Function at 0x525f74
Capabilities:
Access peb ldr_data
Check for time delay via gettickcount
Get number of processors
Terminate thread

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x1b
push 0
push 0
dec ecx
jne 0x525f7c
push ebx
push esi
push edi
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x526edc
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x560cac]
cmp dword [eax], 3
je 0x525fb6
mov eax, dword [0x560cd4]
mov eax, dword [eax]
call fcn.00463204
push eax
call sub.user32.dll_LockWindowUpdate
xor ecx, ecx
push ebp
push 0x526e02
push dword fs:[ecx]
mov dword fs:[ecx], esp
mov esi, dword [ebp - 8]
mov eax, dword [esi + 0x30]
mov ebx, dword [eax + 0x220]
cmp dword [ebx + 0xc], 1
jne 0x525fe0
call fcn.004043c8
jmp 0x526e09
mov edx, dword [eax + 0x44]
test edx, edx
jge 0x526004
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x370]
mov eax, dword [eax + 0x20c]
mov ecx, dword [eax + 0xc]
add ecx, edx
mov edx, ecx
call fcn.00475800
jmp 0x52604a
mov ecx, edx
add ecx, dword [eax + 0x4c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x370]
cmp ecx, dword [eax + 0x4c]
jle 0x52604a
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x370]
mov eax, dword [eax + 0x20c]
mov ecx, dword [eax + 0xc]
add ecx, edx
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x30]
add ecx, dword [edx + 0x4c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x370]
sub ecx, dword [edx + 0x4c]
mov edx, ecx
mov ecx, dword [ebp - 4]
call fcn.00475800
mov eax, dword [0x5611d4]
cmp dword [eax], 3
jne 0x526063
lea eax, [ebp - 0x1c]
mov edx, 0x526ef8
call fcn.00404a18
jmp 0x526070
lea eax, [ebp - 0x1c]
mov edx, 0x526f08
call fcn.00404a18
mov eax, dword [esi + 0x30]
mov edx, dword [eax + 0x80]
lea eax, [ebp - 0x28]
mov ecx, dword [ebp - 0x1c]
call fcn.00404c8c
mov edx, dword [ebp - 0x28]
mov eax, dword [0x560b8c]
mov eax, dword [eax]
mov ecx, dword [eax]
call dword [ecx + 0x58]
test eax, eax
jl 0x526239
xor eax, eax
push ebp
push 0x526127
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x561164]
cmp dword [eax], 0
je 0x52611d
lea eax, [ebp - 0x18]
push eax
mov eax, dword [0x561164]
mov eax, dword [eax]
mov eax, dword [eax + 4]
push eax
call sub.kernel32.dll_GetExitCodeThread
test eax, eax
je 0x52611d
mov eax, dword [esi + 0x30]
mov edx, dword [eax + 0x80]
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x1c]
call fcn.00404c8c
mov edx, dword [ebp - 0x2c]
mov eax, dword [0x561164]
mov eax, dword [eax]
mov eax, dword [eax + 0x40]
call fcn.00404d8c
jne 0x52611d
push 0
mov ecx, 0x526f0c
mov edx, 0x526f14
mov eax, dword [0x561040]
mov eax, dword [eax]
call fcn.0047e2ac
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.004043c8
jmp 0x526e09
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x526145
push 1
mov ecx, 0x526f48
mov edx, 0x526f50
mov eax, dword [0x561040]
mov eax, dword [eax]
call fcn.0047e2ac
dec eax
jne 0x52622f
xor eax, eax
push ebp
push 0x526211
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x561164]
cmp dword [eax], 0
je 0x5261b7
mov eax, dword [0x561164]
mov eax, dword [eax]
call fcn.00543794
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov edx, 0xc8
call fcn.0052cad4
push 0
mov eax, dword [0x561164]
mov eax, dword [eax]
mov eax, dword [eax + 4]
push eax
call sub.kernel32.dll_TerminateThread
mov eax, dword [0x561164]
mov eax, dword [eax]
call fcn.004250b4
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov edx, 0x64
call fcn.0052cad4
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x30]
mov edx, dword [eax + 0x80]
lea eax, [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
call fcn.00404c8c
lea ecx, [ebp - 0x20]
mov eax, dword [0x560b8c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x1c]
call fcn.0041fb4c
push 1
push 1
mov eax, dword [0x560d94]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
call fcn.00557a0c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x52622f
call fcn.004043c8
jmp 0x526e09
mov esi, ebx
mov eax, dword [esi + 0x168]
call fcn.0042c06c
mov ecx, 0x526fa0
mov edx, dword [0x562668]
call fcn.0042f5bc
mov dword [esi + 0xc], 1
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x30]
test eax, eax
je 0x5262d7
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
call fcn.0045fefc
mov esi, eax
dec esi
test esi, esi
jl 0x5262d7
inc esi
xor edi, edi
mov edx, edi
mov eax, dword [ebp - 0x24]
call fcn.0045fec0
mov ebx, eax
mov eax, dword [ebx + 0x228]
cmp eax, dword [ebp - 8]
je 0x5262d3
mov eax, ebx
mov edx, dword [0x4f37ec]
call fcn.00403c58
test al, al
je 0x5262d3
mov eax, dword [ebx + 0x220]
mov eax, dword [eax + 0x168]
call fcn.0042c06c
mov ecx, 0x526fac
mov edx, dword [0x562668]
call fcn.0042f5bc
mov eax, dword [ebx + 0x220]
xor edx, edx
mov dword [eax + 0xc], edx
inc edi
dec esi
jne 0x52627f
mov eax, dword [0x5611d4]
cmp dword [eax], 3
jne 0x5262f0
mov edx, 0x526fb8
mov eax, dword [ebp - 4]
call fcn.005271a4
jmp 0x5262fd
mov edx, 0x526fc8
mov eax, dword [ebp - 4]
call fcn.005271a4
xor ecx, ecx
push ebp
push 0x5269ab
push dword fs:[ecx]
mov dword fs:[ecx], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x338]
mov eax, dword [eax + 0x248]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x334]
xor edx, edx
call fcn.00475e1c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x334]
mov eax, dword [eax + 0x208]
xor edx, edx
call fcn.00475970
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x334]
mov eax, dword [eax + 0x20c]
xor edx, edx
call fcn.00475970
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x338]
xor edx, edx
call fcn.00449df8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x338]
mov dl, 2
call fcn.0045363c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x338]
call fcn.0045ce0c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x334]
call fcn.0045ce0c
mov eax, dword [0x5611d4]
cmp dword [eax], 1
jne 0x52658e
mov al, byte [0x526fd0]
push eax
lea edx, [ebp - 0x44]
mov ebx, dword [ebp - 8]
mov eax, dword [ebx + 0x30]
mov eax, dword [eax + 0x224]
call fcn.0045c8d0
mov eax, dword [ebp - 0x44]
lea ecx, [ebp - 0x40]
mov edx, 4
call fcn.0043ab10
mov edx, dword [ebp - 0x40]
lea eax, [ebp - 0x3c]
call fcn.004158b0
lea ecx, [ebp - 0x3c]
mov eax, dword [0x560d94]
mov eax, dword [eax]
mov eax, dword [eax + 0x2fc]
mov edx, 0x526fdc
mov esi, dword [eax]
call dword [esi + 0x244]
test al, al
je 0x52657e
push 0x526fe8
lea edx, [ebp - 0x50]
mov eax, dword [ebx + 0x30]
mov eax, dword [eax + 0x224]
call fcn.0045c8d0
mov eax, dword [ebp - 0x50]
lea ecx, [ebp - 0x4c]
mov edx, 4
call fcn.0043ab10
push dword [ebp - 0x4c]
push 0x526ff4
push 0
lea eax, [ebp - 0x54]
push eax
mov eax, dword [0x560d94]
mov eax, dword [eax]
mov eax, dword [eax + 0x2fc]
mov edx, 0x527000
call fcn.004b44ec
lea edx, [ebp - 0x58]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebp - 0x58]
push eax
mov eax, dword [0x5611b8]
mov eax, dword [eax]
call fcn.004097d0
mov ecx, eax
add cx, 0xc350
mov eax, dword [0x5610d0]
mov eax, dword [eax]
pop edx
call fcn.00529be8
push dword [ebp - 0x54]
lea eax, [ebp - 0x48]
mov edx, 4
call fcn.00404d00
mov edx, dword [ebp - 0x48]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x330]
call fcn.0045c900
push 0
lea eax, [ebp - 0xc]
push eax
mov eax, dword [0x560d94]
mov eax, dword [eax]
mov eax, dword [eax + 0x2fc]
mov edx, 0x52700c
call fcn.004b44ec
lea edx, [ebp - 0x5c]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebp - 0x5c]
push eax
mov eax, dword [0x5611b8]
mov eax, dword [eax]
call fcn.004097d0
mov ecx, eax
add cx, 0xc350
mov eax, dword [0x5610d0]
mov eax, dword [eax]
pop edx
call fcn.00529be8
push 0
push 0
push 0
lea eax, [ebp - 0x60]
push eax
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x338]
mov ecx, ebx
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov edx, dword [ebp - 0xc]
call fcn.0052c8e4
mov edx, dword [ebp - 0x60]
mov eax, dword [ebx + 0x248]
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov eax, dword [0x5610ac]
cmp byte [eax], 0
je 0x52656b
mov eax, dword [0x56123c]
cmp dword [eax], 4
je 0x52656b
jmp 0x52655a
push 0x46ff
push 0
push 1
lea eax, [ebp - 0x64]
push eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x338]
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov edx, dword [ebp - 0xc]
call fcn.0052c8e4
mov edx, dword [ebp - 0x64]
lea eax, [ebp - 0xc]
call fcn.00404a18
mov edx, dword [ebp - 0xc]
mov eax, 0x527018
call fcn.00404f84
test eax, eax
jg 0x52652a
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x338]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0xd8]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x30]
xor edx, edx
mov dword [eax + 0xc], edx
jmp 0x5268d5
mov eax, dword [0x5611d4]
cmp dword [eax], 2
jne 0x5267ad
mov al, byte [0x526fd0]
push eax
lea edx, [ebp - 0x7c]
mov ebx, dword [ebp - 8]
mov eax, dword [ebx + 0x30]
mov eax, dword [eax + 0x224]
call fcn.0045c8d0
mov eax, dword [ebp - 0x7c]
lea ecx, [ebp - 0x78]
mov edx, 4
call fcn.0043ab10
mov edx, dword [ebp - 0x78]
lea eax, [ebp - 0x74]
call fcn.004158b0
lea ecx, [ebp - 0x74]
mov eax, dword [0x560d94]
mov eax, dword [eax]
mov eax, dword [eax + 0x2fc]
mov edx, 0x526fdc
mov esi, dword [eax]
call dword [esi + 0x244]
test al, al
je 0x52679d
push 0x526fe8
lea edx, [ebp - 0x88]
mov eax, dword [ebx + 0x30]
mov eax, dword [eax + 0x224]
call fcn.0045c8d0
mov eax, dword [ebp - 0x88]
lea ecx, [ebp - 0x84]
mov edx, 4
call fcn.0043ab10
push dword [ebp - 0x84]
push 0x526ff4
push 0
lea eax, [ebp - 0x8c]
push eax
mov eax, dword [0x560d94]
mov eax, dword [eax]
mov eax, dword [eax + 0x2fc]
mov edx, 0x527000
call fcn.004b44ec
lea edx, [ebp - 0x90]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebp - 0x90]
push eax
mov eax, dword [0x5611b8]
mov eax, dword [eax]
call fcn.004097d0
mov ecx, eax
add cx, 0xc350
mov eax, dword [0x5610d0]
mov eax, dword [eax]
pop edx
call fcn.00529be8
push dword [ebp - 0x8c]
lea eax, [ebp - 0x80]
mov edx, 4
call fcn.00404d00
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x330]
call fcn.0045c900
push 0
lea eax, [ebp - 0xc]
push eax
mov eax, dword [0x560d94]
mov eax, dword [eax]
mov eax, dword [eax + 0x2fc]
mov edx, 0x52700c
call fcn.004b44ec
lea edx, [ebp - 0x94]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebp - 0x94]
push eax
mov eax, dword [0x5611b8]
mov eax, dword [eax]
call fcn.004097d0
mov ecx, eax
add cx, 0xc350
mov eax, dword [0x5610d0]
mov eax, dword [eax]
pop edx
call fcn.00529be8
push 0
push 0
push 0
lea eax, [ebp - 0x98]
push eax
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x338]
mov ecx, ebx
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov edx, dword [ebp - 0xc]
call fcn.0052c8e4
mov edx, dword [ebp - 0x98]
mov eax, dword [ebx + 0x248]
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov eax, dword [0x5610ac]
cmp byte [eax], 0
je 0x52678a
mov eax, dword [0x560b80]
cmp byte [eax], 0x42
je 0x52678a
jmp 0x526779
push 0x46ff
push 0
push 1
lea eax, [ebp - 0x9c]
push eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x338]
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov edx, dword [ebp - 0xc]
call fcn.0052c8e4
mov edx, dword [ebp - 0x9c]
lea eax, [ebp - 0xc]
call fcn.00404a18
mov edx, dword [ebp - 0xc]
mov eax, 0x527018
call fcn.00404f84
test eax, eax
jg 0x526743
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x338]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0xd8]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x30]
xor edx, edx
mov dword [eax + 0xc], edx
jmp 0x5268d5
mov eax, dword [0x5611d4]
cmp dword [eax], 3
jne 0x5268d5
mov al, byte [0x526fd0]
push eax
lea eax, [ebp - 0xac]
mov ebx, dword [ebp - 8]
mov edx, dword [ebx + 0x30]
mov edx, dword [edx + 0x80]
call fcn.004158b0
lea ecx, [ebp - 0xac]
mov eax, dword [0x560d94]
mov eax, dword [eax]
mov eax, dword [eax + 0x308]
mov edx, 0x527024
mov esi, dword [eax]
call dword [esi + 0x244]
test al, al
je 0x5268d5
push 0x527030
lea ecx, [ebp - 0xb4]
mov eax, dword [ebx + 0x30]
mov eax, dword [eax + 8]
mov edx, 2
call fcn.0043ab80
push dword [ebp - 0xb4]
push 0x52703c
mov eax, dword [0x560d94]
mov eax, dword [eax]
mov eax, dword [eax + 0x308]
mov edx, 0x527000
call fcn.004b44ec
lea edx, [ebp - 0xb8]
mov ecx, dword [eax]
call dword [ecx + 0x60]
push dword [ebp - 0xb8]
push 0x527048
push 0
lea eax, [ebp - 0xbc]
push eax
mov eax, dword [0x560d94]
mov eax, dword [eax]
mov eax, dword [eax + 0x308]
mov edx, 0x52700c
call fcn.004b44ec
lea edx, [ebp - 0xc0]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebp - 0xc0]
push eax
mov eax, dword [0x5611b8]
mov eax, dword [eax]
call fcn.004097d0
mov ecx, eax
add cx, 0xc350
mov eax, dword [0x5610d0]
mov eax, dword [eax]
pop edx
call fcn.00529be8
push dword [ebp - 0xbc]
lea eax, [ebp - 0xb0]
mov edx, 6
call fcn.00404d00
mov edx, dword [ebp - 0xb0]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x338]
mov eax, dword [eax + 0x248]
mov ecx, dword [eax]
call dword [ecx + 0x2c]
xor eax, eax
mov dword [ebp - 0x10], eax
xor eax, eax
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x14]
push eax
push 1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x338]
call fcn.00463204
push eax
call sub.user32.dll_GetScrollRange
mov ebx, dword [ebp - 0x10]
sub ebx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x334]
mov eax, dword [edx + 0x4c]
mov ecx, eax
add ecx, 5
cmp ebx, ecx
jge 0x52691c
mov ebx, eax
jmp 0x526975
mov eax, edx
mov dl, 1
call fcn.00475e1c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x334]
mov eax, dword [eax + 0x20c]
mov dl, 1
call fcn.00475970
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x334]
mov eax, dword [eax + 0x20c]
mov byte [eax + 0x1d], 1
mov byte [eax + 0x1f], 1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x338]
xor edx, edx
call fcn.0045363c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x338]
mov edx, 0x126
call fcn.0045c08c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x338]
mov edx, ebx
call fcn.0045c0b0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x338]
call fcn.0045ce0c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x334]
call fcn.0045ce0c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5269b5
lea ecx, [ebp - 0xc8]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 8]
mov edx, 4
call fcn.0043ab80
mov eax, dword [ebp - 0xc8]
call fcn.004097d0
lea edx, [ebp - 0xc4]
call fcn.00409694
mov edx, dword [ebp - 0xc4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30c]
call fcn.0045c900
mov eax, dword [0x561058]
cmp dword [eax], 0
jne 0x526a1e
mov ecx, dword [0x561040]
mov ecx, dword [ecx]
mov dl, 1
mov eax, dword [0x522d84]
call fcn.004767e4
mov edx, dword [0x561058]
mov dword [edx], eax
mov eax, dword [0x561058]
mov eax, dword [eax]
call fcn.0047ab3c
mov eax, dword [0x561058]
mov eax, dword [eax]
call fcn.0045ce0c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x320]
call fcn.0045ce0c
mov eax, dword [0x5611d4]
cmp dword [eax], 1
jne 0x526b5e
mov eax, dword [0x56123c]
cmp dword [eax], 0
jle 0x526b0a
mov eax, dword [0x56123c]
cmp dword [eax], 4
jge 0x526b0a
mov eax, dword [0x560b80]
cmp byte [eax], 0x42
je 0x526ac4
mov eax, dword [0x56123c]
mov eax, dword [eax]
push eax
mov eax, dword [0x5611b8]
mov eax, dword [eax]
push eax
push 1
push 0
mov eax, dword [0x560d94]
mov eax, dword [eax]
mov ecx, dword [eax + 0x2fc]
mov eax, dword [0x560cd4]
mov eax, dword [eax]
mov edx, dword [eax + 0x310]
mov eax, dword [0x5610d0]
mov eax, dword [eax]
call fcn.0052a464
test al, al
jne 0x526d65
call fcn.004043c8
jmp 0x526e09
push 4
mov eax, dword [0x5611b8]
mov eax, dword [eax]
push eax
push 1
push 0
mov eax, dword [0x560d94]
mov eax, dword [eax]
mov ecx, dword [eax + 0x2fc]
mov eax, dword [0x560cd4]
mov eax, dword [eax]
mov edx, dword [eax + 0x310]
mov eax, dword [0x5610d0]
mov eax, dword [eax]
call fcn.0052a464
test al, al
jne 0x526d65
call fcn.004043c8
jmp 0x526e09
mov eax, dword [0x56123c]
cmp dword [eax], 4
jne 0x526d65
push 4
mov eax, dword [0x5611b8]
mov eax, dword [eax]
push eax
push 1
push 0
mov eax, dword [0x560d94]
mov eax, dword [eax]
mov ecx, dword [eax + 0x2fc]
mov eax, dword [0x560cd4]
mov eax, dword [eax]
mov edx, dword [eax + 0x310]
mov eax, dword [0x5610d0]
mov eax, dword [eax]
call fcn.0052a464
test al, al
jne 0x526d65
call fcn.004043c8
jmp 0x526e09
mov eax, dword [0x5611d4]
cmp dword [eax], 2
jne 0x526c39
mov eax, dword [0x56123c]
cmp dword [eax], 4
jne 0x526b81
mov eax, dword [0x56123c]
mov dword [eax], 1
mov eax, dword [0x56123c]
cmp dword [eax], 0
jle 0x526d65
mov eax, dword [0x56123c]
cmp dword [eax], 4
jge 0x526d65
mov eax, dword [0x560b80]
cmp byte [eax], 0x42
je 0x526bf3
mov eax, dword [0x56123c]
mov eax, dword [eax]
push eax
mov eax, dword [0x5611b8]
mov eax, dword [eax]
push eax
push 1
push 0
mov eax, dword [0x560d94]
mov eax, dword [eax]
mov ecx, dword [eax + 0x2fc]
mov eax, dword [0x560cd4]
mov eax, dword [eax]
mov edx, dword [eax + 0x310]
mov eax, dword [0x5610d0]
mov eax, dword [eax]
call fcn.0052a464
test al, al
jne 0x526d65
call fcn.004043c8
jmp 0x526e09
push 4
mov eax, dword [0x5611b8]
mov eax, dword [eax]
push eax
push 1
push 0
mov eax, dword [0x560d94]
mov eax, dword [eax]
mov ecx, dword [eax + 0x2fc]
mov eax, dword [0x560cd4]
mov eax, dword [eax]
mov edx, dword [eax + 0x310]
mov eax, dword [0x5610d0]
mov eax, dword [eax]
call fcn.0052a464
test al, al
jne 0x526d65
call fcn.004043c8
jmp 0x526e09
mov eax, dword [0x5611d4]
cmp dword [eax], 3
jne 0x526d65
mov eax, dword [0x5611b8]
mov eax, dword [eax]
push eax
mov eax, dword [0x560d94]
mov eax, dword [eax]
mov ecx, dword [eax + 0x308]
mov eax, dword [0x560cd4]
mov eax, dword [eax]
mov edx, dword [eax + 0x310]
mov eax, dword [0x5610d0]
mov eax, dword [eax]
call fcn.0052b780
test al, al
jne 0x526c83
call fcn.004043c8
jmp 0x526e09
mov eax, dword [0x560cd4]
mov eax, dword [eax]
mov eax, dword [eax + 0x310]
mov edx, 0x7c
call fcn.004cb37c
mov edx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x360]
mov ecx, dword [eax]
call dword [ecx + 0xec]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x360]
mov eax, dword [eax + 0x214]
mov ecx, 0xa
cdq
idiv ecx
mov ebx, eax
mov eax, ebx
mov ecx, 0x3c
cdq
idiv ecx
mov dword [ebp - 0xd4], eax
fild dword [ebp - 0xd4]
add esp, 0xfffffff4
fstp xword [esp]
wait
lea edx, [ebp - 0xd0]
mov eax, 0x527054
call fcn.0040affc
push dword [ebp - 0xd0]
push 0x527060
mov eax, ebx
mov ecx, 0x3c
cdq
idiv ecx
mov dword [ebp - 0xd4], edx
fild dword [ebp - 0xd4]
add esp, 0xfffffff4
fstp xword [esp]
wait
lea edx, [ebp - 0xd8]
mov eax, 0x527054
call fcn.0040affc
push dword [ebp - 0xd8]
lea eax, [ebp - 0xcc]
mov edx, 3
call fcn.00404d00
mov edx, dword [ebp - 0xcc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x35c]
call fcn.0045c900
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2f8]
mov dl, 1
call fcn.00438ed8
call sub.kernel32.dll_GetTickCount_1
mov esi, eax
call sub.kernel32.dll_GetTickCount_1
mov ebx, eax
mov eax, dword [0x561040]
mov eax, dword [eax]
call fcn.0047df70
sub ebx, esi
cmp ebx, 0x64
jbe 0x526d6c
mov eax, dword [0x561058]
cmp dword [eax], 0
je 0x526d9c
mov eax, dword [0x561058]
mov eax, dword [eax]
call fcn.00403acc
xor eax, eax
push ebp
push 0x526dc9
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x560cd4]
mov eax, dword [eax]
mov eax, dword [eax + 0x310]
mov edx, dword [eax]
call dword [edx + 0xc4]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x526dd3
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x526e09
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x320]
xor edx, edx
call fcn.00446c24
mov eax, dword [0x560cac]
cmp dword [eax], 3
je 0x526e01
push 0
call sub.user32.dll_LockWindowUpdate
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x526ee6
lea eax, [ebp - 0xd8]
call fcn.00404980
lea eax, [ebp - 0xd0]
mov edx, 9
call fcn.004049a4
lea eax, [ebp - 0xac]
call fcn.00411164
lea eax, [ebp - 0x9c]
mov edx, 5
call fcn.004049a4
lea eax, [ebp - 0x88]
call fcn.00404980
lea eax, [ebp - 0x84]
mov edx, 2
call fcn.004049a4
lea eax, [ebp - 0x7c]
call fcn.00404980
lea eax, [ebp - 0x78]
call fcn.00404980
lea eax, [ebp - 0x74]
call fcn.00411164
lea eax, [ebp - 0x64]
mov edx, 5
call fcn.004049a4
lea eax, [ebp - 0x50]
call fcn.00404980
lea eax, [ebp - 0x4c]
mov edx, 2
call fcn.004049a4
lea eax, [ebp - 0x44]
call fcn.00404980
lea eax, [ebp - 0x40]
call fcn.00404980
lea eax, [ebp - 0x3c]
call fcn.00411164
lea eax, [ebp - 0x2c]
mov edx, 2
call fcn.004049a4
lea eax, [ebp - 0x20]
mov edx, 2
call fcn.004049a4
lea eax, [ebp - 0xc]
call fcn.00404980
ret