Function at 0x4dc230
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x204
mov dword [ebp - 0x204], ebx
mov dword [ebp - 0x200], esi
mov dword [ebp - 0x1fc], edi
mov dword [ebp - 0x1e4], 0
mov dword [ebp - 0x1e0], 0
lea ecx, [ebp - 0x1b4]
lea edx, [ebp - 0x1cc]
mov eax, 1
call fcn.0040b820
call fcn.0040d7e0
push eax
test eax, eax
jne 0x4ded8d
lea eax, [ebp - 0x14]
mov cl, 0
mov edx, 0x10
call fcn.004037d0
lea eax, [ebp - 0x14]
mov dword [ebp - 0x20], eax
mov byte [ebp - 0x5c], 1
mov byte [ebp - 0x64], 0
mov eax, dword [ebp + 8]
call fcn.00541250
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
cmp byte [eax + 0x50], 0
jne 0x4dc2b9
jmp 0x4dc439
mov eax, ebp
call fcn.004df4f0
test al, al
jne 0x4dc2c6
jmp 0x4dc30b
mov eax, dword [ebp + 0xc]
cmp eax, 0xd
jb 0x4dc30b
sub eax, 0xd
je 0x4dc2ed
dec eax
je 0x4dc2df
sub eax, 0xa3
je 0x4dc2df
jmp 0x4dc30b
mov dword [ebp - 4], 0
jmp 0x4ded8d
mov eax, dword [ebp + 0x10]
cmp eax, 0
jg 0x4dc2f7
jmp 0x4dc2fd
mov eax, dword [ebp + 0x14]
mov byte [eax], 0
mov dword [ebp - 4], 0
jmp 0x4ded8d
mov eax, dword [ebp - 0x74]
mov eax, dword [eax + 0x1c]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp + 0xc]
cmp eax, 0x282
je 0x4dc320
jmp 0x4dc333
mov eax, dword [ebp + 0x10]
cmp eax, 0x10e
je 0x4dc32c
jmp 0x4dc333
mov eax, dword [ebp - 0x74]
mov byte [eax + 0x52], 1
mov eax, dword [ebp + 0xc]
cmp eax, 8
jne 0x4dc340
jmp 0x4dc3c2
mov eax, dword [ebp + 0xc]
cmp eax, 7
jne 0x4dc34d
jmp 0x4dc3c2
mov eax, dword [ebp + 0xc]
cmp eax, 0x82
jne 0x4dc35c
jmp 0x4dc3c2
mov eax, dword [ebp + 0xc]
cmp eax, 0x300
jae 0x4dc368
jmp 0x4dc374
mov eax, dword [ebp + 0xc]
cmp eax, 0x303
jbe 0x4dc3c2
jmp 0x4dc374
mov eax, dword [ebp + 0xc]
cmp eax, 0x100
jb 0x4dc38c
jmp 0x4dc380
mov eax, dword [ebp + 0xc]
cmp eax, 0x108
ja 0x4dc38c
jmp 0x4dc3c2
mov eax, dword [ebp + 0xc]
cmp eax, 0x200
jb 0x4dc3a4
jmp 0x4dc398
mov eax, dword [ebp + 0xc]
cmp eax, 0x20d
ja 0x4dc3a4
jmp 0x4dc3c2
push dword [ebp + 0x14]
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
call fcn.004dbdd0
mov dword [ebp - 4], eax
jmp 0x4ded8d
mov eax, dword [ebp + 0xc]
cmp eax, 8
je 0x4dc3d6
jmp 0x4dc3cc
mov eax, dword [ebp + 0xc]
cmp eax, 7
je 0x4dc3d6
jmp 0x4dc437
mov dword [ebp - 0x1a4], 0x34
lea eax, [ebp - 0x1a4]
push eax
mov eax, dword [ebp - 0x4c]
call fcn.00501430
push eax
mov eax, dword [0x5b9c30]
call eax
mov eax, dword [ebp + 0x10]
cmp eax, dword [ebp - 0x174]
je 0x4dc41e
jmp 0x4dc404
mov eax, dword [ebp + 0x10]
cmp eax, dword [ebp - 0x178]
je 0x4dc41e
jmp 0x4dc411
mov eax, dword [ebp + 0x10]
cmp eax, dword [ebp - 0x17c]
je 0x4dc41e
jmp 0x4dc437
push dword [ebp + 0x14]
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
call fcn.004dbdd0
mov dword [ebp - 4], eax
jmp 0x4ded8d
jmp 0x4dc442
mov eax, dword [ebp - 0x74]
mov eax, dword [eax + 0x14]
mov dword [ebp - 0x4c], eax
mov eax, dword [0x587590]
test eax, eax
jne 0x4dc44d
jmp 0x4dc491
mov eax, dword [ebp + 0xc]
cmp eax, 0x102
je 0x4dc465
jmp 0x4dc459
mov eax, dword [ebp + 0xc]
cmp eax, 0x106
je 0x4dc465
jmp 0x4dc491
mov eax, dword [0x587590]
cmp eax, dword [ebp + 8]
je 0x4dc471
jmp 0x4dc487
mov dword [0x587590], 0
mov dword [ebp - 4], 1
jmp 0x4ded8d
mov dword [0x587590], 0
mov eax, dword [ebp + 0xc]
test eax, eax
je 0x4dc716
sub eax, 2
je 0x4dce75
sub eax, 4
je 0x4dc757
dec eax
je 0x4ddedc
dec eax
je 0x4dd425
sub eax, 2
je 0x4dd0bd
sub eax, 5
je 0x4ddce7
dec eax
je 0x4dc857
sub eax, 4
je 0x4dd1b4
sub eax, 4
je 0x4ddf3d
sub eax, 2
je 0x4de1f9
sub eax, 5
je 0x4dc78d
dec eax
je 0x4dde6d
sub eax, 0xb
je 0x4dcf1f
dec eax
je 0x4de156
sub eax, 0x1a
je 0x4de10b
dec eax
je 0x4de123
sub eax, 7
je 0x4ddba3
sub eax, 5
je 0x4dd2cc
sub eax, 0x28
je 0x4dde17
sub eax, 9
je 0x4ddadc
sub eax, 3
je 0x4dd2bc
sub eax, 0x19
je 0x4ddb79
dec eax
je 0x4ddaf4
sub eax, 0x5f
je 0x4dd37a
dec eax
je 0x4dd3d2
dec eax
je 0x4dc7a5
sub eax, 2
je 0x4de064
dec eax
je 0x4de0b5
dec eax
je 0x4de002
sub eax, 7
je 0x4de2bf
dec eax
je 0x4dc76f
dec eax
je 0x4de2bf
sub eax, 2
je 0x4dc94a
dec eax
je 0x4de03c
dec eax
je 0x4de0f3
dec eax
jb 0x4de2d7
sub eax, 1
jbe 0x4dd304
sub eax, 2
je 0x4dc8a6
sub eax, 8
je 0x4dc8f5
dec eax
je 0x4dc838
dec eax
je 0x4dc746
sub eax, 7
je 0x4de247
sub eax, 0xa
jb 0x4de2d7
sub eax, 6
jbe 0x4dcc9f
sub eax, 0xc8
je 0x4dd8c4
dec eax
je 0x4dd4ec
dec eax
je 0x4dd68b
dec eax
je 0x4dd437
dec eax
je 0x4ddd6f
dec eax
je 0x4dddc1
dec eax
je 0x4ddd27
dec eax
je 0x4dd73c
dec eax
je 0x4dd784
dec eax
je 0x4dd6f4
dec eax
je 0x4dd968
dec eax
je 0x4dd814
dec eax
je 0x4dd85c
dec eax
je 0x4dd7cc
sub eax, 5
je 0x4dd287
sub eax, 3
je 0x4dc799
sub eax, 0x1e
je 0x4ddad0
sub eax, 0x4e
jb 0x4de2d7
sub eax, 4
jbe 0x4de2bf
sub eax, 3
je 0x4de2bf
sub eax, 0x18
je 0x4ddb79
dec eax
je 0x4dd8a4
sub eax, 2
je 0x4dd8b4
sub eax, 0x5d
je 0x4dce69
dec eax
je 0x4dce5d
dec eax
je 0x4ddd1b
dec eax
je 0x4dce51
sub eax, 4
je 0x4dcec7
sub eax, 0xb
je 0x4dd2e8
sub eax, 6
je 0x4ddcf6
sub eax, 2
je 0x4de208
sub eax, 0x5e6
je 0x4de26f
sub eax, 0xa700
je 0x4dde79
jmp 0x4de2d7
mov eax, dword [0x566190]
mov edx, dword [0x566190]
mov edx, dword [edx]
call dword [edx + 0x6c]
cmp eax, dword [ebp + 8]
je 0x4dc72d
jmp 0x4dc741
mov eax, 0
call fcn.0043c4c0
mov eax, dword [0x566190]
call fcn.004e1a40
jmp 0x4de2f9
mov eax, dword [0x55bfb0]
mov dl, 0
call fcn.0041ef00
jmp 0x4de2f9
mov dword [ebp - 0x14], 6
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xc], eax
jmp 0x4de2f9
mov eax, dword [ebp - 0x74]
mov byte [eax + 0x52], 1
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xc], eax
jmp 0x4de2f9
mov dword [ebp - 0x14], 0x1f
jmp 0x4de2f9
mov dword [ebp - 0x14], 0x215
jmp 0x4de2f9
mov ax, word [ebp + 0x10]
mov word [ebp - 0x1a8], ax
lea edx, [ebp - 0x1a8]
mov eax, ebp
call fcn.004deef0
test al, al
je 0x4dc7c3
jmp 0x4dc829
lea eax, [ebp - 0xe0]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0xe0], 0xbd02
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xd8], eax
cmp byte [0x5aeb40], 0
jne 0x4dc7ea
jmp 0x4dc800
mov ax, word [ebp + 0x10]
call fcn.00409290
movzx ax, al
mov word [ebp - 0xdc], ax
jmp 0x4dc80b
mov ax, word [ebp + 0x10]
mov word [ebp - 0xdc], ax
mov ax, word [ebp - 0xdc]
mov word [ebp - 0x1a8], ax
mov dword [ebp - 0xd4], 0
mov byte [ebp - 0x5c], 0
jmp 0x4dc833
movzx eax, word [ebp - 0x1a8]
mov dword [ebp + 0x10], eax
jmp 0x4de2f9
mov eax, dword [ebp + 0x10]
call fcn.004526a0
mov edx, dword [ebp + 0x14]
call fcn.005460f0
mov edx, dword [ebp - 0x20]
mov dword [edx + 0xc], eax
mov byte [ebp - 0x5c], 0
jmp 0x4de2f9
mov eax, dword [0x566190]
mov edx, dword [0x566190]
mov edx, dword [edx]
call dword [edx + 0x6c]
cmp eax, dword [ebp + 8]
je 0x4dc86e
jmp 0x4dc896
mov eax, dword [0x55bfb0]
cmp dword [eax + 0x148], 0
jne 0x4dc87e
jmp 0x4dc896
push 0
push 0
push 0x10
mov eax, dword [0x55bfb0]
call fcn.0041ead0
push eax
call sub.user32.dll_SendMessageA
jmp 0x4dc89d
mov dword [ebp - 0x14], 0x1043e
mov byte [ebp - 0x5c], 0
jmp 0x4de2f9
mov eax, dword [ebp + 0x14]
call fcn.00452680
movzx eax, ax
test eax, eax
je 0x4dc8b7
jmp 0x4dc8f0
mov eax, ebp
call fcn.004e0660
mov dword [ebp - 0x58], eax
mov edx, dword [ebp - 0x58]
mov eax, 0x5a0d10
call fcn.0040aa70
test al, al
jne 0x4dc8d4
jmp 0x4dc8f0
mov dword [ebp - 0x14], 6
lea edx, [ebp - 0x14]
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x58]
mov ecx, dword [ecx]
call dword [ecx + 0x50]
mov dword [ebp - 0x4c], 0
jmp 0x4de2f9
mov eax, dword [ebp + 0x10]
call fcn.00452680
and ax, 0x10
movzx eax, ax
test eax, eax
setne dl
mov eax, ebp
call fcn.004e05b0
mov dword [ebp - 0x58], eax
mov edx, dword [ebp - 0x58]
mov eax, 0x5a0d10
call fcn.0040aa70
test al, al
jne 0x4dc926
jmp 0x4dc936
mov eax, dword [ebp - 0x58]
mov edx, dword [ebp - 0x58]
mov edx, dword [edx]
call dword [edx + 0x108]
jmp 0x4dc945
mov eax, dword [0x55bfb0]
mov edx, 0
call fcn.00421a50
jmp 0x4de2f9
mov eax, dword [ebp + 0x14]
test eax, eax
je 0x4dc953
jmp 0x4dc9b6
mov eax, ebp
mov dl, 0
call fcn.004e05b0
mov dword [ebp - 0x58], eax
mov edx, dword [ebp - 0x58]
mov eax, 0x5a0d10
call fcn.0040aa70
test al, al
jne 0x4dc972
jmp 0x4dc9b1
mov eax, dword [ebp + 0x10]
call fcn.00452680
movzx eax, ax
test eax, eax
je 0x4dc995
jmp 0x4dc983
mov eax, dword [ebp + 0x10]
call fcn.00452680
movzx eax, ax
cmp eax, 1
je 0x4dc995
jmp 0x4dc9aa
mov dword [ebp - 0x14], 6
lea edx, [ebp - 0x14]
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x58]
mov ecx, dword [ecx]
call dword [ecx + 0x50]
mov dword [ebp - 0x4c], 0
jmp 0x4dcc87
mov eax, dword [ebp + 0x14]
call fcn.00541250
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x14]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
test eax, eax
je 0x4dc9d3
jmp 0x4dc9dc
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x1c]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x54]
cmp dword [eax + 0x10], 0
jne 0x4dc9e7
jmp 0x4dca19
push dword [ebp + 0x10]
push dword [ebp + 0x14]
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x5c]
push eax
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 0x4c]
mov ecx, 0x111
mov ebx, dword [ebp - 0x54]
mov ebx, dword [ebx + 0x10]
call ebx
test al, al
jne 0x4dca0e
jmp 0x4dca19
mov eax, dword [ebp - 8]
mov dword [ebp - 4], eax
jmp 0x4ded8d
mov edx, dword [ebp - 0x4c]
mov eax, 0x59acf8
call fcn.0040aa70
test al, al
jne 0x4dca2f
jmp 0x4dcb03
mov edx, dword [ebp - 0x4c]
mov eax, 0x59b5e8
call fcn.0040aa70
test al, al
je 0x4dca45
jmp 0x4dcb03
mov eax, dword [ebp + 0x10]
call fcn.00452680
test ax, ax
je 0x4dca61
sub ax, 7
je 0x4dcaf5
jmp 0x4dcafe
push 0
mov eax, dword [ebp - 0x4c]
call fcn.00501430
mov ecx, 0
mov edx, 0xf0
call fcn.004a8e80
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x78]
cmp eax, 1
jne 0x4dca9a
jmp 0x4dca87
mov edx, dword [ebp - 0x4c]
mov eax, 0x59ba64
call fcn.0040aa70
test al, al
je 0x4dca9a
jmp 0x4dcaec
mov eax, dword [ebp - 0x78]
cmp eax, 1
je 0x4dcaa4
jmp 0x4dcaad
mov dword [ebp - 0x78], 0
jmp 0x4dcad4
mov eax, dword [ebp - 0x78]
test eax, eax
je 0x4dcab6
jmp 0x4dcacd
mov eax, dword [ebp - 0x4c]
cmp byte [eax + 0x354], 0
jne 0x4dcac4
jmp 0x4dcacd
mov dword [ebp - 0x78], 2
jmp 0x4dcad4
mov dword [ebp - 0x78], 1
push 0
push dword [ebp - 0x78]
push 0xf1
mov eax, dword [ebp - 0x4c]
call fcn.00501430
push eax
call sub.user32.dll_SendMessageA
mov dword [ebp - 0x14], 0x10407
jmp 0x4dcafe
mov dword [ebp - 0x14], 0x1043c
jmp 0x4dcafe
jmp 0x4dcc87
mov edx, dword [ebp - 0x4c]
mov eax, 0x599e90
call fcn.0040aa70
test al, al
jne 0x4dcb16
jmp 0x4dcb42
mov eax, dword [ebp + 0x10]
call fcn.00452680
test ax, ax
je 0x4dcb2b
sub ax, 7
je 0x4dcb34
jmp 0x4dcb3d
mov dword [ebp - 0x14], 0x10407
jmp 0x4dcb3d
mov dword [ebp - 0x14], 0x1043c
jmp 0x4dcb3d
jmp 0x4dcc87
mov edx, dword [ebp - 0x4c]
mov eax, 0x598208
call fcn.0040aa70
test al, al
jne 0x4dcb58
jmp 0x4dcbb0
mov edx, dword [ebp - 0x4c]
mov eax, 0x5987b0
call fcn.0040aa70
test al, al
jne 0x4dcb6b
jmp 0x4dcb8c
mov eax, dword [ebp + 0x10]
call fcn.00452680
cmp ax, 0x400
jb 0x4dcb8a
sub ax, 0x400
je 0x4dcb81
jmp 0x4dcb8a
mov dword [ebp - 0x14], 0xb012
jmp 0x4dcb8a
jmp 0x4dcbab
mov eax, dword [ebp + 0x10]
call fcn.00452680
cmp ax, 0x300
jb 0x4dcbab
sub ax, 0x300
je 0x4dcba2
jmp 0x4dcbab
mov dword [ebp - 0x14], 0xb012
jmp 0x4dcbab
jmp 0x4dcc87
mov edx, dword [ebp - 0x4c]
mov eax, 0x5978bc
call fcn.0040aa70
test al, al
jne 0x4dcbc3
jmp 0x4dcbe5
mov eax, dword [ebp + 0x10]
call fcn.00452680
cmp ax, 1
jb 0x4dcbe0
dec ax
je 0x4dcbd7
jmp 0x4dcbe0
mov dword [ebp - 0x14], 0x234
jmp 0x4dcbe0
jmp 0x4dcc87
mov edx, dword [ebp - 0x4c]
mov eax, 0x5973c8
call fcn.0040aa70
test al, al
jne 0x4dcbfb
jmp 0x4dcc87
mov eax, dword [ebp + 0x10]
call fcn.00452680
cmp ax, 1
jb 0x4dcc87
dec ax
je 0x4dcc36
sub ax, 4
je 0x4dcc2d
sub ax, 2
je 0x4dcc23
dec ax
je 0x4dcc68
jmp 0x4dcc87
mov eax, dword [ebp - 0x4c]
call fcn.0051d6a0
jmp 0x4dcc87
mov dword [ebp - 0x14], 0x10405
jmp 0x4dcc87
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x3bc]
cmp eax, 2
jb 0x4dcc44
jb 0x4dcc48
jmp 0x4dcc52
mov edx, dword [ebp - 0x4c]
mov eax, ebp
call fcn.004dfe20
mov eax, dword [ebp - 0x4c]
mov edx, 0x10405
call fcn.0054fb50
mov dword [ebp - 0x14], 0x234
jmp 0x4dcc87
push dword [ebp + 0x14]
mov eax, dword [ebp - 0x4c]
call fcn.00501430
mov ecx, dword [ebp + 0x10]
mov edx, 0xbd11
call fcn.004a8c10
jmp 0x4ded8d
push dword [ebp + 0x14]
mov ecx, dword [ebp + 0x10]
mov eax, dword [ebp - 0x4c]
mov edx, 0xbd11
call fcn.00509f90
jmp 0x4de2f9
mov eax, dword [ebp + 0x14]
call fcn.00541250
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
cmp dword [eax + 0x10], 0
jne 0x4dccb5
jmp 0x4dcce5
push dword [ebp + 0x10]
push dword [ebp + 0x14]
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x5c]
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 0x4c]
mov ebx, dword [ebp - 0x54]
mov ebx, dword [ebx + 0x10]
call ebx
test al, al
jne 0x4dccda
jmp 0x4dcce5
mov eax, dword [ebp - 8]
mov dword [ebp - 4], eax
jmp 0x4ded8d
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x14]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
test eax, eax
je 0x4dccfd
jmp 0x4dcd06
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x1c]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp + 0xc]
cmp eax, 0x135
jb 0x4dcd73
sub eax, 0x135
je 0x4dcd25
sub eax, 2
je 0x4dcd6d
dec eax
je 0x4dcd25
jmp 0x4dcd73
mov edx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x54]
call fcn.004dc150
test al, al
jne 0x4dcd36
jmp 0x4dcd6b
mov eax, dword [ebp - 0x54]
mov al, byte [eax + 0x51]
test al, al
je 0x4dcd42
jmp 0x4dcd6b
mov edx, dword [ebp - 0x7c]
mov eax, dword [ebp + 0x14]
call fcn.004dc000
mov eax, 5
call fcn.004a85b0
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x7c]
mov edx, 1
call fcn.004a8f30
mov byte [ebp - 0x5c], 0
jmp 0x4dcd73
mov byte [ebp - 0x5c], 0
jmp 0x4dcd73
cmp byte [ebp - 0x5c], 0
jne 0x4dcd7e
jmp 0x4dce4c
mov eax, dword [ebp - 0x50]
test eax, eax
jne 0x4dcd8a
jmp 0x4dce4c
mov eax, dword [ebp - 0x50]
mov eax, dword [eax + 0xe4]
mov eax, dword [eax + 0x60]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0xac]
cmp eax, 0x20000000
je 0x4dcdab
jmp 0x4dcdc4
mov eax, dword [ebp - 0x50]
mov edx, 1
mov ecx, dword [ebp - 0x50]
mov ecx, dword [ecx]
call dword [ecx + 0x2c4]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0xac]
call fcn.00492420
push eax
push dword [ebp - 0x7c]
call sub.gdi32.dll_SetTextColor
mov eax, dword [ebp - 0x50]
call fcn.00501300
mov eax, dword [eax + 0xbc]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0xac]
cmp eax, 0x20000000
je 0x4dcdfb
jmp 0x4dce14
mov eax, dword [ebp - 0x50]
mov edx, 0
mov ecx, dword [ebp - 0x50]
mov ecx, dword [ecx]
call dword [ecx + 0x2c4]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0xac]
call fcn.00492420
push eax
push dword [ebp - 0x7c]
call sub.gdi32.dll_SetBkColor
mov eax, dword [ebp - 0x50]
call fcn.00501300
mov ebx, eax
lea edx, [ebp - 0x1d4]
mov eax, ebx
call fcn.00499880
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 8], eax
mov byte [ebp - 0x5c], 0
jmp 0x4de2f9
mov dword [ebp - 0x14], 0x303
jmp 0x4de2f9
mov dword [ebp - 0x14], 0x301
jmp 0x4de2f9
mov dword [ebp - 0x14], 0x300
jmp 0x4de2f9
mov eax, dword [0x587620]
cmp eax, dword [ebp + 8]
je 0x4dce81
jmp 0x4dce8b
mov dword [0x587620], 0
mov edx, dword [ebp - 0x4c]
mov eax, 0x5973c8
call fcn.0040aa70
test al, al
jne 0x4dce9e
jmp 0x4dcea6
mov eax, dword [ebp - 0x4c]
call fcn.004dc1e0
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
test eax, eax
jne 0x4dceb1
jmp 0x4dcebb
mov eax, dword [ebp - 0x74]
push dword [eax]
call sub.user32.dll_DestroyWindow
mov dword [ebp - 0x14], 2
jmp 0x4de2f9
cmp dword [0x5b9970], 0
jne 0x4dced2
jmp 0x4dcf1a
mov eax, dword [0x5b9974]
mov ecx, 0
mov edx, 0
mov ebx, dword [0x5b9970]
call ebx
mov dword [ebp - 0x1dc], 0
mov dword [ebp - 0x1d8], 0
mov eax, dword [ebp - 0x1dc]
mov dword [0x5b9970], eax
mov eax, dword [ebp - 0x1d8]
mov dword [0x5b9974], eax
mov dword [ebp - 8], 0
jmp 0x4de2f9
mov eax, dword [ebp + 0x10]
test eax, eax
je 0x4dcf28
jmp 0x4dcf8d
mov eax, dword [ebp + 0x14]
mov eax, dword [eax]
cmp eax, 1
je 0x4dcf34
jmp 0x4dcf8d
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0x2c]
mov dword [ebp - 0x18], eax
mov edx, dword [ebp - 0x18]
mov eax, 0x5a0d10
call fcn.0040aa70
test al, al
jne 0x4dcf50
jmp 0x4dcf70
mov eax, dword [ebp + 0x14]
push dword [eax + 0xc]
mov eax, dword [ebp + 0x14]
push dword [eax + 0x10]
mov eax, dword [ebp + 0x14]
lea ecx, [eax + 0x1c]
mov eax, dword [ebp + 0x14]
mov edx, dword [eax + 0x18]
mov eax, dword [ebp - 0x18]
call fcn.00548d50
mov dword [ebp - 0x14], 0x2b
mov dword [ebp - 0x10], 0
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xc], eax
mov byte [ebp - 0x5c], 0
jmp 0x4dd0b8
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0x14]
call fcn.00541250
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
mov eax, dword [eax + 0x14]
test eax, eax
jne 0x4dcfa7
jmp 0x4dcfb0
mov eax, dword [ebp - 0x74]
mov eax, dword [eax + 0x14]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x4dcfbc
jmp 0x4dd0a0
mov edx, dword [ebp - 0x4c]
mov eax, 0x5978bc
call fcn.0040aa70
test al, al
jne 0x4dcfcf
jmp 0x4dcfde
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x390]
test eax, eax
jne 0x4dd017
jmp 0x4dcfde
mov edx, dword [ebp - 0x4c]
mov eax, 0x5973c8
call fcn.0040aa70
test al, al
jne 0x4dcff4
jmp 0x4dd0a0
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x3bc]
cmp eax, 3
je 0x4dd017
jmp 0x4dd004
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x3bc]
cmp eax, 4
je 0x4dd017
jmp 0x4dd0a0
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 8]
cmp eax, 0xffffffff
jne 0x4dd027
jmp 0x4dd09e
mov dword [ebp - 0x14], 0x10451
lea eax, [ebp - 0x164]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 8]
mov dword [ebp - 0x164], eax
mov eax, dword [ebp + 0x14]
lea edi, [ebp - 0x160]
lea esi, [eax + 0x1c]
cld
mov ecx, 4
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0x10]
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0x18]
mov dword [ebp - 0x150], eax
mov eax, 0x5b9b90
cmp eax, dword [ebp - 0x74]
jne 0x4dd07b
jmp 0x4dd09a
mov edx, dword [ebp - 0x74]
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 8]
mov dword [edx + 0x48], eax
mov edx, dword [ebp - 0x74]
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0x10]
and eax, 1
cmp eax, 1
sete byte [edx + 0x4c]
mov byte [ebp - 0x5c], 0
jmp 0x4dd0b8
mov dword [ebp - 0x14], 0x2b
mov dword [ebp - 0x10], 0
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xc], eax
mov byte [ebp - 0x5c], 0
jmp 0x4de2f9
mov eax, dword [ebp + 0x10]
test eax, eax
jne 0x4dd0c6
jmp 0x4dd0cd
mov dword [ebp - 0x14], 0x10412
mov eax, dword [0x566190]
mov edx, dword [0x566190]
mov edx, dword [edx]
call dword [edx + 0x6c]
cmp eax, dword [ebp + 8]
je 0x4dd0e4
jmp 0x4dd12a
mov eax, dword [ebp + 0x10]
test eax, eax
je 0x4dd0ed
jmp 0x4dd113
mov eax, dword [ebp + 8]
mov dl, 0
call fcn.00541320
mov ecx, dword [0x587610]
mov eax, dword [0x55bfc0]
mov edx, 0
call fcn.0041c360
mov dword [0x587610], eax
jmp 0x4dd12a
mov eax, dword [ebp + 8]
call fcn.00541400
mov edx, 0x587610
mov eax, dword [0x55bfc0]
call fcn.0041c490
cmp dword [ebp - 0x4c], 0
jne 0x4dd132
jmp 0x4dd157
mov edx, dword [ebp - 0x4c]
mov eax, 0x55a980
call fcn.0040aa70
test al, al
je 0x4dd145
jmp 0x4dd157
mov eax, dword [ebp + 0x10]
test eax, eax
setne cl
mov edx, dword [ebp - 0x4c]
mov eax, ebp
call fcn.004dfd60
call fcn.004692d0
mov ebx, eax
mov eax, ebx
call fcn.00469490
test al, al
je 0x4dd16b
jmp 0x4dd1af
mov edx, dword [ebp - 0x4c]
mov eax, 0x591744
call fcn.0040aa70
test al, al
jne 0x4dd17e
jmp 0x4dd1af
lea eax, [ebp - 0x1e0]
call fcn.00403d10
mov dword [ebp - 0x1e0], 0
lea edx, [ebp - 0x1e0]
mov eax, dword [ebp - 0x4c]
call fcn.0050d150
mov edx, dword [ebp - 0x1e0]
mov eax, dword [ebp - 0x4c]
call fcn.00544770
jmp 0x4de2f9
mov eax, dword [0x5875f0]
and eax, 3
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x70]
cmp eax, 3
je 0x4dd1c9
jmp 0x4dd1f9
mov eax, dword [0x587600]
test eax, eax
jne 0x4dd1d4
jmp 0x4dd1dc
mov eax, dword [0x587600]
mov dword [ebp + 0x10], eax
mov eax, dword [ebp - 0x74]
cmp byte [eax + 0x4e], 0
jne 0x4dd1e7
jmp 0x4dd1f7
mov eax, dword [0x5875f0]
and eax, 0xfffffffc
or eax, 2
mov dword [0x5875f0], eax
jmp 0x4dd210
mov eax, dword [ebp - 0x70]
cmp eax, 2
jne 0x4dd203
jmp 0x4dd210
mov eax, dword [0x5875f0]
shr eax, 2
mov dword [0x5875f0], eax
mov eax, dword [ebp - 0x70]
dec eax
cmp eax, 2
jb 0x4dd219
jb 0x4dd21d
jmp 0x4dd229
mov dword [ebp - 4], 0
jmp 0x4ded8d
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x74]
call fcn.004dc150
test al, al
je 0x4dd244
jmp 0x4dd23a
mov eax, dword [ebp - 0x70]
cmp eax, 3
je 0x4dd244
jmp 0x4dd259
mov dword [ebp - 0x14], 0x14
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xc], eax
jmp 0x4dd27e
call fcn.004692d0
mov ebx, eax
mov eax, ebx
call fcn.00469490
test al, al
je 0x4dd26d
jmp 0x4dd277
mov edx, dword [ebp + 0x10]
mov eax, ebp
call fcn.004dff90
mov dword [ebp - 8], 1
mov byte [ebp - 0x5c], 0
jmp 0x4de2f9
cmp dword [ebp + 0x10], 0
jne 0x4dd28f
jmp 0x4dd2b7
mov eax, dword [ebp - 0x74]
cmp dword [eax + 8], 0
jne 0x4dd29a
jmp 0x4dd2a1
mov eax, 0xffffffff
jmp 0x4dd2a6
mov eax, 0
test eax, eax
jne 0x4dd2ac
jmp 0x4dd2b7
mov eax, dword [ebp - 0x74]
mov eax, dword [eax + 8]
call fcn.00529870
jmp 0x4de2f9
mov dword [ebp - 8], 4
mov byte [ebp - 0x5c], 0
jmp 0x4de2f9
mov dword [ebp - 0x14], 0x53
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xc], eax
mov byte [ebp - 0x5c], 0
jmp 0x4de2f9
mov dword [ebp - 0x14], 0x312
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xc], eax
mov byte [ebp - 0x5c], 0
jmp 0x4de2f9
lea eax, [ebp - 0xc0]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp + 0x14]
test eax, eax
jne 0x4dd316
jmp 0x4dd36b
mov eax, dword [ebp + 0x14]
call fcn.00541250
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x14]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x54]
cmp dword [eax + 0x10], 0
jne 0x4dd335
jmp 0x4dd36b
push dword [ebp + 0x10]
push dword [ebp + 0x14]
mov eax, dword [ebp - 0x20]
lea eax, [eax + 0xc]
push eax
lea eax, [ebp - 0x5c]
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 0x4c]
mov ebx, dword [ebp - 0x54]
mov ebx, dword [ebx + 0x10]
call ebx
test al, al
jne 0x4dd35d
jmp 0x4dd36b
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0xc]
mov dword [ebp - 4], eax
jmp 0x4ded8d
mov edx, dword [ebp + 0xc]
mov eax, ebp
call fcn.004dfb50
jmp 0x4de2f9
mov byte [ebp - 0x64], 1
lea eax, [ebp - 0xd0]
mov dword [ebp - 0x20], eax
mov dx, word [ebp + 0x10]
mov eax, ebp
call fcn.004dede0
mov dword [ebp - 0xd0], 0xbd00
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xc8], eax
mov ax, word [ebp + 0x10]
mov word [ebp - 0xcc], ax
mov dword [ebp - 0xc4], 0
mov eax, dword [ebp - 0x74]
mov byte [eax + 0x52], 0
mov byte [ebp - 0x5c], 0
mov eax, dword [ebp + 8]
mov dword [0x587590], eax
jmp 0x4de2f9
mov byte [ebp - 0x64], 1
lea eax, [ebp - 0xd0]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0xd0], 0xbd01
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xc8], eax
mov ax, word [ebp + 0x10]
mov word [ebp - 0xcc], ax
mov dword [ebp - 0xc4], 0
mov byte [ebp - 0x5c], 0
mov eax, dword [ebp - 0x74]
cmp byte [eax + 0x52], 0
jne 0x4dd416
jmp 0x4dd420
mov dword [ebp - 0xd0], 0
jmp 0x4de2f9
mov dword [ebp - 0x14], 8
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x10], eax
jmp 0x4de2f9
mov byte [ebp - 0x64], 1
lea eax, [ebp - 0xf0]
mov dword [ebp - 0x20], eax
mov eax, dword [0x5b9930]
cmp eax, 1
jl 0x4dd45c
jmp 0x4dd450
mov eax, dword [0x5b9930]
cmp eax, 4
jg 0x4dd45c
jmp 0x4dd466
mov dword [0x5b9930], 1
inc dword [0x5b9930]
call fcn.004cdf10
mov dword [0x5b9940], eax
mov eax, dword [0x5b9930]
cmp eax, 2
jl 0x4dd4b1
sub eax, 2
je 0x4dd48d
dec eax
je 0x4dd499
dec eax
je 0x4dd4a5
jmp 0x4dd4b1
mov dword [ebp - 0xf0], 0x203
jmp 0x4dd4bb
mov dword [ebp - 0xf0], 0x10446
jmp 0x4dd4bb
mov dword [ebp - 0xf0], 0x10447
jmp 0x4dd4bb
mov dword [ebp - 0xf0], 0x201
mov ax, word [ebp + 0x14]
movsx eax, ax
mov word [ebp - 0xe8], ax
mov eax, dword [ebp + 0x14]
shr eax, 0x10
and eax, 0xffff
movsx eax, ax
mov word [ebp - 0xe6], ax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xec], eax
jmp 0x4de2f9
mov eax, dword [0x5b9930]
cmp eax, 1
jl 0x4dd504
jmp 0x4dd4f8
mov eax, dword [0x5b9930]
cmp eax, 4
jg 0x4dd504
jmp 0x4dd50e
mov dword [0x5b9930], 1
mov eax, dword [0x587570]
cmp eax, 2
je 0x4dd51d
jmp 0x4dd57f
mov eax, dword [0x5b9960]
cmp eax, dword [ebp + 8]
je 0x4dd529
jmp 0x4dd57f
call fcn.004cdf10
mov ebx, eax
mov esi, 0
mov eax, dword [0x5b9940]
mov edx, 0
sub ebx, eax
sbb esi, edx
call fcn.004a83c0
mov edx, 0
cmp esi, edx
jl 0x4dd559
jg 0x4dd57f
cmp ebx, eax
jbe 0x4dd559
jmp 0x4dd57f
call fcn.004dc0e0
test al, al
jne 0x4dd564
jmp 0x4dd57f
inc dword [0x5b9930]
push dword [ebp + 0x14]
mov ecx, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
mov edx, 0x203
call fcn.004a8c10
jmp 0x4dd5d8
mov eax, dword [0x587560]
cmp eax, dword [ebp + 8]
je 0x4dd58b
jmp 0x4dd5ce
call fcn.004cdf10
mov ebx, eax
mov esi, 0
mov eax, dword [0x5b9940]
mov edx, 0
sub ebx, eax
sbb esi, edx
call fcn.004a83c0
mov edx, 0
cmp esi, edx
jl 0x4dd5bb
jg 0x4dd5ce
cmp ebx, eax
jbe 0x4dd5bb
jmp 0x4dd5ce
call fcn.004dc0e0
test al, al
jne 0x4dd5c6
jmp 0x4dd5ce
inc dword [0x5b9930]
jmp 0x4dd5d8
mov dword [0x5b9930], 1
call fcn.004cdf10
mov dword [0x5b9940], eax
mov eax, dword [ebp + 8]
mov dword [0x587560], eax
mov dword [0x5b9960], 0
mov dword [0x587570], 1
mov eax, 0x5b9950
call fcn.004a82e0
mov byte [ebp - 0x64], 1
lea eax, [ebp - 0xf0]
mov dword [ebp - 0x20], eax
mov eax, dword [0x5b9930]
cmp eax, 2
jl 0x4dd650
sub eax, 2
je 0x4dd62c
dec eax
je 0x4dd638
dec eax
je 0x4dd644
jmp 0x4dd650
mov dword [ebp - 0xf0], 0x203
jmp 0x4dd65a
mov dword [ebp - 0xf0], 0x10446
jmp 0x4dd65a
mov dword [ebp - 0xf0], 0x10447
jmp 0x4dd65a
mov dword [ebp - 0xf0], 0x201
mov ax, word [ebp + 0x14]
movsx eax, ax
mov word [ebp - 0xe8], ax
mov eax, dword [ebp + 0x14]
shr eax, 0x10
and eax, 0xffff
movsx eax, ax
mov word [ebp - 0xe6], ax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xec], eax
jmp 0x4de2f9
mov eax, dword [0x587560]
cmp eax, dword [ebp + 8]
je 0x4dd697
jmp 0x4dd6ac
mov eax, dword [0x587570]
test eax, eax
je 0x4dd6a2
jmp 0x4dd6ac
mov dword [0x587570], 1
mov byte [ebp - 0x64], 1
lea eax, [ebp - 0xf0]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0xf0], 0x202
mov ax, word [ebp + 0x14]
movsx eax, ax
mov word [ebp - 0xe8], ax
mov eax, dword [ebp + 0x14]
shr eax, 0x10
and eax, 0xffff
movsx eax, ax
mov word [ebp - 0xe6], ax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xec], eax
jmp 0x4de2f9
mov byte [ebp - 0x64], 1
lea eax, [ebp - 0xf0]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0xf0], 0x209
mov ax, word [ebp + 0x14]
movsx eax, ax
mov word [ebp - 0xe8], ax
mov eax, dword [ebp + 0x14]
shr eax, 0x10
and eax, 0xffff
movsx eax, ax
mov word [ebp - 0xe6], ax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xec], eax
jmp 0x4de2f9
mov byte [ebp - 0x64], 1
lea eax, [ebp - 0xf0]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0xf0], 0x207
mov ax, word [ebp + 0x14]
movsx eax, ax
mov word [ebp - 0xe8], ax
mov eax, dword [ebp + 0x14]
shr eax, 0x10
and eax, 0xffff
movsx eax, ax
mov word [ebp - 0xe6], ax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xec], eax
jmp 0x4de2f9
mov byte [ebp - 0x64], 1
lea eax, [ebp - 0xf0]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0xf0], 0x208
mov ax, word [ebp + 0x14]
movsx eax, ax
mov word [ebp - 0xe8], ax
mov eax, dword [ebp + 0x14]
shr eax, 0x10
and eax, 0xffff
movsx eax, ax
mov word [ebp - 0xe6], ax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xec], eax
jmp 0x4de2f9
mov byte [ebp - 0x64], 1
lea eax, [ebp - 0xf0]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0xf0], 0x20d
mov ax, word [ebp + 0x14]
movsx eax, ax
mov word [ebp - 0xe8], ax
mov eax, dword [ebp + 0x14]
shr eax, 0x10
and eax, 0xffff
movsx eax, ax
mov word [ebp - 0xe6], ax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xec], eax
jmp 0x4de2f9
mov byte [ebp - 0x64], 1
lea eax, [ebp - 0xf0]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0xf0], 0x20b
mov ax, word [ebp + 0x14]
movsx eax, ax
mov word [ebp - 0xe8], ax
mov eax, dword [ebp + 0x14]
shr eax, 0x10
and eax, 0xffff
movsx eax, ax
mov word [ebp - 0xe6], ax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xec], eax
jmp 0x4de2f9
mov byte [ebp - 0x64], 1
lea eax, [ebp - 0xf0]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0xf0], 0x20c
mov ax, word [ebp + 0x14]
movsx eax, ax
mov word [ebp - 0xe8], ax
mov eax, dword [ebp + 0x14]
shr eax, 0x10
and eax, 0xffff
movsx eax, ax
mov word [ebp - 0xe6], ax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xec], eax
jmp 0x4de2f9
mov byte [ebp - 0x64], 1
mov dword [ebp - 0x14], 0x1044c
jmp 0x4de2f9
mov byte [ebp - 0x64], 1
mov dword [ebp - 0x14], 0x1044d
jmp 0x4de2f9
mov byte [ebp - 0x64], 1
lea eax, [ebp - 0x110]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x110], 0x200
mov ax, word [ebp + 0x14]
movsx eax, ax
mov word [ebp - 0x108], ax
mov eax, dword [ebp + 0x14]
shr eax, 0x10
and eax, 0xffff
movsx eax, ax
mov word [ebp - 0x106], ax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x74]
mov ax, word [eax + 0x30]
cmp ax, word [ebp - 0x108]
je 0x4dd919
jmp 0x4dd93b
mov eax, dword [ebp - 0x74]
mov ax, word [eax + 0x32]
cmp ax, word [ebp - 0x106]
je 0x4dd92b
jmp 0x4dd93b
mov dword [ebp - 0x110], 0
mov byte [ebp - 0x64], 0
jmp 0x4dd963
mov eax, 0x5b9b90
cmp eax, dword [ebp - 0x74]
jne 0x4dd947
jmp 0x4dd963
mov edx, dword [ebp - 0x74]
mov ax, word [ebp - 0x108]
mov word [edx + 0x30], ax
mov eax, dword [ebp - 0x74]
mov dx, word [ebp - 0x106]
mov word [eax + 0x32], dx
jmp 0x4de2f9
mov byte [ebp - 0x64], 1
lea eax, [ebp - 0x128]
mov dword [ebp - 0x20], eax
mov ax, word [ebp + 0x14]
movsx eax, ax
mov word [ebp - 0x120], ax
mov eax, dword [ebp + 0x14]
shr eax, 0x10
and eax, 0xffff
movsx eax, ax
mov word [ebp - 0x11e], ax
movsx eax, word [ebp - 0x120]
mov dword [ebp - 0x38], eax
movsx eax, word [ebp - 0x11e]
mov dword [ebp - 0x34], eax
lea edx, [ebp - 0x38]
mov eax, dword [0x566190]
mov ecx, dword [0x566190]
mov ecx, dword [ecx]
call dword [ecx + 0x3c8]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x6c]
test eax, eax
je 0x4dd9dc
jmp 0x4dd9ce
mov eax, dword [ebp - 0x6c]
call fcn.004a88e0
test al, al
je 0x4dd9dc
jmp 0x4dd9e1
jmp 0x4ded8d
mov eax, dword [ebp - 0x6c]
call fcn.00541250
cmp byte [eax + 0x4f], 0
jne 0x4dd9f1
jmp 0x4dd9fc
push dword [ebp - 0x6c]
call sub.user32.dll_GetParent
mov dword [ebp - 0x6c], eax
mov al, byte [0x5875a0]
test al, al
je 0x4dda07
jmp 0x4dda3f
mov eax, dword [ebp - 0x6c]
cmp eax, dword [ebp + 8]
jne 0x4dda11
jmp 0x4dda3f
mov byte [0x5875a0], 1
push dword [ebp + 0x14]
mov ecx, dword [ebp + 0x10]
mov eax, dword [ebp - 0x6c]
mov edx, 0x20a
call fcn.004a8e80
mov dword [ebp - 0x11c], eax
mov byte [0x5875a0], 0
jmp 0x4ded8d
mov eax, dword [ebp - 0x6c]
cmp eax, dword [ebp + 8]
jne 0x4dda49
jmp 0x4dda4e
jmp 0x4ded8d
mov dword [ebp - 0x128], 0x20a
lea eax, [ebp - 0x38]
push eax
push dword [ebp - 0x6c]
call sub.user32.dll_ScreenToClient
mov ax, word [ebp - 0x38]
mov word [ebp - 0x120], ax
mov ax, word [ebp - 0x34]
mov word [ebp - 0x11e], ax
mov eax, dword [ebp + 0x10]
call fcn.004526a0
mov word [ebp - 0x124], ax
mov eax, dword [ebp + 0x10]
call fcn.00452680
mov word [ebp - 0x122], ax
movzx eax, word [ebp - 0x124]
call fcn.00412a20
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x11c], 0
mov eax, dword [ebp + 8]
mov edx, 0xffffffeb
call fcn.004a8730
mov dword [ebp - 0x118], eax
mov byte [ebp - 0x5c], 0
jmp 0x4de2f9
mov eax, ebp
call fcn.004df0e0
jmp 0x4de2f9
mov dword [ebp - 0x14], 0x84
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xc], eax
jmp 0x4de2f9
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xc], eax
mov byte [ebp - 0x64], 1
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x4ddb13
jmp 0x4ddb6d
mov eax, dword [ebp - 0x4c]
test dword [eax + 0x28], 0x10
je 0x4ddb21
jmp 0x4ddb6d
mov eax, dword [ebp + 0x10]
cmp eax, 2
je 0x4ddb2b
jmp 0x4ddb6d
mov edx, dword [ebp - 0x4c]
mov eax, 0x55a980
call fcn.0040aa70
test al, al
jne 0x4ddb3e
jmp 0x4ddb6d
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0xd8]
cmp eax, 1
je 0x4ddb4e
jmp 0x4ddb6d
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0xdc]
cmp eax, 1
je 0x4ddb5e
jmp 0x4ddb6d
mov eax, dword [ebp - 0x4c]
mov ecx, 0xffffffff
mov dl, 1
call fcn.005072c0
mov dword [ebp - 0x4c], 0
jmp 0x4de2f9
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xc], eax
mov byte [ebp - 0x64], 1
mov eax, dword [0x55bfb0]
mov edx, 0
call fcn.004226c0
jmp 0x4de2f9
mov eax, dword [ebp + 0x14]
mov eax, dword [eax]
call fcn.00541250
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
cmp dword [eax + 0x10], 0
jne 0x4ddbbb
jmp 0x4ddc00
mov dword [ebp - 0x13c], 0
push dword [ebp + 0x10]
push dword [ebp + 0x14]
lea eax, [ebp - 0x13c]
push eax
lea eax, [ebp - 0x5c]
push eax
mov eax, dword [ebp - 0x74]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp + 8]
mov ecx, 0x4e
mov ebx, dword [ebp - 0x74]
mov ebx, dword [ebx + 0x10]
call ebx
test al, al
jne 0x4ddbf2
jmp 0x4ddc00
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 4], eax
jmp 0x4ded8d
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 8]
cmp eax, 0xfffffd13
je 0x4ddc0f
jmp 0x4ddc30
mov dword [ebp - 0x14], 0x10405
mov eax, dword [ebp - 0x74]
mov eax, dword [eax + 0x14]
test eax, eax
jne 0x4ddc22
jmp 0x4ddc2b
mov eax, dword [ebp - 0x74]
mov eax, dword [eax + 0x14]
mov dword [ebp - 0x4c], eax
jmp 0x4ddce2
lea eax, [ebp - 0x148]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x148], 0x4e
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x144], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x140], eax
mov ebx, dword [ebp - 0x140]
mov eax, dword [ebx + 8]
cmp eax, 0xfffffff4
je 0x4ddc68
jmp 0x4ddce2
mov eax, dword [ebp - 0x74]
mov edx, dword [eax + 0x14]
mov eax, 0x591744
call fcn.0040aa70
test al, al
jne 0x4ddc7e
jmp 0x4ddc8d
mov eax, dword [ebp - 0x74]
mov edx, dword [eax + 0x14]
mov eax, ebp
call fcn.004df400
jmp 0x4ddce0
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x74]
call fcn.004dc150
test al, al
jne 0x4ddc9e
jmp 0x4ddce0
mov eax, dword [ebp - 0x74]
cmp byte [eax + 0x51], 0
jne 0x4ddca9
jmp 0x4ddce0
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0xc]
cmp eax, 1
jb 0x4ddce0
dec eax
je 0x4ddcc0
sub eax, 0x10000
je 0x4ddcd0
jmp 0x4ddce0
mov dword [ebp - 0x13c], 0x20
mov byte [ebp - 0x5c], 0
jmp 0x4ddce0
mov dword [ebp - 0x13c], 0
mov byte [ebp - 0x5c], 0
jmp 0x4ddce0
jmp 0x4ddce2
jmp 0x4de2f9
mov edx, dword [ebp + 0x10]
mov eax, ebp
call fcn.004dff90
jmp 0x4de2f9
mov eax, dword [ebp + 0x14]
and eax, 4
cmp eax, 4
je 0x4ddd03
jmp 0x4ddd16
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x4ddd0c
jmp 0x4ddd16
mov edx, dword [ebp + 0x10]
mov eax, ebp
call fcn.004dff90
jmp 0x4de2f9
mov dword [ebp - 0x14], 0x302
jmp 0x4de2f9
mov byte [ebp - 0x64], 1
lea eax, [ebp - 0xf0]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0xf0], 0x206
mov ax, word [ebp + 0x14]
movsx eax, ax
mov word [ebp - 0xe8], ax
mov eax, dword [ebp + 0x14]
shr eax, 0x10
and eax, 0xffff
movsx eax, ax
mov word [ebp - 0xe6], ax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xec], eax
jmp 0x4de2f9
mov byte [ebp - 0x64], 1
lea eax, [ebp - 0xf0]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0xf0], 0x204
mov ax, word [ebp + 0x14]
movsx eax, ax
mov word [ebp - 0xe8], ax
mov eax, dword [ebp + 0x14]
shr eax, 0x10
and eax, 0xffff
movsx eax, ax
mov word [ebp - 0xe6], ax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xec], eax
mov dword [ebp - 0xe4], 0
jmp 0x4de2f9
mov byte [ebp - 0x64], 1
mov byte [ebp - 0x5c], 0
lea eax, [ebp - 0xf0]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0xf0], 0x205
mov ax, word [ebp + 0x14]
movsx eax, ax
mov word [ebp - 0xe8], ax
mov eax, dword [ebp + 0x14]
shr eax, 0x10
and eax, 0xffff
movsx eax, ax
mov word [ebp - 0xe6], ax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xec], eax
mov dword [ebp - 0xe4], 0
jmp 0x4de2f9
mov byte [ebp - 0x5c], 0
mov byte [ebp - 0x64], 1
lea eax, [ebp - 0x100]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x100], 0x7b
mov ax, word [ebp + 0x14]
movsx eax, ax
mov word [ebp - 0xf8], ax
mov eax, dword [ebp + 0x14]
shr eax, 0x10
and eax, 0xffff
movsx eax, ax
mov word [ebp - 0xf6], ax
mov eax, dword [ebp + 8]
mov dword [ebp - 0xfc], eax
mov dword [ebp - 0xf4], 0
jmp 0x4de2f9
mov eax, ebp
call fcn.004df950
jmp 0x4de2f9
mov eax, dword [0x566190]
mov edx, dword [0x566190]
mov edx, dword [edx]
call dword [edx + 0x6c]
cmp eax, dword [ebp + 8]
je 0x4dde90
jmp 0x4dded3
mov eax, dword [ebp + 8]
call fcn.004a8880
test al, al
je 0x4dde9e
jmp 0x4ddec7
call fcn.004a83f0
cmp eax, dword [ebp + 8]
je 0x4ddeaa
jmp 0x4ddec7
mov eax, dword [ebp + 8]
call fcn.005416d0
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x6c]
cmp eax, dword [ebp + 8]
jne 0x4ddebf
jmp 0x4ddec7
mov eax, dword [ebp - 0x6c]
call fcn.004a9160
mov dword [ebp - 4], 0
jmp 0x4ded8d
mov byte [ebp - 0x5c], 0
jmp 0x4de2f9
mov eax, dword [0x566190]
mov edx, dword [0x566190]
mov edx, dword [edx]
call dword [edx + 0x6c]
cmp eax, dword [ebp + 8]
je 0x4ddef3
jmp 0x4ddf07
push 0
mov eax, dword [ebp + 8]
mov ecx, 0
mov edx, 0xb000
call fcn.004a8c10
mov eax, dword [ebp + 8]
cmp eax, dword [0x587560]
jne 0x4ddf14
jmp 0x4ddf31
mov eax, dword [0x587570]
test eax, eax
jne 0x4ddf1f
jmp 0x4ddf31
mov dword [0x587570], 2
mov eax, dword [ebp + 8]
mov dword [0x5b9960], eax
mov dword [ebp - 0x14], 7
jmp 0x4de2f9
mov dword [ebp - 0x14], 0x18
mov eax, dword [ebp + 0x10]
test eax, eax
setne al
movzx ax, al
neg ax
mov word [ebp - 0x10], ax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0x4c], 0
jne 0x4ddf68
jmp 0x4ddffd
mov eax, dword [ebp + 0x10]
test eax, eax
jne 0x4ddf83
jmp 0x4ddf71
mov eax, dword [ebp - 0x4c]
mov al, byte [eax + 0x252]
test al, al
je 0x4ddf83
jmp 0x4ddffd
mov eax, dword [ebp + 0x10]
test eax, eax
je 0x4ddf9d
jmp 0x4ddf8c
mov eax, dword [ebp - 0x4c]
cmp byte [eax + 0x252], 0
jne 0x4ddf9d
jmp 0x4ddffd
cmp dword [0x55bfb0], 0
jne 0x4ddfa8
jmp 0x4ddffd
mov eax, dword [0x55bfb0]
mov eax, dword [eax + 0x148]
cmp eax, dword [ebp - 0x4c]
je 0x4ddfba
jmp 0x4ddffd
mov eax, dword [0x55bfb0]
mov al, byte [eax + 0x100]
test al, al
je 0x4ddfcb
jmp 0x4ddffd
mov eax, dword [ebp + 0x10]
test eax, eax
je 0x4ddfd4
jmp 0x4ddfdd
mov dword [ebp - 0x78], 0
jmp 0x4ddfe4
mov dword [ebp - 0x78], 4
push dword [ebp - 0x78]
mov eax, dword [0x566190]
mov edx, dword [0x566190]
mov edx, dword [edx]
call dword [edx + 0x6c]
push eax
call sub.user32.dll_ShowWindow
jmp 0x4de2f9
lea eax, [ebp - 0xe0]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0xe0], 0xbd06
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xd8], eax
mov ax, word [ebp + 0x10]
mov word [ebp - 0xdc], ax
mov dword [ebp - 0xd4], 0
mov byte [ebp - 0x5c], 0
jmp 0x4de2f9
mov eax, ebp
call fcn.004df530
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xc], eax
mov al, byte [ebp - 0x5c]
mov byte [ebp - 0x60], al
mov byte [ebp - 0x5c], 0
jmp 0x4de2f9
mov byte [ebp - 0x64], 1
mov dx, word [ebp + 0x10]
mov eax, ebp
call fcn.004dede0
lea eax, [ebp - 0xd0]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0xd0], 0xbd04
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xc8], eax
mov ax, word [ebp + 0x10]
mov word [ebp - 0xcc], ax
mov dword [ebp - 0xc4], 0
mov byte [ebp - 0x5c], 0
mov eax, dword [ebp + 8]
mov dword [0x587590], eax
jmp 0x4de2f9
mov byte [ebp - 0x64], 1
lea eax, [ebp - 0xd0]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0xd0], 0xbd05
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xc8], eax
mov ax, word [ebp + 0x10]
mov word [ebp - 0xcc], ax
mov dword [ebp - 0xc4], 0
mov byte [ebp - 0x5c], 0
jmp 0x4de2f9
mov dword [ebp - 0x14], 0x113
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xc], eax
jmp 0x4de2f9
mov dword [ebp - 0x14], 0x46
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xc], eax
jmp 0x4de2f9
mov dword [ebp - 0x14], 0x47
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0x18]
and eax, 1
test eax, eax
je 0x4de145
jmp 0x4de151
push 0xffffffffffffffff
push 0
push dword [ebp + 8]
call sub.user32.dll_InvalidateRect
jmp 0x4de2f9
mov eax, dword [ebp + 0x14]
mov eax, dword [eax]
cmp eax, 1
jb 0x4de1c6
dec eax
je 0x4de165
jmp 0x4de1c6
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0x14]
mov dword [ebp - 0x18], eax
mov edx, dword [ebp - 0x18]
mov eax, 0x5a0d10
call fcn.0040aa70
test al, al
jne 0x4de181
jmp 0x4de1c4
mov eax, dword [ebp + 8]
call fcn.004a8350
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0x170]
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
call fcn.00547ea0
mov edx, dword [ebp + 0x14]
mov eax, dword [ebp - 0x170]
mov dword [edx + 0xc], eax
mov eax, dword [ebp + 0x14]
mov edx, dword [ebp - 0x16c]
mov dword [eax + 0x10], edx
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp + 8]
call fcn.004a8d40
mov byte [ebp - 0x5c], 0
jmp 0x4de1f4
mov eax, dword [ebp + 0x10]
test eax, eax
jne 0x4de1cf
jmp 0x4de1f4
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jne 0x4de1dd
jmp 0x4de1f4
mov dword [ebp - 0x14], 0x2c
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x10], eax
mov byte [ebp - 0x5c], 0
jmp 0x4de2f9
mov eax, dword [0x55bfb0]
call fcn.004225c0
jmp 0x4de2f9
mov eax, dword [0x566190]
mov edx, dword [0x566190]
mov edx, dword [edx]
call dword [edx + 0x6c]
cmp eax, dword [ebp + 8]
je 0x4de21f
jmp 0x4de242
call fcn.004692d0
mov ebx, eax
mov eax, ebx
call fcn.0046b280
call fcn.00491a30
call fcn.004692d0
mov ebx, eax
mov eax, ebx
mov edx, ebx
mov edx, dword [edx]
call dword [edx + 0x7c]
jmp 0x4de2f9
call fcn.004692d0
mov ebx, eax
mov eax, ebx
call fcn.00469490
test al, al
jne 0x4de25b
jmp 0x4de26a
mov eax, dword [ebp + 8]
mov cl, 1
mov edx, 0
call fcn.004a8840
jmp 0x4de2f9
mov eax, dword [0x566190]
mov edx, dword [0x566190]
mov edx, dword [edx]
call dword [edx + 0x6c]
cmp eax, dword [ebp + 8]
je 0x4de286
jmp 0x4de2bd
mov eax, dword [0x566190]
cmp dword [eax + 0x188], 0
jne 0x4de296
jmp 0x4de2bd
mov eax, dword [0x566190]
mov eax, dword [eax + 0x18c]
mov ecx, dword [ebp + 0x14]
mov edx, dword [ebp + 0x10]
mov ebx, dword [0x566190]
mov ebx, dword [ebx + 0x188]
call ebx
mov dword [ebp - 4], eax
jmp 0x4ded8d
jmp 0x4de2f9
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xc], eax
mov byte [ebp - 0x5c], 0
jmp 0x4de2f9
mov eax, dword [ebp + 0xc]
cmp eax, 0x400
jae 0x4de2e3
jmp 0x4de2f9
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xc], eax
mov byte [ebp - 0x5c], 0
cmp byte [ebp - 0x5c], 0
jne 0x4de301
jmp 0x4de31c
push dword [ebp + 0x14]
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
call fcn.004dbdd0
mov edx, dword [ebp - 0x20]
mov dword [edx + 0xc], eax
mov byte [ebp - 0x5c], 0
mov eax, dword [ebp + 0xc]
cmp eax, 3
jb 0x4de766
sub eax, 3
je 0x4de3cf
sub eax, 2
je 0x4de502
sub eax, 0xc
je 0x4de69d
sub eax, 5
je 0x4de654
sub eax, 6
je 0x4de368
sub eax, 0x69
je 0x4de702
sub eax, 0x6c
je 0x4de615
jmp 0x4de766
mov eax, dword [0x566190]
mov edx, dword [0x566190]
mov edx, dword [edx]
call dword [edx + 0x6c]
cmp eax, dword [ebp + 8]
je 0x4de37f
jmp 0x4de3ca
mov eax, dword [ebp + 0x10]
test eax, eax
jne 0x4de388
jmp 0x4de3a9
mov eax, dword [ebp + 8]
call fcn.00541400
cmp dword [0x55bfb0], 0
jne 0x4de39b
jmp 0x4de3a7
mov eax, dword [0x55bfb0]
mov dl, 1
call fcn.00422330
jmp 0x4de3ca
mov eax, dword [ebp + 8]
mov dl, 0
call fcn.00541320
cmp dword [0x55bfb0], 0
jne 0x4de3be
jmp 0x4de3ca
mov eax, dword [0x55bfb0]
mov dl, 1
call fcn.00422380
jmp 0x4de766
lea eax, [ebp - 0x138]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x138], 3
mov dword [ebp - 0x134], pe_nt_image_headers32
mov eax, dword [ebp + 8]
mov edx, 0xfffffff0
call fcn.004a8730
and eax, 0x40000000
test eax, eax
je 0x4de407
jmp 0x4de491
mov dword [ebp - 0xa8], 0x2c
mov eax, dword [ebp + 8]
call fcn.004a8880
or al, al
setne al
movzx eax, al
neg eax
test eax, eax
jne 0x4de429
jmp 0x4de45b
lea eax, [ebp - 0xa8]
push eax
push dword [ebp + 8]
call sub.user32.dll_GetWindowPlacement
test eax, eax
jne 0x4de43e
jmp 0x4de45b
lea eax, [ebp - 0x8c]
mov dx, word [eax]
mov word [ebp - 0x130], dx
mov dx, word [eax + 4]
mov word [ebp - 0x12e], dx
jmp 0x4de48f
lea eax, [ebp - 0x30]
push eax
push dword [ebp + 8]
call sub.user32.dll_GetWindowRect
test eax, eax
jne 0x4de46d
jmp 0x4de485
mov ax, word [ebp - 0x30]
mov word [ebp - 0x130], ax
mov ax, word [ebp - 0x2c]
mov word [ebp - 0x12e], ax
jmp 0x4de48f
mov dword [ebp - 0x138], 0
jmp 0x4de4c7
lea ecx, [ebp - 0x40]
lea edx, [ebp - 0x3c]
mov eax, dword [ebp + 8]
call fcn.004a9c00
test al, al
jne 0x4de4a5
jmp 0x4de4bd
mov ax, word [ebp - 0x3c]
mov word [ebp - 0x130], ax
mov ax, word [ebp - 0x40]
mov word [ebp - 0x12e], ax
jmp 0x4de4c7
mov dword [ebp - 0x138], 0
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x4de4d0
jmp 0x4de4fd
mov edx, dword [ebp - 0x4c]
movsx eax, word [ebp - 0x130]
cmp eax, dword [edx + 0x128]
je 0x4de4e4
jmp 0x4de4fd
mov eax, dword [ebp - 0x4c]
movsx edx, word [ebp - 0x12e]
cmp edx, dword [eax + 0x230]
je 0x4de4f8
jmp 0x4de4fd
jmp 0x4ded8d
jmp 0x4de766
mov dword [ebp - 0x14], 5
mov eax, dword [ebp + 0x10]
or eax, 0x80
mov dword [ebp - 0x10], eax
mov eax, dword [0x566190]
mov edx, dword [0x566190]
mov edx, dword [edx]
call dword [edx + 0x6c]
cmp eax, dword [ebp + 8]
je 0x4de52e
jmp 0x4de5b4
mov eax, dword [0x55bfb0]
cmp dword [eax + 0x148], 0
jne 0x4de541
jmp 0x4de5b4
mov eax, dword [0x55bfb0]
mov eax, dword [eax + 0x148]
call fcn.00502b70
test al, al
jne 0x4de557
jmp 0x4de5b4
mov eax, dword [0x55bfb0]
mov eax, dword [eax + 0x148]
mov dword [ebp - 0x4c], eax
mov eax, dword [0x55bfb0]
call fcn.0041ead0
mov dword [ebp + 8], eax
mov eax, dword [0x566190]
mov edx, dword [0x566190]
mov edx, dword [edx]
call dword [edx + 0x6c]
call fcn.004a8880
test al, al
jne 0x4de58d
jmp 0x4de596
mov dword [ebp - 0x10], 0x81
jmp 0x4de5b4
mov eax, dword [ebp + 8]
call fcn.004a8940
test al, al
jne 0x4de5a4
jmp 0x4de5ad
mov dword [ebp - 0x10], 0x82
jmp 0x4de5b4
mov dword [ebp - 0x10], pe_nt_image_headers32
lea ecx, [ebp - 0x48]
lea edx, [ebp - 0x44]
mov eax, dword [ebp + 8]
call fcn.004a87b0
mov ax, word [ebp - 0x44]
mov word [ebp - 0xc], ax
mov ax, word [ebp - 0x48]
mov word [ebp - 0xa], ax
cmp dword [ebp - 0x4c], 0
jne 0x4de5da
jmp 0x4de5e4
mov eax, dword [ebp - 0x4c]
mov dl, 0
call fcn.004fc510
mov eax, dword [ebp + 8]
call fcn.00541250
mov eax, dword [eax]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x68]
test eax, eax
jne 0x4de5fa
jmp 0x4de610
push 2
push dword [ebp - 0x48]
push dword [ebp - 0x44]
push 0
push 0
push 0
push dword [ebp - 0x68]
call sub.user32.dll_SetWindowPos
jmp 0x4de766
mov eax, dword [ebp + 0x14]
cmp eax, 0x3e8
jne 0x4de621
jmp 0x4de628
mov dword [ebp - 0x14], 0x10405
mov edx, dword [ebp - 0x4c]
mov eax, 0x59ba64
call fcn.0040aa70
test al, al
jne 0x4de63b
jmp 0x4de64f
mov eax, dword [ebp + 0x10]
cmp eax, 1
je 0x4de645
jmp 0x4de64f
mov edx, dword [ebp - 0x4c]
mov eax, ebp
call fcn.004dfed0
jmp 0x4de766
cmp dword [0x55bfb0], 0
jne 0x4de65f
jmp 0x4de698
mov eax, dword [0x566190]
mov edx, dword [0x566190]
mov edx, dword [edx]
call dword [edx + 0x6c]
cmp eax, dword [ebp + 8]
je 0x4de676
jmp 0x4de698
mov eax, dword [ebp + 0x10]
cmp eax, 0
jg 0x4de680
jmp 0x4de698
mov dword [ebp - 0x14], 0
mov eax, dword [0x55bfb0]
call fcn.004222f0
mov dword [ebp - 8], 0
jmp 0x4de766
cmp dword [0x55bfb0], 0
jne 0x4de6a8
jmp 0x4de6fd
mov eax, dword [0x566190]
mov edx, dword [0x566190]
mov edx, dword [edx]
call dword [edx + 0x6c]
cmp eax, dword [ebp + 8]
je 0x4de6bf
jmp 0x4de6fd
mov dword [ebp - 0x14], 0
mov eax, dword [ebp - 8]
test eax, eax
sete byte [ebp - 0x168]
lea edx, [ebp - 0x168]
mov eax, dword [0x55bfb0]
call fcn.004223d0
cmp byte [ebp - 0x168], 0
jne 0x4de6ed
jmp 0x4de6f6
mov dword [ebp - 8], 0
jmp 0x4de6fd
mov dword [ebp - 8], 1
jmp 0x4de766
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x4de70b
jmp 0x4de764
call fcn.004692d0
mov ebx, eax
mov eax, ebx
call fcn.00469490
test al, al
jne 0x4de71f
jmp 0x4de764
mov edx, dword [ebp - 0x4c]
mov eax, 0x55a980
call fcn.0040aa70
test al, al
je 0x4de732
jmp 0x4de764
mov edx, dword [ebp - 0x4c]
mov eax, 0x58d68c
call fcn.0040aa70
test al, al
jne 0x4de745
jmp 0x4de764
call fcn.004692d0
mov ebx, eax
mov edx, dword [ebp - 0x4c]
mov eax, ebx
mov cl, 1
mov esi, ebx
mov esi, dword [esi]
call dword [esi + 0xb4]
mov dword [ebp - 8], 0
jmp 0x4de766
lea eax, [ebp - 0x110]
cmp eax, dword [ebp - 0x20]
je 0x4de773
jmp 0x4de7af
mov edx, dword [ebp - 0x4c]
mov eax, 0x55a270
call fcn.0040aa70
test al, al
je 0x4de786
jmp 0x4de7af
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 0x4c]
call fcn.00540e70
test al, al
jne 0x4de797
jmp 0x4de7ad
mov ax, word [ebp - 0x30]
sub word [ebp - 0x108], ax
mov ax, word [ebp - 0x2c]
sub word [ebp - 0x106], ax
jmp 0x4de7f6
lea eax, [ebp - 0xf0]
cmp eax, dword [ebp - 0x20]
je 0x4de7bc
jmp 0x4de7f6
mov edx, dword [ebp - 0x4c]
mov eax, 0x55a270
call fcn.0040aa70
test al, al
je 0x4de7cf
jmp 0x4de7f6
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 0x4c]
call fcn.00540e70
test al, al
jne 0x4de7e0
jmp 0x4de7f6
mov ax, word [ebp - 0x30]
sub word [ebp - 0xe8], ax
mov ax, word [ebp - 0x2c]
sub word [ebp - 0xe6], ax
cmp byte [ebp - 0x64], 0
jne 0x4de7fe
jmp 0x4de825
mov eax, dword [ebp + 8]
mov dword [0x587620], eax
mov eax, dword [ebp - 0x20]
mov edx, dword [eax]
mov eax, dword [ebp - 0x4c]
call fcn.00411ed0
mov eax, dword [0x587620]
test eax, eax
je 0x4de81e
jmp 0x4de825
mov dword [ebp - 0x4c], 0
cmp dword [ebp - 0x4c], 0
jne 0x4de82d
jmp 0x4de843
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
test eax, eax
jne 0x4de838
jmp 0x4de843
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x4c]
call fcn.0054f980
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
cmp eax, 0x14
jb 0x4de97b
sub eax, 0x14
je 0x4de8e1
sub eax, 0xc
je 0x4de8e1
sub eax, 0x5b
je 0x4de8e1
sub eax, 0x92
jb 0x4de97b
sub eax, 2
jbe 0x4de96d
sub eax, 3
je 0x4de8f6
sub eax, 0xf3
je 0x4de8e1
sub eax, 5
je 0x4de8e1
sub eax, 0x77
jb 0x4de97b
sub eax, 4
jbe 0x4de96d
sub eax, 3
je 0x4de96d
sub eax, 0xba78
jb 0x4de97b
sub eax, 1
jbe 0x4de952
dec eax
je 0x4de901
sub eax, 2
jb 0x4de97b
sub eax, 1
jbe 0x4de952
dec eax
je 0x4de901
jmp 0x4de97b
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0xc]
test eax, eax
je 0x4de8ed
jmp 0x4de8f1
mov byte [ebp - 0x5c], 1
jmp 0x4de9d7
mov al, byte [ebp - 0x60]
mov byte [ebp - 0x5c], al
jmp 0x4de9d7
mov eax, dword [ebp - 0xd4]
test eax, eax
sete byte [ebp - 0x5c]
cmp byte [0x5aeb40], 0
jne 0x4de918
jmp 0x4de943
mov eax, dword [ebp - 0xd4]
cmp eax, 1
je 0x4de937
jmp 0x4de925
mov ax, word [ebp - 0x1a8]
cmp ax, word [ebp - 0xdc]
jne 0x4de937
jmp 0x4de941
movzx eax, word [ebp - 0xdc]
mov dword [ebp + 0x10], eax
jmp 0x4de94d
movzx eax, word [ebp - 0xdc]
mov dword [ebp + 0x10], eax
jmp 0x4de9d7
mov eax, dword [ebp - 0xc4]
test eax, eax
sete byte [ebp - 0x5c]
movzx eax, word [ebp - 0xcc]
mov dword [ebp + 0x10], eax
jmp 0x4de9d7
mov eax, dword [ebp - 8]
test eax, eax
sete byte [ebp - 0x5c]
jmp 0x4de9d7
mov eax, dword [ebp + 0xc]
cmp eax, 0x82
jb 0x4de9d7
sub eax, 0x82
je 0x4de9b2
sub eax, 0x17f
jb 0x4de9d7
sub eax, 1
jbe 0x4de99a
jmp 0x4de9d7
mov eax, dword [0x587570]
cmp eax, 1
je 0x4de9a6
jmp 0x4de9b0
mov dword [0x587570], 0
jmp 0x4de9d7
mov eax, dword [ebp + 8]
call fcn.005411f0
test al, al
jne 0x4de9c0
jmp 0x4de9c7
mov dword [ebp - 0x74], 0
mov eax, 0x4dbd90
push eax
push dword [ebp + 8]
call sub.user32.dll_EnumPropsA
jmp 0x4de9d7
cmp byte [ebp - 0x5c], 0
jne 0x4de9e2
jmp 0x4dec8a
mov eax, dword [ebp + 0xc]
cmp eax, 0x102
je 0x4de9ee
jmp 0x4dea31
mov eax, dword [ebp + 0x10]
cmp eax, 0xd
je 0x4de9f8
jmp 0x4dea31
mov edx, dword [ebp - 0x4c]
mov eax, 0x5973c8
call fcn.0040aa70
test al, al
jne 0x4dea48
jmp 0x4dea0b
mov edx, dword [ebp - 0x4c]
mov eax, 0x598208
call fcn.0040aa70
test al, al
jne 0x4dea1e
jmp 0x4dea31
mov edx, dword [ebp - 0x4c]
mov eax, 0x5987b0
call fcn.0040aa70
test al, al
je 0x4dea48
jmp 0x4dea31
push dword [ebp + 0x14]
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
call fcn.004dbdd0
mov edx, dword [ebp - 0x20]
mov dword [edx + 0xc], eax
mov eax, dword [ebp + 0xc]
cmp eax, 0x100
jb 0x4dec8a
sub eax, 0x100
je 0x4dea7f
dec eax
jb 0x4dec8a
sub eax, 1
jbe 0x4dea7f
sub eax, 2
je 0x4dea7f
dec eax
jb 0x4dec8a
sub eax, 1
jbe 0x4dea7f
jmp 0x4dec8a
mov eax, dword [ebp - 0x20]
mov dword [eax + 0xc], 0
mov eax, dword [ebp + 0xc]
cmp eax, 0x100
jb 0x4deb70
sub eax, 0x100
je 0x4deb14
dec eax
je 0x4deb2b
dec eax
je 0x4deac4
sub eax, 2
je 0x4deb42
dec eax
je 0x4deb59
dec eax
je 0x4deafd
jmp 0x4deb70
push 0
mov eax, dword [ebp + 8]
mov ecx, 0
mov edx, 0x87
call fcn.004dbdd0
and eax, 0x80
mov edx, dword [ebp - 0x20]
mov dword [edx + 0xc], eax
mov ax, word [ebp + 0x10]
mov word [ebp - 0xdc], ax
mov dword [ebp - 0xe0], 0x102
jmp 0x4deb70
mov ax, word [ebp + 0x10]
mov word [ebp - 0xdc], ax
mov dword [ebp - 0xe0], 0x106
jmp 0x4deb70
mov ax, word [ebp + 0x10]
mov word [ebp - 0xcc], ax
mov dword [ebp - 0xd0], 0x100
jmp 0x4deb70
mov ax, word [ebp + 0x10]
mov word [ebp - 0xcc], ax
mov dword [ebp - 0xd0], 0x101
jmp 0x4deb70
mov ax, word [ebp + 0x10]
mov word [ebp - 0xcc], ax
mov dword [ebp - 0xd0], 0x104
jmp 0x4deb70
mov ax, word [ebp + 0x10]
mov word [ebp - 0xcc], ax
mov dword [ebp - 0xd0], 0x105
jmp 0x4deb70
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x4deb79
jmp 0x4deb9d
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0xc]
test eax, eax
je 0x4deb85
jmp 0x4deb9d
movzx eax, word [ebp - 0xcc]
test eax, eax
jne 0x4deb92
jmp 0x4deb9d
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x4c]
call fcn.0054f980
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0xc]
test eax, eax
je 0x4debac
jmp 0x4dec88
mov eax, dword [ebp + 0xc]
cmp eax, 0x100
je 0x4debbb
jmp 0x4dec88
mov eax, dword [ebp + 0x10]
cmp eax, 0x41
je 0x4debc8
jmp 0x4dec88
mov eax, 0x11
call fcn.004a8450
cmp ax, 0
jl 0x4debdd
jmp 0x4dec88
mov eax, 0x12
call fcn.004a8450
cmp ax, 0
jge 0x4debf2
jmp 0x4dec88
lea eax, [ebp - 0x1e0]
call fcn.00403d10
mov dword [ebp - 0x1e0], 0
lea eax, [ebp - 0x1e0]
push eax
mov eax, str.Edit
mov cl, 1
mov edx, 4
call fcn.004076c0
mov ebx, dword [ebp - 0x1e0]
lea eax, [ebp - 0x1e4]
call fcn.00403d10
mov dword [ebp - 0x1e4], 0
push 0x14
lea eax, [ebp - 0x1f8]
push eax
push dword [ebp + 8]
call sub.user32.dll_GetClassNameA
lea eax, [ebp - 0x1e4]
push eax
lea eax, [ebp - 0x1f8]
mov cl, 1
mov edx, 0x13
call fcn.004076c0
mov eax, dword [ebp - 0x1e4]
mov edx, ebx
call fcn.00407790
test eax, eax
je 0x4dec77
jmp 0x4dec88
push 0xffffffffffffffff
push 0
push 0xb1
push dword [ebp + 8]
call sub.user32.dll_SendMessageA
jmp 0x4dec8a
mov eax, dword [ebp + 0xc]
cmp eax, 0x100
je 0x4deca2
jmp 0x4dec96
mov eax, dword [ebp + 0xc]
cmp eax, 0x104
je 0x4deca2
jmp 0x4decb8
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0xc]
test eax, eax
je 0x4decae
jmp 0x4decb8
mov dword [0x587590], 0
lea eax, [ebp - 0xc0]
cmp eax, dword [ebp - 0x20]
je 0x4decc5
jmp 0x4decd3
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 4], eax
jmp 0x4ded8d
lea eax, [ebp - 0xd0]
cmp eax, dword [ebp - 0x20]
je 0x4dece0
jmp 0x4decee
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 4], eax
jmp 0x4ded8d
lea eax, [ebp - 0xe0]
cmp eax, dword [ebp - 0x20]
je 0x4decfb
jmp 0x4ded09
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 4], eax
jmp 0x4ded8d
lea eax, [ebp - 0xf0]
cmp eax, dword [ebp - 0x20]
je 0x4ded16
jmp 0x4ded24
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 4], eax
jmp 0x4ded8d
lea eax, [ebp - 0x110]
cmp eax, dword [ebp - 0x20]
je 0x4ded31
jmp 0x4ded3c
mov eax, dword [ebp - 0x104]
mov dword [ebp - 4], eax
jmp 0x4ded8d
lea eax, [ebp - 0x138]
cmp eax, dword [ebp - 0x20]
je 0x4ded49
jmp 0x4ded54
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 4], eax
jmp 0x4ded8d
lea eax, [ebp - 0x148]
cmp eax, dword [ebp - 0x20]
je 0x4ded61
jmp 0x4ded6c
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 4], eax
jmp 0x4ded8d
lea eax, [ebp - 0x128]
cmp eax, dword [ebp - 0x20]
je 0x4ded79
jmp 0x4ded84
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 4], eax
jmp 0x4ded8d
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0xc]
mov dword [ebp - 4], eax
call fcn.0040baf0
lea eax, [ebp - 0x1e4]
call fcn.00403d10
mov dword [ebp - 0x1e4], 0
lea eax, [ebp - 0x1e0]
call fcn.00403d10
mov dword [ebp - 0x1e0], 0
pop eax
test eax, eax
je 0x4dedc6
call fcn.0040bc60
mov eax, dword [ebp - 4]
mov ebx, dword [ebp - 0x204]
mov esi, dword [ebp - 0x200]
mov edi, dword [ebp - 0x1fc]
leave
ret 0x10