Function at 0x4eda40
Capabilities:
Access peb ldr_data
Get number of processors
Hide graphical window
Resolve function by parsing pe exports
Terminate process

Disassembly:
push 0xffffffffffffffff
push 0x5a2b22
mov eax, dword fs:[0]
push eax
sub esp, 0x230
mov eax, dword [0x60aecc]
xor eax, esp
mov dword [esp + 0x22c], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x60aecc]
xor eax, esp
push eax
lea eax, [esp + 0x244]
mov dword fs:[0], eax
mov esi, ecx
xor ebx, ebx
mov dword [esp + 0x18], ebx
mov eax, dword [esi]
mov byte [eax + 0x68], bl
mov ecx, dword [esi]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0x3f0]
push 0xffffffffffffffff
push eax
mov dword [esp + 0x30], eax
call dword [sym.imp.kernel32.dll_WaitForSingleObject]
mov edi, eax
mov dword [esp + 0x2c], edi
mov ebp, dword [esi]
add ebp, 0x9e
mov dword [esp + 0x24c], ebx
mov bl, byte [ebp]
mov dword [esp + 0x30], ebp
mov byte [esp + 0x80], bl
mov dword [esp + 0x84], ebp
mov byte [ebp], 1
test bl, bl
mov byte [esp + 0x24c], 1
je 0x4edaf0
push 0x32
call fcn.004988c0
mov ecx, eax
call fcn.004987d0
mov byte [ebp], bl
jmp 0x4eeffa
call fcn.0050d080
test al, al
je 0x4edb09
mov byte [esp + 0x25c], 0
mov byte [esp + 0x264], 1
call fcn.004988c0
mov ebx, eax
test ebx, ebx
je 0x4eeff6
mov eax, dword [ebx]
test eax, eax
je 0x4eeff6
cmp byte [eax + 0x3b], 0
je 0x4edb4c
push 0x64
call fcn.004988c0
mov ecx, eax
call fcn.004987d0
test edi, edi
mov byte [ebp], 0
jne 0x4ef009
mov ecx, dword [esp + 0x28]
push ecx
jmp 0x4ef003
mov edx, dword [esi]
cmp byte [edx + 0x9d], 0
je 0x4edb90
call fcn.004d9dc0
test al, al
je 0x4edb7b
push 0x30
push str.Error
push str.You_cannot_run_this_application_at_your_current_screen_resolution_or_bit_depth__out_of_memory_._Change_your_display_settings_and_run_again._Closing_other_applications_might_also_help.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0xffffffffffffffff
call fcn.00560f29
push str.SetDisplay_Forcing_Fullscreen__MEMORY_
call fcn.004dfae0
add esp, 4
mov byte [esp + 0x25c], 1
mov eax, dword [ebx]
cmp byte [eax + 0x3a], 0
mov cl, byte [eax + 0x36]
mov byte [esp + 0x17], cl
je 0x4edbb7
test cl, cl
je 0x4edbb0
cmp byte [eax + 0x39], 0
je 0x4edbb0
mov byte [esp + 0x17], 1
jmp 0x4edbc9
mov byte [esp + 0x17], 0
jmp 0x4edbbb
test cl, cl
jne 0x4edbc9
cmp byte [esp + 0x260], 0
je 0x4eeff6
call fcn.004988c0
mov ebx, dword [eax]
cmp byte [ebx + 4], 0
je 0x4edcf5
cmp byte [ebx + 5], 0
jne 0x4edcf5
mov eax, dword [ebx + 0x12b8]
test eax, eax
je 0x4edce9
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x4edc11
push str.Error:_mExternalWindowParent_is_lost__exiting_
call fcn.004dfae0
add esp, 4
push 0xffffffffffffffff
call fcn.00560f29
cmp byte [esp + 0x25c], 0
mov edi, dword [ebx + 0x12b4]
je 0x4edc2c
push 0
push edi
call dword [sym.imp.USER32.dll_SetParent]
jmp 0x4edc9e
mov ecx, dword [ebx + 0x12b8]
push ecx
push edi
mov byte [esp + 0x270], 1
call dword [sym.imp.USER32.dll_SetParent]
push 0
push 0xffffffffffffffec
push edi
call dword [sym.imp.USER32.dll_SetWindowLongA]
push 0x50000000
push 0xfffffffffffffff0
push edi
call dword [sym.imp.USER32.dll_SetWindowLongA]
xor eax, eax
lea edx, [esp + 0x18]
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
mov eax, dword [ebx + 0x12b8]
push edx
push eax
call dword [sym.imp.USER32.dll_GetClientRect]
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x20]
sub ecx, dword [esp + 0x1c]
sub eax, dword [esp + 0x18]
push 1
push ecx
push eax
push 0
push 0
push edi
call dword [sym.imp.USER32.dll_MoveWindow]
mov dl, byte [esp + 0x25c]
mov ecx, dword [esi]
mov eax, dword [ebx + 0x12b4]
mov ecx, dword [ecx + 0xc]
neg dl
mov dword [ecx + 8], eax
sbb edx, edx
and edx, 8
push edx
push 0xffffffffffffffec
push edi
call dword [sym.imp.USER32.dll_SetWindowLongA]
mov al, byte [esp + 0x25c]
neg al
sbb eax, eax
and eax, 0x30000000
add eax, 0x50000000
push eax
push 0xfffffffffffffff0
push edi
call dword [sym.imp.USER32.dll_SetWindowLongA]
mov edi, dword [esp + 0x2c]
jmp 0x4edcf5
mov ecx, dword [esi]
mov eax, dword [ecx + 0xc]
mov dword [eax + 8], 0
mov edx, dword [esi]
cmp byte [edx + 0x8d], 0
je 0x4edd07
push 0xffffffffffffffff
call fcn.00560f29
call fcn.004988c0
mov eax, dword [eax]
cmp dword [eax + 0x12b8], 0
je 0x4edd39
call fcn.004988c0
mov ecx, eax
call fcn.004987c0
mov ecx, dword [esi]
mov edx, dword [ecx + 0x98]
sub edx, eax
cmp edx, 0x3e8
jb 0x4eeff6
cmp byte [esp + 0x25c], 0
mov ecx, dword [esi]
mov dword [ecx + 0x94], 0
jne 0x4edd9d
mov edx, dword [esi]
mov eax, dword [edx + 0xc]
cmp dword [eax + 0x1d8], 0xffffffff
je 0x4edd9d
call fcn.004988c0
mov eax, dword [eax]
cmp dword [eax + 0x12b8], 0
je 0x4edd88
push 0x30
push str.Error
push str.You_cannot_run_this_application_when_your_video_mode_is_8_bits_or_less._Change_your_display_settings_and_run_again.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0xffffffffffffffff
call fcn.00560f29
push str.SetDisplay_Forcing_Fullscreen__PALLETTED_
call fcn.004dfae0
add esp, 4
mov byte [esp + 0x25c], 1
mov eax, dword [esi]
mov cl, byte [esp + 0x25c]
cmp byte [eax + 0x5c], cl
mov edi, dword [esp + 0x258]
jne 0x4eddf2
mov edx, dword [eax + 0x30]
sub edx, dword [eax + 0x28]
cmp dword [esp + 0x254], edx
jne 0x4eddf2
mov ecx, dword [eax + 0x34]
sub ecx, dword [eax + 0x2c]
cmp edi, ecx
jne 0x4eddf2
cmp byte [esp + 0x260], 0
jne 0x4eddf2
cmp dword [esp + 0x2c], 0
mov byte [eax + 0x68], 1
mov byte [ebp], 0
jne 0x4ef009
mov edx, dword [esp + 0x28]
push edx
jmp 0x4ef003
call fcn.004d9dc0
test al, al
jne 0x4edec2
cmp byte [esp + 0x25c], al
jne 0x4edf1a
test edi, edi
mov dword [esp + 0x18], edi
fild dword [esp + 0x18]
jge 0x4ede1e
fadd dword [0x5aa24c]
fmul dword [ebx + 8]
mov ecx, dword [esp + 0x254]
fnstcw word [esp + 0x34]
movzx eax, word [esp + 0x34]
or eax, 0xc00
test ecx, ecx
mov dword [esp + 0x18], eax
fldcw word [esp + 0x18]
fistp qword [esp + 0x18]
mov eax, dword [esp + 0x18]
push eax
fldcw word [esp + 0x38]
fild dword [esp + 0x258]
jge 0x4ede5c
fadd dword [0x5aa24c]
fmul dword [ebx + 8]
fnstcw word [esp + 0x38]
movzx eax, word [esp + 0x38]
or eax, 0xc00
mov dword [esp + 0x1c], eax
mov eax, dword [esi]
fldcw word [esp + 0x1c]
mov ecx, dword [eax + 0xc]
fistp qword [esp + 0x1c]
mov edx, dword [esp + 0x1c]
push edx
fldcw word [esp + 0x3c]
call fcn.004eb720
test al, al
je 0x4edecc
call fcn.004988c0
mov eax, dword [eax]
cmp dword [eax + 0x12b8], 0
je 0x4edebb
push 0x30
push str.Error
push str.You_cannot_run_this_application_at_your_current_screen_resolution._Change_your_display_settings_and_run_again.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0xffffffffffffffff
call fcn.00560f29
push str.SetDisplay_Forcing_Fullscreen__SMALL_
jmp 0x4edf0a
cmp byte [esp + 0x25c], 0
jne 0x4edf1a
mov ecx, dword [esi]
mov edx, dword [ecx + 0xc]
cmp byte [edx + 0x1d2], 0
je 0x4edf1a
call fcn.004988c0
mov eax, dword [eax]
cmp dword [eax + 0x12b8], 0
je 0x4edf05
push 0x30
push str.Error
push str.You_cannot_run_this_application_at_your_current_screen_resolution_or_bit_depth__out_of_memory_._Change_your_display_settings_and_run_again.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0xffffffffffffffff
call fcn.00560f29
push str.SetDisplay_Forcing_Fullscreen__MEMORY_
call fcn.004dfae0
mov byte [esp + 0x260], 1
add esp, 4
call fcn.004988c0
mov ecx, eax
call fcn.00498c10
mov ecx, eax
call fcn.004f6920
call fcn.004988c0
mov eax, dword [eax]
mov byte [eax + 0x35], 1
call fcn.004988c0
mov eax, dword [eax]
mov edi, dword [eax + 0x12b4]
call fcn.004988c0
mov eax, dword [eax]
mov bl, byte [esp + 0x25c]
xor ebp, ebp
cmp dword [eax + 0x12b8], ebp
jne 0x4edf91
xor ecx, ecx
test bl, bl
setne cl
lea ecx, [ecx*8 + 0x40000]
push ecx
push 0xffffffffffffffec
push edi
call dword [sym.imp.USER32.dll_SetWindowLongA]
mov dl, bl
neg dl
sbb edx, edx
and edx, 0x7f320000
add edx, 0xce0000
push edx
push 0xfffffffffffffff0
push edi
call dword [sym.imp.USER32.dll_SetWindowLongA]
mov eax, dword [esi]
mov byte [eax + 0x5c], bl
mov ecx, dword [esi]
mov dword [ecx + 0x18], ebp
mov edx, dword [esi]
mov eax, dword [esp + 0x254]
mov dword [edx + 0x20], eax
mov ecx, dword [esi]
mov dword [ecx + 0x1c], ebp
mov edx, dword [esi]
mov eax, dword [esp + 0x258]
mov dword [edx + 0x24], eax
mov ecx, dword [esi]
mov edx, dword [ecx + 0x18]
mov dword [ecx + 0x28], edx
mov edx, dword [ecx + 0x1c]
mov dword [ecx + 0x2c], edx
mov edx, dword [ecx + 0x20]
mov dword [ecx + 0x30], edx
lea eax, [ecx + 0x18]
mov eax, dword [eax + 0xc]
mov dword [ecx + 0x34], eax
add ecx, 0x28
mov ecx, dword [esi]
mov edx, dword [ecx + 0x18]
mov dword [ecx + 0x48], edx
mov edx, dword [ecx + 0x1c]
mov dword [ecx + 0x4c], edx
mov edx, dword [ecx + 0x20]
lea eax, [ecx + 0x18]
mov dword [ecx + 0x50], edx
mov eax, dword [eax + 0xc]
add ecx, 0x48
mov dword [ecx + 0xc], eax
mov ecx, dword [esi]
mov edx, dword [ecx + 0x18]
mov dword [ecx + 0x38], edx
mov edx, dword [ecx + 0x1c]
lea eax, [ecx + 0x18]
mov dword [ecx + 0x3c], edx
mov edx, dword [eax + 8]
add ecx, 0x38
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
mov ecx, dword [esi]
mov dword [ecx], ebp
mov edx, dword [esi]
mov dword [edx + 4], ebp
mov eax, dword [esi]
mov dword [eax + 8], ebp
mov ecx, dword [esi]
push ecx
mov byte [ecx + 0x69], 0
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x5b3664
call fcn.00496da0
push ecx
mov ecx, esp
mov dword [esp + 0x3c], esp
push str.dxbroken
mov byte [esp + 0x258], 2
call fcn.00496da0
mov byte [esp + 0x254], 1
call fcn.00499d50
mov edx, dword [esi]
mov ecx, dword [edx + 0xc]
add esp, 8
call fcn.00508260
mov eax, dword [esi]
cmp byte [eax + 0x6a], 0
je 0x4ee098
call fcn.004988c0
mov eax, dword [eax]
mov ecx, dword [eax + 0x12b4]
push 0x30
push str.Reconfiguring
push 0x5c9be0
push ecx
call dword [sym.imp.USER32.dll_MessageBoxA]
mov edx, dword [esi]
mov byte [edx + 0x6a], 0
mov eax, dword [esi]
cmp byte [eax + 0x9d], 0
mov ebp, 0x20
je 0x4ee0b3
mov ebp, 0x10
cmp byte [esp + 0x268], 0
mov ebx, 1
je 0x4ee0c7
mov ebx, 3
cmp byte [eax + 0xf5], 0
je 0x4ee0d3
or ebx, 4
mov ecx, dword [esp + 0x258]
mov edx, dword [esp + 0x254]
push ebx
push ebp
push ecx
mov ecx, dword [esp + 0x268]
push edx
push ecx
mov ecx, dword [eax + 0xc]
push edi
call fcn.00509740
test al, al
jne 0x4ee147
lea ebx, [ebx]
test bl, 4
mov edx, dword [esi]
je 0x4eebbd
mov ecx, dword [esp + 0x258]
mov byte [edx + 0xf4], 0
mov eax, dword [esi]
mov edx, dword [esp + 0x254]
and ebx, 0xfffffffb
push ebx
push ebp
push ecx
mov byte [eax + 0xf5], 0
mov eax, dword [esp + 0x268]
mov ecx, dword [esi]
mov ecx, dword [ecx + 0xc]
push edx
push eax
push edi
call fcn.00509740
test al, al
je 0x4ee100
mov eax, dword [esi]
lea ecx, [esp + 0x88]
push ecx
push edi
mov byte [eax + 0x8c], 0
call dword [sym.imp.USER32.dll_GetWindowRect]
cmp byte [esp + 0x268], 0
jne 0x4ee1ac
cmp dword [esp + 0x88], 0
jne 0x4ee192
cmp dword [esp + 0x8c], 0
jne 0x4ee192
cmp byte [esp + 0x25c], 0
jne 0x4ee192
push 1
push edi
call fcn.004ed0c0
add esp, 8
push 5
push edi
call dword [sym.imp.USER32.dll_ShowWindow]
cmp byte [esp + 0x25c], 0
je 0x4ee1ac
push edi
call dword [sym.imp.USER32.dll_SetActiveWindow]
mov edx, dword [esi]
mov ecx, dword [edx + 0xc]
call fcn.00508010
mov ecx, dword [esi]
mov dword [ecx], eax
mov eax, dword [esi]
mov edx, dword [eax + 0xc]
mov ecx, dword [edx + 0x40]
mov dword [eax + 4], ecx
mov eax, dword [esi]
mov ecx, dword [eax + 0xc]
mov ecx, dword [ecx + 0x44]
push 0xec
xor ebp, ebp
lea edx, [esp + 0x158]
push ebp
push edx
mov dword [eax + 8], ecx
call fcn.0055da20
mov eax, dword [esi]
mov eax, dword [eax + 8]
mov ecx, dword [eax]
add esp, 0xc
lea edx, [esp + 0x154]
push edx
push eax
mov eax, dword [ecx + 0xc]
call eax
test dword [esp + 0x154], 0x4000
je 0x4ee213
mov ecx, dword [esi]
mov byte [ecx + 0x8e], 1
test dword [esp + 0x1ac], 0x200
jne 0x4ee229
mov edx, dword [esi]
mov byte [edx + 0x8f], 1
test byte [esp + 0x1b0], 0x20
je 0x4ee23c
mov eax, dword [esi]
mov byte [eax + 0x90], 1
cmp dword [esp + 0x1e4], 0x40
jae 0x4ee24f
mov ecx, dword [esi]
mov byte [ecx + 0x90], 1
mov eax, dword [esi]
mov ecx, dword [eax + 8]
mov edx, dword [ecx]
add eax, 0x10
push eax
mov eax, dword [edx + 0x24]
push ecx
call eax
mov edi, eax
cmp edi, ebp
je 0x4ee297
cmp edi, 0x8876017c
jne 0x4ee27a
call fcn.004988c0
mov ecx, eax
call fcn.004988b0
push 0x2b8
push str..dxdisplayhandler.cpp
push edi
push 0x5a8554
push 0x5c85f0
call fcn.004dfae0
add esp, 0x14
mov eax, dword [esi]
mov ecx, dword [eax + 0x10]
mov dword [eax + 0x58], ecx
mov edx, dword [esi]
mov eax, dword [edx + 8]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x50]
push 0xffffffffffffffff
push 0x8b
push eax
call edx
mov edi, eax
cmp edi, ebp
je 0x4ee2ea
cmp edi, 0x8876017c
jne 0x4ee2cd
call fcn.004988c0
mov ecx, eax
call fcn.004988b0
push 0x2c1
push str..dxdisplayhandler.cpp
push edi
push 0x5a8554
push 0x5c85f0
call fcn.004dfae0
add esp, 0x14
push 1
mov ecx, esi
call fcn.004ec340
push 1
mov ecx, esi
call fcn.004ec2e0
mov eax, dword [esi]
mov eax, dword [eax + 8]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x50]
push 1
push 0x8d
push eax
call edx
mov edi, eax
cmp edi, ebp
je 0x4ee347
cmp edi, 0x8876017c
jne 0x4ee32a
call fcn.004988c0
mov ecx, eax
call fcn.004988b0
push 0x2c8
push str..dxdisplayhandler.cpp
push edi
push 0x5a8554
push 0x5c85f0
call fcn.004dfae0
add esp, 0x14
mov eax, dword [esi]
mov eax, dword [eax + 8]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x50]
push 1
push 0x89
push eax
call edx
mov edi, eax
cmp edi, ebp
je 0x4ee392
cmp edi, 0x8876017c
jne 0x4ee375
call fcn.004988c0
mov ecx, eax
call fcn.004988b0
push 0x2c9
push str..dxdisplayhandler.cpp
push edi
push 0x5a8554
push 0x5c85f0
call fcn.004dfae0
add esp, 0x14
mov eax, dword [esi]
mov eax, dword [eax + 8]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x50]
push 1
push 0x8f
push eax
call edx
mov edi, eax
cmp edi, ebp
je 0x4ee3dd
cmp edi, 0x8876017c
jne 0x4ee3c0
call fcn.004988c0
mov ecx, eax
call fcn.004988b0
push 0x2ca
push str..dxdisplayhandler.cpp
push edi
push 0x5a8554
push 0x5c85f0
call fcn.004dfae0
add esp, 0x14
mov eax, dword [esi]
mov eax, dword [eax + 8]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x50]
push ebp
push 0x91
push eax
call edx
mov edi, eax
cmp edi, ebp
je 0x4ee427
cmp edi, 0x8876017c
jne 0x4ee40a
call fcn.004988c0
mov ecx, eax
call fcn.004988b0
push 0x2cb
push str..dxdisplayhandler.cpp
push edi
push 0x5a8554
push 0x5c85f0
call fcn.004dfae0
add esp, 0x14
mov eax, dword [esi]
mov eax, dword [eax + 8]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x50]
push ebp
push 0x93
push eax
call edx
mov edi, eax
cmp edi, ebp
je 0x4ee471
cmp edi, 0x8876017c
jne 0x4ee454
call fcn.004988c0
mov ecx, eax
call fcn.004988b0
push 0x2cc
push str..dxdisplayhandler.cpp
push edi
push 0x5a8554
push 0x5c85f0
call fcn.004dfae0
add esp, 0x14
mov eax, dword [esi]
mov eax, dword [eax + 8]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x50]
push ebp
push 0x92
push eax
call edx
mov edi, eax
cmp edi, ebp
je 0x4ee4bb
cmp edi, 0x8876017c
jne 0x4ee49e
call fcn.004988c0
mov ecx, eax
call fcn.004988b0
push 0x2cd
push str..dxdisplayhandler.cpp
push edi
push 0x5a8554
push 0x5c85f0
call fcn.004dfae0
add esp, 0x14
mov eax, dword [esi]
mov eax, dword [eax + 8]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x50]
push ebp
push 0x94
push eax
call edx
mov edi, eax
cmp edi, ebp
je 0x4ee505
cmp edi, 0x8876017c
jne 0x4ee4e8
call fcn.004988c0
mov ecx, eax
call fcn.004988b0
push 0x2ce
push str..dxdisplayhandler.cpp
push edi
push 0x5a8554
push 0x5c85f0
call fcn.004dfae0
add esp, 0x14
mov eax, dword [esi]
mov eax, dword [eax + 8]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x50]
push 5
push 0x13
push eax
call edx
mov edi, eax
cmp edi, ebp
je 0x4ee54d
cmp edi, 0x8876017c
jne 0x4ee530
call fcn.004988c0
mov ecx, eax
call fcn.004988b0
push 0x2cf
push str..dxdisplayhandler.cpp
push edi
push 0x5a8554
push 0x5c85f0
call fcn.004dfae0
add esp, 0x14
mov eax, dword [esi]
mov eax, dword [eax + 8]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x50]
push 6
push 0x14
push eax
call edx
mov edi, eax
cmp edi, ebp
je 0x4ee595
cmp edi, 0x8876017c
jne 0x4ee578
call fcn.004988c0
mov ecx, eax
call fcn.004988b0
push 0x2d0
push str..dxdisplayhandler.cpp
push edi
push 0x5a8554
push 0x5c85f0
call fcn.004dfae0
add esp, 0x14
mov eax, dword [esi]
mov eax, dword [eax + 8]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x50]
push 1
push 0x1b
push eax
call edx
mov edi, eax
cmp edi, ebp
je 0x4ee5dd
cmp edi, 0x8876017c
jne 0x4ee5c0
call fcn.004988c0
mov ecx, eax
call fcn.004988b0
push 0x2d1
push str..dxdisplayhandler.cpp
push edi
push 0x5a8554
push 0x5c85f0
call fcn.004dfae0
add esp, 0x14
mov eax, dword [esi]
mov eax, dword [eax + 8]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x50]
push ebp
push 0x80
push eax
call edx
mov edi, eax
cmp edi, ebp
je 0x4ee627
cmp edi, 0x8876017c
jne 0x4ee60a
call fcn.004988c0
mov ecx, eax
call fcn.004988b0
push 0x2d3
push str..dxdisplayhandler.cpp
push edi
push 0x5a8554
push 0x5c85f0
call fcn.004dfae0
add esp, 0x14
mov eax, dword [esi]
mov eax, dword [eax + 8]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x94]
push 2
push 0x10
push ebp
push eax
call edx
mov edi, eax
cmp edi, ebp
je 0x4ee673
cmp edi, 0x8876017c
jne 0x4ee656
call fcn.004988c0
mov ecx, eax
call fcn.004988b0
push 0x2d5
push str..dxdisplayhandler.cpp
push edi
push 0x5a8554
push 0x5c85f0
call fcn.004dfae0
add esp, 0x14
mov eax, dword [esi]
mov eax, dword [eax + 8]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x94]
push 2
push 0x11
push ebp
push eax
call edx
mov edi, eax
cmp edi, ebp
je 0x4ee6bf
cmp edi, 0x8876017c
jne 0x4ee6a2
call fcn.004988c0
mov ecx, eax
call fcn.004988b0
push 0x2d6
push str..dxdisplayhandler.cpp
push edi
push 0x5a8554
push 0x5c85f0
call fcn.004dfae0
add esp, 0x14
mov eax, dword [esi]
mov eax, dword [eax + 8]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x94]
push 3
push 0x12
push ebp
push eax
call edx
mov edi, eax
cmp edi, ebp
je 0x4ee70b
cmp edi, 0x8876017c
jne 0x4ee6ee
call fcn.004988c0
mov ecx, eax
call fcn.004988b0
push 0x2d7
push str..dxdisplayhandler.cpp
push edi
push 0x5a8554
push 0x5c85f0
call fcn.004dfae0
add esp, 0x14
mov eax, dword [esi]
mov eax, dword [eax + 8]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x94]
push 2
push 2
push ebp
push eax
call edx
mov edi, eax
cmp edi, ebp
je 0x4ee757
cmp edi, 0x8876017c
jne 0x4ee73a
call fcn.004988c0
mov ecx, eax
call fcn.004988b0
push 0x2d8
push str..dxdisplayhandler.cpp
push edi
push 0x5a8554
push 0x5c85f0
call fcn.004dfae0
add esp, 0x14
mov eax, dword [esi]
mov eax, dword [eax + 8]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x94]
push 1
push 3
push ebp
push eax
call edx
mov edi, eax
cmp edi, ebp
je 0x4ee7a3
cmp edi, 0x8876017c
jne 0x4ee786
call fcn.004988c0
mov ecx, eax
call fcn.004988b0
push 0x2d9
push str..dxdisplayhandler.cpp
push edi
push 0x5a8554
push 0x5c85f0
call fcn.004dfae0
add esp, 0x14
mov eax, dword [esi]
mov eax, dword [eax + 8]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x94]
push 4
push 1
push ebp
push eax
call edx
mov edi, eax
cmp edi, ebp
je 0x4ee7ef
cmp edi, 0x8876017c
jne 0x4ee7d2
call fcn.004988c0
mov ecx, eax
call fcn.004988b0
push 0x2da
push str..dxdisplayhandler.cpp
push edi
push 0x5a8554
push 0x5c85f0
call fcn.004dfae0
add esp, 0x14
mov eax, dword [esi]
mov eax, dword [eax + 8]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x94]
push 2
push 5
push ebp
push eax
call edx
mov edi, eax
cmp edi, ebp
je 0x4ee83b
cmp edi, 0x8876017c
jne 0x4ee81e
call fcn.004988c0
mov ecx, eax
call fcn.004988b0
push 0x2db
push str..dxdisplayhandler.cpp
push edi
push 0x5a8554
push 0x5c85f0
call fcn.004dfae0
add esp, 0x14
mov eax, dword [esi]
mov eax, dword [eax + 8]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x94]
push 1
push 6
push ebp
push eax
call edx
mov edi, eax
cmp edi, ebp
je 0x4ee887
cmp edi, 0x8876017c
jne 0x4ee86a
call fcn.004988c0
mov ecx, eax
call fcn.004988b0
push 0x2dc
push str..dxdisplayhandler.cpp
push edi
push 0x5a8554
push 0x5c85f0
call fcn.004dfae0
add esp, 0x14
mov eax, dword [esi]
mov eax, dword [eax + 8]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x94]
push 4
push 4
push ebp
push eax
call edx
mov edi, eax
cmp edi, ebp
je 0x4ee8d3
cmp edi, 0x8876017c
jne 0x4ee8b6
call fcn.004988c0
mov ecx, eax
call fcn.004988b0
push 0x2dd
push str..dxdisplayhandler.cpp
push edi
push 0x5a8554
push 0x5c85f0
call fcn.004dfae0
add esp, 0x14
mov eax, dword [esi]
mov eax, dword [eax + 8]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x50]
push 1
push 0xf
push eax
call edx
mov edi, eax
cmp edi, ebp
je 0x4ee91b
cmp edi, 0x8876017c
jne 0x4ee8fe
call fcn.004988c0
mov ecx, eax
call fcn.004988b0
push 0x2e2
push str..dxdisplayhandler.cpp
push edi
push 0x5a8554
push 0x5c85f0
call fcn.004dfae0
add esp, 0x14
mov eax, dword [esi]
mov eax, dword [eax + 8]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x50]
push 1
push 0x18
push eax
call edx
mov edi, eax
cmp edi, ebp
je 0x4ee963
cmp edi, 0x8876017c
jne 0x4ee946
call fcn.004988c0
mov ecx, eax
call fcn.004988b0
push 0x2e3
push str..dxdisplayhandler.cpp
push edi
push 0x5a8554
push 0x5c85f0
call fcn.004dfae0
add esp, 0x14
mov eax, dword [esi]
mov eax, dword [eax + 8]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x50]
push 7
push 0x19
push eax
call edx
mov edi, eax
cmp edi, ebp
je 0x4ee9ab
cmp edi, 0x8876017c
jne 0x4ee98e
call fcn.004988c0
mov ecx, eax
call fcn.004988b0
push 0x2e4
push str..dxdisplayhandler.cpp
push edi
push 0x5a8554
push 0x5c85f0
call fcn.004dfae0
add esp, 0x14
push 2
mov ecx, esi
call fcn.004ebbc0
xor eax, eax
mov dword [0x614348], eax
mov dword [0x61434c], eax
mov dword [0x614350], eax
mov dword [0x614354], eax
mov dword [0x614358], eax
mov dword [0x61435c], eax
mov dword [0x614360], eax
mov dword [0x614364], eax
call fcn.004f5b90
test eax, eax
je 0x4eea23
call fcn.004f5b90
mov ecx, eax
call fcn.004f5d80
test eax, eax
jle 0x4eea23
call fcn.004988c0
mov ecx, eax
call fcn.004988d0
test eax, eax
je 0x4eea23
call fcn.004988c0
mov ecx, eax
call fcn.004988d0
cmp byte [eax + 0x24], 0
jne 0x4eea23
mov eax, dword [esi]
mov ecx, dword [eax + 0xc]
call fcn.0050cba0
mov ecx, esi
call fcn.004ed7e0
test al, al
je 0x4eefe2
lea ecx, [esp + 0x98]
call fcn.0049ab20
lea eax, [esp + 0x98]
push eax
mov ecx, esi
mov byte [esp + 0x250], 3
call fcn.004ebc30
lea ecx, [esp + 0x98]
push ecx
mov ecx, esi
call fcn.004ebc50
fldz
sub esp, 0x10
fstp dword [esp + 0xc]
fld dword [0x5c9bdc]
mov ecx, esi
fstp dword [esp + 8]
fld dword [0x5ad304]
fstp dword [esp + 4]
fld dword [0x5aa7f8]
fstp dword [esp]
call fcn.004ebe30
fld1
fst dword [esp + 0x18]
lea edx, [esp + 0x18]
fst dword [esp + 0x1c]
push edx
fst dword [esp + 0x24]
mov ecx, esi
fstp dword [esp + 0x28]
call fcn.004ebdb0
lea ecx, [esp + 0x3c]
call fcn.004eb7b0
fld dword [0x5a9e84]
fst dword [esp + 0x18]
mov eax, dword [esp + 0x18]
fst dword [esp + 0x1c]
mov ecx, dword [esp + 0x1c]
fstp dword [esp + 0x20]
mov edx, dword [esp + 0x20]
fld1
mov dword [esp + 0x4c], eax
fst dword [esp + 0x24]
mov dword [esp + 0x50], ecx
mov eax, dword [esp + 0x24]
fst dword [esp + 0x18]
mov ecx, dword [esp + 0x18]
fst dword [esp + 0x1c]
fst dword [esp + 0x20]
mov dword [esp + 0x54], edx
mov edx, dword [esp + 0x1c]
fst dword [esp + 0x24]
fst dword [esp + 0x18]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x20]
fst dword [esp + 0x1c]
fst dword [esp + 0x20]
mov dword [esp + 0x3c], ecx
mov ecx, dword [esp + 0x24]
fst dword [esp + 0x24]
fldz
mov dword [esp + 0x40], edx
mov edx, dword [esp + 0x18]
fst dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x1c]
fst dword [esp + 0x1c]
mov dword [esp + 0x48], ecx
mov ecx, dword [esp + 0x20]
fstp dword [esp + 0x20]
mov dword [esp + 0x5c], edx
mov edx, dword [esp + 0x24]
fst dword [esp + 0x24]
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x64], ecx
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x68], edx
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], ecx
mov edx, dword [esp + 0x20]
fstp dword [esp + 0x7c]
mov eax, dword [esp + 0x24]
lea ecx, [esp + 0x3c]
push ecx
mov ecx, esi
mov dword [esp + 0x78], edx
mov dword [esp + 0x7c], eax
call fcn.004ec100
mov eax, dword [esi]
mov ecx, dword [eax + 0xc]
lea edx, [esp + 0x18]
push edx
call fcn.00509100
cmp dword [eax], ebp
jne 0x4eeeb9
cmp byte [0x614391], 0
jne 0x4eeeb9
mov bl, 1
jmp 0x4eeebb
mov eax, dword [edx + 0xc]
cmp byte [eax + 0x1d1], 0
je 0x4eebf7
cmp byte [esp + 0x264], 0
jne 0x4eebe7
push 0
push str.Error
push str.DirectX_requires_that_you_have_your_screen_set_to_256_color_mode_or_higher_for_any_DirectX_application_to_run._Please_go_to_your_control_panel_and_select_256_color_mode_or_install_new_video_drivers_to_run_this_game._Exiting.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [esi]
push 0xffffffffffffffff
mov byte [ecx + 0x8d], 1
call fcn.00560f29
call fcn.004988c0
mov eax, dword [eax]
cmp dword [eax + 0x12b8], 0
je 0x4eec1f
mov ecx, esi
call fcn.004ecd00
mov edx, dword [esp + 0x30]
cmp dword [esp + 0x2c], 0
mov byte [edx], 0
jmp 0x4eeffc
mov eax, dword [esi]
cmp byte [eax + 0x9c], 0
je 0x4eec68
cmp byte [esp + 0x25c], 0
je 0x4eec68
mov ecx, esi
call fcn.004ecd00
push 0x96
call fcn.004988c0
mov ecx, eax
call fcn.004987d0
cmp dword [esp + 0x2c], 0
mov ecx, dword [esp + 0x30]
mov byte [ecx], 0
jne 0x4ef009
mov edx, dword [esp + 0x28]
push edx
jmp 0x4ef003
cmp byte [eax + 0x8c], 0
jne 0x4eecd5
mov bl, byte [esp + 0x17]
test bl, bl
mov ebp, dword [sym.imp.USER32.dll_GetForegroundWindow]
je 0x4eec85
call ebp
cmp eax, edi
je 0x4eecd5
call ebp
cmp eax, edi
mov ecx, str.FOREGROUND
jne 0x4eec95
mov ecx, str.BACKGROUND
test bl, bl
mov eax, str.ACTIVE
jne 0x4eeca3
mov eax, str.INACTIVE
push ecx
push eax
push str.SetDisplay_marking_DirectX_Broken:__s___s
call fcn.004dfae0
add esp, 0xc
mov ecx, esi
call fcn.004ecd00
cmp dword [esp + 0x2c], 0
mov eax, dword [esp + 0x30]
mov byte [eax], 0
jne 0x4ef009
mov ecx, dword [esp + 0x28]
push ecx
jmp 0x4ef003
cmp byte [esp + 0x25c], 0
mov ebp, dword [esp + 0x258]
mov ebx, dword [esp + 0x254]
jne 0x4eedbf
mov edx, dword [esi]
mov ecx, dword [edx + 0xc]
cmp dword [ecx + 0x1d8], 0xffffffff
jne 0x4eed1c
push ebp
push ebx
call fcn.004eb720
test al, al
jne 0x4eed1c
mov eax, dword [esi]
mov ecx, dword [eax + 0xc]
cmp byte [ecx + 0x1d2], 0
je 0x4eedbf
mov edx, dword [esi]
mov ecx, dword [edx + 0xc]
cmp dword [ecx + 0x1d8], 0xffffffff
je 0x4eed42
cmp byte [esp + 0x264], 0
jne 0x4eed91
push 0
push str.Error
push str.Cannot_run_in_256_color_mode_or_lower_in_a_window._Switching_to_full_screen.
jmp 0x4eed89
push ebp
push ebx
call fcn.004eb720
test al, al
je 0x4eed65
cmp byte [esp + 0x264], 0
jne 0x4eed91
push 0
push str.Error
push str.Cannot_run_in_a_window_when_your_desktop_is_set_to_800x600_or_lower_resolution._Switching_to_full_screen.
jmp 0x4eed89
mov eax, dword [esi]
mov ecx, dword [eax + 0xc]
cmp byte [ecx + 0x1d2], 0
je 0x4eed91
cmp byte [esp + 0x264], 0
jne 0x4eed91
push 0
push str.Error
push str.Cannot_run_in_a_window:_Insufficient_video_memory._Switching_to_full_screen.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov edx, dword [esi]
mov edi, dword [esp + 0x30]
push 0
push 0
push 1
push 1
push ebp
mov byte [edx + 0x8c], 1
push ebx
mov ecx, esi
mov byte [edi], 0
call fcn.004eda40
cmp dword [esp + 0x2c], 0
mov byte [edi], 0
jmp 0x4eeffc
mov eax, dword [esi]
cmp byte [eax + 0x8c], 0
je 0x4eee0c
push str.ERROR_FALLBACK_FAILED
call fcn.004dfae0
add esp, 4
push 0x10
push str.Error
push str.Failed_to_initialize_window._Please_try_running_the_game_again._If_that_doesnt_help__try_changing_the_screen_resolution_and_color_depth._If_that_fails__then_your_video_card_does_not_support_this_game.
push edi
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.USER32.dll_PostQuitMessage]
mov ecx, dword [esi]
mov edx, dword [esp + 0x30]
cmp dword [esp + 0x2c], 0
mov byte [ecx + 0x8d], 1
mov byte [edx], 0
jmp 0x4eeffc
cmp byte [esp + 0x25c], 0
mov byte [eax + 0x8c], 1
je 0x4eee6b
mov edi, dword [esp + 0x30]
push 0
push 0
push 1
push 0
push ebp
push ebx
mov ecx, esi
mov byte [edi], 0
call fcn.004eda40
cmp byte [esp + 0x264], 0
jne 0x4eee53
push 0
push str.Error
push str.Failed_to_initialize_full_screen_mode._Your_video_card_is_not_supported._Trying_to_run_in_a_window.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp dword [esp + 0x2c], 0
mov byte [edi], 0
jne 0x4ef009
mov ecx, dword [esp + 0x28]
push ecx
jmp 0x4ef003
cmp byte [esp + 0x264], 0
jne 0x4eee89
push 0
push str.Error
push str.Failed_to_initialize_windowed_mode._Trying_full_screen.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov edi, dword [esp + 0x30]
push 0
push 0
push 0
push 1
push ebp
push ebx
mov ecx, esi
mov byte [edi], 0
call fcn.004eda40
cmp dword [esp + 0x2c], 0
mov byte [edi], 0
jne 0x4ef009
mov edx, dword [esp + 0x28]
push edx
jmp 0x4ef003
xor bl, bl
lea ecx, [esp + 0x18]
call fcn.00401370
test bl, bl
je 0x4eef03
mov eax, 2
push ebp
mov ecx, eax
push ecx
push eax
sub esp, 8
mov eax, esp
mov dword [eax], ebp
mov byte [0x614391], 1
mov dword [esp + 0x2c], esp
mov dword [eax + 4], ebp
mov byte [esp + 0x260], 4
call fcn.004988c0
mov ecx, eax
mov byte [esp + 0x260], 3
call fcn.00498ec0
mov ecx, esi
call fcn.004ed920
call fcn.004a0970
mov ecx, eax
call fcn.004a0af0
cmp byte [esp + 0x25c], 0
je 0x4eef29
mov ecx, dword [esi]
mov byte [ecx + 0x9c], 1
mov edx, dword [esi]
mov dword [esp + 0x38], ebp
mov ecx, dword [edx + 0xc]
call fcn.00508010
mov ecx, dword [eax]
lea edx, [esp + 0x38]
push edx
push eax
mov eax, dword [ecx + 0x3c]
call eax
mov edx, dword [esp + 0x38]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push edx
push 0x5a9180
push ecx
call fcn.00497f10
mov eax, dword [str.monitorfrequency]
add esp, 8
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
mov byte [esp + 0x258], 5
call fcn.00496da0
mov byte [esp + 0x254], 3
call fcn.00499d50
push 0x7c
lea ecx, [esp + 0xe4]
push ebp
push ecx
call fcn.0055da20
mov edx, dword [esi]
mov dword [esp + 0xec], 0x7c
mov ecx, dword [edx + 0xc]
add esp, 0x14
call fcn.00508010
mov ecx, dword [eax]
lea edx, [esp + 0xd8]
push edx
push eax
mov eax, dword [ecx + 0x30]
call eax
mov ecx, dword [esi]
mov edx, dword [esp + 0x12c]
mov dword [ecx + 0x64], edx
mov eax, dword [esi]
lea ecx, [esp + 0x98]
mov byte [eax + 0x68], 1
mov byte [esp + 0x24c], 1
call fcn.0049ab10
cmp dword [esp + 0x2c], ebp
mov ecx, dword [esp + 0x30]
mov byte [ecx], 0
jne 0x4ef009
mov edx, dword [esp + 0x28]
push edx
jmp 0x4ef003
mov byte [ebp], 0
test edi, edi
jne 0x4ef009
mov eax, dword [esp + 0x28]
push eax
call dword [sym.imp.kernel32.dll_ReleaseMutex]
mov ecx, dword [esp + 0x244]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x22c]
xor ecx, esp
call fcn.0055d2d5
add esp, 0x23c
ret 0x18