Function at 0x5020f0
Capabilities:
Parse credit card information
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x628d4c
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x15c
mov eax, dword [0xcea298]
push ebx
push ebp
push esi
mov esi, dword [sym.imp.USER32.dll_PtInRect]
push edi
xor edi, edi
mov ebp, 0x1b3
mov ebx, 0x1c7
cmp eax, edi
mov dword [esp + 0xb4], 0x1e3
mov dword [esp + 0xb8], 0x1b5
mov dword [esp + 0xbc], 0x208
mov dword [esp + 0xc0], 0x1c9
mov dword [esp + 0x94], 0x1a3
mov dword [esp + 0x98], ebp
mov dword [esp + 0x9c], 0x1c8
mov dword [esp + 0xa0], ebx
mov dword [esp + 0xa4], 0x21f
mov dword [esp + 0xa8], ebp
mov dword [esp + 0xac], 0x244
mov dword [esp + 0xb0], ebx
je 0x504249
cmp dword [0xcea2cc], edi
je 0x503e8a
mov eax, dword [0xce8ee4]
cmp eax, 0x3e8
jae 0x502211
mov eax, dword [0xcf95d4]
mov ecx, dword [0xcf95d0]
push eax
lea edx, [esp + 0xb8]
push ecx
push edx
call esi
test eax, eax
je 0x504249
mov edi, 0x68ef6c
or ecx, 0xffffffff
xor eax, eax
xor edx, edx
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov dword [0xcea298], edx
mov eax, ecx
mov esi, edi
mov edi, 0xce8ad0
mov dword [0xce8ee4], edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x505e5a
cmp eax, 0x7d0
jae 0x504249
mov ecx, dword [0xcf95d4]
mov edx, dword [0xcf95d0]
push ecx
lea eax, [esp + 0x98]
push edx
push eax
call esi
test eax, eax
je 0x504249
mov eax, dword [0xce8ee4]
cmp eax, 0x4ba
ja 0x502549
je 0x503902
add eax, 0xfffffc17
cmp eax, 0xc
ja case.0x502572.1217
jmp dword [eax*4 + 0x505e74]
mov eax, dword [0xa56090]
cmp eax, edi
je 0x502392
push eax
call fcn.004e8f50
add esp, 4
mov dword [0xa56090], edi
jmp case.0x502572.1217
cmp dword [0xa56090], edi
je 0x502392
push 1
call fcn.004e9ff0
add esp, 4
mov dword [0xa56090], edi
jmp case.0x502572.1217
push 1
call fcn.004ea7f0
add esp, 4
mov dword [0xa56090], edi
jmp case.0x502572.1217
push 1
call fcn.004ea950
add esp, 4
mov dword [0xa56090], edi
jmp case.0x502572.1217
push 1
call fcn.004eab60
add esp, 4
mov dword [0xa56090], edi
jmp case.0x502572.1217
mov eax, dword [0xa56090]
mov dx, word [0xce986c]
mov ecx, eax
mov word [esp + 0x12], ax
lea eax, [esp + 0x10]
mov word [esp + 0x14], dx
shr ecx, 0x10
push eax
mov word [esp + 0x14], cx
call fcn.004eac90
mov eax, dword [0xcfa484]
add esp, 4
cmp eax, edi
mov dword [0xa56090], edi
je case.0x502572.1217
mov eax, dword [0xcfa4d8]
mov dword [0xcfa484], 0
test eax, eax
je 0x50249b
jmp 0x502485
mov cx, word [0xa56090]
push ecx
call fcn.004ead10
mov eax, dword [0xcfa484]
add esp, 4
cmp eax, edi
je 0x502392
mov eax, dword [0xcfa4d8]
mov dword [0xcfa484], edi
cmp eax, edi
je 0x502380
push edi
push edi
push 0xcfa4dc
push 0xcfa4d8
call fcn.005a6840
add esp, 0x10
mov eax, dword [0xd0af88]
cmp eax, edi
je 0x502392
push eax
call fcn.004e6ba0
add esp, 4
mov dword [0xa56090], edi
jmp case.0x502572.1217
mov eax, dword [0xcecf68]
mov dword [0xcecdc0], edi
push eax
call fcn.004eb830
add esp, 4
jmp case.0x502572.1217
push edi
push 0x68ef6c
push edi
mov ecx, 0xcf5120
call fcn.00544910
push 1
call fcn.004ebd70
add esp, 4
jmp case.0x502572.1217
mov ax, word [0xce986c]
mov dx, word [0xa56090]
mov word [esp + 0x14], ax
mov eax, dword [0xd120b8]
cmp eax, edi
mov word [esp + 0x10], dx
mov word [esp + 0x12], di
je 0x50240a
lea ecx, [esp + 0x10]
push ecx
call fcn.004eacd0
jmp 0x502312
lea edx, [esp + 0x10]
push edx
call fcn.004eacb0
jmp 0x502312
mov ax, word [0xa56090]
mov cx, word [0xce986c]
lea edx, [esp + 0x10]
mov word [esp + 0x10], ax
push edx
mov word [esp + 0x16], di
mov word [esp + 0x18], cx
call fcn.004eacf0
jmp 0x502312
push 4
push 0xa56090
push 4
push 0xd12278
push 0x50f
call fcn.004ac490
mov eax, dword [0xcfa484]
add esp, 0x14
cmp eax, edi
mov dword [0xa56090], edi
je case.0x502572.1217
mov eax, dword [0xcfa4d8]
mov dword [0xcfa484], 0
test eax, eax
je 0x50249b
push 0
push 0
push 0xcfa4dc
push 0xcfa4d8
call fcn.005a6840
add esp, 0x10
mov eax, dword [0xd0af88]
test eax, eax
je case.0x502572.1217
push eax
call fcn.004e6ba0
add esp, 4
jmp case.0x502572.1217
mov edi, 0x68ef6c
or ecx, 0xffffffff
xor eax, eax
xor edx, edx
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea ebx, [esp + 0x74]
mov eax, ecx
mov esi, edi
mov edi, ebx
mov dword [esp + 0x6c], edx
shr ecx, 2
mov dword [esp + 0x70], edx
lea ebx, [esp + 0x74]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, dword [0xd02998]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov word [esp + 0x68], ax
mov eax, dword [0xd0299c]
mov word [esp + 0x6a], ax
mov edi, 0x6d6810
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, ebx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, dword [0xa4f274]
and ecx, 3
cmp eax, edx
rep movsb byte es:[edi], byte [esi]
jne 0x502537
lea ecx, [esp + 0x74]
push edx
push ecx
call fcn.00586e90
add esp, 8
lea edx, [esp + 0x68]
push edx
call fcn.004ebcf0
add esp, 4
jmp case.0x502572.1217
cmp eax, 0x60b
ja 0x502793
je 0x502767
add eax, 0xfffffb45
cmp eax, 0xeb
ja case.0x502572.1217
xor ecx, ecx
mov cl, byte [eax + 0x505ec4]
jmp dword [ecx*4 + 0x505ea8]
mov ecx, 0xd04bc8
call fcn.00578360
jmp case.0x502572.1217
call fcn.004fdcb0
mov ecx, eax
call fcn.004fdb80
jmp case.0x502572.1217
mov eax, dword [0xa24694]
cmp eax, edi
jne 0x502616
cmp dword [0xa4f274], edi
je 0x5025cc
mov edi, 0x6432c4
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
mov esi, edi
mov edi, 0xce96fc
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
jmp 0x5025ec
mov edi, 0x6432ac
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, 0xce96fc
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
xor eax, eax
rep movsb byte es:[edi], byte [esi]
mov edi, 0xce96fc
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
push eax
dec ecx
push eax
push eax
push ecx
push 0xce96fc
call fcn.004cbc90
add esp, 0x14
jmp case.0x502572.1217
jle case.0x502572.1217
mov ecx, dword [0x6d6804]
mov eax, dword [0xa24698]
cmp ecx, eax
je 0x50269f
cmp dword [0xa4f274], edi
je 0x502655
mov edi, 0x668730
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
mov esi, edi
mov edi, 0xce96fc
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
jmp 0x502675
mov edi, 0x668708
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, 0xce96fc
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
xor eax, eax
rep movsb byte es:[edi], byte [esi]
mov edi, 0xce96fc
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
push eax
dec ecx
push eax
push eax
push ecx
push 0xce96fc
call fcn.004cbc90
add esp, 0x14
jmp case.0x502572.1217
push 0xce8f04
mov ecx, 0xa24690
call fcn.0047a900
cmp eax, edi
je 0x5026c0
push eax
call fcn.004e8fb0
add esp, 4
jmp case.0x502572.1217
cmp dword [0xa4f274], edi
je 0x5026ea
mov edi, 0x643244
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
mov esi, edi
mov edi, 0xce96fc
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
jmp 0x50270a
mov edi, 0x643224
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, 0xce96fc
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
xor eax, eax
rep movsb byte es:[edi], byte [esi]
mov edi, 0xce96fc
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
push eax
dec ecx
push eax
push eax
push ecx
push 0xce96fc
call fcn.004cbc90
add esp, 0x14
jmp case.0x502572.1217
push 1
mov ecx, 0xcfa800
call fcn.0055bfc0
jmp case.0x502572.1217
push 1
mov ecx, 0xcfa800
call fcn.0055bff0
jmp case.0x502572.1217
push 1
mov ecx, 0xcfa800
call fcn.0055c030
jmp case.0x502572.1217
mov ecx, 0xd12670
call fcn.005a02e0
cmp word [0xd12732], 1
jne 0x502787
mov byte [0xd12735], 1
jmp case.0x502572.1217
mov byte [0xd12736], 1
jmp case.0x502572.1217
cmp eax, 0x7cd
ja 0x503870
je 0x503854
sub eax, 0x613
je 0x5029f7
dec eax
jne case.0x502572.1217
xor ecx, ecx
xor eax, eax
mov dword [esp + 0xc8], ecx
lea edi, [esp + 0xdb]
mov dword [esp + 0xcc], ecx
mov dword [esp + 0xc4], 0
mov dword [esp + 0xd0], ecx
xor edx, edx
mov dword [esp + 0xd4], ecx
mov ebp, dword [0xcea3c0]
mov word [esp + 0xd8], cx
mov byte [esp + 0xda], cl
mov ecx, 7
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0x19
xor eax, eax
lea edi, [esp + 0xfa]
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
xor eax, eax
mov dword [esp + 0x15f], edx
mov dword [esp + 0xdb], eax
mov dword [esp + 0x163], edx
mov dword [esp + 0xdf], eax
mov dword [esp + 0x167], edx
mov dword [esp + 0xe3], eax
mov ecx, 0x19
mov dword [esp + 0xe7], eax
lea edi, [esp + 0xfa]
mov dword [esp + 0xeb], eax
mov byte [esp + 0x16b], dl
mov byte [esp + 0xef], al
rep stosd dword es:[edi], eax
xor ecx, ecx
stosb byte es:[edi], al
mov dword [esp + 0xc8], ecx
mov dword [esp + 0xcc], ecx
mov dword [esp + 0xd0], ecx
mov dword [esp + 0xd4], ecx
mov word [esp + 0xd8], cx
mov byte [esp + 0xda], cl
mov ecx, 0xcea3bc
call fcn.004296f0
mov ecx, ebp
mov esi, eax
mov edx, ecx
lea edi, [esp + 0xdb]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, 0xcea420
call fcn.0042a650
mov ecx, 0x19
mov esi, eax
lea edi, [esp + 0xfa]
xor eax, eax
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov edi, 0x6d6810
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov esi, 0x6d6810
mov eax, ecx
lea edi, [esp + 0xc8]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0xdb]
push ecx
call fcn.0044a5a0
lea edx, [esp + 0xfe]
push edx
call fcn.0044a5a0
lea edi, [esp + 0xe3]
or ecx, 0xffffffff
xor eax, eax
add esp, 8
repne scasb al, byte es:[edi]
not ecx
dec ecx
cmp ecx, 0x15
jbe 0x50296d
mov eax, dword [0xa4f274]
push 0
push 0
push 0
test eax, eax
push 0
je 0x50295b
push 0x6686e8
call fcn.004cbc90
add esp, 0x14
jmp case.0x502572.1217
push 0x6686c8
call fcn.004cbc90
add esp, 0x14
jmp case.0x502572.1217
lea edi, [esp + 0xfa]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov eax, dword [0xa4f274]
not ecx
dec ecx
cmp ecx, 0x33
jbe 0x5029b8
push 0
push 0
test eax, eax
push 0
push 0
je 0x5029a6
push 0x6686a8
call fcn.004cbc90
add esp, 0x14
jmp case.0x502572.1217
push 0x668688
call fcn.004cbc90
add esp, 0x14
jmp case.0x502572.1217
push 0
push 0
test eax, eax
push 0
push 0
je 0x5029cb
push 0x668664
jmp 0x5029d0
push 0x668640
call fcn.004cbc90
add esp, 0x14
lea eax, [esp + 0xc4]
push 0xa8
push eax
push 0xdd1
call fcn.004ac410
add esp, 0xc
jmp case.0x502572.1217
mov eax, dword [0xced120]
cmp eax, 0xdd8
jl 0x502abc
cmp eax, 0xddb
jg 0x502abc
push 0x6d67a8
call fcn.00473f60
add esp, 4
test eax, eax
je 0x502a9b
xor ecx, ecx
mov cx, word [0xa58523]
push ecx
call fcn.00435910
mov edx, dword [0xced120]
push eax
push edx
call fcn.005020a0
add esp, 0xc
test al, al
je 0x502a70
mov eax, dword [0xced120]
mov ecx, 0xced988
push eax
call fcn.0052d310
lea ecx, [esp + 0x10]
push 2
push ecx
push 0xe0f
mov dword [esp + 0x1c], eax
call fcn.004ac410
add esp, 0xc
jmp 0x502ab7
mov eax, dword [0xa4f274]
push edi
push edi
cmp eax, edi
push edi
push edi
je 0x502a8c
push 0x668630
call fcn.004cbc90
add esp, 0x14
jmp 0x502ab7
push 0x668620
call fcn.004cbc90
add esp, 0x14
jmp 0x502ab7
cmp dword [0xa4f274], edi
je 0x502aaa
push 0x668600
jmp 0x502aaf
push 0x6685e0
call fcn.004cbc30
add esp, 4
mov eax, dword [0xced120]
mov ebx, 0xa23
mov ebp, 0xa
cmp eax, ebx
je 0x502d2e
cmp eax, 0xa27
je 0x502d2e
cmp eax, 0xa67
je 0x502d2e
cmp eax, 0xa86
je 0x502d2e
cmp eax, 0xa24
je 0x502c35
cmp eax, 0xa28
je 0x502c35
cmp eax, 0xa68
je 0x502c35
cmp eax, 0xa87
je 0x502c35
cmp eax, 0xa25
je 0x502b3b
cmp eax, 0xa29
je 0x502b3b
cmp eax, 0xa69
je 0x502b3b
cmp eax, 0xa88
jne 0x502e3f
push eax
mov ecx, 0xced988
call fcn.0052d310
mov esi, eax
mov eax, 0xcccccccd
mul esi
mov ecx, edx
mov eax, esi
xor edx, edx
mov edi, ebp
div edi
shr ecx, 3
lea eax, [ecx + ecx*4]
lea eax, [edx + eax*2]
mov ecx, eax
shl ecx, 4
add ecx, eax
mov eax, dword [0xcf2880]
test eax, eax
mov edi, dword [ecx*8 + 0xceda6c]
jne 0x502bd2
mov dx, word [0xced120]
push 4
push 0xce9850
push 0x48c
mov word [0xce9850], dx
call fcn.004ac410
mov eax, dword [0xced120]
push edi
push eax
push 0x93
push esi
call fcn.004e6ec0
mov eax, dword [0xa4f274]
add esp, 0x1c
test eax, eax
push 0
push 0
push 0
push 0
je 0x502bc8
push 0x6685ac
jmp 0x502e32
push 0x668578
jmp 0x502e32
cmp eax, 0xa25
je 0x502c10
push 0xa29
call fcn.0051f400
add esp, 4
test al, al
jne 0x502c10
push 0xa69
call fcn.0051f400
add esp, 4
test al, al
jne 0x502c10
push 0xa88
call fcn.0051f400
add esp, 4
test al, al
je 0x502df6
mov eax, dword [0xa4f274]
push 0
push 0
push 0
test eax, eax
push 0
je 0x502c2b
push 0x668558
jmp 0x502e32
push 0x668538
jmp 0x502e32
push eax
mov ecx, 0xced988
call fcn.0052d310
mov esi, eax
mov eax, 0xcccccccd
mul esi
mov ecx, edx
mov eax, esi
xor edx, edx
mov edi, ebp
div edi
shr ecx, 3
lea ecx, [ecx + ecx*4]
lea eax, [edx + ecx*2]
mov edx, eax
shl edx, 4
add edx, eax
mov eax, dword [0xcf2908]
test eax, eax
mov edi, dword [edx*8 + 0xceda6c]
jne 0x502ccb
mov ax, word [0xced120]
push 4
push 0xce8bf2
push 0x48c
mov word [0xce8bf2], ax
call fcn.004ac410
mov ecx, dword [0xced120]
push edi
push ecx
push 0x94
push esi
call fcn.004e6ec0
mov eax, dword [0xa4f274]
add esp, 0x1c
test eax, eax
push 0
push 0
push 0
push 0
je 0x502cc1
push 0x668504
jmp 0x502e32
push 0x6684d0
jmp 0x502e32
cmp eax, 0xa24
je 0x502d09
push 0xa28
call fcn.0051f400
add esp, 4
test al, al
jne 0x502d09
push 0xa68
call fcn.0051f400
add esp, 4
test al, al
jne 0x502d09
push 0xa87
call fcn.0051f400
add esp, 4
test al, al
je 0x502df6
mov eax, dword [0xa4f274]
push 0
push 0
push 0
test eax, eax
push 0
je 0x502d24
push 0x6684b0
jmp 0x502e32
push 0x668490
jmp 0x502e32
push eax
mov ecx, 0xced988
call fcn.0052d310
mov esi, eax
mov eax, 0xcccccccd
mul esi
mov ecx, edx
mov eax, esi
xor edx, edx
mov edi, ebp
div edi
shr ecx, 3
lea eax, [ecx + ecx*4]
lea eax, [edx + eax*2]
mov ecx, eax
shl ecx, 4
add ecx, eax
mov eax, dword [0xcf2990]
test eax, eax
mov edi, dword [ecx*8 + 0xceda6c]
jne 0x502dbf
mov dx, word [0xced120]
push 4
push 0xce8bf0
push 0x48c
mov word [0xce8bf0], dx
call fcn.004ac410
mov eax, dword [0xced120]
push edi
push eax
push 0x95
push esi
call fcn.004e6ec0
mov eax, dword [0xa4f274]
add esp, 0x1c
test eax, eax
push 0
push 0
push 0
push 0
je 0x502db8
push 0x66845c
jmp 0x502e32
push 0x668428
jmp 0x502e32
cmp eax, ebx
je 0x502e15
push 0xa27
call fcn.0051f400
add esp, 4
test al, al
jne 0x502e15
push 0xa67
call fcn.0051f400
add esp, 4
test al, al
jne 0x502e15
push 0xa86
call fcn.0051f400
add esp, 4
test al, al
jne 0x502e15
mov eax, dword [0xa4f274]
push 0
push 0
push 0
test eax, eax
push 0
je 0x502e0e
push 0x6683f0
jmp 0x502e32
push 0x6683b8
jmp 0x502e32
mov eax, dword [0xa4f274]
push 0
push 0
push 0
test eax, eax
push 0
je 0x502e2d
push 0x668398
jmp 0x502e32
push 0x668378
call fcn.004cbc90
mov eax, dword [0xced120]
add esp, 0x14
cmp eax, 0xc5d
jl 0x502e51
cmp eax, 0xc69
jle 0x50382c
cmp eax, 0xcf8
je 0x50382c
cmp eax, 0xcf9
je 0x50382c
cmp eax, 0xd54
je 0x50382c
cmp eax, 0xd5b
je 0x50382c
cmp eax, 0xd5d
je 0x50382c
cmp eax, 0xd5e
je 0x50382c
cmp eax, 0xd62
je 0x50382c
cmp eax, 0xcfc
jl 0x502eb0
cmp eax, 0xcfe
jle 0x50382c
cmp eax, 0xd57
jl 0x502ec2
cmp eax, 0x828a
jle 0x50382c
cmp eax, 0xb2f
mov esi, 5
jne 0x502f93
push 0x64
mov word [esp + 0x16], si
mov word [esp + 0x14], bx
call fcn.0051b810
add esp, 4
cmp eax, 1
jl 0x502f00
cmp eax, 0x14
jg 0x502f00
mov word [0xcea270], 0x51b
mov word [0xcea272], bp
cmp eax, 0x15
jl 0x502f1a
cmp eax, 0x28
jg 0x502f1a
mov word [0xcea270], 0x51c
mov word [0xcea272], bp
cmp eax, 0x29
jl 0x502f34
cmp eax, 0x3c
jg 0x502f34
mov word [0xcea270], 0x51d
mov word [0xcea272], bp
cmp eax, 0x3d
jl 0x502f4e
cmp eax, 0x50
jg 0x502f4e
mov word [0xcea270], 0x51e
mov word [0xcea272], bp
cmp eax, 0x51
jl 0x502f68
cmp eax, 0x64
jg 0x502f68
mov word [0xcea270], 0x51f
mov word [0xcea272], bp
push 0xb2f
mov ecx, 0xced988
call fcn.0052d310
push eax
push 1
lea ecx, [esp + 0x18]
push 4
push ecx
push 0xdd5
call fcn.004ac530
mov eax, dword [0xced120]
add esp, 0x14
cmp eax, 0xb30
mov edi, 0xaa6
jne 0x502fde
push eax
mov ecx, 0xced988
mov word [esp + 0x16], si
mov word [esp + 0x14], bx
mov word [0xcea270], di
mov word [0xcea272], bp
call fcn.0052d310
push eax
push 1
lea edx, [esp + 0x18]
push 4
push edx
push 0xdd6
call fcn.004ac530
mov eax, dword [0xced120]
add esp, 0x14
cmp eax, 0xb31
jne 0x503028
push eax
mov ecx, 0xced988
mov word [esp + 0x16], si
mov word [esp + 0x14], bx
mov word [0xcea270], 0xa5e
mov word [0xcea272], 8
call fcn.0052d310
push eax
push 1
lea eax, [esp + 0x18]
push 4
push eax
push 0xdd7
call fcn.004ac530
mov eax, dword [0xced120]
add esp, 0x14
cmp eax, 0xb32
jne 0x5031cf
push 0x64
mov word [esp + 0x16], si
mov word [esp + 0x14], bx
call fcn.0051b810
add esp, 4
test eax, eax
jl 0x503067
cmp eax, 0xf
jg 0x503067
mov ecx, 1
mov word [0xcea270], 0xaaf
mov word [0xcea272], cx
jmp 0x50306c
mov ecx, 1
cmp eax, 0x10
jl 0x503086
cmp eax, 0x1e
jg 0x503086
mov word [0xcea270], 0xab5
mov word [0xcea272], cx
cmp eax, 0x1f
jl 0x5030a0
cmp eax, 0x2d
jg 0x5030a0
mov word [0xcea270], 0xad3
mov word [0xcea272], cx
cmp eax, 0x2e
jl 0x5030ba
cmp eax, 0x3c
jg 0x5030ba
mov word [0xcea270], 0xadb
mov word [0xcea272], cx
cmp eax, 0x3d
jl 0x5030d4
cmp eax, 0x42
jg 0x5030d4
mov word [0xcea270], 0xadc
mov word [0xcea272], cx
cmp eax, 0x43
jl 0x5030ee
cmp eax, 0x48
jg 0x5030ee
mov word [0xcea270], 0xadf
mov word [0xcea272], cx
cmp eax, 0x49
jl 0x503108
cmp eax, 0x4f
jg 0x503108
mov word [0xcea270], 0xae6
mov word [0xcea272], cx
cmp eax, 0x50
jl 0x503122
cmp eax, 0x56
jg 0x503122
mov word [0xcea270], 0xaea
mov word [0xcea272], cx
cmp eax, 0x57
jl 0x50313c
cmp eax, 0x59
jg 0x50313c
mov word [0xcea270], 0xaeb
mov word [0xcea272], cx
cmp eax, 0x5a
jl 0x503156
cmp eax, 0x5c
jg 0x503156
mov word [0xcea270], 0xaec
mov word [0xcea272], cx
cmp eax, 0x5d
jl 0x503170
cmp eax, 0x5f
jg 0x503170
mov word [0xcea270], 0xaed
mov word [0xcea272], cx
cmp eax, 0x60
jl 0x50318a
cmp eax, 0x62
jg 0x50318a
mov word [0xcea270], 0xaee
mov word [0xcea272], cx
cmp eax, 0x63
jl 0x5031a4
cmp eax, 0x64
jg 0x5031a4
mov word [0xcea270], 0xaef
mov word [0xcea272], cx
push 0xb32
mov ecx, 0xced988
call fcn.0052d310
push eax
push 1
lea ecx, [esp + 0x18]
push 4
push ecx
push 0xdd8
call fcn.004ac530
mov eax, dword [0xced120]
add esp, 0x14
cmp eax, 0xb34
jne 0x5032f4
push 0x64
mov word [esp + 0x16], si
mov word [esp + 0x14], bx
call fcn.0051b810
add esp, 4
test eax, eax
jl 0x50320e
cmp eax, 0x17
jg 0x50320e
mov ecx, 1
mov word [0xcea270], 0x145
mov word [0xcea272], cx
jmp 0x503213
mov ecx, 1
cmp eax, 0x18
jl 0x50322d
cmp eax, 0x2e
jg 0x50322d
mov word [0xcea270], 0x148
mov word [0xcea272], cx
cmp eax, 0x2f
jl 0x503247
cmp eax, 0x58
jg 0x503247
mov word [0xcea270], 0x14e
mov word [0xcea272], cx
cmp eax, 0x59
jl 0x503261
cmp eax, 0x5b
jg 0x503266
mov word [0xcea270], 0x672
mov word [0xcea272], cx
cmp eax, 0x5b
jl 0x50327b
cmp eax, 0x5d
jg 0x50327b
mov word [0xcea270], 0x4cb
mov word [0xcea272], cx
cmp eax, 0x5e
jl 0x503295
cmp eax, 0x60
jg 0x503295
mov word [0xcea270], 0x4c2
mov word [0xcea272], cx
cmp eax, 0x61
jl 0x5032af
cmp eax, 0x62
jg 0x5032af
mov word [0xcea270], 0x790
mov word [0xcea272], cx
cmp eax, 0x63
jl 0x5032c9
cmp eax, 0x64
jg 0x5032c9
mov word [0xcea270], 0x78a
mov word [0xcea272], cx
push 0xb34
mov ecx, 0xced988
call fcn.0052d310
push eax
push 1
lea edx, [esp + 0x18]
push 4
push edx
push 0xdda
call fcn.004ac530
mov eax, dword [0xced120]
add esp, 0x14
cmp eax, 0xb33
jne 0x5033e6
push 0x64
mov word [esp + 0x16], si
mov word [esp + 0x14], bx
call fcn.0051b810
add esp, 4
cmp eax, 1
jl 0x503334
cmp eax, 0x1e
jg 0x503334
mov ecx, 1
mov word [0xcea270], 0x359
mov word [0xcea272], cx
jmp 0x503339
mov ecx, 1
cmp eax, 0x1f
jl 0x503353
cmp eax, 0x38
jg 0x503353
mov word [0xcea270], 0x35a
mov word [0xcea272], cx
cmp eax, 0x39
jl 0x50336d
cmp eax, 0x45
jg 0x50336d
mov word [0xcea270], 0x35b
mov word [0xcea272], cx
cmp eax, 0x46
jl 0x503387
cmp eax, 0x55
jg 0x503387
mov word [0xcea270], 0x35d
mov word [0xcea272], cx
cmp eax, 0x56
jl 0x5033a1
cmp eax, 0x5d
jg 0x5033a1
mov word [0xcea270], 0x35f
mov word [0xcea272], cx
cmp eax, 0x5e
jl 0x5033bb
cmp eax, 0x64
jg 0x5033bb
mov word [0xcea270], 0x515
mov word [0xcea272], cx
push 0xb33
mov ecx, 0xced988
call fcn.0052d310
push eax
push 1
lea eax, [esp + 0x18]
push 4
push eax
push 0xdd9
call fcn.004ac530
mov eax, dword [0xced120]
add esp, 0x14
push eax
call fcn.0051cf10
add esp, 4
test al, al
je 0x50353a
mov eax, dword [0x68ec54]
mov esi, dword [eax]
cmp esi, eax
je 0x5034b5
mov ecx, dword [esi + 0xe]
mov edx, dword [esi + 0x12]
mov dword [esp + 0x28], ecx
mov ecx, dword [0xced120]
mov dword [esp + 0x2c], edx
mov eax, dword [esp + 0x2a]
and eax, 0xffff
cmp eax, ecx
jne 0x503450
mov ecx, dword [esi + 0xe]
mov eax, edx
mov word [0xcea270], ax
mov eax, dword [esi + 0x12]
mov edx, dword [esi + 0xe]
mov dword [esp + 0x38], ecx
mov dword [esp + 0x1c], eax
mov cx, word [esp + 0x1e]
mov dword [esp + 0x18], edx
mov word [0xcea272], cx
lea ecx, [esp + 0x10]
call fcn.006071a8
mov eax, dword [esi + 8]
mov ecx, dword [0x68ef3c]
cmp eax, ecx
mov dword [esp + 0x174], 0
je 0x50347c
push eax
call fcn.0051b210
add esp, 4
jmp 0x503493
mov eax, dword [esi + 4]
cmp esi, dword [eax + 8]
jne 0x50348e
mov esi, eax
mov eax, dword [eax + 4]
cmp esi, dword [eax + 8]
je 0x503484
cmp dword [esi + 8], eax
je 0x503495
mov esi, eax
lea ecx, [esp + 0x10]
mov dword [esp + 0x174], 0xffffffff
call fcn.00607244
cmp esi, dword [0x68ec54]
jne 0x503406
mov edx, dword [0xced120]
mov ecx, 0xced988
push edx
call fcn.0052d310
mov si, word [0xced120]
mov cx, word [0xcea270]
mov dx, word [0xcea272]
mov word [esp + 0x66], si
xor esi, esi
mov word [esp + 0x60], ax
cmp ax, si
mov word [esp + 0x62], cx
mov word [esp + 0x64], dx
je 0x503516
cmp cx, si
je 0x503516
cmp dx, si
je 0x503516
lea eax, [esp + 0x60]
push 8
push eax
push 0xddc
call fcn.004ac410
add esp, 0xc
jmp 0x503527
push esi
push esi
push esi
push esi
push 0x66835c
call fcn.004cbc90
add esp, 0x14
mov word [0xcea270], si
mov word [0xcea272], si
mov esi, 5
cmp dword [0xced120], 0xa99
jne 0x50360e
push 0xa99
mov ecx, 0xced988
mov word [esp + 0x16], si
mov word [esp + 0x14], bx
mov word [0xcea270], 0xa9a
mov word [0xcea272], si
mov word [0xcea274], 0xa9b
mov word [0xcea276], si
mov word [0xcea278], 0xa26
mov word [0xcea27a], bp
mov word [0xcea27c], 0x155
mov word [0xcea27e], 0x14
mov word [0xcea280], 0x156
mov word [0xcea282], bp
mov word [0xcea284], 0x154
mov word [0xcea286], bp
mov word [0xcea288], 0x158
mov word [0xcea28a], bp
mov word [0xcea28c], 0x157
mov word [0xcea28e], bp
mov word [0xcea290], 0x15f
mov word [0xcea292], 0xf
call fcn.0052d310
push eax
push 9
lea ecx, [esp + 0x18]
push 4
push ecx
push 0x48d
call fcn.004ac530
add esp, 0x14
cmp dword [0xced120], 0xaa5
jne 0x503695
push 0x14
mov word [esp + 0x16], si
mov word [esp + 0x14], bx
call fcn.0051b810
add esp, 4
mov ecx, 0x68ef70
mov word [0xcea270], di
mov word [0xcea272], ax
call fcn.0041bb10
push esi
push 2
push 0x1e
mov ecx, 0x68ef70
call fcn.0041b980
push esi
push 2
push 0x1e
mov ecx, 0x68ef70
call fcn.0041b9b0
push 1
mov ecx, 0x68ef70
call fcn.0041bb60
push 0xaa5
mov ecx, 0xced988
call fcn.0052d310
push eax
push 1
lea edx, [esp + 0x18]
push 4
push edx
push 0x48d
call fcn.004ac530
add esp, 0x14
cmp dword [0xced120], 0xaaa
jne 0x5036f1
mov eax, dword [0xcea2d4]
mov ecx, dword [0x6d6790]
cmp eax, ecx
jae 0x5036dc
mov dword [esp + 0x10], 1
call fcn.0051bd80
test al, al
je 0x5036c6
call fcn.0051be30
lea ecx, [esp + 0x10]
push 2
push ecx
push 0xdcd
call fcn.004ac410
add esp, 0xc
jmp 0x5036f1
push 0
push 0
push 0
push 0
push 0x668344
call fcn.004cbc90
add esp, 0x14
mov eax, dword [0xced120]
mov esi, 0x270f
cmp eax, 0xafc
je 0x50370d
cmp eax, 0xafb
jne 0x5037c9
cmp dword [0x6d67ac], esi
jne 0x50378e
mov edx, dword [0x6d67b4]
mov eax, dword [0x6d67b0]
push edx
push eax
call fcn.0051bd00
add esp, 8
test al, al
je 0x503763
mov eax, dword [0xa4f274]
push 0
push 0
push 0
test eax, eax
push 0
je 0x503751
push 0x668320
call fcn.004cbc90
add esp, 0x14
jmp case.0x502572.1217
push 0x6682fc
call fcn.004cbc90
add esp, 0x14
jmp case.0x502572.1217
push 0xafc
mov ecx, 0xced988
mov word [esp + 0x14], 0x44c
call fcn.0052d310
mov word [esp + 0x16], ax
mov word [esp + 0x12], 0x4c
mov word [esp + 0x14], 0xfe
jmp 0x5037b5
push 0xafc
mov ecx, 0xced988
mov word [esp + 0x14], si
mov word [esp + 0x16], 0xd2
mov word [esp + 0x18], 0x2a1
call fcn.0052d310
mov word [esp + 0x16], ax
lea ecx, [esp + 0x10]
push 8
push ecx
push 0xdd4
call fcn.004ac410
add esp, 0xc
cmp dword [0xced120], 0xb14
jne case.0x502572.1217
cmp dword [0x6d67ac], esi
jne 0x5037f7
push 0x17
call fcn.004e6670
add esp, 4
mov byte [0xce9528], 1
jmp case.0x502572.1217
mov eax, dword [0xa4f274]
push 0
push 0
push 0
test eax, eax
push 0
je 0x50381a
push 0x6682d8
call fcn.004cbc90
add esp, 0x14
jmp case.0x502572.1217
push 0x6682b8
call fcn.004cbc90
add esp, 0x14
jmp case.0x502572.1217
push eax
mov ecx, 0xced988
call fcn.0052d310
lea edx, [esp + 0x10]
push 2
push edx
push 0xdf2
mov dword [esp + 0x1c], eax
call fcn.004ac410
add esp, 0xc
jmp case.0x502572.1217
mov ax, word [0xced268]
mov cx, word [0xced112]
push eax
push ecx
call fcn.004ec3a0
add esp, 8
jmp case.0x502572.1217
sub eax, 0x7ce
je 0x5038e6
dec eax
jne case.0x502572.1217
cmp dword [0xcea2c8], edi
je 0x503897
push 0xcf473c
mov ecx, 0xced988
call fcn.0052dae0
jmp 0x5038ce
mov eax, dword [0x6d67ac]
cmp eax, 0x464
je 0x5038bd
cmp eax, 0x83b
je 0x5038bd
cmp eax, 0xc23
je 0x5038bd
mov ecx, 0xced988
call fcn.00533300
jmp 0x5038ce
push edi
push edi
push edi
push edi
push 0x6682a4
call fcn.004cbc90
add esp, 0x14
push 1
mov dword [0xcf474c], edi
mov dword [0xcf47c0], edi
call fcn.004fe110
add esp, 4
jmp case.0x502572.1217
lea edx, [esp + 0x10]
push 4
push edx
push 0x5cc
mov dword [esp + 0x1c], 2
call fcn.004ac410
add esp, 0xc
push 1
mov ecx, 0xcfa800
call fcn.0055bdb0
cmp dword [0xce8ee4], 0x3e8
jne 0x503e77
mov edi, 0x68ef6c
or ecx, 0xffffffff
xor eax, eax
xor ebp, ebp
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov dword [0xcea298], ebp
mov eax, ecx
mov esi, edi
mov edi, 0xce8ad0
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, 2
cmp word [0xd0696c], di
jne 0x50398a
mov cx, word [0xd05910]
lea edx, [esp + 0x10]
push edx
mov word [esp + 0x14], cx
mov word [esp + 0x16], 1
call fcn.004e79e0
add esp, 4
mov dword [0xcea298], ebp
mov dword [0xce8ee4], ebp
jmp 0x505e5a
mov eax, dword [0xcf481c]
cmp eax, ebp
mov eax, dword [0xcf50ec]
je 0x5039a0
cmp eax, ebp
je 0x503e79
cmp dword [0xd12174], ebp
je 0x5039c3
mov ecx, 0xd12158
call fcn.0058d300
mov dword [0xcea298], ebp
mov dword [0xce8ee4], ebp
jmp 0x505e5a
cmp word [0xa51230], bp
je 0x5039f0
push ebp
push ebp
push 3
mov word [0xa51230], bp
call fcn.005a07e0
add esp, 0xc
mov dword [0xcea298], ebp
mov dword [0xce8ee4], ebp
jmp 0x505e5a
mov esi, 1
cmp eax, esi
jne 0x503a39
mov ecx, dword [0xced148]
mov edx, dword [0xced14c]
sub esp, 0xc
mov eax, esp
mov dword [eax], ecx
mov cx, word [0xced150]
mov dword [eax + 4], edx
mov word [eax + 8], cx
call fcn.00543810
add esp, 0xc
mov dword [0xcf50ec], ebp
mov dword [0xcea298], ebp
mov dword [0xce8ee4], ebp
jmp 0x505e5a
cmp dword [0xcf50f0], esi
jne 0x503a7f
mov eax, dword [0xced148]
mov ecx, dword [0xced14c]
sub esp, 0xc
mov edx, esp
mov dword [edx], eax
mov ax, word [0xced150]
mov dword [edx + 4], ecx
mov word [edx + 8], ax
call fcn.005436f0
add esp, 0xc
mov dword [0xcf50f0], ebp
mov dword [0xcea298], ebp
mov dword [0xce8ee4], ebp
jmp 0x505e5a
cmp dword [0xcf50f8], esi
jne 0x503ac6
mov edx, dword [0xced148]
mov eax, dword [0xced14c]
sub esp, 0xc
mov ecx, esp
mov dword [ecx], edx
mov dx, word [0xced150]
mov dword [ecx + 4], eax
mov word [ecx + 8], dx
call fcn.005436f0
add esp, 0xc
mov dword [0xcf50f8], ebp
mov dword [0xcea298], ebp
mov dword [0xce8ee4], ebp
jmp 0x505e5a
cmp dword [0xcf50f4], esi
jne 0x503b0e
mov ecx, dword [0xced148]
mov edx, dword [0xced14c]
sub esp, 0xc
mov eax, esp
mov dword [eax], ecx
mov cx, word [0xced150]
mov dword [eax + 4], edx
mov word [eax + 8], cx
call fcn.005436a0
add esp, 0xc
mov dword [0xcf50f4], ebp
mov dword [0xcea298], ebp
mov dword [0xce8ee4], ebp
jmp 0x505e5a
cmp dword [0xd120b4], esi
jne 0x503cdd
mov dl, byte [esp + 0x4b]
push ebp
lea ecx, [esp + 0x78]
mov byte [esp + 0x78], dl
call fcn.00409ab0
mov al, byte [esp + 0x4b]
mov dword [esp + 0x88], ebp
mov byte [esp + 0x84], al
mov dword [esp + 0x8c], ebp
mov dword [esp + 0x90], ebp
mov edx, dword [0xd12130]
lea ecx, [esp + 0x68]
push ecx
push edx
mov ecx, 0xa26378
mov dword [esp + 0x17c], esi
call fcn.0048e370
test eax, eax
je 0x503c76
mov eax, dword [0x6d68d0]
mov ecx, dword [esp + 0x70]
cmp eax, ecx
jae 0x503bf5
mov eax, dword [0xa4f274]
push ebp
push ebp
cmp eax, ebp
push ebp
push ebp
je 0x503b92
push 0x66828c
jmp 0x503b97
push 0x668278
call fcn.004cbc90
add esp, 0x14
mov ecx, 0xd120b0
mov dword [0xd120b4], ebp
push esi
call fcn.0058a470
push esi
lea ecx, [esp + 0x88]
mov dword [esp + 0x178], edi
call fcn.00409ab0
mov eax, dword [esp + 0x78]
cmp eax, ebp
je 0x505e5a
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x503be7
cmp al, 0xff
je 0x503be7
dec al
mov byte [ecx], al
jmp 0x505e5a
push ecx
call fcn.006066eb
add esp, 4
jmp 0x505e5a
mov cx, word [0xd120c0]
mov dx, word [0xd12130]
lea eax, [esp + 0x10]
mov word [esp + 0x10], cx
push eax
mov word [esp + 0x16], dx
call fcn.004ebd50
mov eax, dword [0xcfa484]
add esp, 4
cmp eax, ebp
je 0x503c58
mov eax, dword [0xcfa4d8]
mov dword [0xcfa484], ebp
cmp eax, ebp
je 0x503c46
push ebp
push ebp
push 0xcfa4dc
push 0xcfa4d8
call fcn.005a6840
add esp, 0x10
mov eax, dword [0xd0af88]
cmp eax, ebp
je 0x503c58
push eax
call fcn.004e6ba0
add esp, 4
mov ecx, dword [0x62d4c4]
mov dword [0xcea2d8], ebp
add ecx, 0x26
push ecx
call fcn.00575a50
add esp, 4
mov dword [0xd120c0], ebp
mov dword [0xd120b4], edi
push esi
lea ecx, [esp + 0x88]
mov dword [esp + 0x178], 3
call fcn.00409ab0
mov eax, dword [esp + 0x78]
cmp eax, ebp
je 0x503e79
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x503cc3
cmp al, 0xff
je 0x503cc3
dec al
mov byte [ecx], al
mov dword [0xcea298], ebp
mov dword [0xce8ee4], ebp
jmp 0x505e5a
push ecx
call fcn.006066eb
add esp, 4
mov dword [0xcea298], ebp
mov dword [0xce8ee4], ebp
jmp 0x505e5a
cmp dword [0xd04a84], ebp
je 0x503e4d
mov edx, dword [0xcea2d4]
mov eax, dword [0x6d6790]
cmp edx, eax
mov dword [0xd04a84], ebp
jae 0x503db6
mov dword [0xcea2b0], esi
call fcn.004e7260
call fcn.004e51d0
cmp dword [0x6d69f8], 0xc
je 0x503d53
push esi
push 7
mov ecx, 0x6d67a8
call fcn.00477840
neg ax
sbb eax, eax
inc eax
mov dword [0xa23564], eax
call fcn.0041cfc0
mov ecx, 0xa24690
call fcn.0047a610
mov dword [0xcea298], ebp
mov dword [0xce8ee4], ebp
jmp 0x505e5a
cmp dword [0xcf85ac], ebp
je 0x503d90
mov eax, dword [0xcf8600]
mov dword [0xcf85ac], ebp
cmp eax, ebp
je 0x503d7e
push ebp
push ebp
push 0xcf8604
push 0xcf8600
call fcn.005a6840
add esp, 0x10
mov eax, dword [0xd0af88]
cmp eax, ebp
je 0x503d90
push eax
call fcn.004e6ba0
add esp, 4
mov dword [0xa23564], esi
call fcn.0041cfc0
mov ecx, 0xa24690
call fcn.0047a610
mov dword [0xcea298], ebp
mov dword [0xce8ee4], ebp
jmp 0x505e5a
mov eax, dword [0xa4f274]
mov dword [0xcea2b0], ebp
cmp eax, ebp
lea edx, [esp + 0xc4]
mov edi, 0x668254
jne 0x503dd6
mov edi, 0x668230
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push ebp
mov eax, ecx
mov esi, edi
mov edi, edx
push ebp
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
push ebp
rep movsb byte es:[edi], byte [esi]
lea edi, [esp + 0xd0]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
lea ecx, [esp + 0xd4]
push ecx
call fcn.004cbc90
mov edx, dword [0xcfa63c]
push ebp
push 0x15
push 5
mov eax, dword [edx + 0x94]
push 0x15
push eax
push 0xcf9d88
push 0x14
push ebp
push ebp
push ebp
push ebp
call fcn.00522440
add esp, 0x40
mov dword [0xcea298], ebp
mov dword [0xce8ee4], ebp
jmp 0x505e5a
mov ecx, 0xcf65c0
call fcn.0054ca50
test eax, eax
je 0x503e79
push esi
mov ecx, 0xcf65c0
call fcn.0054cb40
mov dword [0xcea298], ebp
mov dword [0xce8ee4], ebp
jmp 0x505e5a
xor ebp, ebp
mov dword [0xcea298], ebp
mov dword [0xce8ee4], ebp
jmp 0x505e5a
cmp dword [0xcea2d0], edi
je 0x504249
mov ecx, dword [0xcf95d4]
mov edx, dword [0xcf95d0]
push ecx
lea eax, [esp + 0xa8]
push edx
push eax
call esi
test eax, eax
je 0x504249
mov eax, dword [0xce8ee4]
cmp eax, 0x3e8
jb 0x504249
cmp eax, 0x7d0
jae 0x504249
cmp eax, 0x4ba
mov ebx, 1
ja 0x5040d5
je 0x5040c8
add eax, 0xfffffc17
cmp eax, 0xc
ja case.0x503ef5.1010
jmp dword [eax*4 + 0x505fb0]
call fcn.004e9a80
mov dword [0xa56090], edi
jmp case.0x503ef5.1010
cmp dword [0xa56090], edi
je case.0x503ef5.1010
push edi
call fcn.004e9ff0
add esp, 4
mov dword [0xa56090], edi
jmp case.0x503ef5.1010
push edi
call fcn.004ea7f0
add esp, 4
mov dword [0xa56090], edi
jmp case.0x503ef5.1010
push edi
call fcn.004ea950
jmp 0x504137
push edi
call fcn.004eab60
jmp 0x504137
cmp dword [0xcfa484], edi
je 0x5040c0
mov eax, dword [0xcfa4d8]
mov dword [0xcfa484], edi
cmp eax, edi
je 0x503f85
push edi
push edi
push 0xcfa4dc
push 0xcfa4d8
call fcn.005a6840
add esp, 0x10
mov eax, dword [0xd0af88]
cmp eax, edi
je 0x5040c0
push eax
call fcn.004e6ba0
add esp, 4
mov dword [0xa56090], edi
jmp case.0x503ef5.1010
cmp dword [0xcfa484], edi
je 0x5040c0
mov eax, dword [0xcfa4d8]
mov dword [0xcfa484], edi
cmp eax, edi
je 0x503fd5
push edi
push edi
push 0xcfa4dc
push 0xcfa4d8
call fcn.005a6840
add esp, 0x10
mov eax, dword [0xd0af88]
cmp eax, edi
je 0x5040c0
push eax
call fcn.004e6ba0
add esp, 4
mov dword [0xa56090], edi
jmp case.0x503ef5.1010
mov dword [0xcecdc0], edi
jmp case.0x503ef5.1010
push edi
push 0x68ef6c
push edi
mov ecx, 0xcf5120
call fcn.00544910
push edi
call fcn.004ebd70
jmp 0x504137
mov eax, dword [0xa43b18]
mov ecx, dword [0xa43b1c]
mov dword [0xa4ef6c], eax
mov dword [0xa43b18], ecx
mov dword [0xa43b1c], eax
call dword [sym.imp.MyDivX.dll_public:_int___thiscall_OGGAudio::StopOGGAudio_void_]
push edi
push edi
mov ecx, dword [0xa43b18]
push edi
push edi
push edi
push edi
push ebx
push edi
push edi
push 0xa26ed4
call dword [sym.imp.MyDivX.dll_public:_int___thiscall_OGGAudio::PlayOGGAudio_char___double__int__double__int__float__float__float_]
mov ecx, dword [0xa26e7c]
cmp ecx, edi
jge 0x50406a
neg ecx
mov dword [0xa26e7c], ecx
mov eax, 0x64
mov dword [0xa4efe0], ebx
cdq
idiv ecx
mov dword [0xa26e4c], ebx
mov dword [0xa26e84], eax
cmp dword [0xcfa484], edi
je 0x5040c0
mov eax, dword [0xcfa4d8]
mov dword [0xcfa484], edi
cmp eax, edi
je 0x5040ae
push edi
push edi
push 0xcfa4dc
push 0xcfa4d8
call fcn.005a6840
add esp, 0x10
mov eax, dword [0xd0af88]
cmp eax, edi
je 0x5040c0
push eax
call fcn.004e6ba0
add esp, 4
mov dword [0xa56090], edi
jmp case.0x503ef5.1010
push edi
mov ecx, 0xcfa800
call fcn.0055bdb0
jmp case.0x503ef5.1010
cmp eax, 0x4bd
ja 0x50410f
je 0x504102
sub eax, 0x4bb
je 0x5040f5
dec eax
jne case.0x503ef5.1010
push edi
mov ecx, 0xcfa800
call fcn.0055bff0
jmp case.0x503ef5.1010
push edi
mov ecx, 0xcfa800
call fcn.0055bfc0
jmp case.0x503ef5.1010
push edi
mov ecx, 0xcfa800
call fcn.0055c030
jmp case.0x503ef5.1010
cmp eax, 0x7cf
jne case.0x503ef5.1010
push 0xcf473c
mov ecx, 0xced988
call fcn.0052dae0
push ebx
mov dword [0xcf474c], edi
mov dword [0xcf47c0], edi
call fcn.004fe110
add esp, 4
mov edi, 0x68ef6c
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
mov esi, edi
mov edi, 0xce8ad0
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
cmp word [0xd0696c], 2
rep movsb byte es:[edi], byte [esi]
jne 0x50419a
mov ax, word [0xd05910]
lea ecx, [esp + 0x10]
xor esi, esi
push ecx
mov word [esp + 0x14], ax
mov word [esp + 0x16], si
call fcn.004e79e0
add esp, 4
mov word [0xd0696c], si
mov dword [0xa56090], esi
jmp 0x504232
cmp dword [0xcf50f0], ebx
jne 0x5041af
xor esi, esi
mov dword [0xcf50f0], esi
jmp 0x504232
cmp dword [0xcf50ec], ebx
jne 0x5041c1
xor esi, esi
mov dword [0xcf50ec], esi
jmp 0x504232
cmp dword [0xd120b4], ebx
jne 0x5041d3
xor esi, esi
mov dword [0xd120b4], esi
jmp 0x504232
mov eax, dword [0xd12174]
xor esi, esi
cmp eax, esi
je 0x5041f5
push esi
mov ecx, 0xd12158
call fcn.0058d4d0
mov ecx, 0xd12158
call fcn.0058d4e0
jmp 0x504232
cmp word [0xa51230], si
je 0x504219
push esi
push esi
push 4
mov word [0xa51230], si
call fcn.005a07e0
add esp, 0xc
mov dword [0xa56090], esi
jmp 0x504232
mov ecx, 0xcf65c0
call fcn.0054ca50
test eax, eax
je 0x504232
push esi
mov ecx, 0xcf65c0
call fcn.0054cb40
mov dword [0xcea298], esi
mov dword [0xd04a84], esi
mov dword [0xce8ee4], esi
jmp 0x505e5a
mov dword [0xcea2f0], edi
mov dword [0xcfa60c], edi
mov dword [0xce9530], edi
mov dword [0xce8ee0], edi
mov dword [0xcea2bc], edi
call fcn.005572d0
call fcn.005154a0
call fcn.0056fa90
call fcn.0050cb80
call fcn.0050ac60
call fcn.005a07e0
mov ecx, 0xcf5120
call fcn.00545140
dec eax
mov edi, 1
cmp eax, 5
ja case.default.0x50429e
jmp dword [eax*4 + 0x505fe4]
mov edi, dword [0xcf513c]
call fcn.00512a50
xor edx, edx
test edi, edi
sete dl
mov esi, edx
test esi, esi
je 0x5042c2
call fcn.005a2270
cmp dword [0xcf513c], esi
je 0x504303
test esi, esi
mov dword [0xcf513c], esi
jne 0x504303
mov eax, dword [0xcf5190]
test eax, eax
je 0x5042f1
push esi
push esi
push 0xcf5194
push 0xcf5190
call fcn.005a6840
add esp, 0x10
mov eax, dword [0xd0af88]
test eax, eax
je 0x504303
push eax
call fcn.004e6ba0
add esp, 4
test edi, edi
jne 0x50431b
mov ecx, 0xcf5120
call fcn.00545da0
mov ecx, 0xcf5120
call fcn.00545a50
mov esi, dword [sym.imp.USER32.dll_PtInRect]
mov edi, 1
call fcn.005164e0
mov eax, dword [0xce8a64]
test eax, eax
je 0x50471f
mov ecx, dword [0xcf95d4]
mov edx, dword [0xce8ab0]
mov eax, dword [0xcf95d0]
add edx, 0x54
push ecx
push eax
push edx
call esi
test eax, eax
je 0x5044c2
mov eax, dword [0xce8a64]
test eax, eax
je 0x50439d
mov eax, dword [0xce8ab8]
mov dword [0xce8a64], 0
test eax, eax
je 0x50438b
push 0
push 0
push 0xce8abc
push 0xce8ab8
call fcn.005a6840
add esp, 0x10
mov eax, dword [0xd0af88]
test eax, eax
je 0x50439d
push eax
call fcn.004e6ba0
add esp, 4
push 1
call fcn.004fe110
add esp, 4
xor edi, edi
mov esi, 0xce9b04
cmp dword [esi], 0
je 0x5043c1
push edi
push 0xce9888
call fcn.00456220
add esp, 8
add esi, 4
inc edi
cmp esi, 0xce9b18
jl 0x5043ae
jmp 0x504634
mov eax, dword [0xcf513c]
xor ecx, ecx
cmp eax, ecx
mov dword [0xa233b4], ecx
mov dword [0xa233bc], ecx
je case.default.0x50429e
mov eax, dword [0xcf5190]
mov dword [0xcf513c], ecx
cmp eax, ecx
je 0x504412
push ecx
push ecx
push 0xcf5194
push 0xcf5190
call fcn.005a6840
add esp, 0x10
xor ecx, ecx
mov eax, dword [0xd0af88]
cmp eax, ecx
je case.default.0x50429e
push eax
call fcn.004e6ba0
add esp, 4
jmp case.default.0x50429e
mov eax, dword [0xcf52dc]
sub eax, 0
je 0x504449
dec eax
jne case.default.0x50429e
mov dword [0xa233bc], edi
jmp case.default.0x50429e
mov dword [0xa233b4], edi
jmp case.default.0x50429e
mov ecx, 0xcf5120
mov dword [0xcf52dc], 0
call fcn.00545a50
jmp case.default.0x50429e
mov ecx, 0xcf5120
mov dword [0xcf52dc], edi
call fcn.00545da0
jmp case.default.0x50429e
call fcn.005133b0
mov eax, dword [0xa4f274]
push 0
push 0
push 0
test eax, eax
mov dword [0xa233b8], edi
push 0
je 0x5044b0
push 0x648160
call fcn.004cbc90
add esp, 0x14
jmp case.default.0x50429e
push 0x648144
call fcn.004cbc90
add esp, 0x14
jmp case.default.0x50429e
mov ecx, dword [0xcf95d4]
mov eax, dword [0xcf95d0]
mov edx, dword [0xce8ab0]
push ecx
push eax
push edx
call esi
test eax, eax
je 0x5044e7
mov dword [0x667a60], edi
jmp 0x504634
mov ecx, dword [0xcf95d4]
mov edx, dword [0xce8ab0]
mov eax, dword [0xcf95d0]
add edx, 0x1c
push ecx
push eax
push edx
call esi
test eax, eax
je 0x504513
mov dword [0x667a60], 0
jmp 0x504634
mov ecx, dword [0xcf95d4]
mov edx, dword [0xce8ab0]
mov eax, dword [0xcf95d0]
add edx, 0x38
push ecx
push eax
push edx
call esi
test eax, eax
je 0x504634
mov eax, dword [0xce8ed8]
mov edx, dword [0xce8edc]
xor esi, esi
lea ecx, [eax + 1]
mov si, word [0xa4f268]
and ecx, 0xffff
mov eax, 0x51eb851f
shl ecx, 0x10
inc edx
and edx, 0xffff
or ecx, edx
mov edx, dword [0xa54618]
and edx, 0xffff
imul edx, esi
imul edx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, dword [0x6d68d0]
add edx, esi
cmp eax, edx
jge 0x5045b7
mov eax, dword [0xa4f274]
push 0
push 0
push 0
test eax, eax
push 0
je 0x5045a8
push 0x668218
call fcn.004cbc90
add esp, 0x14
jmp 0x5045c0
push 0x668204
call fcn.004cbc90
add esp, 0x14
jmp 0x5045c0
push ecx
call fcn.004e5860
add esp, 4
mov eax, dword [0xce8a64]
test eax, eax
je 0x504604
mov eax, dword [0xce8ab8]
mov dword [0xce8a64], 0
test eax, eax
je 0x5045f2
push 0
push 0
push 0xce8abc
push 0xce8ab8
call fcn.005a6840
add esp, 0x10
mov eax, dword [0xd0af88]
test eax, eax
je 0x504604
push eax
call fcn.004e6ba0
add esp, 4
push 1
call fcn.004fe110
add esp, 4
xor edi, edi
mov esi, 0xce9b04
cmp dword [esi], 0
je 0x504628
push edi
push 0xce9888
call fcn.00456220
add esp, 8
add esi, 4
inc edi
cmp esi, 0xce9b18
jl 0x504615
mov ecx, dword [0x647e94]
mov eax, dword [0x647e90]
push ecx
push eax
push 0xce8a54
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
je 0x50471f
xor esi, esi
mov ecx, dword [0xce8ab0]
mov eax, dword [0xcea298]
test eax, eax
lea edi, [ecx + esi]
mov dword [esp + 0x38], 0x1e3
mov dword [esp + 0x3c], 0x1b5
mov dword [esp + 0x40], 0x208
mov dword [esp + 0x44], 0x1c9
mov dword [esp + 0x18], 0x1a3
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x20], 0x1c8
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], 0x21f
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x30], 0x244
mov dword [esp + 0x34], ebx
je 0x50470c
mov edx, dword [0xcf95d4]
mov eax, dword [0xcf95d0]
push edx
lea ecx, [esp + 0x3c]
push eax
push ecx
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
jne 0x50470c
mov edx, dword [0xcf95d4]
mov eax, dword [0xcf95d0]
push edx
lea ecx, [esp + 0x1c]
push eax
push ecx
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
jne 0x50470c
mov edx, dword [0xcf95d4]
mov eax, dword [0xcf95d0]
push edx
lea ecx, [esp + 0x2c]
push eax
push ecx
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
je 0x504713
mov dword [edi + 0x18], 0
add esi, 0x1c
cmp esi, 0x70
jl 0x504656
mov ecx, 0xd11140
call fcn.0057ff50
dec eax
je 0x504787
dec eax
jne 0x50479f
mov eax, dword [0xcf9324]
xor edi, edi
cmp eax, edi
je 0x50476f
mov eax, dword [0xcf9378]
mov dword [0xcf9324], edi
cmp eax, edi
je 0x50475d
push edi
push edi
push 0xcf937c
push 0xcf9378
call fcn.005a6840
add esp, 0x10
mov eax, dword [0xd0af88]
cmp eax, edi
je 0x50476f
push eax
call fcn.004e6ba0
add esp, 4
push edi
mov ecx, 0xd11140
call fcn.0057f9c0
mov ebp, 1
mov dword [0xa4efdc], ebp
jmp 0x5047a6
call fcn.004eae90
test eax, eax
je 0x50479f
mov ebp, 1
xor edi, edi
mov dword [0xd111b8], ebp
jmp 0x5047a6
xor edi, edi
mov ebp, 1
mov ecx, 0xcfa698
call fcn.00558560
dec eax
je 0x50482a
dec eax
jne 0x504841
cmp dword [0xcf9324], edi
je 0x5047f7
mov eax, dword [0xcf9378]
mov dword [0xcf9324], edi
cmp eax, edi
je 0x5047e5
push edi
push edi
push 0xcf937c
push 0xcf9378
call fcn.005a6840
add esp, 0x10
mov eax, dword [0xd0af88]
cmp eax, edi
je 0x5047f7
push eax
call fcn.004e6ba0
add esp, 4
cmp dword [0xcfa714], edi
je 0x504816
push ebp
push edi
mov ecx, 0xcfa698
call fcn.00557b50
push ebp
call fcn.00554b90
add esp, 4
jmp 0x504841
push edi
push edi
mov ecx, 0xcfa698
call fcn.00557b50
mov dword [0xa4efdc], ebp
jmp 0x504841
call fcn.004eb130
test eax, eax
je 0x504841
cmp dword [0xcfa714], edi
jne 0x504841
mov dword [0xcfa710], ebp
mov ecx, 0xd11268
call fcn.00581d40
dec eax
je 0x50485e
dec eax
jne 0x50489f
push edi
mov ecx, 0xd11268
call fcn.00581a00
jmp 0x50489f
call fcn.0051bd80
test al, al
je 0x50486c
call fcn.0051be30
push edi
mov ecx, 0xd11268
call fcn.00581a00
mov ecx, 0xd11268
call fcn.00582540
mov ecx, 0xd11268
mov esi, eax
call fcn.005824f0
push esi
shr esi, 0x10
push esi
push eax
shr eax, 0x10
push eax
call fcn.004ec610
add esp, 0x10
cmp dword [0xce9424], edi
je 0x504a7f
mov edx, dword [0xce9470]
cmp dword [edx + 0x18], edi
je 0x5049cb
mov ecx, dword [0xcf95d4]
mov eax, dword [0xcf95d0]
push ecx
push eax
push edx
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
je 0x5049cb
mov eax, dword [0xce9484]
test eax, eax
je 0x5049cb
mov ecx, 0xce9480
call fcn.004296f0
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0xc4]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, dword [0xa4f274]
and ecx, 3
test eax, eax
rep movsb byte es:[edi], byte [esi]
jne 0x50492e
lea ecx, [esp + 0xc4]
push 0
push ecx
call fcn.00586e90
add esp, 8
mov ecx, 0xce9480
call fcn.004296f0
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0xc4]
repne scasb al, byte es:[edi]
not ecx
push ecx
push edx
push 4
push 0xd12278
push 0x50e
call fcn.004ac490
add esp, 0x14
mov ecx, 0xce9408
push 1
push 0
call fcn.00509400
mov eax, dword [0xce9424]
mov ecx, 0xce9480
test eax, eax
jne 0x5049b0
call fcn.004293a0
push 0
mov ecx, 0xce9480
call fcn.0042a1e0
push 1
call fcn.004fe110
mov eax, dword [0xcfa484]
add esp, 4
test eax, eax
je 0x5049cb
push 1
push 0
mov ecx, 0xcfa468
call fcn.00509400
jmp 0x5049cb
call fcn.004293a0
push 1
mov ecx, 0xce9480
call fcn.0042a1e0
push 0
call fcn.004fe110
add esp, 4
mov eax, dword [0xce946c]
test eax, eax
je 0x504a5f
mov ecx, dword [0xcf95d4]
mov eax, dword [0xcf95d0]
push ecx
push eax
push 0xce9454
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
je 0x504a5f
push 1
push 0
mov ecx, 0xce9408
call fcn.00509400
mov eax, dword [0xce9424]
mov ecx, 0xce9480
test eax, eax
jne 0x504a44
call fcn.004293a0
push 0
mov ecx, 0xce9480
call fcn.0042a1e0
push 1
call fcn.004fe110
mov eax, dword [0xcfa484]
add esp, 4
test eax, eax
je 0x504a5f
push 1
push 0
mov ecx, 0xcfa468
call fcn.00509400
jmp 0x504a5f
call fcn.004293a0
push 1
mov ecx, 0xce9480
call fcn.0042a1e0
push 0
call fcn.004fe110
add esp, 4
mov ecx, dword [0xce9470]
push 0
call fcn.00512980
push 0
mov ecx, 0xce9454
call fcn.00512980
xor edi, edi
mov ebp, 1
mov ecx, 0xcecc68
call fcn.005216a0
dec eax
je 0x504ad5
dec eax
jne 0x504b75
mov eax, dword [0xcecdb8]
sub eax, edi
je 0x504aa6
dec eax
je 0x504ab0
dec eax
jne 0x504b75
call fcn.004eb970
jmp 0x504b75
push edi
mov ecx, 0xcecc68
call fcn.00520fc0
mov ecx, 0xcecc68
call fcn.00521290
call fcn.00540ba0
mov dword [0xa4efdc], ebp
jmp 0x504b75
mov eax, dword [0xcecdb8]
dec eax
je 0x504b70
dec eax
jne 0x504b75
cmp dword [0xcf9324], edi
je 0x504b25
mov eax, dword [0xcf9378]
mov dword [0xcf9324], edi
cmp eax, edi
je 0x504b13
push edi
push edi
push 0xcf937c
push 0xcf9378
call fcn.005a6840
add esp, 0x10
mov eax, dword [0xd0af88]
cmp eax, edi
je 0x504b25
push eax
call fcn.004e6ba0
add esp, 4
push edi
mov ecx, 0xcecc68
call fcn.00520fc0
mov ecx, 0xcecc68
call fcn.00521050
mov eax, dword [0x6d6790]
push edi
push edi
push 0xceccdc
push 0xceccd8
mov dword [0xcecd48], eax
call fcn.005a6840
push ebp
mov dword [0xa4efdc], edi
call fcn.00554b90
add esp, 0x14
mov dword [0x66aa20], 0xffffffff
jmp 0x504b75
call fcn.004eb6e0
mov ecx, 0xd05860
call fcn.0057a740
dec eax
je 0x504bc0
dec eax
je 0x504b95
dec eax
jne 0x504bcd
push edi
mov ecx, 0xd05860
call fcn.00579f60
jmp 0x504bcd
mov eax, dword [0xa4f274]
push edi
push edi
cmp eax, edi
push edi
push edi
je 0x504bb1
push 0x6681f4
call fcn.004cbc90
add esp, 0x14
jmp 0x504bcd
push 0x6681e4
call fcn.004cbc90
add esp, 0x14
jmp 0x504bcd
cmp dword [0xd058e0], edi
jne 0x504bcd
call fcn.004ebcb0
mov ecx, 0xd057b0
call fcn.0057a340
dec eax
je 0x504c18
dec eax
je 0x504bed
dec eax
jne 0x504c25
push edi
mov ecx, 0xd057b0
call fcn.00579f60
jmp 0x504c25
mov eax, dword [0xa4f274]
push edi
push edi
cmp eax, edi
push edi
push edi
je 0x504c09
push 0x6681f4
call fcn.004cbc90
add esp, 0x14
jmp 0x504c25
push 0x6681e4
call fcn.004cbc90
add esp, 0x14
jmp 0x504c25
cmp dword [0xd05830], edi
jne 0x504c25
call fcn.004ebcd0
mov ecx, 0xd019b0
call fcn.0056a1c0
cmp eax, 3
jne 0x504c3f
push edi
mov ecx, 0xd019b0
call fcn.00569570
mov ecx, 0xcfeba8
call fcn.00563f40
cmp eax, 3
jne 0x504c59
push edi
mov ecx, 0xcfeba8
call fcn.005632a0
mov ecx, 0xcfeb20
call fcn.00566840
cmp eax, 3
jne 0x504cb1
cmp dword [0xcfeb3c], edi
je 0x504ca5
mov eax, dword [0xcfeb90]
mov dword [0xcfeb3c], edi
cmp eax, edi
je 0x504c93
push edi
push edi
push 0xcfeb94
push 0xcfeb90
call fcn.005a6840
add esp, 0x10
mov eax, dword [0xd0af88]
cmp eax, edi
je 0x504ca5
push eax
call fcn.004e6ba0
add esp, 4
mov dword [0xcfeba0], edi
mov dword [0xcfeba4], edi
mov eax, dword [0xd06a0c]
mov esi, 7
cmp eax, edi
je 0x5051fb
mov edx, dword [0xd06a58]
cmp dword [edx + 0x18], edi
je 0x504d82
mov ecx, dword [0xcf95d4]
mov eax, dword [0xcf95d0]
push ecx
push eax
push edx
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
je 0x504d82
call fcn.005a2270
cmp dword [0xced09c], ebp
je 0x504d01
mov dword [0xced09c], ebp
push 0
call fcn.004fe110
lea ecx, [esp + 0x50]
push 0xa
mov ebp, 1
push ecx
push 0
mov dword [0xce9878], esi
mov dword [0xce9854], ebp
mov dword [0xced06c], ebp
mov dword [0xced0f8], 0
call fcn.0061d6c5
lea edi, [esp + 0x5c]
or ecx, 0xffffffff
xor eax, eax
add esp, 0x10
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ebp
lea edx, [esp + 0x50]
push ecx
push edx
mov ecx, 0x69f710
call fcn.004294b0
mov al, byte [0x648701]
push eax
push 0xc
push 0x6486dc
push 0xc
push str.Arial
call fcn.005a7f50
add esp, 0x14
mov ecx, 0x69f710
push ebp
call fcn.0042a1e0
xor edi, edi
mov edx, dword [0xd06a58]
cmp dword [edx + 0x34], edi
je 0x504e47
mov ecx, dword [0xcf95d4]
mov eax, dword [0xcf95d0]
add edx, 0x1c
push ecx
push eax
push edx
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
je 0x504e47
mov dword [0xce9878], esi
call fcn.005a2270
cmp dword [0xced09c], ebp
je 0x504dc9
mov dword [0xced09c], ebp
push 0
call fcn.004fe110
lea ecx, [esp + 0x50]
push 0xa
push ecx
push 0
mov dword [0xce9854], 2
mov dword [0xced06c], 1
mov dword [0xced0f8], 0
call fcn.0061d6c5
lea edi, [esp + 0x5c]
or ecx, 0xffffffff
xor eax, eax
add esp, 0x10
repne scasb al, byte es:[edi]
not ecx
dec ecx
push 1
lea edx, [esp + 0x50]
push ecx
push edx
mov ecx, 0x69f710
call fcn.004294b0
mov al, byte [0x648701]
push eax
push 0xc
push 0x6486dc
push 0xc
push str.Arial
call fcn.005a7f50
add esp, 0x14
mov ecx, 0x69f710
push 1
call fcn.0042a1e0
mov eax, dword [0xd06a14]
xor ebp, ebp
test eax, eax
jle 0x504f2b
xor esi, esi
mov ecx, dword [0xd06a58]
mov eax, 0x1b3
mov dword [esp + 0x1c], eax
mov dword [esp + 0x2c], eax
mov eax, dword [0xcea298]
lea edi, [ecx + esi]
test eax, eax
mov dword [esp + 0x38], 0x1e3
mov dword [esp + 0x3c], 0x1b5
mov dword [esp + 0x40], 0x208
mov dword [esp + 0x44], 0x1c9
mov dword [esp + 0x18], 0x1a3
mov dword [esp + 0x20], 0x1c8
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], 0x21f
mov dword [esp + 0x30], 0x244
mov dword [esp + 0x34], ebx
je 0x504f13
mov edx, dword [0xcf95d4]
mov eax, dword [0xcf95d0]
push edx
lea ecx, [esp + 0x3c]
push eax
push ecx
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
jne 0x504f13
mov edx, dword [0xcf95d4]
mov eax, dword [0xcf95d0]
push edx
lea ecx, [esp + 0x1c]
push eax
push ecx
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
jne 0x504f13
mov edx, dword [0xcf95d4]
mov eax, dword [0xcf95d0]
push edx
lea ecx, [esp + 0x2c]
push eax
push ecx
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
je 0x504f1a
mov dword [edi + 0x18], 0
mov eax, dword [0xd06a14]
inc ebp
add esi, 0x1c
cmp ebp, eax
jl 0x504e58
mov edx, dword [0xd06a5c]
xor edi, edi
mov dword [edx + 0x10], edi
mov eax, dword [0xd06a54]
cmp eax, edi
je 0x505147
mov ecx, dword [0xcf95d4]
mov eax, dword [0xcf95d0]
mov esi, dword [sym.imp.USER32.dll_PtInRect]
push ecx
push eax
push 0xd06a3c
call esi
test eax, eax
je 0x50514d
mov eax, 0x1b3
mov dword [esp + 0x38], 0x1e3
mov dword [esp + 0x1c], eax
mov dword [esp + 0x2c], eax
mov eax, dword [0xcea298]
mov dword [esp + 0x3c], 0x1b5
cmp eax, edi
mov dword [esp + 0x40], 0x208
mov dword [esp + 0x44], 0x1c9
mov dword [esp + 0x18], 0x1a3
mov dword [esp + 0x20], 0x1c8
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], 0x21f
mov dword [esp + 0x30], 0x244
mov dword [esp + 0x34], ebx
je 0x50500b
mov eax, dword [0xcf95d4]
mov ecx, dword [0xcf95d0]
push eax
lea edx, [esp + 0x3c]
push ecx
push edx
call esi
test eax, eax
jne 0x50500b
mov eax, dword [0xcf95d4]
mov ecx, dword [0xcf95d0]
push eax
lea edx, [esp + 0x1c]
push ecx
push edx
call esi
test eax, eax
jne 0x50500b
mov eax, dword [0xcf95d4]
mov ecx, dword [0xcf95d0]
push eax
lea edx, [esp + 0x2c]
push ecx
push edx
call esi
test eax, eax
je 0x505011
mov dword [0xd06a54], edi
cmp dword [0xd06a0c], edi
je 0x50504e
mov eax, dword [0xd06a60]
mov dword [0xd06a0c], edi
cmp eax, edi
je 0x50503c
push edi
push edi
push 0xd06a64
push 0xd06a60
call fcn.005a6840
add esp, 0x10
mov eax, dword [0xd0af88]
cmp eax, edi
je 0x50504e
push eax
call fcn.004e6ba0
add esp, 4
cmp dword [0xcf9324], edi
je 0x50508b
mov eax, dword [0xcf9378]
mov dword [0xcf9324], edi
cmp eax, edi
je 0x505079
push edi
push edi
push 0xcf937c
push 0xcf9378
call fcn.005a6840
add esp, 0x10
mov eax, dword [0xd0af88]
cmp eax, edi
je 0x50508b
push eax
call fcn.004e6ba0
add esp, 4
mov eax, dword [0xced09c]
mov dword [0xd0af88], edi
cmp eax, edi
je 0x5050e1
mov eax, dword [0xced0f0]
mov dword [0xced09c], edi
cmp eax, edi
je 0x5050e1
push edi
push edi
push 0xced0f4
push 0xced0f0
call fcn.005a6840
mov eax, dword [0xd0af88]
add esp, 0x10
cmp eax, edi
je 0x5050e1
push eax
call fcn.004e6ba0
mov eax, dword [0xd0af88]
add esp, 4
cmp eax, edi
je 0x5050e1
push eax
call fcn.004e6ba0
add esp, 4
push 1
call fcn.004fe110
push 1
call fcn.00554b90
push 0x6d67cc
call fcn.00427800
mov eax, dword [0xcf8c64]
add esp, 0xc
cmp eax, edi
je 0x505e5a
mov eax, dword [0xcf8cb8]
mov dword [0xcf8c64], edi
cmp eax, edi
je 0x50512c
push edi
push edi
push 0xcf8cbc
push 0xcf8cb8
call fcn.005a6840
add esp, 0x10
mov eax, dword [0xd0af88]
cmp eax, edi
je 0x505e5a
push eax
call fcn.004e6ba0
add esp, 4
jmp 0x505e5a
mov esi, dword [sym.imp.USER32.dll_PtInRect]
mov eax, 0x1b3
mov dword [esp + 0x38], 0x1e3
mov dword [esp + 0x1c], eax
mov dword [esp + 0x2c], eax
mov eax, dword [0xcea298]
mov dword [esp + 0x3c], 0x1b5
cmp eax, edi
mov dword [esp + 0x40], 0x208
mov dword [esp + 0x44], 0x1c9
mov dword [esp + 0x18], 0x1a3
mov dword [esp + 0x20], 0x1c8
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], 0x21f
mov dword [esp + 0x30], 0x244
mov dword [esp + 0x34], ebx
je 0x5051f5
mov eax, dword [0xcf95d4]
mov ecx, dword [0xcf95d0]
push eax
lea edx, [esp + 0x3c]
push ecx
push edx
call esi
test eax, eax
jne 0x5051f5
mov eax, dword [0xcf95d4]
mov ecx, dword [0xcf95d0]
push eax
lea edx, [esp + 0x1c]
push ecx
push edx
call esi
test eax, eax
jne 0x5051f5
mov eax, dword [0xcf95d4]
mov ecx, dword [0xcf95d0]
push eax
lea edx, [esp + 0x2c]
push ecx
push edx
call esi
test eax, eax
je 0x5051fb
xor edi, edi
mov dword [0xd06a54], edi
mov al, byte [0xce94f4]
test al, 1
jne 0x505215
or al, 1
mov byte [0xce94f4], al
call fcn.005a44e0
mov dword [0xce8e34], eax
mov eax, dword [0xcf95d4]
mov ecx, dword [0xcf95d0]
mov edi, dword [sym.imp.USER32.dll_PtInRect]
push eax
push ecx
push 0x66c5c8
call edi
test eax, eax
je 0x50526c
mov eax, dword [0xa4f1e0]
xor ebp, ebp
cmp eax, ebp
je 0x50526e
mov eax, dword [0x6d67ac]
cmp eax, 0x1068
je 0x50526e
cmp eax, 0xbc5
je 0x50526e
cmp eax, 0xbc9
je 0x50526e
mov eax, dword [0x667c30]
xor edx, edx
cmp eax, ebp
sete dl
mov dword [0x667c30], edx
jmp 0x50526e
xor ebp, ebp
mov eax, dword [0xcf95d4]
mov ecx, dword [0xcf95d0]
push eax
push ecx
push 0x667c38
call edi
test eax, eax
je 0x5052ab
call fcn.00554850
test eax, eax
je 0x5052ab
cmp dword [0xcf84f8], ebp
jne 0x5052ab
mov ecx, 0x68d9e0
mov dword [0xcf84f8], 1
call fcn.00403da0
cmp dword [0xcf95c0], ebp
je 0x50545a
mov edx, dword [0xcf95d4]
mov eax, dword [0xcf95d0]
push edx
push eax
push 0xce8938
call edi
test eax, eax
je 0x50543b
mov ecx, dword [0xcea2d4]
mov eax, dword [0x6d6790]
cmp ecx, eax
jb 0x50538a
cmp dword [0x6d69f8], 0xc
je 0x50538a
mov eax, dword [0xa4f274]
mov dword [0xcf9428], ebp
cmp eax, ebp
lea edx, [esp + 0xc4]
mov edi, 0x6681c4
jne 0x505313
mov edi, 0x6681a4
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push ebp
mov eax, ecx
mov esi, edi
mov edi, edx
push ebp
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
push ebp
rep movsb byte es:[edi], byte [esi]
lea edi, [esp + 0xd0]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
lea ecx, [esp + 0xd4]
push ecx
call fcn.004cbc90
mov edx, dword [0xcfa63c]
push ebp
push 0x15
push 5
mov eax, dword [edx + 0x94]
push 0x15
push eax
push 0xcf9d88
push 0x14
push ebp
push ebp
push ebp
push ebp
call fcn.00522440
mov edi, dword [sym.imp.USER32.dll_PtInRect]
add esp, 0x40
mov dword [0xcf95c0], ebp
jmp 0x50545a
mov ecx, 0x68d9e0
mov dword [0xcf9428], 1
call fcn.00403d50
mov esi, eax
call fcn.0048a3d0
push esi
mov ecx, 0x68d9e0
call fcn.00403d60
cmp dword [0x6d69f8], 0xc
je 0x5053e3
push 1
push 7
mov ecx, 0x6d67a8
call fcn.00477840
neg ax
sbb eax, eax
inc eax
mov dword [0xa23564], eax
call fcn.0041cfc0
mov ecx, 0xa24690
call fcn.0047a610
jmp 0x505454
cmp dword [0xcf85ac], ebp
je 0x505420
mov eax, dword [0xcf8600]
mov dword [0xcf85ac], ebp
cmp eax, ebp
je 0x50540e
push ebp
push ebp
push 0xcf8604
push 0xcf8600
call fcn.005a6840
add esp, 0x10
mov eax, dword [0xd0af88]
cmp eax, ebp
je 0x505420
push eax
call fcn.004e6ba0
add esp, 4
mov dword [0xa23564], 1
call fcn.0041cfc0
mov ecx, 0xa24690
call fcn.0047a610
jmp 0x505454
mov ecx, dword [0xcf95d4]
mov edx, dword [0xcf95d0]
push ecx
push edx
push 0xce9518
call edi
test eax, eax
je 0x50545a
mov dword [0xcf95c0], ebp
cmp dword [0xcf85ac], ebp
je 0x5056d8
mov edx, dword [0xcf85f8]
cmp dword [edx + 0x18], ebp
je 0x5054b7
mov ecx, dword [0xcf95d4]
mov eax, dword [0xcf95d0]
push ecx
push eax
push edx
call edi
test eax, eax
je 0x5054b7
cmp dword [0xcea2c0], ebp
jne 0x5054b7
cmp dword [0xcf95c0], ebp
jne 0x5054b7
push 1
mov dword [0xcea2c0], ebp
call fcn.004e60a0
push 1
mov dword [0xcea308], ebp
call fcn.004fe110
add esp, 8
jmp 0x505561
mov edx, dword [0xcf85f8]
cmp dword [edx + 0x34], ebp
je 0x505561
mov ecx, dword [0xcf95d4]
mov eax, dword [0xcf95d0]
add edx, 0x1c
push ecx
push eax
push edx
call edi
test eax, eax
je 0x505561
cmp dword [0xcf95c0], ebp
jne 0x505561
cmp dword [0xcf85ac], ebp
je 0x505526
mov eax, dword [0xcf8600]
mov dword [0xcf85ac], ebp
cmp eax, ebp
je 0x505514
push ebp
push ebp
push 0xcf8604
push 0xcf8600
call fcn.005a6840
add esp, 0x10
mov eax, dword [0xd0af88]
cmp eax, ebp
je 0x505526
push eax
call fcn.004e6ba0
add esp, 4
push 1
mov dword [0xcea2c0], 1
mov dword [0xcea308], ebp
call fcn.004fe110
mov eax, dword [0xa4f274]
add esp, 4
cmp eax, ebp
push ebp
push ebp
push ebp
push ebp
je 0x505554
push 0x668158
jmp 0x505559
push 0x66810c
call fcn.004cbc90
add esp, 0x14
mov eax, dword [0xcea298]
mov esi, dword [0xcf85f8]
mov ebp, 0x1b3
mov edi, 0x21f
test eax, eax
mov dword [esp + 0x38], 0x1e3
mov dword [esp + 0x3c], 0x1b5
mov dword [esp + 0x40], 0x208
mov dword [esp + 0x44], 0x1c9
mov dword [esp + 0x18], 0x1a3
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x20], 0x1c8
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], edi
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x30], 0x244
mov dword [esp + 0x34], ebx
je 0x50561a
mov eax, dword [0xcf95d4]
mov ecx, dword [0xcf95d0]
push eax
lea edx, [esp + 0x3c]
push ecx
push edx
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
jne 0x50561a
mov eax, dword [0xcf95d4]
mov ecx, dword [0xcf95d0]
push eax
lea edx, [esp + 0x1c]
push ecx
push edx
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
jne 0x50561a
mov eax, dword [0xcf95d4]
mov ecx, dword [0xcf95d0]
push eax
lea edx, [esp + 0x2c]
push ecx
push edx
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
je 0x505621
mov dword [esi + 0x18], 0
mov eax, dword [0xcf85f8]
mov dword [esp + 0x38], 0x1e3
mov dword [esp + 0x3c], 0x1b5
mov dword [esp + 0x40], 0x208
lea esi, [eax + 0x1c]
mov eax, dword [0xcea298]
test eax, eax
mov dword [esp + 0x44], 0x1c9
mov dword [esp + 0x18], 0x1a3
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x20], 0x1c8
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], edi
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x30], 0x244
mov dword [esp + 0x34], ebx
je 0x5056cf
mov ecx, dword [0xcf95d4]
mov edx, dword [0xcf95d0]
mov edi, dword [sym.imp.USER32.dll_PtInRect]
push ecx
lea eax, [esp + 0x3c]
push edx
push eax
call edi
test eax, eax
jne 0x5056cf
mov ecx, dword [0xcf95d4]
mov edx, dword [0xcf95d0]
push ecx
lea eax, [esp + 0x1c]
push edx
push eax
call edi
test eax, eax
jne 0x5056cf
mov ecx, dword [0xcf95d4]
mov edx, dword [0xcf95d0]
push ecx
lea eax, [esp + 0x2c]
push edx
push eax
call edi
test eax, eax
je 0x5056dd
mov dword [esi + 0x18], 0
jmp 0x5056dd
mov ebp, 0x1b3
mov eax, dword [0xced09c]
xor edi, edi
cmp eax, edi
je 0x505d4a
mov esi, dword [0xced0e8]
mov dword [0xced088], edi
cmp dword [esi + 0x18], edi
je 0x5057d7
mov eax, dword [0xcea298]
mov dword [esp + 0x38], 0x1e3
cmp eax, edi
mov dword [esp + 0x3c], 0x1b5
mov dword [esp + 0x40], 0x208
mov dword [esp + 0x44], 0x1c9
mov dword [esp + 0x18], 0x1a3
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x20], 0x1c8
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], 0x21f
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x30], 0x244
mov dword [esp + 0x34], ebx
je 0x5057b1
mov ecx, dword [0xcf95d4]
mov edx, dword [0xcf95d0]
push ecx
lea eax, [esp + 0x3c]
push edx
push eax
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
jne 0x5057b1
mov ecx, dword [0xcf95d4]
mov edx, dword [0xcf95d0]
push ecx
lea eax, [esp + 0x1c]
push edx
push eax
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
jne 0x5057b1
mov ecx, dword [0xcf95d4]
mov edx, dword [0xcf95d0]
push ecx
lea eax, [esp + 0x2c]
push edx
push eax
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
je 0x5057b4
mov dword [esi + 0x18], edi
mov ecx, dword [0xcf95d4]
mov eax, dword [0xcf95d0]
mov edx, dword [0xced0e8]
push ecx
push eax
push edx
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
je 0x5057d7
call fcn.005137b0
mov esi, dword [0xced0e8]
cmp dword [esi + 0x50], edi
je 0x505905
mov eax, dword [0xcea298]
add esi, 0x38
cmp eax, edi
mov dword [esp + 0x38], 0x1e3
mov dword [esp + 0x3c], 0x1b5
mov dword [esp + 0x40], 0x208
mov dword [esp + 0x44], 0x1c9
mov dword [esp + 0x18], 0x1a3
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x20], 0x1c8
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], 0x21f
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x30], 0x244
mov dword [esp + 0x34], ebx
je 0x505899
mov ecx, dword [0xcf95d4]
mov edx, dword [0xcf95d0]
push ecx
lea eax, [esp + 0x3c]
push edx
push eax
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
jne 0x505899
mov ecx, dword [0xcf95d4]
mov edx, dword [0xcf95d0]
push ecx
lea eax, [esp + 0x1c]
push edx
push eax
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
jne 0x505899
mov ecx, dword [0xcf95d4]
mov edx, dword [0xcf95d0]
push ecx
lea eax, [esp + 0x2c]
push edx
push eax
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
je 0x50589c
mov dword [esi + 0x18], edi
mov eax, dword [0xced0f8]
mov ecx, dword [0xced0fc]
cmp eax, ecx
mov dword [0xced06c], edi
jge 0x505905
lea ecx, [esp + 0x4c]
inc eax
push 0xa
push ecx
push eax
mov dword [0xced0f8], eax
call fcn.0061d6c5
lea edi, [esp + 0x58]
or ecx, 0xffffffff
xor eax, eax
add esp, 0xc
repne scasb al, byte es:[edi]
not ecx
dec ecx
push 1
lea edx, [esp + 0x50]
push ecx
push edx
mov ecx, 0x69f710
call fcn.004295e0
mov al, byte [0x648701]
push eax
push 0xc
push 0x6486dc
push 0xc
push str.Arial
call fcn.005a7f50
add esp, 0x14
xor edi, edi
mov esi, dword [0xced0e8]
cmp dword [esi + 0x34], edi
je 0x505a42
mov eax, dword [0xcea298]
add esi, 0x1c
cmp eax, edi
mov dword [esp + 0x38], 0x1e3
mov dword [esp + 0x3c], 0x1b5
mov dword [esp + 0x40], 0x208
mov dword [esp + 0x44], 0x1c9
mov dword [esp + 0x18], 0x1a3
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x20], 0x1c8
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], 0x21f
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x30], 0x244
mov dword [esp + 0x34], ebx
je 0x5059c7
mov ecx, dword [0xcf95d4]
mov edx, dword [0xcf95d0]
push ecx
lea eax, [esp + 0x3c]
push edx
push eax
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
jne 0x5059c7
mov ecx, dword [0xcf95d4]
mov edx, dword [0xcf95d0]
push ecx
lea eax, [esp + 0x1c]
push edx
push eax
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
jne 0x5059c7
mov ecx, dword [0xcf95d4]
mov edx, dword [0xcf95d0]
push ecx
lea eax, [esp + 0x2c]
push edx
push eax
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
je 0x5059ca
mov dword [esi + 0x18], edi
mov ecx, 0xd120b0
mov dword [0xced06c], edi
call fcn.0058cb70
test eax, eax
mov eax, dword [0xced0f8]
je 0x5059ea
cmp eax, 1
jle 0x505a42
jmp 0x5059ee
cmp eax, edi
jle 0x505a42
lea ecx, [esp + 0x4c]
dec eax
push 0xa
push ecx
push eax
mov dword [0xced0f8], eax
call fcn.0061d6c5
lea edi, [esp + 0x58]
or ecx, 0xffffffff
xor eax, eax
add esp, 0xc
repne scasb al, byte es:[edi]
not ecx
dec ecx
push 1
lea edx, [esp + 0x50]
push ecx
push edx
mov ecx, 0x69f710
call fcn.004295e0
mov al, byte [0x648701]
push eax
push 0xc
push 0x6486dc
push 0xc
push str.Arial
call fcn.005a7f50
add esp, 0x14
xor edi, edi
mov esi, dword [0xced0e8]
cmp dword [esi + 0x6c], edi
je 0x505c2c
mov eax, dword [0xcea298]
add esi, 0x54
cmp eax, edi
mov dword [esp + 0x38], 0x1e3
mov dword [esp + 0x3c], 0x1b5
mov dword [esp + 0x40], 0x208
mov dword [esp + 0x44], 0x1c9
mov dword [esp + 0x18], 0x1a3
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x20], 0x1c8
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], 0x21f
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x30], 0x244
mov dword [esp + 0x34], ebx
je 0x505b04
mov ecx, dword [0xcf95d4]
mov edx, dword [0xcf95d0]
push ecx
lea eax, [esp + 0x3c]
push edx
push eax
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
jne 0x505b04
mov ecx, dword [0xcf95d4]
mov edx, dword [0xcf95d0]
push ecx
lea eax, [esp + 0x1c]
push edx
push eax
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
jne 0x505b04
mov ecx, dword [0xcf95d4]
mov edx, dword [0xcf95d0]
push ecx
lea eax, [esp + 0x2c]
push edx
push eax
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
je 0x505b07
mov dword [esi + 0x18], edi
mov ecx, dword [0xcf95d4]
mov edx, dword [0xced0e8]
mov eax, dword [0xcf95d0]
add edx, 0x54
push ecx
push eax
push edx
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
je 0x505c2c
mov eax, dword [0xce9878]
add eax, 0xfffffff8
cmp eax, 7
ja case.0x505b39.11
jmp dword [eax*4 + 0x505ffc]
mov ecx, dword [0xd0af88]
push ecx
call fcn.004e6ba0
add esp, 4
mov dword [0xce9868], edi
mov dword [0xce986c], edi
jmp case.0x505b39.11
mov edx, dword [0xd0af88]
push edx
call fcn.004e6ba0
add esp, 4
mov dword [0xce9868], edi
mov dword [0xce986c], edi
jmp case.0x505b39.11
mov ecx, 0xcecc68
call fcn.005211c0
mov dword [0xcecdbc], edi
jmp case.0x505b39.11
cmp dword [0xcf474c], edi
je case.0x505b39.11
mov dword [0xcf474c], edi
mov dword [0xcf47c0], edi
cmp dword [0xced09c], edi
je 0x505bcb
mov eax, dword [0xced0f0]
mov dword [0xced09c], edi
cmp eax, edi
je 0x505bcb
push edi
push edi
push 0xced0f4
push 0xced0f0
call fcn.005a6840
add esp, 0x10
push 1
call fcn.004fe110
add esp, 4
mov ecx, 0x69f710
mov dword [0xced06c], edi
mov dword [0xce9878], edi
call fcn.004293a0
mov eax, dword [0xd06a0c]
mov dword [0xced100], edi
cmp eax, edi
mov dword [0xced0f8], edi
mov dword [0xced108], edi
je 0x505c12
mov dword [0xce9854], edi
mov dword [0xce8f18], edi
mov ecx, 0xd120b0
call fcn.0058cb70
test eax, eax
je 0x505c2c
push edi
push edi
mov ecx, 0xd120b0
call fcn.0058c600
mov esi, dword [0xced0e8]
cmp dword [esi + 0x88], edi
je 0x505d4a
mov eax, dword [0xcea298]
add esi, 0x70
cmp eax, edi
mov dword [esp + 0x38], 0x1e3
mov dword [esp + 0x3c], 0x1b5
mov dword [esp + 0x40], 0x208
mov dword [esp + 0x44], 0x1c9
mov dword [esp + 0x18], 0x1a3
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x20], 0x1c8
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], 0x21f
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x30], 0x244
mov dword [esp + 0x34], ebx
je 0x505cee
mov eax, dword [0xcf95d4]
mov ecx, dword [0xcf95d0]
push eax
lea edx, [esp + 0x3c]
push ecx
push edx
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
jne 0x505cee
mov eax, dword [0xcf95d4]
mov ecx, dword [0xcf95d0]
push eax
lea edx, [esp + 0x1c]
push ecx
push edx
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
jne 0x505cee
mov eax, dword [0xcf95d4]
mov ecx, dword [0xcf95d0]
push eax
lea edx, [esp + 0x2c]
push ecx
push edx
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
je 0x505cf1
mov dword [esi + 0x18], edi
mov ecx, dword [0xced0f8]
lea eax, [esp + 0x4c]
push 0xa
push eax
push ecx
mov dword [0xced06c], 1
call fcn.0061d6c5
add esp, 0xc
lea edx, [esp + 0x4c]
mov ecx, 0x69f710
push edi
push edi
push edx
call fcn.004294b0
mov al, byte [0x648701]
push eax
push 0xc
push 0x6486dc
push 0xc
push str.Arial
call fcn.005a7f50
add esp, 0x14
mov ecx, 0x69f710
push 1
call fcn.0042a1e0
call fcn.00500070
cmp dword [0xce88ac], edi
je 0x505e48
cmp dword [0xced174], edi
jne 0x505e48
mov ecx, dword [0xcf95d4]
mov eax, dword [0xcf95d0]
mov edx, dword [0xce88f8]
push ecx
push eax
push edx
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
je 0x505e48
mov ecx, dword [0xd0af88]
push ecx
call fcn.004e6670
mov eax, dword [0xcea298]
mov esi, dword [0xce88f8]
add esp, 4
cmp eax, edi
mov dword [esp + 0x38], 0x1e3
mov dword [esp + 0x3c], 0x1b5
mov dword [esp + 0x40], 0x208
mov dword [esp + 0x44], 0x1c9
mov dword [esp + 0x18], 0x1a3
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x20], 0x1c8
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], 0x21f
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x30], 0x244
mov dword [esp + 0x34], ebx
je 0x505e45
mov edx, dword [0xcf95d4]
mov eax, dword [0xcf95d0]
mov ebx, dword [sym.imp.USER32.dll_PtInRect]
push edx
lea ecx, [esp + 0x3c]
push eax
push ecx
call ebx
test eax, eax
jne 0x505e45
mov edx, dword [0xcf95d4]
mov eax, dword [0xcf95d0]
push edx
lea ecx, [esp + 0x1c]
push eax
push ecx
call ebx
test eax, eax
jne 0x505e45
mov edx, dword [0xcf95d4]
mov eax, dword [0xcf95d0]
push edx
lea ecx, [esp + 0x2c]
push eax
push ecx
call ebx
test eax, eax
je 0x505e48
mov dword [esi + 0x18], edi
cmp dword [0xcf84f8], edi
jne 0x505e5a
mov dword [0xcf84f8], 1
mov ecx, dword [esp + 0x16c]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x168
ret