Function at 0x4cd257
Capabilities:
Get number of processors

Disassembly:
in al, dx
mov eax, dword [ebp - 4]
call fcn.004cef44
mov eax, dword [0x52be18]
mov edx, 0x4ce618
call fcn.0040474c
jne 0x4cc44d
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
push eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4cea98
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004cf1e0
mov eax, dword [0x52be18]
mov edx, 0x4ce64c
call fcn.0040474c
jne 0x4cc479
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
push eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4ceac8
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004cef44
mov eax, dword [0x52be18]
mov edx, 0x4ce678
call fcn.0040474c
jne 0x4cc4a5
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
push eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4cea98
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004cf638
mov eax, dword [0x52be18]
mov edx, 0x4ce6ac
call fcn.0040474c
jne 0x4cc4d1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
push eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4cea98
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004cf1e0
mov eax, dword [0x52be18]
mov edx, 0x4ce6e0
call fcn.0040474c
jne 0x4cc4fd
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
push eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4ceadc
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004cef44
mov eax, dword [0x52be18]
mov edx, 0x4ce714
call fcn.0040474c
jne 0x4cc529
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
push eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4cea98
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004cf1e0
mov eax, dword [0x52be18]
mov edx, 0x4ce748
call fcn.0040474c
jne 0x4cc555
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
push eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4cea98
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004cf1e0
mov eax, dword [0x52be18]
mov edx, 0x4ce77c
call fcn.0040474c
jne 0x4cc581
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
push eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4cea98
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004cf1e0
mov eax, dword [0x52be18]
mov edx, 0x4ce7ac
call fcn.0040474c
jne 0x4cc5ad
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
push eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4ceaf0
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004cef44
mov eax, dword [0x52be18]
mov edx, 0x4ce7dc
call fcn.0040474c
jne 0x4cc5d9
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
push eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4ceb08
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004cf868
mov eax, dword [0x52be18]
mov edx, 0x4ce80c
call fcn.0040474c
jne 0x4cc605
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
push eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4ce93c
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004cf40c
mov eax, dword [0x52be18]
mov edx, 0x4ce83c
call fcn.0040474c
jne 0x4cc631
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
push eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4cea98
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004cf638
mov edx, 0xc8
mov eax, dword [ebp - 4]
call fcn.004da0d0
test al, al
jne 0x4cc654
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00403d88
jmp 0x4ce2ec
mov eax, dword [0x52be18]
mov edx, 0x4ce558
call fcn.0040474c
jne 0x4cc68c
push 0x32
lea ecx, [ebp - 0x74]
xor edx, edx
mov eax, 0xfffffed4
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
mov eax, dword [ebp - 4]
call fcn.004d8884
mov eax, dword [0x52be18]
mov edx, 0x4ce5e8
call fcn.0040474c
jne 0x4cc6c4
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 0xa
mov eax, 0x14
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
jmp 0x4ccbb4
mov eax, dword [0x52be18]
mov edx, 0x4ce618
call fcn.0040474c
jne 0x4cc739
mov edx, dword [0x52a0bc]
mov edx, dword [edx]
mov eax, 0x4ceb18
call fcn.00404944
test eax, eax
jle 0x4cc712
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 0xa
mov eax, 0x32
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
jmp 0x4ccbb4
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 0xa
mov eax, 0x32
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
jmp 0x4ccbb4
mov eax, dword [0x52be18]
mov edx, 0x4ce64c
call fcn.0040474c
jne 0x4cc7ae
mov edx, dword [0x52a0bc]
mov edx, dword [edx]
mov eax, 0x4ce97c
call fcn.00404944
test eax, eax
jle 0x4cc787
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 0xfffffffe
mov eax, 0xffffffe4
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
jmp 0x4ccbb4
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 0xfffffff1
mov eax, 0x14
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
jmp 0x4ccbb4
mov eax, dword [0x52be18]
mov edx, 0x4ce6e0
call fcn.0040474c
jne 0x4cc7e6
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 0xa
mov eax, 0x14
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
jmp 0x4ccbb4
mov eax, dword [0x52be18]
mov edx, 0x4ce558
call fcn.0040474c
jne 0x4cc858
mov edx, dword [0x52a0bc]
mov edx, dword [edx]
mov eax, 0x4ce97c
call fcn.00404944
test eax, eax
jle 0x4cc831
push 0x32
lea ecx, [ebp - 0x74]
xor edx, edx
mov eax, 0xa
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
jmp 0x4ccbb4
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 0xa
mov eax, 0x14
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
jmp 0x4ccbb4
mov eax, dword [0x52be18]
mov edx, 0x4ce5b8
call fcn.0040474c
jne 0x4cc8cd
mov edx, dword [0x52a0bc]
mov edx, dword [edx]
mov eax, 0x4ce97c
call fcn.00404944
test eax, eax
jle 0x4cc8a6
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 0xa
mov eax, 5
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
jmp 0x4ccbb4
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 0xa
mov eax, 0x14
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
jmp 0x4ccbb4
mov eax, dword [0x52be18]
mov edx, 0x4ce58c
call fcn.0040474c
jne 0x4cc942
mov edx, dword [0x52a0bc]
mov edx, dword [edx]
mov eax, 0x4ce97c
call fcn.00404944
test eax, eax
jle 0x4cc91b
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 0xa
mov eax, 0x14
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
jmp 0x4ccbb4
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 0xa
mov eax, 0x32
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
jmp 0x4ccbb4
mov eax, dword [0x52be18]
mov edx, 0x4ce678
call fcn.0040474c
jne 0x4cc9b7
mov edx, dword [0x52a0bc]
mov edx, dword [edx]
mov eax, 0x4ce97c
call fcn.00404944
test eax, eax
jle 0x4cc990
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 0xa
mov eax, 0x14
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
jmp 0x4ccbb4
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 0xa
mov eax, 0x32
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
jmp 0x4ccbb4
mov eax, dword [0x52be18]
mov edx, 0x4ce77c
call fcn.0040474c
jne 0x4cca2c
mov edx, dword [0x52a0bc]
mov edx, dword [edx]
mov eax, 0x4ce97c
call fcn.00404944
test eax, eax
jle 0x4cca05
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 0xa
mov eax, 0x14
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
jmp 0x4ccbb4
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 0xa
mov eax, 0x32
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
jmp 0x4ccbb4
mov eax, dword [0x52be18]
mov edx, 0x4ce7dc
call fcn.0040474c
jne 0x4ccae2
mov edx, dword [0x52a0bc]
mov edx, dword [edx]
mov eax, 0x4ce97c
call fcn.00404944
test eax, eax
jle 0x4cca7e
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 0xa
mov eax, 0x14
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
jmp 0x4ccbb4
mov edx, dword [0x52a0bc]
mov edx, dword [edx]
mov eax, 0x4ceb18
call fcn.00404944
test eax, eax
jle 0x4ccabb
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 0xa
mov eax, 0x14
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
jmp 0x4ccbb4
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 0xa
mov eax, 0xffffff38
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
jmp 0x4ccbb4
mov eax, dword [0x52be18]
mov edx, 0x4ce80c
call fcn.0040474c
jne 0x4ccb92
mov edx, dword [0x52a0bc]
mov edx, dword [edx]
mov eax, 0x4ce97c
call fcn.00404944
test eax, eax
jle 0x4ccb34
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 0xa
mov eax, 0x1d6
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
jmp 0x4ccbb4
mov edx, dword [0x52a0bc]
mov edx, dword [edx]
mov eax, 0x4ceb18
call fcn.00404944
test eax, eax
jle 0x4ccb6e
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 0xa
mov eax, 0x1d6
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
jmp 0x4ccbb4
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 0xa
mov eax, 0x1d6
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
jmp 0x4ccbb4
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 0xa
mov eax, 0x32
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
mov edx, 0x4ceb24
mov eax, dword [ebp - 4]
call fcn.004d9f54
mov edx, 0xc8
mov eax, dword [ebp - 4]
call fcn.004da0d0
test al, al
jne 0x4ccbe4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00403d88
jmp 0x4ce2ec
mov eax, dword [ebp - 4]
call fcn.004d8884
xor eax, eax
push ebp
push 0x4ccda6
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x52be18]
mov edx, 0x4ce5e8
call fcn.0040474c
jne 0x4cccc1
lea eax, [ebp - 0xd8]
call fcn.004061e8
push eax
lea eax, [ebp - 0xe8]
xor edx, edx
mov cl, 1
call fcn.00415164
push dword [ebp - 0xdc]
push dword [ebp - 0xe0]
push dword [ebp - 0xe4]
push dword [ebp - 0xe8]
lea eax, [ebp - 0xf8]
mov edx, 0x4ceb30
call fcn.00415468
push dword [ebp - 0xec]
push dword [ebp - 0xf0]
push dword [ebp - 0xf4]
push dword [ebp - 0xf8]
lea eax, [ebp - 0xfc]
call fcn.004061e8
push eax
mov eax, dword [ebp - 0x14]
push eax
mov eax, dword [eax]
call dword [eax + 0x20]
call fcn.004062f8
mov eax, dword [ebp - 0xfc]
push eax
mov eax, dword [eax]
call dword [eax + 0x2c]
call fcn.004062f8
mov edx, dword [ebp - 0xd8]
lea eax, [ebp - 0xd4]
mov ecx, 0x4ceb40
call fcn.0040622c
mov eax, dword [ebp - 0xd4]
push eax
mov eax, dword [eax]
call dword [eax + 0x60]
call fcn.004062f8
jmp 0x4ccd9c
mov eax, dword [0x52be18]
mov edx, 0x4ce80c
call fcn.0040474c
je 0x4ccd9c
mov eax, dword [0x52be18]
mov edx, 0x4ce678
call fcn.0040474c
je 0x4ccd9c
push 0x4ceb50
lea eax, [ebp - 0x104]
call fcn.004061e8
push eax
lea eax, [ebp - 0x114]
xor edx, edx
mov cl, 1
call fcn.00415164
push dword [ebp - 0x108]
push dword [ebp - 0x10c]
push dword [ebp - 0x110]
push dword [ebp - 0x114]
lea eax, [ebp - 0x124]
xor edx, edx
mov cl, 1
call fcn.00415164
push dword [ebp - 0x118]
push dword [ebp - 0x11c]
push dword [ebp - 0x120]
push dword [ebp - 0x124]
lea eax, [ebp - 0x128]
call fcn.004061e8
push eax
mov eax, dword [ebp - 0x14]
push eax
mov eax, dword [eax]
call dword [eax + 0x38]
call fcn.004062f8
mov eax, dword [ebp - 0x128]
push eax
mov eax, dword [eax]
call dword [eax + 0x2c]
call fcn.004062f8
mov edx, dword [ebp - 0x104]
lea eax, [ebp - 0x100]
mov ecx, 0x4ceb58
call fcn.0040622c
mov eax, dword [ebp - 0x100]
push eax
push 0
call fcn.004053dc
add esp, 0xc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4ccdb0
mov eax, dword [ebp - 4]
add eax, 0x30
mov edx, 0x4ceb70
call fcn.00404394
mov edx, 0xbb8
mov eax, dword [ebp - 4]
call fcn.004da0d0
test al, al
jne 0x4ccde3
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00403d88
jmp 0x4ce2ec
xor eax, eax
push ebp
push 0x4cce06
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004cecec
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4cce10
cmp dword [ebp - 0x14], 0
jne 0x4cce28
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00403d88
jmp 0x4ce2ec
push 0
push 0x4ce4f4
call sub.user32.dll_FindWindowA
push 0
push 0xf030
push 0x112
push eax
call sub.user32.dll_SendMessageA
mov edx, 0x4ceb84
mov eax, dword [ebp - 4]
call fcn.004d9f54
mov edx, 0x7d0
mov eax, dword [ebp - 4]
call fcn.004da0d0
test al, al
jne 0x4cce76
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00403d88
jmp 0x4ce2ec
lea edx, [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004d8bb4
mov eax, dword [ebp - 4]
add eax, 0x34
mov edx, 0x4ce4d0
call fcn.00404394
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
mov edx, 0x4ceb90
call fcn.0040474c
jne 0x4cd257
xor eax, eax
push ebp
push 0x4cd250
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, 0x1388
mov eax, dword [ebp - 4]
call fcn.004da0d0
test al, al
jne 0x4ccedd
call fcn.00403d88
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00403d88
jmp 0x4ce2ec
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
push eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4ce89c
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004cef44
cmp dword [ebp - 0x1c], 0
jne 0x4ccf1b
cmp dword [ebp - 0x18], 0
jne 0x4ccf1b
call fcn.00403d88
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00403d88
jmp 0x4ce2ec
mov edx, 0x64
mov eax, dword [ebp - 4]
call fcn.004da0d0
test al, al
jne 0x4ccf43
call fcn.00403d88
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00403d88
jmp 0x4ce2ec
mov eax, dword [ebp - 4]
add eax, 0x30
mov edx, 0x4ceb9c
call fcn.00404394
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 0xa
mov eax, 0x14
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
mov edx, 0x1f4
mov eax, dword [ebp - 4]
call fcn.004da0d0
test al, al
jne 0x4ccf9d
call fcn.00403d88
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00403d88
jmp 0x4ce2ec
push 0x4cebb4
mov ecx, 0x4ce990
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004d95f4
lea eax, [ebp - 0x12c]
mov edx, dword [ebp - 0xc]
call fcn.00404bc8
mov eax, dword [ebp - 0x12c]
push eax
mov ecx, 0x4ce990
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004d95f4
mov edx, 0x64
mov eax, dword [ebp - 4]
call fcn.004da0d0
test al, al
jne 0x4ccfff
call fcn.00403d88
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00403d88
jmp 0x4ce2ec
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
push eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4cea6c
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004cef44
mov edx, 0xc8
mov eax, dword [ebp - 4]
call fcn.004da0d0
test al, al
jne 0x4cd042
call fcn.00403d88
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00403d88
jmp 0x4ce2ec
mov edx, dword [0x52a0bc]
mov edx, dword [edx]
mov eax, 0x4ce97c
call fcn.00404944
test eax, eax
jle 0x4cd07c
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 0xa
mov eax, 0x1e
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
jmp 0x4cd09e
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 0xa
mov eax, 0x32
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
mov edx, 0xc8
mov eax, dword [ebp - 4]
call fcn.004da0d0
test al, al
jne 0x4cd0c6
call fcn.00403d88
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00403d88
jmp 0x4ce2ec
mov eax, dword [ebp - 4]
call fcn.004d8884
xor eax, eax
push ebp
push 0x4cd197
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x4ceb50
lea eax, [ebp - 0x134]
call fcn.004061e8
push eax
lea eax, [ebp - 0x144]
xor edx, edx
mov cl, 1
call fcn.00415164
push dword [ebp - 0x138]
push dword [ebp - 0x13c]
push dword [ebp - 0x140]
push dword [ebp - 0x144]
lea eax, [ebp - 0x154]
xor edx, edx
mov cl, 1
call fcn.00415164
push dword [ebp - 0x148]
push dword [ebp - 0x14c]
push dword [ebp - 0x150]
push dword [ebp - 0x154]
lea eax, [ebp - 0x158]
call fcn.004061e8
push eax
mov eax, dword [ebp - 0x14]
push eax
mov eax, dword [eax]
call dword [eax + 0x38]
call fcn.004062f8
mov eax, dword [ebp - 0x158]
push eax
mov eax, dword [eax]
call dword [eax + 0x2c]
call fcn.004062f8
mov edx, dword [ebp - 0x134]
lea eax, [ebp - 0x130]
mov ecx, 0x4ceb58
call fcn.0040622c
mov eax, dword [ebp - 0x130]
push eax
push 0
call fcn.004053dc
add esp, 0xc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4cd1bd
mov eax, dword [ebp - 4]
add eax, 0x30
mov edx, 0x4ceb70
call fcn.00404394
mov edx, 0x7d0
mov eax, dword [ebp - 4]
call fcn.004da0d0
test al, al
jne 0x4cd1f5
call fcn.00403d88
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00403d88
jmp 0x4ce2ec
xor eax, eax
push ebp
push 0x4cd218
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004d8bb4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4cd222
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4cd257
mov edx, 0x3e8
mov eax, dword [ebp - 4]
call fcn.004da0d0
mov eax, dword [ebp - 4]
mov byte [eax + 0x27], 1
mov byte [ebp - 0xd], 1
mov eax, dword [ebp - 4]
call fcn.004cacf8
ret
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
mov edx, 0x4ceb90
call fcn.0040474c
jne 0x4cd27b
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00403d88
jmp 0x4ce2ec
mov edx, 0xc8
mov eax, dword [ebp - 4]
call fcn.004da0d0
test al, al
jne 0x4cd29e
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00403d88
jmp 0x4ce2ec
lea ecx, [ebp - 0x1c]
xor edx, edx
xor eax, eax
call fcn.00406a18
lea eax, [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004cfce0
mov edx, 0x4cebc0
mov eax, dword [ebp - 4]
call fcn.004d9f54
cmp dword [ebp - 0x1c], 0
jne 0x4cd2de
cmp dword [ebp - 0x18], 0
jne 0x4cd2de
mov eax, dword [ebp - 4]
mov byte [eax + 0x27], 0
jmp 0x4cd2e5
mov eax, dword [ebp - 4]
mov byte [eax + 0x27], 1
mov edx, 0x3e8
mov eax, dword [ebp - 4]
call fcn.004da0d0
test al, al
jne 0x4cd308
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00403d88
jmp 0x4ce2ec
cmp dword [ebp - 0x1c], 0
jne 0x4cd97b
cmp dword [ebp - 0x18], 0
jne 0x4cd97b
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
mov edx, 0x4cebcc
call fcn.0040474c
jne 0x4cd337
mov dword [ebp - 0x34], 2
jmp 0x4cd350
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
mov edx, 0x4cebd8
call fcn.0040474c
jne 0x4cd350
mov dword [ebp - 0x34], 4
mov eax, dword [0x52be18]
mov edx, 0x4ce714
call fcn.0040474c
jne 0x4cd3a3
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
push eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4cea98
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004cf1e0
push 0x32
lea ecx, [ebp - 0x74]
xor edx, edx
mov eax, 0x12c
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
mov eax, dword [ebp - 4]
call fcn.004d8884
mov eax, dword [0x52be18]
mov edx, 0x4ce7dc
call fcn.0040474c
jne 0x4cd401
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 0x32
mov eax, 0xa
call fcn.00406a18
lea eax, [ebp - 0x74]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
push eax
lea eax, [ebp - 0x8c]
push eax
mov ecx, 0x4ce92c
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004cef44
lea edx, [ebp - 0x8c]
mov eax, dword [ebp - 4]
pop ecx
call fcn.004d88a8
mov eax, dword [ebp - 4]
call fcn.004d8884
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4cebe4
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004d782c
cmp dword [ebp - 0x1c], 0
jne 0x4cd433
cmp dword [ebp - 0x18], 0
jne 0x4cd433
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00403d88
jmp 0x4ce2ec
mov eax, dword [0x52be18]
mov edx, 0x4ce678
call fcn.0040474c
jne 0x4cd4e6
mov edx, dword [0x52a0bc]
mov edx, dword [edx]
mov eax, 0x4cea54
call fcn.00404944
test eax, eax
jle 0x4cd485
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 5
mov eax, 0xa
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
jmp 0x4cd756
mov edx, dword [0x52a0bc]
mov edx, dword [edx]
mov eax, 0x4ce97c
call fcn.00404944
test eax, eax
jle 0x4cd4bf
push 0x32
lea ecx, [ebp - 0x74]
xor edx, edx
mov eax, 0x14
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
jmp 0x4cd756
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 5
mov eax, 0x12
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
jmp 0x4cd756
mov eax, dword [0x52be18]
mov edx, 0x4ce5e8
call fcn.0040474c
jne 0x4cd616
mov edx, dword [0x52a0bc]
mov edx, dword [edx]
mov eax, 0x4ce97c
call fcn.00404944
test eax, eax
jle 0x4cd538
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 0xffffffe2
mov eax, 0xa
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
jmp 0x4cd756
mov edx, dword [0x52a0bc]
mov edx, dword [edx]
mov eax, 0x4cea78
call fcn.00404944
test eax, eax
jle 0x4cd575
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 0xfffffff6
mov eax, 0xa
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
jmp 0x4cd756
mov edx, dword [0x52a0bc]
mov edx, dword [edx]
mov eax, 0x4cea54
call fcn.00404944
test eax, eax
jle 0x4cd5b2
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 0xffffffec
mov eax, 0xa
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
jmp 0x4cd756
mov edx, dword [0x52a0bc]
mov edx, dword [edx]
mov eax, 0x4ceb18
call fcn.00404944
test eax, eax
jle 0x4cd5ef
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 0xffffffec
mov eax, 0xa
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
jmp 0x4cd756
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 8
mov eax, 0xa
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
jmp 0x4cd756
mov eax, dword [0x52be18]
mov edx, 0x4ce83c
call fcn.0040474c
jne 0x4cd68b
mov edx, dword [0x52a0bc]
mov edx, dword [edx]
mov eax, 0x4ce97c
call fcn.00404944
test eax, eax
jle 0x4cd664
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 0xffffffec
mov eax, 0xa
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
jmp 0x4cd756
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 0xffffffec
mov eax, 0xa
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
jmp 0x4cd756
mov eax, dword [0x52be18]
mov edx, 0x4ce77c
call fcn.0040474c
jne 0x4cd6fa
mov edx, dword [0x52a0bc]
mov edx, dword [edx]
mov eax, 0x4ce97c
call fcn.00404944
test eax, eax
jle 0x4cd6d6
push 0x32
lea ecx, [ebp - 0x74]
xor edx, edx
mov eax, 0xa
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
jmp 0x4cd756
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 8
mov eax, 0xa
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
jmp 0x4cd756
mov edx, dword [0x52a0bc]
mov edx, dword [edx]
mov eax, 0x4ce97c
call fcn.00404944
test eax, eax
jle 0x4cd734
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 0xa
mov eax, 0xf
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
jmp 0x4cd756
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 8
mov eax, 0xa
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
mov eax, dword [ebp - 4]
call fcn.004d8884
mov edx, 0xbb8
mov eax, dword [ebp - 4]
call fcn.004da0d0
test al, al
jne 0x4cd781
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00403d88
jmp 0x4ce2ec
mov eax, dword [0x52be18]
mov edx, 0x4ce83c
call fcn.0040474c
jne 0x4cd8e2
push 0
push 0x4cebec
call sub.user32.dll_FindWindowA
lea eax, [ebp - 0x24]
call fcn.004caaf0
mov edx, dword [ebp - 0x24]
mov eax, 0x4cebfc
call fcn.00404944
mov edx, eax
lea ecx, [ebp - 0x15c]
mov eax, dword [ebp - 0x24]
call fcn.00438290
mov edx, dword [ebp - 0x15c]
lea eax, [ebp - 0x24]
call fcn.004043d8
mov al, byte [0x4cec00]
push eax
lea eax, [ebp - 0x160]
push eax
xor ecx, ecx
mov edx, 0x4cec0c
mov eax, dword [ebp - 0x24]
call fcn.0040e2b0
mov edx, dword [ebp - 0x160]
lea eax, [ebp - 0x24]
call fcn.004043d8
mov al, byte [0x4cec00]
push eax
lea eax, [ebp - 0x164]
push eax
xor ecx, ecx
mov edx, 0x4cebfc
mov eax, dword [ebp - 0x24]
call fcn.0040e2b0
mov edx, dword [ebp - 0x164]
lea eax, [ebp - 0x24]
call fcn.004043d8
mov al, byte [0x4cec00]
push eax
lea eax, [ebp - 0x168]
push eax
xor ecx, ecx
mov edx, 0x4cec18
mov eax, dword [ebp - 0x24]
call fcn.0040e2b0
mov edx, dword [ebp - 0x168]
lea eax, [ebp - 0x24]
call fcn.004043d8
mov al, byte [0x4cec00]
push eax
lea eax, [ebp - 0x16c]
push eax
mov ecx, 0x4cec2c
mov edx, 0x4cec2c
mov eax, dword [ebp - 0x24]
call fcn.0040e2b0
mov edx, dword [ebp - 0x16c]
lea eax, [ebp - 0x24]
call fcn.004043d8
call fcn.004cac68
call fcn.0043814c
mov edx, dword [ebp - 0x24]
call fcn.00437dec
mov edx, 0x3e8
mov eax, dword [ebp - 4]
call fcn.004da0d0
test al, al
jne 0x4cd8b5
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00403d88
jmp 0x4ce2ec
call fcn.004cac10
mov edx, 0x3e8
mov eax, dword [ebp - 4]
call fcn.004da0d0
test al, al
jne 0x4cd8dd
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00403d88
jmp 0x4ce2ec
call fcn.004cab8c
mov eax, dword [0x52be18]
mov edx, 0x4ce5e8
call fcn.0040474c
jne 0x4cd943
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
push eax
call sub.user32.dll_GetWindowRect
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 0x32
mov eax, 0xffffffec
call fcn.00406a18
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x8c]
mov edx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x3c]
call fcn.00406a18
lea edx, [ebp - 0x8c]
mov eax, dword [ebp - 4]
pop ecx
call fcn.004d88a8
mov eax, dword [ebp - 4]
call fcn.004d8884
lea edx, [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004d8bb4
lea eax, [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004cfce0
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x1c], 0
je 0x4cd96f
cmp dword [ebp - 0x18], 0
jne 0x4cd97b
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x34]
jl 0x4cd350
cmp dword [ebp - 0x1c], 0
jne 0x4cd9ac
cmp dword [ebp - 0x18], 0
jne 0x4cd9ac
mov eax, dword [ebp - 4]
call fcn.004cacf8
mov eax, dword [ebp - 4]
mov byte [eax + 0x27], 0
mov byte [ebp - 0xd], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00403d88
jmp 0x4ce2ec
mov eax, dword [ebp - 4]
mov byte [eax + 0x27], 1
mov eax, dword [ebp - 4]
add eax, 0x30
mov edx, 0x4cec3c
call fcn.00404394
mov eax, dword [0x52be18]
mov edx, 0x4ce528
call fcn.0040474c
je 0x4cd9e9
mov eax, dword [0x52be18]
mov edx, 0x4ce80c
call fcn.0040474c
jne 0x4cdaaf
mov eax, dword [ebp - 4]
cmp byte [eax + 0x26], 1
jne 0x4cda53
mov edx, dword [0x52a0bc]
mov edx, dword [edx]
mov eax, 0x4ce97c
call fcn.00404944
test eax, eax
jle 0x4cda2f
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 5
mov eax, 0x14
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
jmp 0x4cdaaf
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 5
mov eax, 0x14
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
jmp 0x4cdaaf
mov edx, dword [0x52a0bc]
mov edx, dword [edx]
mov eax, 0x4ce97c
call fcn.00404944
test eax, eax
jle 0x4cda8d
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 2
mov eax, 0x14
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
jmp 0x4cdaaf
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 2
mov eax, 0x14
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
mov eax, dword [0x52be18]
mov edx, 0x4ce58c
call fcn.0040474c
jne 0x4cdb1c
mov edx, dword [0x52a0bc]
mov edx, dword [edx]
mov eax, 0x4ce97c
call fcn.00404944
test eax, eax
jle 0x4cdafa
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 5
mov eax, 0x28
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
jmp 0x4cdb1c
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 5
mov eax, 0x64
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
mov eax, dword [0x52be18]
mov edx, 0x4ce5e8
call fcn.0040474c
je 0x4cdb3e
mov eax, dword [0x52be18]
mov edx, 0x4ce83c
call fcn.0040474c
jne 0x4cdb9a
mov edx, dword [0x52a0bc]
mov edx, dword [edx]
mov eax, 0x4ce97c
call fcn.00404944
test eax, eax
jle 0x4cdb78
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 0x1e
mov eax, 0x46
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
jmp 0x4cdb9a
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 0x14
mov eax, 0x32
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
mov eax, dword [0x52be18]
mov edx, 0x4ce558
call fcn.0040474c
jne 0x4cdc07
mov edx, dword [0x52a0bc]
mov edx, dword [edx]
mov eax, 0x4ce97c
call fcn.00404944
test eax, eax
jle 0x4cdbe5
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 9
mov eax, 0x50
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
jmp 0x4cdc07
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 0xf
mov eax, 0x50
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
mov eax, dword [0x52be18]
mov edx, 0x4ce5b8
call fcn.0040474c
jne 0x4cdca5
cmp dword [ebp - 0x1c], 0x2bc
jge 0x4cdc83
mov edx, dword [0x52a0bc]
mov edx, dword [edx]
mov eax, 0x4ce97c
call fcn.00404944
test eax, eax
jle 0x4cdc5f
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 5
mov eax, 0xa
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
jmp 0x4cdca5
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 5
mov eax, 0xa
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
jmp 0x4cdca5
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 5
mov eax, 0xa
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
mov eax, dword [0x52be18]
mov edx, 0x4ce618
call fcn.0040474c
jne 0x4cdcd8
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 7
mov eax, 0x1e
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
mov eax, dword [0x52be18]
mov edx, 0x4ce64c
call fcn.0040474c
jne 0x4cdd0b
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 0xa
mov eax, 0x14
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
mov eax, dword [0x52be18]
mov edx, 0x4ce678
call fcn.0040474c
jne 0x4cdd82
mov eax, dword [0x52be20]
mov edx, 0x4cec54
call fcn.0040474c
jne 0x4cdd4f
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 0x1e
mov eax, 0xfffffdee
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
mov eax, dword [0x52be20]
mov edx, 0x4cec60
call fcn.0040474c
jne 0x4cdd82
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 0xffffff38
mov eax, 0x64
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
mov eax, dword [0x52be18]
mov edx, 0x4ce6ac
call fcn.0040474c
jne 0x4cddb5
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 0xa
mov eax, 0x14
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
mov eax, dword [0x52be18]
mov edx, 0x4ce6e0
call fcn.0040474c
jne 0x4cdde8
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 0xa
mov eax, 0x14
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
mov eax, dword [0x52be18]
mov edx, 0x4ce714
call fcn.0040474c
jne 0x4cde1b
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 0xa
mov eax, 0x14
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
mov eax, dword [0x52be18]
mov edx, 0x4ce748
call fcn.0040474c
jne 0x4cde4e
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 0xa
mov eax, 0x14
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
mov eax, dword [0x52be18]
mov edx, 0x4ce77c
call fcn.0040474c
jne 0x4cde81
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 0xa
mov eax, 0x14
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
mov eax, dword [0x52be18]
mov edx, 0x4ce7ac
call fcn.0040474c
jne 0x4cdeb4
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 0xa
mov eax, 0x14
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
mov eax, dword [0x52be18]
mov edx, 0x4ce7dc
call fcn.0040474c
jne 0x4cdf5f
mov edx, dword [0x52a0bc]
mov edx, dword [edx]
mov eax, 0x4cea54
call fcn.00404944
test eax, eax
jle 0x4cdf03
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 8
mov eax, 0x23
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
jmp 0x4cdf5f
mov edx, dword [0x52a0bc]
mov edx, dword [edx]
mov eax, 0x4ceb18
call fcn.00404944
test eax, eax
jle 0x4cdf3d
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 0xa
mov eax, 0x23
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
jmp 0x4cdf5f
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 0xa
mov eax, 0x23
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
mov edx, 0x4cec74
mov eax, dword [ebp - 4]
call fcn.004d9f54
mov edx, 0x64
mov eax, dword [ebp - 4]
call fcn.004da0d0
test al, al
jne 0x4cdf8f
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00403d88
jmp 0x4ce2ec
mov eax, dword [ebp - 4]
call fcn.004d8884
mov edx, 0x4cec80
mov eax, dword [ebp - 4]
call fcn.004d9f54
mov eax, dword [ebp - 4]
add eax, 0x30
mov edx, 0x4cec8c
call fcn.00404394
xor eax, eax
push ebp
push 0x4ce1f8
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, 0x1388
mov eax, dword [ebp - 4]
call fcn.004da0d0
test al, al
jne 0x4cdfed
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00403d88
jmp 0x4ce2ec
mov eax, dword [ebp - 4]
add eax, 0x30
mov edx, 0x4ce490
call fcn.00404394
lea edx, [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004cecec
mov edx, 0x64
mov eax, dword [ebp - 4]
call fcn.004da0d0
test al, al
jne 0x4ce033
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00403d88
jmp 0x4ce2ec
cmp dword [ebp - 0x14], 0
jne 0x4ce053
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00403d88
jmp 0x4ce2ec
cmp dword [ebp - 0x14], 0
je 0x4ce1ee
push 0
push 0xf030
push 0x112
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
push eax
call sub.user32.dll_SendMessageA
mov edx, 0xbb8
mov eax, dword [ebp - 4]
call fcn.004da0d0
test al, al
jne 0x4ce0a0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00403d88
jmp 0x4ce2ec
xor eax, eax
push ebp
push 0x4ce0c3
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004d8bb4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4ce0cd
mov edx, 0x3e8
mov eax, dword [ebp - 4]
call fcn.004da0d0
test al, al
jne 0x4ce0f8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00403d88
jmp 0x4ce2ec
lea ecx, [ebp - 0x1c]
xor edx, edx
xor eax, eax
call fcn.00406a18
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4ce4a8
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004da144
mov edx, 0x64
mov eax, dword [ebp - 4]
call fcn.004da0d0
test al, al
jne 0x4ce143
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00403d88
jmp 0x4ce2ec
cmp dword [ebp - 0x1c], 0
jne 0x4ce17d
cmp dword [ebp - 0x18], 0
jne 0x4ce17d
mov eax, dword [ebp - 4]
add eax, 0x30
mov edx, 0x4ceca0
call fcn.00404394
mov byte [ebp - 0xd], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00403d88
jmp 0x4ce2ec
cmp dword [ebp - 0x1c], 0
je 0x4ce1ee
cmp dword [ebp - 0x18], 0
je 0x4ce1ee
push 0x32
lea ecx, [ebp - 0x74]
mov edx, 7
mov eax, 0x14
call fcn.00406a18
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.004d88a8
mov edx, 0x64
mov eax, dword [ebp - 4]
call fcn.004da0d0
test al, al
jne 0x4ce1d6
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00403d88
jmp 0x4ce2ec
mov eax, dword [ebp - 4]
call fcn.004d8884
mov eax, dword [ebp - 4]
add eax, 0x30
mov edx, 0x4ce4b8
call fcn.00404394
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4ce202
mov edx, 0x4cecb8
mov eax, dword [ebp - 4]
call fcn.004d9f54
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4ce252
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4ce2ec
mov byte [ebp - 0xd], 1
mov eax, dword [ebp - 4]
add eax, 0x30
mov edx, 0x4cecd0
call fcn.00404394
mov eax, dword [ebp - 4]
cmp byte [eax + 0x27], 0
je 0x4ce2ac
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
mov edx, 0x4ceb90
call fcn.0040474c
jne 0x4ce29d
mov edx, 0x1388
mov eax, dword [ebp - 4]
call fcn.004da0d0
jmp 0x4ce2b9
mov edx, 0x3a98
mov eax, dword [ebp - 4]
call fcn.004da0d0
jmp 0x4ce2b9
mov edx, 0xbb8
mov eax, dword [ebp - 4]
call fcn.004da0d0
mov eax, dword [ebp - 4]
call fcn.004cafcc
mov eax, dword [ebp - 4]
call fcn.004cacf8
mov edx, 0x4cece8
mov eax, dword [ebp - 4]
call fcn.004d9f54
mov eax, dword [ebp - 4]
add eax, 0x30
call fcn.00404340
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4ce436
lea eax, [ebp - 0x170]
mov edx, 6
call fcn.00404364
lea eax, [ebp - 0x158]
call fcn.004061e8
lea eax, [ebp - 0x154]
mov edx, dword [0x40113c]
mov ecx, 2
call fcn.00404f3c
lea eax, [ebp - 0x134]
call fcn.004061e8
lea eax, [ebp - 0x130]
call fcn.004061e8
lea eax, [ebp - 0x12c]
call fcn.00404a4c
lea eax, [ebp - 0x128]
call fcn.004061e8
lea eax, [ebp - 0x124]
mov edx, dword [0x40113c]
mov ecx, 2
call fcn.00404f3c
lea eax, [ebp - 0x104]
call fcn.004061e8
lea eax, [ebp - 0x100]
call fcn.004061e8
lea eax, [ebp - 0xfc]
call fcn.004061e8
lea eax, [ebp - 0xf8]
mov edx, dword [0x40113c]
mov ecx, 2
call fcn.00404f3c
lea eax, [ebp - 0xd8]
call fcn.004061e8
lea eax, [ebp - 0xd4]
call fcn.004061e8
lea eax, [ebp - 0xd0]
mov edx, 0x10
call fcn.00404a64
lea eax, [ebp - 0x90]
call fcn.00404340
lea eax, [ebp - 0x84]
call fcn.004061e8
lea eax, [ebp - 0x80]
call fcn.00404a4c
lea eax, [ebp - 0x7c]
mov edx, 2
call fcn.00404364
lea eax, [ebp - 0x6c]
mov edx, 2
call fcn.00404364
lea eax, [ebp - 0x24]
mov edx, 2
call fcn.00404364
lea eax, [ebp - 0x14]
call fcn.004061e8
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.00404364
lea eax, [ebp + 8]
call fcn.00404340
ret