Function at 0x497600
Capabilities:
Create process on windows
Get common file path
Get program files directory
Query or enumerate registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x58748c
mov eax, dword fs:[0]
push eax
sub esp, 0x360
mov eax, dword [0x5e95e0]
xor eax, esp
mov dword [esp + 0x358], eax
push ebx
push esi
push edi
mov eax, dword [0x5e95e0]
xor eax, esp
push eax
lea eax, [esp + 0x370]
mov dword fs:[0], eax
mov ebx, ecx
call fcn.00530e1f
xor ecx, ecx
xor edi, edi
cmp eax, edi
setne cl
cmp ecx, edi
jne 0x49765e
push 0x80004005
call fcn.00401f70
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x34], eax
mov eax, dword [ebp + 8]
cmp eax, 0x810e
mov dword [esp + 0x378], edi
jne 0x4976e7
lea ecx, [esp + 0x54]
push ecx
call fcn.0043e6b0
lea ecx, [esp + 0x54]
mov byte [esp + 0x378], 1
call fcn.0053bd19
cmp dword [esp + 0xc8], edi
je 0x4976d1
mov edx, dword [ebx + 0x20]
push edi
push edi
push 0x10
push edx
mov dword [ebx + 0x99a8], edi
call dword [sym.imp.USER32.dll_PostMessageW]
mov eax, dword [0x5f2864]
push 5
push edi
push str._rerun
push eax
push str.open
push edi
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [esp + 0x54]
mov byte [esp + 0x378], 0
call fcn.0043e760
jmp 0x49a5bd
cmp eax, 0x8117
jne 0x49771f
lea ecx, [esp + 0x54]
push ecx
call fcn.0043c5e0
lea ecx, [esp + 0x54]
mov byte [esp + 0x378], 2
call fcn.0053bd19
lea ecx, [esp + 0x54]
mov byte [esp + 0x378], 0
call fcn.0043c6d0
jmp 0x49a5bd
cmp eax, 0x80d4
jne 0x49774a
mov ebx, dword [ebx + 0x568c]
cmp ebx, edi
je 0x49a5bd
push edi
push edi
push 0xffffffffffffffff
push 1
push 1
push edi
push edi
push edi
push ebx
call fcn.004d7180
jmp 0x49a5bd
cmp eax, 0x80da
jne 0x497762
add ebx, 0xad4
push ebx
call fcn.004b15e0
jmp 0x49a5bd
cmp eax, 0x800f
jne 0x497a4a
push 0x5afc40
lea ecx, [esp + 0x20]
call fcn.00402390
push edi
push ebx
mov byte [esp + 0x380], 3
mov edx, dword [esp + 0x24]
push edx
push 0x201200
push edi
push edi
push 1
lea ecx, [esp + 0x70]
call fcn.0053d5f5
lea ecx, [esp + 0x54]
mov byte [esp + 0x378], 4
call fcn.0053d4c6
cmp eax, 1
jne 0x497a08
lea ecx, [esp + 0x54]
call fcn.00533a93
lea ecx, [esp + 0x14]
call fcn.004026e0
lea ecx, [esp + 0x3c]
call fcn.004026e0
lea ecx, [esp + 0x40]
mov byte [esp + 0x378], 6
call fcn.00538d38
lea ecx, [esp + 0x54]
mov byte [esp + 0x378], 7
call fcn.0053d1ea
mov eax, dword [eax + 0x1c]
cmp eax, edi
mov dword [esp + 0x18], eax
je 0x497858
mov edi, edi
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x34]
push ecx
lea ecx, [esp + 0x5c]
call fcn.0053d8b2
mov byte [esp + 0x378], 8
mov edx, dword [esp + 0x48]
push eax
push edx
lea ecx, [esp + 0x48]
call fcn.00539068
mov byte [esp + 0x378], 7
mov eax, dword [esp + 0x30]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x497852
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
cmp dword [esp + 0x18], edi
jne 0x497800
cmp dword [esp + 0x48], edi
mov dword [esp + 0x20], edi
jle 0x4979a7
lea ecx, [esp + 0x14]
call fcn.00402160
mov eax, dword [esp + 0x20]
test eax, eax
jl 0x4979a2
cmp eax, dword [esp + 0x48]
jge 0x4979a2
mov ecx, dword [esp + 0x44]
mov edx, eax
mov eax, dword [ecx + edx*4]
lea ecx, [esp + 0x14]
push ecx
push eax
xor ecx, ecx
xor edi, edi
xor esi, esi
call fcn.00460370
mov edi, dword [esp + 0x1c]
push str..htm
push edi
call fcn.005522fc
add esp, 0x10
test eax, eax
je 0x4978eb
push 0x59a830
push edi
call fcn.005522fc
add esp, 8
test eax, eax
je 0x4978eb
push str..mht
push edi
call fcn.005522fc
add esp, 8
test eax, eax
je 0x4978eb
push str..flv
push edi
call fcn.005522fc
add esp, 8
test eax, eax
jne 0x497925
mov ecx, dword [ebx + 0x568c]
test ecx, ecx
je 0x49798b
mov esi, dword [esp + 0x20]
cmp esi, dword [esp + 0x48]
jge 0x4979a2
mov edx, dword [esp + 0x44]
mov eax, dword [edx + esi*4]
push 0
push 0
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push eax
push ecx
call fcn.004d7180
jmp 0x49798f
push str..url
push edi
call fcn.005522fc
add esp, 8
test eax, eax
jne 0x49798b
mov esi, dword [esp + 0x20]
cmp esi, dword [esp + 0x48]
jge 0x4979a2
mov eax, dword [esp + 0x44]
mov eax, dword [eax + esi*4]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.004693b0
mov edi, dword [esp + 0x1c]
add esp, 8
cmp dword [edi - 0xc], 0
je 0x497981
mov eax, dword [ebx + 0x568c]
test eax, eax
je 0x49798f
push 0
push 0
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push edi
push eax
call fcn.004d7180
jmp 0x49798f
push 0
call dword [sym.imp.USER32.dll_MessageBeep]
jmp 0x49798f
mov esi, dword [esp + 0x20]
add esi, 1
cmp esi, dword [esp + 0x48]
mov dword [esp + 0x20], esi
jl 0x497866
jmp 0x4979ab
call fcn.00530cad
mov edi, dword [esp + 0x14]
lea ecx, [esp + 0x40]
mov byte [esp + 0x378], 6
call fcn.00538dd6
mov byte [esp + 0x378], 5
mov eax, dword [esp + 0x3c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4979e4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea eax, [edi - 0x10]
mov byte [esp + 0x378], 4
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x497a08
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x54]
mov byte [esp + 0x378], 3
call fcn.0053d5b4
mov byte [esp + 0x378], 0
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x49a5bd
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
jmp 0x49a5bd
cmp eax, 0x802f
jne 0x497a81
mov eax, dword [ebx + 0x568c]
cmp eax, edi
je 0x49a5bd
cmp dword [ebx + 0x108], 2
jne 0x49a5bd
push edi
push 4
lea ecx, [eax + 0x22c]
xor esi, esi
call fcn.004c73c0
jmp 0x49a5bd
cmp eax, 0x8032
jne 0x497b35
lea ecx, [esp + 0x1c]
push ecx
push 0x5afd70
push SysReAllocStringLen
mov dword [esp + 0x20], 4
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
test eax, eax
je 0x497ac2
push edi
call dword [sym.imp.USER32.dll_MessageBeep]
lea ecx, [esp + 0x34]
call fcn.004a4690
jmp 0x49a5e8
mov ecx, dword [esp + 0x1c]
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x1c]
push eax
push edi
push edi
push str.GlobalUserOffline
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x497b1a
mov eax, dword [esp + 0x14]
push eax
lea ecx, [esp + 0x1c]
push ecx
push 4
mov edx, 1
sub edx, dword [esp + 0x24]
push edi
mov dword [esp + 0x28], edx
mov edx, dword [esp + 0x2c]
push str.GlobalUserOffline
push edx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
xor eax, eax
cmp dword [esp + 0x18], edi
setne al
mov dword [0x5f2c30], eax
mov ecx, dword [esp + 0x1c]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push edi
push edi
push 0x27
push edi
call dword [sym.imp.WININET.dll_InternetSetOptionW]
jmp 0x49a5bd
cmp eax, 0x8114
jne 0x497c13
mov ecx, dword [ebx + 0x568c]
add ecx, 0x22c
call fcn.004c63e0
mov esi, eax
cmp esi, edi
je 0x49a105
mov edx, dword [esi + 0x48]
cmp dword [edx - 0xc], edi
lea ebx, [esi + 0x48]
je 0x49a105
lea ecx, [esp + 0x18]
call fcn.004026e0
push ebx
lea ecx, [esp + 0x18]
mov byte [esp + 0x37c], 9
call fcn.004020d0
push 0x59a7f8
push 0x59b53c
lea eax, [esp + 0x1c]
push eax
mov byte [esp + 0x384], 0xa
call fcn.0041cd10
push 0x5afe0c
push 0x59a7f8
lea ecx, [esp + 0x1c]
push ecx
call fcn.0041cd10
push 0x5ae544
push 0x59d270
lea edx, [esp + 0x1c]
push edx
call fcn.0041cd10
push 0x5afe14
push 0x5afe1c
lea eax, [esp + 0x1c]
push eax
call fcn.0041cd10
mov ecx, dword [esp + 0x14]
mov edx, dword [esi + 0xc4]
push ecx
push edx
lea eax, [esp + 0x20]
push 0x5afe20
push eax
call fcn.00405480
lea ecx, [esp + 0x28]
push ecx
call fcn.00462520
add esp, 0x14
lea ecx, [esp + 0x14]
call fcn.004a4690
jmp 0x49a5b4
cmp eax, 0x8113
jne 0x497c45
mov ecx, dword [ebx + 0x568c]
add ecx, 0x22c
call fcn.004c63e0
cmp eax, edi
je 0x49a105
mov eax, dword [eax + 0x44]
mov ecx, 0x5f27f8
call fcn.004d47f0
jmp 0x49a5bd
cmp eax, 0x8116
jne 0x497d32
mov ecx, dword [ebx + 0x568c]
add ecx, 0x22c
call fcn.004c63e0
cmp eax, edi
je 0x49a105
mov edx, dword [eax + 0x48]
cmp dword [edx - 0xc], edi
lea esi, [eax + 0x48]
je 0x49a105
lea ebx, [eax + 0xc4]
mov eax, dword [ebx]
cmp dword [eax - 0xc], edi
je 0x49a105
lea edi, [esp + 0x20]
call fcn.004b94e0
push ebx
lea ecx, [esp + 0x1c]
mov byte [esp + 0x37c], 0xb
call fcn.004020d0
lea ebx, [esp + 0x18]
mov byte [esp + 0x378], 0xc
call fcn.0045f6a0
push 0
push ecx
mov ecx, esp
mov dword [esp + 0x38], esp
push 0x5f2864
call fcn.004020d0
push ecx
mov byte [esp + 0x384], 0xd
mov ecx, esp
mov dword [esp + 0x48], esp
push 0x592720
call fcn.00402390
push 0
push ecx
mov byte [esp + 0x38c], 0xe
mov edx, ebx
mov ecx, esp
mov dword [esp + 0x30], esp
push edx
call fcn.004020d0
push ecx
mov byte [esp + 0x390], 0xf
mov ecx, esp
mov dword [esp + 0x2c], esp
push esi
call fcn.004020d0
mov eax, edi
push eax
mov byte [esp + 0x394], 0xc
call fcn.004b9590
mov ecx, ebx
call fcn.004a4690
mov ecx, edi
call fcn.004b9560
jmp 0x49a5bd
cmp eax, 0x8047
jne 0x497d69
mov eax, dword [ebx + 0x568c]
cmp eax, edi
je 0x49a5bd
cmp dword [ebx + 0x108], 2
jne 0x49a5bd
push edi
push 8
lea ecx, [eax + 0x22c]
xor esi, esi
call fcn.004c73c0
jmp 0x49a5bd
cmp eax, 0x8031
jne 0x497da0
mov eax, dword [ebx + 0x568c]
cmp eax, edi
je 0x49a5bd
cmp dword [ebx + 0x108], 2
jne 0x49a5bd
push edi
push 7
lea ecx, [eax + 0x22c]
xor esi, esi
call fcn.004c73c0
jmp 0x49a5bd
cmp eax, 0x8030
jne 0x497dd7
mov eax, dword [ebx + 0x568c]
cmp eax, edi
je 0x49a5bd
cmp dword [ebx + 0x108], 2
jne 0x49a5bd
push edi
push 6
lea ecx, [eax + 0x22c]
xor esi, esi
call fcn.004c73c0
jmp 0x49a5bd
cmp eax, 0x8077
jne 0x497e19
lea ecx, [esp + 0x18]
call fcn.004026e0
mov byte [esp + 0x378], 0x10
mov ecx, dword [0x5f21f0]
push ecx
lea edx, [esp + 0x1c]
push 0x5afe60
push edx
call fcn.00405480
mov eax, dword [esp + 0x24]
add esp, 0xc
push edi
push edi
push eax
call fcn.00539414
jmp 0x49a5b4
cmp eax, 0x8107
jne 0x497e5d
mov eax, dword [ebx + 0x568c]
mov ecx, dword [eax + 0x284]
mov edx, dword [eax + 0x298]
add edx, ecx
test edx, edx
jle 0x49a5bd
mov eax, dword [eax + 0x2ac]
push 0x13af
lea ecx, [ebx + 0xad4]
mov dword [ebx + 0x156c], eax
call fcn.004b2210
jmp 0x49a5bd
cmp eax, 0x810d
jne 0x497ea1
mov eax, dword [ebx + 0x568c]
mov ecx, dword [eax + 0x284]
mov edx, dword [eax + 0x298]
add edx, ecx
test edx, edx
jle 0x49a5bd
mov eax, dword [eax + 0x2ac]
push 0x13b0
lea ecx, [ebx + 0xad4]
mov dword [ebx + 0x156c], eax
call fcn.004b2210
jmp 0x49a5bd
cmp eax, 0x8108
jne 0x497ee5
mov eax, dword [ebx + 0x568c]
mov ecx, dword [eax + 0x284]
mov edx, dword [eax + 0x298]
add edx, ecx
test edx, edx
jle 0x49a5bd
mov eax, dword [eax + 0x2ac]
push 0x13b5
lea ecx, [ebx + 0xad4]
mov dword [ebx + 0x156c], eax
call fcn.004b2210
jmp 0x49a5bd
cmp eax, 0x8109
jne 0x497f29
mov eax, dword [ebx + 0x568c]
mov ecx, dword [eax + 0x284]
mov edx, dword [eax + 0x298]
add edx, ecx
test edx, edx
jle 0x49a5bd
mov eax, dword [eax + 0x2ac]
push 0x13b6
lea ecx, [ebx + 0xad4]
mov dword [ebx + 0x156c], eax
call fcn.004b2210
jmp 0x49a5bd
cmp eax, 0x810a
jne 0x497f41
mov ebx, dword [ebx + 0x568c]
push edi
call fcn.004d6080
jmp 0x49a5bd
cmp eax, 0x805a
jne 0x497f61
mov ecx, dword [ebx + 0x568c]
mov ecx, dword [ecx + 0x2ac]
push ebx
xor ebx, ebx
call fcn.00489810
jmp 0x49a5bd
cmp eax, 0x8068
jne 0x497f79
push 0x55f2
mov ecx, ebx
call fcn.0048e4d0
jmp 0x49a5bd
cmp eax, 0x8069
jne 0x497f91
push 0x55f3
mov ecx, ebx
call fcn.0048e4d0
jmp 0x49a5bd
cmp eax, 0x8081
jne 0x497fbd
mov ecx, dword [ebx + 0x568c]
add ecx, 0x22c
call fcn.004c63e0
cmp eax, edi
je 0x49a105
mov esi, eax
call fcn.004c9470
jmp 0x49a5bd
cmp eax, 0x80e1
jne 0x498053
lea ecx, [esp + 0x3b]
call fcn.00424640
lea edx, [esp + 0x54]
push edx
mov byte [esp + 0x37c], 0x11
call fcn.0043a840
lea ecx, [esp + 0x54]
mov byte [esp + 0x378], 0x12
call fcn.0053bd19
cmp dword [esp + 0xd8], edi
je 0x49802c
mov eax, dword [ebx + 0x20]
push edi
push edi
push 0x10
push eax
mov dword [ebx + 0x99a8], edi
call dword [sym.imp.USER32.dll_PostMessageW]
mov ecx, dword [0x5f2864]
push 5
push edi
push str._rerun
push ecx
push str.open
push edi
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [esp + 0x54]
mov byte [esp + 0x378], 0x11
call fcn.0043a900
lea ecx, [esp + 0x3b]
mov byte [esp + 0x378], 0
call fcn.00424530
jmp 0x49a5bd
cmp eax, 0x807f
jne 0x49808e
lea esi, [esp + 0x54]
call fcn.004209a0
mov ecx, esi
mov byte [esp + 0x378], 0x13
call fcn.0053bd19
mov byte [esp + 0x378], 0
mov ecx, esi
mov dword [esp + 0x54], vtable.CDlgClearLog.0
call fcn.0053b5c7
jmp 0x49a5bd
cmp eax, 0x80e5
jne 0x4980c6
lea edx, [esp + 0x54]
push edx
call fcn.00421d30
lea ecx, [esp + 0x54]
mov byte [esp + 0x378], 0x14
call fcn.0053bd19
lea ecx, [esp + 0x54]
mov byte [esp + 0x378], 0
call fcn.00421e20
jmp 0x49a5bd
cmp eax, 0x8011
jne 0x4980db
push edi
call fcn.004f39c0
add esp, 4
jmp 0x49a5bd
cmp eax, 0x8038
jne 0x498101
mov ebx, dword [ebx + 0x568c]
cmp ebx, edi
je 0x49a5bd
add ebx, 0x22c
push ebx
call fcn.004c6e80
jmp 0x49a5bd
cmp eax, 0x804f
je 0x49a5bd
cmp eax, 0x80e0
jne 0x49811f
mov esi, ebx
call fcn.0048d960
jmp 0x49a5bd
cmp eax, 0x80de
jne 0x498191
mov ebx, dword [ebx + 0x568c]
cmp ebx, edi
je 0x49a5bd
lea ecx, [ebx + 0x22c]
call fcn.004c63e0
mov esi, eax
cmp esi, edi
je 0x49a105
xor eax, eax
cmp dword [esi + 0x94], edi
mov ecx, 0x5f27f8
sete al
push eax
mov eax, dword [esi + 0x44]
call fcn.004d3a40
xor eax, eax
cmp dword [esi + 0x94], edi
mov ecx, 0x5f27f8
sete al
push eax
mov eax, dword [esi + 0x44]
call fcn.004d3aa0
xor eax, eax
cmp dword [esi + 0x94], edi
sete al
mov dword [esi + 0x94], eax
jmp 0x49a5bd
cmp eax, 0x80fc
jne 0x4981ea
mov ebx, dword [ebx + 0x568c]
cmp ebx, edi
je 0x49a5bd
lea ecx, [ebx + 0x22c]
call fcn.004c63e0
mov esi, eax
cmp esi, edi
je 0x49a105
xor eax, eax
cmp dword [esi + 0x98], edi
mov ecx, 0x5f27f8
sete al
push eax
mov eax, dword [esi + 0x44]
call fcn.004d3b00
xor ecx, ecx
cmp dword [esi + 0x98], edi
sete cl
mov dword [esi + 0x98], ecx
jmp 0x49a5bd
cmp eax, 0x8048
jne 0x49825e
cmp dword [ebx + 0x953c], edi
jne 0x498240
push 0x1ac
call fcn.005308cb
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, edi
mov byte [esp + 0x378], 0x15
je 0x49821e
push eax
call fcn.0046ff20
jmp 0x498220
xor eax, eax
mov byte [esp + 0x378], 0
mov dword [ebx + 0x953c], eax
mov edx, dword [eax]
push ebx
mov ecx, eax
mov eax, dword [edx + 0x134]
push 0xdf
call eax
mov ecx, dword [ebx + 0x953c]
push edi
call fcn.0053325a
mov ecx, dword [ebx + 0x953c]
push 1
call fcn.00537d86
jmp 0x49a5bd
cmp eax, 0x8053
jne 0x498326
lea ecx, [esp + 0x18]
call fcn.004026e0
mov bl, 0x16
mov byte [esp + 0x378], bl
mov ecx, dword [0x5f21f0]
push ecx
lea edx, [esp + 0x1c]
push 0x5aff10
push edx
call fcn.00405480
mov eax, dword [esp + 0x24]
add esp, 0xc
push edi
push 4
push eax
call fcn.00539414
cmp eax, 6
jne 0x49a5b4
call fcn.00462930
test eax, eax
je 0x4982e1
lea esi, [esp + 0x54]
call fcn.0041d780
mov ecx, esi
mov byte [esp + 0x378], 0x17
call fcn.0053bd19
mov byte [esp + 0x378], bl
mov ecx, esi
mov dword [esp + 0x54], vtable.CDlg360Warn.0
call fcn.0053b5c7
push str.TangoBrowser
lea ecx, [esp + 0x34]
call fcn.00402390
mov byte [esp + 0x378], 0x18
mov ecx, dword [0x5f21f0]
mov edx, dword [0x5f2864]
push ecx
push edx
push eax
call fcn.004b7970
add esp, 0xc
lea ecx, [esp + 0x30]
call fcn.004a4690
mov dword [0x5f2264], 1
jmp 0x49a5b4
cmp eax, 0x8056
jne 0x4983ba
push edi
push 4
push str.b__rYI
call fcn.00539414
cmp eax, 6
jne 0x49a5bd
push edi
push 0x26
lea eax, [esp + 0x5c]
push eax
push edi
mov word [esp + 0x64], di
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
test eax, eax
je 0x498382
lea eax, [esp + 0x54]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
cmp cx, di
jne 0x498366
mov edi, eax
mov ecx, 0x10
mov esi, str.internet_exploreriexplore.exe
rep movsd dword es:[edi], dword [esi]
xor edi, edi
push str.TangoBrowser
lea ecx, [esp + 0x34]
call fcn.00402390
lea ecx, [esp + 0x54]
push ecx
push eax
mov byte [esp + 0x380], 0x19
call fcn.004b8d90
add esp, 8
lea ecx, [esp + 0x30]
call fcn.004a4690
mov dword [0x5f2264], edi
jmp 0x49a5bd
cmp eax, 0x8118
jne 0x4983f3
lea edx, [esp + 0x54]
push edx
call fcn.00428f00
lea ecx, [esp + 0x54]
mov byte [esp + 0x378], 0x1a
call fcn.0053bd19
lea eax, [esp + 0x54]
push eax
mov byte [esp + 0x37c], 0
call fcn.00428f90
jmp 0x49a5bd
cmp eax, 0x8119
jne 0x498501
lea ecx, [esp + 0x20]
call fcn.004026e0
lea ecx, [esp + 0x14]
call fcn.004026e0
lea ecx, [esp + 0x1c]
call fcn.004026e0
lea ecx, [esp + 0x18]
call fcn.004026e0
push edi
lea ecx, [esp + 0x20]
push ecx
lea edx, [esp + 0x1c]
push edx
lea eax, [esp + 0x2c]
push eax
xor ecx, ecx
lea edx, [esp + 0x28]
xor eax, eax
mov byte [esp + 0x388], 0x1e
call fcn.0051e3a0
mov ecx, dword [0x5f2958]
add esp, 0x10
xor eax, eax
cmp ecx, edi
mov dword [0x5f2930], edi
jle 0x498489
lea esp, [esp]
cmp eax, edi
jl 0x4979a2
cmp eax, ecx
jge 0x4979a2
mov ecx, dword [0x5f2954]
mov edx, dword [ecx + eax*4]
mov dword [edx + 0x1c], edi
mov ecx, dword [0x5f2958]
add eax, 1
cmp eax, ecx
jl 0x498460
mov eax, dword [0x5f2c24]
push 0x12c
add eax, 0x424
push edi
push eax
call fcn.00557890
mov ebx, dword [0x5f2800]
add esp, 0xc
xor esi, esi
cmp ebx, edi
jle 0x4984d3
mov edi, dword [sym.imp.USER32.dll_PostMessageW]
mov eax, esi
mov ecx, 0x5f27f8
call fcn.004d04a0
push 0
push 0
push 0x4ce
push eax
call edi
add esi, 1
cmp esi, ebx
jl 0x4984b4
mov ecx, 0x5f2928
call fcn.004b30f0
lea ecx, [esp + 0x18]
call fcn.004a4690
lea ecx, [esp + 0x1c]
call fcn.004a4690
lea ecx, [esp + 0x14]
call fcn.004a4690
lea ecx, [esp + 0x20]
jmp 0x49a5b8
cmp eax, 0x811a
jne 0x498746
lea ecx, [esp + 0x30]
call fcn.004026e0
lea ecx, [esp + 0x3c]
call fcn.004026e0
lea ecx, [esp + 0x20]
call fcn.004026e0
lea ecx, [esp + 0x1c]
call fcn.004026e0
push edi
lea ecx, [esp + 0x24]
push ecx
lea edx, [esp + 0x44]
push edx
lea eax, [esp + 0x3c]
mov ecx, 1
push eax
lea edx, [esp + 0x2c]
mov eax, ecx
mov byte [esp + 0x388], 0x22
call fcn.0051e3a0
mov ecx, dword [0x5f2958]
add esp, 0x10
xor eax, eax
cmp ecx, edi
mov dword [0x5f2930], 1
jle 0x49859a
cmp eax, edi
jl 0x4979a2
cmp eax, ecx
jge 0x4979a2
mov ecx, dword [0x5f2954]
mov edx, dword [ecx + eax*4]
mov dword [edx + 0x1c], edi
mov ecx, dword [0x5f2958]
add eax, 1
cmp eax, ecx
jl 0x498571
lea ecx, [esp + 0x14]
call fcn.004026e0
mov byte [esp + 0x378], 0x23
mov eax, dword [0x5f296c]
mov ecx, dword [0x5f2968]
mov edx, dword [0x5f2970]
push eax
push ecx
push edx
lea eax, [esp + 0x20]
push str._s_s:_d
push eax
call fcn.00405480
mov eax, dword [esp + 0x28]
mov ecx, dword [eax - 0xc]
add esp, 0x14
cmp ecx, 0x64
jge 0x498627
push eax
lea ecx, [esp + 0x1c]
call fcn.00426b80
mov byte [esp + 0x378], 0x24
mov ebx, dword [0x5f2c24]
lea esi, [esp + 0x18]
add ebx, 0x424
call fcn.00428eb0
mov edx, ebx
mov cl, byte [eax]
mov byte [edx], cl
add eax, 1
add edx, 1
test cl, cl
jne 0x498606
lea ecx, [esp + 0x18]
mov byte [esp + 0x378], 0x23
call fcn.004a4690
jmp 0x498651
mov edx, dword [0x5f2c24]
mov ecx, 0x592720
add edx, 0x424
jmp 0x498640
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
cmp ax, di
jne 0x498640
push 0x5f292c
lea ecx, [esp + 0x18]
call fcn.00402310
mov eax, dword [esp + 0x14]
cmp dword [eax - 0xc], 0x9b
jge 0x4986b6
push eax
lea ecx, [esp + 0x1c]
call fcn.00426b80
mov byte [esp + 0x378], 0x25
mov ebx, dword [0x5f2c24]
lea esi, [esp + 0x18]
add ebx, 0x4ec
call fcn.00428eb0
mov edx, ebx
mov cl, byte [eax]
mov byte [edx], cl
add eax, 1
add edx, 1
test cl, cl
jne 0x498695
lea ecx, [esp + 0x18]
mov byte [esp + 0x378], 0x23
call fcn.004a4690
jmp 0x4986d8
mov edx, dword [0x5f2c24]
mov ecx, 0x592720
add edx, 0x4ec
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
cmp ax, di
jne 0x4986c7
mov ebx, dword [0x5f2800]
xor esi, esi
cmp ebx, edi
jle 0x49870f
mov edi, dword [sym.imp.USER32.dll_PostMessageW]
lea ebx, [ebx]
mov eax, esi
mov ecx, 0x5f27f8
call fcn.004d04a0
push 0
push 0
push 0x4ce
push eax
call edi
add esi, 1
cmp esi, ebx
jl 0x4986f0
mov ecx, 0x5f2928
call fcn.004b30f0
lea ecx, [esp + 0x14]
call fcn.004a4690
lea ecx, [esp + 0x1c]
call fcn.004a4690
lea ecx, [esp + 0x20]
call fcn.004a4690
lea ecx, [esp + 0x3c]
call fcn.004a4690
lea ecx, [esp + 0x30]
jmp 0x49a5b8
cmp eax, 0x807d
jne 0x49875e
push 0x5627
mov ecx, ebx
call fcn.0048e4d0
jmp 0x49a5bd
cmp eax, 0x8073
jne 0x498776
push 0x5609
mov ecx, ebx
call fcn.0048e4d0
jmp 0x49a5bd
cmp eax, 0x80d0
jne 0x49878e
push 0x5687
mov ecx, ebx
call fcn.0048e4d0
jmp 0x49a5bd
cmp eax, 0x8092
jne 0x4987a6
push 0x5640
mov ecx, ebx
call fcn.0048e4d0
jmp 0x49a5bd
cmp eax, 0x8093
jne 0x4987be
push 0x5642
mov ecx, ebx
call fcn.0048e4d0
jmp 0x49a5bd
cmp eax, 0x8094
jne 0x4987d6
push 0x5645
mov ecx, ebx
call fcn.0048e4d0
jmp 0x49a5bd
cmp eax, 0x8095
jne 0x4987ee
push 0x5646
mov ecx, ebx
call fcn.0048e4d0
jmp 0x49a5bd
cmp eax, 0x8096
jne 0x498806
push 0x5641
mov ecx, ebx
call fcn.0048e4d0
jmp 0x49a5bd
cmp eax, 0x8097
jne 0x49881e
push 0x5644
mov ecx, ebx
call fcn.0048e4d0
jmp 0x49a5bd
cmp eax, 0x80ea
jne 0x498836
push 0x59e2
mov ecx, ebx
call fcn.0048e4d0
jmp 0x49a5bd
cmp eax, 0x80eb
jne 0x49884e
push 0x59e3
mov ecx, ebx
call fcn.0048e4d0
jmp 0x49a5bd
cmp eax, 0x80ec
jne 0x498866
push 0x59e4
mov ecx, ebx
call fcn.0048e4d0
jmp 0x49a5bd
cmp eax, 0x80ed
jne 0x49887e
push 0x59e5
mov ecx, ebx
call fcn.0048e4d0
jmp 0x49a5bd
cmp eax, 0x80ee
jne 0x498896
push 0x59e6
mov ecx, ebx
call fcn.0048e4d0
jmp 0x49a5bd
cmp eax, 0x80ef
jne 0x4988ae
push 0x59e7
mov ecx, ebx
call fcn.0048e4d0
jmp 0x49a5bd
cmp eax, 0x80f1
jne 0x4988c6
push 0x59e9
mov ecx, ebx
call fcn.0048e4d0
jmp 0x49a5bd
cmp eax, 0x80f0
jne 0x4988de
push 0x59e8
mov ecx, ebx
call fcn.0048e4d0
jmp 0x49a5bd
cmp eax, 0x80f2
jne 0x4988f6
push 0x59ea
mov ecx, ebx
call fcn.0048e4d0
jmp 0x49a5bd
cmp eax, 0x80f3
jne 0x49890e
push 0x59eb
mov ecx, ebx
call fcn.0048e4d0
jmp 0x49a5bd
cmp eax, 0x80f4
jne 0x498926
push 0x59ec
mov ecx, ebx
call fcn.0048e4d0
jmp 0x49a5bd
cmp eax, 0x80f6
jne 0x49893e
push 0x5617
mov ecx, ebx
call fcn.0048e4d0
jmp 0x49a5bd
cmp eax, 0x80f7
jne 0x498956
push 0x5615
mov ecx, ebx
call fcn.0048e4d0
jmp 0x49a5bd
cmp eax, 0x80f8
jne 0x49896e
push 0x5616
mov ecx, ebx
call fcn.0048e4d0
jmp 0x49a5bd
cmp eax, 0x80f9
jne 0x498986
push 0x561a
mov ecx, ebx
call fcn.0048e4d0
jmp 0x49a5bd
cmp eax, 0x80fa
jne 0x49899e
push 0x5618
mov ecx, ebx
call fcn.0048e4d0
jmp 0x49a5bd
cmp eax, 0x80fb
jne 0x4989b6
push 0x5619
mov ecx, ebx
call fcn.0048e4d0
jmp 0x49a5bd
cmp eax, 0x80cf
jne 0x498a1f
lea esi, [esp + 0x54]
call fcn.0041fb00
mov ecx, esi
mov byte [esp + 0x378], 0x26
call fcn.0053bd19
cmp eax, 1
jne 0x498a01
mov eax, ebx
call fcn.00479ed0
lea eax, [ebx + 0xad4]
call fcn.004acfd0
mov ecx, dword [ebx + 0x1ec4]
push edi
push edi
push ecx
call dword [sym.imp.USER32.dll_InvalidateRect]
mov dword [ebx + 0x1c68], edi
mov byte [esp + 0x378], 0
lea ecx, [esp + 0x54]
mov dword [esp + 0x54], vtable.CDlgButtonView.0
call fcn.0053b5c7
jmp 0x49a5bd
cmp eax, 0x80ce
jne 0x498a5f
xor edx, edx
cmp dword [0x5f22ac], edi
sete dl
mov dword [0x5f22ac], edx
cmp dword [ebx + 0x108], 2
jne 0x49a5bd
mov eax, ebx
call fcn.00479ed0
mov eax, dword [ebx + 0x1ec4]
push edi
push edi
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
jmp 0x49a5bd
cmp eax, 0x811d
jne 0x498a97
lea ecx, [esp + 0x54]
push ecx
call fcn.00432010
lea ecx, [esp + 0x54]
mov byte [esp + 0x378], 0x27
call fcn.0053bd19
lea ecx, [esp + 0x54]
mov byte [esp + 0x378], 0
call fcn.00432170
jmp 0x49a5bd
cmp eax, 0x811e
jne 0x498cb7
lea ecx, [esp + 0x20]
call fcn.004026e0
lea ecx, [esp + 0x14]
call fcn.004026e0
lea ecx, [esp + 0x18]
call fcn.004026e0
lea ecx, [esp + 0x1c]
call fcn.004026e0
push 1
lea edx, [esp + 0x20]
push edx
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x20]
push ecx
lea edx, [esp + 0x30]
push edx
mov byte [esp + 0x38c], 0x2b
call fcn.0046bc30
mov eax, dword [esp + 0x34]
add esp, 0x14
cmp dword [eax - 0xc], edi
jne 0x498b03
push 0x5affb8
lea ecx, [esp + 0x24]
call fcn.004021d0
mov ecx, dword [esp + 0x14]
cmp dword [ecx - 0xc], edi
jne 0x498bb8
lea edx, [esp + 0x54]
push edx
call fcn.0041f400
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0xd0]
mov byte [esp + 0x37c], 0x2c
call fcn.00402310
lea ecx, [esp + 0x54]
call fcn.0053bd19
cmp eax, 1
jne 0x498c74
lea ecx, [esp + 0xcc]
push ecx
lea ecx, [esp + 0x24]
call fcn.00402310
lea edx, [esp + 0xd0]
push edx
lea ecx, [esp + 0x18]
call fcn.00402310
lea eax, [esp + 0xd4]
push eax
lea ecx, [esp + 0x1c]
call fcn.00402310
lea ecx, [esp + 0xd8]
push ecx
lea ecx, [esp + 0x20]
call fcn.00402310
push 1
lea edx, [esp + 0x20]
push edx
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x20]
push ecx
lea edx, [esp + 0x30]
push edx
call fcn.0046bfe0
add esp, 0x14
lea ecx, [esp + 0x54]
mov byte [esp + 0x378], 0x2b
call fcn.0041f580
mov eax, dword [esp + 0x14]
mov ecx, dword [ebx + 0x568c]
push 1
push edi
push 0xffffffffffffffff
push 1
push 1
push edi
push edi
push eax
push ecx
call fcn.004d7180
mov ecx, dword [ebx + 0x568c]
add ecx, 0x22c
call fcn.004c62b0
mov ebx, eax
cmp ebx, edi
je 0x498c62
lea edx, [esp + 0x20]
lea ecx, [ebx + 0x14]
push edx
call fcn.00402310
mov ecx, ebx
call fcn.004c5620
mov esi, dword [esp + 0x20]
mov ecx, 0x5f27f8
call fcn.004d45c0
mov ecx, ebx
call fcn.004c5620
mov esi, str.GAME1
mov ecx, 0x5f27f8
call fcn.004d4660
push str.gameman.txt
lea eax, [esp + 0x34]
push 0x5f287c
push eax
call fcn.00401ba0
add esp, 0xc
mov byte [esp + 0x378], 0x2d
mov esi, dword [eax]
mov ecx, ebx
call fcn.004c5620
mov ecx, 0x5f27f8
call fcn.004d4700
lea ecx, [esp + 0x30]
call fcn.004a4690
lea ecx, [esp + 0x1c]
call fcn.004a4690
lea ecx, [esp + 0x18]
jmp 0x4984ea
lea ecx, [esp + 0x54]
mov byte [esp + 0x378], 0x2b
call fcn.0041f580
lea ecx, [esp + 0x1c]
call fcn.004a4690
lea ecx, [esp + 0x18]
call fcn.004a4690
lea ecx, [esp + 0x14]
call fcn.004a4690
lea ecx, [esp + 0x20]
call fcn.004a4690
lea ecx, [esp + 0x34]
call fcn.004a4690
jmp 0x49a5e8
cmp eax, 0x811f
jne 0x498eac
lea ecx, [esp + 0x20]
call fcn.004026e0
lea ecx, [esp + 0x14]
call fcn.004026e0
lea ecx, [esp + 0x1c]
call fcn.004026e0
lea ecx, [esp + 0x18]
call fcn.004026e0
push 2
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x30]
push ecx
mov byte [esp + 0x38c], 0x31
call fcn.0046bc30
mov edx, dword [esp + 0x34]
add esp, 0x14
cmp dword [edx - 0xc], edi
jne 0x498d23
push 0x5affd0
lea ecx, [esp + 0x24]
call fcn.004021d0
mov eax, dword [esp + 0x14]
mov eax, dword [eax - 0xc]
cmp eax, edi
jne 0x498dda
lea ecx, [esp + 0x54]
push ecx
call fcn.0041f400
lea edx, [esp + 0x20]
push edx
lea ecx, [esp + 0xd0]
mov byte [esp + 0x37c], 0x32
call fcn.00402310
lea ecx, [esp + 0x54]
call fcn.0053bd19
cmp eax, 1
jne 0x498e89
lea eax, [esp + 0xcc]
push eax
lea ecx, [esp + 0x24]
call fcn.00402310
lea ecx, [esp + 0xd0]
push ecx
lea ecx, [esp + 0x18]
call fcn.00402310
lea edx, [esp + 0xd4]
push edx
lea ecx, [esp + 0x20]
call fcn.00402310
lea eax, [esp + 0xd8]
push eax
lea ecx, [esp + 0x1c]
call fcn.00402310
push 2
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x30]
push ecx
call fcn.0046bfe0
add esp, 0x14
lea ecx, [esp + 0x54]
mov byte [esp + 0x378], 0x31
call fcn.0041f580
mov edx, dword [esp + 0x14]
mov eax, dword [ebx + 0x568c]
push 1
push edi
push 0xffffffffffffffff
push 1
push 1
push edi
push edi
push edx
push eax
call fcn.004d7180
mov ecx, dword [ebx + 0x568c]
add ecx, 0x22c
call fcn.004c62b0
mov ebx, eax
cmp ebx, edi
je 0x4984dd
lea edx, [esp + 0x20]
lea ecx, [ebx + 0x14]
push edx
call fcn.00402310
mov ecx, ebx
call fcn.004c5620
mov esi, dword [esp + 0x20]
mov ecx, 0x5f27f8
call fcn.004d45c0
mov ecx, ebx
call fcn.004c5620
mov esi, str.GAME2
mov ecx, 0x5f27f8
call fcn.004d4660
push str.gameman.txt
lea eax, [esp + 0x34]
push 0x5f287c
push eax
call fcn.00401ba0
add esp, 0xc
mov byte [esp + 0x378], 0x33
mov esi, dword [eax]
mov ecx, ebx
call fcn.004c5620
mov ecx, 0x5f27f8
call fcn.004d4700
lea ecx, [esp + 0x30]
call fcn.004a4690
jmp 0x4984dd
mov byte [esp + 0x378], 0x31
lea ecx, [esp + 0x54]
call fcn.0041f580
lea ecx, [esp + 0x18]
call fcn.004a4690
lea ecx, [esp + 0x1c]
jmp 0x498c92
cmp eax, 0x8120
jne 0x49906f
lea ecx, [esp + 0x20]
call fcn.004026e0
lea ecx, [esp + 0x14]
call fcn.004026e0
lea ecx, [esp + 0x1c]
call fcn.004026e0
lea ecx, [esp + 0x18]
call fcn.004026e0
push 3
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x30]
push ecx
mov byte [esp + 0x38c], 0x37
call fcn.0046bc30
mov edx, dword [esp + 0x34]
add esp, 0x14
cmp dword [edx - 0xc], edi
jne 0x498f18
push 0x5affe8
lea ecx, [esp + 0x24]
call fcn.004021d0
mov eax, dword [esp + 0x14]
mov eax, dword [eax - 0xc]
cmp eax, edi
jne 0x498fcf
lea ecx, [esp + 0x54]
push ecx
call fcn.0041f400
lea edx, [esp + 0x20]
push edx
lea ecx, [esp + 0xd0]
mov byte [esp + 0x37c], 0x38
call fcn.00402310
lea ecx, [esp + 0x54]
call fcn.0053bd19
cmp eax, 1
jne 0x499062
lea eax, [esp + 0xcc]
push eax
lea ecx, [esp + 0x24]
call fcn.00402310
lea ecx, [esp + 0xd0]
push ecx
lea ecx, [esp + 0x18]
call fcn.00402310
lea edx, [esp + 0xd4]
push edx
lea ecx, [esp + 0x20]
call fcn.00402310
lea eax, [esp + 0xd8]
push eax
lea ecx, [esp + 0x1c]
call fcn.00402310
push 3
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x30]
push ecx
call fcn.0046bfe0
add esp, 0x14
lea ecx, [esp + 0x54]
mov byte [esp + 0x378], 0x37
call fcn.0041f580
mov edx, dword [esp + 0x14]
mov eax, dword [ebx + 0x568c]
push 1
push edi
push 0xffffffffffffffff
push 1
push 1
push edi
push edi
push edx
push eax
call fcn.004d7180
mov ecx, dword [ebx + 0x568c]
add ecx, 0x22c
call fcn.004c62b0
mov ebx, eax
cmp ebx, edi
je 0x4984dd
lea edx, [esp + 0x20]
lea ecx, [ebx + 0x14]
push edx
call fcn.00402310
mov ecx, ebx
call fcn.004c5620
mov esi, dword [esp + 0x20]
mov ecx, 0x5f27f8
call fcn.004d45c0
mov ecx, ebx
call fcn.004c5620
mov esi, str.GAME3
mov ecx, 0x5f27f8
call fcn.004d4660
push str.gameman.txt
lea eax, [esp + 0x34]
push 0x5f287c
push eax
call fcn.00401ba0
add esp, 0xc
mov byte [esp + 0x378], 0x39
jmp 0x498e68
mov byte [esp + 0x378], 0x37
jmp 0x498e91
cmp eax, 0x8121
jne 0x499232
lea ecx, [esp + 0x20]
call fcn.004026e0
lea ecx, [esp + 0x14]
call fcn.004026e0
lea ecx, [esp + 0x1c]
call fcn.004026e0
lea ecx, [esp + 0x18]
call fcn.004026e0
push 4
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x30]
push ecx
mov byte [esp + 0x38c], 0x3d
call fcn.0046bc30
mov edx, dword [esp + 0x34]
add esp, 0x14
cmp dword [edx - 0xc], edi
jne 0x4990db
push 0x5b0000
lea ecx, [esp + 0x24]
call fcn.004021d0
mov eax, dword [esp + 0x14]
mov eax, dword [eax - 0xc]
cmp eax, edi
jne 0x499192
lea ecx, [esp + 0x54]
push ecx
call fcn.0041f400
lea edx, [esp + 0x20]
push edx
lea ecx, [esp + 0xd0]
mov byte [esp + 0x37c], 0x3e
call fcn.00402310
lea ecx, [esp + 0x54]
call fcn.0053bd19
cmp eax, 1
jne 0x499225
lea eax, [esp + 0xcc]
push eax
lea ecx, [esp + 0x24]
call fcn.00402310
lea ecx, [esp + 0xd0]
push ecx
lea ecx, [esp + 0x18]
call fcn.00402310
lea edx, [esp + 0xd4]
push edx
lea ecx, [esp + 0x20]
call fcn.00402310
lea eax, [esp + 0xd8]
push eax
lea ecx, [esp + 0x1c]
call fcn.00402310
push 4
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x30]
push ecx
call fcn.0046bfe0
add esp, 0x14
lea ecx, [esp + 0x54]
mov byte [esp + 0x378], 0x3d
call fcn.0041f580
mov edx, dword [esp + 0x14]
mov eax, dword [ebx + 0x568c]
push 1
push edi
push 0xffffffffffffffff
push 1
push 1
push edi
push edi
push edx
push eax
call fcn.004d7180
mov ecx, dword [ebx + 0x568c]
add ecx, 0x22c
call fcn.004c62b0
mov ebx, eax
cmp ebx, edi
je 0x4984dd
lea edx, [esp + 0x20]
lea ecx, [ebx + 0x14]
push edx
call fcn.00402310
mov ecx, ebx
call fcn.004c5620
mov esi, dword [esp + 0x20]
mov ecx, 0x5f27f8
call fcn.004d45c0
mov ecx, ebx
call fcn.004c5620
mov esi, str.GAME4
mov ecx, 0x5f27f8
call fcn.004d4660
push str.gameman.txt
lea eax, [esp + 0x34]
push 0x5f287c
push eax
call fcn.00401ba0
add esp, 0xc
mov byte [esp + 0x378], 0x3f
jmp 0x498e68
mov byte [esp + 0x378], 0x3d
jmp 0x498e91
cmp eax, 0x8122
jne 0x4993f5
lea ecx, [esp + 0x20]
call fcn.004026e0
lea ecx, [esp + 0x14]
call fcn.004026e0
lea ecx, [esp + 0x1c]
call fcn.004026e0
lea ecx, [esp + 0x18]
call fcn.004026e0
push 5
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x30]
push ecx
mov byte [esp + 0x38c], 0x43
call fcn.0046bc30
mov edx, dword [esp + 0x34]
add esp, 0x14
cmp dword [edx - 0xc], edi
jne 0x49929e
push 0x5b0018
lea ecx, [esp + 0x24]
call fcn.004021d0
mov eax, dword [esp + 0x14]
mov eax, dword [eax - 0xc]
cmp eax, edi
jne 0x499355
lea ecx, [esp + 0x54]
push ecx
call fcn.0041f400
lea edx, [esp + 0x20]
push edx
lea ecx, [esp + 0xd0]
mov byte [esp + 0x37c], 0x44
call fcn.00402310
lea ecx, [esp + 0x54]
call fcn.0053bd19
cmp eax, 1
jne 0x4993e8
lea eax, [esp + 0xcc]
push eax
lea ecx, [esp + 0x24]
call fcn.00402310
lea ecx, [esp + 0xd0]
push ecx
lea ecx, [esp + 0x18]
call fcn.00402310
lea edx, [esp + 0xd4]
push edx
lea ecx, [esp + 0x20]
call fcn.00402310
lea eax, [esp + 0xd8]
push eax
lea ecx, [esp + 0x1c]
call fcn.00402310
push 5
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x30]
push ecx
call fcn.0046bfe0
add esp, 0x14
lea ecx, [esp + 0x54]
mov byte [esp + 0x378], 0x43
call fcn.0041f580
mov edx, dword [esp + 0x14]
mov eax, dword [ebx + 0x568c]
push 1
push edi
push 0xffffffffffffffff
push 1
push 1
push edi
push edi
push edx
push eax
call fcn.004d7180
mov ecx, dword [ebx + 0x568c]
add ecx, 0x22c
call fcn.004c62b0
mov ebx, eax
cmp ebx, edi
je 0x4984dd
lea edx, [esp + 0x20]
lea ecx, [ebx + 0x14]
push edx
call fcn.00402310
mov ecx, ebx
call fcn.004c5620
mov esi, dword [esp + 0x20]
mov ecx, 0x5f27f8
call fcn.004d45c0
mov ecx, ebx
call fcn.004c5620
mov esi, str.GAME5
mov ecx, 0x5f27f8
call fcn.004d4660
push str.gameman.txt
lea eax, [esp + 0x34]
push 0x5f287c
push eax
call fcn.00401ba0
add esp, 0xc
mov byte [esp + 0x378], 0x45
jmp 0x498e68
mov byte [esp + 0x378], 0x43
jmp 0x498e91
cmp eax, 0x8123
jne 0x4995b8
lea ecx, [esp + 0x20]
call fcn.004026e0
lea ecx, [esp + 0x14]
call fcn.004026e0
lea ecx, [esp + 0x1c]
call fcn.004026e0
lea ecx, [esp + 0x18]
call fcn.004026e0
push 6
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x30]
push ecx
mov byte [esp + 0x38c], 0x49
call fcn.0046bc30
mov edx, dword [esp + 0x34]
add esp, 0x14
cmp dword [edx - 0xc], edi
jne 0x499461
push 0x5b0030
lea ecx, [esp + 0x24]
call fcn.004021d0
mov eax, dword [esp + 0x14]
mov eax, dword [eax - 0xc]
cmp eax, edi
jne 0x499518
lea ecx, [esp + 0x54]
push ecx
call fcn.0041f400
lea edx, [esp + 0x20]
push edx
lea ecx, [esp + 0xd0]
mov byte [esp + 0x37c], 0x4a
call fcn.00402310
lea ecx, [esp + 0x54]
call fcn.0053bd19
cmp eax, 1
jne 0x4995ab
lea eax, [esp + 0xcc]
push eax
lea ecx, [esp + 0x24]
call fcn.00402310
lea ecx, [esp + 0xd0]
push ecx
lea ecx, [esp + 0x18]
call fcn.00402310
lea edx, [esp + 0xd4]
push edx
lea ecx, [esp + 0x20]
call fcn.00402310
lea eax, [esp + 0xd8]
push eax
lea ecx, [esp + 0x1c]
call fcn.00402310
push 6
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x30]
push ecx
call fcn.0046bfe0
add esp, 0x14
lea ecx, [esp + 0x54]
mov byte [esp + 0x378], 0x49
call fcn.0041f580
mov edx, dword [esp + 0x14]
mov eax, dword [ebx + 0x568c]
push 1
push edi
push 0xffffffffffffffff
push 1
push 1
push edi
push edi
push edx
push eax
call fcn.004d7180
mov ecx, dword [ebx + 0x568c]
add ecx, 0x22c
call fcn.004c62b0
mov ebx, eax
cmp ebx, edi
je 0x4984dd
lea edx, [esp + 0x20]
lea ecx, [ebx + 0x14]
push edx
call fcn.00402310
mov ecx, ebx
call fcn.004c5620
mov esi, dword [esp + 0x20]
mov ecx, 0x5f27f8
call fcn.004d45c0
mov ecx, ebx
call fcn.004c5620
mov esi, str.GAME6
mov ecx, 0x5f27f8
call fcn.004d4660
push str.gameman.txt
lea eax, [esp + 0x34]
push 0x5f287c
push eax
call fcn.00401ba0
add esp, 0xc
mov byte [esp + 0x378], 0x4b
jmp 0x498e68
mov byte [esp + 0x378], 0x49
jmp 0x498e91
cmp eax, 0x8124
jne 0x49977b
lea ecx, [esp + 0x20]
call fcn.004026e0
lea ecx, [esp + 0x14]
call fcn.004026e0
lea ecx, [esp + 0x1c]
call fcn.004026e0
lea ecx, [esp + 0x18]
call fcn.004026e0
push 7
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x30]
push ecx
mov byte [esp + 0x38c], 0x4f
call fcn.0046bc30
mov edx, dword [esp + 0x34]
add esp, 0x14
cmp dword [edx - 0xc], edi
jne 0x499624
push 0x5b0048
lea ecx, [esp + 0x24]
call fcn.004021d0
mov eax, dword [esp + 0x14]
mov eax, dword [eax - 0xc]
cmp eax, edi
jne 0x4996db
lea ecx, [esp + 0x54]
push ecx
call fcn.0041f400
lea edx, [esp + 0x20]
push edx
lea ecx, [esp + 0xd0]
mov byte [esp + 0x37c], 0x50
call fcn.00402310
lea ecx, [esp + 0x54]
call fcn.0053bd19
cmp eax, 1
jne 0x49976e
lea eax, [esp + 0xcc]
push eax
lea ecx, [esp + 0x24]
call fcn.00402310
lea ecx, [esp + 0xd0]
push ecx
lea ecx, [esp + 0x18]
call fcn.00402310
lea edx, [esp + 0xd4]
push edx
lea ecx, [esp + 0x20]
call fcn.00402310
lea eax, [esp + 0xd8]
push eax
lea ecx, [esp + 0x1c]
call fcn.00402310
push 7
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x30]
push ecx
call fcn.0046bfe0
add esp, 0x14
lea ecx, [esp + 0x54]
mov byte [esp + 0x378], 0x4f
call fcn.0041f580
mov edx, dword [esp + 0x14]
mov eax, dword [ebx + 0x568c]
push 1
push edi
push 0xffffffffffffffff
push 1
push 1
push edi
push edi
push edx
push eax
call fcn.004d7180
mov ecx, dword [ebx + 0x568c]
add ecx, 0x22c
call fcn.004c62b0
mov ebx, eax
cmp ebx, edi
je 0x4984dd
lea edx, [esp + 0x20]
lea ecx, [ebx + 0x14]
push edx
call fcn.00402310
mov ecx, ebx
call fcn.004c5620
mov esi, dword [esp + 0x20]
mov ecx, 0x5f27f8
call fcn.004d45c0
mov ecx, ebx
call fcn.004c5620
mov esi, str.GAME7
mov ecx, 0x5f27f8
call fcn.004d4660
push str.gameman.txt
lea eax, [esp + 0x34]
push 0x5f287c
push eax
call fcn.00401ba0
add esp, 0xc
mov byte [esp + 0x378], 0x51
jmp 0x498e68
mov byte [esp + 0x378], 0x4f
jmp 0x498e91
cmp eax, 0x8125
jne 0x49993e
lea ecx, [esp + 0x20]
call fcn.004026e0
lea ecx, [esp + 0x14]
call fcn.004026e0
lea ecx, [esp + 0x1c]
call fcn.004026e0
lea ecx, [esp + 0x18]
call fcn.004026e0
push 8
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x30]
push ecx
mov byte [esp + 0x38c], 0x55
call fcn.0046bc30
mov edx, dword [esp + 0x34]
add esp, 0x14
cmp dword [edx - 0xc], edi
jne 0x4997e7
push 0x5b0060
lea ecx, [esp + 0x24]
call fcn.004021d0
mov eax, dword [esp + 0x14]
mov eax, dword [eax - 0xc]
cmp eax, edi
jne 0x49989e
lea ecx, [esp + 0x54]
push ecx
call fcn.0041f400
lea edx, [esp + 0x20]
push edx
lea ecx, [esp + 0xd0]
mov byte [esp + 0x37c], 0x56
call fcn.00402310
lea ecx, [esp + 0x54]
call fcn.0053bd19
cmp eax, 1
jne 0x499931
lea eax, [esp + 0xcc]
push eax
lea ecx, [esp + 0x24]
call fcn.00402310
lea ecx, [esp + 0xd0]
push ecx
lea ecx, [esp + 0x18]
call fcn.00402310
lea edx, [esp + 0xd4]
push edx
lea ecx, [esp + 0x20]
call fcn.00402310
lea eax, [esp + 0xd8]
push eax
lea ecx, [esp + 0x1c]
call fcn.00402310
push 8
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x30]
push ecx
call fcn.0046bfe0
add esp, 0x14
lea ecx, [esp + 0x54]
mov byte [esp + 0x378], 0x55
call fcn.0041f580
mov edx, dword [esp + 0x14]
mov eax, dword [ebx + 0x568c]
push 1
push edi
push 0xffffffffffffffff
push 1
push 1
push edi
push edi
push edx
push eax
call fcn.004d7180
mov ecx, dword [ebx + 0x568c]
add ecx, 0x22c
call fcn.004c62b0
mov ebx, eax
cmp ebx, edi
je 0x4984dd
lea edx, [esp + 0x20]
lea ecx, [ebx + 0x14]
push edx
call fcn.00402310
mov ecx, ebx
call fcn.004c5620
mov esi, dword [esp + 0x20]
mov ecx, 0x5f27f8
call fcn.004d45c0
mov ecx, ebx
call fcn.004c5620
mov esi, str.GAME8
mov ecx, 0x5f27f8
call fcn.004d4660
push str.gameman.txt
lea eax, [esp + 0x34]
push 0x5f287c
push eax
call fcn.00401ba0
add esp, 0xc
mov byte [esp + 0x378], 0x57
jmp 0x498e68
mov byte [esp + 0x378], 0x55
jmp 0x498e91
cmp eax, 0x8126
jne 0x499b01
lea ecx, [esp + 0x20]
call fcn.004026e0
lea ecx, [esp + 0x14]
call fcn.004026e0
lea ecx, [esp + 0x1c]
call fcn.004026e0
lea ecx, [esp + 0x18]
call fcn.004026e0
push 9
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x30]
push ecx
mov byte [esp + 0x38c], 0x5b
call fcn.0046bc30
mov edx, dword [esp + 0x34]
add esp, 0x14
cmp dword [edx - 0xc], edi
jne 0x4999aa
push 0x5b0078
lea ecx, [esp + 0x24]
call fcn.004021d0
mov eax, dword [esp + 0x14]
mov eax, dword [eax - 0xc]
cmp eax, edi
jne 0x499a61
lea ecx, [esp + 0x54]
push ecx
call fcn.0041f400
lea edx, [esp + 0x20]
push edx
lea ecx, [esp + 0xd0]
mov byte [esp + 0x37c], 0x5c
call fcn.00402310
lea ecx, [esp + 0x54]
call fcn.0053bd19
cmp eax, 1
jne 0x499af4
lea eax, [esp + 0xcc]
push eax
lea ecx, [esp + 0x24]
call fcn.00402310
lea ecx, [esp + 0xd0]
push ecx
lea ecx, [esp + 0x18]
call fcn.00402310
lea edx, [esp + 0xd4]
push edx
lea ecx, [esp + 0x20]
call fcn.00402310
lea eax, [esp + 0xd8]
push eax
lea ecx, [esp + 0x1c]
call fcn.00402310
push 9
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x30]
push ecx
call fcn.0046bfe0
add esp, 0x14
lea ecx, [esp + 0x54]
mov byte [esp + 0x378], 0x5b
call fcn.0041f580
mov edx, dword [esp + 0x14]
mov eax, dword [ebx + 0x568c]
push 1
push edi
push 0xffffffffffffffff
push 1
push 1
push edi
push edi
push edx
push eax
call fcn.004d7180
mov ecx, dword [ebx + 0x568c]
add ecx, 0x22c
call fcn.004c62b0
mov ebx, eax
cmp ebx, edi
je 0x4984dd
lea edx, [esp + 0x20]
lea ecx, [ebx + 0x14]
push edx
call fcn.00402310
mov ecx, ebx
call fcn.004c5620
mov esi, dword [esp + 0x20]
mov ecx, 0x5f27f8
call fcn.004d45c0
mov ecx, ebx
call fcn.004c5620
mov esi, str.GAME9
mov ecx, 0x5f27f8
call fcn.004d4660
push str.gameman.txt
lea eax, [esp + 0x34]
push 0x5f287c
push eax
call fcn.00401ba0
add esp, 0xc
mov byte [esp + 0x378], 0x5d
jmp 0x498e68
mov byte [esp + 0x378], 0x5b
jmp 0x498e91
cmp eax, 0x8127
jne 0x499cc4
lea ecx, [esp + 0x20]
call fcn.004026e0
lea ecx, [esp + 0x14]
call fcn.004026e0
lea ecx, [esp + 0x1c]
call fcn.004026e0
lea ecx, [esp + 0x18]
call fcn.004026e0
push 0xa
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x30]
push ecx
mov byte [esp + 0x38c], 0x61
call fcn.0046bc30
mov edx, dword [esp + 0x34]
add esp, 0x14
cmp dword [edx - 0xc], edi
jne 0x499b6d
push 0x5b0090
lea ecx, [esp + 0x24]
call fcn.004021d0
mov eax, dword [esp + 0x14]
mov eax, dword [eax - 0xc]
cmp eax, edi
jne 0x499c24
lea ecx, [esp + 0x54]
push ecx
call fcn.0041f400
lea edx, [esp + 0x20]
push edx
lea ecx, [esp + 0xd0]
mov byte [esp + 0x37c], 0x62
call fcn.00402310
lea ecx, [esp + 0x54]
call fcn.0053bd19
cmp eax, 1
jne 0x499cb7
lea eax, [esp + 0xcc]
push eax
lea ecx, [esp + 0x24]
call fcn.00402310
lea ecx, [esp + 0xd0]
push ecx
lea ecx, [esp + 0x18]
call fcn.00402310
lea edx, [esp + 0xd4]
push edx
lea ecx, [esp + 0x20]
call fcn.00402310
lea eax, [esp + 0xd8]
push eax
lea ecx, [esp + 0x1c]
call fcn.00402310
push 0xa
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x30]
push ecx
call fcn.0046bfe0
add esp, 0x14
lea ecx, [esp + 0x54]
mov byte [esp + 0x378], 0x61
call fcn.0041f580
mov edx, dword [esp + 0x14]
mov eax, dword [ebx + 0x568c]
push 1
push edi
push 0xffffffffffffffff
push 1
push 1
push edi
push edi
push edx
push eax
call fcn.004d7180
mov ecx, dword [ebx + 0x568c]
add ecx, 0x22c
call fcn.004c62b0
mov ebx, eax
cmp ebx, edi
je 0x4984dd
lea edx, [esp + 0x20]
lea ecx, [ebx + 0x14]
push edx
call fcn.00402310
mov ecx, ebx
call fcn.004c5620
mov esi, dword [esp + 0x20]
mov ecx, 0x5f27f8
call fcn.004d45c0
mov ecx, ebx
call fcn.004c5620
mov esi, str.GAME10
mov ecx, 0x5f27f8
call fcn.004d4660
push str.gameman.txt
lea eax, [esp + 0x34]
push 0x5f287c
push eax
call fcn.00401ba0
add esp, 0xc
mov byte [esp + 0x378], 0x63
jmp 0x498e68
mov byte [esp + 0x378], 0x61
jmp 0x498e91
cmp eax, 0x8128
jne 0x499e87
lea ecx, [esp + 0x20]
call fcn.004026e0
lea ecx, [esp + 0x14]
call fcn.004026e0
lea ecx, [esp + 0x1c]
call fcn.004026e0
lea ecx, [esp + 0x18]
call fcn.004026e0
push 0xb
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x30]
push ecx
mov byte [esp + 0x38c], 0x67
call fcn.0046bc30
mov edx, dword [esp + 0x34]
add esp, 0x14
cmp dword [edx - 0xc], edi
jne 0x499d30
push 0x5b00ac
lea ecx, [esp + 0x24]
call fcn.004021d0
mov eax, dword [esp + 0x14]
mov eax, dword [eax - 0xc]
cmp eax, edi
jne 0x499de7
lea ecx, [esp + 0x54]
push ecx
call fcn.0041f400
lea edx, [esp + 0x20]
push edx
lea ecx, [esp + 0xd0]
mov byte [esp + 0x37c], 0x68
call fcn.00402310
lea ecx, [esp + 0x54]
call fcn.0053bd19
cmp eax, 1
jne 0x499e7a
lea eax, [esp + 0xcc]
push eax
lea ecx, [esp + 0x24]
call fcn.00402310
lea ecx, [esp + 0xd0]
push ecx
lea ecx, [esp + 0x18]
call fcn.00402310
lea edx, [esp + 0xd4]
push edx
lea ecx, [esp + 0x20]
call fcn.00402310
lea eax, [esp + 0xd8]
push eax
lea ecx, [esp + 0x1c]
call fcn.00402310
push 0xb
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x30]
push ecx
call fcn.0046bfe0
add esp, 0x14
lea ecx, [esp + 0x54]
mov byte [esp + 0x378], 0x67
call fcn.0041f580
mov edx, dword [esp + 0x14]
mov eax, dword [ebx + 0x568c]
push 1
push edi
push 0xffffffffffffffff
push 1
push 1
push edi
push edi
push edx
push eax
call fcn.004d7180
mov ecx, dword [ebx + 0x568c]
add ecx, 0x22c
call fcn.004c62b0
mov ebx, eax
cmp ebx, edi
je 0x4984dd
lea edx, [esp + 0x20]
lea ecx, [ebx + 0x14]
push edx
call fcn.00402310
mov ecx, ebx
call fcn.004c5620
mov esi, dword [esp + 0x20]
mov ecx, 0x5f27f8
call fcn.004d45c0
mov ecx, ebx
call fcn.004c5620
mov esi, str.GAME11
mov ecx, 0x5f27f8
call fcn.004d4660
push str.gameman.txt
lea eax, [esp + 0x34]
push 0x5f287c
push eax
call fcn.00401ba0
add esp, 0xc
mov byte [esp + 0x378], 0x69
jmp 0x498e68
mov byte [esp + 0x378], 0x67
jmp 0x498e91
cmp eax, 0x8129
jne 0x49a04a
lea ecx, [esp + 0x20]
call fcn.004026e0
lea ecx, [esp + 0x14]
call fcn.004026e0
lea ecx, [esp + 0x1c]
call fcn.004026e0
lea ecx, [esp + 0x18]
call fcn.004026e0
push 0xc
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x30]
push ecx
mov byte [esp + 0x38c], 0x6d
call fcn.0046bc30
mov edx, dword [esp + 0x34]
add esp, 0x14
cmp dword [edx - 0xc], edi
jne 0x499ef3
push 0x5b00c8
lea ecx, [esp + 0x24]
call fcn.004021d0
mov eax, dword [esp + 0x14]
mov eax, dword [eax - 0xc]
cmp eax, edi
jne 0x499faa
lea ecx, [esp + 0x54]
push ecx
call fcn.0041f400
lea edx, [esp + 0x20]
push edx
lea ecx, [esp + 0xd0]
mov byte [esp + 0x37c], 0x6e
call fcn.00402310
lea ecx, [esp + 0x54]
call fcn.0053bd19
cmp eax, 1
jne 0x49a03d
lea eax, [esp + 0xcc]
push eax
lea ecx, [esp + 0x24]
call fcn.00402310
lea ecx, [esp + 0xd0]
push ecx
lea ecx, [esp + 0x18]
call fcn.00402310
lea edx, [esp + 0xd4]
push edx
lea ecx, [esp + 0x20]
call fcn.00402310
lea eax, [esp + 0xd8]
push eax
lea ecx, [esp + 0x1c]
call fcn.00402310
push 0xc
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x30]
push ecx
call fcn.0046bfe0
add esp, 0x14
lea ecx, [esp + 0x54]
mov byte [esp + 0x378], 0x6d
call fcn.0041f580
mov edx, dword [esp + 0x14]
mov eax, dword [ebx + 0x568c]
push 1
push edi
push 0xffffffffffffffff
push 1
push 1
push edi
push edi
push edx
push eax
call fcn.004d7180
mov ecx, dword [ebx + 0x568c]
add ecx, 0x22c
call fcn.004c62b0
mov ebx, eax
cmp ebx, edi
je 0x4984dd
lea edx, [esp + 0x20]
lea ecx, [ebx + 0x14]
push edx
call fcn.00402310
mov ecx, ebx
call fcn.004c5620
mov esi, dword [esp + 0x20]
mov ecx, 0x5f27f8
call fcn.004d45c0
mov ecx, ebx
call fcn.004c5620
mov esi, str.GAME12
mov ecx, 0x5f27f8
call fcn.004d4660
push str.gameman.txt
lea eax, [esp + 0x34]
push 0x5f287c
push eax
call fcn.00401ba0
add esp, 0xc
mov byte [esp + 0x378], 0x6f
jmp 0x498e68
mov byte [esp + 0x378], 0x6d
jmp 0x498e91
cmp eax, 0x810f
jne 0x49a062
push 0x568a
mov ecx, ebx
call fcn.0048e4d0
jmp 0x49a5bd
cmp eax, 0x8064
jne 0x49a077
push 4
mov ecx, ebx
call fcn.0049a780
jmp 0x49a5bd
cmp eax, 0x80dc
jne 0x49a0a3
mov ebx, dword [ebx + 0x568c]
cmp ebx, edi
je 0x49a5bd
xor eax, eax
cmp dword [0x5f2310], eax
mov edi, ebx
sete al
call fcn.004d9540
jmp 0x49a5bd
cmp eax, 0x80fe
jne 0x49a0bb
push 0x59da
mov ecx, ebx
call fcn.0048e4d0
jmp 0x49a5bd
cmp eax, 0x80ff
jne 0x49a0d3
push 0x59db
mov ecx, ebx
call fcn.0048e4d0
jmp 0x49a5bd
cmp eax, 0x80e7
jne 0x49a111
mov eax, dword [ebx + 0x568c]
cmp eax, edi
je 0x49a105
cmp dword [ebx + 0x108], 2
jne 0x49a105
xor ecx, ecx
cmp dword [0x5f2820], edi
push eax
sete cl
mov eax, ecx
call fcn.004dbf60
jmp 0x49a5bd
push edi
call dword [sym.imp.USER32.dll_MessageBeep]
jmp 0x49a5bd
cmp eax, 0x8065
jne 0x49a126
push 3
mov ecx, ebx
call fcn.0049a780
jmp 0x49a5bd
cmp eax, 0x8044
jne 0x49a13e
push 0x560e
mov ecx, ebx
call fcn.0048e4d0
jmp 0x49a5bd
cmp eax, 0x805f
jne 0x49a156
push 0x560f
mov ecx, ebx
call fcn.0048e4d0
jmp 0x49a5bd
cmp eax, 0x8061
jne 0x49a16e
push 0x5610
mov ecx, ebx
call fcn.0048e4d0
jmp 0x49a5bd
cmp eax, 0x8062
jne 0x49a186
push 0x5611
mov ecx, ebx
call fcn.0048e4d0
jmp 0x49a5bd
cmp eax, 0x80a9
jne 0x49a19e
push 0x564d
mov ecx, ebx
call fcn.0048e4d0
jmp 0x49a5bd
cmp eax, 0x80d8
jne 0x49a1c1
mov eax, dword [0x5f2620]
cmp dword [eax + 0x568c], edi
je 0x49a5bd
push eax
call fcn.0049ccb0
jmp 0x49a5bd
cmp eax, 0x8049
jne 0x49a213
push 3
push 4
lea ecx, [esp + 0x28]
call fcn.0053f721
mov byte [esp + 0x378], 0x70
mov eax, dword [ebx + 0x568c]
cmp eax, edi
je 0x49a203
cmp dword [ebx + 0x108], 2
jne 0x49a203
push 2
push 0x13
lea ecx, [eax + 0x22c]
lea esi, [esp + 0x28]
call fcn.004c73c0
lea edx, [esp + 0x20]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x49a5bd
cmp eax, 0x804a
jne 0x49a234
push 3
push 3
lea ecx, [esp + 0x28]
call fcn.0053f721
mov byte [esp + 0x378], 0x71
jmp 0x49a2f3
cmp eax, 0x804d
jne 0x49a286
push 3
push 2
lea ecx, [esp + 0x28]
call fcn.0053f721
mov byte [esp + 0x378], 0x72
mov eax, dword [ebx + 0x568c]
cmp eax, edi
je 0x49a276
cmp dword [ebx + 0x108], 2
jne 0x49a276
push 2
push 0x13
lea ecx, [eax + 0x22c]
lea esi, [esp + 0x28]
call fcn.004c73c0
lea ecx, [esp + 0x20]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x49a5bd
cmp eax, 0x804c
jne 0x49a2d8
push 3
push 1
lea ecx, [esp + 0x28]
call fcn.0053f721
mov byte [esp + 0x378], 0x73
mov eax, dword [ebx + 0x568c]
cmp eax, edi
je 0x49a2c8
cmp dword [ebx + 0x108], 2
jne 0x49a2c8
push 2
push 0x13
lea ecx, [eax + 0x22c]
lea esi, [esp + 0x28]
call fcn.004c73c0
lea edx, [esp + 0x20]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x49a5bd
cmp eax, 0x804b
jne 0x49a329
push 3
push edi
lea ecx, [esp + 0x28]
call fcn.0053f721
mov byte [esp + 0x378], 0x74
mov eax, dword [ebx + 0x568c]
cmp eax, edi
je 0x49a319
cmp dword [ebx + 0x108], 2
jne 0x49a319
push 2
push 0x13
lea ecx, [eax + 0x22c]
lea esi, [esp + 0x28]
call fcn.004c73c0
lea eax, [esp + 0x20]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x49a5bd
cmp eax, 0x8015
jne 0x49a372
lea ecx, [esp + 0x54]
push ecx
call fcn.0041d980
push 0x5f21f0
lea ecx, [esp + 0xcc]
mov byte [esp + 0x37c], 0x75
call fcn.00402310
lea ecx, [esp + 0x54]
call fcn.0053bd19
lea ecx, [esp + 0x54]
mov byte [esp + 0x378], 0
call fcn.0041da70
jmp 0x49a5bd
cmp eax, 0x805d
jne 0x49a38a
push 0x55fc
mov ecx, ebx
call fcn.0048e4d0
jmp 0x49a5bd
cmp eax, 0x8075
jne 0x49a3a2
push 0x560a
mov ecx, ebx
call fcn.0048e4d0
jmp 0x49a5bd
cmp eax, 0x8012
jne 0x49a3c2
mov edx, dword [ebx + 0x20]
push edi
push edi
push 0x10
push edx
mov dword [ebx + 0x99a8], edi
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x49a5bd
cmp eax, 0x805e
jne 0x49a3ed
xor eax, eax
cmp dword [0x5f2368], edi
push edi
sete al
push edi
mov dword [0x5f2368], eax
mov ecx, dword [ebx + 0x3834]
push ecx
call dword [sym.imp.USER32.dll_InvalidateRect]
jmp 0x49a5bd
cmp eax, 0x80c4
jne 0x49a405
push 0x5624
mov ecx, ebx
call fcn.0048e4d0
jmp 0x49a5bd
cmp eax, 0x80c5
jne 0x49a41d
push 0x5625
mov ecx, ebx
call fcn.0048e4d0
jmp 0x49a5bd
cmp eax, 0x80c6
jne 0x49a435
push 0x5620
mov ecx, ebx
call fcn.0048e4d0
jmp 0x49a5bd
cmp eax, 0x80c7
jne 0x49a44d
push 0x561f
mov ecx, ebx
call fcn.0048e4d0
jmp 0x49a5bd
cmp eax, 0x80c8
jne 0x49a465
push 0x561e
mov ecx, ebx
call fcn.0048e4d0
jmp 0x49a5bd
cmp eax, 0x80c9
jne 0x49a47d
push 0x561d
mov ecx, ebx
call fcn.0048e4d0
jmp 0x49a5bd
cmp eax, 0x80ca
jne 0x49a495
push 0x561c
mov ecx, ebx
call fcn.0048e4d0
jmp 0x49a5bd
cmp eax, 0x80cb
jne 0x49a4ad
push 0x5621
mov ecx, ebx
call fcn.0048e4d0
jmp 0x49a5bd
cmp eax, 0x80cc
jne 0x49a4c5
push 0x5622
mov ecx, ebx
call fcn.0048e4d0
jmp 0x49a5bd
cmp eax, 0x80cd
jne 0x49a4dd
push 0x5623
mov ecx, ebx
call fcn.0048e4d0
jmp 0x49a5bd
cmp eax, 0x811c
jne 0x49a5bd
push str.TangoBrowser
lea ecx, [esp + 0x1c]
call fcn.00402390
mov bl, 0x76
mov byte [esp + 0x378], bl
cmp dword [0x5f2b5c], edi
jne 0x49a592
lea edx, [esp + 0x18]
push edx
call fcn.004b8ab0
add esp, 4
test eax, eax
jne 0x49a592
push 0x5b00e8
lea ecx, [esp + 0x34]
call fcn.00402390
push edi
mov byte [esp + 0x37c], 0x77
mov eax, dword [esp + 0x34]
push 4
push eax
call fcn.00539414
cmp eax, 6
jne 0x49a582
call fcn.00462930
test eax, eax
je 0x49a55d
push edi
push edi
push 0x5b0138
call fcn.00539414
mov ecx, dword [0x5f21f0]
mov edx, dword [0x5f2864]
push ecx
push edx
lea eax, [esp + 0x20]
push eax
call fcn.004b7970
add esp, 0xc
mov dword [0x5f2264], 1
lea ecx, [esp + 0x30]
mov byte [esp + 0x378], bl
call fcn.004a4690
lea ecx, [esp + 0x18]
push ecx
call fcn.004b8ab0
add esp, 4
test eax, eax
je 0x49a5b4
xor edx, edx
cmp dword [0x5f2b5c], edi
sete dl
mov dword [0x5f2b5c], edx
lea ecx, [esp + 0x18]
call fcn.004a4690
mov dword [esp + 0x378], 0xffffffff
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x49a5e8
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x370]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x358]
xor ecx, esp
call fcn.00552101
mov esp, ebp
pop ebp
ret 4