Function at 0x4eb3e0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x204
mov dword [ebp - 0x204], ebx
mov dword [ebp - 0x200], esi
mov dword [ebp - 0x1fc], edi
mov dword [ebp - 0x1e4], 0
mov dword [ebp - 0x1e0], 0
lea ecx, [ebp - 0x1b4]
lea edx, [ebp - 0x1cc]
mov eax, 1
call fcn.0040b250
call fcn.0040d0d0
push eax
test eax, eax
jne 0x4edf24
lea eax, [ebp - 0x14]
mov cl, 0
mov edx, 0x10
call fcn.00403540
lea eax, [ebp - 0x14]
mov dword [ebp - 0x20], eax
mov byte [ebp - 0x5c], 1
mov byte [ebp - 0x64], 0
mov eax, dword [ebp + 8]
call fcn.00514b30
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
cmp byte [eax + 0x2b], 0
jne 0x4eb469
jmp 0x4eb5d3
mov eax, ebp
call fcn.004ee640
test al, al
jne 0x4eb476
jmp 0x4eb4bb
mov eax, dword [ebp + 0xc]
cmp eax, 0xd
jb 0x4eb4bb
sub eax, 0xd
je 0x4eb49d
dec eax
je 0x4eb48f
sub eax, 0xa3
je 0x4eb48f
jmp 0x4eb4bb
mov dword [ebp - 4], 0
jmp 0x4edf24
mov eax, dword [ebp + 0x10]
cmp eax, 0
jg 0x4eb4a7
jmp 0x4eb4ad
mov eax, dword [ebp + 0x14]
mov byte [eax], 0
mov dword [ebp - 4], 0
jmp 0x4edf24
mov eax, dword [ebp - 0x74]
mov eax, dword [eax + 0x1c]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp + 0xc]
cmp eax, 0x282
je 0x4eb4d0
jmp 0x4eb4eb
mov eax, dword [ebp + 0x10]
cmp eax, 0x10e
je 0x4eb4dc
jmp 0x4eb4eb
cmp dword [ebp - 0x74], 0
jne 0x4eb4e4
jmp 0x4eb4eb
mov eax, dword [ebp - 0x74]
mov byte [eax + 0x54], 1
mov eax, dword [ebp + 0xc]
cmp eax, 8
jne 0x4eb4f8
jmp 0x4eb55c
mov eax, dword [ebp + 0xc]
cmp eax, 7
jne 0x4eb502
jmp 0x4eb55c
mov eax, dword [ebp + 0xc]
cmp eax, 0x82
jne 0x4eb50e
jmp 0x4eb55c
mov eax, dword [ebp + 0xc]
cmp eax, 0x100
jb 0x4eb526
jmp 0x4eb51a
mov eax, dword [ebp + 0xc]
cmp eax, 0x108
ja 0x4eb526
jmp 0x4eb55c
mov eax, dword [ebp + 0xc]
cmp eax, 0x200
jb 0x4eb53e
jmp 0x4eb532
mov eax, dword [ebp + 0xc]
cmp eax, 0x20d
ja 0x4eb53e
jmp 0x4eb55c
push dword [ebp + 0x14]
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
call fcn.004eafe0
mov dword [ebp - 4], eax
jmp 0x4edf24
mov eax, dword [ebp + 0xc]
cmp eax, 8
je 0x4eb570
jmp 0x4eb566
mov eax, dword [ebp + 0xc]
cmp eax, 7
je 0x4eb570
jmp 0x4eb5d1
mov dword [ebp - 0x1a4], 0x34
lea eax, [ebp - 0x1a4]
push eax
mov eax, dword [ebp - 0x4c]
call fcn.004cee90
push eax
mov eax, dword [0x5865c0]
call eax
mov eax, dword [ebp + 0x10]
cmp eax, dword [ebp - 0x174]
je 0x4eb5b8
jmp 0x4eb59e
mov eax, dword [ebp + 0x10]
cmp eax, dword [ebp - 0x178]
je 0x4eb5b8
jmp 0x4eb5ab
mov eax, dword [ebp + 0x10]
cmp eax, dword [ebp - 0x17c]
je 0x4eb5b8
jmp 0x4eb5d1
push dword [ebp + 0x14]
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
call fcn.004eafe0
mov dword [ebp - 4], eax
jmp 0x4edf24
jmp 0x4eb5dc
mov eax, dword [ebp - 0x74]
mov eax, dword [eax + 0x14]
mov dword [ebp - 0x4c], eax
mov eax, dword [0x55ce80]
test eax, eax
jne 0x4eb5e7
jmp 0x4eb62b
mov eax, dword [ebp + 0xc]
cmp eax, 0x102
je 0x4eb5ff
jmp 0x4eb5f3
mov eax, dword [ebp + 0xc]
cmp eax, 0x106
je 0x4eb5ff
jmp 0x4eb62b
mov eax, dword [0x55ce80]
cmp eax, dword [ebp + 8]
je 0x4eb60b
jmp 0x4eb621
mov dword [0x55ce80], 0
mov dword [ebp - 4], 1
jmp 0x4edf24
mov dword [0x55ce80], 0
mov eax, dword [ebp + 0xc]
test eax, eax
je 0x4eb877
sub eax, 2
je 0x4ec007
sub eax, 4
je 0x4eb8bb
dec eax
je 0x4ed027
dec eax
je 0x4ec593
sub eax, 2
je 0x4ec23b
sub eax, 5
je 0x4ece52
dec eax
je 0x4eb9e1
sub eax, 4
je 0x4ec32a
sub eax, 4
je 0x4ed095
sub eax, 7
je 0x4eb917
dec eax
je 0x4ecfc4
sub eax, 0xb
je 0x4ec09d
dec eax
je 0x4ed271
sub eax, 0x1b
je 0x4ed23e
sub eax, 7
je 0x4eccec
sub eax, 5
je 0x4ec432
sub eax, 0x28
je 0x4ecf73
sub eax, 9
je 0x4ecc13
sub eax, 3
je 0x4ec422
sub eax, 0x19
je 0x4eccc2
dec eax
je 0x4ecc3d
sub eax, 0x5f
je 0x4ec4e0
dec eax
je 0x4ec538
dec eax
je 0x4eb92f
sub eax, 2
je 0x4ed19f
dec eax
je 0x4ed1e8
dec eax
je 0x4ed13d
sub eax, 8
je 0x4eb903
sub eax, 3
je 0x4ebae0
dec eax
je 0x4ed177
dec eax
je 0x4ed226
dec eax
jb 0x4ed40b
sub eax, 1
jbe 0x4ec46a
sub eax, 2
je 0x4eba3c
sub eax, 8
je 0x4eba8b
dec eax
je 0x4eb9c2
dec eax
je 0x4eb8aa
sub eax, 7
je 0x4ed390
sub eax, 0xa
jb 0x4ed40b
sub eax, 6
jbe 0x4ebe31
sub eax, 0xc8
je 0x4eca06
dec eax
je 0x4ec655
dec eax
je 0x4ec7f0
dec eax
je 0x4ec5a5
dec eax
je 0x4eced5
dec eax
je 0x4ecf22
dec eax
je 0x4ece92
dec eax
je 0x4ec897
dec eax
je 0x4ec8da
dec eax
je 0x4ec854
dec eax
je 0x4ecaab
dec eax
je 0x4ec960
dec eax
je 0x4ec9a3
dec eax
je 0x4ec91d
sub eax, 5
je 0x4ec3fd
sub eax, 3
je 0x4eb923
sub eax, 0x1e
je 0x4ecc07
sub eax, 0x6d
je 0x4eccc2
dec eax
je 0x4ec9e6
sub eax, 2
je 0x4ec9f6
sub eax, 0x5d
je 0x4ebffb
dec eax
je 0x4ebfef
dec eax
je 0x4ece86
dec eax
je 0x4ebfe3
sub eax, 4
je 0x4ec045
sub eax, 0xb
je 0x4ec44e
sub eax, 6
je 0x4ece61
sub eax, 2
je 0x4ed34e
sub eax, 0x5e6
je 0x4ed3b8
sub eax, 0xa700
je 0x4ecfd0
jmp 0x4ed40b
mov eax, dword [0x534f00]
mov edx, dword [0x534f00]
mov edx, dword [edx]
call dword [edx + 0xd0]
cmp eax, dword [ebp + 8]
je 0x4eb891
jmp 0x4eb8a5
mov eax, 0
call fcn.0042d5b0
mov eax, dword [0x534f00]
call fcn.004f0770
jmp 0x4ed42d
mov eax, dword [0x530dd0]
mov dl, 0
call fcn.0041da10
jmp 0x4ed42d
mov eax, dword [ebp + 0x10]
call fcn.00442200
test ax, ax
je 0x4eb8e9
dec ax
jb 0x4eb8fe
sub ax, 1
jbe 0x4eb8d4
jmp 0x4eb8fe
mov dword [ebp - 0x14], 6
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xc], eax
jmp 0x4eb8fe
mov dword [ebp - 0x14], 0x10440
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xc], eax
jmp 0x4eb8fe
jmp 0x4ed42d
cmp dword [ebp - 0x74], 0
jne 0x4eb90b
jmp 0x4eb912
mov eax, dword [ebp - 0x74]
mov byte [eax + 0x54], 1
jmp 0x4ed42d
mov dword [ebp - 0x14], 0x1f
jmp 0x4ed42d
mov dword [ebp - 0x14], 0x215
jmp 0x4ed42d
mov ax, word [ebp + 0x10]
mov word [ebp - 0x1a8], ax
lea edx, [ebp - 0x1a8]
mov eax, ebp
call fcn.004ee0a0
test al, al
je 0x4eb94d
jmp 0x4eb9b3
lea eax, [ebp - 0xe0]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0xe0], 0xbd02
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xd8], eax
cmp byte [0x577870], 0
jne 0x4eb974
jmp 0x4eb98a
mov ax, word [ebp + 0x10]
call fcn.004090b0
movzx ax, al
mov word [ebp - 0xdc], ax
jmp 0x4eb995
mov ax, word [ebp + 0x10]
mov word [ebp - 0xdc], ax
mov ax, word [ebp - 0xdc]
mov word [ebp - 0x1a8], ax
mov dword [ebp - 0xd4], 0
mov byte [ebp - 0x5c], 0
jmp 0x4eb9bd
movzx eax, word [ebp - 0x1a8]
mov dword [ebp + 0x10], eax
jmp 0x4ed42d
mov eax, dword [ebp + 0x10]
call fcn.00442200
mov edx, dword [ebp + 0x14]
call fcn.005193a0
mov edx, dword [ebp - 0x20]
mov dword [edx + 0xc], eax
mov byte [ebp - 0x5c], 0
jmp 0x4ed42d
mov eax, dword [0x534f00]
mov edx, dword [0x534f00]
mov edx, dword [edx]
call dword [edx + 0xd0]
cmp eax, dword [ebp + 8]
je 0x4eb9fb
jmp 0x4eba2c
mov eax, dword [0x530dd0]
mov eax, dword [eax + 0x11c]
test eax, eax
jne 0x4eba0c
jmp 0x4eba2c
push 0
push 0
push 0x10
mov eax, dword [0x530dd0]
mov ebx, dword [eax + 0x11c]
mov eax, ebx
call fcn.004cee90
push eax
call sub.user32.dll_SendMessageA
jmp 0x4eba33
mov dword [ebp - 0x14], 0x1043e
mov byte [ebp - 0x5c], 0
jmp 0x4ed42d
mov eax, dword [ebp + 0x14]
call fcn.004421e0
movzx eax, ax
test eax, eax
je 0x4eba4d
jmp 0x4eba86
mov eax, ebp
call fcn.004ef7f0
mov dword [ebp - 0x58], eax
mov edx, dword [ebp - 0x58]
mov eax, 0x5599bc
call fcn.0040a6e0
test al, al
jne 0x4eba6a
jmp 0x4eba86
mov dword [ebp - 0x14], 6
lea edx, [ebp - 0x14]
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x58]
mov ecx, dword [ecx]
call dword [ecx + 0x50]
mov dword [ebp - 0x4c], 0
jmp 0x4ed42d
mov eax, dword [ebp + 0x10]
call fcn.004421e0
and ax, 0x10
movzx eax, ax
test eax, eax
setne dl
mov eax, ebp
call fcn.004ef740
mov dword [ebp - 0x58], eax
mov edx, dword [ebp - 0x58]
mov eax, 0x5599bc
call fcn.0040a6e0
test al, al
jne 0x4ebabc
jmp 0x4ebacc
mov eax, dword [ebp - 0x58]
mov edx, dword [ebp - 0x58]
mov edx, dword [edx]
call dword [edx + 0x104]
jmp 0x4ebadb
mov eax, dword [0x530dd0]
mov edx, 0
call fcn.0041fa60
jmp 0x4ed42d
mov eax, dword [ebp + 0x14]
test eax, eax
je 0x4ebae9
jmp 0x4ebb4c
mov eax, ebp
mov dl, 0
call fcn.004ef740
mov dword [ebp - 0x58], eax
mov edx, dword [ebp - 0x58]
mov eax, 0x5599bc
call fcn.0040a6e0
test al, al
jne 0x4ebb08
jmp 0x4ebb47
mov eax, dword [ebp + 0x10]
call fcn.004421e0
movzx eax, ax
test eax, eax
je 0x4ebb2b
jmp 0x4ebb19
mov eax, dword [ebp + 0x10]
call fcn.004421e0
movzx eax, ax
cmp eax, 1
je 0x4ebb2b
jmp 0x4ebb40
mov dword [ebp - 0x14], 6
lea edx, [ebp - 0x14]
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x58]
mov ecx, dword [ecx]
call dword [ecx + 0x50]
mov dword [ebp - 0x4c], 0
jmp 0x4ebe19
mov eax, dword [ebp + 0x14]
call fcn.00514b30
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x14]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
test eax, eax
je 0x4ebb69
jmp 0x4ebb72
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x1c]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x54]
cmp dword [eax + 0x10], 0
jne 0x4ebb7d
jmp 0x4ebbaf
push dword [ebp + 0x10]
push dword [ebp + 0x14]
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x5c]
push eax
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 0x4c]
mov ecx, 0x111
mov ebx, dword [ebp - 0x54]
mov ebx, dword [ebx + 0x10]
call ebx
test al, al
jne 0x4ebba4
jmp 0x4ebbaf
mov eax, dword [ebp - 8]
mov dword [ebp - 4], eax
jmp 0x4edf24
mov edx, dword [ebp - 0x4c]
mov eax, 0x56b008
call fcn.0040a6e0
test al, al
jne 0x4ebbc5
jmp 0x4ebc99
mov edx, dword [ebp - 0x4c]
mov eax, 0x56b448
call fcn.0040a6e0
test al, al
je 0x4ebbdb
jmp 0x4ebc99
mov eax, dword [ebp + 0x10]
call fcn.004421e0
test ax, ax
je 0x4ebbf7
sub ax, 7
je 0x4ebc8b
jmp 0x4ebc94
push 0
mov eax, dword [ebp - 0x4c]
call fcn.004cee90
mov ecx, 0
mov edx, 0xf0
call fcn.004537f0
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x78]
cmp eax, 1
jne 0x4ebc30
jmp 0x4ebc1d
mov edx, dword [ebp - 0x4c]
mov eax, 0x56b88c
call fcn.0040a6e0
test al, al
je 0x4ebc30
jmp 0x4ebc82
mov eax, dword [ebp - 0x78]
cmp eax, 1
je 0x4ebc3a
jmp 0x4ebc43
mov dword [ebp - 0x78], 0
jmp 0x4ebc6a
mov eax, dword [ebp - 0x78]
test eax, eax
je 0x4ebc4c
jmp 0x4ebc63
mov eax, dword [ebp - 0x4c]
cmp byte [eax + 0x335], 0
jne 0x4ebc5a
jmp 0x4ebc63
mov dword [ebp - 0x78], 2
jmp 0x4ebc6a
mov dword [ebp - 0x78], 1
push 0
push dword [ebp - 0x78]
push 0xf1
mov eax, dword [ebp - 0x4c]
call fcn.004cee90
push eax
call sub.user32.dll_SendMessageA
mov dword [ebp - 0x14], 0x10407
jmp 0x4ebc94
mov dword [ebp - 0x14], 0x1043c
jmp 0x4ebc94
jmp 0x4ebe19
mov edx, dword [ebp - 0x4c]
mov eax, 0x56a340
call fcn.0040a6e0
test al, al
jne 0x4ebcac
jmp 0x4ebcd8
mov eax, dword [ebp + 0x10]
call fcn.004421e0
test ax, ax
je 0x4ebcc1
sub ax, 7
je 0x4ebcca
jmp 0x4ebcd3
mov dword [ebp - 0x14], 0x10407
jmp 0x4ebcd3
mov dword [ebp - 0x14], 0x1043c
jmp 0x4ebcd3
jmp 0x4ebe19
mov edx, dword [ebp - 0x4c]
mov eax, 0x568800
call fcn.0040a6e0
test al, al
jne 0x4ebcee
jmp 0x4ebd46
mov edx, dword [ebp - 0x4c]
mov eax, 0x568d70
call fcn.0040a6e0
test al, al
jne 0x4ebd01
jmp 0x4ebd22
mov eax, dword [ebp + 0x10]
call fcn.004421e0
cmp ax, 0x400
jb 0x4ebd20
sub ax, 0x400
je 0x4ebd17
jmp 0x4ebd20
mov dword [ebp - 0x14], 0xb012
jmp 0x4ebd20
jmp 0x4ebd41
mov eax, dword [ebp + 0x10]
call fcn.004421e0
cmp ax, 0x300
jb 0x4ebd41
sub ax, 0x300
je 0x4ebd38
jmp 0x4ebd41
mov dword [ebp - 0x14], 0xb012
jmp 0x4ebd41
jmp 0x4ebe19
mov edx, dword [ebp - 0x4c]
mov eax, 0x568390
call fcn.0040a6e0
test al, al
jne 0x4ebd59
jmp 0x4ebd7b
mov eax, dword [ebp + 0x10]
call fcn.004421e0
cmp ax, 1
jb 0x4ebd76
dec ax
je 0x4ebd6d
jmp 0x4ebd76
mov dword [ebp - 0x14], 0x234
jmp 0x4ebd76
jmp 0x4ebe19
mov edx, dword [ebp - 0x4c]
mov eax, 0x567a48
call fcn.0040a6e0
test al, al
jne 0x4ebd91
jmp 0x4ebe19
mov eax, dword [ebp + 0x10]
call fcn.004421e0
cmp ax, 1
jb 0x4ebe19
dec ax
je 0x4ebdda
sub ax, 4
je 0x4ebdd1
sub ax, 2
je 0x4ebdb9
dec ax
je 0x4ebdfa
jmp 0x4ebe19
mov edx, dword [ebp - 0x4c]
mov eax, 0x567a48
call fcn.0040a700
mov ebx, eax
mov eax, ebx
call fcn.00506890
jmp 0x4ebe19
mov dword [ebp - 0x14], 0x10405
jmp 0x4ebe19
mov edx, dword [ebp - 0x4c]
mov eax, ebp
call fcn.004eee80
mov eax, dword [ebp - 0x4c]
mov edx, 0x10405
call fcn.005226f0
mov dword [ebp - 0x14], 0x234
jmp 0x4ebe19
push dword [ebp + 0x14]
mov eax, dword [ebp - 0x4c]
call fcn.004cee90
mov ecx, dword [ebp + 0x10]
mov edx, 0xbd11
call fcn.00453580
jmp 0x4edf24
push dword [ebp + 0x14]
mov ecx, dword [ebp + 0x10]
mov eax, dword [ebp - 0x4c]
mov edx, 0xbd11
call fcn.004d5a90
jmp 0x4ed42d
mov eax, dword [ebp + 0x14]
call fcn.00514b30
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
cmp dword [eax + 0x10], 0
jne 0x4ebe47
jmp 0x4ebe77
push dword [ebp + 0x10]
push dword [ebp + 0x14]
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x5c]
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 0x4c]
mov ebx, dword [ebp - 0x54]
mov ebx, dword [ebx + 0x10]
call ebx
test al, al
jne 0x4ebe6c
jmp 0x4ebe77
mov eax, dword [ebp - 8]
mov dword [ebp - 4], eax
jmp 0x4edf24
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x14]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
test eax, eax
je 0x4ebe8f
jmp 0x4ebe98
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x1c]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp + 0xc]
cmp eax, 0x135
jb 0x4ebf05
sub eax, 0x135
je 0x4ebeb7
sub eax, 2
je 0x4ebeff
dec eax
je 0x4ebeb7
jmp 0x4ebf05
mov edx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x54]
call fcn.004eb350
test al, al
jne 0x4ebec8
jmp 0x4ebefd
mov eax, dword [ebp - 0x54]
mov al, byte [eax + 0x2c]
test al, al
je 0x4ebed4
jmp 0x4ebefd
mov edx, dword [ebp - 0x7c]
mov eax, dword [ebp + 0x14]
call fcn.004eb210
mov eax, 5
call fcn.00452f50
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x7c]
mov edx, 1
call fcn.004538a0
mov byte [ebp - 0x5c], 0
jmp 0x4ebf05
mov byte [ebp - 0x5c], 0
jmp 0x4ebf05
cmp byte [ebp - 0x5c], 0
jne 0x4ebf10
jmp 0x4ebfde
mov eax, dword [ebp - 0x50]
test eax, eax
jne 0x4ebf1c
jmp 0x4ebfde
mov eax, dword [ebp - 0x50]
mov eax, dword [eax + 0xcc]
mov eax, dword [eax + 0x54]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0xac]
cmp eax, 0x20000000
je 0x4ebf3d
jmp 0x4ebf56
mov eax, dword [ebp - 0x50]
mov edx, 1
mov ecx, dword [ebp - 0x50]
mov ecx, dword [ecx]
call dword [ecx + 0x2a0]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0xac]
call fcn.00454f70
push eax
push dword [ebp - 0x7c]
call sub.gdi32.dll_SetTextColor
mov eax, dword [ebp - 0x50]
call fcn.004ced50
mov eax, dword [eax + 0xb4]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0xac]
cmp eax, 0x20000000
je 0x4ebf8d
jmp 0x4ebfa6
mov eax, dword [ebp - 0x50]
mov edx, 0
mov ecx, dword [ebp - 0x50]
mov ecx, dword [ecx]
call dword [ecx + 0x2a0]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0xac]
call fcn.00454f70
push eax
push dword [ebp - 0x7c]
call sub.gdi32.dll_SetBkColor
mov eax, dword [ebp - 0x50]
call fcn.004ced50
mov ebx, eax
lea edx, [ebp - 0x1d4]
mov eax, ebx
call fcn.0045bc40
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 8], eax
mov byte [ebp - 0x5c], 0
jmp 0x4ed42d
mov dword [ebp - 0x14], 0x303
jmp 0x4ed42d
mov dword [ebp - 0x14], 0x301
jmp 0x4ed42d
mov dword [ebp - 0x14], 0x300
jmp 0x4ed42d
mov edx, dword [ebp - 0x4c]
mov eax, 0x567a48
call fcn.0040a6e0
test al, al
jne 0x4ec01a
jmp 0x4ec024
mov edx, dword [ebp - 0x4c]
mov eax, ebp
call fcn.004eed60
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
test eax, eax
jne 0x4ec02f
jmp 0x4ec039
mov eax, dword [ebp - 0x74]
push dword [eax]
call sub.user32.dll_DestroyWindow
mov dword [ebp - 0x14], 2
jmp 0x4ed42d
cmp dword [0x586380], 0
jne 0x4ec050
jmp 0x4ec098
mov eax, dword [0x586384]
mov ecx, 0
mov edx, 0
mov ebx, dword [0x586380]
call ebx
mov dword [ebp - 0x1dc], 0
mov dword [ebp - 0x1d8], 0
mov eax, dword [ebp - 0x1dc]
mov dword [0x586380], eax
mov eax, dword [ebp - 0x1d8]
mov dword [0x586384], eax
mov dword [ebp - 8], 0
jmp 0x4ed42d
mov eax, dword [ebp + 0x10]
test eax, eax
je 0x4ec0a6
jmp 0x4ec10b
mov eax, dword [ebp + 0x14]
mov eax, dword [eax]
cmp eax, 1
je 0x4ec0b2
jmp 0x4ec10b
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0x2c]
mov dword [ebp - 0x18], eax
mov edx, dword [ebp - 0x18]
mov eax, 0x5599bc
call fcn.0040a6e0
test al, al
jne 0x4ec0ce
jmp 0x4ec0ee
mov eax, dword [ebp + 0x14]
push dword [eax + 0xc]
mov eax, dword [ebp + 0x14]
push dword [eax + 0x10]
mov eax, dword [ebp + 0x14]
lea ecx, [eax + 0x1c]
mov eax, dword [ebp + 0x14]
mov edx, dword [eax + 0x18]
mov eax, dword [ebp - 0x18]
call fcn.0051bb60
mov dword [ebp - 0x14], 0x2b
mov dword [ebp - 0x10], 0
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xc], eax
mov byte [ebp - 0x5c], 0
jmp 0x4ec236
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0x14]
call fcn.00514b30
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
mov eax, dword [eax + 0x14]
test eax, eax
jne 0x4ec125
jmp 0x4ec12e
mov eax, dword [ebp - 0x74]
mov eax, dword [eax + 0x14]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x4ec13a
jmp 0x4ec21e
mov edx, dword [ebp - 0x4c]
mov eax, 0x568390
call fcn.0040a6e0
test al, al
jne 0x4ec14d
jmp 0x4ec15c
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x370]
test eax, eax
jne 0x4ec195
jmp 0x4ec15c
mov edx, dword [ebp - 0x4c]
mov eax, 0x567a48
call fcn.0040a6e0
test al, al
jne 0x4ec172
jmp 0x4ec21e
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x3a0]
cmp eax, 3
je 0x4ec195
jmp 0x4ec182
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x3a0]
cmp eax, 4
je 0x4ec195
jmp 0x4ec21e
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 8]
cmp eax, 0xffffffff
jne 0x4ec1a5
jmp 0x4ec21c
mov dword [ebp - 0x14], 0x10451
lea eax, [ebp - 0x164]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 8]
mov dword [ebp - 0x164], eax
mov eax, dword [ebp + 0x14]
lea edi, [ebp - 0x160]
lea esi, [eax + 0x1c]
cld
mov ecx, 4
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0x10]
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0x18]
mov dword [ebp - 0x150], eax
mov eax, 0x586520
cmp eax, dword [ebp - 0x74]
jne 0x4ec1f9
jmp 0x4ec218
mov edx, dword [ebp - 0x74]
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 8]
mov dword [edx + 0x34], eax
mov edx, dword [ebp - 0x74]
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0x10]
and eax, 1
cmp eax, 1
sete byte [edx + 0x38]
mov byte [ebp - 0x5c], 0
jmp 0x4ec236
mov dword [ebp - 0x14], 0x2b
mov dword [ebp - 0x10], 0
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xc], eax
mov byte [ebp - 0x5c], 0
jmp 0x4ed42d
mov eax, dword [ebp + 0x10]
test eax, eax
jne 0x4ec244
jmp 0x4ec24b
mov dword [ebp - 0x14], 0x10412
mov eax, dword [0x534f00]
mov eax, dword [eax + 8]
cmp eax, dword [ebp + 8]
je 0x4ec25a
jmp 0x4ec2a0
mov eax, dword [ebp + 0x10]
test eax, eax
je 0x4ec263
jmp 0x4ec289
mov eax, dword [ebp + 8]
mov dl, 0
call fcn.00514c30
mov ecx, dword [0x55cf00]
mov eax, dword [0x530de0]
mov edx, 0
call fcn.0041bb10
mov dword [0x55cf00], eax
jmp 0x4ec2a0
mov eax, dword [ebp + 8]
call fcn.00514cc0
mov edx, 0x55cf00
mov eax, dword [0x530de0]
call fcn.0041bc20
cmp dword [ebp - 0x4c], 0
jne 0x4ec2a8
jmp 0x4ec2cd
mov edx, dword [ebp - 0x4c]
mov eax, 0x52f8e8
call fcn.0040a6e0
test al, al
je 0x4ec2bb
jmp 0x4ec2cd
mov eax, dword [ebp + 0x10]
test eax, eax
setne cl
mov edx, dword [ebp - 0x4c]
mov eax, ebp
call fcn.004eedc0
call fcn.0044adf0
mov ebx, eax
mov eax, ebx
call fcn.0044af70
test al, al
je 0x4ec2e1
jmp 0x4ec325
mov edx, dword [ebp - 0x4c]
mov eax, 0x55dcb4
call fcn.0040a6e0
test al, al
jne 0x4ec2f4
jmp 0x4ec325
lea eax, [ebp - 0x1e0]
call fcn.00403a80
mov dword [ebp - 0x1e0], 0
lea edx, [ebp - 0x1e0]
mov eax, dword [ebp - 0x4c]
call fcn.004d8920
mov edx, dword [ebp - 0x1e0]
mov eax, dword [ebp - 0x4c]
call fcn.00516680
jmp 0x4ed42d
mov eax, dword [0x55cee0]
and eax, 3
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x70]
cmp eax, 3
je 0x4ec33f
jmp 0x4ec36f
mov eax, dword [0x55cef0]
test eax, eax
jne 0x4ec34a
jmp 0x4ec352
mov eax, dword [0x55cef0]
mov dword [ebp + 0x10], eax
mov eax, dword [ebp - 0x74]
cmp byte [eax + 0x29], 0
jne 0x4ec35d
jmp 0x4ec36d
mov eax, dword [0x55cee0]
and eax, 0xfffffffc
or eax, 2
mov dword [0x55cee0], eax
jmp 0x4ec386
mov eax, dword [ebp - 0x70]
cmp eax, 2
jne 0x4ec379
jmp 0x4ec386
mov eax, dword [0x55cee0]
shr eax, 2
mov dword [0x55cee0], eax
mov eax, dword [ebp - 0x70]
dec eax
cmp eax, 2
jb 0x4ec38f
jb 0x4ec393
jmp 0x4ec39f
mov dword [ebp - 4], 0
jmp 0x4edf24
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x74]
call fcn.004eb350
test al, al
je 0x4ec3ba
jmp 0x4ec3b0
mov eax, dword [ebp - 0x70]
cmp eax, 3
je 0x4ec3ba
jmp 0x4ec3cf
mov dword [ebp - 0x14], 0x14
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xc], eax
jmp 0x4ec3f4
call fcn.0044adf0
mov ebx, eax
mov eax, ebx
call fcn.0044af70
test al, al
je 0x4ec3e3
jmp 0x4ec3ed
mov edx, dword [ebp + 0x10]
mov eax, ebp
call fcn.004eeff0
mov dword [ebp - 8], 1
mov byte [ebp - 0x5c], 0
jmp 0x4ed42d
cmp dword [ebp + 0x10], 0
jne 0x4ec405
jmp 0x4ec41d
mov eax, dword [ebp - 0x74]
cmp dword [eax + 8], 0
jne 0x4ec410
jmp 0x4ec41d
mov eax, dword [ebp - 0x74]
mov ebx, dword [eax + 8]
mov eax, ebx
call fcn.004e4d90
jmp 0x4ed42d
mov dword [ebp - 8], 4
mov byte [ebp - 0x5c], 0
jmp 0x4ed42d
mov dword [ebp - 0x14], 0x53
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xc], eax
mov byte [ebp - 0x5c], 0
jmp 0x4ed42d
mov dword [ebp - 0x14], 0x312
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xc], eax
mov byte [ebp - 0x5c], 0
jmp 0x4ed42d
lea eax, [ebp - 0xc0]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp + 0x14]
test eax, eax
jne 0x4ec47c
jmp 0x4ec4d1
mov eax, dword [ebp + 0x14]
call fcn.00514b30
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x14]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x54]
cmp dword [eax + 0x10], 0
jne 0x4ec49b
jmp 0x4ec4d1
push dword [ebp + 0x10]
push dword [ebp + 0x14]
mov eax, dword [ebp - 0x20]
lea eax, [eax + 0xc]
push eax
lea eax, [ebp - 0x5c]
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 0x4c]
mov ebx, dword [ebp - 0x54]
mov ebx, dword [ebx + 0x10]
call ebx
test al, al
jne 0x4ec4c3
jmp 0x4ec4d1
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0xc]
mov dword [ebp - 4], eax
jmp 0x4edf24
mov edx, dword [ebp + 0xc]
mov eax, ebp
call fcn.004eeb50
jmp 0x4ed42d
mov byte [ebp - 0x64], 1
lea eax, [ebp - 0xd0]
mov dword [ebp - 0x20], eax
mov dx, word [ebp + 0x10]
mov eax, ebp
call fcn.004edf80
mov dword [ebp - 0xd0], 0xbd00
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xc8], eax
mov ax, word [ebp + 0x10]
mov word [ebp - 0xcc], ax
mov dword [ebp - 0xc4], 0
cmp dword [ebp - 0x74], 0
jne 0x4ec528
jmp 0x4ec52f
mov eax, dword [ebp - 0x74]
mov byte [eax + 0x54], 0
mov byte [ebp - 0x5c], 0
jmp 0x4ed42d
mov byte [ebp - 0x64], 1
lea eax, [ebp - 0xd0]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0xd0], 0xbd01
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xc8], eax
mov ax, word [ebp + 0x10]
mov word [ebp - 0xcc], ax
mov dword [ebp - 0xc4], 0
mov byte [ebp - 0x5c], 0
cmp dword [ebp - 0x74], 0
jne 0x4ec579
jmp 0x4ec58e
mov eax, dword [ebp - 0x74]
cmp byte [eax + 0x54], 0
jne 0x4ec584
jmp 0x4ec58e
mov dword [ebp - 0xd0], 0
jmp 0x4ed42d
mov dword [ebp - 0x14], 8
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x10], eax
jmp 0x4ed42d
mov byte [ebp - 0x64], 1
lea eax, [ebp - 0xf0]
mov dword [ebp - 0x20], eax
mov eax, dword [0x586340]
cmp eax, 1
jl 0x4ec5ca
jmp 0x4ec5be
mov eax, dword [0x586340]
cmp eax, 4
jg 0x4ec5ca
jmp 0x4ec5d4
mov dword [0x586340], 1
inc dword [0x586340]
call sub.kernel32.dll_GetTickCount
mov dword [0x586350], eax
mov eax, dword [0x586340]
cmp eax, 2
jl 0x4ec61f
sub eax, 2
je 0x4ec5fb
dec eax
je 0x4ec607
dec eax
je 0x4ec613
jmp 0x4ec61f
mov dword [ebp - 0xf0], 0x203
jmp 0x4ec629
mov dword [ebp - 0xf0], 0x10446
jmp 0x4ec629
mov dword [ebp - 0xf0], 0x10447
jmp 0x4ec629
mov dword [ebp - 0xf0], 0x201
push dword [ebp + 0x14]
call fcn.00412d90
mov word [ebp - 0xe8], ax
push dword [ebp + 0x14]
call fcn.00412db0
mov word [ebp - 0xe6], ax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xec], eax
jmp 0x4ed42d
mov eax, dword [0x586340]
cmp eax, 1
jl 0x4ec66d
jmp 0x4ec661
mov eax, dword [0x586340]
cmp eax, 4
jg 0x4ec66d
jmp 0x4ec677
mov dword [0x586340], 1
mov eax, dword [0x55ce50]
cmp eax, 2
je 0x4ec686
jmp 0x4ec6e9
mov eax, dword [0x586370]
cmp eax, dword [ebp + 8]
je 0x4ec692
jmp 0x4ec6e9
call sub.kernel32.dll_GetTickCount
mov ebx, eax
mov esi, 0
mov edx, dword [0x586350]
mov eax, 0
sub ebx, edx
sbb esi, eax
call fcn.00452d50
mov edx, 0
cmp esi, edx
jl 0x4ec6c3
jg 0x4ec6e9
cmp ebx, eax
jbe 0x4ec6c3
jmp 0x4ec6e9
call fcn.004eb2f0
test al, al
jne 0x4ec6ce
jmp 0x4ec6e9
inc dword [0x586340]
push dword [ebp + 0x14]
mov ecx, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
mov edx, 0x203
call fcn.00453580
jmp 0x4ec742
mov eax, dword [0x55ce40]
cmp eax, dword [ebp + 8]
je 0x4ec6f5
jmp 0x4ec738
call sub.kernel32.dll_GetTickCount
mov ebx, eax
mov esi, 0
mov eax, dword [0x586350]
mov edx, 0
sub ebx, eax
sbb esi, edx
call fcn.00452d50
mov edx, 0
cmp esi, edx
jl 0x4ec725
jg 0x4ec738
cmp ebx, eax
jbe 0x4ec725
jmp 0x4ec738
call fcn.004eb2f0
test al, al
jne 0x4ec730
jmp 0x4ec738
inc dword [0x586340]
jmp 0x4ec742
mov dword [0x586340], 1
call sub.kernel32.dll_GetTickCount
mov dword [0x586350], eax
mov eax, dword [ebp + 8]
mov dword [0x55ce40], eax
mov dword [0x586370], 0
mov dword [0x55ce50], 1
mov eax, 0x586360
call fcn.00452c70
mov byte [ebp - 0x64], 1
lea eax, [ebp - 0xf0]
mov dword [ebp - 0x20], eax
mov eax, dword [0x586340]
cmp eax, 2
jl 0x4ec7ba
sub eax, 2
je 0x4ec796
dec eax
je 0x4ec7a2
dec eax
je 0x4ec7ae
jmp 0x4ec7ba
mov dword [ebp - 0xf0], 0x203
jmp 0x4ec7c4
mov dword [ebp - 0xf0], 0x10446
jmp 0x4ec7c4
mov dword [ebp - 0xf0], 0x10447
jmp 0x4ec7c4
mov dword [ebp - 0xf0], 0x201
push dword [ebp + 0x14]
call fcn.00412d90
mov word [ebp - 0xe8], ax
push dword [ebp + 0x14]
call fcn.00412db0
mov word [ebp - 0xe6], ax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xec], eax
jmp 0x4ed42d
mov eax, dword [0x55ce40]
cmp eax, dword [ebp + 8]
je 0x4ec7fc
jmp 0x4ec811
mov eax, dword [0x55ce50]
test eax, eax
je 0x4ec807
jmp 0x4ec811
mov dword [0x55ce50], 1
mov byte [ebp - 0x64], 1
lea eax, [ebp - 0xf0]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0xf0], 0x202
push dword [ebp + 0x14]
call fcn.00412d90
mov word [ebp - 0xe8], ax
push dword [ebp + 0x14]
call fcn.00412db0
mov word [ebp - 0xe6], ax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xec], eax
jmp 0x4ed42d
mov byte [ebp - 0x64], 1
lea eax, [ebp - 0xf0]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0xf0], 0x209
push dword [ebp + 0x14]
call fcn.00412d90
mov word [ebp - 0xe8], ax
push dword [ebp + 0x14]
call fcn.00412db0
mov word [ebp - 0xe6], ax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xec], eax
jmp 0x4ed42d
mov byte [ebp - 0x64], 1
lea eax, [ebp - 0xf0]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0xf0], 0x207
push dword [ebp + 0x14]
call fcn.00412d90
mov word [ebp - 0xe8], ax
push dword [ebp + 0x14]
call fcn.00412db0
mov word [ebp - 0xe6], ax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xec], eax
jmp 0x4ed42d
mov byte [ebp - 0x64], 1
lea eax, [ebp - 0xf0]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0xf0], 0x208
push dword [ebp + 0x14]
call fcn.00412d90
mov word [ebp - 0xe8], ax
push dword [ebp + 0x14]
call fcn.00412db0
mov word [ebp - 0xe6], ax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xec], eax
jmp 0x4ed42d
mov byte [ebp - 0x64], 1
lea eax, [ebp - 0xf0]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0xf0], 0x20d
push dword [ebp + 0x14]
call fcn.00412d90
mov word [ebp - 0xe8], ax
push dword [ebp + 0x14]
call fcn.00412db0
mov word [ebp - 0xe6], ax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xec], eax
jmp 0x4ed42d
mov byte [ebp - 0x64], 1
lea eax, [ebp - 0xf0]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0xf0], 0x20b
push dword [ebp + 0x14]
call fcn.00412d90
mov word [ebp - 0xe8], ax
push dword [ebp + 0x14]
call fcn.00412db0
mov word [ebp - 0xe6], ax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xec], eax
jmp 0x4ed42d
mov byte [ebp - 0x64], 1
lea eax, [ebp - 0xf0]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0xf0], 0x20c
push dword [ebp + 0x14]
call fcn.00412d90
mov word [ebp - 0xe8], ax
push dword [ebp + 0x14]
call fcn.00412db0
mov word [ebp - 0xe6], ax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xec], eax
jmp 0x4ed42d
mov byte [ebp - 0x64], 1
mov dword [ebp - 0x14], 0x1044c
jmp 0x4ed42d
mov byte [ebp - 0x64], 1
mov dword [ebp - 0x14], 0x1044d
jmp 0x4ed42d
mov byte [ebp - 0x64], 1
lea eax, [ebp - 0x110]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x110], 0x200
push dword [ebp + 0x14]
call fcn.00412d90
mov word [ebp - 0x108], ax
push dword [ebp + 0x14]
call fcn.00412db0
mov word [ebp - 0x106], ax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x74]
mov ax, word [eax + 0x3a]
mov dx, word [ebp - 0x108]
cmp ax, dx
je 0x4eca59
jmp 0x4eca7e
mov eax, dword [ebp - 0x74]
mov ax, word [eax + 0x3c]
mov dx, word [ebp - 0x106]
cmp ax, dx
je 0x4eca6e
jmp 0x4eca7e
mov dword [ebp - 0x110], 0
mov byte [ebp - 0x64], 0
jmp 0x4ecaa6
mov eax, 0x586520
cmp eax, dword [ebp - 0x74]
jne 0x4eca8a
jmp 0x4ecaa6
mov eax, dword [ebp - 0x74]
mov dx, word [ebp - 0x108]
mov word [eax + 0x3a], dx
mov eax, dword [ebp - 0x74]
mov dx, word [ebp - 0x106]
mov word [eax + 0x3c], dx
jmp 0x4ed42d
mov byte [ebp - 0x64], 1
lea eax, [ebp - 0x128]
mov dword [ebp - 0x20], eax
push dword [ebp + 0x14]
call fcn.00412d90
mov word [ebp - 0x120], ax
push dword [ebp + 0x14]
call fcn.00412db0
mov word [ebp - 0x11e], ax
movsx eax, word [ebp - 0x120]
mov dword [ebp - 0x38], eax
movsx eax, word [ebp - 0x11e]
mov dword [ebp - 0x34], eax
lea edx, [ebp - 0x38]
mov eax, dword [0x534f00]
mov ecx, dword [0x534f00]
mov ecx, dword [ecx]
call dword [ecx + 0x3a0]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x6c]
test eax, eax
je 0x4ecb1a
jmp 0x4ecb0c
mov eax, dword [ebp - 0x6c]
call fcn.00453280
test al, al
je 0x4ecb1a
jmp 0x4ecb1f
jmp 0x4edf24
mov eax, dword [ebp - 0x6c]
call fcn.00514b30
cmp byte [eax + 0x2a], 0
jne 0x4ecb2f
jmp 0x4ecb3a
push dword [ebp - 0x6c]
call sub.user32.dll_GetParent
mov dword [ebp - 0x6c], eax
mov al, byte [0x55ce90]
test al, al
je 0x4ecb45
jmp 0x4ecb7d
mov eax, dword [ebp - 0x6c]
cmp eax, dword [ebp + 8]
jne 0x4ecb4f
jmp 0x4ecb7d
mov byte [0x55ce90], 1
push dword [ebp + 0x14]
mov ecx, dword [ebp + 0x10]
mov eax, dword [ebp - 0x6c]
mov edx, 0x20a
call fcn.004537f0
mov dword [ebp - 0x11c], eax
mov byte [0x55ce90], 0
jmp 0x4edf24
mov eax, dword [ebp - 0x6c]
cmp eax, dword [ebp + 8]
jne 0x4ecb87
jmp 0x4ecb8c
jmp 0x4edf24
mov dword [ebp - 0x128], 0x20a
lea eax, [ebp - 0x38]
push eax
push dword [ebp - 0x6c]
call sub.user32.dll_ScreenToClient
mov ax, word [ebp - 0x38]
mov word [ebp - 0x120], ax
mov ax, word [ebp - 0x34]
mov word [ebp - 0x11e], ax
mov eax, dword [ebp + 0x10]
call fcn.00442200
mov word [ebp - 0x124], ax
mov eax, dword [ebp + 0x10]
call fcn.004421e0
mov word [ebp - 0x122], ax
call fcn.00514390
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x11c], 0
mov eax, dword [ebp + 8]
mov edx, 0xffffffeb
call fcn.004530d0
mov dword [ebp - 0x118], eax
mov byte [ebp - 0x5c], 0
jmp 0x4ed42d
mov eax, ebp
call fcn.004ee250
jmp 0x4ed42d
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x4ecc1c
jmp 0x4ecc38
mov eax, dword [ebp - 0x4c]
movzx eax, byte [eax + 0x242]
cmp eax, 0x30
je 0x4ecc2d
jmp 0x4ecc38
mov dword [ebp - 8], 0xffffffff
mov byte [ebp - 0x5c], 0
jmp 0x4ed42d
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xc], eax
mov byte [ebp - 0x64], 1
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x4ecc5c
jmp 0x4eccb6
mov eax, dword [ebp - 0x4c]
test dword [eax + 0x20], 0x10
je 0x4ecc6a
jmp 0x4eccb6
mov eax, dword [ebp + 0x10]
cmp eax, 2
je 0x4ecc74
jmp 0x4eccb6
mov edx, dword [ebp - 0x4c]
mov eax, 0x52f8e8
call fcn.0040a6e0
test al, al
jne 0x4ecc87
jmp 0x4eccb6
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0xc0]
cmp eax, 1
je 0x4ecc97
jmp 0x4eccb6
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0xc4]
cmp eax, 1
je 0x4ecca7
jmp 0x4eccb6
mov eax, dword [ebp - 0x4c]
mov ecx, 0xffffffff
mov dl, 1
call fcn.004d35d0
mov dword [ebp - 0x4c], 0
jmp 0x4ed42d
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xc], eax
mov byte [ebp - 0x64], 1
mov eax, dword [0x530dd0]
mov edx, 0
call fcn.00420690
jmp 0x4ed42d
mov eax, dword [ebp + 0x14]
mov eax, dword [eax]
call fcn.00514b30
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
jne 0x4ecd01
jmp 0x4ecd51
mov eax, dword [ebp - 0x74]
cmp dword [eax + 0x10], 0
jne 0x4ecd0c
jmp 0x4ecd51
mov dword [ebp - 0x13c], 0
push dword [ebp + 0x10]
push dword [ebp + 0x14]
lea eax, [ebp - 0x13c]
push eax
lea eax, [ebp - 0x5c]
push eax
mov eax, dword [ebp - 0x74]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp + 8]
mov ecx, 0x4e
mov ebx, dword [ebp - 0x74]
mov ebx, dword [ebx + 0x10]
call ebx
test al, al
jne 0x4ecd43
jmp 0x4ecd51
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 4], eax
jmp 0x4edf24
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 8]
cmp eax, 0xfffffd13
je 0x4ecd60
jmp 0x4ecd81
mov dword [ebp - 0x14], 0x10405
mov eax, dword [ebp - 0x74]
mov eax, dword [eax + 0x14]
test eax, eax
jne 0x4ecd73
jmp 0x4ecd7c
mov eax, dword [ebp - 0x74]
mov eax, dword [eax + 0x14]
mov dword [ebp - 0x4c], eax
jmp 0x4ece4d
lea eax, [ebp - 0x148]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x148], 0x4e
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x144], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x140], eax
mov ebx, dword [ebp - 0x140]
mov eax, dword [ebx + 8]
cmp eax, 0xfffffdd9
je 0x4ecdc0
cmp eax, 0xfffffff4
je 0x4ecdd3
jmp 0x4ece4d
mov edx, dword [ebx]
mov eax, ebp
mov cl, 1
call fcn.004ef8f0
mov dword [ebx + 4], eax
jmp 0x4ece4d
mov eax, dword [ebp - 0x74]
mov edx, dword [eax + 0x14]
mov eax, 0x55dcb4
call fcn.0040a6e0
test al, al
jne 0x4ecde9
jmp 0x4ecdf8
mov eax, dword [ebp - 0x74]
mov edx, dword [eax + 0x14]
mov eax, ebp
call fcn.004ee550
jmp 0x4ece4b
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x74]
call fcn.004eb350
test al, al
jne 0x4ece09
jmp 0x4ece4b
mov eax, dword [ebp - 0x74]
cmp byte [eax + 0x2c], 0
jne 0x4ece14
jmp 0x4ece4b
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0xc]
cmp eax, 1
jb 0x4ece4b
dec eax
je 0x4ece2b
sub eax, 0x10000
je 0x4ece3b
jmp 0x4ece4b
mov dword [ebp - 0x13c], 0x20
mov byte [ebp - 0x5c], 0
jmp 0x4ece4b
mov dword [ebp - 0x13c], 0
mov byte [ebp - 0x5c], 0
jmp 0x4ece4b
jmp 0x4ece4d
jmp 0x4ed42d
mov edx, dword [ebp + 0x10]
mov eax, ebp
call fcn.004eeff0
jmp 0x4ed42d
mov eax, dword [ebp + 0x14]
and eax, 4
cmp eax, 4
je 0x4ece6e
jmp 0x4ece81
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x4ece77
jmp 0x4ece81
mov edx, dword [ebp + 0x10]
mov eax, ebp
call fcn.004eeff0
jmp 0x4ed42d
mov dword [ebp - 0x14], 0x302
jmp 0x4ed42d
mov byte [ebp - 0x64], 1
lea eax, [ebp - 0xf0]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0xf0], 0x206
push dword [ebp + 0x14]
call fcn.00412d90
mov word [ebp - 0xe8], ax
push dword [ebp + 0x14]
call fcn.00412db0
mov word [ebp - 0xe6], ax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xec], eax
jmp 0x4ed42d
mov byte [ebp - 0x64], 1
lea eax, [ebp - 0xf0]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0xf0], 0x204
push dword [ebp + 0x14]
call fcn.00412d90
mov word [ebp - 0xe8], ax
push dword [ebp + 0x14]
call fcn.00412db0
mov word [ebp - 0xe6], ax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xec], eax
mov dword [ebp - 0xe4], 0
jmp 0x4ed42d
mov byte [ebp - 0x64], 1
mov byte [ebp - 0x5c], 0
lea eax, [ebp - 0xf0]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0xf0], 0x205
push dword [ebp + 0x14]
call fcn.00412d90
mov word [ebp - 0xe8], ax
push dword [ebp + 0x14]
call fcn.00412db0
mov word [ebp - 0xe6], ax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xec], eax
mov dword [ebp - 0xe4], 0
jmp 0x4ed42d
mov byte [ebp - 0x5c], 0
mov byte [ebp - 0x64], 1
lea eax, [ebp - 0x100]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x100], 0x7b
push dword [ebp + 0x14]
call fcn.00412d90
mov word [ebp - 0xf8], ax
push dword [ebp + 0x14]
call fcn.00412db0
mov word [ebp - 0xf6], ax
mov eax, dword [ebp + 8]
mov dword [ebp - 0xfc], eax
mov dword [ebp - 0xf4], 0
jmp 0x4ed42d
mov eax, ebp
call fcn.004eea10
jmp 0x4ed42d
mov eax, dword [0x534f00]
mov edx, dword [0x534f00]
mov edx, dword [edx]
call dword [edx + 0xd0]
cmp eax, dword [ebp + 8]
je 0x4ecfea
jmp 0x4ed01e
mov eax, dword [ebp + 8]
call fcn.00453220
test al, al
je 0x4ecff8
jmp 0x4ed012
mov eax, dword [0x55ce60]
call fcn.00453250
test al, al
jne 0x4ed008
jmp 0x4ed012
mov eax, dword [0x55ce60]
call fcn.00453ad0
mov dword [ebp - 4], 0
jmp 0x4edf24
mov byte [ebp - 0x5c], 0
jmp 0x4ed42d
mov eax, dword [0x534f00]
mov edx, dword [0x534f00]
mov edx, dword [edx]
call dword [edx + 0xd0]
cmp eax, dword [ebp + 8]
je 0x4ed041
jmp 0x4ed057
push 0
mov eax, dword [ebp + 8]
mov ecx, 0
mov edx, 0xb000
call fcn.00453580
jmp 0x4ed05f
mov eax, dword [ebp + 8]
mov dword [0x55ce60], eax
mov eax, dword [ebp + 8]
cmp eax, dword [0x55ce40]
jne 0x4ed06c
jmp 0x4ed089
mov eax, dword [0x55ce50]
test eax, eax
jne 0x4ed077
jmp 0x4ed089
mov dword [0x55ce50], 2
mov eax, dword [ebp + 8]
mov dword [0x586370], eax
mov dword [ebp - 0x14], 7
jmp 0x4ed42d
mov dword [ebp - 0x14], 0x18
mov eax, dword [ebp + 0x10]
test eax, eax
setne al
movzx ax, al
neg ax
mov word [ebp - 0x10], ax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0x4c], 0
jne 0x4ed0c0
jmp 0x4ed138
mov eax, dword [ebp + 0x10]
test eax, eax
jne 0x4ed0db
jmp 0x4ed0c9
mov eax, dword [ebp - 0x4c]
mov al, byte [eax + 0x23a]
test al, al
je 0x4ed0db
jmp 0x4ed138
mov eax, dword [ebp + 0x10]
test eax, eax
je 0x4ed0f2
jmp 0x4ed0e4
mov eax, dword [ebp - 0x4c]
cmp byte [eax + 0x23a], 0
jne 0x4ed0f2
jmp 0x4ed138
mov eax, dword [0x530dd0]
test eax, eax
jne 0x4ed0fd
jmp 0x4ed138
mov eax, dword [0x530dd0]
mov eax, dword [eax + 0x11c]
cmp eax, dword [ebp - 0x4c]
je 0x4ed10f
jmp 0x4ed138
mov eax, dword [ebp + 0x10]
test eax, eax
je 0x4ed118
jmp 0x4ed121
mov dword [ebp - 0x78], 0
jmp 0x4ed128
mov dword [ebp - 0x78], 4
push dword [ebp - 0x78]
mov eax, dword [0x534f00]
push dword [eax + 8]
call sub.user32.dll_ShowWindow
jmp 0x4ed42d
lea eax, [ebp - 0xe0]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0xe0], 0xbd06
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xd8], eax
mov ax, word [ebp + 0x10]
mov word [ebp - 0xdc], ax
mov dword [ebp - 0xd4], 0
mov byte [ebp - 0x5c], 0
jmp 0x4ed42d
mov eax, ebp
call fcn.004ee680
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xc], eax
mov al, byte [ebp - 0x5c]
mov byte [ebp - 0x60], al
mov byte [ebp - 0x5c], 0
jmp 0x4ed42d
mov byte [ebp - 0x64], 1
mov dx, word [ebp + 0x10]
mov eax, ebp
call fcn.004edf80
lea eax, [ebp - 0xd0]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0xd0], 0xbd04
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xc8], eax
mov ax, word [ebp + 0x10]
mov word [ebp - 0xcc], ax
mov dword [ebp - 0xc4], 0
mov byte [ebp - 0x5c], 0
jmp 0x4ed42d
mov byte [ebp - 0x64], 1
lea eax, [ebp - 0xd0]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0xd0], 0xbd05
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xc8], eax
mov ax, word [ebp + 0x10]
mov word [ebp - 0xcc], ax
mov dword [ebp - 0xc4], 0
mov byte [ebp - 0x5c], 0
jmp 0x4ed42d
mov dword [ebp - 0x14], 0x113
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xc], eax
jmp 0x4ed42d
mov dword [ebp - 0x14], 0x47
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0x18]
and eax, 1
test eax, eax
je 0x4ed260
jmp 0x4ed26c
push 0xffffffffffffffff
push 0
push dword [ebp + 8]
call sub.user32.dll_InvalidateRect
jmp 0x4ed42d
mov eax, dword [ebp + 0x10]
test eax, eax
je 0x4ed27a
jmp 0x4ed2e5
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0x14]
mov dword [ebp - 0x18], eax
mov edx, dword [ebp - 0x18]
mov eax, 0x5599bc
call fcn.0040a6e0
test al, al
jne 0x4ed296
jmp 0x4ed2db
mov eax, dword [ebp + 8]
call fcn.00452ce0
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0x170]
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
call fcn.0051af00
mov edx, dword [ebp + 0x14]
mov eax, dword [ebp - 0x170]
mov dword [edx + 0xc], eax
mov eax, dword [ebp + 0x14]
mov edx, dword [ebp - 0x16c]
mov dword [eax + 0x10], edx
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp + 8]
call fcn.004536b0
mov byte [ebp - 0x5c], 0
jmp 0x4ed2e5
mov eax, str.WM_MEASUREITEM_for_a_menuitem_catched_but_menuitem_is_not_TmenuItem
call fcn.00444500
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x4ed2ee
jmp 0x4ed349
mov edx, dword [ebp - 0x4c]
mov eax, 0x567a48
call fcn.0040a6e0
test al, al
jne 0x4ed301
jmp 0x4ed31a
mov dword [ebp - 0x14], 0x2c
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x10], eax
mov byte [ebp - 0x5c], 0
jmp 0x4ed349
mov eax, dword [ebp + 0x10]
test eax, eax
jne 0x4ed323
jmp 0x4ed349
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x4ed332
jmp 0x4ed349
mov dword [ebp - 0x14], 0x2c
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x10], eax
mov byte [ebp - 0x5c], 0
jmp 0x4ed42d
mov eax, dword [0x534f00]
mov edx, dword [0x534f00]
mov edx, dword [edx]
call dword [edx + 0xd0]
cmp eax, dword [ebp + 8]
je 0x4ed368
jmp 0x4ed38b
call fcn.0044adf0
mov ebx, eax
mov eax, ebx
call fcn.0044cc40
call fcn.00454910
call fcn.0044adf0
mov ebx, eax
mov eax, ebx
mov edx, ebx
mov edx, dword [edx]
call dword [edx + 0x7c]
jmp 0x4ed42d
call fcn.0044adf0
mov ebx, eax
mov eax, ebx
call fcn.0044af70
test al, al
jne 0x4ed3a4
jmp 0x4ed3b3
mov eax, dword [ebp + 8]
mov cl, 1
mov edx, 0
call fcn.004531e0
jmp 0x4ed42d
mov eax, dword [0x534f00]
mov edx, dword [0x534f00]
mov edx, dword [edx]
call dword [edx + 0xd0]
cmp eax, dword [ebp + 8]
je 0x4ed3d2
jmp 0x4ed409
mov eax, dword [0x534f00]
cmp dword [eax + 0x188], 0
jne 0x4ed3e2
jmp 0x4ed409
mov eax, dword [0x534f00]
mov eax, dword [eax + 0x18c]
mov ecx, dword [ebp + 0x14]
mov edx, dword [ebp + 0x10]
mov ebx, dword [0x534f00]
mov ebx, dword [ebx + 0x188]
call ebx
mov dword [ebp - 4], eax
jmp 0x4edf24
jmp 0x4ed42d
mov eax, dword [ebp + 0xc]
cmp eax, 0x400
jae 0x4ed417
jmp 0x4ed42d
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xc], eax
mov byte [ebp - 0x5c], 0
cmp byte [ebp - 0x5c], 0
jne 0x4ed435
jmp 0x4ed450
push dword [ebp + 0x14]
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
call fcn.004eafe0
mov edx, dword [ebp - 0x20]
mov dword [edx + 0xc], eax
mov byte [ebp - 0x5c], 0
mov eax, dword [ebp + 0xc]
cmp eax, 3
jb 0x4ed952
sub eax, 3
je 0x4ed502
sub eax, 2
je 0x4ed63c
sub eax, 0xc
je 0x4ed886
sub eax, 5
je 0x4ed83a
sub eax, 6
je 0x4ed49c
sub eax, 0x69
je 0x4ed8ee
sub eax, 0x6c
je 0x4ed7fb
jmp 0x4ed952
mov eax, dword [0x534f00]
mov edx, dword [0x534f00]
mov edx, dword [edx]
call dword [edx + 0xd0]
cmp eax, dword [ebp + 8]
je 0x4ed4b6
jmp 0x4ed4fd
mov eax, dword [ebp + 0x10]
test eax, eax
jne 0x4ed4bf
jmp 0x4ed4de
mov eax, dword [ebp + 8]
call fcn.00514cc0
cmp dword [0x530dd0], 0
jne 0x4ed4d2
jmp 0x4ed4dc
mov eax, dword [0x530dd0]
call fcn.00420370
jmp 0x4ed4fd
mov eax, dword [ebp + 8]
mov dl, 0
call fcn.00514c30
cmp dword [0x530dd0], 0
jne 0x4ed4f3
jmp 0x4ed4fd
mov eax, dword [0x530dd0]
call fcn.00420390
jmp 0x4ed952
lea eax, [ebp - 0x138]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x138], 3
mov dword [ebp - 0x134], pe_nt_image_headers32
mov edx, dword [ebp - 0x4c]
mov eax, 0x52f8e8
call fcn.0040a6e0
test al, al
jne 0x4ed535
jmp 0x4ed5c7
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x1e0]
test eax, eax
je 0x4ed547
jmp 0x4ed5c7
mov eax, dword [ebp + 8]
call fcn.00453220
or al, al
setne al
movzx eax, al
neg eax
test eax, eax
jne 0x4ed55f
jmp 0x4ed591
lea eax, [ebp - 0xa8]
push eax
push dword [ebp + 8]
call sub.user32.dll_GetWindowPlacement
test eax, eax
jne 0x4ed574
jmp 0x4ed591
lea eax, [ebp - 0x8c]
mov dx, word [eax]
mov word [ebp - 0x130], dx
mov dx, word [eax + 4]
mov word [ebp - 0x12e], dx
jmp 0x4ed5c5
lea eax, [ebp - 0x30]
push eax
push dword [ebp + 8]
call sub.user32.dll_GetWindowRect
test eax, eax
jne 0x4ed5a3
jmp 0x4ed5bb
mov ax, word [ebp - 0x30]
mov word [ebp - 0x130], ax
mov ax, word [ebp - 0x2c]
mov word [ebp - 0x12e], ax
jmp 0x4ed5c5
mov dword [ebp - 0x138], 0
jmp 0x4ed5fd
lea ecx, [ebp - 0x40]
lea edx, [ebp - 0x3c]
mov eax, dword [ebp + 8]
call fcn.00454530
test al, al
jne 0x4ed5db
jmp 0x4ed5f3
mov ax, word [ebp - 0x3c]
mov word [ebp - 0x130], ax
mov ax, word [ebp - 0x40]
mov word [ebp - 0x12e], ax
jmp 0x4ed5fd
mov dword [ebp - 0x138], 0
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x4ed606
jmp 0x4ed637
mov edx, dword [ebp - 0x4c]
movsx eax, word [ebp - 0x130]
mov edx, dword [edx + 0x110]
cmp eax, edx
je 0x4ed61c
jmp 0x4ed637
mov edx, dword [ebp - 0x4c]
movsx eax, word [ebp - 0x12e]
mov edx, dword [edx + 0x218]
cmp eax, edx
je 0x4ed632
jmp 0x4ed637
jmp 0x4edf24
jmp 0x4ed952
mov dword [ebp - 0x14], 5
mov eax, dword [ebp + 0x10]
or eax, 0x80
mov dword [ebp - 0x10], eax
mov eax, dword [0x534f00]
mov edx, dword [0x534f00]
mov edx, dword [edx]
call dword [edx + 0xd0]
cmp eax, dword [ebp + 8]
je 0x4ed668
jmp 0x4ed6b3
mov eax, dword [0x530dd0]
cmp dword [eax + 0x11c], 0
jne 0x4ed678
jmp 0x4ed6b3
mov eax, dword [0x530dd0]
mov ebx, dword [eax + 0x11c]
mov eax, ebx
call fcn.004d0500
test al, al
jne 0x4ed690
jmp 0x4ed6b3
mov eax, dword [0x530dd0]
mov eax, dword [eax + 0x11c]
mov dword [ebp - 0x4c], eax
mov eax, dword [0x530dd0]
mov ebx, dword [eax + 0x11c]
mov eax, ebx
call fcn.004cee90
mov dword [ebp + 8], eax
mov eax, dword [ebp + 8]
call fcn.00453220
test al, al
jne 0x4ed6c1
jmp 0x4ed6ed
lea eax, [ebp - 0xa8]
push eax
push dword [ebp + 8]
call sub.user32.dll_GetWindowPlacement
lea eax, [ebp - 0x8c]
mov ecx, dword [eax + 8]
mov edx, dword [eax]
sub ecx, edx
mov dword [ebp - 0x44], ecx
mov edx, dword [eax + 0xc]
mov ecx, dword [eax + 4]
sub edx, ecx
mov dword [ebp - 0x48], edx
jmp 0x4ed6fb
lea ecx, [ebp - 0x48]
lea edx, [ebp - 0x44]
mov eax, dword [ebp + 8]
call fcn.00453150
mov ax, word [ebp - 0x44]
mov word [ebp - 0xc], ax
mov ax, word [ebp - 0x48]
mov word [ebp - 0xa], ax
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x4ed717
jmp 0x4ed7ca
mov edx, dword [ebp - 0x4c]
movzx eax, word [ebp - 0xc]
mov edx, dword [edx + 0x224]
cmp eax, edx
jne 0x4ed74b
jmp 0x4ed72a
mov edx, dword [ebp - 0x4c]
movzx eax, word [ebp - 0xa]
mov edx, dword [edx + 0xd0]
cmp eax, edx
jne 0x4ed74b
jmp 0x4ed73d
mov eax, dword [ebp - 0x4c]
call fcn.004ca450
test al, al
jne 0x4ed74b
jmp 0x4ed795
mov eax, dword [ebp - 0x4c]
mov dl, 1
call fcn.004ca290
mov edx, dword [ebp - 0x4c]
mov eax, 0x561830
call fcn.0040a6e0
test al, al
jne 0x4ed768
jmp 0x4ed793
mov eax, dword [ebp - 0x4c]
mov edx, dword [eax + 0x1e0]
mov eax, 0x561c70
call fcn.0040a6e0
test al, al
jne 0x4ed781
jmp 0x4ed793
mov eax, dword [ebp - 0x4c]
mov ebx, dword [eax + 0x1e0]
mov eax, ebx
mov dl, 0
call fcn.004ca380
jmp 0x4ed7ca
mov edx, dword [ebp - 0x4c]
mov eax, 0x52f8e8
call fcn.0040a6e0
test al, al
jne 0x4ed7a8
jmp 0x4ed7ca
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x1e0]
test eax, eax
je 0x4ed7b7
jmp 0x4ed7ca
mov eax, dword [ebp + 0x10]
test eax, eax
je 0x4ed7c0
jmp 0x4ed7ca
mov eax, dword [ebp - 0x4c]
mov dl, 0
call fcn.004ca290
mov eax, dword [ebp + 8]
call fcn.00514b30
mov eax, dword [eax]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x68]
test eax, eax
jne 0x4ed7e0
jmp 0x4ed7f6
push 2
push dword [ebp - 0x48]
push dword [ebp - 0x44]
push 0
push 0
push 0
push dword [ebp - 0x68]
call sub.user32.dll_SetWindowPos
jmp 0x4ed952
mov eax, dword [ebp + 0x14]
cmp eax, 0x3e8
jne 0x4ed807
jmp 0x4ed80e
mov dword [ebp - 0x14], 0x10405
mov edx, dword [ebp - 0x4c]
mov eax, 0x56b88c
call fcn.0040a6e0
test al, al
jne 0x4ed821
jmp 0x4ed835
mov eax, dword [ebp + 0x10]
cmp eax, 1
je 0x4ed82b
jmp 0x4ed835
mov edx, dword [ebp - 0x4c]
mov eax, ebp
call fcn.004eef30
jmp 0x4ed952
mov eax, dword [0x530dd0]
test eax, eax
jne 0x4ed845
jmp 0x4ed881
mov eax, dword [0x534f00]
mov edx, dword [0x534f00]
mov edx, dword [edx]
call dword [edx + 0xd0]
cmp eax, dword [ebp + 8]
je 0x4ed85f
jmp 0x4ed881
mov eax, dword [ebp + 0x10]
cmp eax, 0
jg 0x4ed869
jmp 0x4ed881
mov dword [ebp - 0x14], 0
mov eax, dword [0x530dd0]
call fcn.00420320
mov dword [ebp - 8], 0
jmp 0x4ed952
mov eax, dword [0x530dd0]
test eax, eax
jne 0x4ed891
jmp 0x4ed8e9
mov eax, dword [0x534f00]
mov edx, dword [0x534f00]
mov edx, dword [edx]
call dword [edx + 0xd0]
cmp eax, dword [ebp + 8]
je 0x4ed8ab
jmp 0x4ed8e9
mov dword [ebp - 0x14], 0
mov eax, dword [ebp - 8]
test eax, eax
sete byte [ebp - 0x168]
lea edx, [ebp - 0x168]
mov eax, dword [0x530dd0]
call fcn.004203b0
cmp byte [ebp - 0x168], 0
jne 0x4ed8d9
jmp 0x4ed8e2
mov dword [ebp - 8], 0
jmp 0x4ed8e9
mov dword [ebp - 8], 1
jmp 0x4ed952
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x4ed8f7
jmp 0x4ed950
call fcn.0044adf0
mov ebx, eax
mov eax, ebx
call fcn.0044af70
test al, al
jne 0x4ed90b
jmp 0x4ed950
mov edx, dword [ebp - 0x4c]
mov eax, 0x52f8e8
call fcn.0040a6e0
test al, al
je 0x4ed91e
jmp 0x4ed950
mov edx, dword [ebp - 0x4c]
mov eax, 0x555a48
call fcn.0040a6e0
test al, al
jne 0x4ed931
jmp 0x4ed950
call fcn.0044adf0
mov ebx, eax
mov edx, dword [ebp - 0x4c]
mov eax, ebx
mov cl, 1
mov esi, ebx
mov esi, dword [esi]
call dword [esi + 0xac]
mov dword [ebp - 8], 0
jmp 0x4ed952
lea eax, [ebp - 0x110]
cmp eax, dword [ebp - 0x20]
je 0x4ed95f
jmp 0x4ed99b
mov edx, dword [ebp - 0x4c]
mov eax, 0x52f190
call fcn.0040a6e0
test al, al
je 0x4ed972
jmp 0x4ed99b
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 0x4c]
call fcn.00514660
test al, al
jne 0x4ed983
jmp 0x4ed999
mov ax, word [ebp - 0x30]
sub word [ebp - 0x108], ax
mov ax, word [ebp - 0x2c]
sub word [ebp - 0x106], ax
jmp 0x4ed9e2
lea eax, [ebp - 0xf0]
cmp eax, dword [ebp - 0x20]
je 0x4ed9a8
jmp 0x4ed9e2
mov edx, dword [ebp - 0x4c]
mov eax, 0x52f190
call fcn.0040a6e0
test al, al
je 0x4ed9bb
jmp 0x4ed9e2
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 0x4c]
call fcn.00514660
test al, al
jne 0x4ed9cc
jmp 0x4ed9e2
mov ax, word [ebp - 0x30]
sub word [ebp - 0xe8], ax
mov ax, word [ebp - 0x2c]
sub word [ebp - 0xe6], ax
cmp byte [ebp - 0x64], 0
jne 0x4ed9ea
jmp 0x4ed9f4
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
call fcn.00413210
cmp dword [ebp - 0x4c], 0
jne 0x4ed9fc
jmp 0x4eda12
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
test eax, eax
jne 0x4eda07
jmp 0x4eda12
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x4c]
call fcn.00522590
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
cmp eax, 0x14
jb 0x4edb64
sub eax, 0x14
je 0x4eda7c
sub eax, 0xc
je 0x4eda7c
sub eax, 0x2e
je 0x4edb0f
sub eax, 0x2d
je 0x4eda7c
sub eax, 0x97
je 0x4eda91
sub eax, 0xf3
je 0x4eda7c
sub eax, 5
je 0x4eda7c
sub eax, 0xbaf6
jb 0x4edb64
sub eax, 1
jbe 0x4edaf4
dec eax
je 0x4eda9c
sub eax, 2
jb 0x4edb64
sub eax, 1
jbe 0x4edaf4
dec eax
je 0x4eda9c
jmp 0x4edb64
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0xc]
test eax, eax
je 0x4eda88
jmp 0x4eda8c
mov byte [ebp - 0x5c], 1
jmp 0x4edbc0
mov al, byte [ebp - 0x60]
mov byte [ebp - 0x5c], al
jmp 0x4edbc0
mov eax, dword [ebp - 0xd4]
test eax, eax
sete byte [ebp - 0x5c]
cmp byte [0x577870], 0
jne 0x4edab3
jmp 0x4edae5
mov eax, dword [ebp - 0xd4]
cmp eax, 1
je 0x4edad2
jmp 0x4edac0
mov ax, word [ebp - 0x1a8]
cmp ax, word [ebp - 0xdc]
jne 0x4edad2
jmp 0x4edae3
mov al, byte [ebp - 0xdc]
call fcn.00409040
movzx eax, ax
mov dword [ebp + 0x10], eax
jmp 0x4edaef
movzx eax, word [ebp - 0xdc]
mov dword [ebp + 0x10], eax
jmp 0x4edbc0
mov eax, dword [ebp - 0xc4]
test eax, eax
sete byte [ebp - 0x5c]
movzx eax, word [ebp - 0xcc]
mov dword [ebp + 0x10], eax
jmp 0x4edbc0
mov ebx, dword [ebp - 0x140]
mov eax, dword [ebx + 8]
cmp eax, 0xfffffdd8
je 0x4edb28
cmp eax, 0xfffffdd9
je 0x4edb41
jmp 0x4edb5f
mov eax, dword [ebp - 0x13c]
test eax, eax
je 0x4edb34
jmp 0x4edb3f
mov edx, dword [ebx]
mov eax, ebp
mov cl, 0
call fcn.004ef8f0
jmp 0x4edb5f
mov eax, dword [ebx]
call fcn.00514b30
mov edx, dword [eax + 0x14]
mov eax, 0x561c70
call fcn.0040a700
mov edx, dword [ebx + 4]
call fcn.00517e50
jmp 0x4edb5f
jmp 0x4edbc0
mov eax, dword [ebp + 0xc]
cmp eax, 0x82
jb 0x4edbc0
sub eax, 0x82
je 0x4edb9b
sub eax, 0x17f
jb 0x4edbc0
sub eax, 1
jbe 0x4edb83
jmp 0x4edbc0
mov eax, dword [0x55ce50]
cmp eax, 1
je 0x4edb8f
jmp 0x4edb99
mov dword [0x55ce50], 0
jmp 0x4edbc0
mov eax, dword [ebp + 8]
call fcn.00514ac0
test al, al
jne 0x4edba9
jmp 0x4edbb0
mov dword [ebp - 0x74], 0
mov eax, 0x4eafa0
push eax
push dword [ebp + 8]
call sub.user32.dll_EnumPropsA
jmp 0x4edbc0
cmp byte [ebp - 0x5c], 0
jne 0x4edbcb
jmp 0x4ede17
push dword [ebp + 0x14]
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
call fcn.004eafe0
mov edx, dword [ebp - 0x20]
mov dword [edx + 0xc], eax
mov eax, dword [ebp + 0xc]
cmp eax, 0x100
jb 0x4ede17
sub eax, 0x100
je 0x4edc19
dec eax
jb 0x4ede17
sub eax, 1
jbe 0x4edc19
sub eax, 2
je 0x4edc19
dec eax
jb 0x4ede17
sub eax, 1
jbe 0x4edc19
jmp 0x4ede17
mov eax, dword [ebp - 0x20]
mov dword [eax + 0xc], 0
mov eax, dword [ebp + 0xc]
cmp eax, 0x100
jb 0x4edd0a
sub eax, 0x100
je 0x4edcae
dec eax
je 0x4edcc5
dec eax
je 0x4edc5e
sub eax, 2
je 0x4edcdc
dec eax
je 0x4edcf3
dec eax
je 0x4edc97
jmp 0x4edd0a
push 0
mov eax, dword [ebp + 8]
mov ecx, 0
mov edx, 0x87
call fcn.004eafe0
and eax, 0x80
mov edx, dword [ebp - 0x20]
mov dword [edx + 0xc], eax
mov ax, word [ebp + 0x10]
mov word [ebp - 0xdc], ax
mov dword [ebp - 0xe0], 0x102
jmp 0x4edd0a
mov ax, word [ebp + 0x10]
mov word [ebp - 0xdc], ax
mov dword [ebp - 0xe0], 0x106
jmp 0x4edd0a
mov ax, word [ebp + 0x10]
mov word [ebp - 0xcc], ax
mov dword [ebp - 0xd0], 0x100
jmp 0x4edd0a
mov ax, word [ebp + 0x10]
mov word [ebp - 0xcc], ax
mov dword [ebp - 0xd0], 0x101
jmp 0x4edd0a
mov ax, word [ebp + 0x10]
mov word [ebp - 0xcc], ax
mov dword [ebp - 0xd0], 0x104
jmp 0x4edd0a
mov ax, word [ebp + 0x10]
mov word [ebp - 0xcc], ax
mov dword [ebp - 0xd0], 0x105
jmp 0x4edd0a
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x4edd13
jmp 0x4edd2a
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0xc]
test eax, eax
je 0x4edd1f
jmp 0x4edd2a
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x4c]
call fcn.00522590
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0xc]
test eax, eax
je 0x4edd39
jmp 0x4ede15
mov eax, dword [ebp + 0xc]
cmp eax, 0x100
je 0x4edd48
jmp 0x4ede15
mov eax, dword [ebp + 0x10]
cmp eax, 0x41
je 0x4edd55
jmp 0x4ede15
mov eax, 0x11
call fcn.00452db0
cmp ax, 0
jl 0x4edd6a
jmp 0x4ede15
mov eax, 0x12
call fcn.00452db0
cmp ax, 0
jge 0x4edd7f
jmp 0x4ede15
lea eax, [ebp - 0x1e0]
call fcn.00403a80
mov dword [ebp - 0x1e0], 0
lea eax, [ebp - 0x1e0]
push eax
mov eax, str.Edit
mov cl, 1
mov edx, 4
call fcn.00407310
mov ebx, dword [ebp - 0x1e0]
lea eax, [ebp - 0x1e4]
call fcn.00403a80
mov dword [ebp - 0x1e4], 0
push 0x14
lea eax, [ebp - 0x1f8]
push eax
push dword [ebp + 8]
call sub.user32.dll_GetClassNameA
lea eax, [ebp - 0x1e4]
push eax
lea eax, [ebp - 0x1f8]
mov cl, 1
mov edx, 0x13
call fcn.00407310
mov eax, dword [ebp - 0x1e4]
mov edx, ebx
call fcn.004073e0
test eax, eax
je 0x4ede04
jmp 0x4ede15
push 0xffffffffffffffff
push 0
push 0xb1
push dword [ebp + 8]
call sub.user32.dll_SendMessageA
jmp 0x4ede17
mov eax, dword [ebp + 0xc]
cmp eax, 0x100
je 0x4ede2f
jmp 0x4ede23
mov eax, dword [ebp + 0xc]
cmp eax, 0x104
je 0x4ede2f
jmp 0x4ede4f
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0xc]
test eax, eax
jne 0x4ede3b
jmp 0x4ede45
mov eax, dword [ebp + 8]
mov dword [0x55ce80], eax
jmp 0x4ede4f
mov dword [0x55ce80], 0
lea eax, [ebp - 0xc0]
cmp eax, dword [ebp - 0x20]
je 0x4ede5c
jmp 0x4ede6a
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 4], eax
jmp 0x4edf24
lea eax, [ebp - 0xd0]
cmp eax, dword [ebp - 0x20]
je 0x4ede77
jmp 0x4ede85
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 4], eax
jmp 0x4edf24
lea eax, [ebp - 0xe0]
cmp eax, dword [ebp - 0x20]
je 0x4ede92
jmp 0x4edea0
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 4], eax
jmp 0x4edf24
lea eax, [ebp - 0xf0]
cmp eax, dword [ebp - 0x20]
je 0x4edead
jmp 0x4edebb
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 4], eax
jmp 0x4edf24
lea eax, [ebp - 0x110]
cmp eax, dword [ebp - 0x20]
je 0x4edec8
jmp 0x4eded3
mov eax, dword [ebp - 0x104]
mov dword [ebp - 4], eax
jmp 0x4edf24
lea eax, [ebp - 0x138]
cmp eax, dword [ebp - 0x20]
je 0x4edee0
jmp 0x4edeeb
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 4], eax
jmp 0x4edf24
lea eax, [ebp - 0x148]
cmp eax, dword [ebp - 0x20]
je 0x4edef8
jmp 0x4edf03
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 4], eax
jmp 0x4edf24
lea eax, [ebp - 0x128]
cmp eax, dword [ebp - 0x20]
je 0x4edf10
jmp 0x4edf1b
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 4], eax
jmp 0x4edf24
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0xc]
mov dword [ebp - 4], eax
call fcn.0040b520
lea eax, [ebp - 0x1e4]
call fcn.00403a80
mov dword [ebp - 0x1e4], 0
lea eax, [ebp - 0x1e0]
call fcn.00403a80
mov dword [ebp - 0x1e0], 0
pop eax
test eax, eax
je 0x4edf5d
call fcn.0040b690
mov eax, dword [ebp - 4]
mov ebx, dword [ebp - 0x204]
mov esi, dword [ebp - 0x200]
mov edi, dword [ebp - 0x1fc]
leave
ret 0x10