Function at 0x42aa97
Capabilities:
Create process on windows
Execute command
Query or enumerate registry value

Disassembly:
push ebp
mov eax, 0x172c
push edi
push esi
push ebx
call fcn.004f11c8
sub esp, eax
call fcn.00409a70
mov byte [0xdfd640], 1
call fcn.00409190
mov dword [esp + 0x10], 0x50e73f
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 1
mov dword [esp], 5
call fcn.00408cb0
mov dword [esp + 0x10], 0x50e758
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 2
mov dword [esp], 5
call fcn.00408cb0
mov dword [esp + 0x10], 0x50e777
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 3
mov dword [esp], 5
call fcn.00408cb0
mov dword [esp + 0x10], 0x50e78f
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 4
mov dword [esp], 5
call fcn.00408cb0
mov dword [esp + 0x10], 0x50e79f
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 5
mov dword [esp], 5
call fcn.00408cb0
mov dword [esp + 0x10], 0x50e7ad
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 1
mov dword [esp], 0x28
call fcn.00408cb0
mov dword [esp + 0x10], 0x50e7c3
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 2
mov dword [esp], 0x28
call fcn.00408cb0
mov dword [esp + 0x10], 0x50e7d8
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 3
mov dword [esp], 0x28
call fcn.00408cb0
mov dword [esp + 0x10], 0x50e7f8
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 4
mov dword [esp], 0x28
call fcn.00408cb0
mov dword [esp + 0x10], 0x50e807
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 5
mov dword [esp], 0x28
call fcn.00408cb0
mov dword [esp + 0x10], 0x50e81e
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 6
mov dword [esp], 5
call fcn.00408cb0
mov dword [esp + 0x10], 0x50e838
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 7
mov dword [esp], 5
call fcn.00408cb0
mov dword [esp + 0x10], 0x50e85a
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 8
mov dword [esp], 5
call fcn.00408cb0
mov dword [esp + 0x10], 0x50e86e
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 9
mov dword [esp], 5
call fcn.00408cb0
mov dword [esp + 0x10], 0x50e884
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0xa
mov dword [esp], 5
call fcn.00408cb0
mov dword [esp + 0x10], 0x50e898
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 6
mov dword [esp], 0x28
call fcn.00408cb0
mov dword [esp + 0x10], 0x50e8ba
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 7
mov dword [esp], 0x28
call fcn.00408cb0
mov dword [esp + 0x10], 0x50e8cf
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 8
mov dword [esp], 0x28
call fcn.00408cb0
mov dword [esp + 0x10], 0x50e8e7
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 9
mov dword [esp], 0x28
call fcn.00408cb0
mov dword [esp + 0x10], 0x50e8ff
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0xa
mov dword [esp], 0x28
call fcn.00408cb0
mov dword [esp + 0x10], 0x50e914
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0xb
mov dword [esp], 5
call fcn.00408cb0
mov dword [esp + 0x10], 0x50e924
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0xc
mov dword [esp], 5
call fcn.00408cb0
mov dword [esp + 0x10], 0x50e948
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0xd
mov dword [esp], 5
call fcn.00408cb0
mov dword [esp + 0x10], 0x50e970
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0xb
mov dword [esp], 0x28
call fcn.00408cb0
mov dword [esp + 0x10], 0x50e994
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0xc
mov dword [esp], 0x28
call fcn.00408cb0
mov dword [esp + 0x10], 0x50e9bb
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0xf
mov dword [esp], 5
call fcn.00408cb0
mov dword [esp + 0x10], 0x50e9d7
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0xf
mov dword [esp], 0x28
call fcn.00408cb0
mov dword [esp + 0x10], 0x50e9f0
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0x10
mov dword [esp], 5
call fcn.00408cb0
mov dword [esp + 0x10], 0x50ea0a
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0x10
mov dword [esp], 0x28
call fcn.00408cb0
mov dword [esp + 0x10], 0x50ea24
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0x11
mov dword [esp], 5
call fcn.00408cb0
mov dword [esp + 0x10], 0x50ea4c
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0x11
mov dword [esp], 0x28
call fcn.00408cb0
mov dword [esp + 0x10], 0x50ea6c
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0x12
mov dword [esp], 5
call fcn.00408cb0
mov dword [esp + 0x10], 0x50ea8c
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0x12
mov dword [esp], 0x28
call fcn.00408cb0
mov dword [esp + 0x10], 0x50eab4
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0x13
mov dword [esp], 5
call fcn.00408cb0
mov dword [esp + 0x10], 0x50ead8
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0x13
mov dword [esp], 0x28
call fcn.00408cb0
mov dword [esp + 0x10], 0x50eafc
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0x15
mov dword [esp], 5
call fcn.00408cb0
mov dword [esp + 0x10], str.____a_PNG_and_leave_this_menu:
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0x16
mov dword [esp], 5
call fcn.00408cb0
mov edx, 0xd622c0
cmp byte [0xd622c0], 0
mov eax, str.__no_screenshot_taken__
cmovne eax, edx
mov dword [esp], str._____s
mov dword [esp + 4], eax
call fcn.00402550
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], eax
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0x17
mov dword [esp], 5
call fcn.00408cb0
mov dword [esp + 0x10], 0x50eb48
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0x15
mov dword [esp], 0x28
call fcn.00408cb0
mov ebx, dword [0x1162e44]
mov dword [esp], ebx
call sub.msvcrt.dll_strlen
cmp eax, 0x23
ja 0x42a482
mov dword [esp + 4], ebx
mov dword [esp], str._____s
call fcn.00402550
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], eax
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0x16
mov dword [esp], 0x28
call fcn.00408cb0
mov dword [esp + 0x10], str.Display_current_knowledge
mov dword [esp + 0xc], 6
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.00408cb0
mov edx, dword [0x54b7c4]
mov eax, dword [edx + 0x40]
mov edx, dword [edx + 0x24]
mov byte [eax], 1
mov dword [eax + 4], edx
mov byte [0xdfdfd9], 1
call fcn.0040dac0
mov byte [0xdfdfd9], 0
sub eax, 0x11
mov byte [esp + 0x6b], 0
cmp al, 0x6d
ja case.0x42a454.1
movzx eax, al
jmp dword [eax*4 + 0x50f3ac]
call fcn.0040e990
jmp 0x42a3f4
call fcn.00429130
test al, al
je 0x42a3f4
mov byte [0xdfd640], 0
call fcn.00409b30
add esp, 0x172c
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, 0x23
jmp 0x42a492
sub eax, 1
je 0x42a52f
cmp byte [ebx + eax], 0x5c
jne 0x42a489
cmp al, 0x23
je 0x42a575
add eax, 1
cmp al, 0x13
jbe 0x42a52f
movzx eax, al
mov esi, eax
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov dword [esp], str.______.s
call fcn.00402550
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], eax
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0x16
mov dword [esp], 0x28
call fcn.00408cb0
add esi, dword [0x1162e44]
mov dword [esp + 4], esi
mov dword [esp], str.______.35s
call fcn.00402550
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], eax
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0x17
mov dword [esp], 0x28
call fcn.00408cb0
jmp 0x42a3f4
mov dword [esp + 4], ebx
mov dword [esp], str.______.35s
call fcn.00402550
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], eax
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0x16
mov dword [esp], 0x28
call fcn.00408cb0
mov eax, dword [0x1162e44]
add eax, 0x23
mov dword [esp + 4], eax
jmp 0x42a4f6
mov esi, 0x23
mov eax, 0x23
jmp 0x42a4b0
mov dword [esp + 4], 2
mov dword [esp], 0x50e711
call fcn.004478c0
jmp case.0x42aa4c.0
mov dword [0xdfe124], 2
call fcn.004481e0
jmp 0x42a3f4
mov dword [esp], 1
call fcn.0042e930
jmp 0x42a3f4
mov dword [esp + 8], 0x50ebe5
mov dword [esp + 4], 0
mov dword [esp], 0xe
call fcn.00470760
jmp 0x42a3f4
lea eax, [esp + 0x6b]
mov dword [esp], str.What_type_of_objects___ESC_for_all_:
movzx ebx, byte [0xdfdfd8]
mov dword [esp + 4], eax
mov byte [0xdfdfd8], 1
call fcn.00411de0
movsx eax, byte [esp + 0x6b]
mov byte [0xdfdfd8], bl
cmp al, 0x1b
jg 0x42a61b
mov byte [esp + 0x6b], 0
xor eax, eax
mov dword [esp + 8], 0x50ebe5
mov dword [esp + 4], eax
mov dword [esp], 0xc
call fcn.00470760
jmp 0x42a3f4
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 1
mov dword [esp + 8], 8
mov dword [esp + 4], 4
mov dword [esp], 0xddf36c
call fcn.00405c00
test al, al
jne 0x42d102
lea eax, [esp + 0x6b]
mov dword [esp], str.Which_uniques___ESC_for_all__SPACE_for_alive__b_or_e_for_bosses_
movzx ebx, byte [0xdfdfd8]
mov dword [esp + 4], eax
mov byte [0xdfdfd8], 1
call fcn.00411de0
movzx eax, byte [esp + 0x6b]
mov byte [0xdfdfd8], bl
cmp al, 0x61
je 0x42d38b
jg 0x42d36c
cmp al, 0x20
je 0x42d38b
cmp al, 0x21
mov ecx, 0x30d40
sete dl
add edx, edx
cmp al, 0x21
mov eax, 0
cmove eax, ecx
mov dword [esp + 8], 0x50ebe5
mov dword [esp + 4], eax
mov dword [esp], 1
mov byte [esp + 0x6b], dl
call fcn.00470760
jmp 0x42a3f4
lea eax, [esp + 0x6b]
mov dword [esp], str.What_kind_of_monsters___ESC_for_all____for_learnt__SPACE_for_uniques_:
movzx ebx, byte [0xdfdfd8]
mov dword [esp + 4], eax
mov byte [0xdfdfd8], 1
call fcn.00411de0
movzx eax, byte [esp + 0x6b]
mov byte [0xdfdfd8], bl
cmp al, 0x1b
jle 0x42d0f6
cmp al, 0x20
jne 0x42d0fb
mov byte [esp + 0x6b], 0
mov esi, 1
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 4
mov dword [esp + 8], 5
mov dword [esp + 4], 4
mov dword [esp], 0xddf36c
call fcn.00405c70
test al, al
je 0x42d116
mov dword [esp + 4], 0xff
mov dword [esp], str.Specify_minimum_level___ESC_for_none_:
call fcn.00414be0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov ebx, eax
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 3
mov dword [esp + 8], 7
mov dword [esp + 4], 4
mov dword [esp], 0xddf36c
call fcn.00405c00
test al, al
jne 0x42d39a
imul ebx, ebx, 0x186a0
movsx eax, byte [esp + 0x6b]
mov ecx, esi
mov dword [esp + 8], 0x50ebe5
mov dword [esp], 0xb
add eax, ebx
test cl, cl
lea edx, [eax + 0x5f5e100]
cmovne eax, edx
mov dword [esp + 4], eax
call fcn.00470760
jmp 0x42a3f4
mov dword [esp], 0x50f120
call fcn.00470250
jmp 0x42a3f4
call fcn.0043ba00
jmp case.0x42aa4c.0
call fcn.00409190
mov dword [esp + 0x10], 0x50eee0
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 2
mov dword [esp], 0xa
mov byte [0xdfd640], 1
call fcn.00408cb0
mov dword [esp + 0x10], 0x50ef0c
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 3
mov dword [esp], 0xa
call fcn.00408cb0
mov dword [esp + 0x10], 0x50ef34
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 4
mov dword [esp], 0xa
call fcn.00408cb0
mov dword [esp + 0x10], 0x50ef5c
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 5
mov dword [esp], 0xa
call fcn.00408cb0
mov dword [esp + 0x10], 0x50ef90
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 6
mov dword [esp], 0xa
call fcn.00408cb0
mov dword [esp + 0x10], 0x50efcb
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 7
mov dword [esp], 0xa
call fcn.00408cb0
mov dword [esp + 0x10], 0x50efe7
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 8
mov dword [esp], 0xa
call fcn.00408cb0
mov dword [esp + 0x10], 0x50f004
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 9
mov dword [esp], 0xa
call fcn.00408cb0
mov dword [esp + 0x10], 0x50f02c
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0xa
mov dword [esp], 0xa
call fcn.00408cb0
mov dword [esp + 0x10], 0x50f05d
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0xb
mov dword [esp], 0xa
call fcn.00408cb0
mov dword [esp + 0x10], str.Browse_spoiler_files__in_TomeNETs_lib_game_folder_
mov dword [esp + 0xc], 6
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.00408cb0
mov edx, dword [0x54b7c4]
mov eax, dword [edx + 0x40]
mov edx, dword [edx + 0x24]
mov byte [eax], 1
mov dword [eax + 4], edx
mov byte [0xdfdfd9], 1
call fcn.0040dac0
mov byte [0xdfdfd9], 0
sub eax, 0x11
cmp al, 0x65
ja case.0x42aa4c.1
movzx eax, al
jmp dword [eax*4 + 0x50f564]
call fcn.0040e990
jmp 0x42a9f1
mov dword [esp + 0x14], 1
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], str.https:__github.com_TomenetGame_
mov dword [esp + 4], str.open
mov dword [esp], 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
sub esp, 0x18
jmp 0x42a3f4
lea eax, [esp + 0x6c]
mov dword [esp + 0x70], 0x3ff
mov dword [esp + 0x74], 1
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x20019
mov dword [esp + 8], 0
mov dword [esp + 4], str.txtfile_shellopencommand_
mov dword [esp], 0x80000000
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
sub esp, 0x14
test eax, eax
jne 0x42d0c8
lea eax, [esp + 0x70]
lea ebx, [esp + 0x520]
mov dword [esp + 8], 0
mov dword [esp + 0x14], eax
lea eax, [esp + 0x74]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x10], ebx
mov dword [esp + 4], 0x50ebe5
mov dword [esp], eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
sub esp, 0x18
test eax, eax
jne 0x42d21b
mov eax, dword [esp + 0x70]
mov byte [esp + eax + 0x520], 0
mov dword [esp + 4], 0x25
mov dword [esp], ebx
call sub.msvcrt.dll_strchr
test eax, eax
je 0x42ab45
mov byte [eax], 0
lea edx, [esp + 0xd4]
xor eax, eax
mov ecx, 0x10
mov dword [esp + 0x8c], 0
mov edi, edx
mov dword [esp + 0x90], 0
lea esi, [esp + 0xd0]
rep stosd dword es:[edi], eax
mov dword [esp + 4], ebx
mov eax, dword [0x1162e44]
lea edi, [esp + 0x8c]
mov dword [esp], 0x50f324
mov dword [esp + 8], eax
mov dword [esp + 0xd0], 0x44
mov dword [esp + 0x94], 0
mov dword [esp + 0x98], 0
call fcn.00402550
mov dword [esp + 0x24], edi
mov dword [esp + 0x20], esi
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x8000000
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], eax
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
sub esp, 0x28
jmp 0x42a3f4
mov dword [0xdfe124], 6
call fcn.004481e0
jmp 0x42a3f4
call fcn.0042d3f0
jmp 0x42a3f4
mov dword [esp + 8], 0x50ebe5
mov dword [esp + 4], 0
mov dword [esp], 0xd
call fcn.00470760
jmp 0x42a3f4
mov dword [esp + 8], 0x50ebe5
mov dword [esp + 4], 0
mov dword [esp], 0xf
call fcn.00470760
jmp 0x42a3f4
call fcn.00409a70
movzx eax, word [0x515124]
mov byte [esp + 0x76], 0
mov dword [esp + 0x44], 0
mov word [esp + 0x74], ax
lea eax, [esp + 0x74]
mov dword [esp + 0x3c], 0
mov byte [esp + 0x53], 1
mov dword [esp + 0x34], eax
call fcn.00409190
mov dword [esp + 0x10], str.Enter__partial__monster_name_to_refine_the_search:
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 2
mov dword [esp], 2
call fcn.00408cb0
mov dword [esp + 0x10], str.Or__index__or___symbol__colour___mANY__MMULTI__or__LLL_LLL__level_range_.
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 3
mov dword [esp], 2
call fcn.00408cb0
lea esi, [esi]
lea esi, [esi]
mov dword [esp + 0x10], str._Monster_Lore_
mov dword [esp + 0xc], 0xf
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0
mov dword [esp], 5
call fcn.00408cb0
mov dword [esp + 0x10], 0x50ed18
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 2
mov dword [esp], 0x35
call fcn.00408cb0
mov eax, dword [esp + 0x34]
mov dword [esp + 0xc], 0xd
mov dword [esp + 8], 0xffffffff
mov dword [esp + 0x10], eax
mov dword [esp + 4], 2
mov dword [esp], 0x35
call fcn.00408cb0
mov dword [esp], 5
call fcn.00415090
mov edx, dword [esp + 0x44]
movzx eax, byte [esp + 0x74]
test edx, edx
sete bl
cmp al, 0x24
je 0x42bbf5
mov ebp, dword [0xdad5a0]
cmp al, 0x21
je 0x42b335
test al, al
setne al
and al, bl
mov byte [esp + 0x48], al
jne 0x42be70
mov byte [esp + 0x48], 1
xor ecx, ecx
mov dword [esp + 0x38], 0xffffffff
cmp ebp, 1
jle 0x42c027
cmp byte [esp + 0x48], 0
mov dword [esp + 0x30], ecx
mov ebx, 1
mov esi, ecx
mov dword [esp + 0x4c], 0
mov edx, ebp
je 0x42c027
lea esi, [esi]
xor eax, eax
test esi, esi
jle 0x42af60
cmp ebx, dword [esp + 0x8c]
je 0x42af68
cmp esi, 1
je 0x42b178
cmp ebx, dword [esp + 0x90]
je 0x42af68
cmp esi, 2
je 0x42b178
cmp ebx, dword [esp + 0x94]
je 0x42af68
cmp esi, 3
je 0x42b178
cmp dword [esp + 0x98], ebx
je 0x42af68
cmp esi, 4
je 0x42b178
cmp dword [esp + 0x9c], ebx
je 0x42af68
cmp esi, 5
je 0x42b178
cmp dword [esp + 0xa0], ebx
je 0x42af68
cmp esi, 6
je 0x42b178
cmp dword [esp + 0xa4], ebx
je 0x42af68
cmp esi, 7
je 0x42b178
cmp dword [esp + 0xa8], ebx
je 0x42af68
cmp esi, 8
je 0x42b178
cmp dword [esp + 0xac], ebx
je 0x42af68
cmp esi, 9
je 0x42b178
cmp dword [esp + 0xb0], ebx
je 0x42af68
cmp esi, 0xa
je 0x42b178
cmp ebx, dword [esp + 0xb4]
je 0x42af68
cmp esi, 0xb
je 0x42b178
cmp dword [esp + 0xb8], ebx
je 0x42af68
cmp esi, 0xc
je 0x42b178
cmp dword [esp + 0xbc], ebx
je 0x42af68
cmp esi, 0xd
je 0x42b178
cmp dword [esp + 0xc0], ebx
je 0x42af68
cmp esi, 0xe
je 0x42b178
cmp dword [esp + 0xc4], ebx
je 0x42af68
cmp esi, 0xf
je 0x42b178
cmp dword [esp + 0xc8], ebx
je 0x42af68
cmp esi, 0x10
je 0x42b178
cmp dword [esp + 0xcc], ebx
je 0x42af68
mov eax, 0x11
cmp esi, eax
je 0x42b178
add ebx, 1
cmp ebx, edx
jl 0x42ae00
mov eax, dword [esp + 0x30]
xor edi, edi
cmp dword [esp + 0x3c], eax
jl 0x42b02b
sub eax, 1
mov dword [esp + 0x3c], eax
js 0x42b4cf
mov edx, dword [ebx*4 + 0xdad5c0]
mov eax, dword [esp + 0x30]
mov ecx, dword [edx*4 + 0xee6468]
lea ebp, [eax + 4]
test ecx, ecx
je 0x42b4dc
lea eax, [ebx + ebx*4]
movsx esi, byte [ebx + ebx + 0xdae9c0]
mov dword [esp + 0x1c], ecx
shl eax, 4
mov dword [esp + 0x20], 0x75
add eax, 0xdaf3c0
mov dword [esp + 0x18], esi
mov dword [esp + 0x24], eax
movsx eax, byte [ebx + ebx + 0xdae9c1]
mov dword [esp + 0x14], 0x75
mov dword [esp + 0x10], eax
mov eax, dword [ebx*4 + 0xdac1a0]
mov dword [esp + 0xc], esi
mov dword [esp + 8], eax
mov dword [esp + 4], edx
mov dword [esp], 0x50ed3c
call fcn.00402550
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0xb
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], ebp
mov dword [esp], 5
call fcn.00408cb0
cmp byte [esp + 0x74], 0
jne 0x42b328
mov dword [esp + 0x10], str.Press_ESC_to_exit__ENTER_for_lore_stats__Up_Down_PgUp_PgDn_Home_to_navigate
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0x17
mov dword [esp], 2
call fcn.00408cb0
mov eax, dword [esp + 0x34]
mov dword [esp], eax
call sub.msvcrt.dll_strlen
movzx ebx, byte [0xdfdfd8]
mov edx, eax
mov eax, dword [0x54b7c4]
add edx, 0x35
mov eax, dword [eax + 0x40]
mov byte [eax], 1
mov dword [eax + 4], edx
mov dword [eax + 8], 2
mov byte [0xdfdfd8], 1
call fcn.0040dac0
mov byte [0xdfdfd8], bl
movsx esi, al
mov ebp, esi
cmp esi, 0x3a
je 0x42bb87
cmp esi, 0x14
je 0x42bb91
cmp esi, 0x7b
je 0x42bbeb
cmp esi, 0x7d
je 0x42c432
movzx ebx, byte [esp + 0x74]
cmp bl, 0x23
je 0x42b611
cmp bl, 0x24
je 0x42b588
cmp esi, 0x38
je 0x42c4d3
cmp esi, 0x32
je 0x42c4f7
cmp esi, 0x39
je 0x42c520
cmp esi, 0x33
je 0x42c5a4
cmp esi, 0x37
je 0x42c54f
cmp esi, 8
je 0x42c536
cmp esi, 0x7f
je 0x42c536
cmp esi, 0x20
je 0x42c9e7
cmp esi, 0xa
je 0x42b636
cmp esi, 0xd
je 0x42b636
cmp esi, 0x1b
je 0x42caea
lea eax, [esi - 0x20]
cmp eax, 0x5f
ja 0x42ad00
mov eax, dword [esp + 0x34]
mov dword [esp], eax
call sub.msvcrt.dll_strlen
cmp bl, 0x21
jne 0x42d25c
cmp eax, 2
jbe 0x42c7d1
jmp 0x42ad00
lea edi, [ebx + ebx*4]
lea eax, [esp + 0xd0]
mov dword [esp + 0x40], edx
shl edi, 4
mov dword [esp], eax
add edi, 0xdaf3c0
mov dword [esp + 4], edi
call sub.msvcrt.dll_strcpy
movsx eax, byte [esp + 0xd0]
mov edx, dword [esp + 0x40]
test al, al
je 0x42b1dc
lea ebp, [esp + 0xd0]
mov dword [esp + 0x40], ebx
mov ebx, ebp
mov ebp, edx
lea esi, [esi]
mov dword [esp], eax
add ebx, 1
call dword [sym.imp.msvcrt.dll_toupper]
mov byte [ebx - 1], al
movsx eax, byte [ebx]
test al, al
jne 0x42b1c0
mov ebx, dword [esp + 0x40]
mov edx, ebp
mov ebp, dword [ebx*4 + 0xdad5c0]
test ebp, ebp
je 0x42af68
mov eax, dword [esp + 0x34]
mov dword [esp + 0x40], edx
mov dword [esp + 4], eax
lea eax, [esp + 0xd0]
mov dword [esp], eax
call sub.msvcrt.dll_strstr
mov edx, dword [esp + 0x40]
test eax, eax
je 0x42af68
cmp dword [esp + 0x30], 0x11
je 0x42bb6a
mov ecx, dword [esp + 0x44]
mov eax, ecx
shl eax, 4
add eax, ecx
mov ecx, dword [esp + 0x4c]
cmp eax, ecx
jg 0x42bb06
mov ecx, dword [esp + 0x30]
mov eax, dword [esp + 0x38]
mov edx, dword [ebp*4 + 0xee6468]
test ecx, ecx
movsx ecx, byte [ebx + ebx + 0xdae9c1]
cmove eax, ebx
mov dword [esp + 0x40], ecx
mov ecx, dword [ebx*4 + 0xdac1a0]
mov dword [esp + 0x38], eax
movsx eax, byte [ebx + ebx + 0xdae9c0]
mov dword [esp + 0x48], ecx
test edx, edx
je 0x42babe
mov ecx, dword [esp + 0x30]
cmp dword [esp + 0x3c], ecx
je 0x42c60b
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x40]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x24], edi
mov dword [esp + 0x20], 0x75
mov dword [esp + 0x14], 0x75
mov dword [esp + 0x10], ecx
mov dword [esp + 8], eax
mov dword [esp + 4], ebp
mov dword [esp], 0x50ed3c
call fcn.00402550
mov edx, 7
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0xc], edx
add eax, 5
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], eax
mov dword [esp], 5
call fcn.00408cb0
mov eax, dword [esp + 0x30]
mov edx, dword [0xdad5a0]
mov dword [esp + eax*4 + 0x8c], ebx
add eax, 1
mov dword [esp + 0x30], eax
jmp 0x42af68
mov eax, dword [esp + 0x3c]
test eax, eax
jns 0x42d1fc
mov dword [esp + 0x30], 0
xor edi, edi
mov dword [esp + 0x38], 0xffffffff
mov dword [esp + 0x10], str.Press_ESC_to_clear__ENTER_for_lore_stats__Up_Down_PgUp_PgDn_Home_to_navigate
jmp 0x42b03e
movzx eax, byte [esp + 0x75]
test al, al
je 0x42b346
test bl, bl
jne 0x42c68f
mov dword [esp + 0x38], 0xffffffff
mov dword [esp + 0x30], 0
cmp ebp, 1
jle 0x42c02b
mov ecx, dword [esp + 0x44]
xor esi, esi
mov ebx, 1
mov dword [esp + 0x40], esi
mov esi, dword [esp + 0x38]
mov eax, ecx
shl eax, 4
add eax, ecx
mov dword [esp + 0x48], eax
jmp 0x42b38b
add ebx, 1
cmp ebx, ebp
jge 0x42b4c6
cmp ebx, esi
je 0x42b380
mov eax, dword [ebx*4 + 0xdad5c0]
test eax, eax
je 0x42b380
movsx edx, byte [ebx + ebx + 0xdae9c1]
cmp dl, byte [esp + 0x75]
jne 0x42b380
movzx ecx, byte [esp + 0x76]
test cl, cl
je 0x42b3d5
cmp cl, byte [ebx + ebx + 0xdae9c0]
je 0x42bb2f
cmp cl, 0x6d
je 0x42be5e
cmp cl, 0x4d
jne 0x42b380
cmp byte [ebx + 0xdab7a0], 0
je 0x42b380
cmp dword [esp + 0x30], 0x11
je 0x42bb66
mov edi, dword [esp + 0x40]
cmp dword [esp + 0x48], edi
jg 0x42b57e
mov edi, dword [esp + 0x30]
lea ecx, [ebx + ebx*4]
mov ebp, dword [eax*4 + 0xee6468]
test edi, edi
mov edi, dword [ebx*4 + 0xdac1a0]
cmove esi, ebx
shl ecx, 4
add ecx, 0xdaf3c0
mov dword [esp + 0x4c], edi
mov dword [esp + 0x38], ecx
movsx ecx, byte [ebx + ebx + 0xdae9c0]
test ebp, ebp
je 0x42b536
mov edi, dword [esp + 0x30]
cmp dword [esp + 0x3c], edi
je 0x42c5c1
mov dword [esp + 0x18], ecx
mov edi, dword [esp + 0x38]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x10], edx
mov dword [esp + 0x24], edi
mov dword [esp + 0x20], 0x75
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x14], 0x75
mov dword [esp + 8], ecx
mov dword [esp + 4], eax
mov dword [esp], 0x50ed3c
call fcn.00402550
mov edx, 7
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0xc], edx
add eax, 5
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], eax
mov dword [esp], 5
call fcn.00408cb0
mov eax, dword [esp + 0x30]
mov ebp, dword [0xdad5a0]
mov dword [esp + eax*4 + 0x8c], ebx
add eax, 1
add ebx, 1
mov dword [esp + 0x30], eax
cmp ebx, ebp
jl 0x42b38b
mov dword [esp + 0x38], esi
jmp 0x42af73
mov dword [esp + 0x3c], 0
jmp 0x42b02b
mov eax, dword [esp + 0x3c]
mov eax, dword [esp + eax*4 + 0x8c]
mov dword [esp], 0x50ed60
lea edx, [eax + eax*4]
shl edx, 4
add edx, 0xdaf3c0
mov dword [esp + 0x14], edx
movsx edx, byte [eax + eax + 0xdae9c1]
mov dword [esp + 0x10], edx
movsx edx, byte [eax + eax + 0xdae9c0]
mov dword [esp + 0xc], edx
mov edx, dword [eax*4 + 0xdac1a0]
mov eax, dword [eax*4 + 0xdad5c0]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
call fcn.00402550
jmp 0x42b007
mov ebp, dword [esp + 0x30]
cmp dword [esp + 0x3c], ebp
je 0x42c655
mov dword [esp + 0xc], ecx
mov edi, dword [esp + 0x38]
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x10], edx
mov dword [esp + 0x18], edi
mov dword [esp + 0x14], 0x75
mov dword [esp + 8], ecx
mov dword [esp + 4], eax
mov dword [esp], str.__4d__L__3d_
call fcn.00402550
mov edx, 7
jmp 0x42b47c
add dword [esp + 0x40], 1
jmp 0x42b380
mov eax, dword [esp + 0x34]
mov dword [esp], eax
call sub.msvcrt.dll_strlen
cmp eax, 7
mov edx, eax
seta cl
cmp esi, 0x38
jne 0x42b5a9
test cl, cl
jne 0x42c4d3
cmp esi, 0x32
jne 0x42b5b6
test cl, cl
jne 0x42c4f7
cmp esi, 0x39
jne 0x42b5c3
test cl, cl
jne 0x42c520
cmp esi, 0x33
jne 0x42b5d0
test cl, cl
jne 0x42c5a4
cmp edx, 7
ja 0x42c798
cmp esi, 0x7f
je 0x42c54a
cmp esi, 8
je 0x42c54a
cmp esi, 0x20
je 0x42c7d1
cmp esi, 0xa
je 0x42b636
cmp esi, 0xd
je 0x42b636
cmp esi, 0x1b
jne 0x42b144
mov byte [esp + 0x74], 0
jmp 0x42ad00
cmp esi, 8
je 0x42c53e
cmp esi, 0x7f
je 0x42c53e
cmp esi, 0x20
je 0x42c929
cmp esi, 0xd
je 0x42b636
cmp esi, 0xa
jne 0x42b5fe
cmp dword [esp + 0x38], 0xffffffff
je 0x42ad00
mov eax, dword [esp + 0x3c]
mov eax, dword [esp + eax*4 + 0x8c]
mov dword [esp + 0x38], eax
mov eax, dword [eax*4 + 0xdad5c0]
mov dword [esp + 0x40], eax
lea eax, [esp + 0x520]
mov dword [esp + 0x30], eax
mov dword [esp], 4
lea edi, [esp + 0x1720]
call fcn.00415090
mov eax, dword [esp + 0x30]
mov esi, eax
nop
mov byte [eax], 0
add eax, 0x200
mov byte [eax - 0x100], 0
cmp edi, eax
jne 0x42b680
mov eax, dword [esp + 0x30]
cmp byte [esp + 0x53], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x40]
mov dword [esp], eax
je 0x42b9e4
call fcn.0044e9f0
mov dword [esp + 0x10], str.___press_ESC_Backspace_to_exit__SPACE_for_stats__c_C_to_chat_paste___
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0x17
mov dword [esp], 5
call fcn.00408cb0
mov edx, dword [0x54b7c4]
mov eax, dword [edx + 0x40]
mov edx, dword [edx + 0x24]
mov byte [eax], 1
mov dword [eax + 4], edx
movzx ebx, byte [0xdfdfd8]
mov byte [0xdfdfd8], 1
call fcn.0040dac0
mov edx, eax
mov byte [0xdfdfd8], bl
movsx eax, al
cmp dl, 0x3a
je 0x42b8d0
cmp eax, 0x14
je 0x42b96a
cmp eax, 0x7b
je 0x42b960
cmp eax, 0x7d
je 0x42b910
cmp eax, 0x1b
je 0x42bb19
cmp eax, 8
je 0x42bb10
cmp eax, 0x20
je 0x42b9f6
cmp eax, 0x63
je 0x42ba00
cmp eax, 0x43
jne 0x42b700
mov ecx, dword [esp + 0x30]
mov edx, edi
sub edx, ecx
mov eax, ecx
and dh, 1
je 0x42b790
add eax, 0x100
mov byte [ecx], 0
cmp edi, eax
je 0x42b7a3
lea esi, [esi]
lea esi, [esi]
mov byte [eax], 0
add eax, 0x200
mov byte [eax - 0x100], 0
cmp edi, eax
jne 0x42b790
mov eax, dword [esp + 0x38]
mov ebp, dword [esp + 0x30]
mov dword [esp + 0xc], 1
xor ebx, ebx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 8], ebp
mov dword [esp], eax
call fcn.0044e9f0
jmp 0x42b810
mov dword [esp], ebp
call sub.msvcrt.dll_strlen
mov edx, eax
mov eax, ebx
shl eax, 8
add eax, 0x1720
add eax, esp
lea eax, [eax + edx - 1]
cmp byte [eax - 0x1200], 0x20
jne 0x42b7fa
mov byte [eax - 0x1200], 0
mov dword [esp], ebp
add ebx, 1
add ebp, 0x100
call fcn.00418830
cmp ebx, 0x12
je 0x42b816
cmp byte [ebp], 0
jne 0x42b7d0
mov ecx, dword [esp + 0x30]
mov eax, edi
sub eax, ecx
test ah, 1
je 0x42b830
lea esi, [ecx + 0x100]
mov byte [ecx], 0
cmp edi, esi
je 0x42b844
mov byte [esi], 0
add esi, 0x200
mov byte [esi - 0x100], 0
cmp edi, esi
jne 0x42b830
mov eax, dword [esp + 0x30]
mov dword [esp + 0xc], 1
mov ebx, 1
lea esi, [esp + 0x620]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x40]
mov dword [esp], eax
call fcn.0044f030
jmp 0x42b8c4
mov dword [esp], esi
call sub.msvcrt.dll_strlen
mov edx, eax
mov eax, ebx
shl eax, 8
add eax, 0x1720
add eax, esp
lea eax, [eax + edx - 1]
cmp byte [eax - 0x1200], 0x20
jne 0x42b8aa
mov byte [eax - 0x1200], 0
mov dword [esp], esi
add ebx, 1
add esi, 0x100
call fcn.00418830
cmp ebx, 0x12
je 0x42b666
cmp byte [esi], 0
jne 0x42b880
jmp 0x42b666
call fcn.0042d3f0
mov dword [esp + 0x10], str._Monster_Lore_
mov dword [esp + 0xc], 0xf
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0
mov dword [esp], 5
call fcn.00408cb0
jmp 0x42b700
lea eax, [esp + 0x70]
mov dword [esp + 8], 0xb
mov dword [esp + 4], str.Uninscribe_what_
mov dword [esp], eax
mov dword [0xdfe128], 0
mov dword [0x54c7e4], 0x50df04
mov dword [0x54c7e0], 0x4413b0
call fcn.00443190
test al, al
je 0x42b8d5
mov eax, dword [esp + 0x70]
mov dword [esp], eax
call fcn.0046fdc0
jmp 0x42b8d5
call fcn.00427970
jmp 0x42b8d5
mov dword [esp + 4], 3
mov dword [esp], 0x50e711
call fcn.004478c0
call fcn.004075b0
mov dword [esp], 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
sub esp, 4
mov dword [esp + 0x10], 0x50ee18
mov dword [esp + 0xc], 0xf
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.00408cb0
mov dword [esp + 0x10], str._Monster_Lore_
mov dword [esp + 0xc], 0xf
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0
jmp 0x42b6e2
call fcn.0044f030
mov dword [esp + 0x10], str.___press_ESC_Backspace_to_exit__SPACE_for_lore__c_C_to_chat_paste___
jmp 0x42b6ca
xor byte [esp + 0x53], 1
jmp 0x42b666
mov ecx, dword [esp + 0x30]
mov edx, edi
sub edx, ecx
cmp byte [esp + 0x53], 0
mov eax, ecx
je 0x42bdb6
and dh, 1
je 0x42ba30
add eax, 0x100
mov byte [ecx], 0
cmp edi, eax
je 0x42ba43
lea esi, [esi]
lea esi, [esi]
mov byte [eax], 0
add eax, 0x200
mov byte [eax - 0x100], 0
cmp edi, eax
jne 0x42ba30
mov eax, dword [esp + 0x30]
mov dword [esp + 0xc], 1
xor ebx, ebx
mov dword [esp + 8], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x40]
mov dword [esp], eax
call fcn.0044e9f0
jmp 0x42bab4
mov dword [esp], esi
call sub.msvcrt.dll_strlen
mov edx, eax
mov eax, ebx
shl eax, 8
add eax, 0x1720
add eax, esp
lea eax, [eax + edx - 1]
cmp byte [eax - 0x1200], 0x20
jne 0x42ba9a
mov byte [eax - 0x1200], 0
mov dword [esp], esi
add ebx, 1
add esi, 0x100
call fcn.00418830
cmp ebx, 0x12
je 0x42b666
cmp byte [esi], 0
jne 0x42ba70
jmp 0x42b666
mov edx, dword [esp + 0x30]
cmp dword [esp + 0x3c], edx
je 0x42c56a
mov dword [esp + 0xc], eax
mov ecx, dword [esp + 0x40]
mov eax, dword [esp + 0x48]
mov dword [esp + 0x18], edi
mov dword [esp + 0x14], 0x75
mov dword [esp + 0x10], ecx
mov dword [esp + 8], eax
mov dword [esp + 4], ebp
mov dword [esp], str.__4d__L__3d_
call fcn.00402550
mov edx, 7
jmp 0x42b2c6
add dword [esp + 0x4c], 1
jmp 0x42af68
cmp eax, 0x1b
jne 0x42ac99
movzx eax, word [0x515124]
mov byte [esp + 0x76], 0
mov word [esp + 0x74], ax
jmp 0x42ac99
cmp byte [ebx + 0xdabca0], 0
jne 0x42c55c
cmp byte [ebx + 0xdab7a0], 0
je 0x42b3d5
cmp cl, 0x6d
je 0x42b380
cmp cl, 0x4d
jne 0x42b380
cmp dword [esp + 0x30], 0x11
jne 0x42b3e0
mov dword [esp + 0x38], esi
cmp dword [esp + 0x3c], 0x10
mov edi, 1
jg 0x42c9d2
mov dword [esp + 0x30], 0x11
jmp 0x42b02b
call fcn.0042d3f0
jmp 0x42ad00
mov dword [esp + 4], 2
mov dword [esp], 0x50e711
call fcn.004478c0
call fcn.004075b0
mov dword [esp], 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
sub esp, 4
mov dword [esp + 0x10], 0x50ee18
mov dword [esp + 0xc], 0xf
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.00408cb0
jmp 0x42ad00
call fcn.00427970
jmp 0x42ad00
lea eax, [esp + 0x75]
mov dword [esp], eax
call sub.msvcrt.dll_atoi
mov dword [esp + 4], 0x2d
mov esi, eax
mov eax, dword [esp + 0x34]
mov dword [esp], eax
call sub.msvcrt.dll_strchr
xor edx, edx
test esi, esi
cmovns edx, esi
mov dword [esp + 0x48], edx
mov ebp, edx
test eax, eax
je 0x42bc3f
add eax, 1
mov dword [esp], eax
call sub.msvcrt.dll_atoi
mov ebp, eax
test eax, eax
mov eax, 0x3e7
cmove ebp, eax
cmp byte [esp + 0x75], 0
mov edx, dword [0xdad5a0]
je 0x42bc54
test bl, bl
jne 0x42c9f4
mov dword [esp + 0x38], 0xffffffff
mov dword [esp + 0x30], 0
cmp edx, 1
jle 0x42c02b
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x40], ebp
mov ebx, 1
mov ebp, dword [esp + 0x30]
mov esi, dword [esp + 0x38]
mov dword [esp + 0x4c], 0
mov eax, ecx
shl eax, 4
add eax, ecx
mov dword [esp + 0x58], eax
jmp 0x42bcab
add ebx, 1
cmp ebx, edx
jge 0x42bda9
cmp ebx, esi
je 0x42bca0
mov eax, dword [ebx*4 + 0xdac1a0]
cmp dword [esp + 0x40], eax
jl 0x42bca0
cmp dword [esp + 0x48], eax
jg 0x42bca0
cmp ebp, 0x11
je 0x42bb66
mov edi, dword [esp + 0x4c]
cmp dword [esp + 0x58], edi
jg 0x42c4c9
mov ecx, dword [ebx*4 + 0xdad5c0]
test ebp, ebp
lea edx, [ebx + ebx*4]
cmove esi, ebx
shl edx, 4
mov edi, dword [ecx*4 + 0xee6468]
mov dword [esp + 0x30], ecx
add edx, 0xdaf3c0
movsx ecx, byte [ebx + ebx + 0xdae9c1]
mov dword [esp + 0x54], edi
mov dword [esp + 0x38], ecx
movsx ecx, byte [ebx + ebx + 0xdae9c0]
test edi, edi
je 0x42c485
cmp dword [esp + 0x3c], ebp
je 0x42c94e
mov dword [esp + 0x1c], edi
mov edi, dword [esp + 0x38]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x24], edx
mov dword [esp + 0x20], 0x75
mov dword [esp + 0x18], ecx
mov dword [esp + 0x14], 0x75
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], ecx
mov dword [esp + 4], eax
mov dword [esp], 0x50ed3c
call fcn.00402550
mov edx, 7
mov dword [esp + 0x10], eax
lea eax, [ebp + 5]
mov dword [esp + 0xc], edx
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], eax
mov dword [esp], 5
call fcn.00408cb0
mov edx, dword [0xdad5a0]
mov dword [esp + ebp*4 + 0x8c], ebx
add ebx, 1
add ebp, 1
cmp ebx, edx
jl 0x42bcab
mov dword [esp + 0x30], ebp
mov dword [esp + 0x38], esi
jmp 0x42af73
and dh, 1
je 0x42bdd0
add eax, 0x100
mov byte [ecx], 0
cmp edi, eax
je 0x42bde3
lea esi, [esi]
nop
mov byte [eax], 0
add eax, 0x200
mov byte [eax - 0x100], 0
cmp edi, eax
jne 0x42bdd0
mov eax, dword [esp + 0x30]
mov dword [esp + 0xc], 1
xor ebx, ebx
mov dword [esp + 8], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x40]
mov dword [esp], eax
call fcn.0044f030
jmp 0x42be54
mov dword [esp], esi
call sub.msvcrt.dll_strlen
mov edx, eax
mov eax, ebx
shl eax, 8
add eax, 0x1720
add eax, esp
lea eax, [eax + edx - 1]
cmp byte [eax - 0x1200], 0x20
jne 0x42be3a
mov byte [eax - 0x1200], 0
mov dword [esp], esi
add ebx, 1
add esi, 0x100
call fcn.00418830
cmp ebx, 0x12
je 0x42b666
cmp byte [esi], 0
jne 0x42be10
jmp 0x42b666
cmp byte [ebx + 0xdabca0], 0
je 0x42b380
jmp 0x42b3d5
cmp ebp, 1
jle 0x42b30a
cmp dword [esp + 0x3c], 1
mov dword [esp + 0x38], 0xffffffff
mov edi, 1
lea ebp, [esp + 0xd0]
sbb eax, eax
xor ecx, ecx
mov byte [esp + 0x4c], 0
mov ebx, dword [sym.imp.msvcrt.dll_toupper]
and eax, 4
mov dword [esp + 0x30], ecx
add eax, 7
mov dword [esp + 0x5c], eax
nop
lea eax, [edi + edi*4]
mov dword [esp], ebp
mov esi, ebp
shl eax, 4
add eax, 0xdaf3c0
mov dword [esp + 4], eax
mov dword [esp + 0x40], eax
call sub.msvcrt.dll_strcpy
movsx eax, byte [esp + 0xd0]
test al, al
je 0x42bef2
lea esi, [esi]
mov dword [esp], eax
add esi, 1
call ebx
mov byte [esi - 1], al
movsx eax, byte [esi]
test al, al
jne 0x42bee0
mov eax, dword [esp + 0x34]
mov dword [esp], ebp
mov dword [esp + 4], eax
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x42c038
cmp byte [esp + 0x4c], 0
jne 0x42c000
mov ecx, dword [esp + 0x30]
test ecx, ecx
jne 0x42c2c9
mov eax, dword [edi*4 + 0xdad5c0]
mov ecx, dword [edi*4 + 0xdac1a0]
mov dword [esp + 0x38], eax
mov edx, dword [eax*4 + 0xee6468]
movzx eax, byte [edi + edi + 0xdae9c1]
mov dword [esp + 0x54], ecx
mov byte [esp + 0x4c], al
movsx eax, byte [edi + edi + 0xdae9c0]
test edx, edx
je 0x42c256
mov ecx, dword [esp + 0x30]
cmp dword [esp + 0x3c], ecx
mov dword [esp + 0x1c], edx
sete cl
mov dword [esp + 0x18], eax
movsx edx, byte [esp + 0x4c]
movzx ecx, cl
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x38]
lea esi, [ecx*4 + 0x75]
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x10], edx
mov dword [esp + 0x20], esi
mov dword [esp + 0x24], ecx
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x14], esi
mov dword [esp + 8], ecx
mov dword [esp + 4], eax
mov dword [esp], 0x50ed3c
call fcn.00402550
mov dword [esp + 8], 0xffffffff
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 4], 5
mov dword [esp + 0xc], eax
mov dword [esp], 5
call fcn.00408cb0
mov eax, dword [esp + 0x30]
test eax, eax
jne 0x42c166
movzx eax, byte [esp + 0x48]
mov dword [esp + 0x8c], edi
mov dword [esp + 0x38], edi
mov byte [esp + 0x4c], al
mov dword [esp + 0x30], 1
mov eax, dword [0xdad5a0]
add edi, 1
cmp edi, eax
jl 0x42beb0
mov ecx, dword [esp + 0x30]
mov ebp, eax
cmp ecx, 0x11
setle byte [esp + 0x48]
cmp ebp, 1
jg 0x42addd
mov dword [esp + 0x30], ecx
mov ebx, 1
jmp 0x42af73
cmp byte [esp + 0x74], 0x23
je 0x42c2ea
mov eax, dword [esp + 0x30]
test eax, eax
je 0x42c057
cmp eax, 1
jne 0x42c000
cmp byte [esp + 0x4c], 0
je 0x42c000
mov esi, dword [esp + 0x34]
mov dword [esp], esi
call sub.msvcrt.dll_strlen
mov dword [esp + 4], esi
mov dword [esp + 8], eax
mov dword [esp], ebp
call sub.msvcrt.dll_strncmp
test eax, eax
jne 0x42c000
mov edx, dword [edi*4 + 0xdad5c0]
movzx ecx, byte [edi + edi + 0xdae9c0]
mov esi, dword [edi*4 + 0xdac1a0]
mov eax, dword [edx*4 + 0xee6468]
mov byte [esp + 0x58], cl
mov dword [esp + 0x38], eax
movsx eax, byte [edi + edi + 0xdae9c1]
cmp dword [esp + 0x38], 0
mov byte [esp + 0x54], al
je 0x42c320
mov dword [esp + 0x54], eax
movsx eax, cl
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x30]
cmp dword [esp + 0x3c], eax
je 0x42c8c6
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x58]
mov dword [esp + 4], edx
mov dword [esp + 0x20], 0x75
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x14], 0x75
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 8], esi
mov dword [esp], 0x50ed3c
call fcn.00402550
mov edx, 7
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0xc], edx
add eax, 5
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], eax
mov dword [esp], 5
call fcn.00408cb0
mov eax, dword [esp + 0x30]
mov dword [esp + eax*4 + 0x8c], edi
add eax, 1
cmp byte [esp + 0x4c], 0
mov dword [esp + 0x30], eax
jne 0x42cb77
mov dword [esp + 0x38], edi
jmp 0x42c000
mov eax, dword [esp + 0x8c]
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x8c], edi
mov dword [esp + ecx*4 + 0x8c], eax
mov eax, dword [edi*4 + 0xdad5c0]
mov edx, dword [eax*4 + 0xee6468]
test edx, edx
je 0x42c36e
movsx ecx, byte [edi + edi + 0xdae9c0]
movsx esi, byte [edi + edi + 0xdae9c1]
mov dword [esp + 0x38], ecx
mov ecx, dword [edi*4 + 0xdac1a0]
mov dword [esp + 0x4c], ecx
mov ecx, dword [esp + 0x30]
cmp dword [esp + 0x3c], ecx
je 0x42c7fe
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], 0x75
mov dword [esp + 0x24], ecx
mov ecx, dword [esp + 0x38]
mov dword [esp + 0x14], 0x75
mov dword [esp + 0x18], ecx
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x10], esi
mov dword [esp + 8], ecx
mov dword [esp + 4], eax
mov dword [esp], 0x50ed3c
call fcn.00402550
mov edx, 7
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0xc], edx
add eax, 5
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], eax
mov dword [esp], 5
call fcn.00408cb0
add dword [esp + 0x30], 1
mov eax, dword [esp + 0x30]
cmp eax, 2
je 0x42c918
movzx eax, byte [esp + 0x48]
mov dword [esp + 0x38], edi
mov byte [esp + 0x4c], al
jmp 0x42c000
mov edx, dword [esp + 0x3c]
test edx, edx
jne 0x42c3ef
movsx edx, byte [esp + 0x4c]
mov ecx, dword [esp + 0x40]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x14], 0x79
mov dword [esp + 0x10], edx
mov dword [esp + 8], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x18], ecx
mov dword [esp + 4], eax
mov dword [esp], str.__4d__L__3d_
call fcn.00402550
mov edx, 0xb
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 5
mov dword [esp], 5
call fcn.00408cb0
jmp 0x42bfd8
mov dword [esp + 8], 0x50
mov dword [esp + 4], 5
mov dword [esp], 5
call fcn.00409060
jmp 0x42bf21
lea esi, [esp + 0x75]
mov dword [esp], esi
call sub.msvcrt.dll_atoi
test eax, eax
je 0x42c043
mov dword [esp], esi
mov eax, dword [edi*4 + 0xdad5c0]
mov dword [esp + 0x54], eax
call sub.msvcrt.dll_atoi
cmp dword [esp + 0x54], eax
jne 0x42c043
jmp 0x42bf0a
mov eax, dword [esp + 0x30]
cmp dword [esp + 0x3c], eax
je 0x42c84c
mov eax, dword [esp + 0x40]
mov dword [esp + 4], edx
mov dword [esp + 0x14], 0x75
mov dword [esp + 0x18], eax
movsx eax, byte [esp + 0x54]
mov dword [esp + 8], esi
mov dword [esp + 0x10], eax
movsx eax, byte [esp + 0x58]
mov dword [esp], str.__4d__L__3d_
mov dword [esp + 0xc], eax
call fcn.00402550
mov edx, 7
jmp 0x42c119
mov eax, dword [esp + 0x90]
movsx esi, byte [eax + eax + 0xdae9c0]
lea edx, [eax + eax*4]
movsx ecx, byte [eax + eax + 0xdae9c1]
shl edx, 4
mov dword [esp + 0x38], esi
mov esi, dword [eax*4 + 0xdac1a0]
add edx, 0xdaf3c0
mov eax, dword [eax*4 + 0xdad5c0]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x30]
cmp dword [esp + 0x3c], eax
je 0x42c88c
mov eax, dword [esp + 0x38]
mov dword [esp + 0x18], edx
mov dword [esp + 0x14], 0x75
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x10], ecx
mov dword [esp + 8], esi
mov dword [esp + 4], eax
mov dword [esp], str.__4d__L__3d_
call fcn.00402550
mov edx, 7
jmp 0x42c20b
movsx edx, byte [esp + 0x4c]
mov ecx, dword [esp + 0x40]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x14], 0x75
mov dword [esp + 0x10], edx
mov dword [esp + 8], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x18], ecx
mov dword [esp + 4], eax
mov dword [esp], str.__4d__L__3d_
call fcn.00402550
mov edx, 7
jmp 0x42c2a0
lea eax, [esp + 0x70]
mov dword [esp + 8], 0xb
mov dword [esp + 4], str.Uninscribe_what_
mov dword [esp], eax
mov dword [0xdfe128], 0
mov dword [0x54c7e4], 0x50df04
mov dword [0x54c7e0], 0x4413b0
call fcn.00443190
test al, al
je 0x42ad00
mov eax, dword [esp + 0x70]
mov dword [esp], eax
call fcn.0046fdc0
jmp 0x42ad00
cmp dword [esp + 0x3c], ebp
je 0x42c998
mov dword [esp + 8], eax
mov edi, dword [esp + 0x38]
mov eax, dword [esp + 0x30]
mov dword [esp + 0x18], edx
mov dword [esp + 0x14], 0x75
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], ecx
mov dword [esp + 4], eax
mov dword [esp], str.__4d__L__3d_
call fcn.00402550
mov edx, 7
jmp 0x42bd6b
add dword [esp + 0x4c], 1
jmp 0x42bca0
mov ecx, dword [esp + 0x30]
test ecx, ecx
jle 0x42ad00
mov edi, dword [esp + 0x3c]
sub ecx, 1
lea eax, [edi - 1]
test edi, edi
cmovle eax, ecx
mov dword [esp + 0x3c], eax
jmp 0x42ad00
mov eax, dword [esp + 0x30]
test eax, eax
jle 0x42ad00
mov ecx, dword [esp + 0x3c]
sub eax, 1
cmp eax, ecx
lea edx, [ecx + 1]
mov eax, 0
cmovg eax, edx
mov dword [esp + 0x3c], eax
jmp 0x42ad00
mov ecx, dword [esp + 0x44]
xor eax, eax
test ecx, ecx
setg al
sub ecx, eax
mov dword [esp + 0x44], ecx
jmp 0x42ad00
test bl, bl
je 0x42ad00
mov eax, dword [esp + 0x34]
mov dword [esp], eax
call sub.msvcrt.dll_strlen
mov byte [esp + eax + 0x73], 0
mov dword [esp + 0x44], 0
jmp 0x42ad00
cmp cl, 0x6d
jne 0x42b3c7
jmp 0x42b3d5
mov dword [esp + 0xc], eax
mov ecx, dword [esp + 0x40]
mov eax, dword [esp + 0x48]
mov dword [esp + 0x18], edi
mov dword [esp + 0x14], 0x79
mov dword [esp + 0x10], ecx
mov dword [esp + 8], eax
mov dword [esp + 4], ebp
mov dword [esp], str.__4d__L__3d_
call fcn.00402550
mov edx, 0xb
jmp 0x42b2c6
mov ecx, dword [esp + 0x44]
cmp ecx, 0x63
jg 0x42ad00
mov eax, edi
cmp al, 1
sbb ecx, 0xffffffff
mov dword [esp + 0x44], ecx
jmp 0x42ad00
mov dword [esp + 0x18], ecx
mov edi, dword [esp + 0x38]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x10], edx
mov dword [esp + 0x24], edi
mov dword [esp + 0x20], 0x79
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x14], 0x79
mov dword [esp + 8], ecx
mov dword [esp + 4], eax
mov dword [esp], 0x50ed3c
call fcn.00402550
mov edx, 0xb
jmp 0x42b47c
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x40]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x24], edi
mov dword [esp + 0x20], 0x79
mov dword [esp + 0x14], 0x79
mov dword [esp + 0x10], ecx
mov dword [esp + 8], eax
mov dword [esp + 4], ebp
mov dword [esp], 0x50ed3c
call fcn.00402550
mov edx, 0xb
jmp 0x42b2c6
mov dword [esp + 0xc], ecx
mov edi, dword [esp + 0x38]
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x10], edx
mov dword [esp + 0x18], edi
mov dword [esp + 0x14], 0x79
mov dword [esp + 8], ecx
mov dword [esp + 4], eax
mov dword [esp], str.__4d__L__3d_
call fcn.00402550
mov edx, 0xb
jmp 0x42b47c
cmp ebp, 1
jle 0x42b30a
movzx ebx, byte [esp + 0x76]
test bl, bl
je 0x42d278
cmp bl, 0x6d
je 0x42ca33
mov dword [esp + 0x38], 1
cmp bl, 0x4d
jne 0x42ca90
mov ebx, 1
jmp 0x42c6cd
add ebx, 1
cmp ebx, ebp
je 0x42c6f6
movsx edx, byte [ebx + ebx + 0xdae9c1]
cmp al, dl
jne 0x42c6c6
movsx ecx, byte [ebx + ebx + 0xdae9c0]
cmp cl, 0x4d
je 0x42c70b
cmp byte [ebx + 0xdab7a0], 0
jne 0x42c714
add ebx, 1
cmp ebx, ebp
jne 0x42c6cd
mov dword [esp + 0x30], 0
mov dword [esp + 0x38], 0xffffffff
jmp 0x42b35f
cmp byte [ebx + 0xdabca0], 0
jne 0x42c6e6
mov dword [esp + 0x38], ebx
mov ebp, ebx
mov ebx, dword [ebp*4 + 0xdad5c0]
lea eax, [ebp + ebp*4]
shl eax, 4
mov edi, dword [ebx*4 + 0xee6468]
lea esi, [eax + 0xdaf3c0]
mov eax, dword [ebp*4 + 0xdac1a0]
test edi, edi
je 0x42cafc
mov ebp, dword [esp + 0x3c]
test ebp, ebp
jne 0x42d086
mov dword [esp + 0x10], edx
mov dword [esp + 0x24], esi
mov dword [esp + 0x20], 0x79
mov dword [esp + 0x1c], edi
mov dword [esp + 0x18], ecx
mov dword [esp + 0x14], 0x79
mov dword [esp + 0xc], ecx
mov dword [esp + 8], eax
mov dword [esp + 4], ebx
mov dword [esp], 0x50ed3c
call fcn.00402550
mov edx, 0xb
jmp 0x42cb35
cmp esi, 0x37
je 0x42c54f
cmp esi, 8
je 0x42c54a
cmp esi, 0x7f
je 0x42c54a
cmp esi, 0x20
jne 0x42b62c
mov eax, dword [esp + 0x34]
mov dword [esp], eax
call sub.msvcrt.dll_strlen
cmp eax, 0x14
je 0x42ad00
mov dword [esp + 4], ebp
mov dword [esp], 0x50ee4b
call fcn.00402550
mov dword [esp + 4], eax
mov eax, dword [esp + 0x34]
mov dword [esp], eax
call sub.msvcrt.dll_strcat
mov dword [esp + 0x44], 0
jmp 0x42ad00
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], 0x79
mov dword [esp + 0x24], ecx
mov ecx, dword [esp + 0x38]
mov dword [esp + 0x14], 0x79
mov dword [esp + 0x18], ecx
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x10], esi
mov dword [esp + 8], ecx
mov dword [esp + 4], eax
mov dword [esp], 0x50ed3c
call fcn.00402550
mov edx, 0xb
jmp 0x42c20b
mov eax, dword [esp + 0x40]
mov dword [esp + 4], edx
mov dword [esp + 0x14], 0x79
mov dword [esp + 0x18], eax
movsx eax, byte [esp + 0x54]
mov dword [esp + 8], esi
mov dword [esp + 0x10], eax
movsx eax, byte [esp + 0x58]
mov dword [esp], str.__4d__L__3d_
mov dword [esp + 0xc], eax
call fcn.00402550
mov edx, 0xb
jmp 0x42c119
mov eax, dword [esp + 0x38]
mov dword [esp + 0x18], edx
mov dword [esp + 0x14], 0x79
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x10], ecx
mov dword [esp + 8], esi
mov dword [esp + 4], eax
mov dword [esp], str.__4d__L__3d_
call fcn.00402550
mov edx, 0xb
jmp 0x42c20b
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x58]
mov dword [esp + 4], edx
mov dword [esp + 0x20], 0x79
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x14], 0x79
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 8], esi
mov dword [esp], 0x50ed3c
call fcn.00402550
mov edx, 0xb
jmp 0x42c119
mov dword [esp + 0x38], edi
mov ebp, dword [0xdad5a0]
mov ecx, eax
jmp 0x42add4
mov eax, dword [esp + 0x34]
mov dword [esp], eax
call sub.msvcrt.dll_strlen
cmp eax, 0x14
je 0x42ad00
mov dword [esp], esi
call dword [sym.imp.msvcrt.dll_toupper]
mov ebp, eax
jmp 0x42c7d1
mov dword [esp + 0x1c], edi
mov edi, dword [esp + 0x38]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x24], edx
mov dword [esp + 0x20], 0x79
mov dword [esp + 0x18], ecx
mov dword [esp + 0x14], 0x79
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], ecx
mov dword [esp + 4], eax
mov dword [esp], 0x50ed3c
call fcn.00402550
mov edx, 0xb
jmp 0x42bd6b
mov dword [esp + 8], eax
mov edi, dword [esp + 0x38]
mov eax, dword [esp + 0x30]
mov dword [esp + 0x18], edx
mov dword [esp + 0x14], 0x79
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], ecx
mov dword [esp + 4], eax
mov dword [esp], str.__4d__L__3d_
call fcn.00402550
mov edx, 0xb
jmp 0x42bd6b
mov dword [esp + 0x3c], 0x10
mov dword [esp + 0x30], 0x11
jmp 0x42af90
test bl, bl
je 0x42ad00
jmp 0x42b150
cmp edx, 1
jle 0x42d1f0
mov ecx, 1
mov eax, dword [ecx*4 + 0xdac1a0]
cmp eax, ebp
jg 0x42ca17
cmp dword [esp + 0x48], eax
jle 0x42d138
add ecx, 1
cmp ecx, edx
jne 0x42ca02
mov dword [esp + 0x38], 0xffffffff
mov dword [esp + 0x30], 0
jmp 0x42bc6d
mov ebx, 1
jmp 0x42ca45
add ebx, 1
cmp ebx, ebp
je 0x42c6f6
movsx edx, byte [ebx + ebx + 0xdae9c1]
cmp al, dl
jne 0x42ca3a
movsx ecx, byte [ebx + ebx + 0xdae9c0]
cmp cl, 0x6d
je 0x42ca70
cmp byte [ebx + 0xdabca0], 0
je 0x42ca3a
jmp 0x42c714
cmp byte [ebx + 0xdabca0], 0
jne 0x42c714
cmp byte [ebx + 0xdab7a0], 0
jne 0x42ca3a
jmp 0x42c714
mov esi, 1
jmp 0x42caa2
add esi, 1
cmp esi, ebp
je 0x42c6f6
movsx edx, byte [esi + esi + 0xdae9c1]
cmp al, dl
jne 0x42ca97
movsx ecx, byte [esi + esi + 0xdae9c0]
cmp bl, cl
jne 0x42ca97
cmp byte [esi + 0xdabca0], 0
jne 0x42ca97
cmp byte [esi + 0xdab7a0], 0
jne 0x42ca97
mov dword [esp + 0x38], esi
mov ebp, esi
jmp 0x42c71a
call fcn.0043ab50
jmp 0x42a3f4
test bl, bl
jne 0x42b607
call fcn.00409b30
jmp 0x42a3f4
mov ebp, dword [esp + 0x3c]
test ebp, ebp
je 0x42d054
mov dword [esp + 0x10], edx
mov dword [esp + 0x18], esi
mov dword [esp + 0x14], 0x75
mov dword [esp + 0xc], ecx
mov dword [esp + 8], eax
mov dword [esp + 4], ebx
mov dword [esp], str.__4d__L__3d_
call fcn.00402550
mov edx, 7
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 5
mov dword [esp], 5
call fcn.00408cb0
mov eax, dword [esp + 0x38]
mov dword [esp + 0x30], 1
mov ebp, dword [0xdad5a0]
mov dword [esp + 0x8c], eax
jmp 0x42b356
mov ecx, eax
movzx eax, byte [esp + 0x4c]
mov dword [esp + 0x38], edi
mov ebp, dword [0xdad5a0]
mov byte [esp + 0x48], al
jmp 0x42add4
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.004302a0
jmp 0x42a3f4
mov dword [esp + 8], 0x50ebe5
mov dword [esp + 4], 0
mov dword [esp], 0x10
call fcn.00470760
jmp 0x42a3f4
call fcn.00429bd0
jmp 0x42a3f4
mov dword [esp + 8], 0x50ebe5
mov dword [esp + 4], 0
mov dword [esp], 9
call fcn.00470760
jmp 0x42a3f4
mov dword [0xdfe124], 5
call fcn.004481e0
jmp 0x42a3f4
mov dword [0xdfe124], 7
call fcn.004481e0
jmp 0x42a3f4
mov dword [0xdfe124], 3
call fcn.004481e0
jmp 0x42a3f4
mov eax, dword [0xde84a8]
mov dword [esp + 4], eax
mov dword [esp], str.start_explorer___s_
call fcn.00402550
mov dword [esp], eax
call sub.msvcrt.dll_system
jmp 0x42a3f4
mov eax, dword [0x503558]
mov edx, 0x50e738
test byte [eax + 0x7191c], 8
mov eax, 0x50e73b
mov dword [esp + 8], 0x114eec0
cmovne eax, edx
mov dword [esp], str.https:__www.tomenet.eu__mode_sserver_s
mov dword [esp + 4], eax
call fcn.00402550
mov dword [esp + 0x14], 1
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], eax
mov dword [esp + 4], str.open
mov dword [esp], 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
sub esp, 0x18
jmp 0x42a3f4
mov eax, dword [0xde84ac]
jmp 0x42cc3f
mov dword [esp + 4], 0x50f124
mov dword [esp], str.start_explorer___s_
call fcn.00402550
mov dword [esp], eax
call sub.msvcrt.dll_system
jmp 0x42a3f4
mov eax, dword [0xde84a8]
lea ebx, [esp + 0x120]
mov dword [esp + 0xc], 0x50f13a
mov dword [esp + 4], 0x400
mov dword [esp + 8], eax
mov dword [esp], ebx
call fcn.00404e10
mov dword [esp], ebx
call fcn.0044e490
test al, al
jne 0x42cd6e
mov dword [esp], 0x50f140
call fcn.00412f10
jmp 0x42a3f4
mov eax, dword [0xde84a8]
lea ebx, [esp + 0x120]
mov dword [esp + 0xc], 0x50f190
mov dword [esp + 4], 0x400
mov dword [esp + 8], eax
mov dword [esp], ebx
call fcn.00404e10
mov dword [esp], ebx
call fcn.0044e490
test al, al
je 0x42d043
mov dword [esp + 4], ebx
mov dword [esp], str.start_explorer___s_
call fcn.00402550
mov dword [esp], eax
call sub.msvcrt.dll_system
jmp 0x42a3f4
mov dword [esp + 0x14], 1
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], str.https:__muuttuja.org_tomenet_monsters_index.php
mov dword [esp + 4], str.open
mov dword [esp], 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
sub esp, 0x18
jmp 0x42a3f4
mov eax, dword [0x503558]
mov edx, 0x50e738
test byte [eax + 0x7191c], 8
mov eax, 0x50e73b
mov dword [esp + 8], 0x114eec0
cmovne eax, edx
mov dword [esp], str.https:__www.tomenet.eu_pstores.php_mode_sserver_s
mov dword [esp + 4], eax
jmp 0x42cc88
mov dword [esp + 0x14], 1
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], str.http:__angband.oook.cz_ladder_browse.php_vTomeNET
mov dword [esp + 4], str.open
mov dword [esp], 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
sub esp, 0x18
jmp 0x42a3f4
call fcn.0048ee00
jmp 0x42a3f4
call fcn.0048de10
jmp 0x42a3f4
mov dword [esp + 8], 0x50ebe5
mov dword [esp + 4], 0
mov dword [esp], 0xa
call fcn.00470760
jmp 0x42a3f4
mov dword [esp], 0
call fcn.00447100
jmp 0x42a3f4
mov eax, dword [0xde84a4]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 6
mov dword [esp + 4], str.v_info.txt
mov dword [esp], eax
call fcn.00438580
jmp 0x42a9f1
mov eax, dword [0xde84a4]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 9
mov dword [esp + 4], str.tr_info.txt
mov dword [esp], eax
call fcn.00438580
jmp 0x42a9f1
mov eax, dword [0xde84a4]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0xa
mov dword [esp + 4], str.st_info.txt
mov dword [esp], eax
call fcn.00438580
jmp 0x42a9f1
mov eax, dword [0xde84a4]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 3
mov dword [esp + 4], 0x50f090
mov dword [esp], eax
call fcn.00438580
jmp 0x42a9f1
mov eax, dword [0xde84a4]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 1
mov dword [esp + 4], 0x50f07a
mov dword [esp], eax
call fcn.00438580
jmp 0x42a9f1
mov eax, dword [0xde84a4]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 8
mov dword [esp + 4], 0x50f0c8
mov dword [esp], eax
call fcn.00438580
jmp 0x42a9f1
mov eax, dword [0xde84a4]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 2
mov dword [esp + 4], str.e_info.txt
mov dword [esp], eax
call fcn.00438580
jmp 0x42a9f1
mov eax, dword [0xde84a4]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 7
mov dword [esp + 4], str.d_info.txt
mov dword [esp], eax
call fcn.00438580
jmp 0x42a9f1
mov eax, dword [0xde84a4]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 5
mov dword [esp + 4], str.a_info.txt
mov dword [esp], eax
call fcn.00438580
jmp 0x42a9f1
mov eax, dword [0xde84a4]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 4
mov dword [esp + 4], str.re_info.txt
mov dword [esp], eax
call fcn.00438580
jmp 0x42a9f1
call fcn.0042d3f0
jmp 0x42a9f1
mov dword [esp + 4], 0
mov dword [esp], 0x50e711
call fcn.004478c0
jmp 0x42a9f1
mov dword [esp], 0x50f198
call fcn.00412f10
jmp 0x42a3f4
mov dword [esp + 0x10], edx
mov dword [esp + 0x18], esi
mov dword [esp + 0x14], 0x79
mov dword [esp + 0xc], ecx
mov dword [esp + 8], eax
mov dword [esp + 4], ebx
mov dword [esp], str.__4d__L__3d_
call fcn.00402550
mov edx, 0xb
jmp 0x42cb35
mov dword [esp + 0x10], edx
mov dword [esp + 0x24], esi
mov dword [esp + 0x20], 0x75
mov dword [esp + 0x1c], edi
mov dword [esp + 0x18], ecx
mov dword [esp + 0x14], 0x75
mov dword [esp + 0xc], ecx
mov dword [esp + 8], eax
mov dword [esp + 4], ebx
mov dword [esp], 0x50ed3c
call fcn.00402550
mov edx, 7
jmp 0x42cb35
mov dword [esp], 0x50f32c
call fcn.00412f10
mov eax, dword [0x1162e44]
mov dword [esp], str.start_notepad__s
mov dword [esp + 4], eax
call fcn.00402550
mov dword [esp], eax
call sub.msvcrt.dll_system
jmp 0x42a3f4
mov byte [esp + 0x6b], 0
xor esi, esi
jmp 0x42a73d
mov dword [0xdfe124], 1
call fcn.004481e0
jmp 0x42a3f4
movsx eax, byte [esp + 0x6b]
mov dword [esp + 8], 0x50ebe5
mov dword [esp], 0xb
mov dword [esp + 4], eax
call fcn.00470760
jmp 0x42a3f4
mov ebx, ecx
mov dword [esp + 0x38], ecx
mov ecx, dword [ecx*4 + 0xdad5c0]
lea edx, [ebx + ebx*4]
shl edx, 4
mov edi, dword [ecx*4 + 0xee6468]
lea esi, [edx + 0xdaf3c0]
mov edx, ebx
movsx ebx, byte [ebx + ebx + 0xdae9c0]
movsx edx, byte [edx + edx + 0xdae9c1]
test edi, edi
jne 0x42d2ac
mov edi, dword [esp + 0x3c]
test edi, edi
jne 0x42d2f5
mov dword [esp + 0x10], edx
movsx edx, bl
mov dword [esp + 0xc], edx
mov dword [esp + 0x18], esi
mov dword [esp + 0x14], 0x79
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], str.__4d__L__3d_
call fcn.00402550
mov edx, 0xb
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], eax
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 5
mov dword [esp], 5
call fcn.00408cb0
mov eax, dword [esp + 0x38]
mov dword [esp + 0x30], 1
mov edx, dword [0xdad5a0]
mov dword [esp + 0x8c], eax
jmp 0x42bc64
mov edx, dword [esp + 0x3c]
test edx, edx
js 0x42d3d3
mov dword [esp + 0x38], 0xffffffff
xor edi, edi
mov dword [esp + 0x30], 0
mov dword [esp + 0x3c], 0
jmp 0x42b02b
mov eax, dword [esp + 0x6c]
mov dword [esp], eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
sub esp, 4
mov dword [esp + 0x10], str.Registry_key_for_default_text_editor_not_found.
mov dword [esp + 0xc], 0xb
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 1
mov dword [esp], 0
call fcn.00408cb0
jmp 0x42ab2e
cmp eax, 0x14
je 0x42ad00
cmp bl, 0x24
jne 0x42c93e
jmp 0x42c7d1
mov ecx, 1
jmp 0x42d28b
add ecx, 1
cmp ecx, ebp
je 0x42c6f6
movsx edx, byte [ecx + ecx + 0xdae9c1]
cmp al, dl
jne 0x42d280
mov dword [esp + 0x38], ecx
movsx ecx, byte [ecx + ecx + 0xdae9c0]
mov ebp, dword [esp + 0x38]
jmp 0x42c71a
cmp dword [esp + 0x3c], 0
jne 0x42d32a
mov dword [esp + 0x10], edx
mov dword [esp + 0x24], esi
mov dword [esp + 0x20], 0x79
mov dword [esp + 0x1c], edi
mov dword [esp + 0x18], ebx
mov dword [esp + 0x14], 0x79
mov dword [esp + 0xc], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], 0x50ed3c
call fcn.00402550
mov edx, 0xb
jmp 0x42d1ae
mov dword [esp + 0x10], edx
movsx edx, bl
mov dword [esp + 0xc], edx
mov dword [esp + 0x18], esi
mov dword [esp + 0x14], 0x75
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], str.__4d__L__3d_
call fcn.00402550
mov edx, 7
jmp 0x42d1ae
mov dword [esp + 0x10], edx
mov dword [esp + 0x24], esi
mov dword [esp + 0x20], 0x75
mov dword [esp + 0x1c], edi
mov dword [esp + 0x18], ebx
mov dword [esp + 0x14], 0x75
mov dword [esp + 0xc], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], 0x50ed3c
call fcn.00402550
mov edx, 7
jmp 0x42d1ae
cmp al, 0x62
je 0x42d3c4
cmp al, 0x65
mov ecx, 0x30d40
sete dl
add edx, edx
cmp al, 0x65
mov eax, 0
cmove eax, ecx
jmp 0x42a6d5
mov edx, 1
mov eax, 0x186a0
jmp 0x42a6d5
imul ebx, ebx, 0x186a0
movsx eax, byte [esp + 0x6b]
mov dword [esp + 8], 0x50ebe5
mov dword [esp], 0xb
add eax, ebx
mov dword [esp + 4], eax
call fcn.00470760
jmp 0x42a3f4
mov edx, 2
mov eax, 0x30d40
jmp 0x42a6d5
mov dword [esp + 0x38], 0xffffffff
xor edi, edi
mov dword [esp + 0x30], 0
jmp 0x42b02b