Function at 0x40ec50
Capabilities:
Check for time delay via gettickcount
Encrypt data using speck

Disassembly:
sub esp, 0x110
push ebx
push ebp
push esi
mov esi, dword [esp + 0x134]
mov dword [esp + 0x28], edx
mov dword [esp + 0x10], ecx
push edi
mov di, word [esp + 0x130]
movzx ebp, di
cmp esi, 0xffc3d44f
je 0x40ec91
cmp esi, 0xffc3d44e
je 0x40ec91
mov byte [esp + 0x1b], 0
cmp esi, 0xffc3d44d
jne 0x40ec96
mov byte [esp + 0x1b], 1
mov ecx, dword [0x4e8cd8]
mov ebx, dword [esp + 0x12c]
test ecx, ecx
jne 0x40ecb4
lea edx, [esp + 0x4c]
mov dword [esp + 0x24], edx
jmp 0x40ed7b
mov eax, dword [0x4e8cf4]
imul esi, eax, 0xd4
inc eax
mov dword [0x4e8cf4], eax
add esi, ecx
mov dword [esp + 0x24], esi
cmp eax, dword [0x4e47fc]
jl 0x40ecdd
mov dword [0x4e8cf4], 0
mov eax, dword [esp + 0x134]
mov byte [esi], bl
mov byte [esi + 6], al
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov ecx, eax
mov dword [0x4e8cf0], eax
sub ecx, dword [0x4ea7e8]
mov dword [0x4ea7e8], eax
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
shr ecx, 0x1f
addsd xmm0, qword [ecx*8 + 0x4dcb40]
cvtpd2ps xmm0, xmm0
divss xmm0, dword [0x4dca4c]
movss dword [esi + 8], xmm0
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov edx, dword [esp + 0x24]
mov esi, eax
lea ecx, [edx + 0xc]
test esi, esi
je 0x40ed61
cmp esi, dword [0x4e8cec]
je 0x40ed5a
push esi
push ecx
push 0x418
push dword [0x4e8ccc]
call dword [sym.imp.USER32.dll_PostMessageW]
mov edx, dword [esp + 0x24]
jmp 0x40ed6e
xor eax, eax
mov word [ecx], ax
jmp 0x40ed6e
mov dword [ecx], 0x2f004e
mov dword [ecx + 4], 0x41
mov dword [0x4e8cec], esi
mov esi, dword [esp + 0x138]
cmp bl, 0xe7
jne 0x40edd0
mov ecx, dword [esp + 0x128]
push 0x7fff
push edx
push esi
push dword [esp + 0x140]
mov ax, word [ecx + 4]
push 0
mov word [edx + 2], ax
mov eax, 0x55
push 0xe7
push ecx
push dword [esp + 0x140]
mov ecx, dword [esp + 0x34]
mov word [edx + 4], ax
mov edx, dword [esp + 0x4c]
call fcn.004107e0
add esp, 0x20
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x110
ret
mov esi, dword [0x4ea818]
mov al, bl
add al, 0x64
mov word [edx + 2], di
mov cl, 3
mov edi, 0x20
cmp cl, al
sbb eax, eax
and eax, ebp
movzx eax, ax
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x14]
cmp eax, dword [0x4e8ef0]
jne 0x40ee29
mov cl, byte [esp + 0x13c]
and cl, 1
mov dword [esp + 0x3c], ecx
jne 0x40eeac
mov al, byte [esp + 0x134]
movzx ecx, bl
xor al, 1
shl al, 7
mov byte [ecx + 0x4e8f00], al
jmp 0x40eea8
mov edx, dword [esp + 0x13c]
mov ecx, edx
movzx ebp, bl
shr ecx, 4
and ecx, 0xffffff01
mov dword [esp + 0x3c], ecx
lea eax, [ebp*4]
add eax, ebp
cmp byte [esi + eax*4 + 8], 0
jne 0x40eeac
test dl, 0x10
jne 0x40eeac
cmp bl, 0xa0
je 0x40ee61
cmp bl, 0xa1
jne 0x40ee80
cmp byte [esp + 0x134], 0
jne 0x40ee80
cmp bl, 0xa0
mov eax, edi
mov edx, 0x10
cmove eax, edx
test byte [0x4e8efe], al
jne 0x40eeac
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov esi, dword [0x4ea818]
mov dword [0x4ea7f0], eax
mov dword [0x4ea7ec], eax
mov al, byte [esp + 0x134]
xor al, 1
shl al, 7
mov byte [ebp + 0x4e8f00], al
mov ecx, dword [esp + 0x3c]
mov dl, byte [esp + 0x1b]
test dl, dl
je 0x40eebb
mov eax, 0x69
jmp 0x40eec8
mov eax, 0x61
test cl, cl
cmovne edi, eax
movzx eax, di
cmp byte [0x4e8eef], 0
mov ebp, dword [esp + 0x24]
mov word [ebp + 4], ax
je 0x40ef0a
cmp bl, 0x5b
je 0x40eee3
cmp bl, 0x5c
jne 0x40ef0a
mov eax, dword [esp + 0x134]
test al, al
jne 0x40ef11
mov ecx, dword [esp + 0x138]
push 0
push SysReAllocString
push 0x7fff
push ebp
push ecx
push 0
jmp 0x41062c
mov eax, dword [esp + 0x134]
cmp byte [0x4ea67e], 0
mov edi, dword [sym.imp.USER32.dll_FindWindowW]
je 0x40efbb
cmp bl, 0x1b
jne 0x40efbb
test al, al
jne 0x40efbb
push 0
push 0x4d355c
call edi
test eax, eax
je 0x40efb1
push 0
push eax
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov esi, eax
call dword [sym.imp.KERNEL32.DLL_GetCurrentThreadId]
cmp esi, eax
jne 0x40efb1
push 0xffc3d44d
push 0
push 0
push 0
mov dl, bl
xor ecx, ecx
call fcn.00419af0
mov dl, byte [0x4e9005]
mov ecx, 1
push 0xffc3d44d
shr dl, 3
push 0
and dl, 1
push 0
push 0
or dl, 0xa4
call fcn.00419af0
mov ecx, dword [esp + 0x158]
add esp, 0x20
push 0
push SysReAllocString
push 0x7fff
push ebp
push ecx
push 0
push ecx
push 0x1b
jmp 0x41062e
mov esi, dword [0x4ea818]
mov dl, byte [esp + 0x1b]
mov eax, dword [esp + 0x1c]
movzx eax, ax
mov dword [esp + 0x30], eax
lea ecx, [eax + eax*4]
mov eax, dword [0x4ea81c]
lea ebp, [eax + ecx*4]
mov eax, dword [esp + 0x14]
mov cl, byte [ebp + 0x13]
mov byte [esp + 0x23], cl
cmp eax, dword [0x4e8ef4]
jne 0x40efe8
test cl, cl
jne 0x40eff5
movzx eax, bl
lea eax, [eax + eax*4]
lea ebp, [esi + eax*4]
mov eax, dword [esp + 0x14]
test dl, dl
je 0x40f067
mov ecx, dword [esp + 0x138]
mov eax, dword [esp + 0x134]
cmp ecx, 0xffc3d44e
jne 0x40f02d
test al, al
je 0x40f02d
cmp dword [0x4e902c], ebp
jne 0x40f02d
mov byte [ebp + 0xd], 0
mov byte [ebp + 0x10], 0
mov dword [0x4e902c], 0
mov edi, dword [esp + 0x24]
push 0x7fff
push edi
push ecx
push eax
mov ecx, dword [esp + 0x24]
push dword [esp + 0x2c]
mov edx, dword [esp + 0x40]
push ebx
push dword [esp + 0x140]
push dword [esp + 0x140]
call fcn.004107e0
add esp, 0x20
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x110
ret
mov edx, dword [esp + 0x134]
test dl, dl
jne 0x40f075
mov byte [ebp + 0x11], dl
cmp eax, dword [0x4e8ef0]
jne 0x40f107
test bl, bl
jne 0x40f0c5
mov edi, dword [esp + 0x24]
mov ecx, dword [esp + 0x138]
push 0x7fff
push edi
push ecx
push edx
push dword [esp + 0x2c]
mov edx, dword [esp + 0x40]
mov ecx, eax
push 0
push dword [esp + 0x140]
push dword [esp + 0x140]
call fcn.004107e0
add esp, 0x20
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x110
ret
cmp bl, 1
je 0x40f0cf
cmp bl, 2
jne 0x40f107
cmp dword [0x4e8ca4], 0
jne 0x40f138
push 0
push 0x4d356c
call edi
test eax, eax
je 0x40f0f6
push 0
push eax
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
cmp eax, dword [0x4e9f18]
je 0x40f131
mov esi, dword [0x4ea818]
mov edx, dword [esp + 0x134]
mov eax, dword [esp + 0x14]
mov ecx, dword [0x4e902c]
test ecx, ecx
je 0x40f16c
cmp ecx, ebp
je 0x40f16c
test dl, dl
jne 0x40f16c
cmp byte [ecx + 0x12], 0xff
je 0x40f16c
cmp eax, dword [0x4e8ef4]
jne 0x40f15b
xor eax, eax
cmp byte [ebp + 8], al
sete al
jmp 0x40f164
mov edx, dword [esp + 0x134]
mov byte [ebp + 0x10], 0
mov edi, dword [esp + 0x24]
mov al, dl
mov ecx, dword [esp + 0x138]
xor al, 1
push 0x7fff
push edi
push ecx
mov byte [ebp + 0xd], al
push edx
jmp 0x40f039
mov eax, dword [0x4e902c]
movzx eax, byte [eax + 8]
test eax, eax
je 0x40f16c
mov byte [ecx + 0x12], 1
cmp byte [ebp + 9], 0
jne 0x40f178
cmp byte [ebp + 0xa], 0
je 0x40f13c
mov dword [esp + 0x3c], 0
mov edi, 0x7fff
mov dword [esp + 0x34], edi
mov dword [esp + 0x38], edi
mov byte [esp + 0x11], 0
test dl, dl
je 0x40f1d4
mov ch, byte [ebp + 0x10]
mov al, byte [ebp + 0xd]
mov byte [esp + 0x13], al
movzx eax, word [ebp + 4]
mov byte [esp + 0x2b], ch
mov ecx, edi
mov byte [ebp + 0x10], 0
cmp ax, cx
je 0x40f1c1
mov edi, eax
mov word [ebp + 4], cx
mov dword [esp + 0x34], edi
mov dword [esp + 0x38], edi
mov al, byte [ebp + 0xc]
test al, 8
je 0x40f1e4
and al, 0xf7
mov byte [esp + 0x11], 1
mov byte [ebp + 0xc], al
jmp 0x40f1e4
mov al, byte [esp + 0x13]
mov byte [esp + 0x13], al
mov al, byte [esp + 0x13]
mov byte [esp + 0x2b], al
mov al, dl
xor cl, cl
xor al, 1
mov byte [ebp + 0xd], al
mov eax, dword [esp + 0x14]
cmp eax, dword [0x4e8ef4]
jne 0x40f262
cmp byte [ebp + 8], cl
je 0x40f288
cmp byte [esi + 0xcb5], cl
jne 0x40f216
cmp byte [esi + 0xcc9], cl
jne 0x40f216
xor al, al
jmp 0x40f218
mov al, 1
cmp byte [esi + 0xcdd], 0
mov byte [esi + 0x161], al
jne 0x40f234
cmp byte [esi + 0xcf1], 0
jne 0x40f234
xor al, al
jmp 0x40f236
mov al, 1
cmp byte [esi + 0xc8d], 0
mov byte [esi + 0x175], al
jne 0x40f258
cmp byte [esi + 0xca1], 0
jne 0x40f258
xor al, al
mov byte [esi + 0x14d], al
jmp 0x40f288
mov al, 1
mov byte [esi + 0x14d], al
jmp 0x40f288
cmp dword [0x4e8ef4], 0
jne 0x40f288
mov cl, 1
call fcn.0041c240
mov esi, dword [0x4ea818]
mov ah, al
mov byte [0x4e9004], ah
mov cl, 1
mov byte [0x4e9005], ah
mov eax, dword [ebp]
test eax, eax
je 0x40f299
cmp dword [eax], 6
mov byte [esp + 0x1b], 1
je 0x40f29e
mov byte [esp + 0x1b], 0
test cl, cl
jne 0x40f2af
mov cl, 1
call fcn.0041c240
mov esi, dword [0x4ea818]
mov al, byte [ebp + 9]
mov ecx, dword [esp + 0x134]
test al, al
je 0x40f6a8
test cl, cl
jne 0x40f6a8
mov ecx, dword [0x4e902c]
test ecx, ecx
je 0x40f2e1
cmp byte [ebp + 0xa], 0
je 0x40f2e1
cmp ebp, ecx
jne 0x40f69b
mov dh, byte [ebp + 0xc]
shr dh, 4
not dh
and dh, 1
mov byte [esp + 0x1a], dh
cmp al, 1
jne 0x40f467
cmp byte [esp + 0x23], 0
je 0x40f305
mov ecx, dword [esp + 0x30]
jmp 0x40f30c
movzx ecx, bl
mov dword [esp + 0x30], ecx
xor edx, edx
movzx eax, cx
cmp byte [esp + 0x23], dl
movzx ecx, cl
cmovne edx, eax
xor eax, eax
cmp byte [esp + 0x23], al
push 0
cmovne ecx, eax
call fcn.0041c480
mov dh, al
xor dl, dl
xor edi, edi
mov byte [esp + 0x16], dh
xor eax, eax
mov byte [esp + 0x47], dl
add esp, 4
mov dword [esp + 0x44], edi
cmp ax, word [0x4e905c]
jae 0x40f450
nop
cmp byte [esp + 0x23], 0
mov ecx, dword [0x4e904c]
mov edi, dword [ecx + edi*4]
je 0x40f366
movzx eax, word [edi + 0xa]
jmp 0x40f36a
movzx eax, byte [edi + 0x11]
cmp dword [esp + 0x30], eax
je 0x40f379
test byte [edi + 0xe], dh
je 0x40f432
cmp word [edi + 6], 0
je 0x40f3b5
cmp byte [edi + 0x19], 0
je 0x40f432
cmp byte [0x4e8e7d], 0
jne 0x40f432
test byte [edi + 0x13], 1
mov dh, byte [esp + 0x1a]
jne 0x40f461
test dh, dh
jne 0x40f461
mov dl, 1
mov byte [esp + 0x43], dl
jmp 0x40f42e
mov eax, dword [edi + 0x20]
test eax, eax
je 0x40f432
nop dword [eax]
cmp byte [eax + 0x20], 0
jne 0x40f3cf
mov eax, dword [eax + 0xc]
test eax, eax
jne 0x40f3c0
jmp 0x40f432
test dl, dl
je 0x40f3d9
test byte [edi + 0x13], 1
je 0x40f432
mov esi, dword [edi + 0x20]
nop dword [eax]
cmp byte [esi + 0x20], 0
je 0x40f427
cmp byte [0x4e8e7d], 0
je 0x40f3f5
cmp byte [esi + 0x21], 0
je 0x40f427
mov ecx, dword [esi + 8]
test ecx, ecx
je 0x40f408
mov edx, dword [edi + 0x1c]
call fcn.004139f0
test eax, eax
je 0x40f423
test byte [esi + 0x1d], 1
mov dh, byte [esp + 0x1a]
jne 0x40f461
test dh, dh
jne 0x40f461
mov dl, 1
mov byte [esp + 0x43], dl
test byte [edi + 0x13], dl
je 0x40f42e
jmp 0x40f427
mov dl, byte [esp + 0x43]
mov esi, dword [esi + 0xc]
test esi, esi
jne 0x40f3e0
mov dh, byte [esp + 0x12]
mov edi, dword [esp + 0x44]
movzx eax, word [0x4e905c]
inc edi
mov dword [esp + 0x44], edi
cmp edi, eax
jl 0x40f350
mov esi, dword [0x4ea818]
mov dh, dl
mov byte [esp + 0x1a], dh
test dl, dl
jne 0x40f467
mov byte [esp + 0x12], 1
jmp 0x40f47e
mov esi, dword [0x4ea818]
mov byte [esp + 0x12], 0
cmp ebp, dword [0x4e902c]
je 0x40f47e
mov dword [0x4e902c], ebp
mov byte [ebp + 0x12], 0
cmp byte [ebp + 0xa], 0
je 0x40f629
mov al, byte [ebp + 8]
mov dl, byte [0x4e9004]
test al, al
je 0x40f499
not al
and dl, al
mov eax, dword [esp + 0x14]
cmp eax, dword [0x4e8ef4]
jne 0x40f4c2
cmp byte [esp + 0x23], 0
je 0x40f4c2
mov eax, dword [esp + 0x1c]
movzx ecx, dl
movzx eax, ax
shl ecx, 9
add ecx, eax
mov eax, dword [0x4ea810]
jmp 0x40f4d2
movzx ecx, dl
movzx eax, bl
shl ecx, 8
add ecx, eax
mov eax, dword [0x4ea80c]
movzx ecx, word [eax + ecx*2]
mov eax, ecx
movzx edi, cx
and eax, 0x7fff
mov dword [esp + 0x34], edi
add eax, 0xffff8006
mov dword [esp + 0x38], edi
cmp ax, 4
jbe 0x40f63b
mov eax, 0x7fff
cmp cx, ax
je 0x40f63b
test dh, dh
jne 0x40f526
mov byte [ebp + 0x12], 0xff
mov dl, byte [esp + 0x11]
test edi, 0x8000
je 0x40f60e
mov word [ebp + 4], di
jmp 0x40f63b
test dl, dl
jne 0x40f50d
push 0
lea eax, [esp + 0x15]
push eax
push dword [esp + 0x140]
lea ecx, [esp + 0x44]
call fcn.00414300
mov dl, byte [esp + 0x1d]
add esp, 0xc
mov dword [esp + 0x3c], eax
test eax, eax
je 0x40f568
test dl, dl
je 0x40f568
mov edi, dword [esp + 0x38]
mov esi, dword [0x4ea818]
mov dh, byte [esp + 0x1a]
mov dword [esp + 0x34], edi
jmp 0x40f511
mov edi, dword [esp + 0x38]
mov dword [esp + 0x34], edi
cmp di, word [0x4e905c]
jae 0x40f5f2
mov ecx, dword [0x4ea814]
mov eax, 0x7fff
movzx esi, di
add esi, esi
add ecx, esi
cmp word [ecx], ax
je 0x40f5f2
push 0
lea eax, [esp + 0x15]
mov byte [esp + 0x15], 0
push eax
push dword [esp + 0x140]
call fcn.00414300
mov dl, byte [esp + 0x1d]
add esp, 0xc
test eax, eax
je 0x40f5f2
test dl, dl
je 0x40f5f2
cmp dword [esp + 0x3c], 0
mov dh, byte [esp + 0x1a]
je 0x40f5d2
mov esi, dword [0x4ea818]
mov byte [esp + 0x11], 0
jmp 0x40f50d
mov dword [esp + 0x3c], eax
mov eax, dword [0x4ea814]
movzx edi, word [esi + eax]
mov esi, dword [0x4ea818]
mov dword [esp + 0x34], edi
mov dword [esp + 0x38], edi
jmp 0x40f511
mov esi, dword [0x4ea818]
mov edi, 0x7fff
mov dh, byte [esp + 0x1a]
mov dword [esp + 0x34], edi
mov dword [esp + 0x38], edi
jmp 0x40f511
cmp di, word [0x4e905c]
jae 0x40f631
mov eax, dword [0x4ea814]
movzx ecx, di
mov ax, word [eax + ecx*2]
mov word [ebp + 4], ax
jmp 0x40f631
mov edi, dword [esp + 0x34]
mov dl, byte [esp + 0x11]
mov eax, 0x7fff
cmp di, ax
jne 0x40f69f
cmp byte [esp + 0x12], 0
mov ecx, dword [esp + 0x24]
je 0x40f64f
mov eax, 0x23
mov word [ecx + 4], ax
test dh, dh
jne 0x40f657
or byte [ebp + 0xc], 8
cmp byte [ebp + 8], 0
jne 0x40f687
test dh, dh
je 0x40f687
cmp byte [esp + 0x1b], 0
jne 0x40f687
push 0
push SysReAllocString
push 0x7fff
push ecx
push dword [esp + 0x148]
mov byte [ebp + 0x11], 1
push 0
jmp 0x41062c
push 0x7fff
push ecx
push dword [esp + 0x140]
push 0
jmp 0x40f039
mov dl, byte [esp + 0x11]
mov ecx, dword [esp + 0x134]
jmp 0x40f6ac
mov dl, byte [esp + 0x11]
cmp byte [ebp + 0xa], 0
mov byte [esp + 0x12], 0
je 0x40f715
test cl, cl
je 0x40f715
mov al, byte [esp + 0x2b]
cmp dword [0x4e902c], ebp
jne 0x40f6d5
test al, al
je 0x40f715
mov dword [0x4e902c], 0
cmp byte [ebp + 0xb], 0
jne 0x40f710
test al, al
je 0x40f6f9
test dl, dl
jne 0x40f6f9
mov edi, dword [esp + 0x24]
push 0
push SysReAllocString
push 0x7fff
push edi
jmp 0x410624
mov edi, dword [esp + 0x24]
push 0x7fff
push edi
push dword [esp + 0x140]
push ecx
jmp 0x40f039
mov byte [esp + 0x12], 1
cmp byte [ebp + 9], 0
mov eax, 1
je 0x40f85b
test cl, cl
je 0x40f85b
cmp dword [0x4e902c], ebp
jne 0x40f73e
mov dword [0x4e902c], 0
cmp byte [ebp + 0xe], 0
je 0x40f76a
push 0xffc3d44d
push 0
push 0
push 0
mov dl, 0x12
mov byte [ebp + 0xe], 0
mov ecx, eax
call fcn.00419af0
mov esi, dword [0x4ea818]
add esp, 0x10
mov eax, 1
cmp byte [ebp + 0xf], 0
je 0x40f791
push 0xffc3d44d
push 0
push 0
push 0
mov dl, 0x10
mov byte [ebp + 0xf], 0
mov ecx, eax
call fcn.00419af0
mov esi, dword [0x4ea818]
add esp, 0x10
mov cl, byte [esp + 0x1b]
mov al, byte [ebp + 0x12]
test cl, cl
je 0x40f818
cmp al, 2
jne 0x40f7f7
mov ebp, dword [esp + 0x1c]
mov dl, bl
push 0xffc3d44e
push 0
push 0
push ebp
mov ecx, 1
call fcn.00419af0
push 0xffc3d44d
push 0
push 0
push ebp
mov dl, bl
mov ecx, 2
call fcn.00419af0
add esp, 0x20
mov edi, dword [esp + 0x24]
push 0
push SysReAllocString
push 0x7fff
push edi
push dword [esp + 0x148]
push dword [esp + 0x148]
jmp 0x41062c
cmp al, 1
jne 0x40f835
mov edi, dword [esp + 0x24]
push 0x7fff
push edi
push dword [esp + 0x140]
push dword [esp + 0x140]
jmp 0x40f039
test al, al
jle 0x40f835
mov eax, 0x7fff
cmp di, ax
jne 0x40f835
cmp byte [ebp + 8], 0
jne 0x40f7fb
cmp byte [esp + 0x11], 0
jne 0x40f7fb
jmp 0x40f7d3
cmp byte [ebp + 0xa], 0
jne 0x40f84e
cmp byte [ebp + 8], 0
jne 0x40f7fb
cmp byte [esp + 0x11], 0
jne 0x40f7fb
test cl, cl
jne 0x40f7fb
jmp 0x40f7d3
cmp byte [esp + 0x13], 0
jne 0x40f85b
cmp byte [ebp + 0xb], 0
je 0x40f7fb
cmp dword [0x4e902c], 0
mov edx, 0x7ffd
mov dword [esp + 0x30], 0
je 0x40fc10
mov ecx, dword [esp + 0x134]
test cl, cl
je 0x40f88a
cmp byte [ebp + 0xb], 0
je 0x40fc10
mov eax, 0x7fff
cmp di, ax
jne 0x40ffc8
movzx edi, word [ebp + 6]
cmp di, ax
je 0x40f9ef
mov eax, dword [0x4e904c]
movzx ecx, di
mov edx, dword [eax + ecx*4]
mov al, byte [edx + 0x11]
test al, al
jne 0x40f8cf
cmp word [edx + 0xa], 0
je 0x40f939
movzx eax, word [edx + 0xa]
lea ecx, [eax + eax*4]
mov eax, dword [0x4ea81c]
lea eax, [eax + ecx*4]
jmp 0x40f8d8
movzx eax, al
lea eax, [eax + eax*4]
lea eax, [esi + eax*4]
cmp byte [eax + 0xd], 0
movzx edi, word [edx + 0xc]
je 0x40f91d
cmp byte [edx + 0x16], 0
je 0x40f904
cmp byte [esp + 0x134], 0
jne 0x40f931
mov ax, word [edx + 4]
mov ecx, dword [esp + 0x30]
mov word [ebp + 4], ax
test ecx, ecx
jne 0x40f945
jmp 0x40f921
cmp byte [esp + 0x134], 0
mov ecx, dword [esp + 0x30]
jne 0x40f921
test ecx, ecx
cmove ecx, edx
mov dword [esp + 0x30], ecx
jmp 0x40f921
mov ecx, dword [esp + 0x30]
mov eax, 0x7fff
cmp di, ax
jne 0x40f8a5
jmp 0x40f93d
mov ecx, edx
mov dword [esp + 0x30], ecx
jmp 0x40f93d
mov ecx, dword [esp + 0x30]
test ecx, ecx
je 0x40f9e3
movzx ecx, byte [ecx + 0x11]
cmp ecx, 0x12
ja case.0x40f955.1
movzx eax, byte [ecx + 0x410660]
jmp dword [eax*4 + 0x41064c]
cmp byte [esi + 0xca1], 0
mov eax, 0xc80
mov ecx, 0xc94
cmovne eax, ecx
add eax, esi
jmp 0x40f9bf
cmp byte [esi + 0xcc9], 0
mov eax, 0xca8
mov ecx, 0xcbc
cmovne eax, ecx
add eax, esi
jmp 0x40f9bf
cmp byte [esi + 0xcf1], 0
mov eax, 0xcd0
mov ecx, 0xce4
cmovne eax, ecx
add eax, esi
jmp 0x40f9bf
mov eax, dword [esp + 0x30]
movzx eax, word [eax + 0xa]
lea ecx, [eax + eax*4]
mov eax, dword [0x4ea81c]
lea eax, [eax + ecx*4]
jmp 0x40f9bf
lea eax, [ecx + ecx*4]
lea eax, [esi + eax*4]
mov ecx, dword [esp + 0x30]
mov dword [0x4e902c], eax
movzx eax, word [ecx + 6]
test ax, ax
jne 0x40f9d5
movzx eax, word [ecx + 4]
movzx ecx, ax
mov dword [esp + 0x34], ecx
mov dword [esp + 0x38], ecx
movzx edi, ax
mov ecx, dword [esp + 0x134]
mov edx, 0x7ffd
mov eax, 0x7ffe
cmp di, ax
je 0x40fa02
cmp di, dx
jne 0x40fc0c
mov eax, dword [0x4e902c]
cmp byte [eax + 0x12], 0xff
je 0x40fa11
mov byte [eax + 0x12], 2
test cl, cl
jne 0x40fa19
mov byte [ebp + 0x10], 1
test byte [0x4e9005], 0xc
jne 0x40fa40
push 0xffc3d44d
push 0
push 0
push 0
mov dl, 0x12
xor ecx, ecx
call fcn.00419af0
mov ecx, dword [esp + 0x144]
add esp, 0x10
cmp bl, 0xa2
je 0x40fa4a
cmp bl, 0xa3
jne 0x40fa6d
mov esi, dword [esp + 0x1c]
test cl, cl
jne 0x40fa71
push 0xffc3d44d
push 0
push 0
push esi
mov dl, bl
mov ecx, 1
call fcn.00419af0
add esp, 0x10
jmp 0x40fa71
mov esi, dword [esp + 0x1c]
mov eax, dword [0x4e902c]
mov byte [eax + 0xe], 1
mov eax, 0x7ffd
cmp di, ax
jne 0x40fab2
test byte [0x4e9005], 0x30
jne 0x40faa4
push 0xffc3d44d
push 0
push 0
push 0
mov dl, 0x10
xor ecx, ecx
call fcn.00419af0
add esp, 0x10
mov eax, dword [0x4e902c]
mov byte [eax + 0xf], 1
jmp 0x40fb32
mov eax, 0x7ffe
cmp di, ax
jne 0x40fb32
cmp bl, 0xa0
je 0x40fac6
cmp bl, 0xa1
jne 0x40faed
cmp byte [esp + 0x134], 0
jne 0x40faed
push 0xffc3d44d
push 0
push 0
push esi
mov esi, 1
mov dl, bl
mov ecx, esi
call fcn.00419af0
add esp, 0x10
jmp 0x40faf2
mov esi, 1
test byte [0x4e9005], 0x10
je 0x40fb12
push 0xffc3d44d
push 0
push 0
push 0
mov dl, 0xa0
mov ecx, esi
call fcn.00419af0
add esp, 0x10
test byte [0x4e9005], 0x20
je 0x40fb32
push 0xffc3d44d
push 0
push 0
push 0
mov dl, 0xa1
mov ecx, esi
call fcn.00419af0
add esp, 0x10
test byte [0x4e9005], 1
mov esi, 1
je 0x40fb57
push 0xffc3d44d
push 0
push 0
push 0
mov dl, 0xa2
mov ecx, esi
call fcn.00419af0
add esp, 0x10
test byte [0x4e9005], 2
je 0x40fb77
push 0xffc3d44d
push 0
push 0
push 0
mov dl, 0xa3
mov ecx, esi
call fcn.00419af0
add esp, 0x10
push 0xffc3d44d
push 0
push 0
push 0
mov dl, 9
mov ecx, 2
call fcn.00419af0
mov eax, 0x7ffd
add esp, 0x10
cmp di, ax
jne 0x40fbd5
mov eax, dword [0x4e902c]
cmp byte [eax + 0xf], 0
je 0x40fbd5
cmp bl, 0x60
jb 0x40fbb0
cmp bl, 0x69
jbe 0x40fbb5
cmp bl, 0x6e
jne 0x40fbd5
push 0xffc3d44d
push 0
push 0
push 0
mov dl, 0x10
mov ecx, esi
call fcn.00419af0
mov eax, dword [0x4e902c]
add esp, 0x10
mov byte [eax + 0xf], 0
mov ecx, dword [esp + 0x24]
mov eax, 0x68
mov word [ecx + 4], ax
mov eax, dword [esp + 0x134]
test al, al
jne 0x40fbf1
mov byte [ebp + 0x11], 1
push 0
push SysReAllocString
push 0x7fff
push ecx
mov ecx, dword [esp + 0x148]
push ecx
push eax
jmp 0x41062c
mov edi, dword [esp + 0x34]
mov esi, 0x7fff
cmp di, si
jne 0x40ffc8
mov al, byte [ebp + 8]
mov dl, byte [0x4e9004]
test al, al
je 0x40fc2f
not al
and dl, al
mov eax, dword [esp + 0x14]
mov dh, byte [esp + 0x23]
cmp eax, dword [0x4e8ef4]
jne 0x40fc64
test dh, dh
je 0x40fc64
mov eax, dword [esp + 0x1c]
movzx ecx, dl
movzx eax, ax
shl ecx, 9
add ecx, eax
mov eax, dword [0x4ea810]
movzx ecx, word [eax + ecx*2]
movzx eax, bl
mov dword [esp + 0x48], eax
jmp 0x40fc7c
movzx eax, bl
movzx ecx, dl
shl ecx, 8
add ecx, eax
mov dword [esp + 0x48], eax
mov eax, dword [0x4ea80c]
movzx ecx, word [eax + ecx*2]
movzx eax, cx
mov ebx, 0x7fff
mov dword [esp + 0x44], ecx
mov esi, eax
cmp word [esp + 0x44], bx
mov edi, eax
mov ebx, dword [esp + 0x12c]
movzx ecx, cx
mov dword [esp + 0x34], ecx
mov dword [esp + 0x38], ecx
mov ecx, eax
jne 0x40fd26
cmp byte [0x4ea67e], 0
je 0x40fd26
cmp bl, 9
je 0x40fd26
mov edi, dword [esp + 0x14]
and dl, 0xf3
cmp edi, dword [0x4e8ef4]
jne 0x40fcde
test dh, dh
je 0x40fcde
mov eax, dword [esp + 0x1c]
movzx ecx, dl
movzx eax, ax
shl ecx, 9
add ecx, eax
mov eax, dword [0x4ea810]
jmp 0x40fced
mov eax, dword [0x4ea80c]
movzx ecx, dl
shl ecx, 8
add ecx, dword [esp + 0x48]
movzx eax, word [eax + ecx*2]
movzx ecx, ax
movzx edx, ax
and eax, 0x7fff
mov dword [esp + 0x34], ecx
mov dword [esp + 0x38], ecx
mov ecx, 0x7ff9
cmp ax, cx
jbe 0x40ff21
mov ecx, edx
mov esi, edx
mov edi, edx
mov edx, 0x7fff
cmp ax, dx
jae 0x40ff16
test cx, cx
movzx eax, di
mov ecx, dword [esp + 0x134]
movzx edx, si
jns 0x40fe19
test cl, cl
jne 0x40fecd
mov edi, 0x7fff
cmp word [ebp + 4], di
jne 0x40fd57
mov ecx, dword [esp + 0x34]
mov word [ebp + 4], cx
mov ah, byte [0x4e9004]
mov al, ah
and al, 0xc0
movzx ecx, al
neg ecx
sbb ecx, ecx
and ecx, 8
mov edx, ecx
or edx, 1
test ah, 0xc
cmove edx, ecx
mov ecx, edx
or ecx, 4
test ah, 0x30
cmove ecx, edx
movzx edx, word [ebp + 6]
mov esi, ecx
or esi, 2
test ah, 3
cmove esi, ecx
cmp dx, di
je 0x40fded
mov eax, dword [0x4e904c]
movzx ecx, dx
mov ecx, dword [eax + ecx*4]
cmp byte [ecx + 0x15], 0
movzx edx, word [ecx + 0xc]
jne 0x40fdb8
movzx eax, byte [ecx + 0xf]
not eax
test byte [0x4e9004], al
jne 0x40fde8
cmp byte [ecx + 0x16], 0
jne 0x40fde8
cmp byte [ecx + 0x11], 0
jne 0x40fde8
cmp word [ecx + 0xa], 0
jne 0x40fde8
cmp word [ecx + 6], 0
jne 0x40fde8
mov eax, esi
not eax
test dword [ecx], eax
jne 0x40fde8
movzx eax, byte [0x4e9004]
not eax
test byte [ecx + 0xe], al
je 0x40fe02
cmp dx, di
jne 0x40fd95
mov ecx, dword [esp + 0x134]
mov eax, edi
movzx edi, ax
mov dword [esp + 0x38], edi
jmp 0x40fed1
movzx eax, word [ecx + 4]
mov ecx, dword [esp + 0x134]
movzx edi, ax
mov dword [esp + 0x38], edi
jmp 0x40fed1
mov esi, 0x7fff
cmp dx, si
je 0x40fedf
and eax, esi
test cl, cl
je 0x40fea2
cmp ax, word [0x4e905c]
jae 0x40fe95
mov esi, eax
mov edx, 0x7fff
mov eax, dword [0x4ea814]
cmp word [eax + esi*2], dx
je 0x40fe93
cmp byte [esp + 0x12], 0
jne 0x40fe84
mov eax, dword [esp + 0x24]
lea ecx, [esp + 0x38]
add eax, 4
push eax
lea eax, [esp + 0x15]
push eax
push dword [esp + 0x140]
call fcn.00414300
mov ecx, dword [esp + 0x140]
add esp, 0xc
mov dword [esp + 0x3c], eax
test eax, eax
je 0x40fe84
mov edi, dword [esp + 0x38]
jmp 0x40fed1
mov eax, dword [0x4ea814]
movzx edi, word [eax + esi*2]
mov dword [esp + 0x38], edi
jmp 0x40fed1
mov esi, edx
cmp byte [esp + 0x12], 0
jne 0x40fee7
mov edi, dword [esp + 0x34]
jmp 0x40fed6
mov edi, dword [esp + 0x34]
cmp ax, word [0x4e905c]
jae 0x40fed6
cmp word [ebp + 4], si
jne 0x40fed6
mov ecx, eax
mov eax, dword [0x4ea814]
mov ax, word [eax + ecx*2]
mov ecx, dword [esp + 0x134]
mov word [ebp + 4], ax
jmp 0x40fed6
mov edi, dword [esp + 0x34]
mov esi, 0x7fff
cmp di, si
jne 0x40ffc8
mov edi, dword [esp + 0x14]
test cl, cl
je 0x40ff45
cmp byte [ebp + 8], 0
jne 0x40ff2f
cmp byte [ebp + 9], 0
je 0x40ff2f
cmp byte [esp + 0x11], 0
jne 0x40ff2f
cmp byte [esp + 0x1b], 0
jne 0x40ff2f
push 0
push SysReAllocString
push 0x7fff
push dword [esp + 0x30]
jmp 0x410624
mov ecx, dword [esp + 0x134]
mov esi, edx
jmp 0x40fedf
mov ecx, dword [esp + 0x134]
mov esi, 0x7fff
jmp 0x40fee3
push 0x7fff
push dword [esp + 0x28]
push dword [esp + 0x140]
push ecx
jmp 0x40f039
cmp word [ebp + 4], si
lea ecx, [ebp + 4]
jne 0x40ff67
push 0x7fff
push dword [esp + 0x28]
mov ecx, edi
push dword [esp + 0x140]
push 0
jmp 0x40f03d
mov esi, dword [esp + 0x138]
lea eax, [esp + 0x11]
push 0
push eax
push esi
call fcn.00414300
movzx ecx, byte [esp + 0x1d]
add esp, 0xc
test eax, eax
mov eax, 1
cmove ecx, eax
test cl, cl
sete al
mov byte [ebp + 0x11], al
test cl, cl
je 0x40ffac
push 0x7fff
push dword [esp + 0x28]
mov ecx, edi
push esi
push 0
jmp 0x40f03d
push 0
push SysReAllocString
push 0x7fff
push dword [esp + 0x30]
push esi
push 0
push ecx
push ebx
mov ecx, edi
jmp 0x410632
mov esi, dword [esp + 0x24]
mov eax, edi
and eax, 0x7fff
cmp ax, word [0x4e905c]
jae 0x4100bb
cmp dword [esp + 0x3c], 0
jne 0x4100bb
mov edi, dword [esp + 0x138]
lea eax, [esi + 4]
push eax
lea eax, [esp + 0x15]
push eax
push edi
lea ecx, [esp + 0x44]
call fcn.00414300
add esp, 0xc
mov dword [esp + 0x3c], eax
test eax, eax
jne 0x4100b7
cmp word [esi + 4], 0x69
jne 0x41002e
push 0x7fff
push esi
push edi
push dword [esp + 0x140]
jmp 0x40f039
mov eax, dword [esp + 0x134]
test al, al
je 0x41005f
cmp byte [ebp + 0x11], 0
je 0x410053
push 0
push SysReAllocString
push 0x7fff
push esi
push edi
push eax
jmp 0x41062c
push 0x7fff
push esi
push edi
jmp 0x40f038
lea ecx, [ebp + 4]
mov eax, 0x7fff
cmp word [ecx], ax
je 0x4100a9
push 0
lea eax, [esp + 0x15]
mov byte [esp + 0x15], 0
push eax
push edi
call fcn.00414300
add esp, 0xc
test eax, eax
je 0x4100a5
cmp byte [esp + 0x11], 0
jne 0x4100a5
push 0
push SysReAllocString
push 0x7fff
push esi
push edi
mov byte [ebp + 0x11], 1
push 0
jmp 0x41062c
or byte [ebp + 0xc], 8
push 0x7fff
push esi
push edi
push 0
jmp 0x40f039
mov edi, dword [esp + 0x38]
mov ecx, dword [0x4e902c]
and edi, 0x7fff
test ecx, ecx
je 0x4100f1
cmp dword [esp + 0x30], 0
jne 0x4100e2
cmp byte [ecx + 8], 0
je 0x4100f1
cmp byte [esp + 0x134], 0
jne 0x4100f1
mov eax, dword [0x4e902c]
cmp byte [eax + 0x12], 0xff
je 0x4100f1
mov byte [eax + 0x12], 2
test byte [0x4e9005], 0xcc
je 0x4101b4
cmp byte [esp + 0x11], 0
jne 0x4101b4
cmp byte [0x4ea67d], 0
jne 0x410122
mov eax, dword [esp + 0x14]
cmp eax, dword [0x4e8ef0]
jne 0x4101b4
test byte [0x4e9005], 0xc0
je 0x41014e
cmp di, word [0x4e905c]
jae 0x41014e
mov eax, dword [0x4e904c]
movzx ecx, di
mov eax, dword [eax + ecx*4]
test byte [eax + 0xf], 0xc0
je 0x41014e
mov byte [0x4ea67c], 1
jmp 0x4101b4
cmp byte [0x4ea67c], 0
jne 0x4101b4
mov al, byte [0x4e9005]
test al, 0xc
je 0x4101b4
test al, 3
jne 0x4101b4
cmp di, word [0x4e905c]
jae 0x4101b4
mov eax, dword [0x4e904c]
movzx ecx, di
mov eax, dword [eax + ecx*4]
test byte [eax + 0xf], 0xc
je 0x4101b4
cmp dword [0x4e8ef4], 0
je 0x410190
mov byte [0x4ea67c], 1
jmp 0x4101b4
movzx eax, word [0x4e4d74]
mov ecx, 2
mov dl, byte [0x4e48be]
push 0xffc3d44d
push 0
push 0
push eax
call fcn.00419af0
add esp, 0x10
movzx ecx, di
lea eax, [ecx - 0x7ffa]
cmp eax, 4
ja case.default.0x4101c6
jmp dword [eax*4 + 0x410674]
cmp byte [0x4ea67e], 0
jne case.0x4101c6.32763
push 0x7fff
push esi
push dword [esp + 0x140]
push dword [esp + 0x140]
jmp 0x40f039
xor al, al
test byte [0x4e9005], 4
je 0x410201
mov ecx, 0xa4
jmp 0x410213
test byte [0x4e9005], 8
movzx ecx, al
mov eax, 0xa5
cmovne ecx, eax
cmp byte [0x4ea67e], 0
mov dword [esp + 0x48], ecx
je 0x410297
mov eax, 0x7ffb
cmp di, ax
je case.0x4101c6.32765
push 0xffc3d44d
test cl, cl
movzx eax, cl
push 0
mov edx, 0x12
mov edi, 1
push 0
cmovne edx, eax
mov ecx, edi
push 0
call fcn.00419af0
add esp, 0x10
cmp byte [ebp + 8], 0
je 0x410286
cmp bl, 0x5b
je 0x410286
cmp bl, 0x5c
je 0x410286
cmp byte [esp + 0x134], 0
jne 0x410286
push 0xffc3d44d
push 0
push 0
push 0
mov dl, bl
mov ecx, edi
call fcn.00419af0
add esp, 0x10
mov byte [0x4ea67e], 0
mov edi, 0x7fff
jmp 0x410536
cmp bl, 0xa4
je 0x4102a6
mov byte [esp + 0x2b], 0
cmp bl, 0xa5
jne 0x4102ab
mov byte [esp + 0x2b], 1
cmp bl, 0xa0
je 0x4102b9
cmp bl, 0xa1
je 0x4102b9
xor cl, cl
jmp 0x4102bb
mov cl, 1
mov byte [esp + 0x12], cl
cmp bl, 0xa2
je 0x4102ce
mov byte [esp + 0x13], 0
cmp bl, 0xa3
jne 0x4102d3
mov byte [esp + 0x13], 1
xor dl, dl
test byte [0x4e9005], 0x10
mov dword [esp + 0x30], edx
je 0x4102e9
mov edx, 0xa0
jmp 0x41030c
test byte [0x4e9005], 0x20
mov eax, dword [esp + 0x134]
je 0x4102fd
mov dl, 0xa1
jmp 0x410313
test al, al
jne 0x410317
test cl, cl
movzx edx, dl
movzx eax, bl
cmovne edx, eax
mov eax, dword [esp + 0x134]
mov dword [esp + 0x30], edx
xor cl, cl
test byte [0x4e9005], 1
mov dword [esp + 0x3c], ecx
je 0x41032d
mov byte [esp + 0x3c], 0xa2
jmp 0x410353
test byte [0x4e9005], 2
je 0x41033d
mov byte [esp + 0x3c], 0xa3
jmp 0x410353
test al, al
jne 0x410353
cmp byte [esp + 0x13], 0
movzx ecx, cl
movzx eax, bl
cmovne ecx, eax
mov dword [esp + 0x3c], ecx
mov byte [esp + 0x13], 0
mov edi, 1
test dl, dl
je 0x41037b
push 0xffc3d44d
push 0
push 0
push 0
mov ecx, edi
call fcn.00419af0
add esp, 0x10
mov byte [esp + 0x13], 1
mov eax, dword [esp + 0x3c]
test al, al
je 0x41039a
push 0xffc3d44d
push 0
push 0
push 0
mov dl, al
mov ecx, edi
call fcn.00419af0
add esp, 0x10
cmp byte [esp + 0x2b], 0
je 0x4103af
cmp byte [esp + 0x134], 0
jne 0x4103b7
mov al, bl
jmp 0x4103b3
mov eax, dword [esp + 0x48]
test al, al
jne 0x4103ce
push 0xffc3d44d
push 0
push 0
push 0
mov dl, 0x12
xor ecx, ecx
call fcn.00419af0
add esp, 0x10
push 0xffc3d44d
push 0
push 0
push 0
mov dl, 9
mov ecx, 2
call fcn.00419af0
add esp, 0x10
cmp byte [esp + 0x13], 0
je 0x41040f
cmp byte [esp + 0x12], 0
jne 0x41040f
mov dl, byte [esp + 0x30]
xor ecx, ecx
push 0xffc3d44d
push 0
push 0
push 0
call fcn.00419af0
add esp, 0x10
mov byte [0x4ea67e], 1
mov edi, 0x7fff
jmp 0x410536
cmp byte [0x4ea67e], 0
je 0x4101d6
mov eax, dword [esp + 0x134]
test al, al
jne 0x41046d
cmp bl, 0xa2
je 0x41044c
cmp bl, 0xa3
je 0x41044c
cmp bl, 0xa0
je 0x41044c
cmp bl, 0xa1
jne 0x41046d
push 0xffc3d44d
push 0
push 0
push 0
mov dl, bl
mov ecx, 1
call fcn.00419af0
mov eax, dword [esp + 0x144]
add esp, 0x10
test byte [0x4e9005], 0xc
je 0x410484
test al, al
je 0x41049b
cmp bl, 0xa4
je 0x410484
cmp bl, 0xa5
jne 0x41049b
push 0xffc3d44d
push 0
push 0
push 0
mov dl, 0x12
xor ecx, ecx
call fcn.00419af0
add esp, 0x10
mov eax, 0x7ffd
cmp di, ax
jne 0x4104fa
test byte [0x4e9005], 0x30
jne 0x4104fa
push 0xffc3d44d
push 0
push 0
push 0
mov dl, 0x10
xor ecx, ecx
call fcn.00419af0
push 0xffc3d44d
push 0
push 0
push 0
mov dl, 9
mov ecx, 2
call fcn.00419af0
push 0xffc3d44d
push 0
push 0
push 0
mov dl, 0x10
mov ecx, 1
call fcn.00419af0
add esp, 0x30
mov edi, 0x7fff
jmp 0x410536
push 0xffc3d44d
push 0
push 0
push 0
mov dl, 9
mov ecx, 2
call fcn.00419af0
add esp, 0x10
mov edi, 0x7fff
jmp 0x410536
mov edi, ecx
mov ecx, dword [esp + 0x3c]
mov eax, dword [ecx + 8]
test eax, eax
je 0x410536
cmp byte [eax], 5
jne 0x410536
movzx eax, word [ecx + 0x18]
shl eax, 0x10
or edi, eax
mov ecx, dword [esp + 0x134]
mov eax, 0x68
mov word [esi + 4], ax
test cl, cl
je 0x4105c8
cmp byte [esp + 0x1b], 0
je 0x4105a4
cmp byte [ebp + 9], 0
je 0x4105a4
mov ebp, dword [esp + 0x1c]
lea ecx, [eax - 0x67]
push 0xffc3d44e
push 0
push 0
push ebp
mov dl, bl
call fcn.00419af0
push 0xffc3d44d
push 0
push 0
push ebp
mov dl, bl
mov ecx, 2
call fcn.00419af0
add esp, 0x20
push 0
push SysReAllocString
push edi
push esi
push dword [esp + 0x148]
push dword [esp + 0x148]
jmp 0x41062c
cmp byte [ebp + 8], 0
je 0x4105b2
cmp byte [ebp + 0x11], 0
je 0x4105b9
jmp 0x41061b
cmp byte [esp + 0x11], 0
je 0x41061b
push edi
push esi
push dword [esp + 0x140]
push ecx
jmp 0x40f039
cmp byte [esp + 0x11], 0
mov byte [ebp + 0x10], 1
je 0x4105e6
or byte [ebp + 0xc], 8
push edi
push esi
push dword [esp + 0x140]
push ecx
jmp 0x40f039
movzx eax, byte [0x4e9005]
not eax
test byte [ebp + 8], al
je 0x410617
push 0xffc3d450
push 0
push 0
push dword [esp + 0x28]
mov dl, bl
mov ecx, 1
call fcn.00419af0
mov ecx, dword [esp + 0x144]
add esp, 0x10
mov byte [ebp + 0x11], 1
push 0
push SysReAllocString
push edi
push esi
push dword [esp + 0x148]
push ecx
push ecx
push ebx
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x148]
call fcn.00410690
add esp, 0x20
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x110
ret