Function at 0x41a060
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
and esp, 0xffffffc0
push 0xffffffffffffffff
push 0x4a7360
mov eax, dword fs:[0]
push eax
sub esp, 0xe8
push ebx
push esi
push edi
mov eax, dword [0x4c97a0]
xor eax, esp
push eax
lea eax, [esp + 0xf8]
mov dword fs:[0], eax
mov eax, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
xor edi, edi
cmp eax, edi
je 0x41c706
cmp dword [0x4cc6dc], edi
jne 0x41a0d7
cmp eax, 0xa
je 0x41c706
cmp eax, 4
je 0x41c706
cmp eax, 5
je 0x41c706
cmp eax, 8
je 0x41c706
cmp eax, 9
je 0x41c706
mov eax, dword [0x4ce67c]
mov edx, dword [eax + 0xc]
mov ecx, 0x4ce67c
call edx
add eax, 0x10
mov dword [esp + 0x3c], eax
mov dword [esp + 0x100], edi
mov ecx, dword [0x4d02f8]
mov eax, dword [0x4d0304]
mov edx, dword [0x4d0308]
mov ebx, dword [sym.imp.USER32.dll_ShowWindow]
add eax, ecx
mov ecx, dword [0x4d02fc]
add edx, ecx
mov ecx, dword [0x4d030c]
mov dword [esp + 0x44], edx
mov edx, dword [0x4d0300]
add ecx, edx
xor edx, edx
cmp dword [0x4d0358], eax
mov dword [esp + 0x40], eax
sete dl
mov dword [esp + 0x48], ecx
mov dword [esi + 0x93c], edi
mov dword [esp + 0x2c], edx
cmp dword [0x4d017c], edi
je 0x41a492
mov eax, dword [esi + 0x3dc]
lea edx, [esi + 0x3d8]
mov ecx, eax
and ecx, 1
je 0x41a17c
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x41a17c
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [esi + 0x98]
lea edx, [esi + 0x94]
mov ecx, eax
and ecx, 1
je 0x41a1a8
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x41a1a8
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [esi + 0xe4]
lea edx, [esi + 0xe0]
mov ecx, eax
and ecx, 1
je 0x41a1d4
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x41a1d4
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [esi + 0x130]
lea edx, [esi + 0x12c]
mov ecx, eax
and ecx, 1
je 0x41a200
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x41a200
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [esi + 0x17c]
lea edx, [esi + 0x178]
mov ecx, eax
and ecx, 1
je 0x41a22c
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x41a22c
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [esi + 0x1c8]
lea edx, [esi + 0x1c4]
mov ecx, eax
and ecx, 1
je 0x41a258
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x41a258
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [esi + 0x214]
lea edx, [esi + 0x210]
mov ecx, eax
and ecx, 1
je 0x41a284
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x41a284
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [esi + 0x344]
lea edx, [esi + 0x340]
mov ecx, eax
and ecx, 1
je 0x41a2b0
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x41a2b0
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [esi + 0x390]
lea edx, [esi + 0x38c]
mov ecx, eax
and ecx, 1
je 0x41a2dc
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x41a2dc
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [esi + 0x40c]
lea edx, [esi + 0x408]
mov ecx, eax
and ecx, 1
je 0x41a308
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x41a308
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [esi + 0x43c]
lea edx, [esi + 0x438]
mov ecx, eax
and ecx, 1
je 0x41a334
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x41a334
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [esi + 0x46c]
lea edx, [esi + 0x468]
mov ecx, eax
and ecx, 1
je 0x41a360
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x41a360
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [esi + 0x260]
lea edx, [esi + 0x25c]
mov ecx, eax
and ecx, 1
je 0x41a38c
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x41a38c
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [esi + 0x2ac]
lea edx, [esi + 0x2a8]
mov ecx, eax
and ecx, 1
je 0x41a3b8
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x41a3b8
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [esi + 0x2f8]
lea edx, [esi + 0x2f4]
mov ecx, eax
and ecx, 1
je 0x41a3e4
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x41a3e4
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [esi + 0x4c4]
push 1
push eax
call ebx
cmp dword [esi + 0xd08], edi
je 0x41a45b
mov ecx, dword [esi + 0xd0c]
lea edx, [esi + 0x9a0]
call fcn.004686c0
mov ecx, dword [esi + 0xd0c]
lea edx, [esi + 0x9d4]
call fcn.004686c0
xor ecx, ecx
cmp dword [esi + 0xd0c], edi
lea edx, [esi + 0x704]
sete cl
call fcn.004686c0
xor ecx, ecx
cmp dword [esi + 0xd0c], edi
lea edx, [esi + 0x734]
sete cl
call fcn.004686c0
xor ecx, ecx
cmp dword [esi + 0xd0c], edi
lea edx, [esi + 0x780]
sete cl
call fcn.004686c0
mov ecx, dword [esi + 0x49c]
push 1
push ecx
call ebx
mov ecx, dword [esi + 0xcd0]
lea eax, [esi + 0xccc]
mov edx, ecx
and edx, 1
jne 0x41a492
or ecx, 1
mov dword [eax + 4], ecx
mov ecx, dword [eax + 0x1c]
cmp ecx, edi
je 0x41a492
mov edx, dword [ecx]
push edi
push 1
push edi
push eax
mov eax, dword [edx + 0x28]
call eax
mov eax, dword [ebp + 0xc]
cmp eax, 0xa
ja case.0x41a4a5.8
movzx ecx, byte [eax + 0x41c734]
jmp dword [ecx*4 + 0x41c720]
mov ebx, dword [ebp + 8]
mov eax, dword [ebx + 0x81c]
lea edx, [ebx + 0x818]
mov ecx, eax
and ecx, 1
je 0x41a4dd
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41a4dd
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x868]
lea edx, [ebx + 0x864]
mov ecx, eax
and ecx, 1
je 0x41a50b
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41a50b
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x8b4]
lea edx, [ebx + 0x8b0]
mov ecx, eax
and ecx, 1
je 0x41a539
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41a539
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x900]
lea edx, [ebx + 0x8fc]
mov ecx, eax
and ecx, 1
je 0x41a567
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41a567
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0xc84]
lea edx, [ebx + 0xc80]
mov ecx, eax
and ecx, 1
je 0x41a595
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41a595
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x7d0]
lea edx, [ebx + 0x7cc]
mov ecx, eax
and ecx, 1
je 0x41a5c3
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41a5c3
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0xabc]
lea edx, [ebx + 0xab8]
mov ecx, eax
and ecx, 1
je 0x41a5f1
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41a5f1
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0xc38]
lea edx, [ebx + 0xc34]
mov ecx, eax
and ecx, 1
je 0x41a61f
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41a61f
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0xbec]
lea edx, [ebx + 0xbe8]
mov ecx, eax
and ecx, 1
je 0x41a64d
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41a64d
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0xb08]
lea edx, [ebx + 0xb04]
mov ecx, eax
and ecx, 1
je 0x41a67b
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41a67b
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0xb54]
lea edx, [ebx + 0xb50]
mov ecx, eax
and ecx, 1
je 0x41a6a9
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41a6a9
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0xba0]
lea edx, [ebx + 0xb9c]
mov ecx, eax
and ecx, 1
je 0x41a6d7
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41a6d7
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x5d8]
lea edx, [ebx + 0x5d4]
mov ecx, eax
and ecx, 1
je 0x41a705
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41a705
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x624]
lea edx, [ebx + 0x620]
mov ecx, eax
and ecx, 1
je 0x41a733
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41a733
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x6bc]
lea edx, [ebx + 0x6b8]
mov ecx, eax
and ecx, 1
je 0x41a761
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41a761
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0xa24]
lea edx, [ebx + 0xa20]
mov ecx, eax
and ecx, 1
je 0x41a78f
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41a78f
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0xa70]
lea edx, [ebx + 0xa6c]
mov ecx, eax
and ecx, 1
je 0x41a7bd
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41a7bd
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x944]
lea edx, [ebx + 0x940]
mov ecx, eax
and ecx, 1
je 0x41a7eb
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41a7eb
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x670]
lea edi, [ebx + 0x66c]
mov ecx, eax
and ecx, 1
jne 0x41a819
mov ecx, dword [edi + 0x1c]
or eax, 1
mov dword [edi + 4], eax
test ecx, ecx
je 0x41a819
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
push 0
push 1
push 0
push edi
call eax
lea esi, [ebx + 0x970]
mov eax, 0x4d24c8
cmp dword [esi + 0x2c], eax
je 0x41a831
mov dword [esi + 0x2c], eax
call fcn.00460ec0
mov eax, dword [esi + 4]
mov ecx, eax
and ecx, 1
jne 0x41a856
mov ecx, dword [esi + 0x1c]
or eax, 1
mov dword [esi + 4], eax
test ecx, ecx
je 0x41a856
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
push 0
push 1
push 0
push esi
call eax
lea ecx, [esp + 0x98]
push ecx
mov ecx, 0x9d6a
call fcn.0046c8c0
mov byte [esp + 0x100], 1
mov eax, dword [eax]
push eax
push edi
call fcn.00465760
add esp, 8
lea ecx, [esp + 0x98]
mov byte [esp + 0x100], 0
call fcn.004710f0
push ebx
mov byte [ebx + 0xda4], 1
call fcn.0041c970
jmp case.0x41a4a5.8
mov ebx, dword [ebp + 8]
mov eax, dword [ebx + 0xabc]
lea edx, [ebx + 0xab8]
mov ecx, eax
and ecx, 1
je 0x41a8d3
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41a8d3
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x81c]
lea edx, [ebx + 0x818]
mov ecx, eax
and ecx, 1
je 0x41a901
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41a901
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x868]
lea edx, [ebx + 0x864]
mov ecx, eax
and ecx, 1
je 0x41a92f
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41a92f
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x8b4]
lea edx, [ebx + 0x8b0]
mov ecx, eax
and ecx, 1
je 0x41a95d
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41a95d
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0xa70]
lea edx, [ebx + 0xa6c]
mov ecx, eax
and ecx, 1
je 0x41a98b
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41a98b
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x900]
lea edx, [ebx + 0x8fc]
mov ecx, eax
and ecx, 1
je 0x41a9b9
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41a9b9
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0xc84]
lea edx, [ebx + 0xc80]
mov ecx, eax
and ecx, 1
je 0x41a9e7
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41a9e7
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x670]
lea edx, [ebx + 0x66c]
mov ecx, eax
and ecx, 1
je 0x41aa15
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41aa15
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x6bc]
lea edx, [ebx + 0x6b8]
mov ecx, eax
and ecx, 1
je 0x41aa43
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41aa43
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x5d8]
lea edx, [ebx + 0x5d4]
mov ecx, eax
and ecx, 1
jne 0x41aa71
mov ecx, dword [edx + 0x1c]
or eax, 1
mov dword [edx + 4], eax
test ecx, ecx
je 0x41aa71
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x624]
lea edx, [ebx + 0x620]
mov ecx, eax
and ecx, 1
jne 0x41aa9f
mov ecx, dword [edx + 0x1c]
or eax, 1
mov dword [edx + 4], eax
test ecx, ecx
je 0x41aa9f
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x7d0]
lea esi, [ebx + 0x7cc]
mov ecx, eax
shr ecx, 2
not ecx
and ecx, 1
jne 0x41aad2
mov ecx, dword [esi + 0x1c]
and eax, 0xfffffffb
mov dword [esi + 4], eax
test ecx, ecx
je 0x41aad2
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
push 0
push 0
push 0
push esi
call eax
mov eax, dword [esi + 4]
mov ecx, eax
and ecx, 1
jne 0x41aaf7
mov ecx, dword [esi + 0x1c]
or eax, 1
mov dword [esi + 4], eax
test ecx, ecx
je 0x41aaf7
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
push 0
push 1
push 0
push esi
call eax
mov eax, dword [ebx + 0xa24]
lea edx, [ebx + 0xa20]
mov ecx, eax
and ecx, 1
jne 0x41ab25
mov ecx, dword [edx + 0x1c]
or eax, 1
mov dword [edx + 4], eax
test ecx, ecx
je 0x41ab25
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0xc38]
lea edx, [ebx + 0xc34]
mov ecx, eax
and ecx, 1
jne 0x41ab53
mov ecx, dword [edx + 0x1c]
or eax, 1
mov dword [edx + 4], eax
test ecx, ecx
je 0x41ab53
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0xbec]
lea edx, [ebx + 0xbe8]
mov ecx, eax
and ecx, 1
jne 0x41ab81
mov ecx, dword [edx + 0x1c]
or eax, 1
mov dword [edx + 4], eax
test ecx, ecx
je 0x41ab81
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0xb08]
lea edx, [ebx + 0xb04]
mov ecx, eax
and ecx, 1
jne 0x41abaf
mov ecx, dword [edx + 0x1c]
or eax, 1
mov dword [edx + 4], eax
test ecx, ecx
je 0x41abaf
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0xb54]
lea edx, [ebx + 0xb50]
mov ecx, eax
and ecx, 1
jne 0x41abdd
mov ecx, dword [edx + 0x1c]
or eax, 1
mov dword [edx + 4], eax
test ecx, ecx
je 0x41abdd
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0xba0]
lea edx, [ebx + 0xb9c]
mov ecx, eax
and ecx, 1
jne 0x41ac0b
mov ecx, dword [edx + 0x1c]
or eax, 1
mov dword [edx + 4], eax
test ecx, ecx
je 0x41ac0b
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
push 1
mov edi, ebx
call fcn.00417f00
push 4
mov ecx, 0x4d02a0
call fcn.004670b0
push 2
mov ecx, 0x4d02a0
mov esi, eax
call fcn.004670b0
push 1
mov ecx, 0x4d02a0
lea edi, [esi + eax]
call fcn.004670b0
mov esi, eax
push 1
mov ecx, 0x4d02a0
add esi, edi
call fcn.004670b0
mov edi, eax
test edi, edi
jbe 0x41acc7
lea eax, [esp + 0x78]
push eax
mov ecx, 0x9d4d
call fcn.0046c8c0
push edi
mov byte [esp + 0x104], 2
mov eax, dword [eax]
push esi
push eax
lea eax, [ebx + 0x5d4]
push eax
call fcn.00465760
add esp, 0x10
lea ecx, [esp + 0x78]
mov byte [esp + 0x100], 0
call fcn.004710f0
mov eax, dword [ebx + 0x974]
lea edx, [ebx + 0x970]
mov ecx, eax
and ecx, 1
je 0x41acbd
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41acbd
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov ecx, 0x4d2668
jmp 0x41ad95
test esi, esi
jbe 0x41ad11
test edi, edi
jne 0x41ad11
lea ecx, [esp + 0xac]
push ecx
mov ecx, 0x9d4e
call fcn.0046c8c0
mov byte [esp + 0x100], 3
mov eax, dword [eax]
push eax
lea eax, [ebx + 0x5d4]
push eax
call fcn.00465760
add esp, 8
lea ecx, [esp + 0xac]
mov byte [esp + 0x100], 0
call fcn.004710f0
jmp 0x41ad62
lea ecx, [esp + 0xb4]
push ecx
mov ecx, 0x9d4f
call fcn.0046c8c0
mov byte [esp + 0x100], 4
mov eax, dword [eax]
push eax
lea eax, [ebx + 0x5d4]
push eax
call fcn.00465760
add esp, 8
lea ecx, [esp + 0xb4]
mov byte [esp + 0x100], 0
call fcn.004710f0
push 0x4b40a0
lea eax, [ebx + 0x620]
push eax
call fcn.00465db0
mov eax, dword [ebx + 0x974]
lea edx, [ebx + 0x970]
mov ecx, eax
and ecx, 1
je 0x41ad90
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41ad90
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov ecx, 0x4d264c
lea esi, [ebx + 0x940]
xor eax, eax
mov edx, esi
call fcn.004618f0
mov eax, dword [esi + 4]
mov ecx, eax
and ecx, 1
jne 0x41adc9
mov ecx, dword [esi + 0x1c]
or eax, 1
mov dword [esi + 4], eax
test ecx, ecx
je 0x41adc9
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
push 0
push 1
push 0
push esi
call eax
push ebx
mov byte [ebx + 0xda4], 1
call fcn.0041c970
jmp case.0x41a4a5.8
mov ebx, dword [ebp + 8]
mov eax, dword [ebx + 0x5d8]
lea edx, [ebx + 0x5d4]
mov ecx, eax
and ecx, 1
je 0x41ae0c
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41ae0c
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x624]
lea edx, [ebx + 0x620]
mov ecx, eax
and ecx, 1
je 0x41ae3a
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41ae3a
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x868]
lea edx, [ebx + 0x864]
mov ecx, eax
and ecx, 1
je 0x41ae68
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41ae68
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x8b4]
lea edx, [ebx + 0x8b0]
mov ecx, eax
and ecx, 1
je 0x41ae96
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41ae96
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x7d0]
lea edx, [ebx + 0x7cc]
mov ecx, eax
and ecx, 1
je 0x41aec4
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41aec4
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0xa24]
lea edx, [ebx + 0xa20]
mov ecx, eax
and ecx, 1
je 0x41aef2
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41aef2
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0xa70]
lea edx, [ebx + 0xa6c]
mov ecx, eax
and ecx, 1
je 0x41af20
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41af20
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x944]
lea edx, [ebx + 0x940]
mov ecx, eax
and ecx, 1
je 0x41af4e
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41af4e
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x670]
lea edx, [ebx + 0x66c]
mov ecx, eax
and ecx, 1
je 0x41af7c
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41af7c
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x6bc]
lea esi, [ebx + 0x6b8]
mov ecx, eax
and ecx, 1
jne 0x41afaa
mov ecx, dword [esi + 0x1c]
or eax, 1
mov dword [esi + 4], eax
test ecx, ecx
je 0x41afaa
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
push 0
push 1
push 0
push esi
call eax
mov eax, dword [ebx + 0xc38]
lea edx, [ebx + 0xc34]
mov ecx, eax
and ecx, 1
je 0x41afd8
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41afd8
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0xbec]
lea edx, [ebx + 0xbe8]
mov ecx, eax
and ecx, 1
je 0x41b006
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b006
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0xb08]
lea edx, [ebx + 0xb04]
mov ecx, eax
and ecx, 1
je 0x41b034
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b034
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0xb54]
lea edx, [ebx + 0xb50]
mov ecx, eax
and ecx, 1
je 0x41b062
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b062
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0xba0]
lea edx, [ebx + 0xb9c]
mov ecx, eax
and ecx, 1
je 0x41b090
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b090
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [esi + 4]
mov ecx, eax
and ecx, 1
jne 0x41b0b5
mov ecx, dword [esi + 0x1c]
or eax, 1
mov dword [esi + 4], eax
test ecx, ecx
je 0x41b0b5
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
push 0
push 1
push 0
push esi
call eax
mov eax, dword [ebx + 0xc84]
lea edx, [ebx + 0xc80]
mov ecx, eax
and ecx, 1
jne 0x41b0e3
mov ecx, dword [edx + 0x1c]
or eax, 1
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b0e3
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x81c]
lea edx, [ebx + 0x818]
mov ecx, eax
and ecx, 1
jne 0x41b111
mov ecx, dword [edx + 0x1c]
or eax, 1
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b111
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0xabc]
lea edx, [ebx + 0xab8]
mov ecx, eax
and ecx, 1
jne 0x41b13f
mov ecx, dword [edx + 0x1c]
or eax, 1
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b13f
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x900]
lea edx, [ebx + 0x8fc]
mov ecx, eax
and ecx, 1
jne 0x41b16d
mov ecx, dword [edx + 0x1c]
or eax, 1
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b16d
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
lea esi, [ebx + 0x970]
mov eax, 0x4d24e4
cmp dword [esi + 0x2c], eax
je 0x41b185
mov dword [esi + 0x2c], eax
call fcn.00460ec0
mov eax, dword [esi + 4]
mov ecx, eax
and ecx, 1
jne 0x41b1aa
mov ecx, dword [esi + 0x1c]
or eax, 1
mov dword [esi + 4], eax
test ecx, ecx
je 0x41b1aa
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
push 0
push 1
push 0
push esi
call eax
mov eax, dword [0x4d0360]
cmp eax, 1
jne 0x41b246
lea ecx, [esp + 0x88]
push ecx
mov ecx, 0x9d63
call fcn.0046c8c0
mov byte [esp + 0x100], 5
fld qword [0x4d0340]
mov edx, dword [0x4d0348]
fld st(0)
fld qword [0x4ba968]
mov eax, dword [eax]
fmul st(1), st(0)
sub esp, 0x10
fmul st(1), st(0)
fxch st(1)
fstp qword [esp + 8]
fild dword [0x4d0348]
test edx, edx
jge 0x41b205
fadd qword [0x4ba960]
fmulp st(2)
mov ecx, dword [0x4d034c]
fxch st(1)
movzx edx, word [0x4d02d6]
lea edi, [esp + 0x4c]
fdiv qword [0x4ba958]
fmul st(1)
fmulp st(1)
fstp qword [esp]
push ecx
movzx ecx, word [0x4d02d4]
push edx
push ecx
push eax
call fcn.0046afd0
add esp, 0x20
lea ecx, [esp + 0x88]
jmp 0x41b393
cmp eax, 2
jne 0x41b28a
lea edx, [esp + 0x58]
push edx
mov ecx, 0x9d2d
call fcn.0046c8c0
mov byte [esp + 0x100], 6
movzx ecx, word [0x4d02d8]
movzx edx, word [0x4d02da]
mov eax, dword [eax]
push ecx
push edx
push eax
lea edi, [esp + 0x48]
call fcn.0046afd0
add esp, 0xc
lea ecx, [esp + 0x58]
jmp 0x41b393
cmp eax, 3
jne 0x41b31e
lea eax, [esp + 0xb0]
push eax
mov ecx, 0x9d96
call fcn.0046c8c0
mov byte [esp + 0x100], 7
fld qword [0x4d0340]
mov ecx, dword [0x4d0348]
fld st(0)
fld qword [0x4ba968]
mov eax, dword [eax]
fmul st(1), st(0)
sub esp, 0x10
fmul st(1), st(0)
fxch st(1)
fstp qword [esp + 8]
fild dword [0x4d0348]
test ecx, ecx
jge 0x41b2e0
fadd qword [0x4ba960]
fmulp st(2)
mov edx, dword [0x4d034c]
fxch st(1)
movzx ecx, word [0x4d02de]
lea edi, [esp + 0x4c]
fdiv qword [0x4ba958]
fmul st(1)
fmulp st(1)
fstp qword [esp]
push edx
movzx edx, word [0x4d02dc]
push ecx
push edx
push eax
call fcn.0046afd0
add esp, 0x20
lea ecx, [esp + 0xb0]
jmp 0x41b393
cmp eax, 4
jne 0x41b35f
lea eax, [esp + 0x60]
push eax
mov ecx, 0x9d97
call fcn.0046c8c0
mov byte [esp + 0x100], 8
movzx ecx, word [0x4d02e2]
movzx edx, word [0x4d02e0]
mov eax, dword [eax]
push ecx
push edx
push eax
lea edi, [esp + 0x48]
call fcn.0046afd0
add esp, 0xc
lea ecx, [esp + 0x60]
jmp 0x41b393
test eax, eax
jne 0x41b3a0
lea eax, [esp + 0x90]
push eax
mov ecx, 0x9e25
call fcn.0046c8c0
mov byte [esp + 0x100], 9
mov eax, dword [eax]
push eax
lea edi, [esp + 0x40]
call fcn.0046afd0
add esp, 4
lea ecx, [esp + 0x90]
mov byte [esp + 0x100], 0
call fcn.004710f0
mov ecx, dword [esp + 0x3c]
push ecx
lea eax, [ebx + 0x6b8]
push eax
call fcn.00465db0
mov eax, ebx
call fcn.0041e6e0
mov edi, dword [ebp + 0x10]
test edi, edi
je 0x41b418
cmp edi, 0xfffffff0
jae 0x41b418
lea esi, [ebx + 0x4c0]
push edi
mov eax, esi
call fcn.00453290
test eax, eax
je 0x41b418
push 4
push edi
mov eax, esi
call fcn.00453210
mov esi, eax
test esi, esi
je 0x41b418
mov edx, dword [ebp + 0x14]
push edx
push edi
lea eax, [esp + 0x70]
push eax
push ebx
call fcn.004199d0
mov byte [esp + 0x100], 0xa
mov eax, dword [eax]
push eax
push esi
call fcn.00465db0
lea ecx, [esp + 0x68]
mov byte [esp + 0x100], 0
call fcn.004710f0
movzx eax, word [ebp + 0x14]
add eax, 0xfffffffc
cmp eax, 0xa
ja case.0x41b42b.5
movzx ecx, byte [eax + 0x41c748]
jmp dword [ecx*4 + 0x41c740]
push edi
mov eax, ebx
call fcn.00419d90
push 0
mov edi, ebx
call fcn.00417f00
jmp case.0x41a4a5.8
mov ebx, dword [ebp + 8]
mov eax, dword [ebx + 0x81c]
lea edx, [ebx + 0x818]
mov ecx, eax
and ecx, 1
je 0x41b479
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b479
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x868]
lea esi, [ebx + 0x864]
mov ecx, eax
and ecx, 1
je 0x41b4a7
mov ecx, dword [esi + 0x1c]
and eax, 0xfffffffe
mov dword [esi + 4], eax
test ecx, ecx
je 0x41b4a7
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
push 0
push 1
push 0
push esi
call eax
mov eax, dword [ebx + 0x8b4]
lea edi, [ebx + 0x8b0]
mov ecx, eax
and ecx, 1
je 0x41b4d5
mov ecx, dword [edi + 0x1c]
and eax, 0xfffffffe
mov dword [edi + 4], eax
test ecx, ecx
je 0x41b4d5
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
push 0
push 1
push 0
push edi
call eax
mov eax, dword [ebx + 0x900]
lea edx, [ebx + 0x8fc]
mov ecx, eax
and ecx, 1
je 0x41b503
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b503
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0xc84]
lea edx, [ebx + 0xc80]
mov ecx, eax
and ecx, 1
je 0x41b531
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b531
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x7d0]
lea edx, [ebx + 0x7cc]
mov ecx, eax
and ecx, 1
je 0x41b55f
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b55f
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x974]
lea edx, [ebx + 0x970]
mov ecx, eax
and ecx, 1
je 0x41b58d
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b58d
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0xabc]
lea edx, [ebx + 0xab8]
mov ecx, eax
and ecx, 1
je 0x41b5bb
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b5bb
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x670]
lea edx, [ebx + 0x66c]
mov ecx, eax
and ecx, 1
je 0x41b5e9
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b5e9
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x6bc]
lea edx, [ebx + 0x6b8]
mov ecx, eax
and ecx, 1
je 0x41b617
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b617
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0xb08]
lea edx, [ebx + 0xb04]
mov ecx, eax
and ecx, 1
je 0x41b645
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b645
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0xb54]
lea edx, [ebx + 0xb50]
mov ecx, eax
and ecx, 1
je 0x41b673
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b673
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0xba0]
lea edx, [ebx + 0xb9c]
mov ecx, eax
and ecx, 1
je 0x41b6a1
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b6a1
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0xbec]
lea edx, [ebx + 0xbe8]
mov ecx, eax
and ecx, 1
je 0x41b6cf
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b6cf
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x5d8]
lea edx, [ebx + 0x5d4]
mov ecx, eax
and ecx, 1
jne 0x41b6fd
mov ecx, dword [edx + 0x1c]
or eax, 1
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b6fd
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x624]
lea edx, [ebx + 0x620]
mov ecx, eax
and ecx, 1
jne 0x41b72b
mov ecx, dword [edx + 0x1c]
or eax, 1
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b72b
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
cmp dword [0x4d037c], 0
jne 0x41b865
mov eax, dword [esp + 0x40]
test eax, eax
jbe 0x41b7ee
mov eax, dword [ebx + 0xa70]
lea edx, [ebx + 0xa6c]
mov ecx, eax
and ecx, 1
je 0x41b772
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b772
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 4]
mov ecx, eax
and ecx, 1
je 0x41b797
mov ecx, dword [edi + 0x1c]
and eax, 0xfffffffe
mov dword [edi + 4], eax
test ecx, ecx
je 0x41b797
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
push 0
push 1
push 0
push edi
call eax
mov eax, dword [esi + 4]
mov ecx, eax
and ecx, 1
jne 0x41b7bc
mov ecx, dword [esi + 0x1c]
or eax, 1
mov dword [esi + 4], eax
test ecx, ecx
je 0x41b7bc
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
push 0
push 1
push 0
push esi
call eax
mov ecx, dword [ebx + 0xa24]
lea eax, [ebx + 0xa20]
mov edx, ecx
and edx, 1
jne 0x41b90b
or ecx, 1
mov dword [eax + 4], ecx
mov ecx, dword [eax + 0x1c]
test ecx, ecx
je 0x41b90b
push edx
push 1
push edx
push eax
jmp 0x41b904
mov ecx, dword [esp + 0x44]
add ecx, eax
jne 0x41b865
mov eax, dword [esi + 4]
mov edx, eax
and edx, 1
je 0x41b81b
mov ecx, dword [esi + 0x1c]
and eax, 0xfffffffe
mov dword [esi + 4], eax
test ecx, ecx
je 0x41b81b
mov eax, dword [ecx]
mov edx, dword [eax + 0x28]
push 0
push 1
push 0
push esi
call edx
mov eax, dword [ebx + 0xa24]
lea edx, [ebx + 0xa20]
mov ecx, eax
and ecx, 1
je 0x41b849
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b849
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0xa70]
lea edx, [ebx + 0xa6c]
mov ecx, eax
and ecx, 1
jne 0x41b8e6
or eax, 1
jmp 0x41b8ce
mov eax, dword [esi + 4]
mov ecx, eax
and ecx, 1
je 0x41b88a
mov ecx, dword [esi + 0x1c]
and eax, 0xfffffffe
mov dword [esi + 4], eax
test ecx, ecx
je 0x41b88a
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
push 0
push 1
push 0
push esi
call eax
mov eax, dword [ebx + 0xa24]
lea edx, [ebx + 0xa20]
mov ecx, eax
and ecx, 1
je 0x41b8b8
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b8b8
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0xa70]
lea edx, [ebx + 0xa6c]
mov ecx, eax
and ecx, 1
je 0x41b8e6
and eax, 0xfffffffe
mov ecx, dword [edx + 0x1c]
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b8e6
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 4]
mov ecx, eax
and ecx, 1
jne 0x41b90b
mov ecx, dword [edi + 0x1c]
or eax, 1
mov dword [edi + 4], eax
test ecx, ecx
je 0x41b90b
push 0
push 1
push 0
push edi
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
call eax
mov eax, dword [ebx + 0xc38]
lea edx, [ebx + 0xc34]
mov ecx, eax
and ecx, 1
jne 0x41b939
mov ecx, dword [edx + 0x1c]
or eax, 1
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b939
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
push 0
mov edi, ebx
call fcn.00417f00
cmp dword [0x4d037c], 0
je 0x41baad
lea eax, [esp + 0xa8]
push eax
mov ecx, 0x9e1f
call fcn.0046c8c0
mov esi, dword [ebp + 8]
mov byte [esp + 0x100], 0xb
mov eax, dword [eax]
push eax
lea eax, [esi + 0x5d4]
push eax
call fcn.00465760
add esp, 8
lea ecx, [esp + 0xa8]
mov byte [esp + 0x100], 0
call fcn.004710f0
lea ecx, [esp + 0x70]
push ecx
mov ecx, 0x9e20
call fcn.0046c8c0
mov byte [esp + 0x100], 0xc
mov eax, dword [eax]
push eax
lea eax, [esi + 0x620]
push eax
call fcn.00465760
add esp, 8
lea ecx, [esp + 0x70]
mov byte [esp + 0x100], 0
call fcn.004710f0
lea ebx, [esi + 0x940]
xor eax, eax
mov ecx, 0x4d2668
mov edx, ebx
call fcn.004618f0
mov eax, dword [esi + 0xd38]
mov eax, dword [eax]
mov esi, dword [esi + 0xd20]
mov dword [esp + 0x30], esi
mov dword [esp + 0x34], eax
jmp 0x41ba00
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0xd38]
mov eax, dword [eax + 0xd20]
lea esi, [esp + 0xbc]
lea edi, [esp + 0x30]
mov dword [esp + 0xc0], edx
mov dword [esp + 0xbc], eax
call fcn.004311f0
test al, al
je 0x41bf4c
mov esi, edi
call fcn.00430b50
mov edi, dword [eax]
push edi
mov esi, 0x4d02a0
call fcn.00468700
mov dword [esp + 0x2c], eax
mov eax, dword [ebp + 8]
push 4
push edi
add eax, 0x4c0
call fcn.00453210
cmp dword [esp + 0x2c], 0
mov esi, eax
je 0x41ba9f
test esi, esi
je 0x41ba9f
mov ecx, dword [ebp + 0x14]
mov eax, dword [ebp + 8]
push ecx
push edi
lea edx, [esp + 0x54]
push edx
push eax
call fcn.004199d0
mov byte [esp + 0x100], 0xd
mov eax, dword [eax]
push eax
push esi
call fcn.00465db0
lea ecx, [esp + 0x4c]
mov byte [esp + 0x100], 0
call fcn.004710f0
lea esi, [esp + 0x30]
call fcn.0044edf0
jmp 0x41ba00
cmp dword [esp + 0x2c], 0
je 0x41bb4a
lea ecx, [esp + 0xb8]
push ecx
mov ecx, 0x9d0e
call fcn.0046c8c0
mov edx, dword [esp + 0x40]
mov ebx, dword [ebp + 8]
mov byte [esp + 0x100], 0xe
mov eax, dword [eax]
push edx
push eax
lea eax, [ebx + 0x5d4]
push eax
call fcn.00465760
add esp, 0xc
lea ecx, [esp + 0xb8]
mov byte [esp + 0x100], 0
call fcn.004710f0
lea eax, [esp + 0x80]
push eax
mov ecx, 0x9ddf
call fcn.0046c8c0
mov byte [esp + 0x100], 0xf
mov eax, dword [eax]
push eax
lea eax, [ebx + 0x620]
push eax
call fcn.00465760
add esp, 8
lea ecx, [esp + 0x80]
mov byte [esp + 0x100], 0
call fcn.004710f0
mov ecx, 0x4d264c
jmp 0x41bf3d
cmp dword [esp + 0x40], 0
jbe 0x41bd07
cmp dword [esp + 0x44], 0
jbe 0x41bc70
cmp dword [esp + 0x48], 0
jbe 0x41bbf7
lea ecx, [esp + 0xa0]
push ecx
mov ecx, 0x9d0d
call fcn.0046c8c0
mov edx, dword [esp + 0x40]
mov ebx, dword [ebp + 8]
mov byte [esp + 0x100], 0x10
mov eax, dword [eax]
push edx
push eax
lea eax, [ebx + 0x5d4]
push eax
call fcn.00465760
add esp, 0xc
lea ecx, [esp + 0xa0]
mov byte [esp + 0x100], 0
call fcn.004710f0
lea eax, [esp + 0x50]
push eax
mov ecx, 0x9de0
call fcn.0046c8c0
mov byte [esp + 0x100], 0x11
mov eax, dword [eax]
push eax
lea eax, [ebx + 0x620]
push eax
call fcn.00465760
add esp, 8
lea ecx, [esp + 0x50]
mov byte [esp + 0x100], 0
call fcn.004710f0
mov ecx, 0x4d26d8
jmp 0x41bf3d
lea ecx, [esp + 0x54]
push ecx
mov ecx, 0x9d0b
call fcn.0046c8c0
mov edx, dword [esp + 0x40]
mov ebx, dword [ebp + 8]
mov byte [esp + 0x100], 0x12
mov eax, dword [eax]
push edx
push eax
lea eax, [ebx + 0x5d4]
push eax
call fcn.00465760
add esp, 0xc
lea ecx, [esp + 0x54]
mov byte [esp + 0x100], 0
call fcn.004710f0
lea eax, [esp + 0x5c]
push eax
mov ecx, 0x9de1
call fcn.0046c8c0
mov ecx, dword [esp + 0x44]
mov byte [esp + 0x100], 0x13
mov eax, dword [eax]
push ecx
push eax
lea eax, [ebx + 0x620]
push eax
call fcn.00465760
add esp, 0xc
lea ecx, [esp + 0x5c]
jmp 0x41bf2b
mov eax, dword [esp + 0x48]
test eax, eax
jbe 0x41bd0b
lea edx, [esp + 0x64]
push edx
mov ecx, 0x9d0c
call fcn.0046c8c0
mov ecx, dword [esp + 0x40]
mov ebx, dword [ebp + 8]
mov byte [esp + 0x100], 0x14
mov eax, dword [eax]
push ecx
push eax
lea eax, [ebx + 0x5d4]
push eax
call fcn.00465760
add esp, 0xc
lea ecx, [esp + 0x64]
mov byte [esp + 0x100], 0
call fcn.004710f0
lea edx, [esp + 0x6c]
push edx
mov ecx, 0x9de2
call fcn.0046c8c0
mov ecx, dword [esp + 0x48]
mov byte [esp + 0x100], 0x15
mov eax, dword [eax]
push ecx
push eax
lea eax, [ebx + 0x620]
push eax
call fcn.00465760
add esp, 0xc
lea ecx, [esp + 0x6c]
mov byte [esp + 0x100], 0
call fcn.004710f0
mov ecx, 0x4d26d8
jmp 0x41bf3d
mov eax, dword [esp + 0x48]
cmp dword [esp + 0x44], 0
jbe 0x41be17
test eax, eax
jbe 0x41bd9f
lea edx, [esp + 0x74]
push edx
mov ecx, 0x9d98
call fcn.0046c8c0
mov ebx, dword [ebp + 8]
mov byte [esp + 0x100], 0x16
mov eax, dword [eax]
push eax
lea eax, [ebx + 0x5d4]
push eax
call fcn.00465760
add esp, 8
lea ecx, [esp + 0x74]
mov byte [esp + 0x100], 0
call fcn.004710f0
lea eax, [esp + 0x7c]
push eax
mov ecx, 0x9de3
call fcn.0046c8c0
mov byte [esp + 0x100], 0x17
mov eax, dword [eax]
push eax
lea eax, [ebx + 0x620]
push eax
call fcn.00465760
add esp, 8
lea ecx, [esp + 0x7c]
mov byte [esp + 0x100], 0
call fcn.004710f0
mov ecx, 0x4d26d8
jmp 0x41bf3d
lea ecx, [esp + 0x84]
push ecx
mov ecx, 0x9d93
call fcn.0046c8c0
mov ebx, dword [ebp + 8]
mov byte [esp + 0x100], 0x18
mov eax, dword [eax]
push eax
lea eax, [ebx + 0x5d4]
push eax
call fcn.00465760
add esp, 8
lea ecx, [esp + 0x84]
mov byte [esp + 0x100], 0
call fcn.004710f0
lea edx, [esp + 0x8c]
push edx
mov ecx, 0x9de4
call fcn.0046c8c0
mov byte [esp + 0x100], 0x19
mov eax, dword [eax]
push eax
lea eax, [ebx + 0x620]
push eax
call fcn.00465760
lea ecx, [esp + 0x94]
jmp 0x41bf28
test eax, eax
jbe 0x41bebb
lea eax, [esp + 0x94]
push eax
mov ecx, 0x9d8d
call fcn.0046c8c0
mov edi, dword [ebp + 8]
mov byte [esp + 0x100], 0x1a
mov eax, dword [eax]
push eax
lea eax, [edi + 0x5d4]
push eax
call fcn.00465760
add esp, 8
lea ecx, [esp + 0x94]
mov byte [esp + 0x100], 0
call fcn.004710f0
lea ecx, [esp + 0x9c]
push ecx
mov ecx, 0x9de5
call fcn.0046c8c0
mov byte [esp + 0x100], 0x1b
mov eax, dword [eax]
push eax
lea eax, [edi + 0x620]
push eax
call fcn.00465760
add esp, 8
lea ecx, [esp + 0x9c]
mov byte [esp + 0x100], 0
call fcn.004710f0
lea ebx, [edi + 0x940]
xor eax, eax
mov ecx, 0x4d2668
mov edx, ebx
call fcn.004618f0
jmp 0x41bf4f
lea edx, [esp + 0xa4]
push edx
mov ecx, 0x9d0a
call fcn.0046c8c0
mov ebx, dword [ebp + 8]
mov byte [esp + 0x100], 0x1c
mov eax, dword [eax]
push eax
lea eax, [ebx + 0x5d4]
push eax
call fcn.00465760
add esp, 8
lea ecx, [esp + 0xa4]
mov byte [esp + 0x100], 0
call fcn.004710f0
lea eax, [esp + 0x38]
push eax
mov ecx, 0x9de6
call fcn.0046c8c0
mov byte [esp + 0x100], 0x1d
mov eax, dword [eax]
push eax
lea eax, [ebx + 0x620]
push eax
call fcn.00465760
lea ecx, [esp + 0x40]
add esp, 8
mov byte [esp + 0x100], 0
call fcn.004710f0
mov ecx, 0x4d26a0
add ebx, 0x940
xor eax, eax
mov edx, ebx
call fcn.004618f0
mov edi, dword [ebp + 8]
mov eax, dword [ebx + 4]
mov ecx, eax
mov esi, 1
and ecx, esi
jne 0x41bf76
mov ecx, dword [ebx + 0x1c]
or eax, esi
mov dword [ebx + 4], eax
test ecx, ecx
je 0x41bf76
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
push 0
push esi
push 0
push ebx
call eax
lea eax, [edi + 0x4c4]
call fcn.00458270
push edi
mov dword [edi + 0xda0], eax
call fcn.0041c970
cmp dword [0x4d037c], 0
jne case.0x41a4a5.8
cmp dword [esp + 0x48], 0
jne case.0x41a4a5.8
cmp dword [0x4d017c], 0
jne 0x41c6bb
cmp dword [0x4cc6dc], 0
jne 0x41c6c6
lea edx, [edi + 0x818]
mov dword [edi + 0x93c], esi
mov eax, dword [edx + 4]
mov ecx, eax
and ecx, esi
mov dword [0x4d017c], esi
je 0x41bff4
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41bff4
mov eax, dword [ecx]
push 0
push esi
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov ecx, dword [edi + 0x868]
lea eax, [edi + 0x864]
mov edx, ecx
and edx, esi
je 0x41c020
and ecx, 0xfffffffe
mov dword [eax + 4], ecx
mov ecx, dword [eax + 0x1c]
test ecx, ecx
je 0x41c020
mov edx, dword [ecx]
push 0
push esi
push 0
push eax
mov eax, dword [edx + 0x28]
call eax
mov ecx, dword [edi + 0x8b4]
lea eax, [edi + 0x8b0]
mov edx, ecx
and edx, esi
je 0x41c04c
and ecx, 0xfffffffe
mov dword [eax + 4], ecx
mov ecx, dword [eax + 0x1c]
test ecx, ecx
je 0x41c04c
mov edx, dword [ecx]
push 0
push esi
push 0
push eax
mov eax, dword [edx + 0x28]
call eax
mov ecx, dword [edi + 0x900]
lea eax, [edi + 0x8fc]
mov edx, ecx
and edx, esi
je 0x41c078
and ecx, 0xfffffffe
mov dword [eax + 4], ecx
mov ecx, dword [eax + 0x1c]
test ecx, ecx
je 0x41c078
mov edx, dword [ecx]
push 0
push esi
push 0
push eax
mov eax, dword [edx + 0x28]
call eax
mov ecx, dword [edi + 0xc84]
lea eax, [edi + 0xc80]
mov edx, ecx
and edx, esi
je 0x41c0a4
and ecx, 0xfffffffe
mov dword [eax + 4], ecx
mov ecx, dword [eax + 0x1c]
test ecx, ecx
je 0x41c0a4
mov edx, dword [ecx]
push 0
push esi
push 0
push eax
mov eax, dword [edx + 0x28]
call eax
mov ecx, dword [edi + 0x7d0]
lea eax, [edi + 0x7cc]
mov edx, ecx
and edx, esi
je 0x41c0d0
and ecx, 0xfffffffe
mov dword [eax + 4], ecx
mov ecx, dword [eax + 0x1c]
test ecx, ecx
je 0x41c0d0
mov edx, dword [ecx]
push 0
push esi
push 0
push eax
mov eax, dword [edx + 0x28]
call eax
mov ecx, dword [edi + 0xa24]
lea eax, [edi + 0xa20]
mov edx, ecx
and edx, esi
je 0x41c0fc
and ecx, 0xfffffffe
mov dword [eax + 4], ecx
mov ecx, dword [eax + 0x1c]
test ecx, ecx
je 0x41c0fc
mov edx, dword [ecx]
push 0
push esi
push 0
push eax
mov eax, dword [edx + 0x28]
call eax
mov ecx, dword [edi + 0x974]
lea eax, [edi + 0x970]
mov edx, ecx
and edx, esi
je 0x41c128
and ecx, 0xfffffffe
mov dword [eax + 4], ecx
mov ecx, dword [eax + 0x1c]
test ecx, ecx
je 0x41c128
mov edx, dword [ecx]
push 0
push esi
push 0
push eax
mov eax, dword [edx + 0x28]
call eax
mov ecx, dword [edi + 0xabc]
lea eax, [edi + 0xab8]
mov edx, ecx
and edx, esi
je 0x41c154
and ecx, 0xfffffffe
mov dword [eax + 4], ecx
mov ecx, dword [eax + 0x1c]
test ecx, ecx
je 0x41c154
mov edx, dword [ecx]
push 0
push esi
push 0
push eax
mov eax, dword [edx + 0x28]
call eax
mov ecx, dword [edi + 0x670]
lea eax, [edi + 0x66c]
mov edx, ecx
and edx, esi
je 0x41c180
and ecx, 0xfffffffe
mov dword [eax + 4], ecx
mov ecx, dword [eax + 0x1c]
test ecx, ecx
je 0x41c180
mov edx, dword [ecx]
push 0
push esi
push 0
push eax
mov eax, dword [edx + 0x28]
call eax
mov ecx, dword [edi + 0x6bc]
lea eax, [edi + 0x6b8]
mov edx, ecx
and edx, esi
je 0x41c1ac
and ecx, 0xfffffffe
mov dword [eax + 4], ecx
mov ecx, dword [eax + 0x1c]
test ecx, ecx
je 0x41c1ac
mov edx, dword [ecx]
push 0
push esi
push 0
push eax
mov eax, dword [edx + 0x28]
call eax
mov ecx, dword [edi + 0xa70]
lea eax, [edi + 0xa6c]
mov edx, ecx
and edx, esi
je 0x41c1d8
and ecx, 0xfffffffe
mov dword [eax + 4], ecx
mov ecx, dword [eax + 0x1c]
test ecx, ecx
je 0x41c1d8
mov edx, dword [ecx]
push 0
push esi
push 0
push eax
mov eax, dword [edx + 0x28]
call eax
mov ecx, dword [edi + 0x5d8]
lea eax, [edi + 0x5d4]
mov edx, ecx
and edx, esi
je 0x41c204
and ecx, 0xfffffffe
mov dword [eax + 4], ecx
mov ecx, dword [eax + 0x1c]
test ecx, ecx
je 0x41c204
mov edx, dword [ecx]
push 0
push esi
push 0
push eax
mov eax, dword [edx + 0x28]
call eax
mov ecx, dword [edi + 0x624]
lea eax, [edi + 0x620]
mov edx, ecx
and edx, esi
je 0x41c230
and ecx, 0xfffffffe
mov dword [eax + 4], ecx
mov ecx, dword [eax + 0x1c]
test ecx, ecx
je 0x41c230
mov edx, dword [ecx]
push 0
push esi
push 0
push eax
mov eax, dword [edx + 0x28]
call eax
mov eax, dword [ebx + 4]
mov ecx, eax
and ecx, esi
je 0x41c253
mov ecx, dword [ebx + 0x1c]
and eax, 0xfffffffe
mov dword [ebx + 4], eax
test ecx, ecx
je 0x41c253
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
push 0
push esi
push 0
push ebx
call eax
mov ecx, dword [edi + 0x4c4]
mov ebx, dword [sym.imp.USER32.dll_ShowWindow]
push 0
push ecx
call ebx
mov eax, dword [edi + 0x708]
lea edx, [edi + 0x704]
mov ecx, eax
and ecx, esi
je 0x41c290
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41c290
mov eax, dword [ecx]
push 0
push esi
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x738]
lea edx, [edi + 0x734]
mov ecx, eax
and ecx, esi
je 0x41c2bc
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41c2bc
mov eax, dword [ecx]
push 0
push esi
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x784]
lea edx, [edi + 0x780]
mov ecx, eax
and ecx, esi
je 0x41c2e8
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41c2e8
mov eax, dword [ecx]
push 0
push esi
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x49c]
push 0
push eax
call ebx
mov eax, dword [edi + 0xcd0]
lea edx, [edi + 0xccc]
mov ecx, eax
and ecx, esi
je 0x41c31f
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41c31f
mov eax, dword [ecx]
push 0
push esi
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov ecx, dword [edi + 0xc38]
lea eax, [edi + 0xc34]
mov edx, ecx
and edx, esi
je 0x41c34b
and ecx, 0xfffffffe
mov dword [eax + 4], ecx
mov ecx, dword [eax + 0x1c]
test ecx, ecx
je 0x41c34b
mov edx, dword [ecx]
push 0
push esi
push 0
push eax
mov eax, dword [edx + 0x28]
call eax
mov ecx, dword [edi + 0xbec]
lea eax, [edi + 0xbe8]
mov edx, ecx
and edx, esi
je 0x41c377
and ecx, 0xfffffffe
mov dword [eax + 4], ecx
mov ecx, dword [eax + 0x1c]
test ecx, ecx
je 0x41c377
mov edx, dword [ecx]
push 0
push esi
push 0
push eax
mov eax, dword [edx + 0x28]
call eax
mov eax, dword [edi + 0x9a4]
lea edx, [edi + 0x9a0]
mov ecx, eax
and ecx, esi
je 0x41c3a3
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41c3a3
mov eax, dword [ecx]
push 0
push esi
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x9d8]
lea edx, [edi + 0x9d4]
mov ecx, eax
and ecx, esi
je 0x41c3cf
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41c3cf
mov eax, dword [ecx]
push 0
push esi
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x3dc]
lea edx, [edi + 0x3d8]
mov ecx, eax
and ecx, esi
jne 0x41c3fa
mov ecx, dword [edx + 0x1c]
or eax, esi
mov dword [edx + 4], eax
test ecx, ecx
je 0x41c3fa
mov eax, dword [ecx]
push 0
push esi
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x98]
lea edx, [edi + 0x94]
mov ecx, eax
and ecx, esi
jne 0x41c425
mov ecx, dword [edx + 0x1c]
or eax, esi
mov dword [edx + 4], eax
test ecx, ecx
je 0x41c425
mov eax, dword [ecx]
push 0
push esi
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0xe4]
lea edx, [edi + 0xe0]
mov ecx, eax
and ecx, esi
jne 0x41c450
mov ecx, dword [edx + 0x1c]
or eax, esi
mov dword [edx + 4], eax
test ecx, ecx
je 0x41c450
mov eax, dword [ecx]
push 0
push esi
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x130]
lea esi, [edi + 0x12c]
mov ecx, eax
and ecx, 1
jne 0x41c47e
mov ecx, dword [esi + 0x1c]
or eax, 1
mov dword [esi + 4], eax
test ecx, ecx
je 0x41c47e
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
push 0
push 1
push 0
push esi
call eax
mov edx, dword [esp + 0x40]
mov ecx, dword [esp + 0x44]
add ecx, edx
push ecx
push str._g_kqQ.
push esi
call fcn.00465760
mov eax, dword [edi + 0x17c]
lea esi, [edi + 0x178]
mov ecx, eax
add esp, 0xc
and ecx, 1
jne 0x41c4c5
mov ecx, dword [esi + 0x1c]
or eax, 1
mov dword [esi + 4], eax
test ecx, ecx
je 0x41c4c5
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
push 0
push 1
push 0
push esi
call eax
push 0x8035
push str.abutton:_d
push esi
call fcn.00465760
mov eax, dword [edi + 0x1c8]
lea edx, [edi + 0x1c4]
mov ecx, eax
add esp, 0xc
and ecx, 1
jne 0x41c506
mov ecx, dword [edx + 0x1c]
or eax, 1
mov dword [edx + 4], eax
test ecx, ecx
je 0x41c506
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x214]
lea edx, [edi + 0x210]
mov ecx, eax
and ecx, 1
jne 0x41c534
mov ecx, dword [edx + 0x1c]
or eax, 1
mov dword [edx + 4], eax
test ecx, ecx
je 0x41c534
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x344]
lea edx, [edi + 0x340]
mov ecx, eax
and ecx, 1
jne 0x41c562
mov ecx, dword [edx + 0x1c]
or eax, 1
mov dword [edx + 4], eax
test ecx, ecx
je 0x41c562
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x390]
lea edx, [edi + 0x38c]
mov ecx, eax
and ecx, 1
jne 0x41c590
mov ecx, dword [edx + 0x1c]
or eax, 1
mov dword [edx + 4], eax
test ecx, ecx
je 0x41c590
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x40c]
lea edx, [edi + 0x408]
mov ecx, eax
and ecx, 1
jne 0x41c5be
mov ecx, dword [edx + 0x1c]
or eax, 1
mov dword [edx + 4], eax
test ecx, ecx
je 0x41c5be
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x43c]
lea edx, [edi + 0x438]
mov ecx, eax
and ecx, 1
jne 0x41c5ec
mov ecx, dword [edx + 0x1c]
or eax, 1
mov dword [edx + 4], eax
test ecx, ecx
je 0x41c5ec
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x46c]
lea edx, [edi + 0x468]
mov ecx, eax
and ecx, 1
jne 0x41c61a
mov ecx, dword [edx + 0x1c]
or eax, 1
mov dword [edx + 4], eax
test ecx, ecx
je 0x41c61a
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x260]
lea edx, [edi + 0x25c]
mov ecx, eax
and ecx, 1
jne 0x41c648
mov ecx, dword [edx + 0x1c]
or eax, 1
mov dword [edx + 4], eax
test ecx, ecx
je 0x41c648
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x2ac]
lea edx, [edi + 0x2a8]
mov ecx, eax
and ecx, 1
jne 0x41c676
mov ecx, dword [edx + 0x1c]
or eax, 1
mov dword [edx + 4], eax
test ecx, ecx
je 0x41c676
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x2f8]
lea edx, [edi + 0x2f4]
mov ecx, eax
and ecx, 1
jne 0x41c6a4
mov ecx, dword [edx + 0x1c]
or eax, 1
mov dword [edx + 4], eax
test ecx, ecx
je 0x41c6a4
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
push 0
push 0
mov eax, edi
call fcn.00414090
cmp dword [0x4d017c], 0
mov edi, dword [ebp + 8]
je 0x41c6c6
push 0
push 0
mov eax, edi
call fcn.00414090
mov eax, dword [edi + 0x93c]
mov dword [0x4d017c], eax
mov dword [esp + 0x100], 0xffffffff
mov eax, dword [esp + 0x3c]
add eax, 0xfffffff0
mov dword [0x4cc6dc], 0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41c706
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0xf8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10