Function at 0x41df70
Capabilities:
Open clipboard
Read clipboard data
Write clipboard data

Disassembly:
enter 0x310, 1
push ebx
push ecx
push edx
mov dword [ebp - 8], esp
mov eax, dword [0x4e91ad]
movsx ebx, word [ebp + 0x10]
movsx ecx, word [ebp + 0xc]
imul ecx, ecx, 0xff
mov edi, eax
mov esi, dword [edi + 0x281]
lea edi, [esi + ecx - 0x100]
movzx ecx, byte [edi + ebx]
mov word [eax + 0xb7f], cx
mov eax, dword [0x4e91ad]
call fcn.0041ccc2
lea ebx, [ebp - 0x1f8]
push ebx
mov al, byte [ebp + 0x10]
push eax
mov cl, byte [ebp + 0xc]
push ecx
mov al, byte [ebp + 8]
push eax
call fcn.0041b1e0
lea edi, [ebp - 0x50]
lea esi, [ebp - 0x1f8]
push 0x17
call fcn.00401950
mov byte [ebp - 0xe4], 1
lea edi, [ebp - 0x68]
lea esi, [ebp - 0x50]
push 0x17
call fcn.00401950
mov al, byte [ebp + 0x10]
push eax
mov bl, byte [ebp + 0xc]
push ebx
mov cl, byte [ebp + 8]
push ecx
call fcn.00408970
mov al, byte [ebp + 0x10]
push eax
mov bl, byte [ebp + 0xc]
push ebx
lea ecx, [ebp - 0x50]
push ecx
call fcn.004043a0
mov byte [ebp - 0xdc], 0
mov byte [ebp - 0xf0], 0
cmp word [ebp + 8], 3
setg al
mov byte [ebp - 0xf8], al
push 0
mov bl, byte [ebp + 8]
push ebx
push 1
push 1
push 0x4cc44a
lea edi, [ebp - 0x118]
call fcn.00401403
lea esi, [ebp - 0x118]
lea edi, [ebp - 0x11c]
push 0x30000
call fcn.004013e0
lea esi, [ebp - 0x11c]
lea edi, [ebp - 0xbc]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, 0x4cc46a
lea edi, [ebp - 0xc0]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, 0x4cc46d
lea edi, [ebp - 0xc4]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
cmp word [ebp + 8], 3
jle 0x41e296
mov word [ebp - 0xb4], 1
movsx eax, word [ebp + 8]
sub eax, 4
push eax
push 1
push 0
push 0x4cc470
lea edi, [ebp - 0x118]
call fcn.00401403
lea esi, [ebp - 0x118]
lea edi, [ebp - 0x11c]
push 0x30000
call fcn.004013e0
lea esi, [ebp - 0x11c]
lea edi, [ebp - 0xc0]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
movsx eax, word [ebp + 8]
sub eax, 3
push eax
push 1
push 0
push 0x4cc490
lea edi, [ebp - 0x118]
call fcn.00401403
lea esi, [ebp - 0x118]
lea edi, [ebp - 0x11c]
push 0x30000
call fcn.004013e0
lea esi, [ebp - 0x11c]
lea edi, [ebp - 0xc4]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
movsx eax, word [ebp + 8]
sub eax, 3
mov word [ebp - 0xa4], ax
mov word [ebp - 0xa0], 1
mov edi, dword [0x4cc4b0]
movsx eax, word [ebp + 8]
cdq
idiv edi
inc eax
mov word [ebp - 0xa8], ax
movsx eax, word [ebp - 0xa0]
inc eax
mov word [ebp - 0xa0], ax
movsx ebx, word [ebp - 0xa4]
sub ebx, 4
mov word [ebp - 0xa4], bx
cmp bx, 0
jle 0x41e229
mov al, byte [ebp - 0xa4]
push eax
push 1
push 0
push 0x4cc4b4
lea edi, [ebp - 0x138]
call fcn.00401403
lea ebx, [ebp - 0x138]
push ebx
lea esi, [ebp - 0xc4]
lea edi, [ebp - 0x118]
push 0x20040320
call fcn.004014cf
mov esi, edi
lea edi, [ebp - 0x13c]
push 0x30000
call fcn.004013e0
lea esi, [ebp - 0x13c]
lea edi, [ebp - 0xc4]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
movsx eax, word [ebp - 0xa4]
dec eax
push eax
push 1
push 0
push 0x4cc4d4
lea edi, [ebp - 0x138]
call fcn.00401403
lea eax, [ebp - 0x138]
push eax
lea esi, [ebp - 0xc0]
lea edi, [ebp - 0x118]
push 0x20040320
call fcn.004014cf
mov esi, edi
lea edi, [ebp - 0x13c]
push 0x30000
call fcn.004013e0
lea esi, [ebp - 0x13c]
lea edi, [ebp - 0xc0]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov ax, word [ebp - 0xa0]
cmp word [ebp - 0xa8], ax
jg 0x41e149
lea ebx, [ebp - 0xc4]
push ebx
lea ecx, [ebp - 0xc0]
push ecx
lea esi, [ebp - 0xbc]
lea edi, [ebp - 0x138]
push 0x3040320
call fcn.00401509
mov esi, edi
lea edi, [ebp - 0x118]
push 0x3212020
call fcn.00401509
mov esi, edi
lea edi, [ebp - 0x13c]
push 0x30000
call fcn.004013e0
lea esi, [ebp - 0x13c]
lea edi, [ebp - 0xbc]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
jmp 0x41e29f
mov word [ebp - 0xb4], 0
lea esi, [ebp - 0xbc]
lea edi, [ebp - 0xc8]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
lea esi, [ebp - 0xc0]
lea edi, [ebp - 0xcc]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
lea esi, [ebp - 0xc4]
lea edi, [ebp - 0xd0]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov word [ebp - 0xa0], 0
mov word [ebp - 0xac], 0
mov byte [ebp - 0xec], 0
mov word [ebp - 0xb8], 0
mov eax, dword [0x4e91ad]
mov dword [ebp - 0xfc], eax
movsx ebx, word [ebp + 8]
movsx eax, word [ebp + 0x10]
add eax, ebx
dec eax
push eax
mov al, byte [ebp + 0xc]
push eax
mov eax, dword [ebp - 0xfc]
call fcn.0041deb2
lea ecx, [ebp - 0x10]
push ecx
mov eax, dword [ebp - 0xfc]
call fcn.004146b2
mov byte [ebp - 0x20], al
mov bl, byte [ebp - 0x10]
mov byte [ebp - 0x1c], bl
cmp byte [ebp - 0x20], 1
jne 0x41e344
mov al, byte [ebp - 0xe4]
test al, al
je 0x41e344
mov ebx, 1
jmp 0x41e349
mov ebx, 0
mov byte [ebp - 0xe8], bl
test bl, bl
jne 0x41e37a
cmp byte [ebp - 0x20], 0
jne 0x41e381
movzx eax, word [ebp - 0x10]
mov esi, 0x4cc4f4
push 0x170028
call fcn.0040148e
test al, al
je 0x41e381
mov al, byte [ebp - 0xe4]
test al, al
je 0x41e381
mov eax, 1
jmp 0x41e386
mov eax, 0
mov byte [ebp - 0xe8], al
test al, al
je 0x41e407
lea edi, [ebp - 0x50]
mov esi, 0x4cc4f7
push 0x17
call fcn.00401950
movsx eax, word [ebp + 8]
test eax, eax
jle 0x41e3ef
mov word [ebp - 0x100], ax
mov word [ebp - 0x9c], 0
inc word [ebp - 0x9c]
lea esi, [ebp - 0x50]
lea edi, [ebp - 0x200]
call fcn.00401b30
mov esi, 0x4cc4f8
call fcn.00401af0
lea edi, [ebp - 0x50]
lea esi, [ebp - 0x200]
push 0x17
call fcn.00401950
dec word [ebp - 0x100]
jne 0x41e3b7
mov al, byte [ebp + 0x10]
push eax
mov bl, byte [ebp + 0xc]
push ebx
lea ecx, [ebp - 0x50]
push ecx
call fcn.004043a0
mov byte [ebp - 0xe4], 0
mov al, byte [ebp - 0x20]
cmp al, 1
jne 0x41e818
cmp word [ebp - 0xa0], 0
jle 0x41e813
mov bl, byte [ebp - 0xf0]
test bl, bl
je 0x41e44c
cmp word [ebp + 8], 3
jl 0x41e443
mov byte [ebp - 0xf4], 1
mov word [ebp - 0xb0], 3
jmp 0x41e44a
mov byte [ebp - 0xf4], 0
jmp 0x41e45c
mov byte [ebp - 0xf4], 1
mov word [ebp - 0xb0], 2
mov al, byte [ebp - 0xf4]
test al, al
je 0x41e813
mov bl, byte [ebp - 0xdc]
test bl, bl
jne 0x41e51f
movsx ecx, word [ebp + 8]
movsx edx, word [ebp - 0xb0]
sub edx, ecx
jg 0x41e51d
dec edx
mov word [ebp - 0x104], dx
mov word [ebp - 0x9c], cx
jmp 0x41e4a4
dec word [ebp - 0x9c]
movsx eax, word [ebp - 0x9c]
dec eax
lea esi, [ebp - 0xc4]
push 0x160101
call fcn.0040148e
test al, al
je 0x41e4ed
cmp word [ebp - 0x9c], 2
jle 0x41e4df
movsx eax, word [ebp - 0x9c]
movsx ebx, ax
mov cl, byte [ebp + eax - 0x52]
mov byte [ebp + ebx - 0x50], cl
jmp 0x41e4eb
movsx eax, word [ebp - 0x9c]
mov byte [ebp + eax - 0x50], 0x20
jmp 0x41e514
movsx eax, word [ebp - 0x9c]
push 0x160101
call fcn.0040148e
test al, al
jne 0x41e514
movsx eax, word [ebp - 0x9c]
movsx ebx, ax
mov cl, byte [ebp + eax - 0x51]
mov byte [ebp + ebx - 0x50], cl
inc word [ebp - 0x104]
jne 0x41e49d
jmp 0x41e58d
movsx ecx, word [ebp + 8]
cmp byte [ebp + ecx - 0x50], 0x2e
jne 0x41e54a
mov byte [ebp - 0xdc], 0
mov word [ebp - 0xac], 0
movsx eax, word [ebp - 0xa0]
inc eax
mov word [ebp - 0xa0], ax
movsx eax, word [ebp + 8]
movsx ebx, word [ebp - 0xb0]
sub ebx, eax
jg 0x41e58d
dec ebx
mov word [ebp - 0x108], bx
mov word [ebp - 0x9c], ax
jmp 0x41e572
dec word [ebp - 0x9c]
movsx eax, word [ebp - 0x9c]
movsx ebx, ax
mov cl, byte [ebp + eax - 0x51]
mov byte [ebp + ebx - 0x50], cl
inc word [ebp - 0x108]
jne 0x41e56b
mov byte [ebp - 0xd8], 1
mov al, byte [ebp - 0xf0]
test al, al
je 0x41e5ad
mov word [ebp - 0x9c], 1
mov byte [ebp - 0x4e], 0x20
jmp 0x41e5ba
mov word [ebp - 0x9c], 0
mov byte [ebp - 0x4f], 0x20
movsx eax, word [ebp - 0x9c]
inc eax
mov word [ebp - 0x9c], ax
movsx ebx, ax
movzx eax, byte [ebp + ebx - 0x50]
mov esi, 0x4cc4fa
movzx eax, ax
push 0xf0030
call fcn.0040148e
test al, al
je 0x41e5ef
mov byte [ebp - 0xd8], 0
mov al, byte [ebp - 0xd8]
test al, al
je 0x41e622
movsx ebx, word [ebp - 0x9c]
lea esi, [ebp - 0xc4]
mov eax, ebx
push 0x160101
call fcn.0040148e
test al, al
je 0x41e622
movsx eax, word [ebp - 0x9c]
mov byte [ebp + eax - 0x50], 0x20
mov al, byte [ebp - 0xd8]
test al, al
je 0x41e639
mov bx, word [ebp - 0x9c]
cmp word [ebp + 8], bx
jg 0x41e5ba
mov al, byte [ebp + 0x10]
push eax
mov bl, byte [ebp + 0xc]
push ebx
lea ecx, [ebp - 0x50]
push ecx
call fcn.004043a0
movsx edx, word [ebp - 0xa0]
dec edx
mov word [ebp - 0xa0], dx
mov al, byte [ebp - 0xf8]
test al, al
jne 0x41e813
mov edi, dword [0x4cc4fc]
movsx ebx, word [ebp + 8]
mov eax, ebx
cdq
idiv edi
movsx ebx, word [ebp + 8]
sub ebx, eax
movsx eax, word [ebp - 0xac]
sub ebx, eax
movsx ecx, word [ebp - 0xb8]
sub ebx, ecx
movsx edx, word [ebp - 0xa0]
cmp ebx, edx
jl 0x41e813
mov byte [ebp - 0xf8], 1
mov word [ebp - 0xb4], 1
lea esi, [ebp - 0xc8]
lea edi, [ebp - 0xbc]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
lea esi, [ebp - 0xcc]
lea edi, [ebp - 0xc0]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
lea esi, [ebp - 0xd0]
lea edi, [ebp - 0xc4]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
lea eax, [ebp - 0x50]
push eax
call fcn.0040c2a0
fstp qword [ebp - 0x2c]
wait
push 0x4cc500
lea eax, [ebp - 0x50]
push eax
call fcn.0040cca0
mov word [ebp - 0xa4], ax
cmp ax, 0
jle 0x41e726
cmp word [ebp + 8], ax
jle 0x41e71b
movsx ebx, ax
movsx eax, word [ebp + 8]
sub eax, ebx
mov word [ebp - 0xa4], ax
jmp 0x41e724
mov word [ebp - 0xa4], 0xffff
jmp 0x41e72f
mov word [ebp - 0xa4], 0
cmp word [ebp - 0xa4], 0
jl 0x41e75b
lea eax, [ebp - 0x50]
push eax
sub esp, 8
fld qword [ebp - 0x2c]
fstp qword [esp]
wait
mov ax, word [ebp + 8]
push eax
mov bx, word [ebp - 0xa4]
push ebx
call fcn.0041f940
jmp 0x41e79f
lea eax, [ebp - 0x50]
push eax
sub esp, 8
fld qword [ebp - 0x2c]
fstp qword [esp]
wait
movsx ebx, word [ebp + 8]
dec ebx
push ebx
push 0
call fcn.0041f940
lea esi, [ebp - 0x50]
lea edi, [ebp - 0x208]
call fcn.00401b30
mov esi, 0x4cc502
call fcn.00401af0
lea edi, [ebp - 0x50]
lea esi, [ebp - 0x208]
push 0x17
call fcn.00401950
mov al, byte [ebp + 0x10]
push eax
mov bl, byte [ebp + 0xc]
push ebx
lea ecx, [ebp - 0x50]
push ecx
call fcn.004043a0
mov word [ebp - 0xa0], 0
movsx eax, word [ebp + 8]
test eax, eax
jle 0x41e813
mov word [ebp - 0x10c], ax
mov word [ebp - 0x9c], 0
inc word [ebp - 0x9c]
movsx eax, word [ebp - 0x9c]
movzx ebx, byte [ebp + eax - 0x50]
mov esi, 0x4cc504
movzx eax, bx
push 0x170028
call fcn.0040148e
test al, al
je 0x41e80a
movsx eax, word [ebp - 0xa0]
inc eax
mov word [ebp - 0xa0], ax
dec word [ebp - 0x10c]
jne 0x41e7d1
jmp 0x41f74a
cmp al, 0
jne 0x41f579
movzx ebx, word [ebp - 0x10]
mov eax, ebx
cmp eax, 3
jne 0x41e92c
mov eax, dword [0x4e91ad]
push dword [eax + 0xaf5]
call sub.user32.dll_OpenClipboard
test al, al
je 0x41e927
call sub.user32.dll_EmptyClipboard
movsx eax, word [ebp + 8]
inc eax
push eax
push 2
call sub.kernel32.dll_GlobalAlloc
mov dword [ebp - 0x14], eax
push eax
call sub.kernel32.dll_GlobalFlags
cmp eax, 0x8000
je 0x41e922
lea eax, [ebp - 0x24]
push eax
movsx ebx, word [ebp + 8]
inc ebx
push ebx
call fcn.00403b50
push dword [ebp - 0x24]
lea eax, [ebp - 0x20c]
push eax
lea ebx, [ebp - 0x30c]
push ebx
mov cl, byte [ebp + 0x10]
push ecx
mov dl, byte [ebp + 0xc]
push edx
mov al, byte [ebp + 8]
push eax
call fcn.0041b1e0
lea eax, [ebp - 0x30c]
push eax
call fcn.0041ac50
lea ebx, [ebp - 0x20c]
push ebx
call fcn.00401a00
push dword [ebp - 0x14]
call sub.kernel32.dll_GlobalLock
push eax
push dword [ebp - 0x24]
lea eax, [ebp - 0x20c]
push eax
lea ebx, [ebp - 0x30c]
push ebx
mov cl, byte [ebp + 0x10]
push ecx
mov dl, byte [ebp + 0xc]
push edx
mov al, byte [ebp + 8]
push eax
call fcn.0041b1e0
lea eax, [ebp - 0x30c]
push eax
call fcn.0041ac50
movzx ebx, byte [ebp - 0x20c]
inc ebx
push ebx
call fcn.0041df40
push dword [ebp - 0x14]
call sub.kernel32.dll_GlobalUnlock
push dword [ebp - 0x14]
push 1
call sub.user32.dll_SetClipboardData
lea eax, [ebp - 0x24]
push eax
movsx ebx, word [ebp + 8]
inc ebx
push ebx
call fcn.00403320
call sub.user32.dll_CloseClipboard
jmp 0x41f574
cmp eax, 0x16
jne 0x41f03e
mov eax, dword [0x4e91ad]
push dword [eax + 0xaf5]
call sub.user32.dll_OpenClipboard
test al, al
je 0x41f039
push 1
call sub.user32.dll_GetClipboardData
mov dword [ebp - 0x14], eax
push eax
call sub.kernel32.dll_GlobalFlags
cmp eax, 0x8000
je 0x41f034
push dword [ebp - 0x14]
call sub.kernel32.dll_GlobalFlags
cmp eax, 0x4000
je 0x41f034
push dword [ebp - 0x14]
call sub.kernel32.dll_GlobalSize
dec eax
mov dword [ebp - 0x18], eax
test eax, eax
jbe 0x41f034
push dword [ebp - 0x14]
call sub.kernel32.dll_GlobalLock
mov dword [ebp - 0x30], eax
test eax, eax
je 0x41f034
mov dword [ebp - 0x34], eax
lea edi, [ebp - 0x98]
mov esi, 0x4cc507
push 0x17
call fcn.00401950
cmp dword [ebp - 0x18], 0x80
jbe 0x41e9ca
mov dword [ebp - 0x18], 0x80
mov word [ebp - 0x9c], 0
mov byte [ebp - 0xd8], 1
mov al, byte [ebp - 0xd8]
test al, al
je 0x41ea80
movsx ebx, word [ebp - 0x9c]
mov ecx, dword [ebp - 0x18]
test ecx, ecx
jl 0x41e9f8
cmp ebx, ecx
jge 0x41ea80
inc word [ebp - 0x9c]
movsx eax, word [ebp - 0x9c]
mov edi, dword [ebp - 0x34]
movzx ebx, byte [edi + eax - 1]
mov esi, 0x4cc508
mov eax, ebx
push 0x5f0020
call fcn.0040148e
mov byte [ebp - 0xd8], al
test al, al
je 0x41ea7b
lea esi, [ebp - 0x98]
lea edi, [ebp - 0x20c]
call fcn.00401b30
movsx eax, word [ebp - 0x9c]
mov ebx, dword [ebp - 0x34]
lea esi, [ebx + eax - 1]
lea edi, [ebp - 0x30c]
push 1
call fcn.00401d30
mov esi, edi
lea edi, [ebp - 0x20c]
call fcn.00401af0
lea edi, [ebp - 0x98]
lea esi, [ebp - 0x20c]
push 0x17
call fcn.00401950
jmp 0x41e9da
lea edi, [ebp - 0x80]
lea esi, [ebp - 0x98]
push 0x17
call fcn.00401950
push 0x4cc514
mov eax, esi
push eax
call fcn.0040cca0
mov byte [ebp - 0x38], al
push 0x4cc517
lea ebx, [ebp - 0x98]
push ebx
call fcn.0040cca0
mov byte [ebp - 0x37], al
push 0x4cc51a
lea ebx, [ebp - 0x98]
push ebx
call fcn.0040cca0
mov byte [ebp - 0x36], al
push 0x4cc51d
lea ebx, [ebp - 0x98]
push ebx
call fcn.0040cca0
mov byte [ebp - 0x35], al
cmp byte [ebp - 0x38], 0
jbe 0x41eaf9
push 0x17
lea ebx, [ebp - 0x98]
push ebx
movzx eax, byte [ebp - 0x38]
push eax
push 2
call fcn.0040cc50
jmp 0x41eb4c
cmp byte [ebp - 0x37], 0
jbe 0x41eb16
push 0x17
lea ebx, [ebp - 0x98]
push ebx
movzx eax, byte [ebp - 0x37]
push eax
push 2
call fcn.0040cc50
jmp 0x41eb4c
cmp byte [ebp - 0x36], 0
jbe 0x41eb33
push 0x17
lea ebx, [ebp - 0x98]
push ebx
movzx eax, byte [ebp - 0x36]
push eax
push 2
call fcn.0040cc50
jmp 0x41eb4c
cmp al, 0
jbe 0x41eb4c
push 0x17
lea ebx, [ebp - 0x98]
push ebx
movzx eax, byte [ebp - 0x35]
push eax
push 2
call fcn.0040cc50
movzx eax, byte [ebp - 0x98]
mov dword [ebp - 0x18], eax
mov word [ebp - 0x9c], 0
cmp dword [ebp - 0x18], 0
seta al
mov byte [ebp - 0xd8], al
mov al, byte [ebp - 0xd8]
test al, al
je 0x41ebb7
movsx ebx, word [ebp - 0x9c]
mov ecx, dword [ebp - 0x18]
test ecx, ecx
jl 0x41eb86
cmp ebx, ecx
jge 0x41ebb7
inc word [ebp - 0x9c]
movsx eax, word [ebp - 0x9c]
movzx ebx, byte [ebp + eax - 0x98]
mov esi, 0x4cc520
mov eax, ebx
push 0x170028
call fcn.0040148e
mov byte [ebp - 0xd8], al
jmp 0x41eb6c
mov al, byte [ebp - 0xd8]
test al, al
je 0x41f02c
push 0x4cc523
lea ebx, [ebp - 0x98]
push ebx
call fcn.0040cca0
mov word [ebp - 0x9c], ax
push 0x4cc525
lea ebx, [ebp - 0x98]
push ebx
call fcn.0040cca0
mov word [ebp - 0xb0], ax
mov bx, word [ebp - 0x9c]
cmp word [ebp - 0xb0], bx
jge 0x41ec71
movzx eax, byte [ebp - 0x98]
movsx ecx, ax
test ecx, ecx
jle 0x41ec71
mov word [ebp - 0x110], cx
mov word [ebp - 0x9c], 0
inc word [ebp - 0x9c]
movsx eax, word [ebp - 0x9c]
movzx ebx, byte [ebp + eax - 0x98]
mov ax, bx
cmp ax, 0x2e
jne 0x41ec53
movsx eax, word [ebp - 0x9c]
mov byte [ebp + eax - 0x98], 0x2c
jmp 0x41ec68
cmp ax, 0x2c
jne 0x41ec68
movsx eax, word [ebp - 0x9c]
mov byte [ebp + eax - 0x98], 0x2e
dec word [ebp - 0x110]
jne 0x41ec23
cmp byte [ebp - 0x38], 0
jbe 0x41ecf3
movzx eax, byte [ebp - 0x38]
movzx ebx, byte [ebp - 0x98]
sub ebx, eax
mov dword [ebp - 0x18], ebx
lea eax, [ebp - 0x210]
push eax
lea ebx, [ebp - 0x98]
push ebx
push 1
movzx ecx, byte [ebp - 0x38]
dec ecx
push ecx
call fcn.00401cd0
lea ecx, [ebp - 0x210]
push ecx
call fcn.0040c2a0
mov dword [ebp - 0x214], eax
lea ebx, [ebp - 0x314]
push ebx
lea eax, [ebp - 0x98]
push eax
movzx ecx, byte [ebp - 0x38]
push ecx
push dword [ebp - 0x18]
call fcn.00401cd0
lea edx, [ebp - 0x314]
push edx
call fcn.0041a6b0
push eax
call fcn.0041f980
fmulp st(1)
mov eax, dword [ebp - 0x214]
fstp qword [ebp - 0x2c]
wait
jmp 0x41eec2
cmp byte [ebp - 0x37], 0
jbe 0x41ed75
movzx eax, byte [ebp - 0x37]
movzx ebx, byte [ebp - 0x98]
sub ebx, eax
mov dword [ebp - 0x18], ebx
lea eax, [ebp - 0x210]
push eax
lea ebx, [ebp - 0x98]
push ebx
push 1
movzx ecx, byte [ebp - 0x37]
dec ecx
push ecx
call fcn.00401cd0
lea ecx, [ebp - 0x210]
push ecx
call fcn.0040c2a0
mov dword [ebp - 0x214], eax
lea ebx, [ebp - 0x314]
push ebx
lea eax, [ebp - 0x98]
push eax
movzx ecx, byte [ebp - 0x37]
push ecx
push dword [ebp - 0x18]
call fcn.00401cd0
lea edx, [ebp - 0x314]
push edx
call fcn.0041a6b0
push eax
call fcn.0041f980
fmulp st(1)
mov eax, dword [ebp - 0x214]
fstp qword [ebp - 0x2c]
wait
jmp 0x41eec2
cmp byte [ebp - 0x36], 0
jbe 0x41edf7
movzx eax, byte [ebp - 0x36]
movzx ebx, byte [ebp - 0x98]
sub ebx, eax
mov dword [ebp - 0x18], ebx
lea eax, [ebp - 0x210]
push eax
lea ebx, [ebp - 0x98]
push ebx
push 1
movzx ecx, byte [ebp - 0x36]
dec ecx
push ecx
call fcn.00401cd0
lea ecx, [ebp - 0x210]
push ecx
call fcn.0040c2a0
mov dword [ebp - 0x214], eax
lea ebx, [ebp - 0x314]
push ebx
lea eax, [ebp - 0x98]
push eax
movzx ecx, byte [ebp - 0x36]
push ecx
push dword [ebp - 0x18]
call fcn.00401cd0
lea edx, [ebp - 0x314]
push edx
call fcn.0041a6b0
push eax
call fcn.0041f980
fdivp st(1)
mov eax, dword [ebp - 0x214]
fstp qword [ebp - 0x2c]
wait
jmp 0x41eec2
cmp byte [ebp - 0x35], 0
jbe 0x41ee76
movzx eax, byte [ebp - 0x35]
movzx ebx, byte [ebp - 0x98]
sub ebx, eax
mov dword [ebp - 0x18], ebx
lea eax, [ebp - 0x210]
push eax
lea ebx, [ebp - 0x98]
push ebx
push 1
movzx ecx, byte [ebp - 0x35]
dec ecx
push ecx
call fcn.00401cd0
lea ecx, [ebp - 0x210]
push ecx
call fcn.0040c2a0
mov dword [ebp - 0x214], eax
lea ebx, [ebp - 0x314]
push ebx
lea eax, [ebp - 0x98]
push eax
movzx ecx, byte [ebp - 0x35]
push ecx
push dword [ebp - 0x18]
call fcn.00401cd0
lea edx, [ebp - 0x314]
push edx
call fcn.0041a6b0
push eax
call fcn.0041f980
fdivp st(1)
mov eax, dword [ebp - 0x214]
fstp qword [ebp - 0x2c]
wait
jmp 0x41eec2
lea eax, [ebp - 0x98]
push eax
call fcn.0040c2a0
fstp qword [ebp - 0x2c]
wait
push 0x4cc527
lea eax, [ebp - 0x98]
push eax
call fcn.0040cca0
test eax, eax
jbe 0x41eeba
push 0x4cc529
lea eax, [ebp - 0x98]
push eax
call fcn.0040cca0
movzx ebx, byte [ebp - 0x98]
sub ebx, eax
mov dword [ebp - 0x18], ebx
jmp 0x41eec2
mov eax, 0
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x210]
push eax
lea ebx, [ebp - 0x228]
push ebx
sub esp, 8
fld qword [ebp - 0x2c]
fstp qword [esp]
wait
mov ax, word [ebp + 8]
push eax
push 0
call fcn.0040b950
lea ebx, [ebp - 0x228]
push ebx
call fcn.0041ac50
lea edi, [ebp - 0x50]
lea esi, [ebp - 0x210]
push 0x17
call fcn.00401950
movzx eax, byte [ebp - 0x50]
add eax, dword [ebp - 0x18]
inc eax
movsx ebx, word [ebp + 8]
cmp eax, ebx
jg 0x41ef45
lea eax, [ebp - 0x128]
push eax
sub esp, 8
fld qword [ebp - 0x2c]
fstp qword [esp]
wait
mov ax, word [ebp + 8]
push eax
mov bx, word [ebp - 0x18]
push ebx
call fcn.0040b950
lea edi, [ebp - 0x50]
lea esi, [ebp - 0x128]
push 0x17
call fcn.00401950
jmp 0x41efb8
movzx eax, byte [ebp - 0x50]
inc eax
movsx ecx, bx
cmp eax, ecx
jge 0x41ef8b
lea eax, [ebp - 0x128]
push eax
sub esp, 8
fld qword [ebp - 0x2c]
fstp qword [esp]
wait
mov ax, word [ebp + 8]
push eax
movzx ebx, byte [ebp - 0x50]
movsx ecx, ax
sub ecx, ebx
dec ecx
push ecx
call fcn.0040b950
lea edi, [ebp - 0x50]
lea esi, [ebp - 0x128]
push 0x17
call fcn.00401950
jmp 0x41efb8
lea eax, [ebp - 0x128]
push eax
sub esp, 8
fld qword [ebp - 0x2c]
fstp qword [esp]
wait
mov ax, word [ebp + 8]
push eax
push 0
call fcn.0040b950
lea edi, [ebp - 0x50]
lea esi, [ebp - 0x128]
push 0x17
call fcn.00401950
mov al, byte [ebp + 0x10]
push eax
mov bl, byte [ebp + 0xc]
push ebx
lea ecx, [ebp - 0x50]
push ecx
call fcn.004043a0
mov word [ebp - 0xa0], 0
movsx eax, word [ebp + 8]
test eax, eax
jle 0x41f02c
mov word [ebp - 0x114], ax
mov word [ebp - 0x9c], 0
inc word [ebp - 0x9c]
movsx eax, word [ebp - 0x9c]
movzx ebx, byte [ebp + eax - 0x50]
mov esi, 0x4cc52b
movzx eax, bx
push 0x170028
call fcn.0040148e
test al, al
je 0x41f023
movsx eax, word [ebp - 0xa0]
inc eax
mov word [ebp - 0xa0], ax
dec word [ebp - 0x114]
jne 0x41efea
push dword [ebp - 0x14]
call sub.kernel32.dll_GlobalUnlock
call sub.user32.dll_CloseClipboard
jmp 0x41f574
cmp eax, 0x2d
jne 0x41f0a3
mov al, byte [ebp - 0xf0]
test al, al
jne 0x41f056
mov ebx, 1
jmp 0x41f05b
mov ebx, 0
mov byte [ebp - 0xf0], bl
test bl, bl
je 0x41f070
mov word [ebp - 0xb8], 1
jmp 0x41f079
mov word [ebp - 0xb8], 0
mov al, byte [ebp - 0xf0]
test al, al
je 0x41f089
mov byte [ebp - 0x4f], 0x2d
jmp 0x41f08d
mov byte [ebp - 0x4f], 0x20
mov al, byte [ebp + 0x10]
push eax
mov bl, byte [ebp + 0xc]
push ebx
lea ecx, [ebp - 0x50]
push ecx
call fcn.004043a0
jmp 0x41f574
cmp eax, 0x2e
je 0x41f0b5
cmp eax, 0x2c
jne 0x41f1c3
mov edi, dword [0x4cc52e]
movsx eax, word [ebp + 8]
cdq
idiv edi
movsx ebx, word [ebp - 0xb4]
imul eax, ebx
movsx ecx, word [ebp + 8]
sub ecx, eax
movsx eax, word [ebp - 0xac]
sub ecx, eax
movsx edx, word [ebp - 0xb8]
sub ecx, edx
movsx eax, word [ebp - 0xa0]
cmp ecx, eax
jle 0x41f1be
mov cl, byte [ebp - 0xdc]
test cl, cl
jne 0x41f1be
mov al, byte [ebp - 0xf0]
test al, al
je 0x41f155
cmp word [ebp + 8], 3
jl 0x41f153
movsx eax, word [ebp + 8]
dec eax
movsx eax, ax
dec eax
jle 0x41f151
mov word [ebp - 0x118], ax
mov word [ebp - 0x9c], 1
inc word [ebp - 0x9c]
movsx eax, word [ebp - 0x9c]
movsx ebx, ax
mov cl, byte [ebp + eax - 0x4f]
mov byte [ebp + ebx - 0x50], cl
dec word [ebp - 0x118]
jne 0x41f12f
jmp 0x41f153
jmp 0x41f194
movsx eax, word [ebp + 8]
dec eax
movsx eax, ax
test eax, eax
jle 0x41f194
mov word [ebp - 0x11c], ax
mov word [ebp - 0x9c], 0
inc word [ebp - 0x9c]
movsx eax, word [ebp - 0x9c]
movsx ebx, ax
mov cl, byte [ebp + eax - 0x4f]
mov byte [ebp + ebx - 0x50], cl
dec word [ebp - 0x11c]
jne 0x41f172
mov word [ebp - 0xac], 1
mov byte [ebp - 0xdc], 1
movsx eax, word [ebp + 8]
mov byte [ebp + eax - 0x50], 0x2e
mov al, byte [ebp + 0x10]
push eax
mov bl, byte [ebp + 0xc]
push ebx
lea ecx, [ebp - 0x50]
push ecx
call fcn.004043a0
jmp 0x41f574
cmp eax, 0x39
jg 0x41f574
cmp eax, 0x30
jl 0x41f574
mov edi, dword [0x4cc532]
movsx eax, word [ebp + 8]
cdq
idiv edi
movsx ebx, word [ebp - 0xb4]
imul eax, ebx
movsx ecx, word [ebp + 8]
sub ecx, eax
movsx eax, word [ebp - 0xac]
sub ecx, eax
movsx edx, word [ebp - 0xb8]
sub ecx, edx
movsx eax, word [ebp - 0xa0]
cmp ecx, eax
setg cl
mov byte [ebp - 0xe0], cl
test cl, cl
jne 0x41f385
mov al, byte [ebp - 0xf8]
test al, al
je 0x41f385
mov byte [ebp - 0xf8], 0
mov word [ebp - 0xb4], 0
push 0
mov al, byte [ebp + 8]
push eax
push 1
push 1
push 0x4cc536
lea edi, [ebp - 0x13c]
call fcn.00401403
lea esi, [ebp - 0x13c]
lea edi, [ebp - 0x140]
push 0x30000
call fcn.004013e0
lea esi, [ebp - 0x140]
lea edi, [ebp - 0xbc]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, 0x4cc556
lea edi, [ebp - 0xc0]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, 0x4cc559
lea edi, [ebp - 0xc4]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
lea eax, [ebp - 0x50]
push eax
call fcn.0040c2a0
fstp qword [ebp - 0x2c]
wait
push 0x4cc55c
lea eax, [ebp - 0x50]
push eax
call fcn.0040cca0
mov word [ebp - 0xa4], ax
cmp ax, 0
jle 0x41f2e6
cmp word [ebp + 8], ax
jne 0x41f2d4
mov word [ebp - 0xa4], 0xffff
jmp 0x41f2e4
movsx ebx, ax
movsx eax, word [ebp + 8]
sub eax, ebx
mov word [ebp - 0xa4], ax
jmp 0x41f2ef
mov word [ebp - 0xa4], 0
cmp word [ebp - 0xa4], 0
jl 0x41f31b
push 0x17
lea eax, [ebp - 0x50]
mov byte [eax], 0
push eax
lea eax, [ebp - 0x2c]
push eax
movsx ebx, word [ebp + 8]
push ebx
movsx ecx, word [ebp - 0xa4]
push ecx
call fcn.0040ba00
add esp, 8
mov byte [ebp - 0xe0], 1
mov word [ebp - 0xa0], 0
movsx eax, word [ebp + 8]
test eax, eax
jle 0x41f385
mov word [ebp - 0x120], ax
mov word [ebp - 0x9c], 0
inc word [ebp - 0x9c]
movsx eax, word [ebp - 0x9c]
movzx ebx, byte [ebp + eax - 0x50]
mov esi, 0x4cc55e
movzx eax, bx
push 0x170028
call fcn.0040148e
test al, al
je 0x41f37c
movsx eax, word [ebp - 0xa0]
inc eax
mov word [ebp - 0xa0], ax
dec word [ebp - 0x120]
jne 0x41f343
mov al, byte [ebp - 0xe0]
test al, al
jne 0x41f39d
mov bl, byte [ebp - 0xf8]
test bl, bl
jne 0x41f1d9
mov al, byte [ebp - 0xe0]
test al, al
je 0x41f574
mov bl, byte [ebp - 0xf0]
test bl, bl
je 0x41f3d7
cmp word [ebp + 8], 3
jl 0x41f3ce
mov byte [ebp - 0xf4], 1
mov word [ebp - 0xb0], 2
jmp 0x41f3d5
mov byte [ebp - 0xf4], 0
jmp 0x41f3e7
mov byte [ebp - 0xf4], 1
mov word [ebp - 0xb0], 1
mov al, byte [ebp - 0xf4]
test al, al
je 0x41f574
mov bl, byte [ebp - 0xdc]
test bl, bl
jne 0x41f500
mov byte [ebp - 0xd8], 0
movsx eax, word [ebp - 0xb0]
movsx ebx, word [ebp + 8]
dec ebx
movsx ebx, bx
sub ebx, eax
jl 0x41f4fe
inc ebx
mov word [ebp - 0x124], bx
mov word [ebp - 0x9c], ax
jmp 0x41f43b
inc word [ebp - 0x9c]
movsx eax, word [ebp - 0x9c]
lea esi, [ebp - 0xbc]
push 0x160101
call fcn.0040148e
test al, al
je 0x41f468
movsx eax, word [ebp - 0x9c]
movsx ebx, ax
mov cl, byte [ebp + eax - 0x4f]
mov byte [ebp + ebx - 0x50], cl
movsx eax, word [ebp - 0x9c]
lea esi, [ebp - 0xc0]
push 0x160101
call fcn.0040148e
test al, al
je 0x41f495
movsx eax, word [ebp - 0x9c]
movsx ebx, ax
mov cl, byte [ebp + eax - 0x4e]
mov byte [ebp + ebx - 0x50], cl
movsx eax, word [ebp - 0x9c]
movzx ebx, byte [ebp + eax - 0x50]
mov esi, 0x4cc561
movzx eax, bx
push 0xf0030
call fcn.0040148e
test al, al
je 0x41f4be
mov byte [ebp - 0xd8], 1
mov al, byte [ebp - 0xd8]
test al, al
je 0x41f4f1
movsx ebx, word [ebp - 0x9c]
lea esi, [ebp - 0xc4]
mov eax, ebx
push 0x160101
call fcn.0040148e
test al, al
je 0x41f4f1
movsx eax, word [ebp - 0x9c]
mov byte [ebp + eax - 0x50], 0x2c
dec word [ebp - 0x124]
jne 0x41f434
jmp 0x41f548
movsx ecx, word [ebp - 0xb0]
movsx edx, word [ebp + 8]
dec edx
movsx edx, dx
sub edx, ecx
jl 0x41f548
inc edx
mov word [ebp - 0x128], dx
mov word [ebp - 0x9c], cx
jmp 0x41f52d
inc word [ebp - 0x9c]
movsx eax, word [ebp - 0x9c]
movsx ebx, ax
mov cl, byte [ebp + eax - 0x4f]
mov byte [ebp + ebx - 0x50], cl
dec word [ebp - 0x128]
jne 0x41f526
movsx eax, word [ebp + 8]
mov bl, byte [ebp - 0x1c]
mov byte [ebp + eax - 0x50], bl
mov al, byte [ebp + 0x10]
push eax
mov bl, byte [ebp + 0xc]
push ebx
lea ecx, [ebp - 0x50]
push ecx
call fcn.004043a0
movsx edx, word [ebp - 0xa0]
inc edx
mov word [ebp - 0xa0], dx
jmp 0x41f74a
cmp al, 0x17
jne 0x41f5de
lea ebx, [ebp - 0x50]
push ebx
call fcn.0040c2a0
fstp qword [ebp - 0x2c]
wait
lea ecx, [ebp - 0x2c]
push ecx
call fcn.0041d100
mov byte [ebp - 0x20], al
cmp al, 0x11
jne 0x41f5c8
lea ebx, [ebp - 0x50]
push ebx
sub esp, 8
fld qword [ebp - 0x2c]
fstp qword [esp]
wait
mov ax, word [ebp + 8]
push eax
push 2
call fcn.0041f940
mov word [ebp - 0xa0], 1
mov byte [ebp - 0xec], 1
mov byte [ebp - 0x20], 6
mov al, byte [ebp + 0x10]
push eax
mov bl, byte [ebp + 0xc]
push ebx
lea ecx, [ebp - 0x50]
push ecx
call fcn.004043a0
jmp 0x41f74a
cmp al, 0x30
jne 0x41f5ff
cmp dword [0x4e854c], 0
je 0x41f5f3
call dword [0x4e854c]
jmp 0x41f5fa
mov byte [ebp - 0xec], 1
jmp 0x41f74a
cmp al, 0x31
jne 0x41f620
cmp dword [0x4e8550], 0
je 0x41f614
call dword [0x4e8550]
jmp 0x41f61b
mov byte [ebp - 0xec], 1
jmp 0x41f74a
cmp al, 0x21
jne 0x41f63b
mov bx, word [ebp - 0x10]
mov word [0x4e91bd], bx
mov byte [ebp - 0xec], 1
jmp 0x41f74a
cmp al, 0x20
jne 0x41f656
mov bx, word [ebp - 0x10]
mov word [0x4e91bf], bx
mov byte [ebp - 0xec], 1
jmp 0x41f74a
cmp al, 0x22
jne 0x41f671
mov bx, word [ebp - 0x10]
mov word [0x4e91c1], bx
mov byte [ebp - 0xec], 1
jmp 0x41f74a
cmp al, 0x23
jne 0x41f68c
mov bx, word [ebp - 0x10]
mov word [0x4e91c3], bx
mov byte [ebp - 0xec], 1
jmp 0x41f74a
cmp al, 0x2d
jne 0x41f6a7
mov bx, word [ebp - 0x10]
mov word [0x4e91c5], bx
mov byte [ebp - 0xec], 1
jmp 0x41f74a
cmp al, 0x28
jne 0x41f6c2
mov bx, word [ebp - 0x10]
mov word [0x4e8f97], bx
mov byte [ebp - 0xec], 1
jmp 0x41f74a
cmp al, 0x26
jne 0x41f6e7
mov bl, byte [ebp - 0x10]
push ebx
mov eax, dword [0x4e91ad]
call fcn.0041d0d2
movzx ecx, al
mov word [0x4e91c7], cx
mov byte [ebp - 0xec], 1
jmp 0x41f74a
cmp al, 0x25
je 0x41f743
cmp al, 0x24
je 0x41f743
cmp al, 0x1e
je 0x41f743
cmp al, 9
je 0x41f743
cmp al, 8
je 0x41f743
cmp al, 0xb
je 0x41f743
cmp al, 0xa
je 0x41f743
cmp al, 4
je 0x41f743
cmp al, 5
je 0x41f743
cmp al, 0xf
je 0x41f743
cmp al, 0xe
je 0x41f743
cmp al, 0x27
je 0x41f743
cmp al, 0x29
je 0x41f743
cmp al, 0x2a
je 0x41f743
cmp al, 0x10
je 0x41f743
cmp al, 0xd
je 0x41f743
cmp al, 0x2b
je 0x41f743
cmp al, 0x1c
ja 0x41f733
cmp al, 0x18
jae 0x41f743
cmp al, 0x16
ja 0x41f73b
cmp al, 0x11
jae 0x41f743
cmp al, 3
je 0x41f743
cmp al, 6
jne 0x41f74a
mov byte [ebp - 0xec], 1
mov al, byte [ebp - 0xec]
test al, al
je 0x41e2ee
mov edi, dword [0x4e91ad]
mov dword [ebp - 0x12c], edi
movsx eax, word [edi + 0xb7f]
cmp eax, 0x14
jne 0x41f782
mov eax, dword [ebp - 0x12c]
call fcn.0040b6d2
jmp 0x41f8eb
cmp eax, 0x15
jne 0x41f799
mov eax, dword [ebp - 0x12c]
call fcn.0041d042
jmp 0x41f8eb
cmp eax, 0x16
jne 0x41f7b0
mov eax, dword [ebp - 0x12c]
call fcn.0041d002
jmp 0x41f8eb
cmp eax, 0x17
jne 0x41f7c7
mov eax, dword [ebp - 0x12c]
call fcn.0041cfc2
jmp 0x41f8eb
cmp eax, 0x19
jne 0x41f7de
mov eax, dword [ebp - 0x12c]
call fcn.0041cf92
jmp 0x41f8eb
cmp eax, 0x1a
jne 0x41f7f5
mov eax, dword [ebp - 0x12c]
call fcn.0041cf52
jmp 0x41f8eb
cmp eax, 0x1b
jne 0x41f80c
mov eax, dword [ebp - 0x12c]
call fcn.0041cf12
jmp 0x41f8eb
cmp eax, 0x1c
jne 0x41f823
mov eax, dword [ebp - 0x12c]
call fcn.0041ced2
jmp 0x41f8eb
cmp eax, 0x1e
jne 0x41f83a
mov eax, dword [ebp - 0x12c]
call fcn.0041cea2
jmp 0x41f8eb
cmp eax, 0x1f
jne 0x41f851
mov eax, dword [ebp - 0x12c]
call fcn.0041ce62
jmp 0x41f8eb
cmp eax, 0x20
jne 0x41f868
mov eax, dword [ebp - 0x12c]
call fcn.0041ce22
jmp 0x41f8eb
cmp eax, 0x21
jne 0x41f87c
mov eax, dword [ebp - 0x12c]
call fcn.0041cde2
jmp 0x41f8eb
cmp eax, 0x23
jne 0x41f890
mov eax, dword [ebp - 0x12c]
call fcn.0041cdb2
jmp 0x41f8eb
cmp eax, 0x24
jne 0x41f8a4
mov eax, dword [ebp - 0x12c]
call fcn.0041cd72
jmp 0x41f8eb
cmp eax, 0x25
jne 0x41f8b8
mov eax, dword [ebp - 0x12c]
call fcn.0041cd32
jmp 0x41f8eb
cmp eax, 0x26
jne 0x41f8cc
mov eax, dword [ebp - 0x12c]
call fcn.0041ccf2
jmp 0x41f8eb
cmp eax, 0xa
jne 0x41f8e0
mov eax, dword [ebp - 0x12c]
call fcn.0041ccc2
jmp 0x41f8eb
mov eax, dword [ebp - 0x12c]
call fcn.0041cc92
mov eax, dword [0x4e91ad]
mov word [eax + 0xb7f], 0
cmp word [ebp - 0xa0], 0
jg 0x41f910
lea edi, [ebp - 0x50]
lea esi, [ebp - 0x68]
push 0x17
call fcn.00401950
mov al, byte [ebp + 0x10]
push eax
mov bl, byte [ebp + 0xc]
push ebx
mov cl, byte [ebp + 8]
push ecx
call fcn.00408970
mov al, byte [ebp + 0x10]
push eax
mov bl, byte [ebp + 0xc]
push ebx
lea ecx, [ebp - 0x50]
push ecx
call fcn.004043a0
mov al, byte [ebp - 0x20]
pop edx
pop ecx
pop ebx
leave
ret 0xc