcn.00404bc8
mov eax, dword [ebp - 0x94]
push eax
mov ecx, 0x4ce990
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004d95f4
mov eax, dword [0x52be18]
mov edx, 0x4ce58c
call fcn.0040474c
jne 0x4cbf35
lea eax, [ebp - 0x98]
mov edx, dword [ebp - 8]
call fcn.00404bc8
mov eax, dword [ebp - 0x98]
push eax
mov ecx, 0x4ce99c
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004d95f4
mov eax, dword [0x52be18]
mov edx, 0x4ce5e8
call fcn.0040474c
jne 0x4cbf6b
lea eax, [ebp - 0x9c]
mov edx, dword [ebp - 8]
call fcn.00404bc8
mov eax, dword [ebp - 0x9c]
push eax
mov ecx, 0x4ce9b0
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004d95f4
mov eax, dword [0x52be18]
mov edx, 0x4ce558
call fcn.0040474c
jne 0x4cbfa1
lea eax, [ebp - 0xa0]
mov edx, dword [ebp - 8]
call fcn.00404bc8
mov eax, dword [ebp - 0xa0]
push eax
mov ecx, 0x4ce9b0
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004d95f4
mov eax, dword [0x52be18]
mov edx, 0x4ce5b8
call fcn.0040474c
jne 0x4cbfd7
lea eax, [ebp - 0xa4]
mov edx, dword [ebp - 8]
call fcn.00404bc8
mov eax, dword [ebp - 0xa4]
push eax
mov ecx, 0x4ce9b8
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004d95f4
mov eax, dword [0x52be18]
mov edx, 0x4ce618
call fcn.0040474c
jne 0x4cc00d
lea eax, [ebp - 0xa8]
mov edx, dword [ebp - 8]
call fcn.00404bc8
mov eax, dword [ebp - 0xa8]
push eax
mov ecx, 0x4ce9b0
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004d95f4
mov eax, dword [0x52be18]
mov edx, 0x4ce64c
call fcn.0040474c
jne 0x4cc043
lea eax, [ebp - 0xac]
mov edx, dword [ebp - 8]
call fcn.00404bc8
mov eax, dword [ebp - 0xac]
push eax
mov ecx, 0x4ce9c8
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004d95f4
mov eax, dword [0x52be18]
mov edx, 0x4ce678
call fcn.0040474c
jne 0x4cc079
lea eax, [ebp - 0xb0]
mov edx, dword [ebp - 8]
call fcn.00404bc8
mov eax, dword [ebp - 0xb0]
push eax
mov ecx, 0x4ce9e0
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004d95f4
mov eax, dword [0x52be18]
mov edx, 0x4ce6ac
call fcn.0040474c
jne 0x4cc0af
lea eax, [ebp - 0xb4]
mov edx, dword [ebp - 8]
call fcn.00404bc8
mov eax, dword [ebp - 0xb4]
push eax
mov ecx, 0x4ce990
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004d95f4
mov eax, dword [0x52be18]
mov edx, 0x4ce6e0
call fcn.0040474c
jne 0x4cc0e5
lea eax, [ebp - 0xb8]
mov edx, dword [ebp - 8]
call fcn.00404bc8
mov eax, dword [ebp - 0xb8]
push eax
mov ecx, 0x4ce990
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004d95f4
mov eax, dword [0x52be18]
mov edx, 0x4ce714
call fcn.0040474c
jne 0x4cc11b
lea eax, [ebp - 0xbc]
mov edx, dword [ebp - 8]
call fcn.00404bc8
mov eax, dword [ebp - 0xbc]
push eax
mov ecx, 0x4cea00
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004d95f4
mov eax, dword [0x52be18]
mov edx, 0x4ce748
call fcn.0040474c
jne 0x4cc151
lea eax, [ebp - 0xc0]
mov edx, dword [ebp - 8]
call fcn.00404bc8
mov eax, dword [ebp - 0xc0]
push eax
mov ecx, 0x4cea0c
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004d95f4
mov eax, dword [0x52be18]
mov edx, 0x4ce77c
call fcn.0040474c
jne 0x4cc187
lea eax, [ebp - 0xc4]
mov edx, dword [ebp - 8]
call fcn.00404bc8
mov eax, dword [ebp - 0xc4]
push eax
mov ecx, 0x4ce9b8
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004d95f4
mov eax, dword [0x52be18]
mov edx, 0x4ce7ac
call fcn.0040474c
jne 0x4cc1bd
lea eax, [ebp - 0xc8]
mov edx, dword [ebp - 8]
call fcn.00404bc8
mov eax, dword [ebp - 0xc8]
push eax
mov ecx, 0x4cea18
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004d95f4
mov eax, dword [0x52be18]
mov edx, 0x4ce7dc
call fcn.0040474c
jne 0x4cc1f3
lea eax, [ebp - 0xcc]
mov edx, dword [ebp - 8]
call fcn.00404bc8
mov eax, dword [ebp - 0xcc]
push eax
mov ecx, 0x4cea28
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004d95f4
mov eax, dword [0x52be18]
mov edx, 0x4ce80c
call fcn.0040474c
jne 0x4cc218
mov eax, dword [ebp - 8]
push eax
mov ecx, 0x4ce93c
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004d92d4
mov eax, dword [0x52be18]
mov edx, 0x4ce83c
call fcn.0040474c
jne 0x4cc24e
lea eax, [ebp - 0xd0]
mov edx, dword [ebp - 8]
call fcn.00404bc8
mov eax, dword [ebp - 0xd0]
push eax
mov ecx, 0x4cea38
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004d95f4
call fcn.004cabf4
mov edx, 0x7d0
mov eax, dword [ebp - 4]
call fcn.004da0d0
test al, al
jne 0x4cc276
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00403d88
jmp 0x4ce2ec
mov edx, 0x4cea48
mov eax, dword [ebp - 4]
call fcn.004d9f54
mov edx, 0x64
mov eax, dword [ebp - 4]
call fcn.004da0d0
test al, al
jne 0x4cc2a6
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00403d88
jmp 0x4ce2ec
mov eax, dword [0x52be18]
mov edx, 0x4ce528
call fcn.0040474c
jne 0x4cc371
mov edx, dword [0x52a0bc]
mov edx, dword [edx]
mov eax, 0x4cea54
call fcn.00404944
test eax, eax
jg 0x4cc2e7
mov edx, dword [0x52a0bc]
mov edx, dword [edx]
mov eax, 0x4cea60
call fcn.00404944
test eax, eax
jle 0x4cc2ff
push 0xffffffffffffff91
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4cea6c
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004cef44
jmp 0x4cc371
mov edx, dword [0x52a0bc]
mov edx, dword [edx]
mov eax, 0x4ce97c
call fcn.00404944
test eax, eax
jle 0x4cc32d
push 0xffffffffffffffe2
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4cea6c
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004cef44
jmp 0x4cc371
mov edx, dword [0x52a0bc]
mov edx, dword [edx]
mov eax, 0x4cea78
call fcn.00404944
test eax, eax
jle 0x4cc35b
push 0xffffffffffffff91
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4cea6c
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004cef44
jmp 0x4cc371
push 0xffffffffffffffe2
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4cea6c
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004cef44
mov eax, dword [0x52be18]
mov edx, 0x4ce58c
call fcn.0040474c
jne 0x4cc39d
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
push eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4cea84
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004cef44
mov eax, dword [0x52be18]
mov edx, 0x4ce5e8
call fcn.0040474c
jne 0x4cc3c9
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
push eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4cea98
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004cf638
mov eax, dword [0x52be18]
mov edx, 0x4ce558
call fcn.0040474c
jne 0x4cc3f5
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
push eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4ceaa8
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004cf868
mov eax, dword [0x52be18]
mov edx, 0x4ce5b8
call fcn.0040474c
jne 0x4cc421
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
push eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4ceabc
mov edx, dword [ebp - 0x14]
in al, dx