Function at 0x4519b0
Capabilities:
Enumerate files on windows
Enumerate files recursively
Get common file path
Get disk size

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
push eax
mov eax, 0x2728
call fcn.005d4d10
sub esp, eax
mov eax, dword [esp + eax]
mov dword [esp + 4], 0x7f02
mov dword [esp], 0
mov dword [ebp - 0x2704], eax
mov eax, dword [sym.imp.USER32.dll_LoadCursorW]
mov dword [ebp - 0x270c], eax
call eax
sub esp, 8
mov dword [esp], eax
mov eax, dword [sym.imp.USER32.dll_SetCursor]
mov dword [ebp - 0x2708], eax
call eax
mov esi, dword [0x8532c4]
mov eax, dword [0x731ca4]
sub esp, 4
mov edx, dword [0x731ca8]
mov dword [ebp - 0x2630], 0
mov dword [ebp - 0x262c], 0
mov dword [ebp - 0x2628], 0
mov dword [ebp - 0x2620], eax
mov eax, dword [esi + 0x170]
mov edi, dword [esi + 0x13c]
mov ebx, dword [esi + 0x140]
mov dword [ebp - 0x261c], edx
mov dword [ebp - 0x2624], 0
mov word [ebp - 0x2620], ax
lea eax, [ebp - 0x2610]
mov dword [ebp - 0x2614], 0
mov dword [ebp - 0x25fc], 0
mov dword [ebp - 0x2618], eax
xor eax, eax
mov word [ebp - 0x2610], ax
lea eax, [ebp - 0x25f8]
mov dword [ebp - 0x2600], eax
xor eax, eax
cmp edi, ebx
mov word [ebp - 0x25f8], ax
je 0x451acc
mov dword [ebp - 0x26dc], edi
mov ecx, dword [ebp - 0x26dc]
mov eax, dword [ecx]
lea edx, [ecx + 8]
cmp eax, edx
je 0x451abb
mov dword [esp], eax
call fcn.006eb330
add dword [ebp - 0x26dc], 0x18
mov eax, dword [ebp - 0x26dc]
cmp ebx, eax
jne 0x451aa4
mov dword [esi + 0x140], edi
mov ebx, dword [esi + 0x14c]
mov edi, dword [esi + 0x148]
cmp edi, ebx
je 0x451b18
mov dword [ebp - 0x26dc], edi
nop
lea esi, [esi]
mov ecx, dword [ebp - 0x26dc]
mov eax, dword [ecx]
lea edx, [ecx + 8]
cmp eax, edx
je 0x451b07
mov dword [esp], eax
call fcn.006eb330
add dword [ebp - 0x26dc], 0x18
mov eax, dword [ebp - 0x26dc]
cmp ebx, eax
jne 0x451af0
mov eax, dword [0x8532c4]
mov dword [esi + 0x14c], edi
mov dword [esi + 0x160], 0
mov dword [esi + 0x164], 0
mov dword [esi + 0x168], 0
mov dword [esi + 0x16c], 0
mov edi, dword [eax + 0x170]
mov dword [esi + 0x158], 0
mov dword [esi + 0x15c], 0
test edi, edi
js 0x451b9d
lea edx, [ebp - 0x2628]
add eax, 0x160
mov dword [esp + 4], eax
lea eax, [ebp - 0x2620]
mov dword [esp + 0xc], edx
lea edx, [ebp - 0x2630]
mov dword [esp], eax
mov dword [esp + 8], edx
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov eax, dword [0x8532c4]
sub esp, 0x10
mov edx, dword [eax + 0x174]
cmp edx, 1
je 0x454990
cmp edx, 2
je 0x455693
test edx, edx
je 0x4526c1
mov edx, dword [eax + 0x184]
test edx, edx
jne 0x452e24
cmp byte [eax + 0x199], 0
jne 0x453003
mov edx, dword [eax + 0x178]
test edx, edx
je 0x454710
cmp edx, 1
jne 0x451f0a
mov eax, dword [0x853238]
mov dword [esp + 4], 0x11
mov dword [esp], eax
call dword [sym.imp.USER32.dll_GetDlgItem]
sub esp, 8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x147
mov dword [esp], eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov edx, dword [0x8554c4]
lea edi, [ebp - 0x2018]
sub esp, 0x10
mov dword [ebp - 0x26e4], edi
mov ecx, edi
mov ebx, dword [edx]
mov dword [esp + 4], eax
mov dword [esp], edx
call dword [ebx + 0x28]
sub esp, 8
lea ecx, [ebp - 0x2618]
lea esi, [ebp - 0x2010]
mov dword [esp], edi
call fcn.006c1d80
sub esp, 4
mov dword [esp], 0x731d24
call fcn.005e72a0
mov dword [esp + 4], 0xffffffff
mov dword [esp + 8], eax
mov ecx, edi
mov dword [esp], 0x731d24
call fcn.0064a830
sub esp, 0xc
cmp eax, 0xffffffff
je 0x451d49
mov ecx, dword [ebp - 0x2014]
add eax, 1
cmp eax, ecx
ja 0x457e9b
mov edx, dword [ebp - 0x2018]
sub ecx, eax
lea ebx, [ebp - 0x2340]
lea esi, [ebp - 0x2010]
mov dword [ebp - 0x2348], ebx
lea edx, [edx + eax*2]
lea eax, [edx + ecx*2]
lea ecx, [ebp - 0x2348]
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.0044d8f0
mov edx, dword [ebp - 0x2348]
sub esp, 8
mov eax, dword [ebp - 0x2018]
cmp edx, ebx
je 0x45771c
cmp eax, esi
je 0x4575a0
mov dword [ebp - 0x2018], edx
mov edx, dword [ebp - 0x2344]
test eax, eax
mov ecx, dword [ebp - 0x2010]
mov dword [ebp - 0x2014], edx
mov edx, dword [ebp - 0x2340]
mov dword [ebp - 0x2010], edx
je 0x451d49
mov dword [ebp - 0x2348], eax
mov dword [ebp - 0x2340], ecx
xor edx, edx
cmp eax, ebx
mov dword [ebp - 0x2344], 0
mov word [eax], dx
je 0x451d49
mov dword [esp], eax
call fcn.006eb330
lea ebx, [ebp - 0x2620]
lea edi, [ebp - 0x2600]
mov dword [esp], ebx
call fcn.005e72a0
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x25fc]
mov ecx, edi
mov dword [esp + 8], ebx
mov dword [esp], 0
mov dword [ebp - 0x26e0], edi
mov dword [esp + 4], eax
call fcn.006bfc90
sub esp, 0x10
lea edi, [ebp - 0x2328]
mov dword [esp], 0x731ec0
call fcn.005e72a0
mov ebx, eax
xor eax, eax
lea ecx, [ebp - 0x2330]
mov word [ebp - 0x2328], ax
mov eax, dword [ebp - 0x2014]
mov dword [ebp - 0x2330], edi
mov dword [ebp - 0x232c], 0
add eax, ebx
mov dword [esp], eax
call fcn.006c1b30
mov eax, 0x3fffffff
sub eax, dword [ebp - 0x232c]
sub esp, 4
cmp ebx, eax
ja 0x457870
lea ecx, [ebp - 0x2330]
mov dword [esp + 4], ebx
mov dword [esp], 0x731ec0
call fcn.006c1ce0
mov eax, dword [ebp - 0x2014]
sub esp, 8
lea ecx, [ebp - 0x2330]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2018]
mov dword [esp], eax
call fcn.006c1ce0
mov eax, dword [ebp - 0x232c]
sub esp, 8
mov ecx, dword [ebp - 0x26e0]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2330]
mov dword [esp], eax
call fcn.006c1ce0
mov eax, dword [ebp - 0x2330]
sub esp, 8
cmp eax, edi
je 0x451e4c
mov dword [esp], eax
call fcn.006eb330
lea eax, [ebp - 0x22f8]
mov edx, dword [ebp - 0x25fc]
lea edi, [ebp - 0x2300]
mov dword [ebp - 0x2300], eax
mov eax, dword [ebp - 0x2600]
mov ecx, edi
lea edx, [eax + edx*2]
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.0044d8f0
mov eax, dword [ebp - 0x2618]
mov edx, dword [ebp - 0x2614]
sub esp, 8
lea ebx, [ebp - 0x2310]
lea ecx, [ebp - 0x2318]
lea edx, [eax + edx*2]
mov dword [esp], eax
mov dword [ebp - 0x2318], ebx
mov dword [esp + 4], edx
call fcn.0044d8f0
lea eax, [ebp - 0x2318]
mov ecx, dword [0x8532c4]
sub esp, 8
mov dword [esp + 4], edi
mov dword [esp], eax
call fcn.00451740
mov eax, dword [ebp - 0x2318]
sub esp, 8
cmp eax, ebx
je 0x451edb
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x2300]
lea edi, [ebp - 0x22f8]
cmp eax, edi
je 0x451ef3
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x2018]
cmp eax, esi
je 0x451f05
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [0x8532c4]
mov eax, dword [eax + 0x17c]
test eax, eax
je 0x4545b3
cmp eax, 1
je 0x4523e4
mov dword [esp], 0x20
mov ecx, 0x8554b8
call fcn.00440d90
lea ebx, [ebp - 0x2078]
sub esp, 4
mov edi, eax
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x731cbe
mov dword [esp + 8], 0x10
mov dword [esp + 4], 0x44d450
mov dword [esp], ebx
call fcn.0044d990
mov dword [esp], 0x731f18
call fcn.005e72a0
mov dword [esp + 8], 0x731f18
mov dword [esp + 0xc], eax
mov ecx, ebx
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.006bfc90
lea esi, [ebp - 0x2010]
lea edx, [eax + 8]
sub esp, 0x10
mov dword [ebp - 0x2018], esi
mov ecx, dword [eax]
cmp ecx, edx
je 0x457080
mov dword [ebp - 0x2018], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x2010], ecx
mov ecx, dword [eax + 4]
mov dword [ebp - 0x2014], ecx
xor ecx, ecx
mov dword [eax], edx
mov dword [eax + 4], 0
mov word [eax + 8], cx
mov dword [esp], 0x731f24
call fcn.005e72a0
mov edx, 0x3fffffff
sub edx, dword [ebp - 0x2014]
cmp eax, edx
ja 0x457c9d
lea ebx, [ebp - 0x2018]
mov dword [esp + 4], eax
mov dword [esp], 0x731f24
mov ecx, ebx
mov dword [ebp - 0x26e4], ebx
call fcn.006c1ce0
lea ebx, [ebp - 0x2220]
lea edx, [eax + 8]
sub esp, 8
mov dword [ebp - 0x2228], ebx
mov ecx, dword [eax]
cmp ecx, edx
je 0x45712b
mov dword [ebp - 0x2228], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x2220], ecx
mov ecx, dword [eax + 4]
mov dword [ebp - 0x2224], ecx
mov dword [eax], edx
xor edx, edx
mov dword [eax + 4], 0
mov word [eax + 8], dx
mov eax, dword [ebp - 0x2018]
cmp eax, esi
je 0x452064
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x2078]
lea ebx, [ebp - 0x2070]
cmp eax, ebx
je 0x45207c
mov dword [esp], eax
call fcn.006eb330
lea ebx, [ebp - 0x21f8]
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], 0x731cbe
mov dword [esp + 8], 0x10
mov dword [esp + 4], 0x44d450
mov dword [esp], ebx
call fcn.0044d990
mov dword [esp], 0x731f2e
call fcn.005e72a0
mov dword [esp + 8], 0x731f2e
mov dword [esp + 0xc], eax
mov ecx, ebx
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.006bfc90
mov dword [ebp - 0x2018], esi
mov ecx, dword [eax]
lea edx, [eax + 8]
sub esp, 0x10
cmp ecx, edx
je 0x4570f6
mov dword [ebp - 0x2018], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x2010], ecx
mov ecx, dword [eax + 4]
xor edi, edi
mov dword [ebp - 0x2014], ecx
mov dword [eax], edx
mov dword [eax + 4], 0
mov word [eax + 8], di
mov dword [esp], 0x731f24
call fcn.005e72a0
mov edx, 0x3fffffff
sub edx, dword [ebp - 0x2014]
cmp eax, edx
ja 0x457b3a
mov ecx, dword [ebp - 0x26e4]
mov dword [esp + 4], eax
mov dword [esp], 0x731f24
call fcn.006c1ce0
lea edi, [ebp - 0x2208]
lea edx, [eax + 8]
sub esp, 8
mov dword [ebp - 0x2210], edi
mov ecx, dword [eax]
mov dword [ebp - 0x26f0], edi
cmp ecx, edx
je 0x4570c1
mov dword [ebp - 0x2210], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x2208], ecx
mov ecx, dword [eax + 4]
xor ebx, ebx
mov dword [ebp - 0x220c], ecx
mov dword [eax], edx
mov dword [eax + 4], 0
mov word [eax + 8], bx
mov eax, dword [ebp - 0x2018]
cmp eax, esi
je 0x4521a1
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x21f8]
lea edx, [ebp - 0x21f0]
cmp eax, edx
je 0x4521b9
mov dword [esp], eax
call fcn.006eb330
lea eax, [ebp - 0x2620]
lea esi, [ebp - 0x21e0]
mov dword [esp], eax
mov dword [ebp - 0x26e8], eax
call fcn.005e72a0
mov ebx, eax
lea eax, [ebp - 0x21d8]
xor ecx, ecx
mov word [ebp - 0x21d8], cx
mov ecx, esi
mov dword [ebp - 0x21dc], 0
mov dword [ebp - 0x21e0], eax
mov eax, dword [ebp - 0x2224]
add eax, ebx
mov dword [esp], eax
call fcn.006c1b30
mov eax, 0x3fffffff
sub eax, dword [ebp - 0x21dc]
sub esp, 4
cmp ebx, eax
ja 0x457cf4
mov eax, dword [ebp - 0x26e8]
mov dword [esp + 4], ebx
mov ecx, esi
mov dword [esp], eax
call fcn.006c1ce0
mov eax, dword [ebp - 0x2224]
sub esp, 8
mov ecx, esi
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2228]
mov dword [esp], eax
call fcn.006c1ce0
mov eax, dword [ebp - 0x2224]
mov ebx, dword [ebp - 0x2228]
lea edi, [ebp - 0x21c0]
sub esp, 8
mov dword [ebp - 0x21c8], edi
add eax, eax
mov dword [ebp - 0x26dc], eax
add eax, ebx
je 0x452284
test ebx, ebx
jne 0x452284
mov dword [esp], 0x731c10
call fcn.006dfd70
mov edx, dword [ebp - 0x26dc]
sar edx, 1
cmp edx, 7
mov eax, edx
mov dword [ebp - 0x2658], edx
ja 0x4548b0
cmp eax, 1
je 0x456492
lea ecx, [ebp - 0x21c8]
test edx, edx
mov dword [ebp - 0x26e0], edi
mov dword [ebp - 0x26ec], ecx
jne 0x457703
mov ebx, dword [ebp - 0x26e0]
xor edx, edx
mov dword [ebp - 0x21c4], eax
mov ecx, dword [0x8532c4]
mov word [ebx + eax*2], dx
mov eax, dword [ebp - 0x26ec]
mov dword [esp + 4], esi
mov dword [esp], eax
call fcn.00451740
mov eax, dword [ebp - 0x21c8]
sub esp, 8
cmp eax, edi
je 0x4522ff
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x21e0]
lea esi, [ebp - 0x21d8]
cmp eax, esi
je 0x452317
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x26e8]
lea esi, [ebp - 0x21b0]
mov dword [esp], eax
call fcn.005e72a0
mov ebx, eax
lea eax, [ebp - 0x21a8]
xor ecx, ecx
mov word [ebp - 0x21a8], cx
mov ecx, esi
mov dword [ebp - 0x21ac], 0
mov dword [ebp - 0x21b0], eax
mov eax, dword [ebp - 0x220c]
add eax, ebx
mov dword [esp], eax
call fcn.006c1b30
mov eax, 0x3fffffff
sub eax, dword [ebp - 0x21ac]
sub esp, 4
cmp ebx, eax
ja 0x457be6
mov eax, dword [ebp - 0x26e8]
mov dword [esp + 4], ebx
mov ecx, esi
mov dword [esp], eax
call fcn.006c1ce0
mov eax, dword [ebp - 0x220c]
sub esp, 8
mov ecx, esi
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2210]
mov dword [esp], eax
call fcn.006c1ce0
mov eax, dword [ebp - 0x220c]
mov ebx, dword [ebp - 0x2210]
lea edi, [ebp - 0x2190]
sub esp, 8
mov dword [ebp - 0x2198], edi
add eax, eax
mov dword [ebp - 0x26dc], eax
add eax, ebx
je 0x453691
test ebx, ebx
jne 0x453691
mov dword [esp], 0x731c10
call fcn.006dfd70
mov eax, dword [0x8554c0]
lea esi, [ebp - 0x22b0]
lea edi, [ebp - 0x22b8]
mov eax, dword [eax]
mov dword [ebp - 0x22b8], esi
mov eax, dword [eax + 0x24]
mov dword [esp], 0x8391c0
mov dword [ebp - 0x26e0], eax
call fcn.005e72a0
lea ebx, [eax + eax]
mov edx, ebx
sar edx, 1
cmp edx, 7
mov dword [ebp - 0x2664], edx
ja 0x456fd8
cmp edx, 1
mov eax, dword [ebp - 0x22b8]
je 0x456514
test edx, edx
jne 0x457005
xor ecx, ecx
mov dword [ebp - 0x22b4], edx
mov word [eax + edx*2], cx
lea eax, [ebp - 0x2030]
mov dword [esp + 4], edi
mov ecx, eax
mov dword [ebp - 0x26dc], eax
mov eax, dword [0x8554c0]
mov dword [esp], eax
call dword [ebp - 0x26e0]
mov eax, dword [ebp - 0x22b8]
sub esp, 8
cmp eax, esi
je 0x452480
mov dword [esp], eax
call fcn.006eb330
mov esi, dword [ebp - 0x26dc]
lea ecx, [ebp - 0x2618]
lea edi, [ebp - 0x2028]
mov dword [esp], esi
call fcn.006c1d80
sub esp, 4
mov dword [esp], 0x731d24
call fcn.005e72a0
mov dword [esp + 4], 0xffffffff
mov dword [esp + 8], eax
mov ecx, esi
mov dword [esp], 0x731d24
call fcn.0064a830
sub esp, 0xc
cmp eax, 0xffffffff
je 0x452580
mov ecx, dword [ebp - 0x202c]
add eax, 1
cmp eax, ecx
ja 0x4579ee
mov edx, dword [ebp - 0x2030]
sub ecx, eax
lea ebx, [ebp - 0x2298]
lea edi, [ebp - 0x2028]
mov dword [ebp - 0x22a0], ebx
lea edx, [edx + eax*2]
lea eax, [edx + ecx*2]
lea ecx, [ebp - 0x22a0]
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.0044d8f0
mov edx, dword [ebp - 0x22a0]
sub esp, 8
mov eax, dword [ebp - 0x2030]
cmp edx, ebx
je 0x457766
cmp eax, edi
je 0x4576b7
mov dword [ebp - 0x2030], edx
mov edx, dword [ebp - 0x229c]
test eax, eax
mov ecx, dword [ebp - 0x2028]
mov dword [ebp - 0x202c], edx
mov edx, dword [ebp - 0x2298]
mov dword [ebp - 0x2028], edx
je 0x452580
mov dword [ebp - 0x22a0], eax
mov dword [ebp - 0x2298], ecx
xor edx, edx
cmp eax, ebx
mov dword [ebp - 0x229c], 0
mov word [eax], dx
je 0x452580
mov dword [esp], eax
call fcn.006eb330
lea ebx, [ebp - 0x2620]
lea esi, [ebp - 0x2600]
mov dword [esp], ebx
call fcn.005e72a0
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x25fc]
mov ecx, esi
mov dword [esp + 8], ebx
mov dword [esp], 0
mov dword [ebp - 0x26e0], esi
mov dword [esp + 4], eax
call fcn.006bfc90
sub esp, 0x10
lea esi, [ebp - 0x2280]
mov dword [esp], 0x731ef4
call fcn.005e72a0
mov ebx, eax
xor eax, eax
lea ecx, [ebp - 0x2288]
mov word [ebp - 0x2280], ax
mov eax, dword [ebp - 0x202c]
mov dword [ebp - 0x2288], esi
mov dword [ebp - 0x2284], 0
add eax, ebx
mov dword [esp], eax
call fcn.006c1b30
mov eax, 0x3fffffff
sub eax, dword [ebp - 0x2284]
sub esp, 4
cmp ebx, eax
ja 0x457a53
lea ecx, [ebp - 0x2288]
mov dword [esp + 4], ebx
mov dword [esp], 0x731ef4
call fcn.006c1ce0
mov eax, dword [ebp - 0x202c]
sub esp, 8
lea ecx, [ebp - 0x2288]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2030]
mov dword [esp], eax
call fcn.006c1ce0
mov eax, dword [ebp - 0x2284]
sub esp, 8
mov ecx, dword [ebp - 0x26e0]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2288]
mov dword [esp], eax
call fcn.006c1ce0
mov eax, dword [ebp - 0x2288]
sub esp, 8
cmp eax, esi
je 0x452683
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x2600]
mov ebx, dword [ebp - 0x25fc]
lea esi, [ebp - 0x2250]
mov dword [ebp - 0x2258], esi
add ebx, ebx
mov ecx, eax
mov dword [ebp - 0x26e0], eax
add ecx, ebx
je 0x456786
test eax, eax
jne 0x456786
mov dword [esp], 0x731c10
call fcn.006dfd70
mov eax, dword [str.HMS]
mov ecx, dword [eax + 0x10]
mov eax, dword [ecx]
call dword [eax + 0x20]
mov edi, eax
mov dword [ebp - 0x26f0], eax
mov eax, dword [eax + 8]
mov edi, dword [edi + 0xc]
cmp eax, edi
mov dword [ebp - 0x26fc], edi
je 0x452e11
mov dword [ebp - 0x26dc], eax
lea eax, [ebp - 0x2618]
mov dword [ebp - 0x26ec], eax
lea esi, [esi]
mov edi, dword [ebp - 0x26dc]
xor eax, eax
mov ebx, dword [edi + 0x90]
cmp byte [ebx], 0
setne al
add eax, eax
sub ebx, eax
add ebx, dword [edi]
mov dword [esp], ebx
call fcn.005e72a0
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x2614]
mov ecx, dword [ebp - 0x26ec]
mov dword [esp + 8], ebx
mov dword [esp], 0
mov dword [esp + 4], eax
call fcn.006bfc90
mov ebx, dword [edi + 0x90]
xor eax, eax
sub esp, 0x10
cmp byte [ebx], 0
setne al
add eax, eax
sub ebx, eax
add ebx, dword [edi + 4]
lea eax, [ebp - 0x25e0]
mov dword [ebp - 0x25e8], eax
test ebx, ebx
je 0x4535d0
mov dword [esp], ebx
call fcn.005e72a0
lea esi, [eax + eax]
mov edx, esi
sar edx, 1
cmp edx, 7
mov dword [ebp - 0x26d0], edx
ja 0x453284
cmp edx, 1
mov eax, dword [ebp - 0x25e8]
je 0x4534f4
test edx, edx
jne 0x4532b5
xor esi, esi
mov dword [ebp - 0x25e4], edx
mov word [eax + edx*2], si
mov dword [esp], 0x731c52
call fcn.005e72a0
lea ecx, [ebp - 0x25e8]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x731c52
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.006bfc90
lea esi, [ebp - 0x2010]
lea edx, [eax + 8]
sub esp, 0x10
mov dword [ebp - 0x2018], esi
mov ecx, dword [eax]
cmp ecx, edx
je 0x4535e0
mov dword [ebp - 0x2018], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x2010], ecx
mov ecx, dword [eax + 4]
xor ebx, ebx
mov dword [ebp - 0x2014], ecx
mov dword [eax], edx
mov dword [eax + 4], 0
mov word [eax + 8], bx
mov eax, dword [ebp - 0x2014]
mov ecx, dword [ebp - 0x26ec]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2018]
mov dword [esp], eax
call fcn.006c1ce0
mov eax, dword [ebp - 0x2018]
sub esp, 8
cmp eax, esi
je 0x45285b
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x25e8]
lea edi, [ebp - 0x25e0]
cmp eax, edi
je 0x452873
mov dword [esp], eax
call fcn.006eb330
lea eax, [ebp - 0x2620]
mov dword [esp], eax
mov edi, eax
mov dword [ebp - 0x26e8], eax
call fcn.005e72a0
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x25fc]
lea ecx, [ebp - 0x2600]
mov dword [esp + 8], edi
mov dword [esp], 0
mov dword [ebp - 0x26e0], ecx
mov dword [esp + 4], eax
call fcn.006bfc90
mov edi, dword [ebp - 0x26dc]
xor eax, eax
sub esp, 0x10
mov ebx, dword [edi + 0x90]
cmp byte [ebx], 0
setne al
add eax, eax
sub ebx, eax
add ebx, dword [edi + 4]
lea eax, [ebp - 0x25c8]
mov dword [ebp - 0x25d0], eax
test ebx, ebx
je 0x4535c3
mov dword [esp], ebx
call fcn.005e72a0
lea edi, [eax + eax]
mov edx, edi
sar edx, 1
cmp edx, 7
mov dword [ebp - 0x26cc], edx
ja 0x4532e0
cmp edx, 1
mov eax, dword [ebp - 0x25d0]
je 0x453500
test edx, edx
jne 0x453311
xor ecx, ecx
mov dword [ebp - 0x25cc], edx
mov word [eax + edx*2], cx
mov dword [esp], 0x731e0c
call fcn.005e72a0
lea ecx, [ebp - 0x25d0]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x731e0c
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.006bfc90
mov dword [ebp - 0x2018], esi
mov ecx, dword [eax]
lea edx, [eax + 8]
sub esp, 0x10
cmp ecx, edx
je 0x453615
mov dword [ebp - 0x2018], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x2010], ecx
mov ecx, dword [eax + 4]
xor edi, edi
mov dword [ebp - 0x2014], ecx
mov dword [eax], edx
mov dword [eax + 4], 0
mov word [eax + 8], di
mov eax, dword [ebp - 0x2014]
mov ecx, dword [ebp - 0x26e0]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2018]
mov dword [esp], eax
call fcn.006c1ce0
mov eax, dword [ebp - 0x2018]
sub esp, 8
cmp eax, esi
je 0x4529c8
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x25d0]
lea esi, [ebp - 0x25c8]
cmp eax, esi
je 0x4529e0
mov dword [esp], eax
call fcn.006eb330
lea eax, [ebp - 0x2598]
mov esi, dword [ebp - 0x2600]
mov dword [ebp - 0x25a0], eax
mov eax, dword [ebp - 0x25fc]
lea ebx, [eax + eax]
mov eax, esi
add eax, ebx
je 0x452a11
test esi, esi
jne 0x452a11
mov dword [esp], 0x731c10
call fcn.006dfd70
mov edx, ebx
sar edx, 1
cmp edx, 7
mov eax, edx
mov dword [ebp - 0x26c8], edx
ja 0x453390
cmp eax, 1
je 0x453510
test edx, edx
lea ecx, [ebp - 0x2598]
jne 0x4562c0
xor ebx, ebx
mov dword [ebp - 0x259c], eax
mov edi, dword [ebp - 0x2618]
mov word [ecx + eax*2], bx
mov eax, dword [ebp - 0x2614]
lea esi, [ebp - 0x25b0]
mov dword [ebp - 0x25b8], esi
lea ebx, [eax + eax]
mov eax, edi
add eax, ebx
je 0x452a80
test edi, edi
jne 0x452a80
mov dword [esp], 0x731c10
call fcn.006dfd70
lea esi, [esi]
mov edx, ebx
sar edx, 1
cmp edx, 7
mov eax, edx
mov dword [ebp - 0x26c4], edx
ja 0x4533e2
cmp eax, 1
je 0x453525
lea ecx, [ebp - 0x25b8]
test edx, edx
mov dword [ebp - 0x26e4], esi
mov dword [ebp - 0x26f8], ecx
jne 0x4562d0
mov edi, dword [ebp - 0x26e4]
xor edx, edx
mov dword [ebp - 0x25b4], eax
mov ecx, dword [0x8532c4]
mov word [edi + eax*2], dx
lea eax, [ebp - 0x25a0]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x26f8]
mov dword [esp], eax
call fcn.00451740
mov eax, dword [ebp - 0x25b8]
sub esp, 8
cmp eax, esi
je 0x452afd
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x25a0]
lea esi, [ebp - 0x2598]
cmp eax, esi
je 0x452b15
mov dword [esp], eax
call fcn.006eb330
lea eax, [ebp - 0x2018]
mov dword [esp + 4], 0x731e1e
mov ecx, dword [ebp - 0x26dc]
mov dword [esp + 8], eax
mov edi, eax
mov dword [ebp - 0x26e4], eax
mov eax, dword [ebp - 0x26f0]
mov eax, dword [eax]
mov dword [esp], eax
call fcn.00412f30
sub esp, 0xc
mov dword [esp], edi
call fcn.005e72a0
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x2614]
mov ecx, dword [ebp - 0x26ec]
mov dword [esp + 8], edi
mov dword [esp], 0
mov dword [esp + 4], eax
call fcn.006bfc90
sub esp, 0x10
lea esi, [ebp - 0x2580]
mov dword [esp], edi
mov dword [ebp - 0x2588], esi
call fcn.005e72a0
lea ebx, [eax + eax]
mov edx, ebx
sar edx, 1
cmp edx, 7
mov dword [ebp - 0x26c0], edx
ja 0x453332
cmp edx, 1
mov eax, dword [ebp - 0x2588]
je 0x453550
test edx, edx
jne 0x453363
mov edi, dword [ebp - 0x26e8]
xor ebx, ebx
mov dword [ebp - 0x2584], edx
mov word [eax + edx*2], bx
mov dword [esp], edi
call fcn.005e72a0
lea ecx, [ebp - 0x2588]
mov dword [esp + 0xc], eax
mov dword [esp + 8], edi
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.006bfc90
lea edi, [ebp - 0x2028]
lea edx, [eax + 8]
sub esp, 0x10
mov dword [ebp - 0x2030], edi
mov ecx, dword [eax]
cmp ecx, edx
je 0x453650
mov dword [ebp - 0x2030], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x2028], ecx
mov ecx, dword [eax + 4]
mov dword [ebp - 0x202c], ecx
mov dword [eax], edx
xor ecx, ecx
mov edx, dword [ebp - 0x2030]
mov dword [eax + 4], 0
mov word [eax + 8], cx
mov eax, dword [ebp - 0x2600]
cmp edx, edi
je 0x4543e1
lea ebx, [ebp - 0x25f8]
cmp eax, ebx
je 0x4535a0
mov dword [ebp - 0x2600], edx
mov edx, dword [ebp - 0x202c]
test eax, eax
mov ecx, dword [ebp - 0x25f8]
mov dword [ebp - 0x25fc], edx
mov edx, dword [ebp - 0x2028]
mov dword [ebp - 0x25f8], edx
je 0x452ca8
mov dword [ebp - 0x2030], eax
mov dword [ebp - 0x2028], ecx
xor edx, edx
cmp eax, edi
mov dword [ebp - 0x202c], 0
mov word [eax], dx
je 0x452ca8
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x2588]
cmp eax, esi
je 0x452cba
mov dword [esp], eax
call fcn.006eb330
lea eax, [ebp - 0x2550]
mov esi, dword [ebp - 0x2600]
mov dword [ebp - 0x2558], eax
mov eax, dword [ebp - 0x25fc]
lea ebx, [eax + eax]
mov eax, esi
add eax, ebx
je 0x452cf0
test esi, esi
jne 0x452cf0
mov dword [esp], 0x731c10
call fcn.006dfd70
nop
lea esi, [esi]
mov edx, ebx
sar edx, 1
cmp edx, 7
mov eax, edx
mov dword [ebp - 0x26bc], edx
ja 0x453442
cmp eax, 1
je 0x453560
test edx, edx
lea ecx, [ebp - 0x2550]
jne 0x4562f0
xor ebx, ebx
mov dword [ebp - 0x2554], eax
mov edi, dword [ebp - 0x2618]
mov word [ecx + eax*2], bx
mov eax, dword [ebp - 0x2614]
lea esi, [ebp - 0x2568]
mov dword [ebp - 0x2570], esi
lea ebx, [eax + eax]
mov eax, edi
add eax, ebx
je 0x452d60
test edi, edi
jne 0x452d60
mov dword [esp], 0x731c10
call fcn.006dfd70
lea esi, [esi]
mov edx, ebx
sar edx, 1
cmp edx, 7
mov eax, edx
mov dword [ebp - 0x26b8], edx
ja 0x453494
cmp eax, 1
je 0x453575
lea ecx, [ebp - 0x2570]
test edx, edx
mov dword [ebp - 0x26e0], esi
mov dword [ebp - 0x26e4], ecx
jne 0x4562e0
mov edi, dword [ebp - 0x26e0]
xor edx, edx
mov dword [ebp - 0x256c], eax
mov ecx, dword [0x8532c4]
mov word [edi + eax*2], dx
lea eax, [ebp - 0x2558]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x26e4]
mov dword [esp], eax
call fcn.00451740
mov eax, dword [ebp - 0x2570]
sub esp, 8
cmp eax, esi
je 0x452ddd
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x2558]
lea edi, [ebp - 0x2550]
cmp eax, edi
je 0x452df5
mov dword [esp], eax
call fcn.006eb330
add dword [ebp - 0x26dc], 0xa0
mov eax, dword [ebp - 0x26dc]
cmp dword [ebp - 0x26fc], eax
jne 0x452700
mov eax, dword [0x8532c4]
mov edx, dword [eax + 0x184]
test edx, edx
je 0x451bcb
mov eax, dword [eax + 0x180]
mov ecx, 0x8554b8
mov dword [esp], eax
call fcn.0043f430
sub esp, 4
test al, al
je 0x452ff1
mov edx, dword [0x8532c4]
lea eax, [ebp - 0x2018]
lea esi, [ebp - 0x2010]
mov edi, eax
mov dword [ebp - 0x26e4], eax
mov dword [ebp - 0x2018], esi
mov eax, dword [edx + 0x180]
mov edx, dword [edx + 0x184]
mov ecx, edi
lea edx, [eax + edx*2]
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.0044d8f0
sub esp, 8
mov dword [esp], 0x731d24
call fcn.005e72a0
mov dword [esp + 4], 0xffffffff
mov dword [esp + 8], eax
mov ecx, edi
mov dword [esp], 0x731d24
call fcn.0064a830
sub esp, 0xc
cmp eax, 0xffffffff
je 0x452ed7
mov edx, dword [ebp - 0x2014]
add eax, 1
mov ecx, dword [ebp - 0x26e4]
mov dword [esp], 0
cmp eax, edx
cmova eax, edx
mov dword [esp + 4], eax
call int.006c1c50
sub esp, 8
mov dword [esp], 0x731e5e
lea ebx, [ebp - 0x23d8]
call fcn.005e72a0
mov edi, eax
lea eax, [ebp - 0x23d0]
mov ecx, ebx
mov dword [ebp - 0x23d4], 0
mov dword [ebp - 0x23d8], eax
xor eax, eax
mov word [ebp - 0x23d0], ax
mov eax, dword [ebp - 0x2014]
add eax, edi
mov dword [esp], eax
call fcn.006c1b30
mov eax, 0x3fffffff
sub eax, dword [ebp - 0x23d4]
sub esp, 4
cmp edi, eax
ja 0x457e1b
mov dword [esp + 4], edi
mov dword [esp], 0x731e5e
mov ecx, ebx
call fcn.006c1ce0
mov eax, dword [ebp - 0x2014]
sub esp, 8
mov ecx, ebx
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2018]
mov dword [esp], eax
call fcn.006c1ce0
mov edx, dword [0x8532c4]
sub esp, 8
lea edi, [ebp - 0x23b8]
lea ecx, [ebp - 0x23c0]
mov dword [ebp - 0x23c0], edi
mov eax, dword [edx + 0x180]
mov edx, dword [edx + 0x184]
lea edx, [eax + edx*2]
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.0044d8f0
lea eax, [ebp - 0x23c0]
mov ecx, dword [0x8532c4]
sub esp, 8
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.004506e0
mov eax, dword [ebp - 0x23c0]
sub esp, 8
cmp eax, edi
je 0x452fc7
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x23d8]
lea edi, [ebp - 0x23d0]
cmp eax, edi
je 0x452fdf
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x2018]
cmp eax, esi
je 0x452ff1
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [0x8532c4]
cmp byte [eax + 0x199], 0
je 0x451bd8
mov eax, dword [str.HMS]
mov ecx, dword [eax + 0x10]
mov eax, dword [ecx]
call dword [eax + 0x20]
mov esi, dword [eax]
mov dword [ebp - 0x26f8], eax
lea edi, [ebp - 0x2028]
lea eax, [ebp - 0x2030]
mov dword [ebp - 0x2030], edi
test esi, esi
mov dword [ebp - 0x26dc], eax
je 0x457554
mov dword [esp], esi
call fcn.005e72a0
lea ebx, [eax + eax]
mov edx, ebx
sar edx, 1
cmp edx, 7
mov dword [ebp - 0x2678], edx
ja 0x4564b3
cmp edx, 1
mov eax, dword [ebp - 0x2030]
je 0x457398
test edx, edx
jne 0x4564e4
xor esi, esi
mov dword [ebp - 0x202c], edx
mov word [eax + edx*2], si
mov dword [esp], 0x731e72
call fcn.005e72a0
mov edx, 0x3fffffff
sub edx, dword [ebp - 0x202c]
cmp eax, edx
ja 0x457a7c
mov ecx, dword [ebp - 0x26dc]
mov dword [esp + 4], eax
mov dword [esp], 0x731e72
call fcn.006c1ce0
lea eax, [ebp - 0x2018]
sub esp, 8
mov dword [ebp - 0x26e4], eax
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2030]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
sub esp, 8
cmp eax, 0xffffffff
mov dword [ebp - 0x26e8], eax
je 0x456601
test byte [ebp - 0x2018], 0x10
jne 0x4565cb
mov eax, dword [ebp - 0x26f8]
mov ebx, dword [eax]
mov dword [esp], ebx
call fcn.005e72a0
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x2614]
lea ecx, [ebp - 0x2618]
mov dword [esp + 8], ebx
mov dword [esp], 0
mov dword [esp + 4], eax
call fcn.006bfc90
sub esp, 0x10
mov dword [esp], 0x731c52
call fcn.005e72a0
mov edx, 0x3fffffff
sub edx, dword [ebp - 0x2614]
cmp eax, edx
ja 0x4577ba
lea ecx, [ebp - 0x2618]
mov dword [esp + 4], eax
mov dword [esp], 0x731c52
call fcn.006c1ce0
lea eax, [ebp - 0x1fec]
sub esp, 8
mov dword [esp], eax
call fcn.005e72a0
mov edx, 0x3fffffff
sub edx, dword [ebp - 0x2614]
cmp eax, edx
ja 0x4577ae
mov dword [esp + 4], eax
lea eax, [ebp - 0x1fec]
lea ecx, [ebp - 0x2618]
mov dword [esp], eax
call fcn.006c1ce0
lea ebx, [ebp - 0x2620]
sub esp, 8
lea esi, [ebp - 0x2600]
mov dword [esp], ebx
call fcn.005e72a0
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x25fc]
mov ecx, esi
mov dword [esp + 8], ebx
mov dword [esp], 0
mov dword [ebp - 0x26e0], esi
mov dword [esp + 4], eax
call fcn.006bfc90
sub esp, 0x10
mov dword [esp], 0x731e82
call fcn.005e72a0
mov edx, 0x3fffffff
sub edx, dword [ebp - 0x25fc]
cmp eax, edx
ja 0x4577d2
mov ecx, dword [ebp - 0x26e0]
mov dword [esp + 4], eax
mov dword [esp], 0x731e82
call fcn.006c1ce0
lea eax, [ebp - 0x1fec]
sub esp, 8
mov dword [esp], eax
call fcn.005e72a0
mov edx, 0x3fffffff
sub edx, dword [ebp - 0x25fc]
cmp eax, edx
ja 0x4577c6
mov dword [esp + 4], eax
mov ecx, dword [ebp - 0x26e0]
lea eax, [ebp - 0x1fec]
mov dword [esp], eax
call fcn.006c1ce0
lea eax, [ebp - 0x2388]
mov esi, dword [ebp - 0x2600]
sub esp, 8
mov dword [ebp - 0x2390], eax
mov eax, dword [ebp - 0x25fc]
lea ebx, [eax + eax]
mov eax, esi
add eax, ebx
je 0x456620
test esi, esi
jne 0x456620
mov dword [esp], 0x731c10
call fcn.006dfd70
lea eax, [ebp - 0x26d0]
lea ecx, [ebp - 0x25e8]
mov dword [esp + 4], 0
mov dword [esp], eax
call int.006c1e40
mov edx, dword [ebp - 0x26d0]
sub esp, 8
mov dword [ebp - 0x25e8], eax
mov dword [ebp - 0x25e0], edx
mov dword [esp + 8], esi
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.005e73f8
mov edx, dword [ebp - 0x26d0]
mov eax, dword [ebp - 0x25e8]
jmp 0x4527a7
lea eax, [ebp - 0x26cc]
lea ecx, [ebp - 0x25d0]
mov dword [esp + 4], 0
mov dword [esp], eax
call int.006c1e40
mov edx, dword [ebp - 0x26cc]
sub esp, 8
mov dword [ebp - 0x25d0], eax
mov dword [ebp - 0x25c8], edx
mov dword [esp + 8], edi
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.005e73f8
mov edx, dword [ebp - 0x26cc]
mov eax, dword [ebp - 0x25d0]
jmp 0x45291a
lea eax, [ebp - 0x26c0]
lea ecx, [ebp - 0x2588]
mov dword [esp + 4], 0
mov dword [esp], eax
call int.006c1e40
mov edx, dword [ebp - 0x26c0]
sub esp, 8
mov dword [ebp - 0x2588], eax
mov dword [ebp - 0x2580], edx
mov edi, dword [ebp - 0x26e4]
mov dword [esp + 8], ebx
mov dword [esp], eax
mov dword [esp + 4], edi
call fcn.005e73f8
mov edx, dword [ebp - 0x26c0]
mov eax, dword [ebp - 0x2588]
jmp 0x452bb8
lea eax, [ebp - 0x26c8]
lea ecx, [ebp - 0x25a0]
mov dword [esp + 4], 0
mov dword [esp], eax
call int.006c1e40
mov edx, dword [ebp - 0x26c8]
sub esp, 8
mov dword [ebp - 0x25a0], eax
mov dword [ebp - 0x2598], edx
mov dword [esp + 8], ebx
mov dword [esp + 4], esi
mov dword [esp], eax
call fcn.005e73f8
mov eax, dword [ebp - 0x26c8]
mov ecx, dword [ebp - 0x25a0]
jmp 0x452a3d
lea eax, [ebp - 0x25b8]
mov dword [esp + 4], 0
mov ecx, eax
mov dword [ebp - 0x26f8], eax
lea eax, [ebp - 0x26c4]
mov dword [esp], eax
call int.006c1e40
mov edx, dword [ebp - 0x26c4]
sub esp, 8
mov dword [ebp - 0x25b8], eax
mov dword [ebp - 0x25b0], edx
mov dword [esp + 4], edi
mov dword [esp + 8], ebx
mov dword [esp], eax
call fcn.005e73f8
mov edi, dword [ebp - 0x25b8]
mov eax, dword [ebp - 0x26c4]
mov dword [ebp - 0x26e4], edi
jmp 0x452ab8
lea eax, [ebp - 0x26bc]
lea ecx, [ebp - 0x2558]
mov dword [esp + 4], 0
mov dword [esp], eax
call int.006c1e40
mov edx, dword [ebp - 0x26bc]
sub esp, 8
mov dword [ebp - 0x2558], eax
mov dword [ebp - 0x2550], edx
mov dword [esp + 8], ebx
mov dword [esp + 4], esi
mov dword [esp], eax
call fcn.005e73f8
mov eax, dword [ebp - 0x26bc]
mov ecx, dword [ebp - 0x2558]
jmp 0x452d1c
lea eax, [ebp - 0x2570]
mov dword [esp + 4], 0
mov ecx, eax
mov dword [ebp - 0x26e4], eax
lea eax, [ebp - 0x26b8]
mov dword [esp], eax
call int.006c1e40
mov edx, dword [ebp - 0x26b8]
sub esp, 8
mov dword [ebp - 0x2570], eax
mov dword [ebp - 0x2568], edx
mov dword [esp + 4], edi
mov dword [esp + 8], ebx
mov dword [esp], eax
call fcn.005e73f8
mov edi, dword [ebp - 0x2570]
mov eax, dword [ebp - 0x26b8]
mov dword [ebp - 0x26e0], edi
jmp 0x452d98
movzx ecx, word [ebx]
mov word [eax], cx
jmp 0x4527a7
movzx ecx, word [ebx]
mov word [eax], cx
jmp 0x45291a
movzx edx, word [esi]
lea ecx, [ebp - 0x2598]
mov word [ebp - 0x2598], dx
jmp 0x452a3d
movzx edx, word [edi]
lea edi, [ebp - 0x25b8]
mov dword [ebp - 0x26e4], esi
mov dword [ebp - 0x26f8], edi
mov word [ebp - 0x25b0], dx
jmp 0x452ab8
movzx ecx, word [ebp - 0x2018]
mov word [eax], cx
jmp 0x452bb8
movzx edx, word [esi]
lea ecx, [ebp - 0x2550]
mov word [ebp - 0x2550], dx
jmp 0x452d1c
movzx edx, word [edi]
lea edi, [ebp - 0x2570]
mov dword [ebp - 0x26e0], esi
mov dword [ebp - 0x26e4], edi
mov word [ebp - 0x2568], dx
jmp 0x452d98
mov eax, dword [ebp - 0x202c]
mov dword [ebp - 0x2600], edx
mov dword [ebp - 0x25fc], eax
mov eax, dword [ebp - 0x2028]
mov dword [ebp - 0x25f8], eax
jmp 0x452ca8
mov dword [esp], 0x731c10
call fcn.006dfd70
nop
mov dword [esp], 0x731c10
call fcn.006dfd70
lea esi, [esi]
mov ecx, dword [eax + 0x14]
mov edi, dword [eax + 0xc]
mov ebx, dword [eax + 0x10]
mov dword [ebp - 0x26e0], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x200c], edi
mov edi, dword [ebp - 0x26e0]
mov dword [ebp - 0x2008], ebx
mov dword [ebp - 0x2010], ecx
mov dword [ebp - 0x2004], edi
jmp 0x452810
mov ecx, dword [eax + 0x14]
mov edi, dword [eax + 0xc]
mov ebx, dword [eax + 0x10]
mov dword [ebp - 0x26e4], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x200c], edi
mov edi, dword [ebp - 0x26e4]
mov dword [ebp - 0x2008], ebx
mov dword [ebp - 0x2010], ecx
mov dword [ebp - 0x2004], edi
jmp 0x45297d
mov ecx, dword [eax + 0x10]
mov ebx, dword [eax + 0xc]
mov dword [ebp - 0x26e4], ecx
mov ecx, dword [eax + 0x14]
mov dword [ebp - 0x26e8], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x2024], ebx
mov ebx, dword [ebp - 0x26e4]
mov dword [ebp - 0x2028], ecx
mov dword [ebp - 0x2020], ebx
mov ebx, dword [ebp - 0x26e8]
mov dword [ebp - 0x201c], ebx
jmp 0x452c1f
mov edx, dword [ebp - 0x26dc]
sar edx, 1
cmp edx, 7
mov eax, edx
mov dword [ebp - 0x2654], edx
ja 0x454920
cmp eax, 1
je 0x456c40
lea ecx, [ebp - 0x2198]
test edx, edx
mov dword [ebp - 0x26e0], edi
mov dword [ebp - 0x26ec], ecx
jne 0x4576fc
mov ebx, dword [ebp - 0x26e0]
xor edx, edx
mov dword [ebp - 0x2194], eax
mov ecx, dword [0x8532c4]
mov word [ebx + eax*2], dx
mov eax, dword [ebp - 0x26ec]
mov dword [esp + 4], esi
mov dword [esp], eax
call fcn.00451740
mov eax, dword [ebp - 0x2198]
sub esp, 8
cmp eax, edi
je 0x45370c
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x21b0]
lea esi, [ebp - 0x21a8]
cmp eax, esi
je 0x453724
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x2228]
mov ecx, 0x8554b8
mov dword [esp], eax
call fcn.0043f470
mov esi, eax
mov eax, dword [ebp - 0x2210]
sub esp, 4
mov ecx, 0x8554b8
mov edi, edx
mov dword [esp], eax
call fcn.0043f470
sub esp, 4
add esi, eax
mov ecx, 0x82
adc edi, edx
xor eax, eax
mov dword [ebp - 0x26f8], esi
mov dword [ebp - 0x26f4], edi
mov edi, dword [ebp - 0x26e4]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x2018]
mov dword [esp], 0x104
mov dword [ebp - 0x26e4], eax
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
sub esp, 8
lea esi, [ebp - 0x2178]
mov dword [esp], 0x731f42
mov dword [ebp - 0x2180], esi
call fcn.005e72a0
lea ebx, [eax + eax]
mov edx, ebx
sar edx, 1
cmp edx, 7
mov dword [ebp - 0x2650], edx
ja 0x454850
cmp edx, 1
mov eax, dword [ebp - 0x2180]
je 0x456c31
test edx, edx
jne 0x454881
mov edi, dword [ebp - 0x26e4]
xor ebx, ebx
mov dword [ebp - 0x217c], edx
mov word [eax + edx*2], bx
mov dword [esp], edi
call fcn.005e72a0
lea ecx, [ebp - 0x2180]
mov dword [esp + 0xc], eax
mov dword [esp + 8], edi
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.006bfc90
lea edi, [ebp - 0x2028]
lea edx, [eax + 8]
sub esp, 0x10
mov dword [ebp - 0x2030], edi
mov ecx, dword [eax]
cmp ecx, edx
je 0x45716c
mov dword [ebp - 0x2030], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x2028], ecx
mov ecx, dword [eax + 4]
lea ebx, [ebp - 0x2030]
mov dword [ebp - 0x26dc], ebx
mov dword [ebp - 0x202c], ecx
mov dword [eax], edx
xor ecx, ecx
mov edx, dword [ebp - 0x2030]
mov dword [eax + 4], 0
mov word [eax + 8], cx
mov eax, dword [ebp - 0x2618]
cmp edx, edi
je 0x457356
lea ebx, [ebp - 0x2610]
cmp eax, ebx
je 0x456e24
mov dword [ebp - 0x2618], edx
mov edx, dword [ebp - 0x202c]
test eax, eax
mov ecx, dword [ebp - 0x2610]
mov dword [ebp - 0x2614], edx
mov edx, dword [ebp - 0x2028]
mov dword [ebp - 0x2610], edx
je 0x4538d4
mov dword [ebp - 0x2030], eax
mov dword [ebp - 0x2028], ecx
xor edx, edx
cmp eax, edi
mov dword [ebp - 0x202c], 0
mov word [eax], dx
je 0x4538d4
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x2180]
cmp eax, esi
je 0x4538e6
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x2618]
mov dword [esp + 4], 0x731f54
mov dword [esp], eax
mov eax, dword [sym.imp.msvcrt.dll__wfopen]
mov dword [ebp - 0x26fc], eax
call eax
test eax, eax
mov ebx, eax
je 0x453bf1
mov eax, dword [str._H_o]
mov edx, 0x731be8
mov dword [esp + 4], 0x731f5a
mov dword [esp], ebx
test eax, eax
cmove eax, edx
mov dword [esp + 8], eax
call fcn.005e7488
mov eax, dword [0x8531d0]
mov dword [esp + 4], 0x731f74
mov dword [esp], ebx
mov dword [esp + 8], eax
call fcn.005e7488
mov eax, dword [0x8532c4]
cmp dword [eax + 0x17c], 1
jbe 0x456f0a
cmp byte [eax + 0x19a], 0
jne 0x4563f2
cmp byte [eax + 0x19b], 0
je 0x456414
cmp byte [eax + 0x19c], 0
jne 0x456436
cmp byte [eax + 0x19d], 0
jne 0x456458
mov eax, dword [0x8531c0]
test eax, 0x200000
jne 0x456478
test eax, 0x10000000
jne 0x456320
test eax, 0x80000
jne 0x456300
test eax, 0x800000
je 0x4539cd
mov dword [esp + 4], 0x73206c
mov dword [esp], ebx
call fcn.005e7488
mov dword [esp], ebx
call fcn.005e7500
lea esi, [ebp - 0x2160]
mov dword [esp], 0x73208c
mov dword [ebp - 0x2168], esi
call fcn.005e72a0
lea ebx, [eax + eax]
mov edx, ebx
sar edx, 1
cmp edx, 7
mov dword [ebp - 0x264c], edx
ja 0x456265
cmp edx, 1
mov eax, dword [ebp - 0x2168]
je 0x456c80
test edx, edx
jne 0x456296
xor ebx, ebx
mov dword [ebp - 0x2164], edx
mov word [eax + edx*2], bx
mov ebx, dword [ebp - 0x26e8]
mov dword [esp], ebx
call fcn.005e72a0
lea ecx, [ebp - 0x2168]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ebx
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.006bfc90
mov dword [ebp - 0x2030], edi
mov ecx, dword [eax]
lea edx, [eax + 8]
sub esp, 0x10
cmp ecx, edx
je 0x4572cf
mov dword [ebp - 0x2030], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x2028], ecx
mov ecx, dword [eax + 4]
mov dword [ebp - 0x202c], ecx
mov dword [eax], edx
xor ecx, ecx
mov edx, dword [ebp - 0x2030]
mov dword [eax + 4], 0
mov word [eax + 8], cx
mov eax, dword [ebp - 0x2600]
cmp edx, edi
je 0x4573a3
lea ebx, [ebp - 0x25f8]
cmp eax, ebx
je 0x456ee7
mov dword [ebp - 0x2600], edx
mov edx, dword [ebp - 0x202c]
test eax, eax
mov ecx, dword [ebp - 0x25f8]
mov dword [ebp - 0x25fc], edx
mov edx, dword [ebp - 0x2028]
mov dword [ebp - 0x25f8], edx
je 0x453b04
mov dword [ebp - 0x2030], eax
mov dword [ebp - 0x2028], ecx
xor edx, edx
cmp eax, edi
mov dword [ebp - 0x202c], 0
mov word [eax], dx
je 0x453b04
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x2168]
cmp eax, esi
je 0x453b16
mov dword [esp], eax
call fcn.006eb330
lea eax, [ebp - 0x2130]
mov esi, dword [ebp - 0x2600]
mov dword [ebp - 0x2138], eax
mov eax, dword [ebp - 0x25fc]
lea ebx, [eax + eax]
mov eax, esi
add eax, ebx
je 0x454370
test esi, esi
jne 0x454370
mov dword [esp], 0x731c10
call fcn.006dfd70
nop
mov edx, ebx
sar edx, 1
cmp edx, 7
mov eax, edx
mov dword [ebp - 0x2644], edx
ja 0x456340
cmp eax, 1
je 0x456c90
lea ecx, [ebp - 0x2148]
test edx, edx
mov dword [ebp - 0x26e0], ecx
lea ecx, [ebp - 0x2150]
mov dword [ebp - 0x26ec], ecx
jne 0x45770a
mov esi, dword [ebp - 0x26e0]
xor edx, edx
mov dword [ebp - 0x214c], eax
mov ecx, dword [0x8532c4]
mov word [esi + eax*2], dx
lea eax, [ebp - 0x2138]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x26ec]
mov dword [esp], eax
call fcn.00451740
mov eax, dword [ebp - 0x2150]
lea esi, [ebp - 0x2148]
sub esp, 8
cmp eax, esi
je 0x453bd9
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x2138]
lea esi, [ebp - 0x2130]
cmp eax, esi
je 0x453bf1
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [0x8532c4]
cmp byte [eax + 0x19e], 0
je 0x453e75
mov esi, dword [ebp - 0x26e4]
lea ebx, [ebp - 0x2618]
mov dword [esp], esi
call fcn.005e72a0
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x2614]
mov ecx, ebx
mov dword [esp + 8], esi
mov dword [esp], 0
mov dword [ebp - 0x26ec], ebx
mov dword [esp + 4], eax
call fcn.006bfc90
sub esp, 0x10
mov dword [esp], 0x73209c
call fcn.005e72a0
mov edx, 0x3fffffff
sub edx, dword [ebp - 0x2614]
cmp eax, edx
ja 0x457d40
mov ecx, dword [ebp - 0x26ec]
mov dword [esp + 4], eax
mov dword [esp], 0x73209c
call fcn.006c1ce0
mov eax, dword [ebp - 0x2618]
sub esp, 8
mov dword [esp + 4], 0x731f54
mov dword [esp], eax
mov eax, dword [ebp - 0x26fc]
call eax
test eax, eax
mov ebx, eax
je 0x453ce9
mov dword [esp + 4], 0x7320b6
mov dword [esp], eax
call fcn.005e7488
mov dword [esp + 4], 0x7320cc
mov dword [esp], ebx
call fcn.005e7488
mov eax, dword [ebp - 0x2228]
mov dword [esp + 4], 0x7320f2
mov dword [esp], ebx
mov dword [esp + 8], eax
call fcn.005e7488
mov dword [esp + 4], 0x732108
mov dword [esp], ebx
call fcn.005e7488
mov dword [esp], ebx
call fcn.005e7500
mov esi, dword [ebp - 0x26e8]
lea ebx, [ebp - 0x2600]
mov dword [esp], esi
call fcn.005e72a0
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x25fc]
mov ecx, ebx
mov dword [esp + 8], esi
mov dword [esp], 0
mov dword [ebp - 0x26e0], ebx
mov dword [esp + 4], eax
call fcn.006bfc90
sub esp, 0x10
mov dword [esp], 0x732126
call fcn.005e72a0
mov edx, 0x3fffffff
sub edx, dword [ebp - 0x25fc]
cmp eax, edx
ja 0x457d2d
mov ecx, dword [ebp - 0x26e0]
mov dword [esp + 4], eax
mov dword [esp], 0x732126
call fcn.006c1ce0
lea eax, [ebp - 0x2100]
mov ebx, dword [ebp - 0x2600]
sub esp, 8
mov dword [ebp - 0x2108], eax
mov eax, dword [ebp - 0x25fc]
lea esi, [eax + eax]
mov eax, ebx
add eax, esi
je 0x454403
test ebx, ebx
jne 0x454403
mov dword [esp], 0x731c10
call fcn.006dfd70
mov edx, ebx
sar edx, 1
cmp edx, 7
mov eax, edx
mov dword [ebp - 0x2638], edx
ja 0x456d20
cmp eax, 1
je 0x457262
test edx, edx
lea ecx, [ebp - 0x20d0]
jne 0x4577a0
xor ebx, ebx
lea esi, [ebp - 0x20e8]
mov dword [ebp - 0x20d4], eax
mov word [ecx + eax*2], bx
mov dword [esp], 0x73213e
lea ebx, [ebp - 0x20f0]
mov dword [ebp - 0x20f0], esi
call fcn.005e72a0
add eax, eax
mov edx, eax
mov dword [ebp - 0x26e0], eax
sar edx, 1
cmp edx, 7
mov dword [ebp - 0x2634], edx
ja 0x456cc0
cmp edx, 1
mov eax, dword [ebp - 0x20f0]
je 0x457253
test edx, edx
jne 0x456ced
xor ecx, ecx
mov dword [ebp - 0x20ec], edx
mov word [eax + edx*2], cx
lea eax, [ebp - 0x20d8]
mov ecx, dword [0x8532c4]
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.00451740
mov eax, dword [ebp - 0x20f0]
sub esp, 8
cmp eax, esi
je 0x453e58
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x20d8]
lea esi, [ebp - 0x20d0]
cmp eax, esi
je 0x453e70
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [0x8532c4]
lea esi, [ebp - 0x20b8]
xor ecx, ecx
mov ebx, dword [eax + 0x160]
mov word [ebp - 0x20b8], cx
xor edx, edx
mov dword [ebp - 0x20bc], 0
mov dword [ebp - 0x26e0], esi
mov dword [ebp - 0x20c0], esi
mov esi, dword [eax + 0x164]
mov dword [esp + 0xc], 0x731c7c
mov dword [esp + 8], 0x20
mov dword [esp + 4], 0x44d450
mov ecx, esi
sar ecx, 0x1f
and ecx, 0xfffff
mov eax, ecx
add eax, ebx
adc edx, esi
shrd eax, edx, 0x14
sar edx, 0x14
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x2090]
mov dword [esp + 0x14], edx
mov dword [esp], eax
call fcn.0044d990
mov dword [esp], 0x732158
call fcn.005e72a0
mov edx, 0x3fffffff
sub edx, dword [ebp - 0x208c]
cmp eax, edx
ja 0x457ee0
lea ecx, [ebp - 0x2090]
mov dword [esp + 4], eax
mov dword [esp], 0x732158
call fcn.006c1ce0
lea esi, [ebp - 0x20a0]
lea edx, [eax + 8]
sub esp, 8
mov dword [ebp - 0x20a8], esi
mov ecx, dword [eax]
mov dword [ebp - 0x26e8], esi
cmp ecx, edx
je 0x4571ad
mov dword [ebp - 0x20a8], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x20a0], ecx
mov ecx, dword [eax + 4]
mov dword [ebp - 0x20a4], ecx
mov dword [eax], edx
xor edx, edx
mov word [eax + 8], dx
mov dword [eax + 4], 0
lea edx, [ebp - 0x2088]
mov eax, dword [ebp - 0x2090]
cmp eax, edx
je 0x453f84
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x26f4]
mov edx, dword [ebp - 0x26f4]
xor ebx, ebx
mov dword [esp + 0xc], 0x731c7c
mov dword [esp + 8], 0x20
mov dword [esp + 4], 0x44d450
sar eax, 0x1f
and eax, 0xfffff
mov ecx, eax
mov eax, dword [ebp - 0x26f8]
add eax, ecx
adc edx, ebx
shrd eax, edx, 0x14
sar edx, 0x14
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x26dc]
mov dword [esp + 0x14], edx
mov dword [esp], eax
call fcn.0044d990
mov dword [esp], 0x732158
call fcn.005e72a0
mov edx, 0x3fffffff
sub edx, dword [ebp - 0x202c]
cmp eax, edx
ja 0x457d00
mov ecx, dword [ebp - 0x26dc]
mov dword [esp + 4], eax
mov dword [esp], 0x732158
call fcn.006c1ce0
lea esi, [ebp - 0x2070]
lea edx, [eax + 8]
sub esp, 8
mov dword [ebp - 0x2078], esi
mov ecx, dword [eax]
cmp ecx, edx
je 0x4571e2
mov dword [ebp - 0x2078], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x2070], ecx
mov ecx, dword [eax + 4]
xor ebx, ebx
mov dword [ebp - 0x2074], ecx
mov dword [eax], edx
mov dword [eax + 4], 0
mov word [eax + 8], bx
mov eax, dword [ebp - 0x2030]
cmp eax, edi
je 0x454065
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [0x8532c4]
mov edx, dword [eax + 0x15c]
mov eax, dword [eax + 0x158]
cmp edx, 0
jle 0x456ae4
lea esi, [ebp - 0x2048]
mov dword [esp + 0xc], 0x731c7c
mov dword [esp + 8], 0x20
shrd eax, edx, 0x14
sar edx, 0x14
mov dword [esp + 4], 0x44d450
mov dword [esp], esi
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
mov dword [ebp - 0x26fc], esi
call fcn.0044d990
mov dword [esp], 0x732158
call fcn.005e72a0
mov edx, 0x3fffffff
sub edx, dword [ebp - 0x2044]
cmp eax, edx
ja 0x457d68
mov ecx, dword [ebp - 0x26fc]
mov dword [esp + 4], eax
mov dword [esp], 0x732158
call fcn.006c1ce0
mov dword [ebp - 0x2030], edi
mov ecx, dword [eax]
lea edx, [eax + 8]
sub esp, 8
cmp ecx, edx
je 0x4575c3
mov dword [ebp - 0x2030], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x2028], ecx
mov ecx, dword [eax + 4]
mov dword [ebp - 0x202c], ecx
mov dword [eax], edx
xor ecx, ecx
mov edx, dword [ebp - 0x2030]
mov dword [eax + 4], 0
mov word [eax + 8], cx
mov eax, dword [ebp - 0x20c0]
cmp edx, edi
je 0x457673
cmp eax, dword [ebp - 0x26e0]
je 0x457333
mov dword [ebp - 0x20c0], edx
mov edx, dword [ebp - 0x202c]
test eax, eax
mov ecx, dword [ebp - 0x20b8]
mov dword [ebp - 0x20bc], edx
mov edx, dword [ebp - 0x2028]
mov dword [ebp - 0x20b8], edx
je 0x45419b
mov dword [ebp - 0x2030], eax
mov dword [ebp - 0x2028], ecx
xor edx, edx
cmp eax, edi
mov dword [ebp - 0x202c], 0
mov word [eax], dx
je 0x45419b
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x2048]
lea edx, [ebp - 0x2040]
cmp eax, edx
je 0x4541b3
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x20c0]
mov esi, dword [ebp - 0x2704]
mov dword [esp + 4], 0x27db
mov ebx, dword [sym.imp.USER32.dll_SetDlgItemTextW]
mov dword [esp + 8], eax
mov dword [esp], esi
call ebx
mov eax, dword [ebp - 0x20a8]
sub esp, 0xc
mov dword [esp + 4], 0x27dc
mov dword [esp], esi
mov dword [esp + 8], eax
call ebx
mov eax, dword [ebp - 0x20c0]
sub esp, 0xc
mov dword [esp + 4], 0x283f
mov dword [esp], esi
mov dword [esp + 8], eax
call ebx
mov eax, dword [ebp - 0x20a8]
sub esp, 0xc
mov dword [esp + 4], 0x2840
mov dword [esp], esi
mov dword [esp + 8], eax
call ebx
mov eax, dword [ebp - 0x20c0]
sub esp, 0xc
mov dword [esp + 4], 0x28a3
mov dword [esp], esi
mov dword [esp + 8], eax
call ebx
mov eax, dword [ebp - 0x20a8]
sub esp, 0xc
mov dword [esp + 4], 0x28a4
mov dword [esp], esi
mov dword [esp + 8], eax
call ebx
mov eax, dword [ebp - 0x2078]
sub esp, 0xc
mov dword [esp + 4], 0x28c2
mov dword [esp], esi
mov dword [esp + 8], eax
call ebx
sub esp, 0xc
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], esi
call dword [sym.imp.USER32.dll_InvalidateRect]
mov eax, dword [0x8532c4]
sub esp, 0xc
mov byte [eax + 0x198], 0
mov dword [esp + 4], 0x7f00
mov dword [esp], 0
call dword [ebp - 0x270c]
sub esp, 8
mov dword [esp], eax
call dword [ebp - 0x2708]
mov eax, dword [ebp - 0x2078]
lea esi, [ebp - 0x2070]
sub esp, 4
cmp eax, esi
je 0x4542d9
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x20a8]
cmp eax, dword [ebp - 0x26e8]
je 0x4542ef
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x20c0]
cmp eax, dword [ebp - 0x26e0]
je 0x454305
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x2210]
cmp eax, dword [ebp - 0x26f0]
je 0x45431b
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x2228]
lea esi, [ebp - 0x2220]
cmp eax, esi
je 0x454333
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x2600]
lea esi, [ebp - 0x25f8]
cmp eax, esi
je 0x45434b
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x2618]
lea esi, [ebp - 0x2610]
cmp eax, esi
je 0x454363
mov dword [esp], eax
call fcn.006eb330
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov edx, ebx
sar edx, 1
cmp edx, 7
mov eax, edx
mov dword [ebp - 0x2648], edx
ja 0x4563a0
cmp eax, 1
je 0x456c61
test edx, edx
lea ecx, [ebp - 0x2130]
jne 0x457715
xor ebx, ebx
mov dword [ebp - 0x2134], eax
mov esi, dword [ebp - 0x2618]
mov word [ecx + eax*2], bx
lea eax, [ebp - 0x2148]
mov dword [ebp - 0x2150], eax
mov eax, dword [ebp - 0x2614]
lea ebx, [eax + eax]
mov eax, esi
add eax, ebx
je 0x453b50
test esi, esi
jne 0x453b50
mov dword [esp], 0x731c10
call fcn.006dfd70
lea eax, [ebp - 0x2030]
mov ecx, dword [ebp - 0x26e0]
mov dword [esp], eax
call fcn.006c1d80
mov eax, dword [ebp - 0x2030]
sub esp, 4
jmp 0x452c8d
mov edx, esi
sar edx, 1
cmp edx, 7
mov eax, edx
mov dword [ebp - 0x2640], edx
ja 0x456dd2
cmp eax, 1
je 0x45723e
test edx, edx
lea ecx, [ebp - 0x2100]
jne 0x45778e
xor ebx, ebx
mov dword [ebp - 0x2104], eax
mov word [ecx + eax*2], bx
lea eax, [ebp - 0x2118]
mov ebx, dword [ebp - 0x2618]
mov dword [ebp - 0x2120], eax
mov eax, dword [ebp - 0x2614]
lea esi, [eax + eax]
mov eax, ebx
add eax, esi
je 0x45446c
test ebx, ebx
jne 0x45446c
mov dword [esp], 0x731c10
call fcn.006dfd70
mov edx, esi
sar edx, 1
cmp edx, 7
mov eax, edx
mov dword [ebp - 0x263c], edx
ja 0x456d72
cmp eax, 1
je 0x457217
lea ecx, [ebp - 0x2118]
test edx, edx
mov dword [ebp - 0x26e4], ecx
lea ecx, [ebp - 0x2120]
mov dword [ebp - 0x26ec], ecx
jne 0x457795
mov esi, dword [ebp - 0x26e4]
xor edx, edx
mov dword [ebp - 0x211c], eax
mov ecx, dword [0x8532c4]
mov word [esi + eax*2], dx
lea eax, [ebp - 0x2108]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x26ec]
mov dword [esp], eax
call fcn.00451740
mov eax, dword [ebp - 0x2120]
lea esi, [ebp - 0x2118]
sub esp, 8
cmp eax, esi
je 0x4544f5
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x2108]
lea esi, [ebp - 0x2100]
cmp eax, esi
je 0x45450d
mov dword [esp], eax
call fcn.006eb330
mov esi, dword [ebp - 0x26e8]
mov dword [esp], esi
call fcn.005e72a0
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x25fc]
mov ecx, dword [ebp - 0x26e0]
mov dword [esp + 8], esi
mov dword [esp], 0
mov dword [esp + 4], eax
call fcn.006bfc90
sub esp, 0x10
mov dword [esp], 0x73213e
call fcn.005e72a0
mov edx, 0x3fffffff
sub edx, dword [ebp - 0x25fc]
cmp eax, edx
ja 0x457b9b
mov ecx, dword [ebp - 0x26e0]
mov dword [esp + 4], eax
mov dword [esp], 0x73213e
call fcn.006c1ce0
lea eax, [ebp - 0x20d0]
mov esi, dword [ebp - 0x2600]
sub esp, 8
mov dword [ebp - 0x20d8], eax
mov eax, dword [ebp - 0x25fc]
lea ebx, [eax + eax]
mov eax, esi
add eax, ebx
je 0x453d97
test esi, esi
jne 0x453d97
mov dword [esp], 0x731c10
call fcn.006dfd70
lea eax, [ebp - 0x2018]
lea esi, [ebp - 0x2010]
mov dword [esp], 0x8451c0
mov dword [ebp - 0x26e4], eax
mov dword [ebp - 0x2018], esi
call fcn.005e72a0
lea ebx, [eax + eax]
mov edx, ebx
sar edx, 1
cmp edx, 7
mov dword [ebp - 0x2668], edx
ja 0x456f82
cmp edx, 1
mov eax, dword [ebp - 0x2018]
je 0x456505
test edx, edx
jne 0x456fb3
xor ebx, ebx
mov dword [ebp - 0x2014], edx
mov word [eax + edx*2], bx
mov dword [esp], 0x731ee2
call fcn.005e72a0
mov edx, 0x3fffffff
sub edx, dword [ebp - 0x2014]
cmp eax, edx
ja 0x457a45
mov ecx, dword [ebp - 0x26e4]
mov dword [esp + 4], eax
mov dword [esp], 0x731ee2
call fcn.006c1ce0
lea eax, [ebp - 0x22c8]
mov edx, dword [ebp - 0x2014]
lea edi, [ebp - 0x22d0]
sub esp, 8
mov dword [ebp - 0x22d0], eax
mov eax, dword [ebp - 0x2018]
mov ecx, edi
lea edx, [eax + edx*2]
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.0044d8f0
mov eax, dword [ebp - 0x2018]
mov edx, dword [ebp - 0x2014]
sub esp, 8
lea ebx, [ebp - 0x22e0]
lea ecx, [ebp - 0x22e8]
lea edx, [eax + edx*2]
mov dword [esp], eax
mov dword [ebp - 0x22e8], ebx
mov dword [esp + 4], edx
call fcn.0044d8f0
lea eax, [ebp - 0x22e8]
mov ecx, dword [0x8532c4]
sub esp, 8
mov dword [esp + 4], edi
mov dword [esp], eax
call fcn.004506e0
mov eax, dword [ebp - 0x22e8]
sub esp, 8
cmp eax, ebx
je 0x4546d7
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x22d0]
lea edi, [ebp - 0x22c8]
cmp eax, edi
je 0x4546ef
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x2018]
cmp eax, esi
je 0x451f21
mov dword [esp], eax
call fcn.006eb330
jmp 0x451f21
lea eax, [ebp - 0x2018]
lea esi, [ebp - 0x2010]
mov dword [esp], 0x8451c0
mov dword [ebp - 0x26e4], eax
mov dword [ebp - 0x2018], esi
call fcn.005e72a0
lea ebx, [eax + eax]
mov edx, ebx
sar edx, 1
cmp edx, 7
mov dword [ebp - 0x266c], edx
ja 0x45702a
cmp edx, 1
mov eax, dword [ebp - 0x2018]
je 0x456523
test edx, edx
jne 0x45705b
xor ecx, ecx
mov dword [ebp - 0x2014], edx
mov word [eax + edx*2], cx
mov dword [esp], 0x731e9c
call fcn.005e72a0
mov edx, 0x3fffffff
sub edx, dword [ebp - 0x2014]
cmp eax, edx
ja 0x457974
mov ecx, dword [ebp - 0x26e4]
mov dword [esp + 4], eax
mov dword [esp], 0x731e9c
call fcn.006c1ce0
lea eax, [ebp - 0x2358]
mov edx, dword [ebp - 0x2014]
lea edi, [ebp - 0x2360]
sub esp, 8
mov dword [ebp - 0x2360], eax
mov eax, dword [ebp - 0x2018]
mov ecx, edi
lea edx, [eax + edx*2]
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.0044d8f0
mov eax, dword [ebp - 0x2018]
mov edx, dword [ebp - 0x2014]
sub esp, 8
lea ebx, [ebp - 0x2370]
lea ecx, [ebp - 0x2378]
lea edx, [eax + edx*2]
mov dword [esp], eax
mov dword [ebp - 0x2378], ebx
mov dword [esp + 4], edx
call fcn.0044d8f0
lea eax, [ebp - 0x2378]
mov ecx, dword [0x8532c4]
sub esp, 8
mov dword [esp + 4], edi
mov dword [esp], eax
call fcn.004506e0
mov eax, dword [ebp - 0x2378]
sub esp, 8
cmp eax, ebx
je 0x454834
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x2360]
lea edi, [ebp - 0x2358]
cmp eax, edi
jne 0x451eeb
jmp 0x451ef3
lea eax, [ebp - 0x2650]
lea ecx, [ebp - 0x2180]
mov dword [esp + 4], 0
mov dword [esp], eax
call int.006c1e40
mov edx, dword [ebp - 0x2650]
sub esp, 8
mov dword [ebp - 0x2180], eax
mov dword [ebp - 0x2178], edx
mov dword [esp + 8], ebx
mov dword [esp + 4], 0x731f42
mov dword [esp], eax
call fcn.005e73f8
mov edx, dword [ebp - 0x2650]
mov eax, dword [ebp - 0x2180]
jmp 0x4537d8
lea eax, [ebp - 0x21c8]
mov dword [esp + 4], 0
mov ecx, eax
mov dword [ebp - 0x26ec], eax
lea eax, [ebp - 0x2658]
mov dword [esp], eax
call int.006c1e40
mov edx, dword [ebp - 0x2658]
sub esp, 8
mov dword [ebp - 0x21c8], eax
mov dword [ebp - 0x21c0], edx
mov ecx, dword [ebp - 0x26dc]
mov dword [esp + 4], ebx
mov dword [esp], eax
mov dword [esp + 8], ecx
call fcn.005e73f8
mov ebx, dword [ebp - 0x21c8]
mov eax, dword [ebp - 0x2658]
mov dword [ebp - 0x26e0], ebx
jmp 0x4522c0
lea eax, [ebp - 0x2198]
mov dword [esp + 4], 0
mov ecx, eax
mov dword [ebp - 0x26ec], eax
lea eax, [ebp - 0x2654]
mov dword [esp], eax
call int.006c1e40
mov edx, dword [ebp - 0x2654]
sub esp, 8
mov dword [ebp - 0x2198], eax
mov dword [ebp - 0x2190], edx
mov ecx, dword [ebp - 0x26dc]
mov dword [esp + 4], ebx
mov dword [esp], eax
mov dword [esp + 8], ecx
call fcn.005e73f8
mov ebx, dword [ebp - 0x2198]
mov eax, dword [ebp - 0x2654]
mov dword [ebp - 0x26e0], ebx
jmp 0x4536cd
mov eax, dword [str.HMS]
mov ecx, dword [eax + 0x10]
mov eax, dword [ecx]
call dword [eax + 0x20]
mov edi, eax
mov dword [ebp - 0x2700], eax
mov eax, dword [eax + 8]
mov edi, dword [edi + 0xc]
cmp eax, edi
mov dword [ebp - 0x26f8], edi
je 0x452e11
mov dword [ebp - 0x26dc], eax
lea eax, [ebp - 0x2048]
mov dword [ebp - 0x26fc], eax
lea eax, [ebp - 0x2040]
mov dword [ebp - 0x26ec], eax
mov esi, esi
lea edi, [edi]
mov edi, dword [ebp - 0x26dc]
xor eax, eax
mov ebx, dword [edi + 0x90]
cmp byte [ebx], 0
setne al
add eax, eax
sub ebx, eax
add ebx, dword [edi + 4]
mov eax, dword [ebp - 0x26ec]
mov dword [ebp - 0x2048], eax
test ebx, ebx
je 0x455464
mov dword [esp], ebx
call fcn.005e72a0
lea esi, [eax + eax]
mov edx, esi
sar edx, 1
cmp edx, 7
mov dword [ebp - 0x26b4], edx
ja 0x4551a0
cmp edx, 1
mov eax, dword [ebp - 0x2048]
je 0x4551f2
test edx, edx
jne 0x4551d1
xor ebx, ebx
mov dword [ebp - 0x2044], edx
mov word [eax + edx*2], bx
mov dword [esp + 4], 0x731e26
mov dword [esp], eax
call sub.SHELL32.dll_StrStrIW
sub esp, 8
test eax, eax
je 0x455543
mov edi, dword [ebp - 0x26dc]
xor eax, eax
mov ebx, dword [edi + 0x90]
cmp byte [ebx], 0
setne al
add eax, eax
sub ebx, eax
add ebx, dword [edi]
mov dword [esp], ebx
call fcn.005e72a0
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x2614]
lea ecx, [ebp - 0x2618]
mov dword [esp + 8], ebx
mov dword [esp], 0
mov dword [esp + 4], eax
call fcn.006bfc90
mov edi, dword [ebp - 0x26dc]
xor eax, eax
sub esp, 0x10
lea ebx, [ebp - 0x2538]
mov esi, dword [edi + 0x90]
cmp byte [esi], 0
setne al
add eax, eax
sub esi, eax
add esi, dword [edi + 4]
mov dword [ebp - 0x2540], ebx
test esi, esi
je 0x455590
mov dword [esp], esi
call fcn.005e72a0
lea edi, [eax + eax]
mov edx, edi
sar edx, 1
cmp edx, 7
mov dword [ebp - 0x26b0], edx
ja 0x455200
cmp edx, 1
mov eax, dword [ebp - 0x2540]
je 0x455470
test edx, edx
jne 0x455231
xor ecx, ecx
mov dword [ebp - 0x253c], edx
mov word [eax + edx*2], cx
mov dword [esp], 0x731c52
call fcn.005e72a0
lea ecx, [ebp - 0x2540]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x731c52
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.006bfc90
lea esi, [ebp - 0x2010]
lea edx, [eax + 8]
sub esp, 0x10
mov dword [ebp - 0x2018], esi
mov ecx, dword [eax]
cmp ecx, edx
je 0x4555b0
mov dword [ebp - 0x2018], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x2010], ecx
mov ecx, dword [eax + 4]
xor edi, edi
mov dword [ebp - 0x2014], ecx
mov dword [eax], edx
lea ecx, [ebp - 0x2618]
mov dword [eax + 4], 0
mov word [eax + 8], di
mov eax, dword [ebp - 0x2014]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2018]
mov dword [esp], eax
call fcn.006c1ce0
mov eax, dword [ebp - 0x2018]
sub esp, 8
cmp eax, esi
je 0x454bcc
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x2540]
cmp eax, ebx
je 0x454bde
mov dword [esp], eax
call fcn.006eb330
lea eax, [ebp - 0x2620]
lea ebx, [ebp - 0x2600]
mov dword [esp], eax
mov edi, eax
mov dword [ebp - 0x26e8], eax
call fcn.005e72a0
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x25fc]
mov ecx, ebx
mov dword [esp + 8], edi
mov dword [esp], 0
mov dword [ebp - 0x26e0], ebx
mov dword [esp + 4], eax
call fcn.006bfc90
mov edi, dword [ebp - 0x26dc]
xor eax, eax
sub esp, 0x10
mov ebx, dword [edi + 0x90]
cmp byte [ebx], 0
setne al
add eax, eax
sub ebx, eax
add ebx, dword [edi + 4]
lea eax, [ebp - 0x2520]
mov dword [ebp - 0x2528], eax
test ebx, ebx
je 0x4555a0
mov dword [esp], ebx
call fcn.005e72a0
lea edi, [eax + eax]
mov edx, edi
sar edx, 1
cmp edx, 7
mov dword [ebp - 0x26ac], edx
ja 0x455252
cmp edx, 1
mov eax, dword [ebp - 0x2528]
je 0x455490
test edx, edx
jne 0x455283
xor ecx, ecx
mov dword [ebp - 0x2524], edx
mov word [eax + edx*2], cx
mov dword [esp], 0x731e0c
call fcn.005e72a0
lea ecx, [ebp - 0x2528]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x731e0c
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.006bfc90
mov dword [ebp - 0x2018], esi
mov ecx, dword [eax]
lea edx, [eax + 8]
sub esp, 0x10
cmp ecx, edx
je 0x4555f1
mov dword [ebp - 0x2018], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x2010], ecx
mov ecx, dword [eax + 4]
xor edi, edi
mov dword [ebp - 0x2014], ecx
mov dword [eax], edx
mov dword [eax + 4], 0
mov word [eax + 8], di
mov eax, dword [ebp - 0x2014]
mov ecx, dword [ebp - 0x26e0]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2018]
mov dword [esp], eax
call fcn.006c1ce0
mov eax, dword [ebp - 0x2018]
sub esp, 8
cmp eax, esi
je 0x454d35
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x2528]
lea esi, [ebp - 0x2520]
cmp eax, esi
je 0x454d4d
mov dword [esp], eax
call fcn.006eb330
lea eax, [ebp - 0x24f0]
mov esi, dword [ebp - 0x2600]
mov dword [ebp - 0x24f8], eax
mov eax, dword [ebp - 0x25fc]
lea ebx, [eax + eax]
mov eax, esi
add eax, ebx
je 0x454d80
test esi, esi
jne 0x454d80
mov dword [esp], 0x731c10
call fcn.006dfd70
nop
mov edx, ebx
sar edx, 1
cmp edx, 7
mov eax, edx
mov dword [ebp - 0x26a8], edx
ja 0x455300
cmp eax, 1
je 0x4554a0
test edx, edx
lea ecx, [ebp - 0x24f0]
jne 0x456e70
xor ebx, ebx
mov dword [ebp - 0x24f4], eax
mov edi, dword [ebp - 0x2618]
mov word [ecx + eax*2], bx
mov eax, dword [ebp - 0x2614]
lea esi, [ebp - 0x2508]
mov dword [ebp - 0x2510], esi
lea ebx, [eax + eax]
mov eax, edi
add eax, ebx
je 0x454df0
test edi, edi
jne 0x454df0
mov dword [esp], 0x731c10
call fcn.006dfd70
lea esi, [esi]
mov edx, ebx
sar edx, 1
cmp edx, 7
mov eax, edx
mov dword [ebp - 0x26a4], edx
ja 0x455352
cmp eax, 1
je 0x4554b5
lea ecx, [ebp - 0x2510]
test edx, edx
mov dword [ebp - 0x26e4], esi
mov dword [ebp - 0x26f0], ecx
jne 0x456e50
mov edi, dword [ebp - 0x26e4]
xor edx, edx
mov dword [ebp - 0x250c], eax
mov ecx, dword [0x8532c4]
mov word [edi + eax*2], dx
lea eax, [ebp - 0x24f8]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x26f0]
mov dword [esp], eax
call fcn.00451740
mov eax, dword [ebp - 0x2510]
sub esp, 8
cmp eax, esi
je 0x454e6d
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x24f8]
lea esi, [ebp - 0x24f0]
cmp eax, esi
je 0x454e85
mov dword [esp], eax
call fcn.006eb330
lea eax, [ebp - 0x2018]
mov dword [esp + 4], 0x731e1e
mov ecx, dword [ebp - 0x26dc]
mov dword [esp + 8], eax
mov edi, eax
mov dword [ebp - 0x26e4], eax
mov eax, dword [ebp - 0x2700]
mov eax, dword [eax]
mov dword [esp], eax
call fcn.00412f30
sub esp, 0xc
mov dword [esp], edi
call fcn.005e72a0
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x2614]
lea ecx, [ebp - 0x2618]
mov dword [esp + 8], edi
mov dword [esp], 0
mov dword [esp + 4], eax
call fcn.006bfc90
sub esp, 0x10
lea esi, [ebp - 0x24d8]
mov dword [esp], edi
mov dword [ebp - 0x24e0], esi
call fcn.005e72a0
lea ebx, [eax + eax]
mov edx, ebx
sar edx, 1
cmp edx, 7
mov dword [ebp - 0x26a0], edx
ja 0x4552a4
cmp edx, 1
mov eax, dword [ebp - 0x24e0]
je 0x455480
test edx, edx
jne 0x4552d5
mov edi, dword [ebp - 0x26e8]
xor ebx, ebx
mov dword [ebp - 0x24dc], edx
mov word [eax + edx*2], bx
mov dword [esp], edi
call fcn.005e72a0
lea ecx, [ebp - 0x24e0]
mov dword [esp + 0xc], eax
mov dword [esp + 8], edi
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.006bfc90
lea edi, [ebp - 0x2028]
lea edx, [eax + 8]
sub esp, 0x10
mov dword [ebp - 0x2030], edi
mov ecx, dword [eax]
cmp ecx, edx
je 0x455630
mov dword [ebp - 0x2030], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x2028], ecx
mov ecx, dword [eax + 4]
mov dword [ebp - 0x202c], ecx
mov dword [eax], edx
xor ecx, ecx
mov edx, dword [ebp - 0x2030]
mov dword [eax + 4], 0
mov word [eax + 8], cx
mov eax, dword [ebp - 0x2600]
cmp edx, edi
je 0x455671
lea ebx, [ebp - 0x25f8]
cmp eax, ebx
je 0x455520
mov dword [ebp - 0x2600], edx
mov edx, dword [ebp - 0x202c]
test eax, eax
mov ecx, dword [ebp - 0x25f8]
mov dword [ebp - 0x25fc], edx
mov edx, dword [ebp - 0x2028]
mov dword [ebp - 0x25f8], edx
je 0x455018
mov dword [ebp - 0x2030], eax
mov dword [ebp - 0x2028], ecx
xor edx, edx
cmp eax, edi
mov dword [ebp - 0x202c], 0
mov word [eax], dx
je 0x455018
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x24e0]
cmp eax, esi
je 0x45502a
mov dword [esp], eax
call fcn.006eb330
lea eax, [ebp - 0x24a8]
mov esi, dword [ebp - 0x2600]
mov dword [ebp - 0x24b0], eax
mov eax, dword [ebp - 0x25fc]
lea ebx, [eax + eax]
mov eax, esi
add eax, ebx
je 0x455060
test esi, esi
jne 0x455060
mov dword [esp], 0x731c10
call fcn.006dfd70
nop
lea esi, [esi]
mov edx, ebx
sar edx, 1
cmp edx, 7
mov eax, edx
mov dword [ebp - 0x269c], edx
ja 0x4553b2
cmp eax, 1
je 0x455501
test edx, edx
lea ecx, [ebp - 0x24a8]
jne 0x456ec0
xor esi, esi
mov dword [ebp - 0x24ac], eax
mov edi, dword [ebp - 0x2618]
mov word [ecx + eax*2], si
mov eax, dword [ebp - 0x2614]
lea esi, [ebp - 0x24c0]
mov dword [ebp - 0x24c8], esi
lea ebx, [eax + eax]
mov eax, edi
add eax, ebx
je 0x4550d0
test edi, edi
jne 0x4550d0
mov dword [esp], 0x731c10
call fcn.006dfd70
lea esi, [esi]
mov edx, ebx
sar edx, 1
cmp edx, 7
mov eax, edx
mov dword [ebp - 0x2698], edx
ja 0x455404
cmp eax, 1
je 0x4554e0
lea ecx, [ebp - 0x24c8]
test edx, edx
mov dword [ebp - 0x26e0], esi
mov dword [ebp - 0x26e4], ecx
jne 0x456e80
mov edi, dword [ebp - 0x26e0]
xor ebx, ebx
mov dword [ebp - 0x24c4], eax
mov ecx, dword [0x8532c4]
mov word [edi + eax*2], bx
lea eax, [ebp - 0x24b0]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x26e4]
mov dword [esp], eax
call fcn.00451740
mov eax, dword [ebp - 0x24c8]
sub esp, 8
cmp eax, esi
je 0x45514d
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x24b0]
lea esi, [ebp - 0x24a8]
cmp eax, esi
je 0x455165
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x2048]
cmp eax, dword [ebp - 0x26ec]
je 0x45517b
mov dword [esp], eax
call fcn.006eb330
add dword [ebp - 0x26dc], 0xa0
mov eax, dword [ebp - 0x26dc]
cmp dword [ebp - 0x26f8], eax
jne 0x4549e0
jmp 0x452e11
lea eax, [ebp - 0x26b4]
mov ecx, dword [ebp - 0x26fc]
mov dword [esp + 4], 0
mov dword [esp], eax
call int.006c1e40
mov edx, dword [ebp - 0x26b4]
sub esp, 8
mov dword [ebp - 0x2048], eax
mov dword [ebp - 0x2040], edx
mov dword [esp + 8], esi
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.005e73f8
mov edx, dword [ebp - 0x26b4]
mov eax, dword [ebp - 0x2048]
jmp 0x454a44
movzx ecx, word [ebx]
mov word [eax], cx
jmp 0x454a44
lea eax, [ebp - 0x26b0]
lea ecx, [ebp - 0x2540]
mov dword [esp + 4], 0
mov dword [esp], eax
call int.006c1e40
mov edx, dword [ebp - 0x26b0]
sub esp, 8
mov dword [ebp - 0x2540], eax
mov dword [ebp - 0x2538], edx
mov dword [esp + 8], edi
mov dword [esp + 4], esi
mov dword [esp], eax
call fcn.005e73f8
mov edx, dword [ebp - 0x26b0]
mov eax, dword [ebp - 0x2540]
jmp 0x454b18
lea eax, [ebp - 0x26ac]
lea ecx, [ebp - 0x2528]
mov dword [esp + 4], 0
mov dword [esp], eax
call int.006c1e40
mov edx, dword [ebp - 0x26ac]
sub esp, 8
mov dword [ebp - 0x2528], eax
mov dword [ebp - 0x2520], edx
mov dword [esp + 8], edi
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.005e73f8
mov edx, dword [ebp - 0x26ac]
mov eax, dword [ebp - 0x2528]
jmp 0x454c87
lea eax, [ebp - 0x26a0]
lea ecx, [ebp - 0x24e0]
mov dword [esp + 4], 0
mov dword [esp], eax
call int.006c1e40
mov edx, dword [ebp - 0x26a0]
sub esp, 8
mov dword [ebp - 0x24e0], eax
mov dword [ebp - 0x24d8], edx
mov edi, dword [ebp - 0x26e4]
mov dword [esp + 8], ebx
mov dword [esp], eax
mov dword [esp + 4], edi
call fcn.005e73f8
mov edx, dword [ebp - 0x26a0]
mov eax, dword [ebp - 0x24e0]
jmp 0x454f28
lea eax, [ebp - 0x26a8]
lea ecx, [ebp - 0x24f8]
mov dword [esp + 4], 0
mov dword [esp], eax
call int.006c1e40
mov edx, dword [ebp - 0x26a8]
sub esp, 8
mov dword [ebp - 0x24f8], eax
mov dword [ebp - 0x24f0], edx
mov dword [esp + 8], ebx
mov dword [esp + 4], esi
mov dword [esp], eax
call fcn.005e73f8
mov eax, dword [ebp - 0x26a8]
mov ecx, dword [ebp - 0x24f8]
jmp 0x454dac
lea eax, [ebp - 0x2510]
mov dword [esp + 4], 0
mov ecx, eax
mov dword [ebp - 0x26f0], eax
lea eax, [ebp - 0x26a4]
mov dword [esp], eax
call int.006c1e40
mov edx, dword [ebp - 0x26a4]
sub esp, 8
mov dword [ebp - 0x2510], eax
mov dword [ebp - 0x2508], edx
mov dword [esp + 4], edi
mov dword [esp + 8], ebx
mov dword [esp], eax
call fcn.005e73f8
mov edi, dword [ebp - 0x2510]
mov eax, dword [ebp - 0x26a4]
mov dword [ebp - 0x26e4], edi
jmp 0x454e28
lea eax, [ebp - 0x269c]
lea ecx, [ebp - 0x24b0]
mov dword [esp + 4], 0
mov dword [esp], eax
call int.006c1e40
mov edx, dword [ebp - 0x269c]
sub esp, 8
mov dword [ebp - 0x24b0], eax
mov dword [ebp - 0x24a8], edx
mov dword [esp + 8], ebx
mov dword [esp + 4], esi
mov dword [esp], eax
call fcn.005e73f8
mov eax, dword [ebp - 0x269c]
mov ecx, dword [ebp - 0x24b0]
jmp 0x45508c
lea eax, [ebp - 0x24c8]
mov dword [esp + 4], 0
mov ecx, eax
mov dword [ebp - 0x26e4], eax
lea eax, [ebp - 0x2698]
mov dword [esp], eax
call int.006c1e40
mov edx, dword [ebp - 0x2698]
sub esp, 8
mov dword [ebp - 0x24c8], eax
mov dword [ebp - 0x24c0], edx
mov dword [esp + 4], edi
mov dword [esp + 8], ebx
mov dword [esp], eax
call fcn.005e73f8
mov edi, dword [ebp - 0x24c8]
mov eax, dword [ebp - 0x2698]
mov dword [ebp - 0x26e0], edi
jmp 0x455108
mov dword [esp], 0x731c10
call fcn.006dfd70
movzx ecx, word [esi]
mov word [eax], cx
jmp 0x454b18
movzx ecx, word [ebp - 0x2018]
mov word [eax], cx
jmp 0x454f28
movzx ecx, word [ebx]
mov word [eax], cx
jmp 0x454c87
movzx edx, word [esi]
lea ecx, [ebp - 0x24f0]
mov word [ebp - 0x24f0], dx
jmp 0x454dac
movzx edx, word [edi]
lea edi, [ebp - 0x2510]
mov dword [ebp - 0x26e4], esi
mov dword [ebp - 0x26f0], edi
mov word [ebp - 0x2508], dx
jmp 0x454e28
movzx edx, word [edi]
lea edi, [ebp - 0x24c8]
mov dword [ebp - 0x26e0], esi
mov dword [ebp - 0x26e4], edi
mov word [ebp - 0x24c0], dx
jmp 0x455108
movzx edx, word [esi]
lea ecx, [ebp - 0x24a8]
mov word [ebp - 0x24a8], dx
jmp 0x45508c
mov eax, dword [ebp - 0x202c]
mov dword [ebp - 0x2600], edx
mov dword [ebp - 0x25fc], eax
mov eax, dword [ebp - 0x2028]
mov dword [ebp - 0x25f8], eax
jmp 0x455018
mov eax, dword [ebp - 0x2048]
mov dword [esp + 4], 0x731e32
mov dword [esp], eax
call sub.SHELL32.dll_StrStrIW
sub esp, 8
test eax, eax
jne 0x454a6b
mov eax, dword [ebp - 0x2048]
mov dword [esp + 4], 0x731e4a
mov dword [esp], eax
call sub.SHELL32.dll_StrStrIW
sub esp, 8
test eax, eax
jne 0x454a6b
jmp 0x455165
mov dword [esp], 0x731c10
call fcn.006dfd70
lea esi, [esi]
mov dword [esp], 0x731c10
call fcn.006dfd70
lea esi, [esi]
mov ecx, dword [eax + 0x10]
mov edi, dword [eax + 0xc]
mov dword [ebp - 0x26e0], ecx
mov ecx, dword [eax + 0x14]
mov dword [ebp - 0x26e4], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x200c], edi
mov edi, dword [ebp - 0x26e0]
mov dword [ebp - 0x2010], ecx
mov dword [ebp - 0x2008], edi
mov edi, dword [ebp - 0x26e4]
mov dword [ebp - 0x2004], edi
jmp 0x454b81
mov ecx, dword [eax + 0x14]
mov edi, dword [eax + 0xc]
mov ebx, dword [eax + 0x10]
mov dword [ebp - 0x26e4], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x200c], edi
mov edi, dword [ebp - 0x26e4]
mov dword [ebp - 0x2008], ebx
mov dword [ebp - 0x2010], ecx
mov dword [ebp - 0x2004], edi
jmp 0x454cea
mov ecx, dword [eax + 0x10]
mov ebx, dword [eax + 0xc]
mov dword [ebp - 0x26e4], ecx
mov ecx, dword [eax + 0x14]
mov dword [ebp - 0x26e8], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x2024], ebx
mov ebx, dword [ebp - 0x26e4]
mov dword [ebp - 0x2028], ecx
mov dword [ebp - 0x2020], ebx
mov ebx, dword [ebp - 0x26e8]
mov dword [ebp - 0x201c], ebx
jmp 0x454f8f
lea eax, [ebp - 0x2030]
mov ecx, dword [ebp - 0x26e0]
mov dword [esp], eax
call fcn.006c1d80
mov eax, dword [ebp - 0x2030]
sub esp, 4
jmp 0x454ffd
mov eax, dword [str.HMS]
mov ecx, dword [eax + 0x10]
mov eax, dword [ecx]
call dword [eax + 0x20]
mov esi, eax
mov dword [ebp - 0x2700], eax
mov eax, dword [eax + 8]
mov edi, dword [esi + 0xc]
cmp edi, eax
mov dword [ebp - 0x26f8], edi
je 0x452e11
mov dword [ebp - 0x26dc], eax
lea eax, [ebp - 0x2048]
mov dword [ebp - 0x26fc], eax
lea eax, [ebp - 0x2040]
mov dword [ebp - 0x26ec], eax
lea esi, [esi]
mov edi, dword [ebp - 0x26dc]
xor eax, eax
mov ebx, dword [edi + 0x90]
cmp byte [ebx], 0
setne al
add eax, eax
sub ebx, eax
add ebx, dword [edi + 4]
mov eax, dword [ebp - 0x26ec]
mov dword [ebp - 0x2048], eax
test ebx, ebx
je 0x4560f4
mov dword [esp], ebx
call fcn.005e72a0
lea esi, [eax + eax]
mov edx, esi
sar edx, 1
cmp edx, 7
mov dword [ebp - 0x2694], edx
ja 0x455e65
cmp edx, 1
mov eax, dword [ebp - 0x2048]
je 0x455ec0
test edx, edx
jne 0x455e96
xor ecx, ecx
mov dword [ebp - 0x2044], edx
mov word [eax + edx*2], cx
mov ecx, dword [str.HMS]
mov dword [esp], eax
call fcn.0042d930
sub esp, 4
test al, al
je 0x455a55
mov esi, dword [ebp - 0x26dc]
xor eax, eax
mov ebx, dword [esi + 0x90]
cmp byte [ebx], 0
setne al
add eax, eax
sub ebx, eax
add ebx, dword [esi]
mov dword [esp], ebx
call fcn.005e72a0
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x2614]
lea ecx, [ebp - 0x2618]
mov dword [esp + 8], ebx
mov dword [esp], 0
mov dword [esp + 4], eax
call fcn.006bfc90
sub esp, 0x10
lea esi, [ebp - 0x2490]
mov dword [esp], 0x731c52
call fcn.005e72a0
mov ebx, eax
xor eax, eax
lea ecx, [ebp - 0x2498]
mov word [ebp - 0x2490], ax
mov eax, dword [ebp - 0x2044]
mov dword [ebp - 0x2498], esi
mov dword [ebp - 0x2494], 0
add eax, ebx
mov dword [esp], eax
call fcn.006c1b30
mov eax, 0x3fffffff
sub eax, dword [ebp - 0x2494]
sub esp, 4
cmp ebx, eax
ja 0x4577de
lea ecx, [ebp - 0x2498]
mov dword [esp + 4], ebx
mov dword [esp], 0x731c52
call fcn.006c1ce0
mov eax, dword [ebp - 0x2044]
sub esp, 8
lea ecx, [ebp - 0x2498]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2048]
mov dword [esp], eax
call fcn.006c1ce0
mov eax, dword [ebp - 0x2494]
sub esp, 8
lea ecx, [ebp - 0x2618]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2498]
mov dword [esp], eax
call fcn.006c1ce0
mov eax, dword [ebp - 0x2498]
sub esp, 8
cmp eax, esi
je 0x455878
mov dword [esp], eax
call fcn.006eb330
lea eax, [ebp - 0x2620]
lea edi, [ebp - 0x2600]
mov dword [esp], eax
mov esi, eax
mov dword [ebp - 0x26e8], eax
call fcn.005e72a0
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x25fc]
mov ecx, edi
mov dword [esp + 8], esi
mov dword [esp], 0
mov dword [ebp - 0x26e0], edi
mov dword [esp + 4], eax
call fcn.006bfc90
sub esp, 0x10
lea esi, [ebp - 0x2478]
xor edi, edi
mov dword [esp], 0x731e0c
call fcn.005e72a0
mov ebx, eax
mov eax, dword [ebp - 0x2044]
lea ecx, [ebp - 0x2480]
mov dword [ebp - 0x2480], esi
mov dword [ebp - 0x247c], 0
mov word [ebp - 0x2478], di
add eax, ebx
mov dword [esp], eax
call fcn.006c1b30
mov eax, 0x3fffffff
sub eax, dword [ebp - 0x247c]
sub esp, 4
cmp ebx, eax
ja 0x457800
lea ecx, [ebp - 0x2480]
mov dword [esp + 4], ebx
mov dword [esp], 0x731e0c
call fcn.006c1ce0
mov eax, dword [ebp - 0x2044]
sub esp, 8
lea ecx, [ebp - 0x2480]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2048]
mov dword [esp], eax
call fcn.006c1ce0
mov eax, dword [ebp - 0x247c]
sub esp, 8
mov ecx, dword [ebp - 0x26e0]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2480]
mov dword [esp], eax
call fcn.006c1ce0
mov eax, dword [ebp - 0x2480]
sub esp, 8
cmp eax, esi
je 0x455983
mov dword [esp], eax
call fcn.006eb330
lea eax, [ebp - 0x2448]
mov esi, dword [ebp - 0x2600]
mov dword [ebp - 0x2450], eax
mov eax, dword [ebp - 0x25fc]
lea ebx, [eax + eax]
mov eax, esi
add eax, ebx
je 0x455a90
test esi, esi
jne 0x455a90
mov dword [esp], 0x731c10
call fcn.006dfd70
lea esi, [esi]
mov edx, ebx
sar edx, 1
cmp edx, 7
mov eax, edx
mov dword [ebp - 0x267c], edx
ja 0x456094
cmp eax, 1
je 0x456155
lea ecx, [ebp - 0x2408]
test edx, edx
mov dword [ebp - 0x26e0], esi
mov dword [ebp - 0x26e4], ecx
jne 0x456eb0
mov edi, dword [ebp - 0x26e0]
xor ecx, ecx
mov dword [ebp - 0x2404], eax
mov word [edi + eax*2], cx
lea eax, [ebp - 0x23f0]
mov ecx, dword [0x8532c4]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x26e4]
mov dword [esp], eax
call fcn.00451740
mov eax, dword [ebp - 0x2408]
sub esp, 8
cmp eax, esi
je 0x455a3d
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x23f0]
lea edi, [ebp - 0x23e8]
cmp eax, edi
je 0x455a55
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x2048]
cmp eax, dword [ebp - 0x26ec]
je 0x455a6b
mov dword [esp], eax
call fcn.006eb330
add dword [ebp - 0x26dc], 0xa0
mov eax, dword [ebp - 0x26dc]
cmp dword [ebp - 0x26f8], eax
jne 0x4556e0
jmp 0x452e11
mov edx, ebx
sar edx, 1
cmp edx, 7
mov eax, edx
mov dword [ebp - 0x2690], edx
ja 0x455f90
cmp eax, 1
je 0x456140
test edx, edx
lea ecx, [ebp - 0x2448]
jne 0x456e90
xor esi, esi
mov dword [ebp - 0x244c], eax
mov edi, dword [ebp - 0x2618]
mov word [ecx + eax*2], si
mov eax, dword [ebp - 0x2614]
lea esi, [ebp - 0x2460]
mov dword [ebp - 0x2468], esi
lea ebx, [eax + eax]
mov eax, edi
add eax, ebx
je 0x455b00
test edi, edi
jne 0x455b00
mov dword [esp], 0x731c10
call fcn.006dfd70
lea esi, [esi]
mov edx, ebx
sar edx, 1
cmp edx, 7
mov eax, edx
mov dword [ebp - 0x268c], edx
ja 0x456034
cmp eax, 1
je 0x456110
lea ecx, [ebp - 0x2468]
test edx, edx
mov dword [ebp - 0x26e4], esi
mov dword [ebp - 0x26f0], ecx
jne 0x456e60
mov edi, dword [ebp - 0x26e4]
xor ebx, ebx
mov dword [ebp - 0x2464], eax
mov ecx, dword [0x8532c4]
mov word [edi + eax*2], bx
lea eax, [ebp - 0x2450]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x26f0]
mov dword [esp], eax
call fcn.00451740
mov eax, dword [ebp - 0x2468]
sub esp, 8
cmp eax, esi
je 0x455b7d
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x2450]
lea esi, [ebp - 0x2448]
cmp eax, esi
je 0x455b95
mov dword [esp], eax
call fcn.006eb330
lea eax, [ebp - 0x2018]
mov dword [esp + 4], 0x731e1e
mov ecx, dword [ebp - 0x26dc]
mov dword [esp + 8], eax
mov edi, eax
mov dword [ebp - 0x26e4], eax
mov eax, dword [ebp - 0x2700]
mov eax, dword [eax]
mov dword [esp], eax
call fcn.00412f30
sub esp, 0xc
lea esi, [ebp - 0x2430]
mov dword [esp], edi
mov dword [ebp - 0x2438], esi
call fcn.005e72a0
lea ebx, [eax + eax]
mov edx, ebx
sar edx, 1
cmp edx, 7
mov dword [ebp - 0x2688], edx
ja 0x455f30
cmp edx, 1
mov eax, dword [ebp - 0x2438]
je 0x456100
test edx, edx
jne 0x455f61
xor ecx, ecx
cmp eax, esi
mov dword [ebp - 0x2434], edx
mov word [eax + edx*2], cx
mov ecx, dword [ebp - 0x2618]
je 0x456221
lea edi, [ebp - 0x2610]
cmp ecx, edi
je 0x4561c0
mov dword [ebp - 0x2618], eax
mov eax, dword [ebp - 0x2430]
test ecx, ecx
mov ebx, dword [ebp - 0x2610]
mov dword [ebp - 0x2614], edx
mov dword [ebp - 0x2610], eax
je 0x455c7a
mov dword [ebp - 0x2438], ecx
mov dword [ebp - 0x2430], ebx
xor edi, edi
cmp ecx, esi
mov dword [ebp - 0x2434], 0
mov word [ecx], di
je 0x455c7a
mov dword [esp], ecx
call fcn.006eb330
mov eax, dword [ebp - 0x26e4]
lea esi, [ebp - 0x2418]
mov dword [ebp - 0x2420], esi
mov dword [esp], eax
call fcn.005e72a0
lea ebx, [eax + eax]
mov edx, ebx
sar edx, 1
cmp edx, 7
mov dword [ebp - 0x2684], edx
ja 0x455ed0
cmp edx, 1
mov eax, dword [ebp - 0x2420]
je 0x456131
test edx, edx
jne 0x455f01
mov edi, dword [ebp - 0x26e8]
xor ebx, ebx
mov dword [ebp - 0x241c], edx
mov word [eax + edx*2], bx
mov dword [esp], edi
call fcn.005e72a0
lea ecx, [ebp - 0x2420]
mov dword [esp + 0xc], eax
mov dword [esp + 8], edi
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.006bfc90
lea edi, [ebp - 0x2028]
lea edx, [eax + 8]
sub esp, 0x10
mov dword [ebp - 0x2030], edi
mov ecx, dword [eax]
cmp ecx, edx
je 0x4561e0
mov dword [ebp - 0x2030], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x2028], ecx
mov ecx, dword [eax + 4]
mov dword [ebp - 0x202c], ecx
mov dword [eax], edx
xor ecx, ecx
mov edx, dword [ebp - 0x2030]
mov dword [eax + 4], 0
mov word [eax + 8], cx
mov eax, dword [ebp - 0x2600]
cmp edx, edi
je 0x456243
lea ebx, [ebp - 0x25f8]
cmp eax, ebx
je 0x456195
mov dword [ebp - 0x2600], edx
mov edx, dword [ebp - 0x202c]
test eax, eax
mov ecx, dword [ebp - 0x25f8]
mov dword [ebp - 0x25fc], edx
mov edx, dword [ebp - 0x2028]
mov dword [ebp - 0x25f8], edx
je 0x455db1
mov dword [ebp - 0x2030], eax
mov dword [ebp - 0x2028], ecx
xor edx, edx
cmp eax, edi
mov dword [ebp - 0x202c], 0
mov word [eax], dx
je 0x455db1
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x2420]
cmp eax, esi
je 0x455dc3
mov dword [esp], eax
call fcn.006eb330
lea eax, [ebp - 0x23e8]
mov esi, dword [ebp - 0x2600]
mov dword [ebp - 0x23f0], eax
mov eax, dword [ebp - 0x25fc]
lea ebx, [eax + eax]
mov eax, esi
add eax, ebx
je 0x455df4
test esi, esi
jne 0x455df4
mov dword [esp], 0x731c10
call fcn.006dfd70
mov edx, ebx
sar edx, 1
cmp edx, 7
mov eax, edx
mov dword [ebp - 0x2680], edx
ja 0x455fe2
cmp eax, 1
je 0x456180
test edx, edx
lea ecx, [ebp - 0x23e8]
jne 0x456ea0
xor ebx, ebx
mov dword [ebp - 0x23ec], eax
mov edi, dword [ebp - 0x2618]
mov word [ecx + eax*2], bx
mov eax, dword [ebp - 0x2614]
lea esi, [ebp - 0x2400]
mov dword [ebp - 0x2408], esi
lea ebx, [eax + eax]
mov eax, edi
add eax, ebx
je 0x4559c0
test edi, edi
jne 0x4559c0
mov dword [esp], 0x731c10
call fcn.006dfd70
lea eax, [ebp - 0x2694]
mov ecx, dword [ebp - 0x26fc]
mov dword [esp + 4], 0
mov dword [esp], eax
call int.006c1e40
mov edx, dword [ebp - 0x2694]
sub esp, 8
mov dword [ebp - 0x2048], eax
mov dword [ebp - 0x2040], edx
mov dword [esp + 8], esi
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.005e73f8
mov edx, dword [ebp - 0x2694]
mov eax, dword [ebp - 0x2048]
jmp 0x455744
movzx ecx, word [ebx]
mov word [eax], cx
jmp 0x455744
lea eax, [ebp - 0x2684]
lea ecx, [ebp - 0x2420]
mov dword [esp + 4], 0
mov dword [esp], eax
call int.006c1e40
mov edx, dword [ebp - 0x2684]
sub esp, 8
mov dword [ebp - 0x2420], eax
mov dword [ebp - 0x2418], edx
mov edi, dword [ebp - 0x26e4]
mov dword [esp + 8], ebx
mov dword [esp], eax
mov dword [esp + 4], edi
call fcn.005e73f8
mov edx, dword [ebp - 0x2684]
mov eax, dword [ebp - 0x2420]
jmp 0x455cc1
lea eax, [ebp - 0x2688]
lea ecx, [ebp - 0x2438]
mov dword [esp + 4], 0
mov dword [esp], eax
call int.006c1e40
mov edx, dword [ebp - 0x2688]
sub esp, 8
mov dword [ebp - 0x2438], eax
mov dword [ebp - 0x2430], edx
mov edi, dword [ebp - 0x26e4]
mov dword [esp + 8], ebx
mov dword [esp], eax
mov dword [esp + 4], edi
call fcn.005e73f8
mov edx, dword [ebp - 0x2688]
mov eax, dword [ebp - 0x2438]
jmp 0x455c09
lea eax, [ebp - 0x2690]
lea ecx, [ebp - 0x2450]
mov dword [esp + 4], 0
mov dword [esp], eax
call int.006c1e40
mov edx, dword [ebp - 0x2690]
sub esp, 8
mov dword [ebp - 0x2450], eax
mov dword [ebp - 0x2448], edx
mov dword [esp + 8], ebx
mov dword [esp + 4], esi
mov dword [esp], eax
call fcn.005e73f8
mov eax, dword [ebp - 0x2690]
mov ecx, dword [ebp - 0x2450]
jmp 0x455abc
lea eax, [ebp - 0x2680]
lea ecx, [ebp - 0x23f0]
mov dword [esp + 4], 0
mov dword [esp], eax
call int.006c1e40
mov edx, dword [ebp - 0x2680]
sub esp, 8
mov dword [ebp - 0x23f0], eax
mov dword [ebp - 0x23e8], edx
mov dword [esp + 8], ebx
mov dword [esp + 4], esi
mov dword [esp], eax
call fcn.005e73f8
mov eax, dword [ebp - 0x2680]
mov ecx, dword [ebp - 0x23f0]
jmp 0x455e20
lea eax, [ebp - 0x2468]
mov dword [esp + 4], 0
mov ecx, eax
mov dword [ebp - 0x26f0], eax
lea eax, [ebp - 0x268c]
mov dword [esp], eax
call int.006c1e40
mov edx, dword [ebp - 0x268c]
sub esp, 8
mov dword [ebp - 0x2468], eax
mov dword [ebp - 0x2460], edx
mov dword [esp + 4], edi
mov dword [esp + 8], ebx
mov dword [esp], eax
call fcn.005e73f8
mov edi, dword [ebp - 0x2468]
mov eax, dword [ebp - 0x268c]
mov dword [ebp - 0x26e4], edi
jmp 0x455b38
lea eax, [ebp - 0x2408]
mov dword [esp + 4], 0
mov ecx, eax
mov dword [ebp - 0x26e4], eax
lea eax, [ebp - 0x267c]
mov dword [esp], eax
call int.006c1e40
mov edx, dword [ebp - 0x267c]
sub esp, 8
mov dword [ebp - 0x2408], eax
mov dword [ebp - 0x2400], edx
mov dword [esp + 4], edi
mov dword [esp + 8], ebx
mov dword [esp], eax
call fcn.005e73f8
mov edi, dword [ebp - 0x2408]
mov eax, dword [ebp - 0x267c]
mov dword [ebp - 0x26e0], edi
jmp 0x4559f8
mov dword [esp], 0x731c10
call fcn.006dfd70
movzx ecx, word [ebp - 0x2018]
mov word [eax], cx
jmp 0x455c09
movzx edx, word [edi]
lea edi, [ebp - 0x2468]
mov dword [ebp - 0x26e4], esi
mov dword [ebp - 0x26f0], edi
mov word [ebp - 0x2460], dx
jmp 0x455b38
movzx ecx, word [ebp - 0x2018]
mov word [eax], cx
jmp 0x455cc1
movzx edx, word [esi]
lea ecx, [ebp - 0x2448]
mov word [ebp - 0x2448], dx
jmp 0x455abc
movzx edx, word [edi]
lea edi, [ebp - 0x2408]
mov dword [ebp - 0x26e0], esi
mov dword [ebp - 0x26e4], edi
mov word [ebp - 0x2400], dx
jmp 0x4559f8
movzx edx, word [esi]
lea ecx, [ebp - 0x23e8]
mov word [ebp - 0x23e8], dx
jmp 0x455e20
mov eax, dword [ebp - 0x202c]
mov dword [ebp - 0x2600], edx
mov dword [ebp - 0x25fc], eax
mov eax, dword [ebp - 0x2028]
mov dword [ebp - 0x25f8], eax
jmp 0x455db1
mov dword [ebp - 0x2618], eax
mov eax, dword [ebp - 0x2430]
mov dword [ebp - 0x2614], edx
mov dword [ebp - 0x2610], eax
jmp 0x455c7a
mov ecx, dword [eax + 0x10]
mov ebx, dword [eax + 0xc]
mov dword [ebp - 0x26e4], ecx
mov ecx, dword [eax + 0x14]
mov dword [ebp - 0x26e8], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x2024], ebx
mov ebx, dword [ebp - 0x26e4]
mov dword [ebp - 0x2028], ecx
mov dword [ebp - 0x2020], ebx
mov ebx, dword [ebp - 0x26e8]
mov dword [ebp - 0x201c], ebx
jmp 0x455d28
lea eax, [ebp - 0x2438]
lea ecx, [ebp - 0x2618]
mov dword [esp], eax
call fcn.006c1d80
mov ecx, dword [ebp - 0x2438]
sub esp, 4
jmp 0x455c5f
lea eax, [ebp - 0x2030]
mov ecx, dword [ebp - 0x26e0]
mov dword [esp], eax
call fcn.006c1d80
mov eax, dword [ebp - 0x2030]
sub esp, 4
jmp 0x455d96
lea eax, [ebp - 0x264c]
lea ecx, [ebp - 0x2168]
mov dword [esp + 4], 0
mov dword [esp], eax
call int.006c1e40
mov edx, dword [ebp - 0x264c]
sub esp, 8
mov dword [ebp - 0x2168], eax
mov dword [ebp - 0x2160], edx
mov dword [esp + 8], ebx
mov dword [esp + 4], 0x73208c
mov dword [esp], eax
call fcn.005e73f8
mov edx, dword [ebp - 0x264c]
mov eax, dword [ebp - 0x2168]
jmp 0x453a1a
mov eax, ecx
jmp 0x4533c1
mov eax, esi
jmp 0x45341b
mov eax, esi
jmp 0x4534cd
mov eax, ecx
jmp 0x453473
mov dword [esp + 4], 0x73204c
mov dword [esp], ebx
call fcn.005e7488
mov eax, dword [0x8531c0]
jmp 0x4539b6
mov dword [esp + 4], 0x732030
mov dword [esp], ebx
call fcn.005e7488
mov eax, dword [0x8531c0]
jmp 0x4539ab
lea eax, [ebp - 0x2150]
mov dword [esp + 4], 0
mov ecx, eax
mov dword [ebp - 0x26ec], eax
lea eax, [ebp - 0x2644]
mov dword [esp], eax
call int.006c1e40
mov edx, dword [ebp - 0x2644]
sub esp, 8
mov dword [ebp - 0x2150], eax
mov dword [ebp - 0x2148], edx
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp], eax
call fcn.005e73f8
mov esi, dword [ebp - 0x2150]
mov eax, dword [ebp - 0x2644]
mov dword [ebp - 0x26e0], esi
jmp 0x453b8e
lea eax, [ebp - 0x2648]
lea ecx, [ebp - 0x2138]
mov dword [esp + 4], 0
mov dword [esp], eax
call int.006c1e40
mov edx, dword [ebp - 0x2648]
sub esp, 8
mov dword [ebp - 0x2138], eax
mov dword [ebp - 0x2130], edx
mov dword [esp + 8], ebx
mov dword [esp + 4], esi
mov dword [esp], eax
call fcn.005e73f8
mov eax, dword [ebp - 0x2648]
mov ecx, dword [ebp - 0x2138]
jmp 0x45439c
mov dword [esp + 4], 0x731faa
mov dword [esp], ebx
call fcn.005e7488
mov eax, dword [0x8532c4]
cmp byte [eax + 0x19b], 0
jne 0x453976
mov dword [esp + 4], 0x731fc4
mov dword [esp], ebx
call fcn.005e7488
mov eax, dword [0x8532c4]
cmp byte [eax + 0x19c], 0
je 0x453983
mov dword [esp + 4], 0x731fe2
mov dword [esp], ebx
call fcn.005e7488
mov eax, dword [0x8532c4]
cmp byte [eax + 0x19d], 0
je 0x453990
mov dword [esp + 4], 0x731ffc
mov dword [esp], ebx
call fcn.005e7488
mov eax, dword [0x8531c0]
test eax, 0x200000
je 0x4539a0
mov dword [esp + 4], str.tL_rE
mov dword [esp], ebx
call fcn.005e7488
mov eax, dword [0x8531c0]
jmp 0x4539a0
movzx edx, word [ebx]
lea ebx, [ebp - 0x21c8]
mov dword [ebp - 0x26e0], edi
mov dword [ebp - 0x26ec], ebx
mov word [ebp - 0x21c0], dx
jmp 0x4522c0
lea eax, [ebp - 0x2678]
mov ecx, dword [ebp - 0x26dc]
mov dword [esp + 4], 0
mov dword [esp], eax
call int.006c1e40
mov edx, dword [ebp - 0x2678]
sub esp, 8
mov dword [ebp - 0x2030], eax
mov dword [ebp - 0x2028], edx
mov dword [esp + 8], ebx
mov dword [esp + 4], esi
mov dword [esp], eax
call fcn.005e73f8
mov edx, dword [ebp - 0x2678]
mov eax, dword [ebp - 0x2030]
jmp 0x45306d
movzx ecx, word [0x8451c0]
mov word [eax], cx
jmp 0x454604
movzx ecx, word [0x8391c0]
mov word [eax], cx
jmp 0x45243f
movzx ecx, word [0x8451c0]
mov word [eax], cx
jmp 0x454761
mov edx, dword [ebp - 0x26dc]
sar edx, 1
cmp edx, 7
mov eax, edx
mov dword [ebp - 0x2670], edx
ja 0x4566e2
cmp eax, 1
je 0x456765
lea ecx, [ebp - 0x23a8]
test edx, edx
mov dword [ebp - 0x26e0], esi
mov dword [ebp - 0x26ec], ecx
jne 0x456ed0
mov ebx, dword [ebp - 0x26e0]
xor edx, edx
mov dword [ebp - 0x23a4], eax
mov ecx, dword [0x8532c4]
mov word [ebx + eax*2], dx
lea eax, [ebp - 0x2390]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x26ec]
mov dword [esp], eax
call fcn.00451740
mov eax, dword [ebp - 0x23a8]
sub esp, 8
cmp eax, esi
je 0x4565b3
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x2390]
lea esi, [ebp - 0x2388]
cmp eax, esi
je 0x4565cb
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x26e4]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x26e8]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
sub esp, 8
test eax, eax
jne 0x4530e2
mov eax, dword [ebp - 0x26e8]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_FindClose]
sub esp, 4
mov eax, dword [ebp - 0x2030]
cmp eax, edi
je 0x456613
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [0x8532c4]
jmp 0x451bd8
mov edx, ebx
sar edx, 1
cmp edx, 7
mov eax, edx
mov dword [ebp - 0x2674], edx
ja 0x456690
cmp eax, 1
je 0x456750
test edx, edx
lea ecx, [ebp - 0x2388]
jne 0x456ee0
xor ebx, ebx
mov dword [ebp - 0x238c], eax
lea esi, [ebp - 0x23a0]
mov word [ecx + eax*2], bx
mov eax, dword [ebp - 0x2614]
mov ebx, dword [ebp - 0x2618]
mov dword [ebp - 0x23a8], esi
add eax, eax
mov dword [ebp - 0x26dc], eax
add eax, ebx
je 0x456532
test ebx, ebx
jne 0x456532
mov dword [esp], 0x731c10
call fcn.006dfd70
lea eax, [ebp - 0x2674]
lea ecx, [ebp - 0x2390]
mov dword [esp + 4], 0
mov dword [esp], eax
call int.006c1e40
mov edx, dword [ebp - 0x2674]
sub esp, 8
mov dword [ebp - 0x2390], eax
mov dword [ebp - 0x2388], edx
mov dword [esp + 8], ebx
mov dword [esp + 4], esi
mov dword [esp], eax
call fcn.005e73f8
mov eax, dword [ebp - 0x2674]
mov ecx, dword [ebp - 0x2390]
jmp 0x456648
lea eax, [ebp - 0x23a8]
mov dword [esp + 4], 0
mov ecx, eax
mov dword [ebp - 0x26ec], eax
lea eax, [ebp - 0x2670]
mov dword [esp], eax
call int.006c1e40
mov edx, dword [ebp - 0x2670]
sub esp, 8
mov dword [ebp - 0x23a8], eax
mov dword [ebp - 0x23a0], edx
mov ecx, dword [ebp - 0x26dc]
mov dword [esp + 4], ebx
mov dword [esp], eax
mov dword [esp + 8], ecx
call fcn.005e73f8
mov ebx, dword [ebp - 0x23a8]
mov eax, dword [ebp - 0x2670]
mov dword [ebp - 0x26e0], ebx
jmp 0x45656e
movzx edx, word [esi]
lea ecx, [ebp - 0x2388]
mov word [ebp - 0x2388], dx
jmp 0x456648
movzx edx, word [ebx]
lea ebx, [ebp - 0x23a8]
mov dword [ebp - 0x26e0], esi
mov dword [ebp - 0x26ec], ebx
mov word [ebp - 0x23a0], dx
jmp 0x45656e
mov edx, ebx
sar edx, 1
cmp edx, 7
mov eax, edx
mov dword [ebp - 0x2660], edx
ja 0x457277
cmp eax, 1
je 0x457372
test edx, edx
mov ecx, esi
jne 0x4577a7
xor ebx, ebx
mov dword [ebp - 0x2254], eax
mov edx, dword [ebp - 0x2614]
mov word [ecx + eax*2], bx
mov eax, dword [ebp - 0x2618]
lea ebx, [ebp - 0x2268]
lea ecx, [ebp - 0x2270]
mov dword [ebp - 0x2270], ebx
lea edx, [eax + edx*2]
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.0044d8f0
lea eax, [ebp - 0x2258]
sub esp, 8
mov ecx, dword [0x8532c4]
mov dword [esp + 4], eax
lea eax, [ebp - 0x2270]
mov dword [esp], eax
call fcn.00451740
mov eax, dword [ebp - 0x2270]
sub esp, 8
cmp eax, ebx
je 0x45681d
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x2258]
cmp eax, esi
je 0x45682f
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [0x8554c0]
lea esi, [ebp - 0x2238]
mov eax, dword [eax]
mov dword [ebp - 0x2240], esi
mov eax, dword [eax + 0x24]
mov dword [esp], 0x8391c0
mov dword [ebp - 0x26e0], eax
call fcn.005e72a0
lea ebx, [eax + eax]
mov edx, ebx
sar edx, 1
cmp edx, 7
mov dword [ebp - 0x265c], edx
ja 0x456f2c
cmp edx, 1
mov eax, dword [ebp - 0x2240]
je 0x457389
test edx, edx
jne 0x456f5d
xor ecx, ecx
mov dword [ebp - 0x223c], edx
mov word [eax + edx*2], cx
lea eax, [ebp - 0x2240]
lea ecx, [ebp - 0x2210]
mov dword [esp + 4], eax
mov eax, dword [0x8554c0]
mov dword [esp], eax
call dword [ebp - 0x26e0]
mov edx, dword [ebp - 0x2210]
lea ebx, [ebp - 0x2208]
sub esp, 8
mov eax, dword [ebp - 0x2030]
mov dword [ebp - 0x26f0], ebx
cmp edx, ebx
je 0x4576da
cmp eax, edi
je 0x45762d
mov dword [ebp - 0x2030], edx
mov edx, dword [ebp - 0x220c]
test eax, eax
mov ecx, dword [ebp - 0x2028]
mov dword [ebp - 0x202c], edx
mov edx, dword [ebp - 0x2208]
mov dword [ebp - 0x2028], edx
je 0x45692c
mov dword [ebp - 0x2210], eax
mov dword [ebp - 0x2208], ecx
xor edx, edx
cmp eax, dword [ebp - 0x26f0]
mov dword [ebp - 0x220c], 0
mov word [eax], dx
je 0x45692c
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x2240]
cmp eax, esi
je 0x45693e
mov dword [esp], eax
call fcn.006eb330
mov dword [esp], 0x731cb4
call fcn.005e72a0
mov ecx, dword [ebp - 0x26dc]
mov dword [esp + 8], eax
mov dword [esp + 4], 0xffffffff
mov dword [esp], 0x731cb4
call fcn.0064a830
sub esp, 0xc
cmp eax, 0xffffffff
je 0x456a1e
mov ecx, dword [ebp - 0x202c]
mov edx, dword [ebp - 0x2030]
lea esi, [ebp - 0x20b8]
mov dword [ebp - 0x26e0], esi
mov dword [ebp - 0x20c0], esi
cmp eax, ecx
mov dword [esp], edx
cmova eax, ecx
lea ecx, [ebp - 0x20c0]
lea eax, [edx + eax*2]
mov dword [esp + 4], eax
call fcn.0044d8f0
mov edx, dword [ebp - 0x20c0]
sub esp, 8
mov eax, dword [ebp - 0x2030]
cmp edx, esi
je 0x457744
cmp eax, edi
je 0x457650
mov dword [ebp - 0x2030], edx
mov edx, dword [ebp - 0x20bc]
test eax, eax
mov ecx, dword [ebp - 0x2028]
mov dword [ebp - 0x202c], edx
mov edx, dword [ebp - 0x20b8]
mov dword [ebp - 0x2028], edx
je 0x456a1e
mov dword [ebp - 0x20c0], eax
mov dword [ebp - 0x20b8], ecx
xor ebx, ebx
cmp eax, dword [ebp - 0x26e0]
mov dword [ebp - 0x20bc], 0
mov word [eax], bx
je 0x456a1e
mov dword [esp], eax
call fcn.006eb330
lea eax, [ebp - 0x2018]
mov edx, dword [ebp - 0x202c]
lea esi, [ebp - 0x2010]
mov ecx, eax
mov eax, dword [ebp - 0x2030]
mov dword [ebp - 0x2018], esi
mov dword [ebp - 0x26e4], ecx
lea edx, [eax + edx*2]
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.0044d8f0
lea eax, [ebp - 0x20a0]
mov edx, dword [ebp - 0x202c]
lea ebx, [ebp - 0x20a8]
sub esp, 8
mov dword [ebp - 0x26e8], eax
mov dword [ebp - 0x20a8], eax
mov ecx, ebx
mov eax, dword [ebp - 0x2030]
lea edx, [eax + edx*2]
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.0044d8f0
mov ecx, dword [ebp - 0x26e4]
sub esp, 8
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov ecx, dword [0x8532c4]
call fcn.004506e0
sub esp, 8
mov eax, dword [ebp - 0x20a8]
cmp eax, dword [ebp - 0x26e8]
je 0x456abf
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x2018]
cmp eax, esi
je 0x456ad1
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x2030]
cmp eax, edi
jne 0x4546fd
jmp 0x451f21
jl 0x456af1
cmp eax, 0xfffff
ja 0x45407f
mov ecx, edx
xor esi, esi
mov dword [esp + 0xc], 0x731c7c
sar ecx, 0x1f
mov dword [esp + 8], 0x20
mov dword [esp + 4], 0x44d450
and ecx, 0x3ff
add eax, ecx
adc edx, esi
shrd eax, edx, 0xa
sar edx, 0xa
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x2060]
mov dword [esp + 0x14], edx
mov dword [esp], eax
call fcn.0044d990
mov dword [esp], 0x732160
call fcn.005e72a0
mov edx, 0x3fffffff
sub edx, dword [ebp - 0x205c]
cmp eax, edx
ja 0x457a88
lea ecx, [ebp - 0x2060]
mov dword [esp + 4], eax
mov dword [esp], 0x732160
call fcn.006c1ce0
mov dword [ebp - 0x2030], edi
mov ecx, dword [eax]
lea edx, [eax + 8]
sub esp, 8
cmp ecx, edx
je 0x4575f8
mov dword [ebp - 0x2030], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x2028], ecx
mov ecx, dword [eax + 4]
mov dword [ebp - 0x202c], ecx
mov dword [eax], edx
xor edx, edx
mov word [eax + 8], dx
mov edx, dword [ebp - 0x2030]
mov dword [eax + 4], 0
mov eax, dword [ebp - 0x20c0]
cmp edx, edi
je 0x457695
cmp eax, dword [ebp - 0x26e0]
je 0x457310
mov dword [ebp - 0x20c0], edx
mov edx, dword [ebp - 0x202c]
test eax, eax
mov ecx, dword [ebp - 0x20b8]
mov dword [ebp - 0x20bc], edx
mov edx, dword [ebp - 0x2028]
mov dword [ebp - 0x20b8], edx
je 0x456c18
mov dword [ebp - 0x2030], eax
mov dword [ebp - 0x2028], ecx
xor esi, esi
cmp eax, edi
mov dword [ebp - 0x202c], 0
mov word [eax], si
je 0x456c18
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x2060]
lea edx, [ebp - 0x2058]
cmp eax, edx
jne 0x4541ab
jmp 0x4541b3
movzx ecx, word [0x731f42]
mov word [eax], cx
jmp 0x4537d8
movzx edx, word [ebx]
lea ebx, [ebp - 0x2198]
mov dword [ebp - 0x26e0], edi
mov dword [ebp - 0x26ec], ebx
mov word [ebp - 0x2190], dx
jmp 0x4536cd
movzx edx, word [esi]
lea ecx, [ebp - 0x2130]
mov word [ebp - 0x2130], dx
jmp 0x45439c
movzx ecx, word [0x73208c]
mov word [eax], cx
jmp 0x453a1a
movzx edx, word [esi]
lea ecx, [ebp - 0x2148]
lea esi, [ebp - 0x2150]
mov dword [ebp - 0x26e0], ecx
mov dword [ebp - 0x26ec], esi
mov word [ebp - 0x2148], dx
jmp 0x453b8e
lea eax, [ebp - 0x2634]
mov dword [esp + 4], 0
mov ecx, ebx
mov dword [esp], eax
call int.006c1e40
mov edx, dword [ebp - 0x2634]
sub esp, 8
mov dword [ebp - 0x20f0], eax
mov dword [ebp - 0x20e8], edx
mov ecx, dword [ebp - 0x26e0]
mov dword [esp + 4], 0x73213e
mov dword [esp], eax
mov dword [esp + 8], ecx
call fcn.005e73f8
mov edx, dword [ebp - 0x2634]
mov eax, dword [ebp - 0x20f0]
jmp 0x453e1f
lea eax, [ebp - 0x2638]
lea ecx, [ebp - 0x20d8]
mov dword [esp + 4], 0
mov dword [esp], eax
call int.006c1e40
mov edx, dword [ebp - 0x2638]
sub esp, 8
mov dword [ebp - 0x20d8], eax
mov dword [ebp - 0x20d0], edx
mov dword [esp + 8], ebx
mov dword [esp + 4], esi
mov dword [esp], eax
call fcn.005e73f8
mov eax, dword [ebp - 0x2638]
mov ecx, dword [ebp - 0x20d8]
jmp 0x453dc3
lea eax, [ebp - 0x2120]
mov dword [esp + 4], 0
mov ecx, eax
mov dword [ebp - 0x26ec], eax
lea eax, [ebp - 0x263c]
mov dword [esp], eax
call int.006c1e40
mov edx, dword [ebp - 0x263c]
sub esp, 8
mov dword [ebp - 0x2120], eax
mov dword [ebp - 0x2118], edx
mov dword [esp + 8], esi
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.005e73f8
mov esi, dword [ebp - 0x2120]
mov eax, dword [ebp - 0x263c]
mov dword [ebp - 0x26e4], esi
jmp 0x4544aa
lea eax, [ebp - 0x2640]
lea ecx, [ebp - 0x2108]
mov dword [esp + 4], 0
mov dword [esp], eax
call int.006c1e40
mov edx, dword [ebp - 0x2640]
sub esp, 8
mov dword [ebp - 0x2108], eax
mov dword [ebp - 0x2100], edx
mov dword [esp + 8], esi
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.005e73f8
mov eax, dword [ebp - 0x2640]
mov ecx, dword [ebp - 0x2108]
jmp 0x45442f
mov eax, dword [ebp - 0x202c]
mov dword [ebp - 0x2618], edx
mov dword [ebp - 0x2614], eax
mov eax, dword [ebp - 0x2028]
mov dword [ebp - 0x2610], eax
jmp 0x4538d4
mov eax, esi
jmp 0x45538b
mov eax, esi
jmp 0x45606d
mov eax, ecx
jmp 0x455331
mov eax, esi
jmp 0x45543d
mov eax, ecx
jmp 0x455fc1
mov eax, ecx
jmp 0x456013
mov eax, esi
jmp 0x4560cd
mov eax, ecx
jmp 0x4553e3
mov eax, esi
jmp 0x45671b
mov eax, ecx
jmp 0x4566c1
mov eax, dword [ebp - 0x202c]
mov dword [ebp - 0x2600], edx
mov dword [ebp - 0x25fc], eax
mov eax, dword [ebp - 0x2028]
mov dword [ebp - 0x25f8], eax
jmp 0x453b04
mov dword [esp + 8], 0x8391c0
mov dword [esp + 4], 0x731f8e
mov dword [esp], ebx
call fcn.005e7488
mov eax, dword [0x8532c4]
jmp 0x45395c
lea eax, [ebp - 0x265c]
lea ecx, [ebp - 0x2240]
mov dword [esp + 4], 0
mov dword [esp], eax
call int.006c1e40
mov edx, dword [ebp - 0x265c]
sub esp, 8
mov dword [ebp - 0x2240], eax
mov dword [ebp - 0x2238], edx
mov dword [esp + 8], ebx
mov dword [esp + 4], 0x8391c0
mov dword [esp], eax
call fcn.005e73f8
mov edx, dword [ebp - 0x265c]
mov eax, dword [ebp - 0x2240]
jmp 0x456884
lea eax, [ebp - 0x2668]
mov ecx, dword [ebp - 0x26e4]
mov dword [esp + 4], 0
mov dword [esp], eax
call int.006c1e40
mov edx, dword [ebp - 0x2668]
sub esp, 8
mov dword [ebp - 0x2018], eax
mov dword [ebp - 0x2010], edx
mov dword [esp + 8], ebx
mov dword [esp + 4], 0x8451c0
mov dword [esp], eax
call fcn.005e73f8
mov edx, dword [ebp - 0x2668]
mov eax, dword [ebp - 0x2018]
jmp 0x454604
lea eax, [ebp - 0x2664]
mov dword [esp + 4], 0
mov ecx, edi
mov dword [esp], eax
call int.006c1e40
mov edx, dword [ebp - 0x2664]
sub esp, 8
mov dword [ebp - 0x22b8], eax
mov dword [ebp - 0x22b0], edx
mov dword [esp + 8], ebx
mov dword [esp + 4], 0x8391c0
mov dword [esp], eax
call fcn.005e73f8
mov edx, dword [ebp - 0x2664]
mov eax, dword [ebp - 0x22b8]
jmp 0x45243f
lea eax, [ebp - 0x266c]
mov ecx, dword [ebp - 0x26e4]
mov dword [esp + 4], 0
mov dword [esp], eax
call int.006c1e40
mov edx, dword [ebp - 0x266c]
sub esp, 8
mov dword [ebp - 0x2018], eax
mov dword [ebp - 0x2010], edx
mov dword [esp + 8], ebx
mov dword [esp + 4], 0x8451c0
mov dword [esp], eax
call fcn.005e73f8
mov edx, dword [ebp - 0x266c]
mov eax, dword [ebp - 0x2018]
jmp 0x454761
mov ecx, dword [eax + 0x10]
mov ebx, dword [eax + 0xc]
mov dword [ebp - 0x26dc], ecx
mov ecx, dword [eax + 0x14]
mov dword [ebp - 0x26e0], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x200c], ebx
mov ebx, dword [ebp - 0x26dc]
mov dword [ebp - 0x2010], ecx
mov dword [ebp - 0x2008], ebx
mov ebx, dword [ebp - 0x26e0]
mov dword [ebp - 0x2004], ebx
jmp 0x451fba
mov ecx, dword [eax + 0x14]
mov edi, dword [eax + 0xc]
mov ebx, dword [eax + 0x10]
mov dword [ebp - 0x26dc], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x2204], edi
mov edi, dword [ebp - 0x26dc]
mov dword [ebp - 0x2200], ebx
mov dword [ebp - 0x2208], ecx
mov dword [ebp - 0x21fc], edi
jmp 0x452177
mov ecx, dword [eax + 0x14]
mov edi, dword [eax + 0xc]
mov ebx, dword [eax + 0x10]
mov dword [ebp - 0x26dc], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x200c], edi
mov edi, dword [ebp - 0x26dc]
mov dword [ebp - 0x2008], ebx
mov dword [ebp - 0x2010], ecx
mov dword [ebp - 0x2004], edi
jmp 0x4520f9
mov ecx, dword [eax + 0x10]
mov ebx, dword [eax + 0xc]
mov dword [ebp - 0x26dc], ecx
mov ecx, dword [eax + 0x14]
mov dword [ebp - 0x26e0], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x221c], ebx
mov ebx, dword [ebp - 0x26dc]
mov dword [ebp - 0x2220], ecx
mov dword [ebp - 0x2218], ebx
mov ebx, dword [ebp - 0x26e0]
mov dword [ebp - 0x2214], ebx
jmp 0x45203a
mov ebx, dword [eax + 0xc]
mov ecx, dword [eax + 0x14]
mov dword [ebp - 0x26dc], ebx
mov ebx, dword [eax + 0x10]
mov dword [ebp - 0x26e0], ebx
mov ebx, dword [eax + 8]
mov dword [ebp - 0x201c], ecx
mov dword [ebp - 0x2028], ebx
mov ebx, dword [ebp - 0x26dc]
mov dword [ebp - 0x2024], ebx
mov ebx, dword [ebp - 0x26e0]
mov dword [ebp - 0x2020], ebx
jmp 0x45383f
mov ecx, dword [eax + 0x14]
mov esi, dword [eax + 0xc]
mov ebx, dword [eax + 0x10]
mov dword [ebp - 0x26e4], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x209c], esi
mov esi, dword [ebp - 0x26e4]
mov dword [ebp - 0x2098], ebx
mov dword [ebp - 0x20a0], ecx
mov dword [ebp - 0x2094], esi
jmp 0x453f54
mov ecx, dword [eax + 0x14]
mov esi, dword [eax + 0xc]
mov ebx, dword [eax + 0x10]
mov dword [ebp - 0x26e4], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x206c], esi
mov esi, dword [ebp - 0x26e4]
mov dword [ebp - 0x2068], ebx
mov dword [ebp - 0x2070], ecx
mov dword [ebp - 0x2064], esi
jmp 0x45403b
movzx edx, word [ebx]
lea ecx, [ebp - 0x2118]
lea esi, [ebp - 0x2120]
mov dword [ebp - 0x26e4], ecx
mov dword [ebp - 0x26ec], esi
mov word [ebp - 0x2118], dx
jmp 0x4544aa
movzx edx, word [ebx]
lea ecx, [ebp - 0x2100]
mov word [ebp - 0x2100], dx
jmp 0x45442f
movzx ecx, word [0x73213e]
mov word [eax], cx
jmp 0x453e1f
movzx edx, word [esi]
lea ecx, [ebp - 0x20d0]
mov word [ebp - 0x20d0], dx
jmp 0x453dc3
lea eax, [ebp - 0x2660]
lea ecx, [ebp - 0x2258]
mov dword [esp + 4], 0
mov dword [esp], eax
call int.006c1e40
mov edx, dword [ebp - 0x2660]
sub esp, 8
mov dword [ebp - 0x2258], eax
mov dword [ebp - 0x2250], edx
mov dword [esp + 8], ebx
mov ebx, dword [ebp - 0x26e0]
mov dword [esp], eax
mov dword [esp + 4], ebx
call fcn.005e73f8
mov eax, dword [ebp - 0x2660]
mov ecx, dword [ebp - 0x2258]
jmp 0x4567ae
mov ebx, dword [eax + 0xc]
mov ecx, dword [eax + 0x14]
mov dword [ebp - 0x26e0], ebx
mov ebx, dword [eax + 0x10]
mov dword [ebp - 0x26ec], ebx
mov ebx, dword [eax + 8]
mov dword [ebp - 0x201c], ecx
mov dword [ebp - 0x2028], ebx
mov ebx, dword [ebp - 0x26e0]
mov dword [ebp - 0x2024], ebx
mov ebx, dword [ebp - 0x26ec]
mov dword [ebp - 0x2020], ebx
jmp 0x453a7b
mov eax, dword [ebp - 0x202c]
mov dword [ebp - 0x20c0], edx
mov dword [ebp - 0x20bc], eax
mov eax, dword [ebp - 0x2028]
mov dword [ebp - 0x20b8], eax
jmp 0x456c18
mov eax, dword [ebp - 0x202c]
mov dword [ebp - 0x20c0], edx
mov dword [ebp - 0x20bc], eax
mov eax, dword [ebp - 0x2028]
mov dword [ebp - 0x20b8], eax
jmp 0x45419b
lea ecx, [ebp - 0x2618]
mov dword [esp], ebx
call fcn.006c1d80
mov eax, dword [ebp - 0x2030]
sub esp, 4
jmp 0x4538b9
mov ebx, dword [ebp - 0x26e0]
mov ecx, esi
movzx edx, word [ebx]
mov word [ebp - 0x2250], dx
jmp 0x4567ae
movzx ecx, word [0x8391c0]
mov word [eax], cx
jmp 0x456884
movzx ecx, word [esi]
mov word [eax], cx
jmp 0x45306d
mov eax, dword [ebp - 0x26dc]
lea ecx, [ebp - 0x2600]
mov dword [esp], eax
call fcn.006c1d80
mov eax, dword [ebp - 0x2030]
sub esp, 4
jmp 0x453ae9
mov eax, dword [ebp - 0x2600]
lea edi, [ebp - 0x25f8]
cmp eax, edi
je 0x4573df
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x2618]
lea edi, [ebp - 0x2610]
cmp eax, edi
je 0x4573f7
mov dword [esp], eax
call fcn.006eb330
mov dword [esp], ebx
call fcn.005d7530
nop
mov ebx, eax
mov eax, dword [ebp - 0x25a0]
lea edi, [ebp - 0x2598]
cmp eax, edi
je 0x4573c7
mov dword [esp], eax
call fcn.006eb330
jmp 0x4573c7
mov eax, dword [ebp - 0x2048]
cmp eax, dword [ebp - 0x26ec]
jne 0x457412
jmp 0x4573c7
mov dword [esp], eax
call fcn.006eb330
jmp 0x457436
mov eax, dword [ebp - 0x24b0]
lea edi, [ebp - 0x24a8]
cmp eax, edi
jne 0x457462
jmp 0x457436
mov eax, dword [ebp - 0x2030]
cmp eax, edi
jne 0x457412
jmp 0x4573c7
mov dword [esp], eax
call fcn.006eb330
jmp 0x4574c2
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x2210]
cmp eax, dword [ebp - 0x26f0]
je 0x457521
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x2228]
lea edi, [ebp - 0x2220]
cmp eax, edi
jne 0x457412
jmp 0x4573c7
mov eax, dword [ebp - 0x21e0]
lea edi, [ebp - 0x21d8]
cmp eax, edi
jne 0x457503
jmp 0x45750b
mov dword [esp], 0x731c10
call fcn.006dfd70
mov ebx, eax
mov eax, dword [ebp - 0x2138]
lea edi, [ebp - 0x2130]
cmp eax, edi
jne 0x457503
jmp 0x45750b
mov eax, dword [ebp - 0x2344]
mov dword [ebp - 0x2018], edx
mov dword [ebp - 0x2014], eax
mov eax, dword [ebp - 0x2340]
mov dword [ebp - 0x2010], eax
jmp 0x451d49
mov ecx, dword [eax + 0x14]
mov esi, dword [eax + 0xc]
mov ebx, dword [eax + 0x10]
mov dword [ebp - 0x26e4], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x2024], esi
mov esi, dword [ebp - 0x26e4]
mov dword [ebp - 0x2020], ebx
mov dword [ebp - 0x2028], ecx
mov dword [ebp - 0x201c], esi
jmp 0x454114
mov ecx, dword [eax + 0x14]
mov esi, dword [eax + 0xc]
mov ebx, dword [eax + 0x10]
mov dword [ebp - 0x26e4], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x2024], esi
mov esi, dword [ebp - 0x26e4]
mov dword [ebp - 0x2020], ebx
mov dword [ebp - 0x2028], ecx
mov dword [ebp - 0x201c], esi
jmp 0x456b91
mov eax, dword [ebp - 0x220c]
mov dword [ebp - 0x2030], edx
mov dword [ebp - 0x202c], eax
mov eax, dword [ebp - 0x2208]
mov dword [ebp - 0x2028], eax
jmp 0x45692c
mov eax, dword [ebp - 0x20bc]
mov dword [ebp - 0x2030], edx
mov dword [ebp - 0x202c], eax
mov eax, dword [ebp - 0x20b8]
mov dword [ebp - 0x2028], eax
jmp 0x456a1e
mov eax, dword [ebp - 0x26dc]
lea ecx, [ebp - 0x20c0]
mov dword [esp], eax
call fcn.006c1d80
mov eax, dword [ebp - 0x2030]
sub esp, 4
jmp 0x454180
mov eax, dword [ebp - 0x26dc]
lea ecx, [ebp - 0x20c0]
mov dword [esp], eax
call fcn.006c1d80
mov eax, dword [ebp - 0x2030]
sub esp, 4
jmp 0x456bfd
mov eax, dword [ebp - 0x229c]
mov dword [ebp - 0x2030], edx
mov dword [ebp - 0x202c], eax
mov eax, dword [ebp - 0x2298]
mov dword [ebp - 0x2028], eax
jmp 0x452580
lea eax, [ebp - 0x2210]
mov ecx, dword [ebp - 0x26dc]
mov dword [esp], eax
call fcn.006c1d80
mov eax, dword [ebp - 0x2210]
sub esp, 4
jmp 0x45690d
mov eax, edi
jmp 0x454959
mov eax, edi
jmp 0x4548e9
lea eax, [ebp - 0x2148]
jmp 0x456379
mov eax, ecx
jmp 0x4563d1
lea eax, [ebp - 0x2348]
mov ecx, dword [ebp - 0x26e4]
lea esi, [ebp - 0x2010]
mov dword [esp], eax
call fcn.006c1d80
mov eax, dword [ebp - 0x2348]
sub esp, 4
jmp 0x451d2e
lea eax, [ebp - 0x20c0]
mov ecx, dword [ebp - 0x26dc]
mov dword [esp], eax
call fcn.006c1d80
mov eax, dword [ebp - 0x20c0]
sub esp, 4
jmp 0x4569ff
lea eax, [ebp - 0x22a0]
mov ecx, dword [ebp - 0x26dc]
lea edi, [ebp - 0x2028]
mov dword [esp], eax
call fcn.006c1d80
mov eax, dword [ebp - 0x22a0]
sub esp, 4
jmp 0x452565
mov eax, ecx
jmp 0x456e03
lea eax, [ebp - 0x2118]
jmp 0x456dab
mov eax, ecx
jmp 0x456d51
mov eax, esi
jmp 0x4572a8
mov dword [esp], 0x731c5c
call fcn.006e0080
mov dword [esp], 0x731c5c
call fcn.006e0080
mov dword [esp], 0x731c5c
call fcn.006e0080
mov dword [esp], 0x731c5c
call fcn.006e0080
mov dword [esp], 0x731c5c
call fcn.006e0080
mov ebx, eax
mov eax, dword [ebp - 0x2498]
cmp eax, esi
jne 0x457462
jmp 0x457436
mov dword [esp], 0x731c5c
call fcn.006e0080
mov ebx, eax
mov eax, dword [ebp - 0x2480]
cmp eax, esi
jne 0x457462
jmp 0x457436
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x2018]
cmp eax, esi
jne 0x457412
jmp 0x4573c7
mov dword [esp], 0x731c5c
call fcn.006e0080
mov esi, eax
mov eax, dword [ebp - 0x2540]
cmp eax, ebx
je 0x457890
mov dword [esp], eax
call fcn.006eb330
mov ebx, esi
jmp 0x457436
mov eax, dword [ebp - 0x20a8]
cmp eax, dword [ebp - 0x26e8]
je 0x4578dc
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x20c0]
cmp eax, dword [ebp - 0x26e0]
jne 0x457503
jmp 0x45750b
mov dword [esp], 0x731c5c
call fcn.006e0080
mov edi, eax
mov eax, dword [ebp - 0x22e8]
cmp eax, ebx
je 0x457994
mov dword [esp], eax
call fcn.006eb330
mov ebx, edi
mov eax, dword [ebp - 0x22d0]
lea edi, [ebp - 0x22c8]
cmp eax, edi
jne 0x45782d
jmp 0x457835
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x2078]
lea edi, [ebp - 0x2070]
cmp eax, edi
je 0x4578c6
mov dword [esp], eax
call fcn.006eb330
jmp 0x4578c6
mov dword [esp + 0xc], ecx
mov dword [esp + 8], eax
lea edi, [ebp - 0x2028]
mov dword [esp + 4], 0x731eaa
mov dword [esp], 0x731dd4
call fcn.006e1100
mov ebx, eax
mov eax, dword [ebp - 0x20d8]
lea edi, [ebp - 0x20d0]
cmp eax, edi
jne 0x457503
jmp 0x45750b
mov ebx, eax
mov eax, dword [ebp - 0x2288]
cmp eax, esi
jne 0x4574e7
jmp 0x4574c2
mov dword [esp], 0x731c5c
call fcn.006e0080
jmp 0x457a2b
mov dword [esp], 0x731c5c
call fcn.006e0080
mov ebx, eax
mov eax, dword [ebp - 0x21c8]
cmp eax, edi
je 0x457542
mov dword [esp], eax
call fcn.006eb330
jmp 0x457542
mov dword [esp], 0x731c5c
call fcn.006e0080
mov dword [esp], 0x731c5c
call fcn.006e0080
mov ebx, eax
mov eax, dword [ebp - 0x20a8]
cmp eax, dword [ebp - 0x26e8]
je 0x457aac
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x2018]
cmp eax, esi
jne 0x4574e7
jmp 0x4574c2
mov dword [esp], 0x731c5c
call fcn.006e0080
mov ebx, eax
mov eax, dword [ebp - 0x2078]
lea edx, [ebp - 0x2070]
cmp eax, edx
jne 0x457412
jmp 0x4573c7
mov dword [esp], 0x731c5c
call fcn.006e0080
mov ebx, eax
mov eax, dword [ebp - 0x24c8]
cmp eax, esi
je 0x457492
mov dword [esp], eax
call fcn.006eb330
jmp 0x457492
mov dword [esp], 0x731c5c
call fcn.006e0080
mov ebx, eax
mov eax, dword [ebp - 0x23c0]
cmp eax, edi
je 0x457c06
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x23d8]
lea edi, [ebp - 0x23d0]
cmp eax, edi
jne 0x45782d
jmp 0x457835
mov dword [esp], 0x731c5c
call fcn.006e0080
mov ebx, eax
jmp 0x457521
mov dword [esp], 0x731c5c
call fcn.006e0080
mov dword [esp], 0x731c5c
call fcn.006e0080
mov ebx, eax
mov eax, dword [ebp - 0x2030]
cmp eax, edi
jne 0x4579e1
jmp 0x4578c6
mov ebx, eax
jmp 0x457c06
mov dword [esp], 0x731c5c
call fcn.006e0080
mov ebx, eax
jmp 0x4578dc
mov dword [esp], 0x731c5c
call fcn.006e0080
mov ebx, eax
mov eax, dword [ebp - 0x24e0]
cmp eax, esi
jne 0x457462
jmp 0x457436
mov dword [esp], 0x731c5c
call fcn.006e0080
mov ebx, eax
mov eax, dword [ebp - 0x2048]
lea edx, [ebp - 0x2040]
cmp eax, edx
jne 0x4579c5
jmp 0x4579cd
mov dword [esp], 0x731c5c
call fcn.006e0080
jmp 0x457d26
mov dword [esp + 0xc], ecx
mov dword [esp + 8], eax
lea esi, [ebp - 0x2010]
mov dword [esp + 4], 0x731eaa
mov dword [esp], 0x731dd4
call fcn.006e1100
mov ebx, eax
mov eax, dword [ebp - 0x2150]
lea edi, [ebp - 0x2148]
cmp eax, edi
je 0x457562
mov dword [esp], eax
call fcn.006eb330
jmp 0x457562
mov dword [esp], 0x731c5c
call fcn.006e0080
lea esi, [esi]
push ebp
push edi
push esi
push ebx
sub esp, 0x3c
mov eax, dword [esp + 0x54]
mov ebx, dword [esp + 0x50]
cmp eax, 0x110
je 0x458030
jbe 0x457fb0
cmp eax, 0x111
je 0x457f64
cmp eax, 0x138
jne 0x457f58
mov dword [esp + 4], 0x28a1
mov dword [esp], ebx
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
call esi
sub esp, 8
cmp dword [esp + 0x5c], eax
je 0x458470
mov dword [esp + 4], 0x28a3
mov dword [esp], ebx
call esi
sub esp, 8
cmp dword [esp + 0x5c], eax
je 0x458470
xor eax, eax
add esp, 0x3c
pop ebx
pop esi
pop edi
pop ebp
ret 0x10
mov edx, dword [esp + 0x58]
movzx eax, word [esp + 0x58]
shr edx, 0x10
test edx, edx
sete dl
cmp eax, 0x28b5
jne 0x4584e0
test dl, dl
je 0x4584e0
mov eax, dword [0x8532c4]
mov dword [eax + 0x178], 0
mov eax, ebx
call fcn.004519b0
add esp, 0x3c
xor eax, eax
pop ebx
pop esi
pop edi
pop ebp
ret 0x10
cmp eax, 0x4e
jne 0x457f58
mov eax, dword [esp + 0x5c]
cmp dword [eax + 8], 0xffffff38
jne 0x457f58
mov eax, ebx
call fcn.004519b0
mov eax, dword [0x8532c4]
mov ecx, dword [eax + 0x164]
cmp dword [eax + 0x15c], ecx
mov edx, dword [eax + 0x158]
jl 0x458520
jg 0x457ff4
cmp edx, dword [eax + 0x160]
jb 0x458520
mov dword [esp], ebx
call dword [sym.imp.USER32.dll_GetParent]
sub esp, 4
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0
mov dword [esp + 4], 0x470
mov dword [esp], eax
call dword [sym.imp.USER32.dll_PostMessageW]
sub esp, 0x10
jmp 0x457f58
mov esi, dword [sym.imp.USER32.dll_SendDlgItemMessageW]
mov dword [esp], ebx
mov ebp, 0x731be8
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xf1
mov dword [esp + 4], 0x28b5
call esi
sub esp, 0x14
mov dword [esp], ebx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xf1
mov dword [esp + 4], 0x28b8
call esi
mov eax, dword [0x8532c4]
sub esp, 0x14
mov dword [esp + 0x10], 0
movzx eax, byte [eax + 0x19a]
mov dword [esp], ebx
mov dword [esp + 8], 0xf1
mov dword [esp + 4], 0x28bc
mov dword [esp + 0xc], eax
call esi
mov eax, dword [0x8532c4]
sub esp, 0x14
mov dword [esp + 0x10], 0
movzx eax, byte [eax + 0x19b]
mov dword [esp], ebx
mov dword [esp + 8], 0xf1
mov dword [esp + 4], 0x28bd
mov dword [esp + 0xc], eax
call esi
mov eax, dword [0x8532c4]
sub esp, 0x14
mov dword [esp + 0x10], 0
movzx eax, byte [eax + 0x19c]
mov dword [esp], ebx
mov dword [esp + 8], 0xf1
mov dword [esp + 4], 0x28be
mov dword [esp + 0xc], eax
call esi
mov eax, dword [0x8532c4]
sub esp, 0x14
mov dword [esp + 0x10], 0
movzx eax, byte [eax + 0x19d]
mov dword [esp], ebx
mov dword [esp + 8], 0xf1
mov dword [esp + 4], 0x28bf
mov dword [esp + 0xc], eax
call esi
mov eax, dword [0x8532c4]
sub esp, 0x14
mov dword [esp + 0x10], 0
movzx eax, byte [eax + 0x19e]
mov dword [esp], ebx
mov dword [esp + 8], 0xf1
mov dword [esp + 4], 0x28c0
mov dword [esp + 0xc], eax
call esi
mov eax, dword [0x70c280]
sub esp, 0x14
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
mov dword [esp], ebx
mov dword [esp + 4], 0x28b4
test eax, eax
cmove eax, ebp
mov esi, eax
call edi
sub esp, 8
mov dword [esp + 4], esi
mov dword [esp], eax
mov esi, dword [sym.imp.USER32.dll_SetWindowTextW]
call esi
mov eax, dword [0x70c28c]
sub esp, 8
mov dword [esp], ebx
mov dword [esp + 4], 0x28b5
test eax, eax
cmove eax, ebp
mov dword [esp + 0x2c], eax
call edi
sub esp, 8
mov edx, dword [esp + 0x2c]
mov dword [esp], eax
mov dword [esp + 4], edx
call esi
mov eax, dword [0x70c298]
sub esp, 8
mov dword [esp], ebx
mov dword [esp + 4], 0x28b6
test eax, eax
cmove eax, ebp
mov dword [esp + 0x2c], eax
call edi
sub esp, 8
mov edx, dword [esp + 0x2c]
mov dword [esp], eax
mov dword [esp + 4], edx
call esi
mov eax, dword [0x70c2a4]
sub esp, 8
mov dword [esp], ebx
mov dword [esp + 4], 0x28b7
test eax, eax
cmove eax, ebp
mov dword [esp + 0x2c], eax
call edi
sub esp, 8
mov edx, dword [esp + 0x2c]
mov dword [esp], eax
mov dword [esp + 4], edx
call esi
mov eax, dword [0x70c2b0]
sub esp, 8
mov dword [esp], ebx
mov dword [esp + 4], 0x28b8
test eax, eax
cmove eax, ebp
mov dword [esp + 0x2c], eax
call edi
sub esp, 8
mov edx, dword [esp + 0x2c]
mov dword [esp], eax
mov dword [esp + 4], edx
call esi
mov eax, dword [0x70c2bc]
sub esp, 8
mov dword [esp], ebx
mov dword [esp + 4], 0x28b9
test eax, eax
cmove eax, ebp
mov dword [esp + 0x2c], eax
call edi
sub esp, 8
mov edx, dword [esp + 0x2c]
mov dword [esp], eax
mov dword [esp + 4], edx
call esi
mov eax, dword [0x70c2c8]
sub esp, 8
mov dword [esp], ebx
mov dword [esp + 4], 0x28ba
test eax, eax
cmove eax, ebp
mov dword [esp + 0x2c], eax
call edi
sub esp, 8
mov edx, dword [esp + 0x2c]
mov dword [esp], eax
mov dword [esp + 4], edx
call esi
mov eax, dword [0x70c2d4]
sub esp, 8
mov dword [esp], ebx
mov dword [esp + 4], 0x28bb
test eax, eax
cmove eax, ebp
mov dword [esp + 0x2c], eax
call edi
sub esp, 8
mov edx, dword [esp + 0x2c]
mov dword [esp], eax
mov dword [esp + 4], edx
call esi
mov eax, dword [0x70c2e0]
sub esp, 8
mov dword [esp], ebx
mov dword [esp + 4], 0x28bc
test eax, eax
cmove eax, ebp
mov dword [esp + 0x2c], eax
call edi
sub esp, 8
mov edx, dword [esp + 0x2c]
mov dword [esp], eax
mov dword [esp + 4], edx
call esi
mov eax, dword [0x70c2ec]
sub esp, 8
mov dword [esp], ebx
mov dword [esp + 4], 0x28bd
test eax, eax
cmove eax, ebp
mov dword [esp + 0x2c], eax
call edi
sub esp, 8
mov edx, dword [esp + 0x2c]
mov dword [esp], eax
mov dword [esp + 4], edx
call esi
mov eax, dword [0x70c2f8]
sub esp, 8
mov dword [esp], ebx
mov dword [esp + 4], 0x28be
test eax, eax
cmove eax, ebp
mov dword [esp + 0x2c], eax
call edi
sub esp, 8
mov edx, dword [esp + 0x2c]
mov dword [esp], eax
mov dword [esp + 4], edx
call esi
mov eax, dword [0x70c304]
sub esp, 8
mov dword [esp], ebx
mov dword [esp + 4], 0x28bf
test eax, eax
cmove eax, ebp
mov dword [esp + 0x2c], eax
call edi
sub esp, 8
mov edx, dword [esp + 0x2c]
mov dword [esp], eax
mov dword [esp + 4], edx
call esi
mov eax, dword [0x70c310]
sub esp, 8
mov dword [esp], ebx
mov dword [esp + 4], 0x28c0
test eax, eax
cmove eax, ebp
mov dword [esp + 0x2c], eax
call edi
sub esp, 8
mov edx, dword [esp + 0x2c]
mov dword [esp], eax
mov dword [esp + 4], edx
call esi
mov eax, dword [0x70c13c]
sub esp, 8
mov dword [esp], ebx
mov dword [esp + 4], 0x28a1
test eax, eax
cmove eax, ebp
mov dword [esp + 0x2c], eax
call edi
sub esp, 8
mov edx, dword [esp + 0x2c]
mov dword [esp], eax
mov dword [esp + 4], edx
call esi
mov eax, dword [0x70c148]
sub esp, 8
mov dword [esp], ebx
mov dword [esp + 4], 0x28a2
test eax, eax
cmove eax, ebp
mov dword [esp + 0x2c], eax
call edi
sub esp, 8
mov edx, dword [esp + 0x2c]
mov dword [esp], eax
mov dword [esp + 4], edx
call esi
mov eax, dword [0x70c31c]
sub esp, 8
mov dword [esp], ebx
mov dword [esp + 4], 0x28c1
test eax, eax
cmovne ebp, eax
call edi
sub esp, 8
mov dword [esp + 4], ebp
mov dword [esp], eax
call esi
sub esp, 8
mov eax, 1
add esp, 0x3c
pop ebx
pop esi
pop edi
pop ebp
ret 0x10
mov eax, dword [0x8532c4]
mov ecx, dword [eax + 0x164]
cmp dword [eax + 0x15c], ecx
mov edx, dword [eax + 0x158]
jg 0x45849b
jl 0x457f58
cmp edx, dword [eax + 0x160]
jb 0x457f58
mov eax, dword [esp + 0x58]
mov dword [esp + 4], 0xff
mov dword [esp], eax
call dword [sym.imp.GDI32.dll_SetTextColor]
sub esp, 8
mov eax, dword [esp + 0x58]
mov dword [esp + 4], 1
mov dword [esp], eax
call dword [sym.imp.GDI32.dll_SetBkMode]
sub esp, 8
mov dword [esp], 5
call dword [sym.imp.GDI32.dll_GetStockObject]
sub esp, 4
jmp 0x457f5a
cmp eax, 0x28b6
jne 0x458500
test dl, dl
je 0x458500
mov eax, dword [0x8532c4]
mov dword [eax + 0x178], 1
jmp 0x457f97
cmp eax, 0x28b8
jne 0x458540
test dl, dl
je 0x458540
mov eax, dword [0x8532c4]
mov dword [eax + 0x17c], 0
jmp 0x457f97
mov dword [esp], ebx
call dword [sym.imp.USER32.dll_GetParent]
sub esp, 4
mov dword [esp + 0xc], 3
jmp 0x458008
cmp eax, 0x28b9
jne 0x458560
test dl, dl
je 0x458560
mov eax, dword [0x8532c4]
mov dword [eax + 0x17c], 1
jmp 0x457f97
cmp eax, 0x28ba
jne 0x45857f
test dl, dl
je 0x45857f
mov eax, dword [0x8532c4]
mov dword [eax + 0x17c], 2
jmp 0x457f97
cmp eax, 0x28bc
jne 0x45858e
test dl, dl
jne 0x458619
cmp eax, 0x28bd
jne 0x45859d
test dl, dl
jne 0x458665
cmp eax, 0x28be
jne 0x4585ac
test dl, dl
jne 0x4586b1
cmp eax, 0x28bf
jne 0x4585bb
test dl, dl
jne 0x4586fc
cmp eax, 0x28c0
jne 0x457f97
test dl, dl
je 0x457f97
mov esi, dword [0x8532c4]
mov dword [esp + 4], 0x28c0
mov dword [esp], ebx
call dword [sym.imp.USER32.dll_GetDlgItem]
push edx
push edx
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0xf0
mov dword [esp], eax
call dword [sym.imp.USER32.dll_SendMessageW]
sub esp, 0x10
test eax, eax
setne byte [esi + 0x19e]
jmp 0x457f97
mov esi, dword [0x8532c4]
mov dword [esp + 4], 0x28bc
mov dword [esp], ebx
call dword [sym.imp.USER32.dll_GetDlgItem]
sub esp, 8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0xf0
mov dword [esp], eax
call dword [sym.imp.USER32.dll_SendMessageW]
sub esp, 0x10
test eax, eax
setne byte [esi + 0x19a]
jmp 0x457f97
mov esi, dword [0x8532c4]
mov dword [esp + 4], 0x28bd
mov dword [esp], ebx
call dword [sym.imp.USER32.dll_GetDlgItem]
sub esp, 8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0xf0
mov dword [esp], eax
call dword [sym.imp.USER32.dll_SendMessageW]
sub esp, 0x10
test eax, eax
setne byte [esi + 0x19b]
jmp 0x457f97
mov esi, dword [0x8532c4]
mov dword [esp + 4], 0x28be
mov dword [esp], ebx
call dword [sym.imp.USER32.dll_GetDlgItem]
push edi
push edi
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0xf0
mov dword [esp], eax
call dword [sym.imp.USER32.dll_SendMessageW]
sub esp, 0x10
test eax, eax
setne byte [esi + 0x19c]
jmp 0x457f97
mov esi, dword [0x8532c4]
mov dword [esp + 4], 0x28bf
mov dword [esp], ebx
call dword [sym.imp.USER32.dll_GetDlgItem]
push ecx
push ecx
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0xf0
mov dword [esp], eax
call dword [sym.imp.USER32.dll_SendMessageW]
sub esp, 0x10
test eax, eax
setne byte [esi + 0x19d]
jmp 0x457f97