Function at 0x4018d0
Capabilities:
Enumerate pe sections
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x1438
call fcn.004cc6a0
push ebx
push ebp
push esi
push edi
mov ebp, edx
mov dword [esp + 0xb4], ebp
mov ebx, ecx
mov dword [esp + 0x78], ebx
mov byte [esp + 0x52], 0
cmp ebp, 2
jne 0x40191e
cmp byte [0x4fa90f], 0
mov ebp, 1
mov dword [esp + 0xb4], ebp
jne 0x40191e
mov byte [0x4fa90f], 1
mov byte [esp + 0x52], 1
cmp dword [0x4fd788], 0
je 0x401960
cmp dword [0x4fd778], 0
je 0x401946
push dword [0x4fd770]
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov dword [0x4fd778], 0
call dword [sym.imp.USER32.dll_CloseClipboard]
mov dword [0x4fd788], 0
mov dword [0x4fd770], 0
mov eax, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [esp + 0x14], eax
cmp ebx, 0x8000012f
jne 0x40198c
mov ebx, 0xa
mov byte [esp + 0x26], 1
mov dword [esp + 0x78], ebx
mov dword [esp + 0x94], 0
jmp 0x4019ac
cmp ebx, 5
setle byte [esp + 0x26]
jg 0x4019a3
mov dword [esp + 0x94], 0
jmp 0x4019ac
call eax
mov dword [esp + 0x94], eax
cmp dword [0x4fb5d8], 0
je 0x4019ba
call fcn.00404730
cmp dword [0x4fd6d4], 0
mov esi, 1
mov byte [esp + 0x6c], 0
je 0x4019e2
call fcn.004042f0
mov ecx, dword [esp + 0x6c]
test al, al
movzx ecx, cl
cmovne ecx, esi
mov dword [esp + 0x6c], ecx
test ebx, ebx
jle 0x401a1c
cmp ebp, 1
jne 0x401a1c
inc dword [0x4faa84]
cmp byte [0x4fa90e], 0
mov byte [esp + 0x53], 1
jne 0x401a21
push 0
push 0xa
push 9
push dword [0x4faa80]
call dword [sym.imp.USER32.dll_SetTimer]
test eax, eax
setne byte [0x4fa90e]
jmp 0x401a21
mov byte [esp + 0x53], 0
mov eax, dword [sym.imp.USER32.dll_GetMessageW]
xor esi, esi
mov dword [esp + 0x130], eax
mov eax, dword [sym.imp.USER32.dll_GetForegroundWindow]
mov dword [esp + 0xe0], eax
mov eax, dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov dword [esp + 0xe4], eax
mov eax, dword [sym.imp.USER32.dll_GetClassNameW]
mov dword [esp + 0xb8], eax
mov eax, dword [sym.imp.USER32.dll_GetFocus]
mov dword [esp + 0xf0], eax
mov eax, dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
mov dword [esp + 0x134], eax
mov eax, dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [esp + 0x98], eax
mov eax, dword [sym.imp.USER32.dll_TranslateAcceleratorW]
mov dword [esp + 0xec], eax
mov eax, dword [sym.imp.USER32.dll_GetKeyState]
mov dword [esp + 0x84], eax
mov eax, dword [sym.imp.USER32.dll_GetWindowLongW]
mov dword [esp + 0x74], eax
mov eax, dword [sym.imp.USER32.dll_IsWindowEnabled]
mov dword [esp + 0x100], eax
mov eax, dword [sym.imp.USER32.dll_SendMessageW]
mov dword [esp + 0x30], eax
mov eax, dword [sym.imp.USER32.dll_WindowFromPoint]
mov dword [esp + 0x108], eax
mov eax, dword [sym.imp.USER32.dll_GetParent]
mov dword [esp + 0x7c], eax
mov eax, dword [sym.imp.USER32.dll_IsDialogMessageW]
mov dword [esp + 0xe8], eax
mov eax, dword [sym.imp.SHELL32.dll_DragQueryFileW]
mov dword [esp + 0x10c], eax
mov eax, dword [sym.imp.SHELL32.dll_DragFinish]
mov dword [esp + 0x90], eax
mov eax, dword [sym.imp.USER32.dll_ScreenToClient]
mov dword [esp + 0x118], eax
mov eax, dword [sym.imp.USER32.dll_SetWindowLongW]
mov dword [esp + 0xd4], eax
mov eax, dword [sym.imp.USER32.dll_CountClipboardFormats]
mov dword [esp + 0x120], eax
mov eax, dword [sym.imp.USER32.dll_IsClipboardFormatAvailable]
mov edi, dword [sym.imp.USER32.dll_PeekMessageW]
mov dword [esp + 0xac], eax
mov eax, dword [sym.imp.USER32.dll_ShowWindow]
mov dword [esp + 0xa4], eax
mov eax, dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
mov dword [esp + 0x124], eax
mov eax, dword [sym.imp.USER32.dll_TranslateMessage]
mov dword [esp + 0x128], eax
mov eax, dword [sym.imp.USER32.dll_DispatchMessageW]
mov dword [esp + 0x12c], eax
mov eax, dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
mov dword [esp + 0xf4], eax
mov eax, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov dword [esp + 0xd8], eax
mov eax, dword [sym.imp.USER32.dll_GetWindowRect]
mov dword [esp + 0x8c], eax
mov eax, dword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [esp + 0x88], eax
mov eax, dword [sym.imp.USER32.dll_GetDlgCtrlID]
mov dword [esp + 0x9c], eax
mov eax, dword [sym.imp.USER32.dll_MapWindowPoints]
mov dword [esp + 0x114], eax
mov eax, dword [sym.imp.USER32.dll_PostMessageW]
mov byte [esp + 0x5f], 0
mov byte [esp + 0x51], 0
mov dword [esp + 0x18], esi
mov dword [esp + 0x1c], edi
mov dword [esp + 0x104], eax
mov ebp, dword [esp + 0x14]
jmp 0x401bd3
mov ebp, dword [esp + 0x14]
mov edi, dword [esp + 0x1c]
jmp 0x401bd3
push ecx
call dword [esp + 0x40]
mov ebp, dword [esp + 0x14]
mov edi, dword [esp + 0x1c]
mov esi, dword [esp + 0x18]
call ebp
cmp dword [esp + 0x78], 0
mov ebx, eax
mov cl, byte [0x4fa90f]
jle 0x401c93
cmp byte [esp + 0x51], 0
jne 0x401c93
test cl, cl
jne 0x401c9b
cmp dword [0x4f816c], 0
je 0x401c54
cmp dword [0x4faa50], 0
jne 0x401c54
mov ecx, dword [0x4f8174]
cmp byte [ecx + 0xec], 0
jne 0x401c4b
cmp byte [ecx + 0xee], 0
jne 0x401c4b
cmp dword [ecx + 0xe0], 0xffffffff
jle 0x401c4b
call ebp
mov ecx, dword [0x4f8174]
sub eax, dword [ecx + 0xdc]
cmp eax, dword [ecx + 0xe0]
jb 0x401c4b
mov byte [ecx + 0xec], 1
movzx ecx, byte [ecx + 0xec]
jmp 0x401c56
xor ecx, ecx
xor edx, edx
mov eax, 0x311
test ecx, ecx
cmovne eax, edx
push eax
push edx
push edx
lea eax, [esp + 0x40]
push eax
call dword [esp + 0x140]
cmp eax, 0xffffffff
je 0x401bd3
call ebp
mov ecx, eax
sub ecx, ebx
cmp ecx, 3
jbe 0x401f56
mov dword [0x4fd728], eax
jmp 0x401f56
test cl, cl
je 0x401e4c
call dword [esp + 0xe0]
mov esi, eax
test esi, esi
je 0x401e4c
push 0
push esi
call dword [esp + 0xec]
cmp eax, dword [0x4fcbf0]
jne 0x401e4c
cmp dword [0x4faa7c], 0
je 0x401d21
push 0x20
lea eax, [esp + 0x254]
push eax
push esi
mov esi, dword [esp + 0xc4]
call esi
mov ecx, str.32770
lea eax, [esp + 0x250]
nop dword [eax + eax]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x401d16
test dx, dx
je 0x401d12
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x401d16
add eax, 4
add ecx, 4
test dx, dx
jne 0x401cf0
xor eax, eax
jmp 0x401d1b
sbb eax, eax
or eax, 1
test eax, eax
je 0x401d7b
jmp 0x401d28
mov esi, dword [esp + 0xb8]
call dword [esp + 0xf0]
test eax, eax
je 0x401e4c
push 0x20
lea ecx, [esp + 0x254]
push ecx
push eax
call esi
mov esi, dword [esp + 0x134]
lea eax, [esp + 0x250]
push str.SysTreeView32
push eax
call esi
add esp, 8
test eax, eax
je 0x401d7b
lea eax, [esp + 0x250]
push str.SysListView32
push eax
call esi
add esp, 8
test eax, eax
jne 0x401e4c
cmp dword [0x4f816c], 0
je 0x401dd4
cmp dword [0x4faa50], 0
jne 0x401dd4
mov ecx, dword [0x4f8174]
cmp byte [ecx + 0xec], 0
jne 0x401dcb
cmp byte [ecx + 0xee], 0
jne 0x401dcb
cmp dword [ecx + 0xe0], 0xffffffff
jle 0x401dcb
call ebp
mov ecx, dword [0x4f8174]
sub eax, dword [ecx + 0xdc]
cmp eax, dword [ecx + 0xe0]
jb 0x401dcb
mov byte [ecx + 0xec], 1
movzx eax, byte [ecx + 0xec]
jmp 0x401dd6
xor eax, eax
push 0
test eax, eax
mov esi, 0x311
push 0x1ff
mov eax, 0xffffffff
push 0
cmovne esi, eax
lea eax, [esp + 0x40]
push 0
push eax
call edi
test eax, eax
lea eax, [esp + 0x34]
jne 0x401e0c
push 1
push esi
push 0x20e
jmp 0x401ebc
mov edi, dword [esp + 0x44]
push 0
push esi
push 0x20e
push 0
push eax
call dword [esp + 0x30]
push 1
test eax, eax
jne 0x401e33
mov edi, dword [esp + 0x20]
push 0x1ff
jmp 0x401eb6
mov eax, dword [esp + 0x48]
sub eax, edi
mov edi, dword [esp + 0x20]
test eax, eax
lea eax, [esp + 0x38]
jle 0x401e01
push 0x1ff
jmp 0x401eba
cmp dword [0x4f816c], 0
je 0x401ea5
cmp dword [0x4faa50], 0
jne 0x401ea5
mov ecx, dword [0x4f8174]
cmp byte [ecx + 0xec], 0
jne 0x401e9c
cmp byte [ecx + 0xee], 0
jne 0x401e9c
cmp dword [ecx + 0xe0], 0xffffffff
jle 0x401e9c
call ebp
mov ecx, dword [0x4f8174]
sub eax, dword [ecx + 0xdc]
cmp eax, dword [ecx + 0xe0]
jb 0x401e9c
mov byte [ecx + 0xec], 1
movzx ecx, byte [ecx + 0xec]
jmp 0x401ea7
xor ecx, ecx
xor edx, edx
mov eax, 0x311
test ecx, ecx
push 1
cmovne eax, edx
push eax
lea eax, [esp + 0x3c]
push 0
push 0
push eax
call edi
test eax, eax
jne 0x401f52
call ebp
mov ecx, eax
sub ecx, ebx
cmp ecx, 3
jbe 0x401ed9
mov dword [0x4fd728], eax
mov ebx, dword [esp + 0x78]
test ebx, ebx
jne 0x401ef9
cmp byte [esp + 0x5f], bl
jne 0x401ef9
push ebx
call dword [esp + 0x9c]
mov byte [esp + 0x5f], 1
jmp 0x401bcf
mov esi, dword [esp + 0x18]
test esi, esi
jne 0x401f23
cmp byte [esp + 0x26], 0
je 0x401f23
test ebx, ebx
jle 0x401f15
push 5
call dword [esp + 0x9c]
mov esi, 1
mov dword [esp + 0x18], esi
jmp 0x401bd3
call ebp
cmp byte [esp + 0x26], 0
jne 0x40417a
mov ecx, dword [esp + 0x94]
sub ecx, eax
add ecx, ebx
cmp ecx, 5
jle 0x40417a
push 5
call dword [esp + 0x9c]
jmp 0x401bd3
mov esi, dword [esp + 0x18]
inc esi
cmp dword [0x4fcc04], 0
mov dword [esp + 0x18], esi
je 0x401f91
mov edx, dword [esp + 0x38]
lea eax, [esp + 0x1ec]
mov ecx, dword [esp + 0x34]
push eax
lea eax, [esp + 0x38]
push eax
push dword [esp + 0x48]
push dword [esp + 0x48]
call fcn.00404800
add esp, 0x10
test al, al
jne 0x401bd3
mov esi, dword [0x4faa78]
mov ecx, dword [esp + 0x34]
mov ebp, dword [esp + 0x38]
test esi, esi
je 0x40262b
test ecx, ecx
je 0x40262b
cmp ecx, dword [0x4faa80]
je 0x40262b
cmp ebp, 0x414
je 0x40262b
cmp ebp, 0x402
je 0x40262b
lea eax, [ebp - 0x100]
cmp eax, 9
ja 0x4023df
call dword [esp + 0xf0]
mov ebx, eax
mov dword [esp + 0x70], ebx
test ebx, ebx
je 0x4023d1
mov ebp, dword [esp + 0x74]
mov esi, ebx
push 0xfffffffffffffff0
push ebx
call ebp
test eax, 0x40000000
je 0x402038
nop dword [eax]
push esi
mov edi, esi
call dword [esp + 0x80]
mov esi, eax
test esi, esi
je 0x40202e
push 0xfffffffffffffff0
push esi
call ebp
test eax, 0x40000000
jne 0x402010
jmp 0x402038
mov esi, edi
test edi, edi
je 0x4023d1
mov ecx, ebx
call fcn.00486650
mov ebp, eax
mov dword [esp + 0x2c], ebp
test ebp, ebp
je 0x4023d1
mov ecx, dword [ebp + 0x74]
test ecx, ecx
je 0x402076
lea eax, [esp + 0x34]
push eax
push ecx
push esi
call dword [esp + 0xf8]
mov ebp, dword [esp + 0x14]
mov edi, dword [esp + 0x1c]
mov esi, dword [esp + 0x18]
test eax, eax
jne 0x401bd3
mov ebp, dword [esp + 0x38]
mov edx, dword [esp + 0x3c]
cmp ebp, 0x100
jne 0x40238c
mov ecx, dword [esp + 0x2c]
cmp byte [ecx + 0xc0], 0
je 0x40227d
cmp edx, 0x22
je 0x4020b8
cmp edx, 0x21
je 0x4020b8
cmp edx, 9
je 0x4020b8
cmp edx, 0x25
je 0x4020b8
cmp edx, 0x27
jne 0x40227d
push ebx
mov edi, ebx
call dword [esp + 0xa0]
mov ebp, dword [esp + 0x2c]
lea esi, [eax - 3]
cmp esi, dword [ebp + 0x10]
jb 0x4020f0
push ebx
call dword [esp + 0x80]
mov edi, eax
test edi, edi
je 0x4020e7
push edi
call dword [esp + 0xa0]
lea esi, [eax - 3]
cmp esi, dword [ebp + 0x10]
jae 0x40225d
mov eax, dword [ebp + 0x18]
mov ecx, esi
shl ecx, 6
add eax, ecx
mov dword [esp + 0x54], eax
cmp dword [eax], edi
jne 0x40225d
cmp esi, 0x2af8
je 0x40225d
mov edi, eax
test edi, edi
je 0x402265
mov al, byte [edi + 4]
cmp al, 0xf
je 0x402265
mov edx, dword [esp + 0x3c]
xor esi, esi
cmp al, 0x13
jne 0x402158
mov esi, edi
cmp edx, 0x25
je 0x40213d
cmp edx, 0x27
jne 0x402158
cmp edx, 0x27
mov ecx, ebp
push 0
sete al
push 0
movzx eax, al
push eax
push edi
call fcn.00498850
jmp 0x401bc7
cmp edx, 0x25
je 0x402269
cmp edx, 0x27
je 0x402269
mov ebx, dword [esp + 0x84]
push 0x11
call ebx
test ax, ax
jns 0x402265
mov edx, dword [esp + 0x3c]
cmp edx, 9
jne 0x4021a1
cmp byte [edi + 4], 0xc
jne 0x4021a1
push 0xfffffffffffffff0
push dword [edi]
call dword [esp + 0x7c]
test al, 4
jne 0x402265
mov edx, dword [esp + 0x3c]
test esi, esi
jne 0x402211
mov bl, byte [edi + 6]
cmp bl, 0xff
je 0x4021de
mov edi, dword [ebp + 0x10]
xor al, al
xor ecx, ecx
test edi, edi
je 0x4021de
mov esi, dword [ebp + 0x18]
nop dword [eax + eax]
cmp byte [esi + 4], 0x13
jne 0x4021cc
cmp al, bl
je 0x4021da
inc al
inc ecx
add esi, 0x40
cmp ecx, edi
jb 0x4021c0
xor al, al
xor ecx, ecx
jmp 0x4021ed
test esi, esi
jne 0x40220a
mov edi, dword [ebp + 0x10]
xor al, al
xor ecx, ecx
test edi, edi
je 0x402269
mov esi, dword [ebp + 0x18]
cmp byte [esi + 4], 0x13
jne 0x4021fc
test al, al
je 0x402206
inc al
inc ecx
add esi, 0x40
cmp ecx, edi
jb 0x4021f0
jmp 0x402269
test esi, esi
je 0x402269
mov ebx, dword [esp + 0x84]
push dword [esi]
call dword [esp + 0x104]
test eax, eax
je 0x402265
mov eax, dword [esp + 0x3c]
cmp eax, 0x22
je 0x402249
cmp eax, 9
jne 0x402235
push 0x10
call ebx
test ax, ax
jns 0x402249
push 1
push 1
xor al, al
mov ecx, ebp
push eax
push esi
call fcn.00498850
jmp 0x401bc7
push 1
push 1
mov al, 1
mov ecx, ebp
push eax
push esi
call fcn.00498850
jmp 0x401bc7
mov dword [esp + 0x54], 0
mov edx, dword [esp + 0x3c]
mov ebp, dword [esp + 0x38]
cmp ebp, 0x100
jne 0x40238c
mov ebx, dword [esp + 0x70]
cmp edx, 0x1b
je 0x4022b4
cmp edx, 9
je 0x4022b4
cmp edx, 0x41
jne 0x40238c
mov ebp, dword [esp + 0x84]
push 0x11
call ebp
test ax, ax
jns 0x402384
push 0xa5
call ebp
test ax, ax
js 0x402384
mov edi, dword [esp + 0x9c]
push ebx
call edi
mov ebp, dword [esp + 0x2c]
lea esi, [eax - 3]
cmp esi, dword [ebp + 0x10]
jb 0x4022e7
push ebx
call dword [esp + 0x80]
mov ebx, eax
test ebx, ebx
je 0x4022de
push ebx
call edi
lea esi, [eax - 3]
cmp esi, dword [ebp + 0x10]
jae 0x40237c
mov edi, esi
shl edi, 6
add edi, dword [ebp + 0x18]
mov dword [esp + 0x54], edi
mov ecx, dword [edi]
cmp ecx, ebx
jne 0x40237c
cmp esi, 0x2af8
je 0x40237c
test edi, edi
je 0x402384
cmp byte [edi + 4], 0xc
jne 0x402384
mov edx, dword [esp + 0x3c]
cmp edx, 0x1b
je 0x40234b
mov al, byte [edi + 5]
cmp edx, 0x41
je 0x402339
test al, al
jns 0x402388
push 0x4ceca4
push 1
push 0xc2
jmp 0x401bc2
test al, 2
jne 0x402388
push 0xffffffffffffffff
push 0
push 0xb1
jmp 0x401bc2
cmp dword [ebp + 0x28], 0
mov edi, dword [esp + 0x1c]
mov esi, dword [esp + 0x18]
je 0x401bb2
push 0
push 0x2af80007
push 0x414
push dword [ebp + 4]
call dword [esp + 0x114]
mov ebp, dword [esp + 0x14]
jmp 0x401bcf
mov dword [esp + 0x54], 0
mov edx, dword [esp + 0x3c]
mov ebp, dword [esp + 0x38]
mov eax, dword [0x4fc2fc]
test eax, eax
je 0x4025a4
cmp ebp, 0x100
jne 0x4025a4
cmp edx, 0xd
jne 0x4023b9
push 0
push 0
push 0x1116
push eax
jmp 0x401bc3
cmp edx, 0x1b
jne 0x4025a4
push 0
push 1
push 0x1116
push eax
jmp 0x401bc3
mov ebp, dword [esp + 0x38]
mov ecx, dword [esp + 0x34]
mov esi, dword [0x4faa78]
cmp ebp, 0x20a
je 0x4023f8
cmp ebp, 0x20e
je 0x4023f8
mov edx, dword [esp + 0x3c]
jmp 0x4025ae
push dword [esp + 0x4c]
push dword [esp + 0x4c]
call dword [esp + 0x110]
mov esi, eax
push 0xfffffffffffffff0
push esi
call dword [esp + 0x7c]
push esi
mov ebp, eax
call dword [esp + 0x80]
mov edx, dword [0x4faa78]
xor ecx, ecx
mov ebx, eax
test edx, edx
jle 0x402441
mov edi, dword [0x4faa74]
nop
mov eax, dword [edi + ecx*4]
cmp dword [eax + 4], ebx
je 0x4024be
inc ecx
cmp ecx, edx
jl 0x402430
push dword [esp + 0x3c]
push 0xfffffffffffffff0
push dword [esp + 0x3c]
call dword [esp + 0x80]
mov edx, dword [esp + 0x3c]
mov ecx, dword [esp + 0x38]
push eax
call fcn.004017f0
add esp, 8
test eax, eax
jne 0x40259c
push dword [esp + 0x34]
mov ebx, dword [esp + 0x80]
call ebx
mov esi, dword [0x4faa78]
xor ecx, ecx
mov edi, dword [0x4faa74]
test esi, esi
jle 0x4024a5
nop word [eax + eax]
mov ebp, dword [edi + ecx*4]
mov dword [esp + 0x2c], ebp
cmp dword [ebp + 4], eax
je 0x40251e
inc ecx
cmp ecx, esi
jl 0x402490
mov dword [esp + 0x2c], 0
mov edx, dword [esp + 0x3c]
mov ebp, dword [esp + 0x38]
mov ecx, dword [esp + 0x34]
jmp 0x4025b4
test eax, eax
je 0x402441
cmp esi, dword [esp + 0x34]
jne 0x4024f1
push dword [esp + 0x3c]
mov edx, dword [esp + 0x3c]
mov ecx, esi
push ebp
call fcn.004017f0
add esp, 8
test eax, eax
jne 0x402441
cmp esi, dword [esp + 0x34]
je 0x402441
push dword [esp + 0x3c]
mov edx, dword [esp + 0x3c]
mov ecx, esi
push ebp
call fcn.004017f0
add esp, 8
test eax, eax
je 0x402441
push dword [esp + 0x40]
push dword [esp + 0x40]
push dword [esp + 0x40]
push esi
jmp 0x401bc3
test ebp, ebp
je 0x4024ad
push dword [esp + 0x3c]
mov edx, dword [esp + 0x3c]
push dword [ebp + 0x3c]
mov ecx, dword [ebp + 4]
call fcn.004017f0
add esp, 8
test eax, eax
jne 0x402588
push dword [ebp + 4]
call ebx
mov esi, dword [0x4faa78]
xor ecx, ecx
mov edi, dword [0x4faa74]
test esi, esi
jle 0x4024a5
nop word [eax + eax]
mov ebp, dword [edi + ecx*4]
mov dword [esp + 0x2c], ebp
cmp dword [ebp + 4], eax
je 0x402576
inc ecx
cmp ecx, esi
jl 0x402560
jmp 0x4024a5
test ebp, ebp
jne 0x402522
mov edx, dword [esp + 0x3c]
mov ebp, dword [esp + 0x38]
mov ecx, dword [esp + 0x34]
jmp 0x4025b4
push dword [esp + 0x40]
push dword [esp + 0x40]
push dword [esp + 0x40]
push dword [ebp + 4]
jmp 0x401bc3
mov edx, dword [esp + 0x3c]
mov ebp, dword [esp + 0x38]
mov esi, dword [0x4faa78]
mov ecx, dword [esp + 0x34]
mov edi, dword [0x4faa74]
xor ebx, ebx
test esi, esi
jle 0x402635
nop word [eax + eax]
mov eax, dword [edi + ebx*4]
lea edx, [edi + ebx*4]
cmp dword [eax + 0x10], 0
jne 0x4025d4
cmp ebp, 0x106
je 0x402620
mov ecx, dword [0x4f8174]
mov byte [ecx + 0xe8], 1
mov eax, dword [esp + 0x38]
mov dword [ecx + 0xe4], eax
lea eax, [esp + 0x34]
push eax
mov eax, dword [edx]
push dword [eax + 4]
call dword [esp + 0xf0]
test eax, eax
jne 0x4040e4
mov eax, dword [0x4f8174]
mov esi, dword [0x4faa78]
mov edi, dword [0x4faa74]
mov byte [eax + 0xe8], 0
mov ebp, dword [esp + 0x38]
inc ebx
cmp ebx, esi
jl 0x4025c0
mov ecx, dword [esp + 0x34]
jmp 0x402631
mov edi, dword [0x4faa74]
mov edx, dword [esp + 0x3c]
cmp ebp, 0x400
ja 0x402832
je case.0x402848.1025
cmp ebp, 0x100
ja 0x4026a3
je 0x402682
cmp ebp, 0x12
je 0x40266f
cmp ebp, 0x4b
jne case.0x402848.1027
mov dword [0x4faa60], 0
mov byte [esp + 0x51], 1
jmp 0x401bc7
push 0
push 4
mov ecx, 0x4fcc10
call fcn.0042eac0
jmp 0x401bc7
cmp ecx, dword [0x4faa5c]
jne case.0x402848.1027
cmp edx, 0x1b
jne case.0x402848.1027
push 0
push dword [0x4faa80]
call dword [esp + 0xac]
jmp 0x401bc7
cmp ebp, 0x113
je 0x402731
cmp ebp, 0x312
je case.0x402848.1026
call dword [esp + 0xe0]
mov esi, eax
test esi, esi
je 0x404104
push 0
push esi
call dword [esp + 0xec]
cmp eax, dword [0x4fcbf0]
jne 0x404104
push 0x20
lea eax, [esp + 0x254]
push eax
push esi
call dword [esp + 0xc4]
mov ecx, str.32770
lea eax, [esp + 0x250]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x40408d
test dx, dx
je 0x40272a
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x40408d
add eax, 4
add ecx, 4
test dx, dx
jne 0x402700
xor eax, eax
jmp 0x404092
cmp dword [esp + 0x40], 0
jne case.0x402848.1027
cmp ecx, dword [0x4faa80]
jne case.0x402848.1027
cmp dword [0x4fb5d8], 0
je 0x402756
call fcn.00404730
cmp dword [0x4fd6d4], 0
je 0x402779
call fcn.004042f0
mov edx, dword [esp + 0x6c]
test al, al
movzx ecx, dl
mov eax, 1
cmovne ecx, eax
mov byte [esp + 0x6c], cl
cmp dword [esp + 0xb4], 0
mov ebp, dword [esp + 0x14]
mov edi, dword [esp + 0x1c]
mov esi, dword [esp + 0x18]
je 0x401bd3
mov ebx, dword [esp + 0x78]
cmp ebx, 1
jl 0x401bd3
call ebp
cmp byte [esp + 0x26], 0
jne 0x4027bd
mov ecx, dword [esp + 0x94]
sub ecx, eax
add ecx, ebx
cmp ecx, 5
jg 0x401bcf
cmp byte [esp + 0x52], 0
xorps xmm0, xmm0
movlpd qword [0x4fd718], xmm0
mov dword [0x4fd728], eax
mov dword [0x4fd72c], eax
je 0x4027e0
mov byte [0x4fa90f], 0
cmp byte [esp + 0x53], 0
je 0x402824
sub dword [0x4faa84], 1
jne 0x402824
cmp dword [0x4fd6d4], 0
jne 0x402824
cmp dword [0x4fb5d8], 0
jne 0x402824
cmp byte [0x4fa90e], 0
je 0x402824
push 9
push dword [0x4faa80]
call dword [sym.imp.USER32.dll_KillTimer]
test eax, eax
je 0x402824
mov byte [0x4fa90e], 0
mov edx, dword [esp + 0x6c]
mov al, dl
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x401]
cmp eax, 0x1d
ja case.0x402848.1027
movzx eax, byte [eax + 0x4041d4]
jmp dword [eax*4 + 0x4041c8]
test ecx, ecx
je case.0x402848.1026
cmp ecx, dword [0x4faa80]
jne case.0x402848.1027
lea eax, [ebp - 0x401]
mov dword [esp + 0x70], 0
cmp eax, 0x1d
ja case.0x40287d.1027
movzx eax, byte [eax + 0x404210]
jmp dword [eax*4 + 0x4041f4]
xor eax, eax
test esi, esi
jle 0x4028a1
nop word [eax + eax]
mov ebx, dword [edi + eax*4]
mov dword [esp + 0x2c], ebx
cmp dword [ebx + 4], ecx
je 0x4028ae
inc eax
cmp eax, esi
jl 0x402890
mov dword [esp + 0x2c], 0
jmp case.0x402848.1027
test ebx, ebx
je case.0x402848.1027
mov eax, dword [esp + 0x40]
movzx ecx, dx
shr edx, 0x10
mov dword [esp + 0x58], ecx
mov edi, edx
mov dword [esp + 0xd0], edx
mov dword [esp + 0x28], 0
cmp ecx, 8
jne 0x4028ed
mov edx, 0x2af8
mov dword [esp + 0xa0], eax
mov dword [esp + 0xd0], edx
cmovne edi, eax
cmp edx, dword [ebx + 0x10]
jae 0x4028ff
mov ecx, edx
shl ecx, 6
add ecx, dword [ebx + 0x18]
jmp 0x402901
xor ecx, ecx
mov eax, dword [esp + 0x58]
xor edx, edx
add eax, 0xfffffffb
mov dword [esp + 0x54], ecx
mov dword [esp + 0x80], edx
mov byte [esp + 0x27], dl
cmp eax, 4
ja case.default.0x402922
jmp dword [eax*4 + 0x404230]
mov esi, dword [ebx + 0x2c]
mov dword [esp + 0x20], edi
test esi, esi
je 0x401bc7
lea edx, [ebx + 0x3a]
jmp 0x402963
mov esi, dword [ebx + 0x24]
mov dword [esp + 0x20], edi
test esi, esi
je 0x401bc7
lea edx, [ebx + 0x38]
jmp 0x402963
mov esi, dword [ebx + 0x28]
mov dword [esp + 0x20], edi
test esi, esi
je 0x401bc7
lea edx, [ebx + 0x39]
mov dword [esp + 0x80], edx
mov dword [esp + 0x20], edi
test edx, edx
je 0x402a5f
cmp byte [edx], 0
mov edi, dword [esp + 0x1c]
jne 0x402373
xor ebx, ebx
jmp 0x402e3d
mov esi, dword [ebx + 0x34]
mov dword [esp + 0x20], edi
test esi, esi
je 0x401bc7
mov dword [esp + 0x20], edi
xor ebx, ebx
jmp 0x402e3d
mov ebp, dword [esp + 0x2c]
mov dword [esp + 0x20], edi
mov esi, dword [ebp + 0x30]
mov ebx, dword [ebp + 0x68]
mov dword [esp + 0x70], ebx
test esi, esi
je 0x4029eb
mov dword [esp + 0x20], edi
mov edi, dword [esp + 0x1c]
test ebx, ebx
je 0x402373
push 0
push 0
push 0xffffffffffffffff
push ebx
call dword [esp + 0x11c]
mov dword [esp + 0x20], eax
test eax, eax
je 0x4029eb
mov ebp, dword [esp + 0x38]
xor ebx, ebx
jmp 0x402e3d
mov edi, dword [esp + 0x1c]
mov esi, dword [esp + 0x18]
test ebx, ebx
je 0x401bb2
push ebx
call dword [esp + 0x94]
mov dword [ebp + 0x68], 0
mov ebp, dword [esp + 0x14]
jmp 0x401bcf
mov esi, dword [esp + 0x18]
mov dword [esp + 0x20], edi
test ecx, ecx
je 0x401bb8
mov esi, dword [ecx + 0xc]
mov al, byte [ecx + 5]
test esi, esi
jne 0x402a4a
test al, 1
je 0x402a41
mov eax, dword [ebx + 4]
test eax, eax
je 0x402a41
push esi
push eax
call dword [esp + 0xac]
mov dword [esp + 0x20], edi
jmp 0x401bc7
mov dword [esp + 0x20], edi
test al, 4
jne 0x401bc7
mov byte [esp + 0x27], 1
mov dword [esp + 0x20], edi
xor ebx, ebx
jmp 0x402e3d
test edx, edx
je 0x402aa1
xor eax, eax
test esi, esi
jle 0x402a81
mov ebx, dword [edi + eax*4]
mov dword [esp + 0x2c], ebx
cmp dword [ebx + 4], edx
je 0x402a9b
inc eax
cmp eax, esi
jl 0x402a70
mov dword [esp + 0x2c], 0
test ecx, ecx
je 0x402aa9
cmp ecx, dword [0x4faa80]
jne case.0x402848.1027
jmp 0x402aa9
test ebx, ebx
jne 0x402aa9
jmp 0x402a89
mov dword [esp + 0x2c], 0
mov ecx, dword [0x4fd6d8]
test ecx, ecx
je 0x402ad9
mov eax, dword [esp + 0x40]
mov edi, dword [ecx + 4]
mov dword [esp + 0x64], edi
test edi, edi
je 0x402ad2
cmp dword [edi + 0x14], eax
je 0x402ae6
mov edi, dword [edi + 0x20]
mov dword [esp + 0x64], edi
test edi, edi
jne 0x402ac2
mov ecx, dword [ecx + 0x1c]
test ecx, ecx
jne 0x402ab7
mov dword [esp + 0x64], 0
jmp 0x401bc7
mov esi, dword [edi + 8]
test esi, esi
je 0x401bc7
mov ebx, dword [edi + 0x18]
jmp 0x402e41
mov ebp, dword [esp + 0x14]
mov edi, dword [esp + 0x1c]
mov esi, dword [esp + 0x18]
cmp edx, dword [0x4fb5d4]
jae 0x401bd3
mov eax, dword [0x4fb5d0]
mov esi, dword [eax + edx*4]
mov dword [esp + 0xa8], esi
mov ecx, dword [esi + 0x10]
test ecx, ecx
je 0x402b48
mov edx, dword [esi + 4]
call fcn.00414960
mov dword [esp + 0x68], eax
test eax, eax
je 0x401bcf
mov eax, dword [esi + 0x10]
mov al, byte [eax]
cmp al, 1
je 0x402b50
cmp al, 3
je 0x402b50
mov dword [esp + 0x68], 0
push dword [esp + 0x40]
mov ecx, esi
call fcn.00417b60
cmp dword [esi + 0xc], 0
mov ebp, dword [esp + 0x14]
mov edi, dword [esp + 0x1c]
jne 0x401bcf
cmp byte [esi + 0x2a], 0
je 0x402b7a
mov ax, word [esp + 0x40]
jmp 0x402b7c
xor eax, eax
mov ebx, dword [esp + 0xa8]
mov ebp, dword [esp + 0x38]
mov word [0x4fd6ec], ax
mov esi, dword [esi]
mov ebx, dword [ebx + 0x14]
jmp 0x402e3d
cmp byte [0x4fd6c0], 0
mov edi, dword [esp + 0x1c]
mov esi, dword [esp + 0x18]
jne 0x401bb2
mov esi, dword [0x4fd6b4]
test esi, esi
cmove esi, dword [0x4fd260]
xor ebx, ebx
jmp 0x402e3d
mov ebx, edx
mov dword [esp + 0x60], ebx
test ebx, ebx
jne 0x402bd9
mov dword [esp + 0x60], 0
jmp 0x401bc7
mov eax, dword [0x4faa70]
cmp eax, ebx
jne 0x402bec
mov eax, dword [ebx + 4]
mov dword [0x4faa70], eax
jmp 0x402c0b
test eax, eax
je 0x402bcc
lea ecx, [eax + 4]
mov eax, dword [ecx]
cmp eax, edx
je 0x402c06
test eax, eax
jne 0x402bf0
mov dword [esp + 0x60], eax
jmp 0x401bc7
mov eax, dword [edx + 4]
mov dword [ecx], eax
call fcn.004145b0
cmp dword [ebx + 8], 0
mov dword [ebx + 4], 0
je 0x402bcc
cmp dword [0x4faa70], 0
jne 0x402c3d
cmp dword [0x4fb5e4], 0
jne 0x402c3d
test byte [0x4fad14], 1
jne 0x402c3d
call fcn.00414d90
mov ecx, dword [ebx + 8]
mov esi, dword [ecx + 0x35c]
test esi, esi
je 0x402c55
mov ebp, dword [esp + 0x38]
xor ebx, ebx
jmp 0x402e3d
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [esp + 0x60], 0
jmp 0x401bc7
mov edi, dword [0x4faa70]
mov esi, dword [esp + 0x18]
mov dword [esp + 0x60], edi
test edi, edi
je 0x401bb8
nop
cmp edi, edx
je 0x402c94
mov edi, dword [edi + 4]
mov dword [esp + 0x60], edi
test edi, edi
jne 0x402c80
jmp 0x401bc7
mov esi, dword [edi + 8]
cmp ebp, 0x41c
jne 0x402ca7
mov esi, dword [esi + 0x360]
jmp 0x402cbd
cmp ebp, 0x41e
jne 0x402cb7
mov esi, dword [esi + 0x368]
jmp 0x402cbd
mov esi, dword [esi + 0x364]
mov edi, dword [esp + 0x1c]
test esi, esi
je 0x402373
xor ebx, ebx
jmp 0x402e3d
mov edi, dword [esp + 0x1c]
mov eax, edx
mov esi, dword [esp + 0x18]
and eax, 0x7fff
cmp ax, word [0x4fb5ec]
jae 0x401bb2
mov ecx, eax
shr edx, 0x10
mov eax, dword [0x4fb5dc]
mov esi, dword [eax + ecx*4]
mov dword [esp + 0xdc], esi
test dx, dx
je 0x402d39
mov edi, dword [esi + 0x20]
add edx, 0xffff
mov dword [esp + 0xb0], edi
test dx, dx
je 0x402d35
nop word [eax + eax]
mov edi, dword [edi + 8]
add edx, 0xffff
test dx, dx
jne 0x402d20
mov dword [esp + 0xb0], edi
test edi, edi
jne 0x402d7f
cmp ebp, 0x400
jne 0x402d51
mov eax, dword [esp + 0x40]
mov ecx, 0xffc3d44d
shr eax, 0x10
sub ecx, eax
jmp 0x402d53
xor ecx, ecx
push 0
push ecx
lea eax, [esp + 0x70]
mov ecx, esi
push eax
call fcn.00415360
mov ebp, dword [esp + 0x14]
mov edi, eax
mov esi, dword [esp + 0x18]
mov dword [esp + 0xb0], edi
test edi, edi
je 0x401bbc
mov ebp, dword [esp + 0x38]
mov eax, dword [0x4ff12c]
mov edx, dword [edi]
test al, 1
jne 0x402da3
or dword [0x4ff12c], 1
mov ecx, 0x4ff130
push 0
push 0
call fcn.0042d040
mov ebp, dword [esp + 0x38]
mov eax, dword [0x4fd260]
mov ecx, dword [edx]
cmp ecx, dword [eax]
je 0x402db6
cmp ecx, dword [0x4ff130]
jne 0x402dc6
mov ecx, 8
mov ecx, dword [edx + ecx]
test ecx, ecx
je 0x402dc6
mov cl, byte [ecx]
jmp 0x402dc8
xor cl, cl
mov al, byte [edi + 0x16]
cmp al, byte [edi + 0x17]
jb 0x402e10
cmp cl, 0xe2
je 0x402e10
cmp cl, 0xce
je 0x402e10
cmp cl, 0xdc
je 0x402e10
cmp cl, 0xdd
je 0x402e10
cmp cl, 0xd8
je 0x402e10
cmp cl, 0xd9
je 0x402e10
cmp cl, 0xda
je 0x402e10
cmp cl, 0xdb
je 0x402e10
cmp byte [edi + 0x1a], 0
je 0x402e02
mov byte [edi + 0x1b], 1
mov ebp, dword [esp + 0x14]
call ebp
mov dword [edi + 0xc], eax
jmp 0x401bcb
mov eax, dword [edi + 4]
test eax, eax
je 0x402e30
mov al, byte [eax]
cmp al, 2
je 0x402e30
cmp al, 4
je 0x402e30
cmp al, 5
jb 0x402e38
mov eax, dword [0x4faa6c]
mov dword [esp + 0x68], eax
jmp 0x402e38
mov dword [esp + 0x68], 0
mov esi, dword [edi]
mov ebx, dword [edi + 0x10]
mov edi, dword [esp + 0x64]
mov eax, dword [esp + 0x20]
mov dword [esp + 0x110], eax
mov eax, dword [0x4ff12c]
test al, 1
jne 0x402e6e
or dword [0x4ff12c], 1
mov ecx, 0x4ff130
push 0
push 0
call fcn.0042d040
mov ebp, dword [esp + 0x38]
mov eax, dword [0x4fd260]
mov ecx, dword [esi]
cmp ecx, dword [eax]
je 0x402e81
cmp ecx, dword [0x4ff130]
jne 0x402e93
mov eax, 8
mov ecx, esi
mov ecx, dword [ecx + eax]
test ecx, ecx
je 0x402e93
mov cl, byte [ecx]
jmp 0x402e95
xor cl, cl
mov edx, dword [0x4faa68]
mov eax, dword [0x4f8170]
mov byte [esp + 0xcc], cl
cmp edx, eax
jl 0x402f27
add eax, 2
cmp edx, eax
jge 0x402eda
cmp cl, 0xe2
je 0x402f27
cmp cl, 0xce
je 0x402f27
cmp cl, 0xdc
je 0x402f27
cmp cl, 0xdd
je 0x402f27
cmp cl, 0xd8
je 0x402f27
cmp cl, 0xd9
je 0x402f27
cmp cl, 0xda
je 0x402f27
cmp cl, 0xdb
je 0x402f27
mov eax, dword [esp + 0x70]
test eax, eax
je 0x402ef9
push eax
call dword [esp + 0x94]
mov eax, dword [esp + 0x2c]
mov dword [eax + 0x68], 0
mov ebp, dword [esp + 0x38]
mov edi, dword [esp + 0x1c]
cmp ebp, 0x41b
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
jne 0x401bd3
mov ebp, dword [esp + 0x60]
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov ebp, dword [esp + 0x14]
jmp 0x401bcf
mov eax, dword [0x4f8174]
cmp ebx, dword [eax + 0x2c]
jl 0x402eda
lea eax, [ebp - 0x402]
mov byte [esp + 0x6c], 1
cmp eax, 0x1c
ja case.0x402f4c.1027
movzx eax, byte [eax + 0x404250]
jmp dword [eax*4 + 0x404244]
mov ebp, dword [esp + 0xf4]
push 0x104
push dword [edi]
push 0x4fd268
call ebp
xor eax, eax
add esp, 0xc
mov word [0x4fd470], ax
mov eax, dword [edi + 0x10]
push 0x104
push dword [eax]
push 0x4fd472
call ebp
add esp, 0xc
mov dword [0x4fd264], edi
xor eax, eax
mov word [0x4fd67a], ax
mov ebp, dword [esp + 0x14]
mov edi, dword [0x4faa64]
cmp byte [edi + 0x17], 0
jne 0x402fa8
mov edi, dword [edi + 0xc]
test byte [edi + 0x15], 8
je 0x402fb5
mov ecx, edi
call fcn.004014f0
mov al, byte [edi + 0x17]
cmp al, 1
jne 0x403027
test byte [edi + 0x15], 4
je 0x402fc8
push edi
call fcn.0044e610
mov ecx, dword [edi + 8]
jmp 0x403078
mov eax, dword [0x4fd67c]
mov dword [0x4fd680], eax
mov eax, dword [0x4fd6e4]
mov dword [0x4fd6e8], eax
cmp ebp, 0x401
jne 0x403008
mov eax, dword [esp + 0xa8]
mov ebp, dword [esp + 0x14]
mov eax, dword [eax + 4]
mov dword [0x4fd67c], eax
call ebp
mov dword [0x4fd6e4], eax
jmp 0x402f99
mov eax, dword [esp + 0xdc]
mov ebp, dword [esp + 0x14]
mov eax, dword [eax + 0x1c]
mov dword [0x4fd67c], eax
call ebp
mov dword [0x4fd6e4], eax
jmp 0x402f99
cmp al, 2
jne 0x403073
mov ecx, dword [0x4fd77c]
test ecx, ecx
jne 0x403078
mov edi, dword [esp + 0xac]
push 0xd
call edi
test eax, eax
jne 0x403059
push 0xf
call edi
test eax, eax
mov ecx, 0x4cec24
mov eax, 0x4cec30
cmove ecx, eax
jmp 0x403078
push 0
call fcn.00406590
mov edx, 0x4cec30
cmp eax, 0xffffffff
mov ecx, edx
cmovne ecx, dword [0x4fd778]
jmp 0x403078
mov ecx, 0x4fb624
push 0x7f
push ecx
lea eax, [esp + 0x298]
push eax
call dword [esp + 0x100]
add esp, 0xc
xor eax, eax
xor dl, dl
mov word [esp + 0x38e], ax
mov ecx, ebx
push dword [esp + 0xcc]
push 1
call fcn.00404cd0
mov ebx, dword [0x4f8174]
add esp, 8
call ebp
mov dword [0x4fd72c], eax
mov dword [0x4fd728], eax
mov eax, dword [esp + 0x38]
add eax, 0xfffffbff
cmp eax, 0x1d
ja case.0x4030d7.1027
movzx eax, byte [eax + 0x404290]
jmp dword [eax*4 + 0x404270]
mov edi, dword [esp + 0x54]
xor eax, eax
mov ebp, dword [esp + 0x2c]
mov word [esp + 0x1cc], ax
cmp byte [esp + 0x27], al
je 0x4030fa
mov ecx, dword [edi]
jmp 0x4030fd
mov ecx, dword [ebp + 4]
mov edx, dword [esp + 0x28]
mov eax, edx
add eax, eax
inc edx
mov dword [esp + 0x28], edx
mov dword [esp + eax*8 + 0x168], ecx
mov ecx, dword [esp + 0x58]
mov dword [esp + eax*8 + 0x170], 1
mov dword [esp + eax*8 + 0x16c], 0
lea eax, [ecx - 5]
cmp eax, 4
ja case.default.0x403137
jmp dword [eax*4 + 0x4042b0]
xor eax, eax
cmp dword [esp + 0x20], eax
mov dword [esp + 0x20], 0
sete al
lea eax, [eax*2 + 1]
mov dword [ebx + 0x34], eax
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x4c]
mov dword [ebx + 0x3c], eax
mov dword [ebx + 0x40], ecx
test edi, edi
je 0x403316
cmp dword [esp + 0x110], 0
je 0x403290
movzx eax, byte [edi + 4]
add eax, 0xfffffff7
mov dword [esp + 0xbc], htonl
cmp eax, 8
ja case.0x403198.12
jmp dword [eax*4 + 0x4042c4]
push 0
push 0
push 0x19f
push dword [edi]
call dword [esp + 0x40]
cmp eax, 0xffffffff
je case.0x403198.12
lea ecx, [esp + 0xbc]
push ecx
push eax
push 0x198
jmp 0x40322c
push 1
push 0xffffffffffffffff
push 0x100c
push dword [edi]
call dword [esp + 0x40]
cmp eax, 0xffffffff
je case.0x403198.12
lea ecx, [esp + 0xbc]
mov dword [esp + 0xbc], 2
push ecx
push eax
push 0x100e
jmp 0x40322c
push 0
push 9
push 0x110a
push dword [edi]
call dword [esp + 0x40]
test eax, eax
je case.0x403198.12
mov dword [esp + 0xbc], eax
lea eax, [esp + 0xbc]
push eax
push 1
push 0x1104
jmp 0x40322c
lea eax, [esp + 0xbc]
push eax
push 0
push 0x419
push dword [edi]
call dword [esp + 0x40]
cmp dword [esp + 0xbc], 0x80000000
lea ecx, [esp + 0xbc]
mov eax, dword [edi]
jne 0x403253
push ecx
push eax
call dword [esp + 0x94]
jmp 0x403260
push 2
push ecx
push 0
push eax
call dword [esp + 0x124]
mov eax, dword [esp + 0xbc]
mov dword [ebx + 0x3c], eax
mov eax, dword [esp + 0xc8]
sub eax, dword [esp + 0xc0]
mov eax, eax
test eax, eax
jns 0x403281
add eax, 1
sar eax, 1
add eax, 2
add eax, dword [esp + 0xc0]
mov dword [ebx + 0x40], eax
movzx eax, byte [edi + 4]
sub eax, 9
je 0x403302
sub eax, 1
je 0x4032f7
sub eax, 1
jne 0x403316
cmp dword [ebx + 0x34], 1
jne 0x4032b9
push eax
push 9
push 0x110a
push dword [edi]
call dword [esp + 0x40]
jmp 0x403312
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x1f0], eax
lea eax, [esp + 0x1f0]
push eax
push dword [edi]
mov dword [esp + 0x1fc], ecx
call dword [esp + pe_nt_image_headers32]
lea eax, [esp + 0x1f0]
push eax
push 0
push 0x1111
push dword [edi]
call dword [esp + 0x40]
jmp 0x403312
push 1
push 0xffffffffffffffff
push 0x100c
jmp 0x40330b
push 0
push 0
push 0x19f
push dword [edi]
call dword [esp + 0x40]
inc eax
mov dword [esp + 0x20], eax
lea eax, [esp + 0x210]
push eax
push dword [ebp + 4]
call dword [esp + 0x94]
mov eax, dword [esp + 0x210]
lea ecx, [esp + 0x168]
sub dword [ebx + 0x3c], eax
mov eax, dword [esp + 0x214]
sub dword [ebx + 0x40], eax
mov edx, dword [esp + 0x28]
mov eax, edx
shl eax, 4
add ecx, eax
test edi, edi
je 0x403364
mov eax, dword [edi]
mov dword [ecx], eax
mov eax, 1
mov dword [ecx + 4], 0
jmp 0x40336c
mov dword [ecx], 0x4cec30
xor eax, eax
mov dword [ecx + 8], eax
lea eax, [edx + 1]
mov ecx, dword [esp + 0x20]
lea edx, [esp + 0x178]
mov edi, dword [esp + 0x28]
shl eax, 4
add edx, eax
mov dword [esp + eax + 0x168], ecx
xor ecx, ecx
mov dword [esp + eax + 0x170], 1
mov dword [esp + eax + 0x16c], 0
mov eax, dword [ebx + 0x34]
cmp eax, 3
mov dword [edx + 8], 1
mov dword [edx + 4], 0
sete cl
mov dword [edx], ecx
lea ecx, [edi + 3]
mov eax, dword [ebx + 0x3c]
add ecx, ecx
cdq
mov dword [esp + ecx*8 + 0x168], eax
mov dword [esp + ecx*8 + 0x16c], edx
mov dword [esp + ecx*8 + 0x170], 1
mov eax, dword [ebx + 0x40]
cdq
mov dword [esp + ecx*8 + 0x178], eax
lea eax, [edi + 5]
mov dword [esp + ecx*8 + 0x180], 1
mov dword [esp + ecx*8 + 0x17c], edx
mov ecx, dword [esp + 0x58]
mov dword [esp + 0x28], eax
jmp 0x40353b
mov dword [ebx + 0x34], ecx
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x4c]
mov dword [ebx + 0x3c], eax
lea eax, [esp + 0x220]
push eax
mov dword [ebx + 0x40], ecx
push dword [ebp + 4]
call dword [esp + 0x94]
mov eax, dword [esp + 0x220]
sub dword [ebx + 0x3c], eax
mov eax, dword [esp + 0x224]
sub dword [ebx + 0x40], eax
push 0xffffffffffffffec
push dword [ebp + 4]
call dword [esp + 0x7c]
and eax, 0xffffffef
push eax
push 0xffffffffffffffec
push dword [ebp + 4]
call dword [esp + 0xe0]
mov ebp, dword [esp + 0x28]
mov edi, ebp
mov ecx, dword [esp + 0x70]
shl edi, 4
call fcn.00489030
lea ecx, [esp + 0x178]
mov dword [esp + edi + 0x168], eax
mov eax, dword [esp + 0x54]
add ecx, edi
mov dword [esp + edi + 0x170], 6
mov edx, 2
test eax, eax
je 0x4034a7
mov eax, dword [eax]
mov dword [ecx], eax
lea eax, [edx - 1]
mov dword [ecx + 4], 0
jmp 0x4034af
mov dword [ecx], 0x4cec30
xor eax, eax
mov dword [ecx + 8], eax
add ebp, edx
mov ecx, dword [esp + 0x2c]
mov edi, ebp
mov eax, dword [ebx + 0x3c]
add edi, edi
cmp byte [ecx + 0xc8], 0
je 0x4034d8
push dword [0x4fcbf8]
push 0x60
push eax
call dword [esp + 0x94]
cdq
mov dword [esp + edi*8 + 0x168], eax
lea eax, [ebp + 2]
mov ebp, dword [esp + 0x2c]
mov dword [esp + edi*8 + 0x170], 1
mov dword [esp + edi*8 + 0x16c], edx
mov dword [esp + 0x28], eax
cmp byte [ebp + 0xc8], 0
mov eax, dword [ebx + 0x40]
je 0x403519
push dword [0x4fcbf8]
push 0x60
push eax
call dword [esp + 0x94]
cdq
mov dword [esp + edi*8 + 0x180], 1
mov dword [esp + edi*8 + 0x178], eax
mov dword [esp + edi*8 + 0x17c], edx
mov ecx, dword [esp + 0x58]
mov eax, dword [esp + 0x28]
mov edx, dword [esp + 0x20]
cmp byte [esp + 0x27], 0
je 0x4039cf
mov edi, dword [esp + 0x54]
cmp byte [edi + 4], 0x17
jne 0x4039cf
push 0x10b0
lea eax, [esp + 0x39c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [esp + 0x2c]
add esp, 0xc
dec eax
mov dword [esp + 0x390], 0xd
mov dword [esp + 0x394], eax
lea eax, [esp + 0x390]
push eax
push 0
push 0x703
push dword [edi]
call dword [esp + 0x40]
test eax, eax
je 0x40389c
cmp word [esp + 0x400], 0
lea ecx, [esp + 0x3a0]
push 1
push 0
lea eax, [esp + 0x408]
cmove eax, ecx
mov ecx, dword [0x4faa64]
push 0xffffffffffffffff
push eax
call fcn.004b4bf0
mov ecx, dword [esp + 0x28]
lea ebp, [esp + 0x168]
mov edi, dword [0x4faa64]
mov eax, ecx
shl eax, 4
inc ecx
add ebp, eax
mov dword [esp + 0x28], ecx
cmp byte [edi + 0x17], 0
jne 0x4035f5
mov edi, dword [edi + 0xc]
test byte [edi + 0x15], 8
je 0x403602
mov ecx, edi
call fcn.004014f0
mov al, byte [edi + 0x17]
cmp al, 1
jne 0x40383f
test byte [edi + 0x15], 4
je 0x403619
push edi
call fcn.0044e610
mov ecx, dword [edi + 8]
jmp 0x40388e
mov dword [ebx + 0x34], 1
cmp ecx, 8
jne 0x403537
mov eax, dword [esp + 0xa0]
lea edi, [esp + 0x178]
mov ecx, dword [esp + 0x20]
mov dword [ebx + 0x3c], eax
mov eax, edx
shl eax, 4
add edi, eax
mov dword [esp + eax + 0x170], 1
mov dword [esp + eax + 0x168], ecx
mov dword [esp + eax + 0x16c], 0
cmp byte [ebp + 0xc8], 0
mov eax, dword [esp + 0xa0]
movzx eax, ax
je 0x40368d
push dword [0x4fcbf8]
push 0x60
push eax
call dword [esp + 0x94]
mov ecx, dword [esp + 0x28]
cdq
mov dword [edi], eax
mov eax, ecx
mov dword [edi + 8], 1
add ecx, 3
mov dword [edi + 4], edx
lea edi, [esp + 0x188]
shl eax, 4
add edi, eax
mov dword [esp + 0x28], ecx
mov eax, dword [esp + 0xa0]
shr eax, 0x10
cmp byte [ebp + 0xc8], 0
je 0x4036d6
push dword [0x4fcbf8]
push 0x60
push eax
call dword [esp + 0x94]
cdq
mov dword [edi + 8], 1
mov dword [edi], eax
mov dword [edi + 4], edx
jmp 0x403533
mov al, byte [edi + 4]
cmp al, 0xa
je 0x403759
cmp al, 0x19
jne 0x40372f
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x4c]
mov dword [ebx + 0x3c], eax
lea eax, [esp + 0x230]
push eax
mov dword [ebx + 0x40], ecx
push dword [ebp + 4]
call dword [esp + 0x94]
mov eax, dword [esp + 0x230]
sub dword [ebx + 0x3c], eax
mov eax, dword [esp + 0x234]
sub dword [ebx + 0x40], eax
mov ecx, dword [esp + 0x58]
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x58]
mov dword [ebx + 0x34], ecx
mov ecx, edx
shl ecx, 4
lea edx, [esp + 0x168]
add edx, ecx
cmp eax, 5
jae 0x4037f3
mov eax, dword [eax*4 + 0x4efc14]
jmp 0x403801
cmp cl, 0x49
jne 0x40372f
lea eax, [esp + 0x1cc]
test ecx, 0x100
je 0x403774
mov eax, 0x53
jmp 0x403781
test ecx, 0x200
je 0x403790
mov eax, 0x73
mov word [esp + 0x1cc], ax
lea eax, [esp + 0x1ce]
test ecx, 0x400
je 0x40379f
mov edi, 0x46
jmp 0x4037ac
test ecx, 0x800
je 0x4037b2
mov edi, 0x66
mov word [eax], di
add eax, 2
test ecx, 0x1000
je 0x4037c1
mov ecx, 0x43
jmp 0x4037ce
test ecx, 0x2000
je 0x4037d4
mov ecx, 0x63
mov word [eax], cx
add eax, 2
xor ecx, ecx
mov word [eax], cx
mov ecx, edx
mov eax, 0x49
shl ecx, 4
lea edx, [esp + 0x168]
mov dword [esp + 0x58], eax
mov dword [ebx + 0x34], eax
add edx, ecx
movzx eax, al
mov word [0x4fec04], ax
mov eax, 0x4fec04
mov dword [edx], eax
mov eax, dword [esp + 0x28]
mov dword [edx + 8], 0
add eax, 2
mov edx, dword [esp + 0x20]
mov dword [esp + ecx + 0x180], 1
mov dword [esp + ecx + 0x178], edx
mov dword [esp + ecx + 0x17c], 0
mov ecx, dword [esp + 0x58]
mov dword [esp + 0x28], eax
jmp 0x40353f
cmp al, 2
jne 0x403889
mov ecx, dword [0x4fd77c]
test ecx, ecx
jne 0x40388e
mov edi, dword [esp + 0xac]
push 0xd
call edi
test eax, eax
jne 0x403871
push 0xf
call edi
test eax, eax
mov ecx, 0x4cec24
mov eax, 0x4cec30
cmove ecx, eax
jmp 0x40388e
push 0
call fcn.00406590
cmp eax, 0xffffffff
mov ecx, 0x4cec30
cmovne ecx, dword [0x4fd778]
jmp 0x40388e
mov ecx, 0x4fb624
mov dword [ebp + 8], 0
mov dword [ebp], ecx
mov ebp, dword [esp + 0x2c]
mov edi, dword [esp + 0x28]
mov eax, dword [ebp + 4]
mov dword [ebx + 0xc4], eax
add dword [ebp + 0x20], 2
mov eax, dword [esp + 0xd0]
mov dword [ebx + 0x50], eax
mov eax, dword [esp + 0x20]
mov dword [ebx + 0x38], eax
mov eax, dword [esp + 0x80]
mov dword [ebx + 0x48], ebp
mov dword [ebx + 0x44], ebp
test eax, eax
je 0x403a3a
mov byte [eax], 1
mov ebx, dword [esp + 0x54]
mov ecx, dword [0x4f9b74]
cmp ecx, dword [0x4f9b78]
jne 0x4038f3
call fcn.00406c70
mov ecx, dword [0x4f9b74]
cmp ecx, dword [0x4f9b70]
jb 0x403908
mov eax, dword [0x4fd25c]
mov dword [ecx], eax
mov ecx, dword [0x4f9b74]
add ecx, 0xc
lea eax, [esp + 0x11c]
push 0
push eax
mov dword [0x4f9b74], ecx
lea eax, [esp + 0x170]
push edi
push eax
mov dword [ecx], 0
mov edx, esi
mov dword [ecx + 4], 0x4cec40
mov dword [ecx + 8], 0
mov ecx, esi
push str.call
call fcn.0049c630
sub dword [0x4f9b74], 0xc
add esp, 0x14
cmp dword [ebp + 4], 0
je 0x403a9e
mov eax, dword [esp + 0x80]
test eax, eax
je 0x403a52
mov byte [eax], 0
mov eax, dword [esp + 0x58]
cmp eax, 6
jne 0x403a61
cmp dword [esp + 0x11c], 0
jne 0x403a9e
mov eax, dword [0x4ff12c]
test al, 1
jne 0x4039a6
push 0
or eax, 1
mov ecx, 0x4ff130
push 0
mov dword [0x4ff12c], eax
call fcn.0042d040
mov eax, dword [0x4fd260]
mov ecx, dword [esi]
cmp ecx, dword [eax]
je 0x403a9e
mov eax, dword [ebp + 4]
test eax, eax
je 0x403a9e
push 0
push eax
call dword [esp + 0xac]
jmp 0x403a9e
cmp word [esp + 0x1cc], 0
je 0x4039f9
add eax, eax
lea edi, [esp + 0x1cc]
inc dword [esp + 0x28]
mov dword [esp + eax*8 + 0x170], 0
mov dword [esp + eax*8 + 0x168], edi
mov edi, dword [esp + 0x28]
cmp ecx, 8
je 0x403a25
cmp ecx, 5
je 0x403a25
mov ecx, dword [0x4faa64]
lea eax, [esp + 0x1cc]
push 1
push 0
push 0xffffffffffffffff
push eax
call fcn.004b4bf0
jmp 0x4038a0
mov ecx, dword [0x4faa64]
push 0x18
push 0
push edx
call fcn.00401470
jmp 0x4038a0
cmp byte [esp + 0x27], 0
je 0x4038d6
mov ebx, dword [esp + 0x54]
or byte [ebx + 5], 4
jmp 0x4038da
cmp byte [esp + 0x27], 0
mov eax, dword [esp + 0x58]
je 0x403a61
and byte [ebx + 5], 0xfb
cmp eax, 5
jne 0x403a9e
mov eax, dword [esp + 0x178]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push dword [esp + 0x70]
call dword [esp + 0x94]
push 0xffffffffffffffec
push dword [ebp + 4]
mov dword [ebp + 0x68], 0
call dword [esp + 0x7c]
or eax, 0x10
push eax
push 0xffffffffffffffec
push dword [ebp + 4]
call dword [esp + 0xe0]
add dword [ebp + 0x20], 0xffffffff
jne 0x403abf
push dword [ebp]
call dword [esp + 0xdc]
add esp, 4
push 0xd8
push ebp
call fcn.004cb6c4
add esp, 8
mov ebp, dword [esp + 0x14]
lea ecx, [esp + 0x290]
call fcn.00404de0
cmp dword [esp + 0xb4], 0
mov edi, dword [esp + 0x1c]
mov esi, dword [esp + 0x18]
je 0x401bd3
call ebp
cmp byte [esp + 0x26], 0
mov edx, dword [esp + 0x78]
jne 0x403b06
mov ecx, dword [esp + 0x94]
sub ecx, eax
add ecx, edx
cmp ecx, 5
jg 0x401bd3
cmp edx, 0xffffffff
jle 0x403b1b
xorps xmm0, xmm0
mov dword [0x4fd728], eax
movlpd qword [0x4fd718], xmm0
mov dword [0x4fd72c], eax
mov byte [esp + 0x51], 1
mov byte [esp + 0x26], 1
jmp 0x401bcb
mov ebp, dword [esp + 0x2c]
test ebp, ebp
je 0x403b51
mov eax, dword [ebp + 4]
mov dword [ebx + 0xc4], eax
mov dword [ebx + 0x34], 1
add dword [ebp + 0x20], 2
mov dword [ebx + 0x48], ebp
mov dword [ebx + 0x44], ebp
mov ecx, 0x4fcc10
mov dword [esp + 0x140], 0
mov dword [esp + 0x138], 0x4fd268
call fcn.004664b0
mov ecx, dword [0x4f9b74]
inc eax
mov dword [esp + 0x150], 1
mov dword [esp + 0x148], eax
mov dword [esp + 0x14c], 0
mov dword [esp + 0x160], 0
mov dword [esp + 0x158], 0x4fd472
cmp ecx, dword [0x4f9b78]
jne 0x403bbe
call fcn.00406c70
mov ecx, dword [0x4f9b74]
cmp ecx, dword [0x4f9b70]
jb 0x403bd3
mov eax, dword [0x4fd25c]
mov dword [ecx], eax
mov ecx, dword [0x4f9b74]
add ecx, 0xc
lea eax, [esp + 0x138]
push 0
push 0
mov dword [0x4f9b74], ecx
mov edx, esi
push 3
push eax
mov dword [ecx], 0
mov dword [ecx + 4], str.Menu
mov dword [ecx + 8], 0
mov ecx, esi
push str.call
call fcn.0049c630
sub dword [0x4f9b74], 0xc
add esp, 0x14
test ebp, ebp
je 0x403abf
add dword [ebp + 0x20], 0xffffffff
jmp 0x403aa2
mov esi, dword [esp + 0xa8]
mov eax, dword [esp + 0x68]
mov dword [ebx + 0xc4], eax
mov al, byte [esi + 0x21]
mov byte [ebx + 0xf6], al
mov eax, dword [0x4ff12c]
mov edx, dword [esi]
test al, 1
jne 0x403c62
push 0
or eax, 1
mov ecx, 0x4ff130
push 0
mov dword [0x4ff12c], eax
call fcn.0042d040
mov eax, dword [0x4fd260]
mov ecx, dword [edx]
cmp ecx, dword [eax]
je 0x403c75
cmp ecx, dword [0x4ff130]
jne 0x403c85
mov ecx, 8
mov ecx, dword [edx + ecx]
test ecx, ecx
je 0x403c85
mov cl, byte [ecx]
jmp 0x403c87
xor cl, cl
mov al, byte [esi + 0x24]
cmp al, byte [esi + 0x25]
jb 0x403cbb
cmp cl, 0xe2
je 0x403cbb
cmp cl, 0xce
je 0x403cbb
cmp cl, 0xdc
je 0x403cbb
cmp cl, 0xdd
je 0x403cbb
cmp cl, 0xd8
je 0x403cbb
cmp cl, 0xd9
je 0x403cbb
cmp cl, 0xda
je 0x403cbb
cmp cl, 0xdb
jne 0x403ac3
push 0
push 0
mov byte [0x4fd6ee], 0
mov ecx, esi
inc byte [esi + 0x24]
push 0
push dword [0x4fd67c]
call fcn.004a0120
dec byte [esi + 0x24]
jmp 0x403ac3
call dword [esp + pe_nt_image_headers32]
test eax, eax
je 0x403d10
mov esi, dword [esp + 0xac]
push 0xd
call esi
test eax, eax
jne 0x403d09
push 0xf
call esi
test eax, eax
jne 0x403d09
mov eax, 2
jmp 0x403d12
mov eax, 1
jmp 0x403d12
xor eax, eax
mov ecx, dword [0x4faa64]
push 0x18
push 0
push eax
mov dword [ebx + 0x38], eax
call fcn.00401470
mov eax, dword [ebx + 0x38]
mov ecx, dword [0x4f9b74]
mov dword [esp + 0x208], 1
mov dword [esp + 0x200], eax
mov dword [esp + 0x204], 0
mov byte [0x4fd6c0], 1
cmp ecx, dword [0x4f9b78]
jne 0x403d65
call fcn.00406c70
mov ecx, dword [0x4f9b74]
cmp ecx, dword [0x4f9b70]
jb 0x403d7a
mov eax, dword [0x4fd25c]
mov dword [ecx], eax
mov ecx, dword [0x4f9b74]
add ecx, 0xc
mov dword [0x4f9b74], ecx
mov dword [ecx], 0
mov dword [ecx + 4], 0x4ceca8
mov dword [ecx + 8], 0
mov esi, dword [0x4fd6b4]
test esi, esi
je 0x403e1e
mov eax, dword [0x4f8174]
mov edi, dword [eax + 0xbc]
mov dword [eax + 0xbc], esi
mov ecx, dword [0x4f9b74]
cmp ecx, dword [0x4f9b78]
jne 0x403dcb
call fcn.00406c70
mov ecx, dword [0x4f9b74]
cmp ecx, dword [0x4f9b70]
jb 0x403de0
mov eax, dword [0x4fd25c]
mov dword [ecx], eax
mov ecx, dword [0x4f9b74]
add ecx, 0xc
mov dword [0x4f9b74], ecx
mov eax, dword [esi + 8]
push 0
push 0
mov dword [ecx], eax
mov dword [ecx + 4], esi
mov dword [ecx + 8], 1
mov ecx, dword [esi + 8]
push 1
call fcn.00443a70
mov eax, dword [0x4f8174]
sub dword [0x4f9b74], 0xc
mov dword [eax + 0xbc], edi
mov esi, dword [0x4fd6b4]
cmp dword [esp + 0x3c], 0
jne 0x403e41
xor eax, eax
mov ecx, 0x4fd694
test esi, esi
sete al
push eax
push 1
lea eax, [esp + 0x208]
push eax
call fcn.004a0230
sub dword [0x4f9b74], 0xc
mov byte [0x4fd6c0], 0
jmp 0x403ac3
mov edi, dword [esp + 0x60]
mov ecx, dword [0x4f9b74]
mov dword [esp + 0x248], 6
mov eax, dword [edi + 8]
mov dword [esp + 0x240], eax
cmp ecx, dword [0x4f9b78]
jne 0x403e86
call fcn.00406c70
mov ecx, dword [0x4f9b74]
cmp ecx, dword [0x4f9b70]
jb 0x403e9b
mov eax, dword [0x4fd25c]
mov dword [ecx], eax
mov ecx, dword [0x4f9b74]
add ecx, 0xc
lea eax, [esp + 0x240]
push 0
push 0
mov dword [0x4f9b74], ecx
mov edx, esi
push 1
push eax
mov dword [ecx], 0
mov dword [ecx + 4], str.InputHook
mov dword [ecx + 8], 0
mov ecx, esi
push str.call
call fcn.0049c630
sub dword [0x4f9b74], 0xc
add esp, 0x14
mov eax, dword [edi + 8]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
jmp 0x403ac3
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x140], 6
mov dword [esp + 0x150], 1
mov eax, dword [eax + 8]
mov dword [esp + 0x138], eax
movzx eax, cl
cdq
sar ecx, 0x10
mov dword [esp + 0x148], eax
movzx eax, cx
mov ecx, dword [0x4f9b74]
mov dword [esp + 0x14c], edx
cdq
mov dword [esp + 0x160], 1
mov dword [esp + 0x158], eax
mov dword [esp + 0x15c], edx
cmp ecx, dword [0x4f9b78]
jne 0x403f5f
call fcn.00406c70
mov ecx, dword [0x4f9b74]
cmp ecx, dword [0x4f9b70]
jb 0x403f74
mov eax, dword [0x4fd25c]
mov dword [ecx], eax
mov ecx, dword [0x4f9b74]
push 0
push 0
push 3
lea eax, [esp + 0x144]
add ecx, 0xc
mov edx, esi
mov dword [0x4f9b74], ecx
push eax
push str.call
mov dword [ecx + 8], 0
mov dword [ecx + 4], str.InputHook
mov dword [ecx], 0
mov ecx, esi
call fcn.0049c630
add esp, 0x14
sub dword [0x4f9b74], 0xc
jmp 0x403ac3
mov eax, dword [esp + 0x40]
mov ecx, dword [0x4f9b74]
mov word [esp + 0xf8], ax
sar eax, 0x10
mov word [esp + 0xfa], ax
xor eax, eax
mov word [esp + 0xfc], ax
mov eax, dword [esp + 0x60]
mov dword [esp + 0x140], 6
mov dword [esp + 0x150], 0
mov eax, dword [eax + 8]
mov dword [esp + 0x138], eax
lea eax, [esp + 0xf8]
mov dword [esp + 0x148], eax
cmp ecx, dword [0x4f9b78]
jne 0x404028
call fcn.00406c70
mov ecx, dword [0x4f9b74]
cmp ecx, dword [0x4f9b70]
jb 0x40403d
mov eax, dword [0x4fd25c]
mov dword [ecx], eax
mov ecx, dword [0x4f9b74]
push 0
push 0
push 2
lea eax, [esp + 0x144]
jmp 0x403f81
mov esi, dword [esp + 0xdc]
mov al, byte [esi + 0x10]
add al, 0x64
cmp al, 3
ja 0x404066
mov eax, dword [esp + 0x40]
mov dword [ebx + 0x38], eax
mov ecx, dword [esp + 0xb0]
mov eax, dword [esp + 0x68]
mov dword [ebx + 0xc4], eax
push ecx
mov al, byte [ecx + 0x18]
mov ecx, esi
mov byte [ebx + 0xf6], al
call fcn.00415690
jmp 0x403ac3
sbb eax, eax
or eax, 1
test eax, eax
jne 0x404104
mov ecx, dword [0x4f8174]
mov byte [ecx + 0xe8], 1
mov eax, dword [esp + 0x38]
mov dword [ecx + 0xe4], eax
lea eax, [esp + 0x34]
push eax
push esi
call dword [esp + 0xf0]
test eax, eax
je 0x4040f5
cmp dword [0x4faa7c], 0
je 0x4040e4
mov eax, dword [0x4f9bd8]
mov ecx, 0x4cec30
test eax, eax
je 0x4040dc
mov eax, dword [eax]
test eax, eax
cmovne ecx, eax
push ecx
call dword [esp + 0x128]
mov eax, dword [0x4f8174]
mov byte [eax + 0xe8], 0
jmp 0x401bc7
mov ecx, dword [0x4f8174]
mov byte [ecx + 0xe8], 0
jmp 0x40410a
mov ecx, dword [0x4f8174]
mov eax, dword [0x4faa58]
test eax, eax
je 0x404140
lea ecx, [esp + 0x34]
push ecx
push eax
push dword [0x4faa80]
call dword [esp + 0xf8]
mov ebp, dword [esp + 0x14]
mov edi, dword [esp + 0x1c]
mov esi, dword [esp + 0x18]
test eax, eax
jne 0x401bd3
mov ecx, dword [0x4f8174]
mov byte [ecx + 0xe8], 1
mov eax, dword [esp + 0x38]
mov dword [ecx + 0xe4], eax
lea eax, [esp + 0x34]
push eax
call dword [esp + 0x12c]
lea eax, [esp + 0x34]
push eax
call dword [esp + 0x130]
mov eax, dword [0x4f8174]
mov byte [eax + 0xe8], 0
jmp 0x401bc7
cmp ebx, 0xffffffff
jle 0x40418f
xorps xmm0, xmm0
mov dword [0x4fd728], eax
movlpd qword [0x4fd718], xmm0
cmp byte [esp + 0x52], 0
mov dword [0x4fd72c], eax
je 0x4041a2
mov byte [0x4fa90f], 0
cmp byte [esp + 0x53], 0
je 0x402824
mov eax, dword [0x4faa84]
dec eax
mov dword [0x4faa84], eax
test ebx, ebx
jle 0x402824
test eax, eax
jmp 0x4027ee