Function at 0x4c7a60
Capabilities:
Enumerate gui resources
Read .ini file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x658
mov eax, dword [0x57c870]
xor eax, ebp
mov dword [ebp - 0x18], eax
push esi
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x648], 5
mov eax, dword [0x5fdb08]
push eax
call fcn.00460c80
add esp, 4
mov dword [ebp - 0x650], eax
movsx ecx, word [0x65bdfc]
test ecx, ecx
jge 0x4c7ab7
movsx edx, word [0x65bdfc]
neg edx
mov word [0x65bdfc], dx
cmp dword [0x5fdc0c], 1
jne 0x4c7af2
mov eax, dword [0x5fdb08]
push eax
call fcn.0042dba0
add esp, 4
cmp eax, 1
jne 0x4c7af2
movsx ecx, word [0x65bdfc]
cmp ecx, 0x64
jge 0x4c7af0
movsx edx, word [0x65bdfc]
add edx, 0x64
mov word [0x65bdfc], dx
jmp 0x4c7b2b
cmp dword [0x5fdc0c], 1
jne 0x4c7b2b
mov eax, dword [0x5fdb08]
push eax
call fcn.0042dc10
add esp, 4
cmp eax, 1
jne 0x4c7b2b
movsx ecx, word [0x65bdfc]
cmp ecx, 0x64
jge 0x4c7b2b
movsx edx, word [0x65bdfc]
add edx, 0x64
mov word [0x65bdfc], dx
cmp dword [0x5fcdbc], 0
je 0x4c7b53
fild dword [0x5fcdc0]
fmul qword [0x54b668]
fidiv dword [0x5fcdbc]
call fcn.00532f90
mov word [0x65be04], ax
jmp 0x4c7b5b
xor eax, eax
mov word [0x65be04], ax
mov cx, word [0x65bdcc]
mov word [ebp - 0x330], cx
mov dx, word [0x65bdce]
mov word [ebp - 0x644], dx
mov ax, word [0x5fda74]
mov word [0x65bdcc], ax
mov cx, word [0x5fda50]
mov word [0x65bdce], cx
movsx edx, word [0x65bdce]
push edx
movsx eax, word [0x65bdcc]
push eax
lea ecx, [ebp - 0x640]
push ecx
call fcn.00433cb0
add esp, 0xc
mov dx, word [0x110263a]
mov word [0x65bdd8], dx
push 0x5c44f8
call fcn.004925f0
add esp, 4
cmp eax, 1
jne 0x4c7bed
cmp dword [0x55c70c], 0
jne 0x4c7bed
movsx eax, word [0x65bdd8]
and eax, 0xfffd
mov word [0x65bdd8], ax
jmp 0x4c7bfe
movsx ecx, word [0x65bdd8]
or ecx, 2
mov word [0x65bdd8], cx
mov dx, word [0x65bdd6]
mov word [ebp - 0x334], dx
mov esi, dword [ebp - 0x650]
imul esi, esi, 0x12c8
movsx eax, word [ebp - 0x644]
sub eax, 1
push eax
movsx ecx, word [ebp - 0x330]
sub ecx, 1
push ecx
mov edx, dword [0x5fdb08]
push edx
call fcn.00424280
add esp, 0xc
movsx ax, byte [esi + eax*8 + 0x110b486]
mov word [0x65bdd6], ax
mov eax, dword [0x65bdd0]
cdq
mov ecx, 0x3c
idiv ecx
mov dword [ebp - 0x324], eax
cmp dword [0x65bdd0], 0
je 0x4c7c80
cmp dword [0x5fd920], 0
jne 0x4c7c80
mov edx, dword [ebp - 0x324]
add edx, 1
mov dword [ebp - 0x324], edx
cmp dword [ebp - 0x324], 0x3c
jle 0x4c7c93
mov dword [ebp - 0x324], 0x3c
lea eax, [ebp - 0x640]
push eax
mov ecx, dword [0x65bdd0]
push ecx
mov edx, dword [ebp - 0x324]
push edx
push 0x65bdc6
call fcn.00483f80
push eax
push str.____________now_s__st_s__min_d__sec_d__les_s
lea eax, [ebp - 0x218]
push eax
call fcn.00532706
add esp, 0x1c
lea ecx, [ebp - 0x218]
push ecx
push 0
call fcn.00436500
add esp, 8
call fcn.00483f80
push eax
lea edx, [ebp - 0x218]
push edx
call fcn.00532580
add esp, 8
lea eax, [ebp - 0x218]
push eax
push 0x65bdc6
call fcn.00434c40
add esp, 8
mov dword [ebp - 0x32c], eax
mov ecx, dword [ebp - 0x32c]
add ecx, 2
cmp dword [ebp - 0x324], ecx
jle 0x4c7da7
mov dword [ebp - 0x324], 1
call fcn.00483f80
push eax
push 0x65bdc6
push str.ERROR:_CE:__s__s
lea edx, [ebp - 0x218]
push edx
call fcn.00532706
add esp, 0x10
lea eax, [ebp - 0x218]
push eax
push 0
call fcn.00436500
add esp, 8
call fcn.0048ab00
cmp eax, 1
jne 0x4c7da7
mov dword [0x65bdd0], 0
mov cx, word [ebp - 0x334]
mov word [0x65bdd6], cx
mov dx, word [ebp - 0x330]
mov word [0x65bdcc], dx
mov ax, word [ebp - 0x644]
mov word [0x65bdce], ax
push str.no_write_9__CE_
push 0
call fcn.00436500
add esp, 8
jmp 0x4c939a
push 0
push 0x48b610
call dword [sym.imp.USER32.dll_EnumWindows]
cmp dword [0x5f9bd8], 1
jne 0x4c7e04
mov dword [0x65bdd0], 0
mov cx, word [ebp - 0x334]
mov word [0x65bdd6], cx
mov dx, word [ebp - 0x330]
mov word [0x65bdcc], dx
mov ax, word [ebp - 0x644]
mov word [0x65bdce], ax
push str.no_write_10__CE_
push 0
call fcn.00436500
add esp, 8
jmp 0x4c939a
cmp dword [0x65bdd0], 0xf
jge 0x4c7e65
push 0x65bdc0
call fcn.00452750
add esp, 4
test eax, eax
jne 0x4c7e65
mov dword [0x65bdd0], 0
mov cx, word [ebp - 0x334]
mov word [0x65bdd6], cx
mov dx, word [ebp - 0x330]
mov word [0x65bdcc], dx
mov ax, word [ebp - 0x644]
mov word [0x65bdce], ax
push str.no_write_8__less_than_15_seconds_audio_heard_
push 0
call fcn.00436500
add esp, 8
jmp 0x4c939a
cmp dword [0x5fd87c], 0
je 0x4c7eb5
mov dword [0x65bdd0], 0
mov cx, word [ebp - 0x334]
mov word [0x65bdd6], cx
mov dx, word [ebp - 0x330]
mov word [0x65bdcc], dx
mov ax, word [ebp - 0x644]
mov word [0x65bdce], ax
push str.AUTO_mode_is_on
push 0
call fcn.00436500
add esp, 8
jmp 0x4c939a
mov ecx, dword [ebp - 0x324]
mov dword [0x65bdd0], ecx
push 0x65bdc0
call fcn.00452750
add esp, 4
cmp eax, 1
jne 0x4c7edd
mov dword [0x65bdd0], 0
cmp dword [0x5fda88], 1
jne 0x4c7f79
cmp dword [ebp - 0x324], 1
jne 0x4c7f79
movsx edx, word [0x65bdd4]
cmp edx, 0x1f4
jne 0x4c7f79
push 0x65bdc0
call fcn.00452750
add esp, 4
test eax, eax
jne 0x4c7f79
movsx eax, word [0x65bde0]
movsx ecx, word [0x65bde2]
add eax, ecx
movsx edx, word [0x65bde4]
add eax, edx
jne 0x4c7f79
mov dword [0x65bdd0], 0
mov ax, word [ebp - 0x334]
mov word [0x65bdd6], ax
mov cx, word [ebp - 0x330]
mov word [0x65bdcc], cx
mov dx, word [ebp - 0x644]
mov word [0x65bdce], dx
push str.no_write_3
push 0
call fcn.00436500
add esp, 8
jmp 0x4c939a
cmp dword [0x5fdb08], 0x3c
jne 0x4c80c9
movsx eax, word [0x65bdf2]
cmp eax, dword [ebp - 0x648]
jg 0x4c80c9
mov ecx, dword [ebp - 0x650]
imul ecx, ecx, 0x1564
movsx edx, word [0x65bdcc]
imul edx, edx, 0x94
lea eax, [ecx + edx + 0x667080]
movsx ecx, word [0x65bdce]
cmp dword [eax + ecx*4], 0
je 0x4c80c9
mov edx, dword [ebp - 0x650]
imul edx, edx, 0x1564
movsx eax, word [0x65bdcc]
imul eax, eax, 0x94
lea ecx, [edx + eax + 0x667080]
movsx edx, word [0x65bdce]
mov eax, dword [ecx + edx*4]
movsx ecx, byte [eax + 0x4e]
cmp ecx, 0x30
jl 0x4c80c9
push 4
push 0x9f
mov edx, dword [ebp - 0x650]
imul edx, edx, 0x1564
movsx eax, word [0x65bdcc]
imul eax, eax, 0x94
lea ecx, [edx + eax + 0x667080]
movsx edx, word [0x65bdce]
mov eax, dword [ecx + edx*4]
push eax
call fcn.00433b80
add esp, 0xc
cmp eax, 0x64
jne 0x4c80c9
push 4
push 0x95
mov ecx, dword [ebp - 0x650]
imul ecx, ecx, 0x1564
movsx edx, word [0x65bdcc]
imul edx, edx, 0x94
lea eax, [ecx + edx + 0x667080]
movsx ecx, word [0x65bdce]
mov edx, dword [eax + ecx*4]
push edx
call fcn.00433b80
add esp, 0xc
cmp eax, 0x14
jl 0x4c80bf
push str.Word_Pairs
mov eax, dword [ebp - 0x650]
imul eax, eax, 0x1564
movsx ecx, word [0x65bdcc]
imul ecx, ecx, 0x94
lea edx, [eax + ecx + 0x667080]
movsx eax, word [0x65bdce]
mov ecx, dword [edx + eax*4]
push ecx
call fcn.00532680
add esp, 8
test eax, eax
je 0x4c80c9
mov dword [ebp - 0x648], 2
movsx edx, word [0x65bddc]
test edx, edx
jne 0x4c813b
movsx eax, word [0x65bdf2]
cmp eax, dword [ebp - 0x648]
jg 0x4c813b
push 0x65bdc0
call fcn.00452750
add esp, 4
test eax, eax
jne 0x4c813b
mov dword [0x65bdd0], 0
mov cx, word [ebp - 0x334]
mov word [0x65bdd6], cx
mov dx, word [ebp - 0x330]
mov word [0x65bdcc], dx
mov ax, word [ebp - 0x644]
mov word [0x65bdce], ax
push str.no_write_4__no_questions_answered_or_not_enough_audio_heard_
push 0
call fcn.00436500
add esp, 8
jmp 0x4c939a
push 0x63
mov ecx, dword [0x5fda50]
push ecx
mov edx, dword [0x5fda74]
push edx
mov eax, dword [0x5fdb08]
push eax
call fcn.00432210
add esp, 0x10
cmp eax, 1
jne 0x4c81a5
mov dword [0x65bdd0], 0
mov cx, word [ebp - 0x334]
mov word [0x65bdd6], cx
mov dx, word [ebp - 0x330]
mov word [0x65bdcc], dx
mov ax, word [ebp - 0x644]
mov word [0x65bdce], ax
push str.no_write_7__its_a_99_lesson_
push 0
call fcn.00436500
add esp, 8
jmp 0x4c939a
lea ecx, [ebp - 0x640]
push ecx
mov edx, dword [0x65bdd0]
push edx
push 0x65bdc6
call fcn.00483f80
push eax
push str.Hist_Write:_now_s__st_s__min_d__les_s
lea eax, [ebp - 0x218]
push eax
call fcn.00532706
add esp, 0x18
lea ecx, [ebp - 0x218]
push ecx
push 0
call fcn.00436500
add esp, 8
lea edx, [ebp - 0x344]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.004281d0
add esp, 8
mov ecx, dword [ebp + 0xc]
push ecx
push 0x5c
mov edx, dword [ebp + 8]
add edx, 0x52
push edx
push 0x5c
lea eax, [ebp - 0x344]
push eax
push 0x5c44f8
push 0x573fc8
lea ecx, [ebp - 0x320]
push ecx
call fcn.00532706
add esp, 0x20
cmp dword [0x5f6630], 1
jne 0x4c8250
cmp dword [0x5f663c], 0
je 0x4c8250
push 0x1068ea0
push 0x573fe0
lea edx, [ebp - 0x320]
push edx
call fcn.00532706
add esp, 0xc
mov eax, dword [ebp + 0xc]
movsx ecx, word [eax + 0x8e50]
test ecx, ecx
je 0x4c8281
cmp dword [0x5f663c], 0
jne 0x4c8281
push 0x65bdc0
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.004d0b20
add esp, 0xc
jmp 0x4c86b4
mov dword [0x5fd944], 0x69
mov byte [0x5c4c2c], 0
mov byte [0x15444c0], 0
push 0x15444c0
mov ecx, dword [ebp + 0xc]
push ecx
call fcn.0045c5d0
add esp, 8
push 1
push 0x573fec
lea edx, [ebp - 0x320]
push edx
call fcn.00459360
add esp, 0xc
mov dword [ebp - 0xc], eax
cmp dword [0x5fdb24], 1
jne 0x4c82e3
cmp dword [ebp - 0xc], 0
je 0x4c82de
mov eax, dword [ebp - 0xc]
push eax
call fcn.00431d50
add esp, 4
jmp 0x4c939a
cmp dword [ebp - 0xc], 0
je 0x4c85f4
cmp dword [0x65bdd0], 0
jne 0x4c8300
mov dword [0x65bdd0], 1
mov ecx, dword [ebp - 0xc]
push ecx
call fcn.004557e0
add esp, 4
mov dword [ebp - 0x328], eax
push 0x65bdc0
push 0x5fe5f0
call fcn.00432300
add esp, 8
cmp eax, 1
jne 0x4c8450
movsx edx, word [0x5fe610]
movsx eax, word [0x65bde0]
add eax, edx
mov word [0x65bde0], ax
movsx ecx, word [0x5fe614]
movsx edx, word [0x65bde4]
add edx, ecx
mov word [0x65bde4], dx
movsx eax, word [0x5fe616]
movsx ecx, word [0x65bde6]
add ecx, eax
mov word [0x65bde6], cx
movsx edx, word [0x5fe612]
movsx eax, word [0x65bde2]
add eax, edx
mov word [0x65bde2], ax
movsx ecx, word [0x5fe61e]
movsx edx, word [0x65bdee]
add edx, ecx
mov word [0x65bdee], dx
movsx eax, word [0x5fe618]
movsx ecx, word [0x65bde8]
add ecx, eax
mov word [0x65bde8], cx
movsx edx, word [0x5fe60e]
movsx eax, word [0x65bdde]
add eax, edx
mov word [0x65bdde], ax
movsx ecx, word [0x5fe60c]
movsx edx, word [0x65bddc]
add edx, ecx
mov word [0x65bddc], dx
movsx eax, word [0x5fe622]
movsx ecx, word [0x65bdf2]
add ecx, eax
mov word [0x65bdf2], cx
movsx edx, word [0x5fe628]
movsx eax, word [0x65bdf8]
add eax, edx
mov word [0x65bdf8], ax
mov ecx, dword [0x65bdf4]
add ecx, dword [0x5fe624]
mov dword [0x65bdf4], ecx
movsx edx, word [0x5fe61a]
movsx eax, word [0x65bdea]
add eax, edx
mov word [0x65bdea], ax
movsx ecx, word [0x5fe61c]
movsx edx, word [0x65bdec]
add edx, ecx
mov word [0x65bdec], dx
jmp 0x4c8472
mov eax, dword [ebp - 0x328]
add eax, 1
mov dword [ebp - 0x328], eax
mov ecx, dword [ebp - 0x328]
push ecx
mov edx, dword [ebp - 0xc]
push edx
call fcn.00455880
add esp, 8
push 0xc8
push 0x65bdc0
push 0x5fe5f0
call fcn.00533040
add esp, 0xc
mov eax, dword [ebp - 0x328]
sub eax, 1
imul eax, eax, 0xc8
add eax, 4
mov dword [ebp - 0x21c], eax
push 0
mov ecx, dword [ebp - 0x21c]
push ecx
mov edx, dword [ebp - 0xc]
push edx
call fcn.00532940
add esp, 0xc
mov eax, dword [ebp - 0xc]
push eax
push 1
push 0xc8
push 0x65bdc0
call fcn.005337fa
add esp, 0x10
cmp dword [0x5f5664], 0
jle 0x4c84ea
lea ecx, [ebp - 0x328]
push ecx
mov edx, dword [ebp - 0xc]
push edx
call fcn.004c7780
add esp, 8
mov eax, dword [ebp - 0xc]
push eax
call fcn.00431d50
add esp, 4
mov ecx, dword [0x569250]
mov dword [ebp - 0x64c], ecx
mov dword [0x569250], 1
push 1
push 0x1102600
call fcn.0042cf90
add esp, 8
mov edx, dword [0x5fdb08]
push edx
push 0x1102600
call fcn.0042cd90
add esp, 8
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 0x270f
je 0x4c8551
mov eax, dword [ebp - 0x32c]
add eax, 0x79
mov byte [0x65be0a], al
jmp 0x4c8558
mov byte [0x65be0a], 0
push 0x63
push 0x1102600
call fcn.0042cd90
add esp, 8
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 0x270f
je 0x4c858a
mov ecx, dword [ebp - 0x32c]
add ecx, 0x79
mov byte [0x65be0b], cl
jmp 0x4c8591
mov byte [0x65be0b], 0
mov edx, dword [ebp - 0x64c]
mov dword [0x569250], edx
push 1
push 0x573ff0
lea eax, [ebp - 0x320]
push eax
call fcn.00459360
add esp, 0xc
mov dword [ebp - 0xc], eax
push 0
mov ecx, dword [ebp - 0x21c]
push ecx
mov edx, dword [ebp - 0xc]
push edx
call fcn.00532940
add esp, 0xc
mov eax, dword [ebp - 0xc]
push eax
push 1
push 0xc8
push 0x65bdc0
call fcn.005337fa
add esp, 0x10
mov ecx, dword [ebp - 0xc]
push ecx
call fcn.00431d50
add esp, 4
jmp 0x4c86b4
mov dword [0x5fd944], 0x6a
push 0
push 0x573ff4
lea edx, [ebp - 0x320]
push edx
call fcn.00459360
add esp, 0xc
mov dword [ebp - 0xc], eax
cmp dword [0x5fdb24], 1
jne 0x4c8637
cmp dword [ebp - 0xc], 0
je 0x4c8632
mov eax, dword [ebp - 0xc]
push eax
call fcn.00431d50
add esp, 4
jmp 0x4c939a
cmp dword [ebp - 0xc], 0
je 0x4c86b4
mov dword [0x5f42a8], 1
mov dword [ebp - 0x328], 1
mov ecx, dword [ebp - 0x328]
push ecx
mov edx, dword [ebp - 0xc]
push edx
call fcn.00455880
add esp, 8
push 2
push 0
mov eax, dword [ebp - 0xc]
push eax
call fcn.00532940
add esp, 0xc
mov ecx, dword [ebp - 0xc]
push ecx
push 1
push 0xc8
push 0x65bdc0
call fcn.005337fa
add esp, 0x10
cmp dword [0x5f5664], 0
jle 0x4c86a8
lea edx, [ebp - 0x328]
push edx
mov eax, dword [ebp - 0xc]
push eax
call fcn.004c7780
add esp, 8
mov ecx, dword [ebp - 0xc]
push ecx
call fcn.00431d50
add esp, 4
mov edx, dword [0x5f42a8]
add edx, 1
mov dword [0x5f42a8], edx
movsx eax, byte [0x5f5038]
test eax, eax
je 0x4c8833
mov dword [ebp - 0x220], 0
call fcn.00483eb0
fadd qword [0x54b680]
fstp dword [ebp - 4]
push 1
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
push 0x10
push 0x573ff8
push 0x5f5038
call fcn.005353b0
add esp, 0xc
mov dword [ebp - 0xc], eax
push 0
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
cmp dword [ebp - 0xc], 0
jne 0x4c8762
cmp dword [ebp - 0x220], 0
jne 0x4c872d
push 0x5f5038
call fcn.00492300
add esp, 4
mov ecx, dword [ebp - 0x220]
add ecx, 1
mov dword [ebp - 0x220], ecx
call fcn.00483470
fadd st(0), st(0)
fstp dword [ebp - 0x14]
call fcn.00483eb0
fadd dword [ebp - 0x14]
fstp dword [ebp - 0x10]
call fcn.00483eb0
fld dword [ebp - 0x10]
fcompp
fnstsw ax
test ah, 0x41
je 0x4c8751
cmp dword [ebp - 0xc], 0
jne 0x4c878f
cmp dword [ebp - 0x220], 0xa
jge 0x4c878f
call fcn.00483eb0
fld dword [ebp - 4]
fcompp
fnstsw ax
test ah, 0x41
jne 0x4c878f
cmp dword [0x5fdb24], 0
je 0x4c86ea
cmp dword [0x5fdb24], 0
jne 0x4c8833
mov edx, dword [0x5f42a8]
push edx
lea eax, [ebp - 0x640]
push eax
push 0x65bdc0
mov ecx, dword [ebp + 0xc]
push ecx
call fcn.004489c0
add esp, 0x10
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0xc], 0
je 0x4c8802
cmp dword [ebp - 0x32c], 1
jne 0x4c87e5
mov edx, dword [ebp - 0xc]
push edx
lea eax, [ebp - 0x640]
push eax
call fcn.00534f64
add esp, 8
jmp 0x4c87f4
mov ecx, dword [0x5f42a8]
sub ecx, 1
mov dword [0x5f42a8], ecx
mov edx, dword [ebp - 0xc]
push edx
call fcn.00535898
add esp, 4
jmp 0x4c8833
lea eax, [ebp - 0x640]
push eax
push 0x5f5038
push str.ERROR:_Couldnt_export_records_to__s___s
lea ecx, [ebp - 0x218]
push ecx
call fcn.00532706
add esp, 0x10
lea edx, [ebp - 0x218]
push edx
push 0
call fcn.00436500
add esp, 8
mov dword [0x65bdd0], 0
mov ax, word [ebp - 0x334]
mov word [0x65bdd6], ax
mov cx, word [ebp - 0x330]
mov word [0x65bdcc], cx
mov dx, word [ebp - 0x644]
mov word [0x65bdce], dx
push 1
movsx eax, word [0x65bdce]
push eax
movsx ecx, word [0x65bdcc]
push ecx
push 1
mov edx, dword [0x5fdb08]
push edx
mov eax, dword [ebp + 0xc]
push eax
call fcn.0045b4f0
add esp, 0x18
movsx ecx, word [0x65bdcc]
cmp dword [0x5fda74], ecx
jne 0x4c88ab
movsx edx, word [0x65bdce]
cmp dword [0x5fda50], edx
je 0x4c88cf
push 1
mov eax, dword [0x5fda50]
push eax
mov ecx, dword [0x5fda74]
push ecx
push 1
mov edx, dword [0x5fdb08]
push edx
mov eax, dword [ebp + 0xc]
push eax
call fcn.0045b4f0
add esp, 0x18
mov ecx, dword [ebp + 8]
movsx edx, word [ecx + 0x66]
cmp edx, 1
je 0x4c88f2
mov eax, dword [0x5fdb08]
push eax
call fcn.0042dc10
add esp, 4
cmp eax, 1
jne 0x4c8aec
mov ecx, dword [ebp - 0x650]
imul ecx, ecx, 0x1564
movsx edx, word [0x65bdcc]
imul edx, edx, 0x94
lea eax, [ecx + edx + 0x667080]
movsx ecx, word [0x65bdce]
mov edx, dword [eax + ecx*4]
movsx eax, byte [edx + 0xa3]
cmp eax, 0x54
je 0x4c8962
mov ecx, dword [ebp - 0x650]
imul ecx, ecx, 0x1564
movsx edx, word [0x65bdcc]
imul edx, edx, 0x94
lea eax, [ecx + edx + 0x667080]
movsx ecx, word [0x65bdce]
mov edx, dword [eax + ecx*4]
movsx eax, byte [edx + 0xa3]
cmp eax, 0x50
jne 0x4c8aec
movsx ecx, word [0x65bdce]
push ecx
movsx edx, word [0x65bdcc]
push edx
lea eax, [ebp - 0x218]
push eax
call fcn.00433cb0
add esp, 0xc
lea ecx, [ebp - 0x218]
push ecx
push 0x5fe4b0
call fcn.00532590
add esp, 8
push 0x574028
push 0x5fe4b0
call fcn.00532590
add esp, 8
push 0
movsx edx, word [0x65bdce]
push edx
movsx eax, word [0x65bdcc]
push eax
push 1
mov ecx, dword [0x5fdb08]
push ecx
mov edx, dword [ebp + 0xc]
push edx
call fcn.0045b4f0
add esp, 0x18
movsx eax, word [0x65bdcc]
cmp dword [0x5fda74], eax
jne 0x4c89ec
movsx ecx, word [0x65bdce]
cmp dword [0x5fda50], ecx
je 0x4c8a10
push 0
mov edx, dword [0x5fda50]
push edx
mov eax, dword [0x5fda74]
push eax
push 1
mov ecx, dword [0x5fdb08]
push ecx
mov edx, dword [ebp + 0xc]
push edx
call fcn.0045b4f0
add esp, 0x18
cmp dword [0x5f6630], 1
jne 0x4c8a84
push 2
movsx eax, word [0x65bdce]
push eax
movsx ecx, word [0x65bdcc]
push ecx
push 1
mov edx, dword [0x5fdb08]
push edx
mov eax, dword [ebp + 0xc]
push eax
call fcn.0045b4f0
add esp, 0x18
movsx ecx, word [0x65bdcc]
cmp dword [0x5fda74], ecx
jne 0x4c8a5e
movsx edx, word [0x65bdce]
cmp dword [0x5fda50], edx
je 0x4c8a82
push 2
mov eax, dword [0x5fda50]
push eax
mov ecx, dword [0x5fda74]
push ecx
push 1
mov edx, dword [0x5fdb08]
push edx
mov eax, dword [ebp + 0xc]
push eax
call fcn.0045b4f0
add esp, 0x18
jmp 0x4c8aec
push 2
movsx ecx, word [0x65bdce]
push ecx
movsx edx, word [0x65bdcc]
push edx
push 0
mov eax, dword [0x5fdb08]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
call fcn.0045b4f0
add esp, 0x18
movsx edx, word [0x65bdcc]
cmp dword [0x5fda74], edx
jne 0x4c8ac8
movsx eax, word [0x65bdce]
cmp dword [0x5fda50], eax
je 0x4c8aec
push 2
mov ecx, dword [0x5fda50]
push ecx
mov edx, dword [0x5fda74]
push edx
push 0
mov eax, dword [0x5fdb08]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
call fcn.0045b4f0
add esp, 0x18
mov edx, dword [0x5fdb08]
push edx
push 0x1102600
mov eax, dword [0x5c4c28]
imul eax, eax, 0x127c
add eax, 0x11a6ec0
push eax
call fcn.0045c780
add esp, 0xc
mov ecx, dword [0x5c4c28]
imul ecx, ecx, 0x127c
movsx edx, word [ecx + 0x11a6f28]
cmp edx, 1
jne 0x4c8b8d
mov dword [0x56149c], 0xffffffff
push 0x1102600
mov eax, dword [0x5c4c28]
imul eax, eax, 0x127c
add eax, 0x11a6ec0
push eax
call fcn.0044a6b0
add esp, 8
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 1
jne 0x4c8b8d
push 0x1102600
mov ecx, dword [0x5c4c28]
imul ecx, ecx, 0x127c
add ecx, 0x11a6ec0
push ecx
call fcn.004423c0
add esp, 8
push 0x1102600
call fcn.0044a800
add esp, 4
mov edx, dword [0x5fdb08]
push edx
call fcn.0042dba0
add esp, 4
test eax, eax
jne 0x4c8cdd
movsx eax, word [0x65bdfc]
cmp eax, 3
jne 0x4c8cdd
push 0x1102600
mov ecx, dword [0x5c4c28]
imul ecx, ecx, 0x127c
add ecx, 0x11a6ec0
push ecx
lea edx, [ebp - 0x320]
push edx
call fcn.0042f1f0
add esp, 0xc
lea eax, [ebp - 0x320]
push eax
push 0xff
lea ecx, [ebp - 0x218]
push ecx
push 0x5fe387
push str.MT_SCORE_TO_UNLOCK_NEXT_LEVEL
push str.UNLOCK.FC
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
movsx esi, word [0x65bdd4]
sub esi, 0x3e8
lea edx, [ebp - 0x218]
push edx
call fcn.00535089
add esp, 4
cmp esi, eax
jle 0x4c8cdd
mov dword [ebp - 0x32c], 0
push 0x32
push 0x1102600
call fcn.0042cd90
add esp, 8
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 0x64
jl 0x4c8c7d
push 1
mov eax, dword [0x5fdb08]
push eax
push 1
mov ecx, dword [ebp - 0x32c]
sub ecx, 0x64
push ecx
push 0x574058
push 0x1102600
call fcn.00440c60
add esp, 0x18
mov dword [ebp - 0x32c], eax
jmp 0x4c8ca7
push 1
mov edx, dword [0x5fdb08]
push edx
push 1
mov eax, dword [ebp - 0x32c]
push eax
push 0x57405c
push 0x1102600
call fcn.00440c60
add esp, 0x18
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 1
jne 0x4c8cdd
push 0x1102600
mov ecx, dword [0x5c4c28]
imul ecx, ecx, 0x127c
add ecx, 0x11a6ec0
push ecx
call fcn.004423c0
add esp, 8
push 0x1102600
call fcn.0044a800
add esp, 4
mov edx, dword [0x5fdb08]
push edx
call fcn.0042dba0
add esp, 4
cmp eax, 1
jne 0x4c9186
movsx eax, word [0x65bdfc]
cmp eax, 0x64
jge 0x4c9186
mov dword [ebp - 0x32c], 0
cmp dword [0x5fdb08], 0x39
jne 0x4c8eac
push 0x65bdc0
call fcn.00452320
add esp, 4
test eax, eax
jne 0x4c8ea7
push 0
push 3
push 2
mov ecx, dword [0x5fdb08]
push ecx
push 0x1102600
call fcn.0045b180
add esp, 0x14
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 1
jne 0x4c8ea7
push 1
push 0xffffffffffffffff
push 0
movsx edx, word [0x65bdfc]
push edx
push 0x574060
push 0x1102600
call fcn.00440c60
add esp, 0x18
mov dword [ebp - 0x32c], eax
mov dword [ebp - 0x654], 1
jmp 0x4c8d99
mov eax, dword [ebp - 0x654]
add eax, 1
mov dword [ebp - 0x654], eax
cmp dword [ebp - 0x654], 5
jg 0x4c8ddc
push 0
mov ecx, dword [ebp - 0x654]
push ecx
push 2
push 1
push 0x39
push 0x1102600
call fcn.0045b4f0
add esp, 0x18
push 2
mov edx, dword [ebp - 0x654]
push edx
push 2
push 1
push 0x39
push 0x1102600
call fcn.0045b4f0
add esp, 0x18
jmp 0x4c8d8a
push 0x1102600
call fcn.0044a800
add esp, 4
push 0x39
push 0x1102600
mov eax, dword [0x5c4c28]
imul eax, eax, 0x127c
add eax, 0x11a6ec0
push eax
call fcn.0045c780
add esp, 0xc
push 5
mov ecx, dword [0x5c4c28]
imul ecx, ecx, 0x127c
add ecx, 0x11a6ec0
push ecx
call fcn.00460890
add esp, 8
movsx edx, ax
cmp edx, 1
jne 0x4c8e47
push 0x574064
push 0x359
push 0x57406c
call fcn.00431ee0
add esp, 0xc
jmp 0x4c8ea7
push 0x5f5880
call fcn.00532e80
add esp, 4
cmp eax, 3
jne 0x4c8e72
push 0x574078
push 0x35b
push 0x574080
call fcn.00431ee0
add esp, 0xc
jmp 0x4c8ea7
cmp dword [0x573dbc], 1
jne 0x4c8e90
cmp dword [0x5f4a98], 0
jne 0x4c8e90
push 0
call fcn.004b3830
add esp, 4
jmp 0x4c8ea7
push 0x57408c
push 0x35f
push 0x574094
call fcn.00431ee0
add esp, 0xc
jmp 0x4c9150
movsx eax, word [0x65bdcc]
cmp eax, 1
jne 0x4c9001
push 0x65bdc0
call fcn.00452320
add esp, 4
test eax, eax
jne 0x4c8ffc
push 0
push 2
push 1
mov ecx, dword [0x5fdb08]
push ecx
push 0x1102600
call fcn.0045b180
add esp, 0x14
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 1
jne 0x4c8ffc
cmp dword [0x110b0ee], 0x3c
jl 0x4c8f17
push 0x5740a0
push 0x11027b6
call fcn.005327a0
add esp, 8
test eax, eax
jne 0x4c8f3d
push 1
push 0xffffffffffffffff
push 0
movsx edx, word [0x65bdfc]
push edx
push 0x5740a4
push 0x1102600
call fcn.00440c60
add esp, 0x18
mov dword [ebp - 0x32c], eax
push 0x1102600
call fcn.00452870
add esp, 4
cmp dword [ebp - 0x32c], 0
jne 0x4c8f60
push 0x1102600
call fcn.0044a800
add esp, 4
push 5
mov eax, dword [0x5c4c28]
imul eax, eax, 0x127c
add eax, 0x11a6ec0
push eax
call fcn.00460890
add esp, 8
movsx ecx, ax
cmp ecx, 1
jne 0x4c8f9c
push 0x5740a8
push 0x376
push 0x5740b0
call fcn.00431ee0
add esp, 0xc
jmp 0x4c8ffc
push 0x5f5880
call fcn.00532e80
add esp, 4
cmp eax, 3
jne 0x4c8fc7
push 0x5740bc
push 0x378
push 0x5740c4
call fcn.00431ee0
add esp, 0xc
jmp 0x4c8ffc
cmp dword [0x573dbc], 1
jne 0x4c8fe5
cmp dword [0x5f4a98], 0
jne 0x4c8fe5
push 0
call fcn.004b3830
add esp, 4
jmp 0x4c8ffc
push 0x5740d0
push 0x37c
push 0x5740d8
call fcn.00431ee0
add esp, 0xc
jmp 0x4c9150
movsx edx, word [0x65bdcc]
cmp edx, 2
jne 0x4c9150
push 0x65bdc0
call fcn.00452320
add esp, 4
test eax, eax
jne 0x4c9150
push 0
push 3
push 2
mov eax, dword [0x5fdb08]
push eax
push 0x1102600
call fcn.0045b180
add esp, 0x14
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 1
jne 0x4c9150
cmp dword [0x110b0ee], 0x3c
jl 0x4c906b
push 0x5740e4
push 0x11027b6
call fcn.005327a0
add esp, 8
test eax, eax
jne 0x4c9091
push 1
push 0xffffffffffffffff
push 0
movsx ecx, word [0x65bdfc]
push ecx
push 0x5740e8
push 0x1102600
call fcn.00440c60
add esp, 0x18
mov dword [ebp - 0x32c], eax
push 0x1102600
call fcn.00452870
add esp, 4
cmp dword [ebp - 0x32c], 0
jne 0x4c90b4
push 0x1102600
call fcn.0044a800
add esp, 4
push 5
mov edx, dword [0x5c4c28]
imul edx, edx, 0x127c
add edx, 0x11a6ec0
push edx
call fcn.00460890
add esp, 8
cwde
cmp eax, 1
jne 0x4c90f0
push 0x5740ec
push 0x38d
push 0x5740f4
call fcn.00431ee0
add esp, 0xc
jmp 0x4c9150
push 0x5f5880
call fcn.00532e80
add esp, 4
cmp eax, 3
jne 0x4c911b
push 0x574100
push 0x38f
push 0x574108
call fcn.00431ee0
add esp, 0xc
jmp 0x4c9150
cmp dword [0x573dbc], 1
jne 0x4c9139
cmp dword [0x5f4a98], 0
jne 0x4c9139
push 0
call fcn.004b3830
add esp, 4
jmp 0x4c9150
push 0x574114
push 0x393
push 0x57411c
call fcn.00431ee0
add esp, 0xc
cmp dword [ebp - 0x32c], 1
jne 0x4c9186
push 0x1102600
mov ecx, dword [0x5c4c28]
imul ecx, ecx, 0x127c
add ecx, 0x11a6ec0
push ecx
call fcn.004423c0
add esp, 8
push 0x1102600
call fcn.0044a800
add esp, 4
mov edx, dword [0x5fdb08]
push edx
call fcn.0042db70
add esp, 4
cmp eax, 1
jne 0x4c939a
push 0x65bdc0
call fcn.00452320
add esp, 4
test eax, eax
jne 0x4c939a
push str.Its_a_non_Practice_ST
push 3
call fcn.00436500
add esp, 8
push 0x65bdc0
call fcn.004527d0
add esp, 4
cmp eax, 1
je 0x4c91e1
cmp dword [0x5fdc0c], 1
jne 0x4c939a
mov eax, dword [0x5f6630]
push eax
mov ecx, dword [0x5f4d24]
push ecx
mov edx, dword [0x5f5d80]
push edx
push str.Final_ST__d__d__d
lea eax, [ebp - 0x218]
push eax
call fcn.00532706
add esp, 0x14
lea ecx, [ebp - 0x218]
push ecx
push 3
call fcn.00436500
add esp, 8
cmp dword [0x5f5d80], 1
jne 0x4c9246
cmp dword [0x5f4d24], 0
je 0x4c9246
cmp dword [0x5f6630], 1
jne 0x4c9246
push 0x1102600
mov edx, dword [ebp + 8]
push edx
call fcn.00465040
add esp, 8
push 0x1102600
call fcn.00452b20
add esp, 4
mov eax, dword [0x5fdb08]
push eax
push 0x1102600
mov ecx, dword [0x5c4c28]
imul ecx, ecx, 0x127c
add ecx, 0x11a6ec0
push ecx
call fcn.0045c780
add esp, 0xc
cmp dword [0x110b0ee], 0x3c
jge 0x4c933a
push 7
mov edx, dword [0x5c4c28]
imul edx, edx, 0x127c
add edx, 0x11a6ec0
push edx
call fcn.00460890
add esp, 8
cwde
cmp eax, 1
jne 0x4c933a
movsx ecx, word [0x110b152]
mov dword [ebp - 0x32c], ecx
cmp dword [ebp - 0x32c], 0
jl 0x4c933a
cmp dword [ebp - 0x32c], 0x64
jge 0x4c933a
movsx edx, word [0x65bdfc]
cmp edx, dword [ebp - 0x32c]
jle 0x4c933a
movsx eax, word [0x65bdfc]
mov dword [ebp - 0x658], eax
mov ecx, dword [ebp - 0x32c]
add ecx, 2
cmp dword [ebp - 0x658], ecx
jle 0x4c9308
mov edx, dword [ebp - 0x32c]
add edx, 2
mov dword [ebp - 0x658], edx
push 1
push 0xffffffffffffffff
push 0
mov eax, dword [ebp - 0x658]
push eax
push 0x574154
push 0x1102600
call fcn.00440c60
add esp, 0x18
mov dword [ebp - 0x32c], eax
push 0x1102600
call fcn.0044a800
add esp, 4
push 0x5f5880
call fcn.00532e80
add esp, 4
cmp eax, 3
jne 0x4c9365
push 0x574158
push 0x401
push 0x574160
call fcn.00431ee0
add esp, 0xc
jmp 0x4c939a
cmp dword [0x573dbc], 1
jne 0x4c9383
cmp dword [0x5f4a98], 0
jne 0x4c9383
push 0
call fcn.004b3830
add esp, 4
jmp 0x4c939a
push 0x57416c
push 0x405
push str.Hist_Write
call fcn.00431ee0
add esp, 0xc
pop esi
mov ecx, dword [ebp - 0x18]
xor ecx, ebp
call fcn.00532783
mov esp, ebp
pop ebp
ret