Function at 0x493c08
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push esi
push edi
add esp, 0xfffff764
mov dword [esp + 4], edx
mov dword [esp], eax
call sub.kernel32.dll_GetProcessHeap
mov dword [esp + 0xc], eax
mov eax, dword [esp]
xor edx, edx
mov dl, byte [eax]
cmp edx, 0x2b
ja case.default.0x493c30
jmp dword [edx*4 + 0x493c37]
mov word [esp + 0x10], 0
mov ecx, dword [esp + 4]
mov eax, 4
mov dword [ecx + 0x28], eax
mov word [esp + 8], ax
movsx edx, word [esp + 8]
push edx
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
mov eax, dword [esp]
add eax, 0x11
call fcn.00493b74
mov ecx, dword [esp + 4]
mov dword [ecx + 0x18], eax
push 0x10
mov eax, dword [esp + 4]
inc eax
push eax
mov edx, dword [esp + 0xc]
add edx, 0x44
push edx
call fcn.00484d40
add esp, 0xc
push 0x14
mov ecx, dword [esp + 4]
add ecx, 0x11
push ecx
mov eax, dword [esp + 0xc]
add eax, 0x30
push eax
call fcn.00484d40
add esp, 0xc
push 0xc8
mov edx, dword [esp + 4]
add edx, 0x25
push edx
mov ecx, dword [esp + 0xc]
add ecx, 0x54
push ecx
call fcn.00484d40
add esp, 0xc
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x493d8c
mov word [esp + 0x12], 0
jmp 0x493d93
mov word [esp + 0x12], 0xfbb5
push 2
lea edx, [esp + 0x14]
push edx
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x24]
push eax
call fcn.00484d40
add esp, 0xc
push 2
lea edx, [esp + 0x16]
push edx
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x24]
add eax, 2
push eax
call fcn.00484d40
add esp, 0xc
push 0
push 0
push 0x7e8
mov edx, dword [0x4d3450]
push edx
call sub.user32.dll_SendMessageA
jmp 0x4961d1
mov word [esp + 0x14], 0
mov ecx, dword [esp + 4]
mov eax, 4
mov dword [ecx + 0x28], eax
mov word [esp + 8], ax
movsx edx, word [esp + 8]
push edx
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
push 2
lea eax, [esp + 0x18]
push eax
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x24]
push eax
call fcn.00484d40
add esp, 0xc
push 2
push 0x4d32d4
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
add ecx, 2
push ecx
call fcn.00484d40
add esp, 0xc
jmp 0x4961d1
mov word [esp + 0x16], 0
call fcn.00493994
mov word [esp + 0x18], ax
mov eax, dword [esp + 4]
mov edx, 4
mov dword [eax + 0x28], edx
mov word [esp + 8], dx
movsx eax, word [esp + 8]
push eax
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
push 2
lea eax, [esp + 0x1a]
push eax
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x24]
push eax
call fcn.00484d40
add esp, 0xc
push 2
lea edx, [esp + 0x1c]
push edx
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x24]
add eax, 2
push eax
call fcn.00484d40
add esp, 0xc
jmp 0x4961d1
mov edx, dword [esp + 4]
mov ecx, 8
mov dword [edx + 0x28], ecx
mov word [esp + 8], cx
movsx eax, word [esp + 8]
push eax
push 0
mov edx, dword [esp + 0x14]
push edx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x493f03
mov ecx, 0x4d3348
lea edx, [esp + 0x20]
lea eax, [esp + 0x1c]
call fcn.0048ce94
mov word [esp + 0x24], ax
jmp 0x493f0a
mov word [esp + 0x24], 0xfbb5
push 2
lea ecx, [esp + 0x28]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
push edx
call fcn.00484d40
add esp, 0xc
push 4
lea ecx, [esp + 0x20]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
add edx, 2
push edx
call fcn.00484d40
add esp, 0xc
push 2
lea ecx, [esp + 0x24]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
add edx, 6
push edx
call fcn.00484d40
add esp, 0xc
jmp 0x4961d1
mov word [esp + 0x26], 0
call fcn.004935e0
mov word [esp + 0x28], ax
mov ecx, dword [esp + 4]
mov eax, 4
mov dword [ecx + 0x28], eax
mov word [esp + 8], ax
movsx edx, word [esp + 8]
push edx
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
push 2
lea eax, [esp + 0x2a]
push eax
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x24]
push eax
call fcn.00484d40
add esp, 0xc
push 2
lea edx, [esp + 0x2c]
push edx
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x24]
add eax, 2
push eax
call fcn.00484d40
add esp, 0xc
jmp 0x4961d1
mov esi, 0x4cff4b
lea edi, [esp + 0x10c]
mov ecx, 0x41
rep movsd dword es:[edi], dword [esi]
mov esi, 0x4d0050
lea edi, [esp + 0x210]
mov ecx, 0x41
rep movsd dword es:[edi], dword [esi]
mov eax, dword [esp + 4]
mov edx, 0x106
mov dword [eax + 0x28], edx
mov word [esp + 8], dx
movsx eax, word [esp + 8]
push eax
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
push 2
mov eax, dword [esp + 4]
inc eax
push eax
lea ecx, [esp + 0x34]
push ecx
call fcn.00484d40
add esp, 0xc
push 0x104
mov eax, dword [esp + 4]
add eax, 3
push eax
lea edx, [esp + 0x114]
push edx
call fcn.00484d40
add esp, 0xc
push 2
mov ecx, dword [esp + 4]
add ecx, 0x107
push ecx
lea eax, [esp + 0x36]
push eax
call fcn.00484d40
add esp, 0xc
mov edx, dword [esp + 4]
cmp dword [edx + 0x2c], 0
je 0x494096
lea ecx, [esp + 0x210]
push ecx
lea edx, [esp + 0x110]
movsx ecx, word [esp + 0x32]
movsx eax, word [esp + 0x30]
call fcn.0048f454
mov word [esp + 0x2a], ax
jmp 0x49409d
mov word [esp + 0x2a], 0xfbb5
push 2
lea eax, [esp + 0x2e]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
push ecx
call fcn.00484d40
add esp, 0xc
push 0x104
lea eax, [esp + 0x214]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
add ecx, 2
push ecx
call fcn.00484d40
add esp, 0xc
jmp 0x4961d1
mov esi, 0x4d0155
lea edi, [esp + 0x314]
mov ecx, 0x41
rep movsd dword es:[edi], dword [esi]
mov eax, dword [esp + 4]
mov edx, 0x106
mov dword [eax + 0x28], edx
mov word [esp + 8], dx
movsx eax, word [esp + 8]
push eax
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
push 2
mov eax, dword [esp + 4]
add eax, 0x105
push eax
lea ecx, [esp + 0x3a]
push ecx
call fcn.00484d40
add esp, 0xc
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x494155
movsx edx, word [esp + 0x32]
mov eax, dword [esp]
lea ecx, [esp + 0x314]
inc eax
call fcn.0048bbe4
mov word [esp + 0x30], ax
jmp 0x49415c
mov word [esp + 0x30], 0xfbb5
push 2
lea edx, [esp + 0x34]
push edx
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x24]
push eax
call fcn.00484d40
add esp, 0xc
push 0x104
lea edx, [esp + 0x318]
push edx
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x24]
add eax, 2
push eax
call fcn.00484d40
add esp, 0xc
jmp 0x4961d1
mov esi, 0x4d025a
lea edi, [esp + 0x418]
mov ecx, 0x41
rep movsd dword es:[edi], dword [esi]
mov eax, dword [esp + 4]
mov edx, 0x106
mov dword [eax + 0x28], edx
mov word [esp + 8], dx
movsx eax, word [esp + 8]
push eax
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
push 2
mov eax, dword [esp + 4]
add eax, 0x105
push eax
lea ecx, [esp + 0x3e]
push ecx
call fcn.00484d40
add esp, 0xc
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x49422a
mov edx, dword [esp]
add edx, 0x119
push edx
lea ecx, [esp + 0x41c]
push ecx
movsx edx, word [esp + 0x3e]
mov ecx, dword [esp + 8]
mov eax, dword [esp + 8]
add ecx, 0x107
inc eax
call fcn.0048bd60
mov word [esp + 0x34], ax
jmp 0x494231
mov word [esp + 0x34], 0xfbb5
push 2
lea eax, [esp + 0x38]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
push ecx
call fcn.00484d40
add esp, 0xc
push 0x104
lea eax, [esp + 0x41c]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
add ecx, 2
push ecx
call fcn.00484d40
add esp, 0xc
jmp 0x4961d1
mov eax, dword [esp + 4]
mov edx, 6
mov dword [eax + 0x28], edx
mov word [esp + 8], dx
movsx eax, word [esp + 8]
push eax
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
push 2
mov eax, dword [esp + 4]
add eax, 0x105
push eax
lea ecx, [esp + 0x46]
push ecx
call fcn.00484d40
add esp, 0xc
push 2
mov eax, dword [esp + 4]
add eax, 0x107
push eax
lea edx, [esp + 0x48]
push edx
call fcn.00484d40
add esp, 0xc
push 1
mov ecx, dword [esp + 4]
add ecx, 0x109
push ecx
lea eax, [esp + 0x42]
push eax
call fcn.00484d40
add esp, 0xc
push 1
mov edx, dword [esp + 4]
add edx, 0x10a
push edx
lea ecx, [esp + 0x43]
push ecx
call fcn.00484d40
add esp, 0xc
push 1
mov eax, dword [esp + 4]
add eax, 0x10b
push eax
lea edx, [esp + 0x44]
push edx
call fcn.00484d40
add esp, 0xc
push 1
mov ecx, dword [esp + 4]
add ecx, 0x10c
push ecx
lea eax, [esp + 0x45]
push eax
call fcn.00484d40
add esp, 0xc
push 2
mov edx, dword [esp + 4]
add edx, 0x10d
push edx
lea ecx, [esp + 0x4a]
push ecx
call fcn.00484d40
add esp, 0xc
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x49438e
lea edx, [esp + 0x3a]
push edx
lea ecx, [esp + 0x3f]
push ecx
lea eax, [esp + 0x44]
push eax
lea edx, [esp + 0x49]
push edx
push 0x4d3348
movsx ecx, word [esp + 0x56]
push ecx
movsx ecx, word [esp + 0x58]
movsx edx, word [esp + 0x56]
mov eax, dword [esp + 0x18]
inc eax
call fcn.0048bef4
mov word [esp + 0x38], ax
jmp 0x494395
mov word [esp + 0x38], 0xfbb5
push 2
lea eax, [esp + 0x3c]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
push ecx
call fcn.00484d40
add esp, 0xc
push 1
lea eax, [esp + 0x3e]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
add ecx, 2
push ecx
call fcn.00484d40
add esp, 0xc
push 1
lea eax, [esp + 0x3f]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
add ecx, 3
push ecx
call fcn.00484d40
add esp, 0xc
push 1
lea eax, [esp + 0x40]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
add ecx, 4
push ecx
call fcn.00484d40
add esp, 0xc
push 1
lea eax, [esp + 0x41]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
add ecx, 5
push ecx
call fcn.00484d40
add esp, 0xc
jmp 0x4961d1
mov eax, dword [esp + 4]
mov edx, 6
mov dword [eax + 0x28], edx
mov word [esp + 8], dx
movsx eax, word [esp + 8]
push eax
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
push 2
mov eax, dword [esp + 4]
add eax, 0x105
push eax
lea ecx, [esp + 0x52]
push ecx
call fcn.00484d40
add esp, 0xc
push 2
mov eax, dword [esp + 4]
add eax, 0x107
push eax
lea edx, [esp + 0x54]
push edx
call fcn.00484d40
add esp, 0xc
push 1
mov ecx, dword [esp + 4]
add ecx, 0x109
push ecx
lea eax, [esp + 0x4e]
push eax
call fcn.00484d40
add esp, 0xc
push 1
mov edx, dword [esp + 4]
add edx, 0x10a
push edx
lea ecx, [esp + 0x4f]
push ecx
call fcn.00484d40
add esp, 0xc
push 1
mov eax, dword [esp + 4]
add eax, 0x10b
push eax
lea edx, [esp + 0x50]
push edx
call fcn.00484d40
add esp, 0xc
push 1
mov ecx, dword [esp + 4]
add ecx, 0x10c
push ecx
lea eax, [esp + 0x51]
push eax
call fcn.00484d40
add esp, 0xc
push 2
mov edx, dword [esp + 4]
add edx, 0x10d
push edx
lea ecx, [esp + 0x56]
push ecx
call fcn.00484d40
add esp, 0xc
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x49453a
lea edx, [esp + 0x46]
push edx
lea ecx, [esp + 0x4b]
push ecx
lea eax, [esp + 0x50]
push eax
lea edx, [esp + 0x55]
push edx
push 0x4d3348
movsx ecx, word [esp + 0x62]
push ecx
movsx ecx, word [esp + 0x64]
movsx edx, word [esp + 0x62]
mov eax, dword [esp + 0x18]
inc eax
call fcn.0048fc48
mov word [esp + 0x44], ax
jmp 0x494541
mov word [esp + 0x44], 0xfbb5
push 2
lea eax, [esp + 0x48]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
push ecx
call fcn.00484d40
add esp, 0xc
push 1
lea eax, [esp + 0x4a]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
add ecx, 2
push ecx
call fcn.00484d40
add esp, 0xc
push 1
lea eax, [esp + 0x4b]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
add ecx, 3
push ecx
call fcn.00484d40
add esp, 0xc
push 1
lea eax, [esp + 0x4c]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
add ecx, 4
push ecx
call fcn.00484d40
add esp, 0xc
push 1
lea eax, [esp + 0x4d]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
add ecx, 5
push ecx
call fcn.00484d40
add esp, 0xc
jmp 0x4961d1
mov eax, dword [esp + 4]
mov edx, 2
mov dword [eax + 0x28], edx
mov word [esp + 8], dx
movsx eax, word [esp + 8]
push eax
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x494627
mov ecx, dword [esp]
add ecx, 0x12d
push ecx
push 0x4d3348
mov ecx, dword [esp + 8]
add ecx, 0x29
mov edx, dword [esp + 8]
add edx, 0x15
mov eax, dword [esp + 8]
inc eax
call fcn.0048f60c
mov word [esp + 0x50], ax
jmp 0x49462e
mov word [esp + 0x50], 0xfbb5
push 2
lea eax, [esp + 0x54]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
push ecx
call fcn.00484d40
add esp, 0xc
jmp 0x4961d1
mov eax, dword [esp + 4]
mov edx, 2
mov dword [eax + 0x28], edx
mov word [esp + 8], dx
movsx eax, word [esp + 8]
push eax
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
push 2
mov eax, dword [esp + 4]
inc eax
push eax
lea ecx, [esp + 0x5c]
push ecx
call fcn.00484d40
add esp, 0xc
push 2
mov eax, dword [esp + 4]
add eax, 3
push eax
lea edx, [esp + 0x5e]
push edx
call fcn.00484d40
add esp, 0xc
mov ecx, dword [esp + 4]
cmp dword [ecx + 0x2c], 0
je 0x4946c5
mov dx, word [esp + 0x56]
mov ecx, 0x4d3348
mov ax, word [esp + 0x54]
call fcn.0048e324
mov word [esp + 0x52], ax
jmp 0x4946cc
mov word [esp + 0x52], 0xfbb5
push 2
lea eax, [esp + 0x56]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
push ecx
call fcn.00484d40
add esp, 0xc
jmp 0x4961d1
mov eax, dword [esp + 4]
mov edx, 3
mov dword [eax + 0x28], edx
mov word [esp + 8], dx
movsx eax, word [esp + 8]
push eax
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
push 2
mov eax, dword [esp + 4]
inc eax
push eax
lea ecx, [esp + 0x62]
push ecx
call fcn.00484d40
add esp, 0xc
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x49474b
mov ecx, 0x4d3348
lea edx, [esp + 0x5c]
mov ax, word [esp + 0x5a]
call fcn.0048dedc
mov word [esp + 0x58], ax
jmp 0x494752
mov word [esp + 0x58], 0xfbb5
push 2
lea edx, [esp + 0x5c]
push edx
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x24]
push eax
call fcn.00484d40
add esp, 0xc
push 1
lea edx, [esp + 0x60]
push edx
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x24]
add eax, 2
push eax
call fcn.00484d40
add esp, 0xc
jmp 0x4961d1
push 2
mov edx, dword [esp + 4]
inc edx
push edx
lea ecx, [esp + 0x6c]
push ecx
call fcn.00484d40
add esp, 0xc
push 2
mov eax, dword [esp + 4]
add eax, 3
push eax
lea edx, [esp + 0x6e]
push edx
call fcn.00484d40
add esp, 0xc
movsx ecx, word [esp + 0x66]
inc ecx
push ecx
push 0
mov eax, dword [esp + 0x14]
push eax
call sub.kernel32.dll_HeapAlloc
mov dword [esp + 0x60], eax
movsx edx, word [esp + 0x66]
add edx, 2
mov ecx, dword [esp + 4]
mov dword [ecx + 0x28], edx
mov word [esp + 8], dx
movsx eax, word [esp + 8]
push eax
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x494821
push 0x4d3348
movsx ecx, word [esp + 0x6a]
mov dx, word [esp + 0x68]
mov eax, dword [esp + 0x64]
call fcn.0049047c
mov word [esp + 0x5e], ax
jmp 0x494828
mov word [esp + 0x5e], 0xfbb5
push 2
lea ecx, [esp + 0x62]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
push edx
call fcn.00484d40
add esp, 0xc
movsx ecx, word [esp + 0x66]
push ecx
mov eax, dword [esp + 0x64]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
add ecx, 2
push ecx
call fcn.00484d40
add esp, 0xc
mov eax, dword [esp + 0x60]
push eax
push 0
mov edx, dword [esp + 0x14]
push edx
call sub.kernel32.dll_HeapFree
jmp 0x4961d1
mov ecx, dword [esp + 4]
mov eax, 2
mov dword [ecx + 0x28], eax
mov word [esp + 8], ax
movsx edx, word [esp + 8]
push edx
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
push 2
mov eax, dword [esp + 4]
inc eax
push eax
lea ecx, [esp + 0x72]
push ecx
call fcn.00484d40
add esp, 0xc
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x4948d8
mov ecx, 0x4d3348
mov eax, dword [esp]
add eax, 3
mov dx, word [esp + 0x6a]
call fcn.00490610
mov word [esp + 0x68], ax
jmp 0x4948df
mov word [esp + 0x68], 0xfbb5
push 2
lea ecx, [esp + 0x6c]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
push edx
call fcn.00484d40
add esp, 0xc
jmp 0x4961d1
mov ecx, dword [esp + 4]
mov eax, 6
mov dword [ecx + 0x28], eax
mov word [esp + 8], ax
movsx edx, word [esp + 8]
push edx
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x494944
mov edx, 0x4d3348
lea eax, [esp + 0x70]
call fcn.0049154c
mov word [esp + 0x6c], ax
jmp 0x49494b
mov word [esp + 0x6c], 0xfbb5
push 2
lea ecx, [esp + 0x70]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
push edx
call fcn.00484d40
add esp, 0xc
push 4
lea ecx, [esp + 0x74]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
add edx, 2
push edx
call fcn.00484d40
add esp, 0xc
jmp 0x4961d1
mov ecx, dword [esp + 4]
mov eax, 6
mov dword [ecx + 0x28], eax
mov word [esp + 8], ax
movsx edx, word [esp + 8]
push edx
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
push 2
mov eax, dword [esp + 4]
add eax, 0x105
push eax
lea ecx, [esp + 0x82]
push ecx
call fcn.00484d40
add esp, 0xc
push 1
mov eax, dword [esp + 4]
add eax, 0x107
push eax
lea edx, [esp + 0x7e]
push edx
call fcn.00484d40
add esp, 0xc
push 1
mov ecx, dword [esp + 4]
add ecx, 0x108
push ecx
lea eax, [esp + 0x7f]
push eax
call fcn.00484d40
add esp, 0xc
push 1
mov edx, dword [esp + 4]
add edx, 0x109
push edx
lea ecx, [esp + 0x80]
push ecx
call fcn.00484d40
add esp, 0xc
push 1
mov eax, dword [esp + 4]
add eax, 0x10a
push eax
lea edx, [esp + 0x81]
push edx
call fcn.00484d40
add esp, 0xc
mov ecx, dword [esp + 4]
cmp dword [ecx + 0x2c], 0
je 0x494a6f
lea eax, [esp + 0x77]
push eax
lea edx, [esp + 0x7c]
push edx
lea ecx, [esp + 0x81]
push ecx
lea ecx, [esp + 0x82]
movsx edx, word [esp + 0x86]
mov eax, dword [esp + 0xc]
inc eax
call fcn.0048b884
mov word [esp + 0x74], ax
jmp 0x494a76
mov word [esp + 0x74], 0xfbb5
push 2
lea eax, [esp + 0x78]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
push ecx
call fcn.00484d40
add esp, 0xc
push 1
lea eax, [esp + 0x7a]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
add ecx, 2
push ecx
call fcn.00484d40
add esp, 0xc
push 1
lea eax, [esp + 0x7b]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
add ecx, 3
push ecx
call fcn.00484d40
add esp, 0xc
push 1
lea eax, [esp + 0x7c]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
add ecx, 4
push ecx
call fcn.00484d40
add esp, 0xc
push 1
lea eax, [esp + 0x7d]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
add ecx, 5
push ecx
call fcn.00484d40
add esp, 0xc
jmp 0x4961d1
mov eax, dword [esp + 4]
mov edx, 6
mov dword [eax + 0x28], edx
mov word [esp + 8], dx
movsx eax, word [esp + 8]
push eax
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
push 0x10
mov eax, dword [esp + 4]
inc eax
push eax
lea ecx, [esp + 0x524]
push ecx
call fcn.00484d40
add esp, 0xc
push 1
mov eax, dword [esp + 4]
add eax, 0x11
push eax
lea edx, [esp + 0x86]
push edx
call fcn.00484d40
add esp, 0xc
push 1
mov ecx, dword [esp + 4]
add ecx, 0x12
push ecx
lea eax, [esp + 0x87]
push eax
call fcn.00484d40
add esp, 0xc
push 1
mov edx, dword [esp + 4]
add edx, 0x13
push edx
lea ecx, [esp + 0x88]
push ecx
call fcn.00484d40
add esp, 0xc
push 1
mov eax, dword [esp + 4]
add eax, 0x14
push eax
lea edx, [esp + 0x89]
push edx
call fcn.00484d40
add esp, 0xc
mov ecx, dword [esp + 4]
cmp dword [ecx + 0x2c], 0
je 0x494bdf
lea eax, [esp + 0x80]
push eax
lea edx, [esp + 0x85]
push edx
lea ecx, [esp + 0x87]
lea edx, [esp + 0x86]
lea eax, [esp + 0x524]
call fcn.0048c228
mov word [esp + 0x7c], ax
jmp 0x494be6
mov word [esp + 0x7c], 0xfbb5
push 2
lea ecx, [esp + 0x80]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
push edx
call fcn.00484d40
add esp, 0xc
push 1
lea ecx, [esp + 0x82]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
add edx, 2
push edx
call fcn.00484d40
add esp, 0xc
push 1
lea ecx, [esp + 0x83]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
add edx, 3
push edx
call fcn.00484d40
add esp, 0xc
push 1
lea ecx, [esp + 0x84]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
add edx, 4
push edx
call fcn.00484d40
add esp, 0xc
push 1
lea ecx, [esp + 0x85]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
add edx, 5
push edx
call fcn.00484d40
add esp, 0xc
jmp 0x4961d1
mov ecx, dword [esp + 4]
mov eax, 6
mov dword [ecx + 0x28], eax
mov word [esp + 8], ax
movsx edx, word [esp + 8]
push edx
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
push 2
mov eax, dword [esp + 4]
inc eax
push eax
lea ecx, [esp + 0x8c]
push ecx
call fcn.00484d40
add esp, 0xc
movsx eax, word [esp + 0x84]
push eax
push 0
mov edx, dword [esp + 0x14]
push edx
call sub.kernel32.dll_HeapAlloc
mov dword [esp + 0x8c], eax
movsx ecx, word [esp + 0x84]
push ecx
mov eax, dword [esp + 4]
add eax, 3
push eax
mov edx, dword [esp + 0x94]
push edx
call fcn.00484d40
add esp, 0xc
push 1
movsx ecx, word [esp + 0x88]
add ecx, dword [esp + 4]
add ecx, 3
push ecx
lea eax, [esp + 0x90]
push eax
call fcn.00484d40
add esp, 0xc
push 1
movsx edx, word [esp + 0x88]
add edx, dword [esp + 4]
add edx, 4
push edx
lea ecx, [esp + 0x91]
push ecx
call fcn.00484d40
add esp, 0xc
push 1
movsx eax, word [esp + 0x88]
add eax, dword [esp + 4]
add eax, 5
push eax
lea edx, [esp + 0x92]
push edx
call fcn.00484d40
add esp, 0xc
push 1
movsx ecx, word [esp + 0x88]
add ecx, dword [esp + 4]
add ecx, 6
push ecx
lea eax, [esp + 0x93]
push eax
call fcn.00484d40
add esp, 0xc
push 2
movsx edx, word [esp + 0x88]
add edx, dword [esp + 4]
add edx, 7
push edx
lea ecx, [esp + 0x8e]
push ecx
call fcn.00484d40
add esp, 0xc
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x494df7
lea edx, [esp + 0x8a]
push edx
lea ecx, [esp + 0x8f]
push ecx
push 0x4d3348
movsx eax, word [esp + 0x90]
push eax
movsx edx, word [esp + 0x96]
push edx
lea ecx, [esp + 0x9d]
lea edx, [esp + 0x9c]
mov eax, dword [esp + 0xa0]
call fcn.0048faa8
mov word [esp + 0x82], ax
jmp 0x494e01
mov word [esp + 0x82], 0xfbb5
push 2
lea ecx, [esp + 0x86]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
push edx
call fcn.00484d40
add esp, 0xc
push 1
lea ecx, [esp + 0x8c]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
add edx, 2
push edx
call fcn.00484d40
add esp, 0xc
push 1
lea ecx, [esp + 0x8d]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
add edx, 3
push edx
call fcn.00484d40
add esp, 0xc
push 1
lea ecx, [esp + 0x8e]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
add edx, 4
push edx
call fcn.00484d40
add esp, 0xc
push 1
lea ecx, [esp + 0x8f]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
add edx, 5
push edx
call fcn.00484d40
add esp, 0xc
mov ecx, dword [esp + 0x8c]
push ecx
push 0
mov eax, dword [esp + 0x14]
push eax
call sub.kernel32.dll_HeapFree
jmp 0x4961d1
mov edx, dword [esp + 4]
mov ecx, 6
mov dword [edx + 0x28], ecx
mov word [esp + 8], cx
movsx eax, word [esp + 8]
push eax
push 0
mov edx, dword [esp + 0x14]
push edx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
push 1
mov eax, dword [esp + 4]
add eax, 0x105
push eax
lea ecx, [esp + 0x9a]
push ecx
call fcn.00484d40
add esp, 0xc
push 1
mov eax, dword [esp + 4]
add eax, 0x106
push eax
lea edx, [esp + 0x9b]
push edx
call fcn.00484d40
add esp, 0xc
push 1
mov ecx, dword [esp + 4]
add ecx, 0x107
push ecx
lea eax, [esp + 0x9c]
push eax
call fcn.00484d40
add esp, 0xc
push 1
mov edx, dword [esp + 4]
add edx, 0x108
push edx
lea ecx, [esp + 0x9d]
push ecx
call fcn.00484d40
add esp, 0xc
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x494f85
lea edx, [esp + 0x94]
push edx
lea ecx, [esp + 0x99]
push ecx
push 0x4d3348
lea ecx, [esp + 0x9f]
lea edx, [esp + 0x9e]
mov eax, dword [esp + 0xc]
inc eax
call fcn.0048d238
mov word [esp + 0x90], ax
jmp 0x494f8f
mov word [esp + 0x90], 0xfbb5
push 2
lea eax, [esp + 0x94]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
push ecx
call fcn.00484d40
add esp, 0xc
push 1
lea eax, [esp + 0x96]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
add ecx, 2
push ecx
call fcn.00484d40
add esp, 0xc
push 1
lea eax, [esp + 0x97]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
add ecx, 3
push ecx
call fcn.00484d40
add esp, 0xc
push 1
lea eax, [esp + 0x98]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
add ecx, 4
push ecx
call fcn.00484d40
add esp, 0xc
push 1
lea eax, [esp + 0x99]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
add ecx, 5
push ecx
call fcn.00484d40
add esp, 0xc
jmp 0x4961d1
mov esi, 0x4d035f
lea edi, [esp + 0x52c]
mov ecx, 0x41
rep movsd dword es:[edi], dword [esi]
mov eax, dword [esp + 4]
mov edx, 0x106
mov dword [eax + 0x28], edx
mov word [esp + 8], dx
movsx eax, word [esp + 8]
push eax
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x495083
lea edx, [esp + 0x52c]
mov eax, dword [esp]
inc eax
call fcn.0048d42c
mov word [esp + 0x96], ax
jmp 0x49508d
mov word [esp + 0x96], 0xfbb5
push 2
lea ecx, [esp + 0x9a]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
push edx
call fcn.00484d40
add esp, 0xc
push 0x104
lea ecx, [esp + 0x530]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
add edx, 2
push edx
call fcn.00484d40
add esp, 0xc
jmp 0x4961d1
mov esi, 0x4d0464
lea edi, [esp + 0x630]
mov ecx, 0x41
rep movsd dword es:[edi], dword [esi]
mov eax, dword [esp + 4]
mov edx, 0x106
mov dword [eax + 0x28], edx
mov word [esp + 8], dx
movsx eax, word [esp + 8]
push eax
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x495136
lea ecx, [esp + 0x630]
mov edx, dword [esp]
add edx, 0x105
mov eax, dword [esp]
inc eax
call fcn.0048d6bc
mov word [esp + 0x98], ax
jmp 0x495140
mov word [esp + 0x98], 0xfbb5
push 2
lea ecx, [esp + 0x9c]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
push edx
call fcn.00484d40
add esp, 0xc
push 0x104
lea ecx, [esp + 0x634]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
add edx, 2
push edx
call fcn.00484d40
add esp, 0xc
jmp 0x4961d1
mov ecx, dword [esp + 4]
mov eax, 0x12
mov dword [ecx + 0x28], eax
mov word [esp + 8], ax
movsx edx, word [esp + 8]
push edx
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x4951d3
lea ecx, [esp + 0x734]
mov edx, dword [esp]
add edx, 0x11
mov eax, dword [esp]
inc eax
call fcn.0048cf84
mov word [esp + 0x9a], ax
jmp 0x4951dd
mov word [esp + 0x9a], 0xfbb5
push 2
lea ecx, [esp + 0x9e]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
push edx
call fcn.00484d40
add esp, 0xc
push 0x10
lea ecx, [esp + 0x738]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
add edx, 2
push edx
call fcn.00484d40
add esp, 0xc
jmp 0x4961d1
mov ecx, dword [esp + 4]
mov eax, 0x12
mov dword [ecx + 0x28], eax
mov word [esp + 8], ax
movsx edx, word [esp + 8]
push edx
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x495277
lea ecx, [esp + 0x744]
push ecx
mov ecx, dword [esp + 4]
add ecx, 0x29
mov edx, dword [esp + 4]
add edx, 0x15
mov eax, dword [esp + 4]
inc eax
call fcn.0048da84
mov word [esp + 0x9c], ax
jmp 0x495281
mov word [esp + 0x9c], 0xfbb5
push 2
lea eax, [esp + 0xa0]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
push ecx
call fcn.00484d40
add esp, 0xc
push 0x10
lea eax, [esp + 0x748]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
add ecx, 2
push ecx
call fcn.00484d40
add esp, 0xc
jmp 0x4961d1
mov eax, dword [esp + 4]
mov edx, 2
mov dword [eax + 0x28], edx
mov word [esp + 8], dx
movsx eax, word [esp + 8]
push eax
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x495310
mov ecx, dword [esp]
add ecx, 0x15
mov edx, dword [esp]
add edx, 0x15
mov eax, dword [esp]
inc eax
call fcn.0048c378
mov word [esp + 0x9e], ax
jmp 0x49531a
mov word [esp + 0x9e], 0xfbb5
push 2
lea ecx, [esp + 0xa2]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
push edx
call fcn.00484d40
add esp, 0xc
jmp 0x4961d1
push 2
mov ecx, dword [esp + 4]
add ecx, 0x29
push ecx
lea eax, [esp + 0xaa]
push eax
call fcn.00484d40
add esp, 0xc
movsx edx, word [esp + 0xa2]
push edx
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov dword [esp + 0xa4], eax
movsx eax, word [esp + 0xa2]
add eax, 2
mov edx, dword [esp + 4]
mov dword [edx + 0x28], eax
mov word [esp + 8], ax
movsx edx, word [esp + 8]
push edx
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x4953e1
movsx ecx, word [esp + 0xa2]
push ecx
mov eax, dword [esp + 0xa8]
push eax
push 0x4d3348
mov ecx, dword [esp + 0xc]
add ecx, 0x2b
mov edx, dword [esp + 0xc]
add edx, 0x15
mov eax, dword [esp + 0xc]
inc eax
call fcn.00490d7c
mov word [esp + 0xa0], ax
jmp 0x4953eb
mov word [esp + 0xa0], 0xfbb5
push 2
lea edx, [esp + 0xa4]
push edx
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x24]
push eax
call fcn.00484d40
add esp, 0xc
movsx edx, word [esp + 0xa2]
push edx
mov ecx, dword [esp + 0xa8]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
add edx, 2
push edx
call fcn.00484d40
add esp, 0xc
mov ecx, dword [esp + 0xa4]
push ecx
push 0
mov eax, dword [esp + 0x14]
push eax
call sub.kernel32.dll_HeapFree
jmp 0x4961d1
mov edx, dword [esp + 4]
mov ecx, 2
mov dword [edx + 0x28], ecx
mov word [esp + 8], cx
movsx eax, word [esp + 8]
push eax
push 0
mov edx, dword [esp + 0x14]
push edx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x49549d
push 0x4d3348
mov ecx, dword [esp + 4]
add ecx, 0x29
mov edx, dword [esp + 4]
add edx, 0x15
mov eax, dword [esp + 4]
inc eax
call fcn.0048e8b0
mov word [esp + 0xa8], ax
jmp 0x4954a7
mov word [esp + 0xa8], 0xfbb5
push 2
lea ecx, [esp + 0xac]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
push edx
call fcn.00484d40
add esp, 0xc
jmp 0x4961d1
mov ecx, dword [esp + 4]
mov eax, 2
mov dword [ecx + 0x28], eax
mov word [esp + 8], ax
movsx edx, word [esp + 8]
push edx
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
push 2
mov eax, dword [esp + 4]
inc eax
push eax
lea ecx, [esp + 0xb4]
push ecx
call fcn.00484d40
add esp, 0xc
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x495534
mov ecx, 0x4d3348
mov edx, dword [esp]
add edx, 3
mov ax, word [esp + 0xac]
call fcn.0048e6a4
mov word [esp + 0xaa], ax
jmp 0x49553e
mov word [esp + 0xaa], 0xfbb5
push 2
lea edx, [esp + 0xae]
push edx
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x24]
push eax
call fcn.00484d40
add esp, 0xc
jmp 0x4961d1
mov edx, dword [esp + 4]
mov ecx, 2
mov dword [edx + 0x28], ecx
mov word [esp + 8], cx
movsx eax, word [esp + 8]
push eax
push 0
mov edx, dword [esp + 0x14]
push edx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
push 2
mov eax, dword [esp + 4]
inc eax
push eax
lea ecx, [esp + 0xb8]
push ecx
call fcn.00484d40
add esp, 0xc
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x4955d6
push 0x4d3348
movsx eax, word [esp + 0xb4]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 4]
add ecx, 0x107
add edx, 3
call fcn.0048f974
mov word [esp + 0xae], ax
jmp 0x4955e0
mov word [esp + 0xae], 0xfbb5
push 2
lea edx, [esp + 0xb2]
push edx
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x24]
push eax
call fcn.00484d40
add esp, 0xc
jmp 0x4961d1
mov edx, dword [esp + 4]
mov ecx, 2
mov dword [edx + 0x28], ecx
mov word [esp + 8], cx
movsx eax, word [esp + 8]
push eax
push 0
mov edx, dword [esp + 0x14]
push edx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x495647
mov eax, 0x4d3348
call fcn.0048b734
mov word [esp + 0xb2], ax
jmp 0x495651
mov word [esp + 0xb2], 0xfbb5
push 2
lea edx, [esp + 0xb6]
push edx
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x24]
push eax
call fcn.00484d40
add esp, 0xc
jmp 0x4961d1
mov edx, dword [esp + 4]
mov ecx, 0xa
mov dword [edx + 0x28], ecx
mov word [esp + 8], cx
movsx eax, word [esp + 8]
push eax
push 0
mov edx, dword [esp + 0x14]
push edx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x4956c6
mov ecx, 0x4d3348
lea edx, [esp + 0xbc]
lea eax, [esp + 0xb8]
call fcn.00491478
mov word [esp + 0xb4], ax
jmp 0x4956d0
mov word [esp + 0xb4], 0xfbb5
push 2
lea ecx, [esp + 0xb8]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
push edx
call fcn.00484d40
add esp, 0xc
push 4
lea ecx, [esp + 0xbc]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
add edx, 2
push edx
call fcn.00484d40
add esp, 0xc
push 4
lea ecx, [esp + 0xc0]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
add edx, 6
push edx
call fcn.00484d40
add esp, 0xc
jmp 0x4961d1
mov ecx, dword [esp + 4]
mov eax, 6
mov dword [ecx + 0x28], eax
mov word [esp + 8], ax
movsx edx, word [esp + 8]
push edx
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x495778
mov edx, 0x4d3348
lea eax, [esp + 0xc4]
call fcn.004913c0
mov word [esp + 0xc0], ax
jmp 0x495782
mov word [esp + 0xc0], 0xfbb5
push 2
lea ecx, [esp + 0xc4]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
push edx
call fcn.00484d40
add esp, 0xc
push 4
lea ecx, [esp + 0xc8]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
add edx, 2
push edx
call fcn.00484d40
add esp, 0xc
jmp 0x4961d1
mov ecx, dword [esp + 4]
mov eax, 6
mov dword [ecx + 0x28], eax
mov word [esp + 8], ax
movsx edx, word [esp + 8]
push edx
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
push 1
mov eax, dword [esp + 4]
inc eax
push eax
lea ecx, [esp + 0xd2]
push ecx
call fcn.00484d40
add esp, 0xc
push 1
mov eax, dword [esp + 4]
add eax, 2
push eax
lea edx, [esp + 0xd3]
push edx
call fcn.00484d40
add esp, 0xc
push 1
mov ecx, dword [esp + 4]
add ecx, 3
push ecx
lea eax, [esp + 0xd4]
push eax
call fcn.00484d40
add esp, 0xc
push 1
mov edx, dword [esp + 4]
add edx, 4
push edx
lea ecx, [esp + 0xd5]
push ecx
call fcn.00484d40
add esp, 0xc
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x495889
lea edx, [esp + 0xcd]
push edx
push 0x4d3348
lea ecx, [esp + 0xd4]
lea edx, [esp + 0xd3]
lea eax, [esp + 0xd2]
call fcn.0048dfb4
mov word [esp + 0xc8], ax
jmp 0x495893
mov word [esp + 0xc8], 0xfbb5
push 2
lea ecx, [esp + 0xcc]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
push edx
call fcn.00484d40
add esp, 0xc
push 1
lea ecx, [esp + 0xce]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
add edx, 2
push edx
call fcn.00484d40
add esp, 0xc
push 1
lea ecx, [esp + 0xcf]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
add edx, 3
push edx
call fcn.00484d40
add esp, 0xc
push 1
lea ecx, [esp + 0xd0]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
add edx, 4
push edx
call fcn.00484d40
add esp, 0xc
push 1
lea ecx, [esp + 0xd1]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
add edx, 5
push edx
call fcn.00484d40
add esp, 0xc
jmp 0x4961d1
push 2
mov ecx, dword [esp + 4]
inc ecx
push ecx
lea eax, [esp + 0xd8]
push eax
call fcn.00484d40
add esp, 0xc
push 2
mov edx, dword [esp + 4]
add edx, 3
push edx
lea ecx, [esp + 0xda]
push ecx
call fcn.00484d40
add esp, 0xc
movsx eax, word [esp + 0xd2]
inc eax
push eax
push 0
mov edx, dword [esp + 0x14]
push edx
call sub.kernel32.dll_HeapAlloc
mov dword [esp + 0xd4], eax
movsx ecx, word [esp + 0xd2]
add ecx, 2
mov eax, dword [esp + 4]
mov dword [eax + 0x28], ecx
mov word [esp + 8], cx
movsx edx, word [esp + 8]
push edx
push 0
mov eax, dword [esp + 0x14]
push eax
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
mov ecx, dword [esp + 4]
cmp dword [ecx + 0x2c], 0
je 0x4959e9
mov eax, dword [esp]
add eax, 5
push eax
mov edx, dword [esp + 4]
add edx, 0x19
push edx
push 0x4d3348
movsx ecx, word [esp + 0xde]
mov dx, word [esp + 0xdc]
mov eax, dword [esp + 0xe0]
call fcn.004907ac
mov word [esp + 0xce], ax
jmp 0x4959f3
mov word [esp + 0xce], 0xfbb5
push 2
lea ecx, [esp + 0xd2]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
push edx
call fcn.00484d40
add esp, 0xc
movsx ecx, word [esp + 0xd2]
push ecx
mov eax, dword [esp + 0xd8]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
add ecx, 2
push ecx
call fcn.00484d40
add esp, 0xc
mov eax, dword [esp + 0xd4]
push eax
push 0
mov edx, dword [esp + 0x14]
push edx
call sub.kernel32.dll_HeapFree
jmp 0x4961d1
mov ecx, dword [esp + 4]
mov eax, 2
mov dword [ecx + 0x28], eax
mov word [esp + 8], ax
movsx edx, word [esp + 8]
push edx
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
push 2
mov eax, dword [esp + 4]
inc eax
push eax
lea ecx, [esp + 0xe2]
push ecx
call fcn.00484d40
add esp, 0xc
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x495ac7
mov edx, dword [esp]
add edx, 0x17
push edx
push 0x4d3348
mov dx, word [esp + 0xe2]
mov ecx, dword [esp + 8]
add ecx, 3
mov eax, dword [esp + 8]
add eax, 0x2b
call fcn.004908e8
mov word [esp + 0xd8], ax
jmp 0x495ad1
mov word [esp + 0xd8], 0xfbb5
push 2
lea ecx, [esp + 0xdc]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
push edx
call fcn.00484d40
add esp, 0xc
jmp 0x4961d1
push 2
mov ecx, dword [esp + 4]
inc ecx
push ecx
lea eax, [esp + 0xe6]
push eax
call fcn.00484d40
add esp, 0xc
push 2
mov edx, dword [esp + 4]
add edx, 3
push edx
lea ecx, [esp + 0xe8]
push ecx
call fcn.00484d40
add esp, 0xc
movsx eax, word [esp + 0xe0]
push eax
push 0
mov edx, dword [esp + 0x14]
push edx
call sub.kernel32.dll_HeapAlloc
mov dword [esp + 0xe4], eax
movsx ecx, word [esp + 0xe0]
add ecx, 2
mov eax, dword [esp + 4]
mov dword [eax + 0x28], ecx
mov word [esp + 8], cx
movsx edx, word [esp + 8]
push edx
push 0
mov eax, dword [esp + 0x14]
push eax
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
mov ecx, dword [esp + 4]
cmp dword [ecx + 0x2c], 0
je 0x495bb2
mov eax, dword [esp]
add eax, 5
push eax
mov edx, dword [esp + 4]
add edx, 0x19
push edx
push 0x4d3348
mov cx, word [esp + 0xec]
mov eax, dword [esp + 0xf0]
mov dx, word [esp + 0xea]
call fcn.0048e0ec
mov word [esp + 0xdc], ax
jmp 0x495bbc
mov word [esp + 0xdc], 0xfbb5
push 2
lea ecx, [esp + 0xe0]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
push edx
call fcn.00484d40
add esp, 0xc
movsx ecx, word [esp + 0xe0]
push ecx
mov eax, dword [esp + 0xe8]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
add ecx, 2
push ecx
call fcn.00484d40
add esp, 0xc
mov eax, dword [esp + 0xe4]
push eax
push 0
mov edx, dword [esp + 0x14]
push edx
call sub.kernel32.dll_HeapFree
jmp 0x4961d1
mov ecx, dword [esp + 4]
mov eax, 2
mov dword [ecx + 0x28], eax
mov word [esp + 8], ax
movsx edx, word [esp + 8]
push edx
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
push 2
mov eax, dword [esp + 4]
inc eax
push eax
lea ecx, [esp + 0xf4]
push ecx
call fcn.00484d40
add esp, 0xc
push 2
mov eax, dword [esp + 4]
add eax, 3
push eax
lea edx, [esp + 0xf2]
push edx
call fcn.00484d40
add esp, 0xc
mov ecx, dword [esp + 4]
cmp dword [ecx + 0x2c], 0
je 0x495cb3
mov eax, dword [esp]
add eax, 5
push eax
mov edx, dword [esp + 4]
add edx, 0x19
push edx
push 0x4d3348
mov cx, word [esp + 0xf6]
mov eax, dword [esp + 0xc]
mov dx, word [esp + 0xf8]
add eax, 0x2d
call fcn.0048e3fc
mov word [esp + 0xe8], ax
jmp 0x495cbd
mov word [esp + 0xe8], 0xfbb5
push 2
lea eax, [esp + 0xec]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
push ecx
call fcn.00484d40
add esp, 0xc
jmp 0x4961d1
mov eax, dword [esp + 4]
mov edx, 2
mov dword [eax + 0x28], edx
mov word [esp + 8], dx
movsx eax, word [esp + 8]
push eax
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x495d21
mov edx, dword [esp]
add edx, 0x15
mov eax, dword [esp]
inc eax
call fcn.00490a38
jmp 0x495d2b
mov word [esp + 0xee], 0xfbb5
push 2
lea ecx, [esp + 0xf2]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
push edx
call fcn.00484d40
add esp, 0xc
jmp 0x4961d1
mov ecx, dword [esp + 4]
mov eax, 2
mov dword [ecx + 0x28], eax
mov word [esp + 8], ax
movsx edx, word [esp + 8]
push edx
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
push 4
mov eax, dword [esp + 4]
inc eax
push eax
lea ecx, [esp + 0xfc]
push ecx
call fcn.00484d40
add esp, 0xc
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x495dbf
push 0x4d3348
mov ecx, dword [esp + 4]
mov edx, dword [esp + 4]
add ecx, 0x19
add edx, 5
mov eax, dword [esp + 0xf8]
call fcn.00491694
mov word [esp + 0xf0], ax
jmp 0x495dc9
mov word [esp + 0xf0], 0xfbb5
push 2
lea edx, [esp + 0xf4]
push edx
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x24]
push eax
call fcn.00484d40
add esp, 0xc
jmp 0x4961d1
mov edx, dword [esp + 4]
mov ecx, 2
mov dword [edx + 0x28], ecx
mov word [esp + 8], cx
movsx eax, word [esp + 8]
push eax
push 0
mov edx, dword [esp + 0x14]
push edx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
push 2
mov eax, dword [esp + 4]
add eax, 0x51
push eax
lea ecx, [esp + 0x102]
push ecx
call fcn.00484d40
add esp, 0xc
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x495e6d
mov edx, dword [esp]
add edx, 0x3d
push edx
push 0x4d3348
mov cx, word [esp + 0x102]
push ecx
mov ecx, dword [esp + 0xc]
add ecx, 0x29
mov edx, dword [esp + 0xc]
add edx, 0x15
mov eax, dword [esp + 0xc]
inc eax
call fcn.00491784
mov word [esp + 0xf8], ax
jmp 0x495e77
mov word [esp + 0xf8], 0xfbb5
push 2
lea eax, [esp + 0xfc]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
push ecx
call fcn.00484d40
add esp, 0xc
jmp 0x4961d1
mov eax, dword [esp + 4]
mov edx, 2
mov dword [eax + 0x28], edx
mov word [esp + 8], dx
movsx eax, word [esp + 8]
push eax
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x495efa
mov ecx, dword [esp]
inc ecx
push ecx
push 0
push 0xc
mov eax, dword [0x4d344c]
push eax
call sub.user32.dll_SendMessageA
test eax, eax
je 0x495eee
mov word [esp + 0xfc], 0
jmp 0x495f04
mov word [esp + 0xfc], 0xf7c5
jmp 0x495f04
mov word [esp + 0xfc], 0xfbb5
push 2
lea edx, [esp + 0x100]
push edx
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x24]
push eax
call fcn.00484d40
add esp, 0xc
jmp 0x4961d1
mov edx, dword [esp + 4]
mov ecx, 4
mov dword [edx + 0x28], ecx
mov word [esp + 8], cx
movsx eax, word [esp + 8]
push eax
push 0
mov edx, dword [esp + 0x14]
push edx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x495f84
mov edx, 0x4d3348
lea eax, [esp + 0x100]
call fcn.004900fc
test eax, eax
jne 0x495f78
mov word [esp + 0xfe], 0
jmp 0x495f8e
mov word [esp + 0xfe], 0xf7c5
jmp 0x495f8e
mov word [esp + 0xfe], 0xfbb5
push 2
lea ecx, [esp + 0x102]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
push edx
call fcn.00484d40
add esp, 0xc
push 2
lea ecx, [esp + 0x104]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
add edx, 2
push edx
call fcn.00484d40
add esp, 0xc
jmp 0x4961d1
mov esi, 0x4d0569
lea edi, [esp + 0x754]
mov ecx, 0x41
rep movsd dword es:[edi], dword [esi]
mov eax, dword [esp + 4]
mov edx, 0x106
mov dword [eax + 0x28], edx
mov word [esp + 8], dx
movsx eax, word [esp + 8]
push eax
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
push 2
mov eax, dword [esp + 4]
inc eax
push eax
lea ecx, [esp + 0x10e]
push ecx
call fcn.00484d40
add esp, 0xc
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x496047
movsx eax, word [esp + 0x106]
lea edx, [esp + 0x754]
call fcn.0048f37c
mov word [esp + 0x104], ax
jmp 0x496051
mov word [esp + 0x104], 0xfbb5
push 2
lea edx, [esp + 0x108]
push edx
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x24]
push eax
call fcn.00484d40
add esp, 0xc
push 0x104
lea edx, [esp + 0x758]
push edx
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x24]
add eax, 2
push eax
call fcn.00484d40
add esp, 0xc
jmp 0x4961d1
mov esi, 0x4d066e
lea edi, [esp + 0x858]
mov ecx, 0xc
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, dword [esp + 4]
mov edx, 0x32
mov dword [eax + 0x28], edx
mov word [esp + 8], dx
movsx eax, word [esp + 8]
push eax
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x496133
lea ecx, [esp + 0x88c]
push ecx
call sub.kernel32.dll_GetLocalTime
movzx eax, word [esp + 0x898]
push eax
movzx edx, word [esp + 0x89a]
push edx
movzx ecx, word [esp + 0x89c]
push ecx
movzx eax, word [esp + 0x89e]
push eax
movzx edx, word [esp + 0x89e]
push edx
movzx ecx, word [esp + 0x8a0]
push ecx
push 0x4d0c44
lea eax, [esp + 0x874]
push eax
call fcn.004882a8
add esp, 0x20
jmp 0x49613d
mov word [esp + 0x108], 0xfbb5
push 2
lea edx, [esp + 0x10c]
push edx
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x24]
push eax
call fcn.00484d40
add esp, 0xc
lea edx, [esp + 0x858]
push edx
call sub.kernel32.dll_lstrlenA_1
inc eax
push eax
lea ecx, [esp + 0x85c]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
add edx, 2
push edx
call fcn.00484d40
add esp, 0xc
jmp 0x4961d1
mov word [esp + 0x10a], 0xfbbc
mov ecx, dword [esp + 4]
mov eax, 2
mov dword [ecx + 0x28], eax
mov word [esp + 8], ax
movsx edx, word [esp + 8]
push edx
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
push 2
lea eax, [esp + 0x10e]
push eax
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x24]
push eax
call fcn.00484d40
add esp, 0xc
add esp, 0x89c
pop edi
pop esi
ret