Function at 0x418b90
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1d0
mov eax, dword [0x5c43dc]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
mov ebx, dword [ebp + 0xc]
mov dword [ebp - 0x1b4], eax
movzx eax, word [eax]
push edi
push eax
mov dword [ebp - 0x1c0], 0
call fcn.00487bb0
mov edi, eax
add esp, 4
mov dword [ebp - 0x1a0], edi
test edi, edi
je 0x41f611
push esi
call fcn.0040eae0
mov esi, dword [edi + 0x8c]
mov ecx, dword [edi + 0x88]
mov edx, dword [edi + 0x90]
mov dword [ebp - 0x1b8], eax
mov dword [ebp - 0x1bc], ecx
mov dword [ebp - 0x1cc], esi
mov dword [ebp - 0x1b0], edx
mov dword [ebp - 0x1d0], 0
test esi, 0x2000000
je 0x418c30
mov eax, esi
and eax, 0xfde
or dword [ebp - 0x1bc], eax
mov dword [ebp - 0x1d0], 1
push 4
push edi
call fcn.004880b0
add esp, 8
test eax, eax
jne 0x418c4f
test dword [ebp - 0x1bc], 0x82000
je 0x418f36
test dword [ebp - 0x1bc], 0x80000
jne 0x41f610
movzx eax, word [edi + 0x14e]
test eax, eax
je 0x41f610
push eax
call fcn.00483b40
add esp, 4
mov dword [ebp - 0x1b0], eax
test eax, eax
je 0x41f610
mov eax, ebx
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x418c90
mov ecx, dword [edi + 0x7c]
sub eax, edx
push ecx
lea esi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push 0x5e92
call fcn.004865f0
add esp, 4
push eax
push 0x5a4d60
push esi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
cmp byte [ebx], 0
je 0x418ce2
lea edi, [ebx - 1]
mov edi, edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x418cd0
mov dx, word [0x5a47f0]
mov word [edi], dx
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x418ce7
sub eax, edx
push 0x5dc3
lea esi, [ebx + eax]
call fcn.004865f0
push eax
push str._s:1
push esi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
cmp byte [ebx], 0
je 0x418d26
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x418d15
mov ax, word [0x5a47f0]
mov word [edi], ax
mov eax, ebx
lea edx, [eax + 1]
jmp 0x418d30
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x418d30
mov esi, dword [ebp - 0x1b0]
movzx ecx, word [esi + 0x161b]
push ecx
sub eax, edx
push 0x5e94
lea edi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push 0x5a4d80
push edi
call dword [sym.imp.USER32.dll_wsprintfA]
movsx ecx, byte [esi + 0x1621]
add esp, 0x10
cmp ecx, 1
jle 0x418dc1
cmp byte [ebx], 0
je 0x418d92
lea edi, [ebx - 1]
jmp 0x418d80
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x418d80
mov dx, word [0x5a47f0]
mov word [edi], dx
mov eax, ebx
lea edi, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x418d97
push ecx
sub eax, edi
push 0x5f38
lea edi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push 0x5a4d80
push edi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
cmp byte [ebx], 0
je 0x418de1
lea edi, [ebx - 1]
lea esp, [esp]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x418dd0
mov ax, word [0x5a47f0]
mov word [edi], ax
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x418de6
movzx ecx, word [esi + 0x186]
push ecx
sub eax, edx
push 0x5dc6
lea edi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push 0x5a4d80
push edi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea edi, [ebx - 1]
lea ebx, [ebx]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x418e20
mov dx, word [0x5a47f0]
mov eax, ebx
mov word [edi], dx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x418e37
sub eax, edx
lea edi, [ebx + eax]
movzx eax, word [esi + 0x188]
push eax
push 0x5dc7
call fcn.004865f0
add esp, 4
push eax
push 0x5a4d80
push edi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea edi, [ebx - 1]
jmp 0x418e70
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x418e70
mov cx, word [0x5a47f0]
mov eax, ebx
mov word [edi], cx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x418e87
sub eax, edx
movzx edx, word [esi + 0x18e]
push edx
push 0x5dca
lea edi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push 0x5a4d80
push edi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea edi, [ebx - 1]
jmp 0x418ec0
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x418ec0
mov ax, word [0x5a47f0]
mov word [edi], ax
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x418ed6
movzx ecx, word [esi + 0x18c]
push ecx
sub eax, edx
push 0x5dc9
lea edi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push 0x5a4d80
push edi
call dword [sym.imp.USER32.dll_wsprintfA]
lea edx, [esi + 0x1a6]
push edx
push 0
push ebx
call fcn.00410e50
add esi, 0x19d
push esi
push 1
push ebx
call fcn.00410e50
add esp, 0x28
pop esi
pop edi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005517d0
mov esp, ebp
pop ebp
ret
push 0xee
lea eax, [ebp - 0x198]
push 0
push eax
call fcn.005517e0
add esp, 0xc
test byte [0x695344], 1
je 0x418fbd
mov eax, dword [0x6315c8]
dec eax
jne 0x418fbd
cmp byte [ebx], al
je 0x418f76
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x418f64
mov cx, word [0x5a47f0]
mov word [edi], cx
lea edi, [ebx - 1]
lea esp, [esp]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x418f80
mov dx, word [0x5a47f0]
mov eax, ebx
mov word [edi], dx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x418f97
sub eax, edx
push 0x5348
lea edi, [ebx + eax]
call fcn.004865f0
push eax
push str._2_s_A
push edi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
test esi, 0x800000
je 0x419188
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x19c], 0
test eax, 0x200000
je 0x418fea
mov dword [ebp - 0x19c], 0x5269
test al, 1
je 0x418ff8
mov esi, 0x5ea9
jmp 0x4190e8
test eax, 0x8000000
je 0x419009
mov esi, 0x5dcf
jmp 0x4190e8
test eax, 0x1000000
je 0x41901a
mov esi, 0x5dd0
jmp 0x4190e8
test eax, 0x800000
je 0x41902b
mov esi, 0x5dd1
jmp 0x4190e8
test eax, 0x2000000
je 0x41903c
mov esi, 0x5dd2
jmp 0x4190e8
test eax, 0x4000000
je 0x41904d
mov esi, 0x5dd3
jmp 0x4190e8
test eax, 0x400000
je 0x41905e
mov esi, 0x5dd4
jmp 0x4190e8
test al, 0x40
je 0x419069
mov esi, 0x5e45
jmp 0x4190e8
test al, al
jns 0x419074
mov esi, 0x5e44
jmp 0x4190e8
test al, 2
je 0x41907f
mov esi, 0x4f5d
jmp 0x4190e8
test al, 4
je 0x41908a
mov esi, 0x4f5c
jmp 0x4190e8
test al, 8
je 0x419095
mov esi, 0x4f5f
jmp 0x4190e8
test al, 0x10
je 0x4190a0
mov esi, 0x4f63
jmp 0x4190e8
test eax, 0x100
je 0x4190ae
mov esi, 0x4f64
jmp 0x4190e8
test eax, 0x200
je 0x4190bc
mov esi, 0x4f60
jmp 0x4190e8
test eax, 0x400
je 0x4190ca
mov esi, 0x4f5e
jmp 0x4190e8
test eax, 0x800
je 0x4190d8
mov esi, 0x4f65
jmp 0x4190e8
test eax, 0x100000
je 0x419188
mov esi, 0x4c4c92
cmp byte [ebx], 0
je 0x419101
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x4190f0
mov ax, word [0x5a47f0]
mov word [edi], ax
cmp dword [ebp - 0x19c], 0
mov eax, ebx
lea edx, [eax + 1]
je 0x419155
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x419110
sub eax, edx
push esi
lea edi, [ebx + eax]
call fcn.004865f0
mov ecx, dword [ebp - 0x19c]
add esp, 4
push eax
push ecx
call fcn.004865f0
add esp, 4
push eax
push 0x5e6d
call fcn.004865f0
add esp, 4
push eax
push str._s_s_s
push edi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
jmp 0x419188
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x419155
sub eax, edx
push esi
lea edi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push 0x5e6d
call fcn.004865f0
add esp, 4
push eax
push 0x5a4c44
push edi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
mov eax, dword [ebp - 0x1bc]
test al, 1
je 0x41935b
cmp byte [ebx], 0
je 0x4191b2
lea edi, [ebx - 1]
mov edi, edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x4191a0
mov dx, word [0x5a47f0]
mov word [edi], dx
cmp dword [ebp - 0x1d0], 0
mov eax, ebx
lea edx, [eax + 1]
je 0x419207
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4191c0
sub eax, edx
push 0x4f61
lea esi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push 0x5269
call fcn.004865f0
add esp, 4
push eax
push 0x5e6d
call fcn.004865f0
add esp, 4
push eax
push str._s_3_s_s_1
push esi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
jmp 0x41923e
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x419207
sub eax, edx
push 0x4f61
lea esi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push 0x5e6d
call fcn.004865f0
add esp, 4
push eax
push 0x5a4c44
push esi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x419241
mov ax, word [0x5a47f0]
push 0x5dce
mov word [edi], ax
call fcn.004865f0
add esp, 4
mov esi, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x419261
sub eax, esi
lea edi, [ebx - 1]
lea ecx, [ecx]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x419270
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, dword [ebp - 0x1bc]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, 2
test eax, 0x8000000
je 0x4192a2
push ebx
xor esi, esi
push 0x5dcf
jmp 0x4192f6
test eax, 0x1000000
je 0x4192b6
push ebx
mov esi, 1
push 0x5dd0
jmp 0x4192f6
test eax, 0x800000
je 0x4192c5
push ebx
push 0x5dd1
jmp 0x4192f6
test eax, 0x2000000
je 0x4192d4
push ebx
push 0x5dd2
jmp 0x4192f6
test eax, 0x4000000
je 0x4192e5
push ebx
xor esi, esi
push 0x5dd3
jmp 0x4192f6
test eax, 0x10400000
je 0x419ab7
push ebx
push 0x5dd4
push 0
call fcn.0040f450
add esp, 0xc
cmp byte [ebx], 0
je 0x41931a
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x419308
mov cx, word [0x5a47f0]
mov word [edi], cx
add esi, 0x5e50
push esi
call fcn.004865f0
add esp, 4
mov esi, eax
jmp 0x419330
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x419330
sub eax, esi
lea edi, [ebx - 1]
lea esp, [esp]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x419340
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x419ab7
test al, 0xc0
je 0x419492
cmp byte [ebx], 0
je 0x419382
lea edi, [ebx - 1]
jmp 0x419370
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x419370
mov dx, word [0x5a47f0]
mov word [edi], dx
cmp dword [ebp - 0x1d0], 0
mov eax, ebx
lea edx, [eax + 1]
je 0x4193d7
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x419390
sub eax, edx
push 0x4f62
lea esi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push 0x5269
call fcn.004865f0
add esp, 4
push eax
push 0x5e6d
call fcn.004865f0
add esp, 4
push eax
push str._s_3_s_s_1
push esi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
jmp 0x41940e
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4193d7
sub eax, edx
push 0x4f62
lea esi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push 0x5e6d
call fcn.004865f0
add esp, 4
push eax
push 0x5a4c44
push esi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x419411
mov ax, word [0x5a47f0]
push 0x5e43
mov word [edi], ax
call fcn.004865f0
add esp, 4
mov esi, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x419431
sub eax, esi
lea edi, [ebx - 1]
lea ecx, [ecx]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x419440
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov al, byte [ebp - 0x1bc]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
test al, al
jns 0x419475
push ebx
push 0x5e44
push 0
call fcn.0040f450
add esp, 0xc
jmp 0x419ab7
test al, 0x40
je 0x419ab7
push ebx
push 0x5e45
push 0
call fcn.0040f450
add esp, 0xc
jmp 0x419ab7
test eax, 0x1000
je 0x4194a0
mov esi, 0x4f62
jmp 0x419517
test al, 2
je 0x4194ab
mov esi, 0x4f5d
jmp 0x419517
test al, 4
je 0x4194b6
mov esi, 0x4f5c
jmp 0x419517
test al, 8
je 0x4194c1
mov esi, 0x4f5f
jmp 0x419517
test al, 0x10
je 0x4194dd
mov esi, dword [ebp - 0x1d0]
neg esi
sbb esi, esi
and esi, 0x307
add esi, 0x4f63
jmp 0x419517
test eax, 0x100
je 0x4194eb
mov esi, 0x4f64
jmp 0x419517
test eax, 0x200
je 0x4194f9
mov esi, 0x4f60
jmp 0x419517
test eax, 0x400
je 0x419507
mov esi, 0x4f5e
jmp 0x419517
test eax, 0x800
je 0x4195b5
mov esi, 0x4f65
cmp byte [ebx], 0
je 0x419532
lea edi, [ebx - 1]
nop
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x419520
mov cx, word [0x5a47f0]
mov word [edi], cx
cmp dword [ebp - 0x1d0], 0
mov eax, ebx
lea edx, [eax + 1]
je 0x419586
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x419540
sub eax, edx
push esi
lea edi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push 0x5269
call fcn.004865f0
add esp, 4
push eax
push 0x5e6d
call fcn.004865f0
add esp, 4
push eax
push str._s_3_s_s_1
push edi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
jmp 0x419ab7
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x419586
sub eax, edx
push esi
lea edi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push 0x5e6d
call fcn.004865f0
add esp, 4
push eax
push 0x5a4c44
push edi
jmp 0x419aae
test eax, 0x20000
je 0x41975f
cmp byte [ebx], 0
je 0x4195da
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x4195c8
mov dx, word [0x5a47f0]
mov word [edi], dx
push 0
call fcn.005528bb
mov esi, dword [ebp - 0x1b4]
add esp, 4
cmp eax, dword [esi + 0x23]
mov dword [ebp - 0x1c4], edx
lea eax, [ebx - 1]
jbe 0x419612
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x4195f8
mov cx, word [0x5a4c80]
mov word [eax], cx
mov dl, byte [0x5a4c82]
jmp 0x41962a
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x419612
mov cx, word [0x5a4c3c]
mov word [eax], cx
mov dl, byte [0x5a4c3e]
mov byte [eax + 2], dl
mov eax, dword [esi + 0x23]
test eax, eax
jne 0x41967f
lea ecx, [eax - 0x76c]
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x88], eax
lea edx, [ebp - 0xa8]
dec eax
mov dword [ebp - 0x1a8], edx
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0x98], eax
jmp 0x41968e
push eax
call fcn.00441520
add esp, 4
mov dword [ebp - 0x1a8], eax
push 0x5e7a
call fcn.004865f0
add esp, 4
mov esi, eax
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4196a0
sub eax, esi
lea edi, [ebx - 1]
lea esp, [esp]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x4196b0
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
mov eax, ebx
rep movsb byte es:[edi], byte [esi]
lea esi, [eax + 1]
jmp 0x4196d0
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4196d0
sub eax, esi
lea esi, [ebx + eax]
mov eax, dword [ebp - 0x1a8]
mov ecx, dword [eax + 4]
mov edx, dword [eax + 8]
push ecx
mov ecx, dword [eax + 0xc]
push edx
mov edx, dword [eax + 0x10]
mov eax, dword [eax + 0x14]
push ecx
inc edx
push edx
add eax, 0x76c
push eax
push 0x5e73
call fcn.004865f0
add esp, 4
push eax
push esi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x1c
lea eax, [ebx - 1]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x419717
mov cx, word [0x5a4c7c]
mov word [eax], cx
mov dl, byte [0x5a4c7e]
mov byte [eax + 2], dl
mov eax, dword [ebp - 0x1a0]
movzx ecx, word [eax + 0x95]
push 3
push ecx
push ebx
push 0
push 0
call fcn.00414cc0
add esp, 0x14
lea eax, [ebx - 1]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x419752
jmp 0x4199e9
test eax, 0x100000
je 0x41997c
mov eax, dword [ebp - 0x1b4]
movzx esi, word [eax + 0x25]
test esi, esi
je 0x4197bf
mov edx, 0x13e2
cmp word [eax], dx
je 0x4197bf
cmp byte [ebx], 0
je 0x4197a1
lea edi, [ebx - 1]
lea ebx, [ebx]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x419790
mov ax, word [0x5a47f0]
mov word [edi], ax
push esi
push 0x5e83
call fcn.004865f0
add esp, 4
push eax
push 0x5a4d80
push ebx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
cmp byte [ebx], 0
je 0x4197d9
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x4197c7
mov cx, word [0x5a47f0]
mov word [edi], cx
lea eax, [ebx - 1]
lea esp, [esp]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x4197e0
mov dx, word [0x5a4c80]
mov word [eax], dx
mov cl, byte [0x5a4c82]
mov byte [eax + 2], cl
xor eax, eax
test dword [ebp - 0x1bc], 0x80000000
je 0x419811
push ebx
push 0x5dd5
jmp 0x419823
test dword [ebp - 0x1cc], 0x20000000
je 0x41982d
push ebx
push 0x5f19
push 0
call fcn.0040f450
add esp, 0xc
test dword [ebp - 0x1bc], 0x40000000
je 0x419848
push ebx
push 0x5dd6
push eax
call fcn.0040f450
add esp, 0xc
push ebx
push 0x5e82
push eax
call fcn.0040f450
add esp, 0xc
lea eax, [ebx - 1]
lea ebx, [ebx]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x419860
mov dx, word [0x5a4c7c]
mov word [eax], dx
mov cl, byte [0x5a4c7e]
mov edx, dword [ebp - 0x1b4]
mov byte [eax + 2], cl
cmp byte [edx + 0x27], 2
jne 0x419928
cmp byte [ebx], 0
je 0x4198a4
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x419893
mov ax, word [0x5a47f0]
mov word [edi], ax
mov eax, ebx
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4198b0
sub eax, edx
push esi
push 0x5e84
lea edi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push str._2_s_1
push edi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea edi, [ebx - 1]
lea ecx, [ecx]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x4198e0
mov cx, word [0x5a47f0]
mov eax, ebx
mov word [edi], cx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4198f7
sub eax, edx
mov edx, dword [ebp - 0x1b4]
push 0x20
add edx, 0x28
push edx
add eax, ebx
push eax
call fcn.005505f0
add esp, 0xc
pop esi
pop edi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005517d0
mov esp, ebp
pop ebp
ret
push 0x1000
call fcn.00426050
add esp, 4
test eax, eax
je 0x41f610
cmp byte [ebx], 0
je 0x419956
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x419945
mov ax, word [0x5a47f0]
mov word [edi], ax
mov ecx, dword [ebp - 0x1b4]
push 0x20
add ecx, 0x28
push ecx
push ebx
call fcn.005505f0
add esp, 0xc
pop esi
pop edi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005517d0
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 0x1cc]
test eax, 0x10000000
je 0x419a01
cmp byte [ebx], 0
je 0x4199a3
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x419991
mov dx, word [0x5a47f0]
mov word [edi], dx
lea eax, [ebx - 1]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x4199a6
mov cx, word [0x5a4c7c]
mov word [eax], cx
mov dl, byte [0x5a4c7e]
mov byte [eax + 2], dl
mov eax, dword [ebp - 0x1a0]
movzx ecx, word [eax + 0x95]
push 3
push ecx
push ebx
push 0
push 0
call fcn.00414cc0
add esp, 0x14
lea eax, [ebx - 1]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x4199e1
mov dx, word [0x5a4c7c]
mov word [eax], dx
mov cl, byte [0x5a4c7e]
mov byte [eax + 2], cl
jmp 0x419ab7
test eax, 0x100000
je 0x419ab7
cmp byte [ebx], 0
je 0x419a26
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x419a14
mov dx, word [0x5a47f0]
mov word [edi], dx
cmp dword [ebp - 0x1d0], 0
mov eax, ebx
lea edx, [eax + 1]
je 0x419a80
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x419a34
sub eax, edx
push 0x4c4c92
lea esi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push 0x5269
call fcn.004865f0
add esp, 4
push eax
push 0x5e6d
call fcn.004865f0
add esp, 4
push eax
push str._s_3_s_s_1
push esi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
jmp 0x419ab7
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x419a80
sub eax, edx
push 0x4c4c92
lea esi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push 0x5e6d
call fcn.004865f0
add esp, 4
push eax
push 0x5a4c44
push esi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
mov esi, dword [ebp - 0x1cc]
test esi, 0x4000
je 0x419b27
cmp byte [ebx], 0
je 0x419ae1
lea edi, [ebx - 1]
lea ecx, [ecx]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x419ad0
mov ax, word [0x5a47f0]
mov word [edi], ax
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x419ae6
sub eax, edx
push 0x4c5fbb
lea edi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push 0x5e6d
call fcn.004865f0
add esp, 4
push eax
push 0x5a4c44
push edi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
mov dword [ebp - 0x1bc], 0x800
test esi, 0x2000
je 0x419b91
cmp byte [ebx], 0
je 0x419b49
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x419b37
mov cx, word [0x5a47f0]
mov word [edi], cx
mov eax, ebx
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x419b50
sub eax, edx
push 0x4c5fba
lea esi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push 0x5e6d
call fcn.004865f0
add esp, 4
push eax
push 0x5a4c44
push esi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
mov dword [ebp - 0x1bc], 1
mov edx, dword [ebp - 0x1b4]
movzx eax, word [edx + 0xc]
mov dword [ebp - 0x1a4], eax
test eax, eax
je 0x419d26
cmp byte [ebx], 0
je 0x419bc2
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x419bb1
mov ax, word [0x5a47f0]
mov word [edi], ax
push 0x5dc0
call fcn.004865f0
add esp, 4
mov esi, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x419bd1
sub eax, esi
lea edi, [ebx - 1]
lea ecx, [ecx]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x419be0
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
mov eax, ebx
rep movsb byte es:[edi], byte [esi]
lea esi, [eax + 1]
jmp 0x419c00
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x419c00
mov ecx, dword [ebp - 0x1a4]
push ecx
sub eax, esi
add eax, ebx
push 0x5a4658
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebx - 1]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x419c24
mov dx, word [0x5a4d5c]
mov word [eax], dx
mov cl, byte [0x5a4d5e]
push 0x5dd7
mov byte [eax + 2], cl
call fcn.004865f0
add esp, 4
mov esi, eax
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x419c50
sub eax, esi
lea edi, [ebx - 1]
lea esp, [esp]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x419c60
mov edx, dword [ebp - 0x1a0]
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
movzx eax, word [edx + 0x99]
imul eax, dword [ebp - 0x1a4]
push 1
push 0x64
push eax
call fcn.00441780
mov eax, ebx
add esp, 0xc
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x419c9c
sub eax, esi
push 2
add eax, ebx
push eax
sub esp, 8
fstp qword [esp]
call fcn.004417e0
add esp, 0x10
cmp dword [ebp - 0x1a4], 1
jle 0x419d26
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x419cc4
mov cx, word [0x5a4fa4]
mov edx, dword [ebp - 0x1a0]
mov word [edi], cx
movzx eax, word [edx + 0x99]
push 1
push 0x64
push eax
call fcn.00441780
mov eax, ebx
add esp, 0xc
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x419cf5
sub eax, edx
push 2
add eax, ebx
push eax
sub esp, 8
fstp qword [esp]
call fcn.004417e0
add esp, 0x10
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x419d14
mov cx, word [0x5a4c08]
mov word [edi], cx
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0x1b0], 0
test eax, 0x20000000
je 0x41a3df
mov esi, dword [ebp - 0x1a0]
movzx edi, word [esi + 0x14e]
mov dword [ebp - 0x1a4], edi
test edi, edi
je 0x41c88b
test eax, 0x200000
jne 0x41c88b
push 0
push edi
call fcn.00489550
add esp, 8
mov dword [ebp - 0x1a8], eax
test eax, eax
je 0x41c88b
cmp edi, 0xffff
jne 0x419de4
cmp byte [ebx], 0
je 0x419da2
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x419d90
mov dx, word [0x5a47f0]
mov word [edi], dx
lea eax, [ebx - 1]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x419da5
mov cx, word [0x5a4c3c]
push 0
push 0
push ebx
mov word [eax], cx
mov dl, byte [0x5a4c3e]
push 0x5e07
push 1
mov byte [eax + 2], dl
call fcn.0040f5f0
add esp, 0x14
lea eax, [ebx - 1]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x419dd7
jmp 0x41c878
mov eax, dword [esi + 0x150]
mov dword [ebp - 0x19c], eax
test eax, eax
jle 0x41a107
mov eax, dword [ebp - 0x1b4]
push ebx
push esi
push eax
call fcn.004114e0
movzx eax, word [esi + 0x15c]
add esp, 0xc
test ax, ax
je 0x419eb7
mov ecx, dword [ebp - 0x1b8]
cmp word [ecx + 0x40d], ax
jae 0x419e4b
lea eax, [ebx - 1]
jmp 0x419e30
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x419e30
mov dx, word [0x5a4c80]
mov word [eax], dx
mov cl, byte [0x5a4c82]
mov byte [eax + 2], cl
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x419e50
sub eax, edx
movzx edx, word [esi + 0x15c]
push edx
push 0x5f2f
lea edi, [ebx + eax]
call fcn.004865f0
mov esi, dword [sym.imp.USER32.dll_wsprintfA]
add esp, 4
push eax
push 0x5a4d80
push edi
call esi
add esp, 0x10
lea eax, [ebx - 1]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x419e86
mov cx, word [0x5a4c7c]
mov word [eax], cx
mov dl, byte [0x5a4c7e]
mov byte [eax + 2], dl
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x419ea4
mov ax, word [0x5a47f0]
mov word [edi], ax
jmp 0x419ebd
mov esi, dword [sym.imp.USER32.dll_wsprintfA]
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x419ec0
mov cx, word [0x5a47f0]
mov word [edi], cx
lea eax, [ebx - 1]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x419ed5
mov dx, word [0x5a4c3c]
mov word [eax], dx
mov cl, byte [0x5a4c3e]
mov edx, dword [ebp - 0x1a8]
mov byte [eax + 2], cl
mov eax, dword [edx + 8]
cmp eax, 2
jne 0x419f51
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x419f03
sub eax, edx
mov edi, eax
mov eax, dword [ebp - 0x19c]
push eax
push 0x5f2d
call fcn.004865f0
add esp, 4
push eax
lea ecx, [ebx + edi]
push ecx
call esi
push 0x4e33
call fcn.004865f0
add esp, 0x10
mov esi, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x419f38
sub eax, esi
lea edi, [ebx - 1]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x419f44
jmp 0x419fd8
cmp eax, 1
jne 0x419fab
mov eax, ebx
lea edx, [eax + 1]
jmp 0x419f60
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x419f60
sub eax, edx
mov edx, dword [ebp - 0x19c]
push edx
push 0x5f2d
mov edi, eax
call fcn.004865f0
add esp, 4
push eax
lea eax, [ebx + edi]
push eax
call esi
push 0x4e34
call fcn.004865f0
add esp, 0x10
mov esi, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x419f95
sub eax, esi
lea edi, [ebx - 1]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x419fa1
jmp 0x419fd8
cmp eax, 4
jne 0x419fec
push 0x5f32
call fcn.004865f0
add esp, 4
mov esi, eax
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x419fc0
sub eax, esi
lea edi, [ebx - 1]
lea esp, [esp]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x419fd0
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, dword [sym.imp.USER32.dll_wsprintfA]
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x419ff1
mov ecx, dword [ebp - 0x1a8]
sub eax, edx
mov edx, dword [ecx + 4]
push edx
lea edi, [ebx + eax]
call fcn.004865f0
push eax
push 0x5a4fa0
push edi
call esi
add esp, 0x10
lea edi, [ebx - 1]
jmp 0x41a020
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41a020
mov ax, word [0x5a47f0]
mov ecx, dword [ebp - 0x1a8]
mov word [edi], ax
cmp dword [ecx + 8], 4
mov eax, ebx
lea edx, [eax + 1]
jne 0x41a0a6
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41a042
sub eax, edx
mov edx, dword [ebp - 0x19c]
push edx
push 0x5f31
lea edi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push 0x5a4d1c
push edi
call esi
add esp, 0x10
lea eax, [ebx - 1]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41a071
mov cx, word [0x5a4c7c]
mov word [eax], cx
mov dl, byte [0x5a4c7e]
mov byte [eax + 2], dl
lea edi, [ebx - 1]
nop
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41a090
mov ax, word [0x5a47f0]
mov word [edi], ax
jmp 0x41c88b
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41a0a6
mov ecx, dword [ebp - 0x19c]
dec ecx
push ecx
sub eax, edx
push 0x5f2e
lea edi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push edi
call esi
add esp, 0xc
lea eax, [ebx - 1]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41a0d1
mov dx, word [0x5a4c7c]
mov word [eax], dx
mov cl, byte [0x5a4c7e]
mov byte [eax + 2], cl
lea edi, [ebx - 1]
nop
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41a0f0
mov dx, word [0x5a47f0]
mov word [edi], dx
jmp 0x41c88b
cmp byte [ebx], 0
je 0x41a127
lea edi, [ebx - 1]
nop
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41a110
mov ax, word [0x5a47f0]
mov word [edi], ax
mov edi, dword [ebp - 0x1a4]
mov ecx, dword [ebp - 0x1b8]
movzx edx, byte [ecx + 0x338]
push edi
push edx
call fcn.00488cc0
mov esi, eax
add esp, 8
mov dword [ebp - 0x1a8], esi
test esi, esi
je 0x41a2b7
cmp dword [esi + 4], 0
je 0x41a2b7
cmp edi, 0x44c
jge 0x41a1c2
mov eax, dword [ebp - 0x1b8]
cmp byte [edi + eax + 0x1cfc], 0
je 0x41a1c2
push 0x5298
call fcn.004865f0
add esp, 4
test eax, eax
je 0x41a1c2
cmp byte [eax], 0
je 0x41a1c2
mov ecx, ebx
lea edi, [ecx + 1]
jmp 0x41a190
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x41a190
push eax
sub ecx, edi
add ecx, ebx
push str._3_s_A
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea edi, [ebx - 1]
mov edi, edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41a1b0
mov cx, word [0x5a47f0]
mov word [edi], cx
mov edi, dword [esi + 8]
test edi, edi
jle 0x41a258
cmp edi, 3
jge 0x41a258
mov edx, dword [ebp - 0x1b8]
movzx eax, byte [edx + 0x1320]
cmp eax, edi
mov eax, ebx
lea edx, [eax + 1]
jl 0x41a212
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41a1f0
sub eax, edx
push edi
push 0x4c4bb8
lea esi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push 0x5a4d1c
jmp 0x41a232
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41a212
sub eax, edx
push edi
push 0x4c4bb8
lea esi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push str._2_s_d_1
push esi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea edi, [ebx - 1]
nop
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41a240
mov cx, word [0x5a47f0]
mov esi, dword [ebp - 0x1a8]
mov word [edi], cx
mov eax, dword [ebp - 0x1b8]
movzx ecx, word [eax + 0x41b]
mov edx, dword [esi + 4]
mov eax, ebx
lea esi, [eax + 1]
cmp ecx, edx
jl 0x41a294
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41a271
push edx
sub eax, esi
push 0x5e1d
lea edi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push 0x5a4d1c
push edi
jmp 0x41a2dd
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41a294
push edx
sub eax, esi
push 0x5e1d
lea edi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push str._2_s_d_1
push edi
jmp 0x41a2dd
mov eax, ebx
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41a2c0
sub eax, edx
push 0x5e1e
lea esi, [ebx + eax]
call fcn.004865f0
push eax
push str._2_s_1
push esi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
cmp byte [ebx], 0
je 0x41a302
lea edi, [ebx - 1]
mov edi, edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41a2f0
mov dx, word [0x5a47f0]
mov word [edi], dx
mov esi, 1
mov eax, dword [ebp - 0x1a4]
push eax
push esi
call fcn.00488cc0
add esp, 8
cmp dword [ebp - 0x19c], 0
mov dword [ebp - 0x1a8], eax
je 0x41a344
lea edi, [ebx - 1]
lea esp, [esp]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x41a330
mov cx, word [0x5a4bd4]
mov word [edi], cx
jmp 0x41a34e
mov dword [ebp - 0x19c], 1
test eax, eax
je 0x41a392
mov eax, dword [eax + 4]
test eax, eax
je 0x41a392
mov ecx, ebx
lea edi, [ecx + 1]
mov edi, edi
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x41a360
mov edx, dword [ebp - 0x1a8]
push eax
mov eax, dword [edx + 8]
push eax
sub ecx, edi
push esi
lea edi, [ebx + ecx]
call fcn.004fb500
add esp, 8
push eax
push str._s:_d
push edi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp 0x41a3bb
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41a397
sub eax, edx
push 0
push esi
lea edi, [ebx + eax]
call fcn.004fb500
push eax
push str._s:__
push edi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
inc esi
cmp esi, 4
jle 0x41a307
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41a3c8
mov cx, word [0x5a4c08]
mov word [edi], cx
jmp 0x41c88b
test eax, 0x4000
je 0x41a9e1
mov edx, dword [ebp - 0x1a0]
movzx eax, word [edx + 0x14e]
mov dword [ebp - 0x1a4], eax
test eax, eax
je 0x41c88b
push eax
call fcn.00483c10
add esp, 4
mov dword [ebp - 0x1a8], eax
test eax, eax
je 0x41c88b
cmp byte [ebx], 0
mov dword [ebp - 0x1b0], 1
je 0x41a441
lea edi, [ebx - 1]
mov edi, edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41a430
mov ax, word [0x5a47f0]
mov word [edi], ax
lea eax, [ebx - 1]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41a444
mov cx, word [0x5a4c3c]
mov word [eax], cx
mov dl, byte [0x5a4c3e]
mov byte [eax + 2], dl
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41a464
sub eax, edx
lea edi, [ebx + eax]
mov eax, dword [ebp - 0x1a8]
mov ecx, dword [eax + 4]
push ecx
call fcn.004865f0
add esp, 4
push eax
push 0x5ea7
call fcn.004865f0
mov esi, dword [sym.imp.USER32.dll_wsprintfA]
add esp, 4
push eax
push edi
call esi
add esp, 0xc
lea eax, [ebx - 1]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41a4a0
mov dx, word [0x5a4c7c]
mov word [eax], dx
mov cl, byte [0x5a4c7e]
mov edx, dword [ebp - 0x1a8]
mov byte [eax + 2], cl
cmp word [edx + 0x7a], 0
je 0x41a516
lea edi, [ebx - 1]
jmp 0x41a4d0
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41a4d0
mov ax, word [0x5a47f0]
mov word [edi], ax
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41a4e6
mov ecx, dword [ebp - 0x1a8]
sub eax, edx
movzx edx, word [ecx + 0x7a]
push edx
push 0x5357
lea edi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push str._6_s:_d_A
push edi
call esi
add esp, 0x10
mov eax, dword [ebp - 0x1a8]
cmp word [eax + 0x78], 0
je 0x41a570
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41a526
mov cx, word [0x5a47f0]
mov eax, ebx
mov word [edi], cx
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41a540
sub eax, edx
mov edx, dword [ebp - 0x1a8]
lea edi, [ebx + eax]
movzx eax, word [edx + 0x78]
push eax
push 0x5f24
call fcn.004865f0
add esp, 4
push eax
push str._6_s:_d_A
push edi
call esi
add esp, 0x10
mov ecx, dword [ebp - 0x1b8]
mov edx, dword [ebp - 0x1a4]
add ecx, 0xf3c
push ecx
push edx
call fcn.0047b490
add esp, 8
test eax, eax
je 0x41a5de
push 0x5299
call fcn.004865f0
add esp, 4
test eax, eax
je 0x41a5de
cmp byte [eax], 0
je 0x41a5de
cmp byte [ebx], 0
je 0x41a5c2
lea edi, [ebx - 1]
mov edi, edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x41a5b0
mov cx, word [0x5a47f0]
mov word [edi], cx
mov ecx, ebx
lea edi, [ecx + 1]
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x41a5c7
push eax
sub ecx, edi
add ecx, ebx
push str._3_s_A
push ecx
call esi
add esp, 0xc
mov edx, dword [ebp - 0x1a0]
movzx eax, byte [edx + 0xda]
mov dword [ebp - 0x1a4], eax
test eax, eax
je 0x41a7f1
and eax, 0x3f
cmp al, 0x3f
je 0x41a7f1
cmp byte [ebx], 0
je 0x41a622
lea edi, [ebx - 1]
lea esp, [esp]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41a610
mov cx, word [0x5a47f0]
mov word [edi], cx
mov edx, dword [ebp - 0x1b8]
mov dword [ebp - 0x1ac], 0
movzx eax, byte [edx + 0x338]
test eax, eax
je 0x41a67b
lea ecx, [eax - 1]
mov eax, 1
shl eax, cl
test dword [ebp - 0x1a4], eax
jne 0x41a67b
mov dword [ebp - 0x1ac], 1
lea eax, [ebx - 1]
lea esp, [esp]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41a660
mov dx, word [0x5a4c80]
mov word [eax], dx
mov cl, byte [0x5a4c82]
mov byte [eax + 2], cl
push 0x5dcc
call fcn.004865f0
add esp, 4
mov esi, eax
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41a690
sub eax, esi
lea edi, [ebx - 1]
lea esp, [esp]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x41a6a0
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
xor esi, esi
test byte [ebp - 0x1a4], 1
je 0x41a6e6
mov edx, dword [ebp - 0x1a0]
movzx eax, byte [edx + 0xdc]
push ebx
push eax
push 1
call fcn.004fb450
add esp, 8
push eax
push esi
call fcn.0040f450
add esp, 0xc
mov esi, eax
test byte [ebp - 0x1a4], 2
je 0x41a714
mov ecx, dword [ebp - 0x1a0]
movzx edx, byte [ecx + 0xdc]
push ebx
push edx
push 2
call fcn.004fb450
add esp, 8
push eax
push esi
call fcn.0040f450
add esp, 0xc
mov esi, eax
test byte [ebp - 0x1a4], 4
je 0x41a742
mov eax, dword [ebp - 0x1a0]
movzx ecx, byte [eax + 0xdc]
push ebx
push ecx
push 3
call fcn.004fb450
add esp, 8
push eax
push esi
call fcn.0040f450
add esp, 0xc
mov esi, eax
test byte [ebp - 0x1a4], 8
je 0x41a770
mov edx, dword [ebp - 0x1a0]
movzx eax, byte [edx + 0xdc]
push ebx
push eax
push 4
call fcn.004fb450
add esp, 8
push eax
push esi
call fcn.0040f450
add esp, 0xc
mov esi, eax
test byte [ebp - 0x1a4], 0x10
je 0x41a79e
mov ecx, dword [ebp - 0x1a0]
movzx edx, byte [ecx + 0xdc]
push ebx
push edx
push 5
call fcn.004fb450
add esp, 8
push eax
push esi
call fcn.0040f450
add esp, 0xc
mov esi, eax
test byte [ebp - 0x1a4], 0x20
je 0x41a7ca
mov eax, dword [ebp - 0x1a0]
movzx ecx, byte [eax + 0xdc]
push ebx
push ecx
push 6
call fcn.004fb450
add esp, 8
push eax
push esi
call fcn.0040f450
add esp, 0xc
cmp dword [ebp - 0x1ac], 0
je 0x41a7f1
lea eax, [ebx - 1]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41a7d6
mov dx, word [0x5a4c7c]
mov word [eax], dx
mov cl, byte [0x5a4c7e]
mov byte [eax + 2], cl
mov eax, dword [ebp - 0x1a0]
cmp word [eax + 0xd8], 1
ja 0x41a85f
mov edx, dword [ebp - 0x1b4]
cmp byte [edx + 0x47], 0
jne 0x41a85f
cmp byte [eax + 0xdb], 0
jne 0x41a85f
cmp byte [eax + 0xdc], 0
jne 0x41a85f
cmp word [eax + 0xdd], 0
jne 0x41a85f
cmp word [eax + 0xdf], 0
jne 0x41a85f
cmp word [eax + 0xe1], 0
jne 0x41a85f
cmp word [eax + 0xe3], 0
jne 0x41a85f
cmp word [eax + 0xe5], 0
jne 0x41a85f
cmp word [eax + 0xe7], 0
je 0x41b162
cmp byte [ebx], 0
je 0x41a878
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41a867
mov ax, word [0x5a47f0]
mov word [edi], ax
lea eax, [ebx - 1]
jmp 0x41a880
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41a880
mov cx, word [0x5a4c7c]
mov word [eax], cx
mov dl, byte [0x5a4c7e]
mov byte [eax + 2], dl
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41a8a0
sub eax, edx
push 0x5dc2
mov dword [ebp - 0x1a8], eax
mov dword [ebp - 0x1ac], 0
call fcn.004865f0
add esp, 4
mov esi, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41a8c8
sub eax, esi
lea edi, [ebx - 1]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x41a8d4
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea eax, [ebx - 1]
lea ecx, [ecx]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41a8f0
mov cx, word [0x5a4c7c]
mov edi, dword [ebp - 0x1a0]
mov word [eax], cx
mov dl, byte [0x5a4c7e]
mov byte [eax + 2], dl
mov eax, dword [ebp - 0x1b4]
movzx ecx, word [edi + 0xd8]
movsx eax, byte [eax + 0x47]
add eax, ecx
xor esi, esi
mov ecx, 1
mov dword [ebp - 0x19c], esi
mov dword [ebp - 0x1a4], eax
cmp eax, ecx
jge 0x41a941
mov dword [ebp - 0x1a4], ecx
mov al, byte [edi + 0xdc]
test al, al
je 0x41aacb
mov edx, dword [ebp - 0x1b8]
cmp byte [edx + 0x1320], al
jae 0x41a981
add dword [ebp - 0x1ac], ecx
lea eax, [ebx - 1]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41a966
mov cx, word [0x5a4c80]
mov word [eax], cx
mov dl, byte [0x5a4c82]
mov byte [eax + 2], dl
cmp byte [edi + 0xdc], 3
push ebx
jae 0x41aa8c
push 0x4c4bb7
push 0
call fcn.0040f450
mov esi, eax
add esp, 0xc
cmp dword [ebp - 0x1ac], 0
mov eax, ebx
mov dword [ebp - 0x19c], esi
lea edx, [eax + 1]
je 0x41aa66
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41a9b8
sub eax, edx
mov ecx, edi
movzx edx, byte [ecx + 0xdc]
push edx
add eax, ebx
push str._d_1
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x41aacb
test eax, 0x40000
jne 0x41c88b
test dword [ebp - 0x1cc], 0x100000
je 0x41a5de
mov edx, dword [ebp - 0x1a0]
cmp word [edx + 0xe7], 0
je 0x41c88b
cmp byte [ebx], 0
je 0x41aa29
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41aa18
mov ax, word [0x5a47f0]
mov word [edi], ax
mov eax, ebx
lea esi, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41aa30
movzx ecx, word [edx + 0xe7]
push ecx
sub eax, esi
push 0x5e94
lea esi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push 0x5a4d80
push esi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp 0x41c88b
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41aa66
sub eax, edx
mov ecx, edi
movzx edx, byte [ecx + 0xdc]
push edx
add eax, ebx
push 0x5a4658
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x41aacb
push 0x4c4c74
push 0
call fcn.0040f450
add esp, 0xc
cmp dword [ebp - 0x1ac], 0
mov esi, eax
mov dword [ebp - 0x19c], esi
je 0x41aacb
lea eax, [ebx - 1]
nop
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41aab0
mov cx, word [0x5a4c7c]
mov word [eax], cx
mov dl, byte [0x5a4c7e]
mov byte [eax + 2], dl
mov eax, edi
movzx eax, word [eax + 0xd8]
cmp eax, 1
ja 0x41aae9
mov ecx, dword [ebp - 0x1b4]
cmp byte [ecx + 0x47], 0
je 0x41ac01
mov ecx, dword [ebp - 0x1b4]
movzx edx, word [ecx + 0x49]
movsx ecx, byte [ecx + 0x47]
sub eax, edx
mov edx, dword [ebp - 0x1b8]
add eax, ecx
movzx ecx, word [edx + 0x41b]
cmp ecx, eax
jge 0x41ab30
inc dword [ebp - 0x1ac]
lea eax, [ebx - 1]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41ab15
mov dx, word [0x5a4c80]
mov word [eax], dx
mov cl, byte [0x5a4c82]
mov byte [eax + 2], cl
push ebx
push 0x5dc3
push esi
call fcn.0040f450
add esp, 0xc
cmp dword [ebp - 0x1ac], 0
mov dword [ebp - 0x19c], eax
je 0x41ab6c
lea eax, [ebx - 1]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41ab51
mov dx, word [0x5a4c7c]
mov word [eax], dx
mov cl, byte [0x5a4c7e]
mov byte [eax + 2], cl
mov edx, dword [ebp - 0x1b4]
movsx eax, byte [edx + 0x47]
test eax, eax
mov eax, ebx
lea edx, [eax + 1]
jns 0x41abad
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41ab80
sub eax, edx
mov ecx, edi
movzx edx, word [ecx + 0xd8]
mov ecx, dword [ebp - 0x1a4]
push edx
push ecx
add eax, ebx
push str._3_d_1__d_
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp 0x41ac01
jle 0x41abe0
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41abb0
sub eax, edx
mov edx, edi
movzx ecx, word [edx + 0xd8]
mov edx, dword [ebp - 0x1a4]
push ecx
push edx
add eax, ebx
push str._2_d_1__d_
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp 0x41ac01
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41abe0
mov ecx, dword [ebp - 0x1a4]
push ecx
sub eax, edx
add eax, ebx
push 0x5a4658
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov edx, dword [ebp - 0x1b4]
movzx edx, word [edx + 0x49]
test dx, dx
je 0x41ac34
mov eax, ebx
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41ac15
mov esi, dword [sym.imp.USER32.dll_wsprintfA]
push edx
sub eax, edi
add eax, ebx
push str._3___d__1
push eax
call esi
add esp, 0xc
jmp 0x41ac3a
mov esi, dword [sym.imp.USER32.dll_wsprintfA]
mov edx, dword [ebp - 0x1a0]
movzx edi, word [edx + 0xdd]
test edi, edi
je 0x41acdc
mov eax, dword [ebp - 0x1b8]
movsx ecx, word [eax + 0x4f7]
movzx edx, word [eax + 0x4eb]
add ecx, edx
cmp ecx, edi
jge 0x41ac8d
inc dword [ebp - 0x1ac]
lea eax, [ebx - 1]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41ac72
mov cx, word [0x5a4c80]
mov word [eax], cx
mov dl, byte [0x5a4c82]
mov byte [eax + 2], dl
mov eax, dword [ebp - 0x19c]
push ebx
push 0x5dc6
push eax
call fcn.0040f450
mov dword [ebp - 0x19c], eax
add esp, 0xc
cmp dword [ebp - 0x1ac], 0
mov eax, ebx
lea edx, [eax + 1]
je 0x41acc5
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41acb6
push edi
push str._d_1
jmp 0x41acd2
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41acc5
push edi
push 0x5a4658
sub eax, edx
add eax, ebx
push eax
call esi
add esp, 0xc
mov ecx, dword [ebp - 0x1a0]
movzx edi, word [ecx + 0xdf]
test edi, edi
je 0x41ad9a
mov edx, dword [ebp - 0x1b8]
add edx, 0x32c
push edx
call fcn.0047a3b0
mov ecx, dword [ebp - 0x1b8]
movsx edx, word [ecx + 0x4f9]
movzx ecx, word [ecx + 0x4ed]
add edx, ecx
sub edx, eax
add esp, 4
cmp edx, edi
jge 0x41ad4b
inc dword [ebp - 0x1ac]
lea eax, [ebx - 1]
jmp 0x41ad30
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41ad30
mov dx, word [0x5a4c80]
mov word [eax], dx
mov cl, byte [0x5a4c82]
mov byte [eax + 2], cl
mov edx, dword [ebp - 0x19c]
push ebx
push 0x5dc7
push edx
call fcn.0040f450
mov dword [ebp - 0x19c], eax
add esp, 0xc
cmp dword [ebp - 0x1ac], 0
mov eax, ebx
lea edx, [eax + 1]
je 0x41ad83
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41ad74
push edi
push str._d_1
jmp 0x41ad90
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41ad83
push edi
push 0x5a4658
sub eax, edx
add eax, ebx
push eax
call esi
add esp, 0xc
mov eax, dword [ebp - 0x1a0]
movzx edi, word [eax + 0xe1]
test edi, edi
je 0x41ae3c
mov eax, dword [ebp - 0x1b8]
movsx ecx, word [eax + 0x4fb]
movzx edx, word [eax + 0x4ef]
add ecx, edx
cmp ecx, edi
jge 0x41aded
inc dword [ebp - 0x1ac]
lea eax, [ebx - 1]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41add2
mov cx, word [0x5a4c80]
mov word [eax], cx
mov dl, byte [0x5a4c82]
mov byte [eax + 2], dl
mov eax, dword [ebp - 0x19c]
push ebx
push 0x5dc8
push eax
call fcn.0040f450
mov dword [ebp - 0x19c], eax
add esp, 0xc
cmp dword [ebp - 0x1ac], 0
mov eax, ebx
lea edx, [eax + 1]
je 0x41ae25
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41ae16
push edi
push str._d_1
jmp 0x41ae32
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41ae25
push edi
push 0x5a4658
sub eax, edx
add eax, ebx
push eax
call esi
add esp, 0xc
mov ecx, dword [ebp - 0x1a0]
movzx edi, word [ecx + 0xe3]
test edi, edi
je 0x41aede
mov eax, dword [ebp - 0x1b8]
movsx edx, word [eax + 0x4fd]
movzx eax, word [eax + 0x4f1]
add edx, eax
cmp edx, edi
jge 0x41ae8f
inc dword [ebp - 0x1ac]
lea eax, [ebx - 1]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41ae74
mov cx, word [0x5a4c80]
mov word [eax], cx
mov dl, byte [0x5a4c82]
mov byte [eax + 2], dl
mov eax, dword [ebp - 0x19c]
push ebx
push 0x5dc9
push eax
call fcn.0040f450
mov dword [ebp - 0x19c], eax
add esp, 0xc
cmp dword [ebp - 0x1ac], 0
mov eax, ebx
lea edx, [eax + 1]
je 0x41aec7
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41aeb8
push edi
push str._d_1
jmp 0x41aed4
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41aec7
push edi
push 0x5a4658
sub eax, edx
add eax, ebx
push eax
call esi
add esp, 0xc
mov ecx, dword [ebp - 0x1a0]
movzx edi, word [ecx + 0xe5]
test edi, edi
je 0x41af87
mov eax, dword [ebp - 0x1b8]
movsx edx, word [eax + 0x4ff]
movzx eax, word [eax + 0x4f3]
add edx, eax
cmp edx, edi
jge 0x41af31
inc dword [ebp - 0x1ac]
lea eax, [ebx - 1]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41af16
mov cx, word [0x5a4c80]
mov word [eax], cx
mov dl, byte [0x5a4c82]
mov byte [eax + 2], dl
mov eax, dword [ebp - 0x19c]
push ebx
push 0x5dca
push eax
call fcn.0040f450
mov dword [ebp - 0x19c], eax
add esp, 0xc
cmp dword [ebp - 0x1ac], 0
mov eax, ebx
lea edx, [eax + 1]
je 0x41af70
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41af60
push edi
push str._d_1
jmp 0x41af7d
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41af70
push edi
push 0x5a4658
sub eax, edx
add eax, ebx
push eax
call esi
add esp, 0xc
mov ecx, dword [ebp - 0x1a0]
movzx edi, word [ecx + 0xe7]
test edi, edi
je 0x41b02a
mov eax, dword [ebp - 0x1b8]
movsx edx, word [eax + 0x501]
movzx eax, word [eax + 0x4f5]
add edx, eax
cmp edx, edi
jge 0x41afdb
inc dword [ebp - 0x1ac]
lea eax, [ebx - 1]
nop
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41afc0
mov cx, word [0x5a4c80]
mov word [eax], cx
mov dl, byte [0x5a4c82]
mov byte [eax + 2], dl
mov eax, dword [ebp - 0x19c]
push ebx
push 0x5dcb
push eax
call fcn.0040f450
mov dword [ebp - 0x19c], eax
add esp, 0xc
cmp dword [ebp - 0x1ac], 0
mov eax, ebx
lea edx, [eax + 1]
je 0x41b013
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41b004
push edi
push str._d_1
jmp 0x41b020
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41b013
push edi
push 0x5a4658
sub eax, edx
add eax, ebx
push eax
call esi
add esp, 0xc
mov ecx, dword [ebp - 0x1a0]
movzx eax, byte [ecx + 0xdb]
test eax, eax
je 0x41b14e
test al, 1
je 0x41b0be
mov edx, dword [ebp - 0x1b8]
test byte [edx + 0x369], al
je 0x41b06b
mov eax, dword [ebp - 0x19c]
push ebx
push 0x5dc5
push eax
call fcn.0040f450
add esp, 0xc
jmp 0x41b14e
lea eax, [ebx - 1]
mov edi, edi
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41b070
cmp dword [ebp - 0x19c], 0
mov cx, word [0x5a4c80]
mov word [eax], cx
mov dl, byte [0x5a4c82]
mov byte [eax + 2], dl
je 0x41b0a8
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41b097
mov ax, word [0x5a4bd4]
mov word [edi], ax
mov eax, ebx
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41b0b0
push 0x5dc5
jmp 0x41b132
mov ecx, dword [ebp - 0x1b8]
test byte [ecx + 0x369], al
je 0x41b0e3
mov edx, dword [ebp - 0x19c]
push ebx
push 0x5dc4
push edx
call fcn.0040f450
add esp, 0xc
jmp 0x41b14e
lea eax, [ebx - 1]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41b0e6
cmp dword [ebp - 0x19c], 0
mov cx, word [0x5a4c80]
mov word [eax], cx
mov dl, byte [0x5a4c82]
mov byte [eax + 2], dl
je 0x41b121
lea edi, [ebx - 1]
lea ecx, [ecx]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41b110
mov ax, word [0x5a4bd4]
mov word [edi], ax
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41b126
push 0x5dc4
sub eax, edx
lea edi, [ebx + eax]
call fcn.004865f0
push eax
push str._s_1
push edi
call esi
add esp, 0x10
inc dword [ebp - 0x1ac]
cmp dword [ebp - 0x1ac], 0
je 0x41b162
mov ecx, dword [ebp - 0x1a8]
mov byte [ecx + ebx - 1], 0x32
cmp dword [ebp - 0x1b0], 0
jne 0x41c88b
mov edx, dword [ebp - 0x1a0]
movzx eax, word [edx + 0x14e]
mov dword [ebp - 0x1a4], eax
test eax, eax
je 0x41c88b
cmp byte [ebx], 0
je 0x41b1a3
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41b192
mov ax, word [0x5a47f0]
mov word [edi], ax
mov esi, edx
mov edi, dword [esi + 0x158]
mov dword [ebp - 0x19c], edi
test edi, edi
jne 0x41b1c0
mov edi, 0xe10
mov dword [ebp - 0x19c], edi
mov edx, dword [ebp - 0x1bc]
mov eax, edx
and eax, 0x200000
mov dword [ebp - 0x1a8], eax
lea eax, [ebx - 1]
je 0x41b1f2
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41b1d8
mov cx, word [0x5a4c7c]
mov word [eax], cx
mov cl, byte [0x5a4c7e]
jmp 0x41b20a
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41b1f2
mov cx, word [0x5a4c3c]
mov word [eax], cx
mov cl, byte [0x5a4c3e]
mov byte [eax + 2], cl
mov ecx, dword [ebp - 0x1a4]
lea eax, [ecx - 0xff9e]
cmp eax, 0x60
ja case.0x41b229.65451
movzx eax, byte [eax + 0x41f6f8]
jmp dword [eax*4 + 0x41f624]
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41b235
mov ecx, dword [esi + 0x150]
push ecx
sub eax, edx
push 0x5e54
mov dword [ebp - 0x1b0], eax
call fcn.004865f0
mov edx, dword [ebp - 0x1b0]
add esp, 4
push eax
add edx, ebx
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
test edi, edi
je 0x41c643
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41b276
mov ax, word [0x5a47f0]
push 0x5e74
mov word [edi], ax
call fcn.004865f0
add esp, 4
mov esi, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41b296
sub eax, esi
lea edi, [ebx - 1]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x41b2a2
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
mov eax, ebx
rep movsb byte es:[edi], byte [esi]
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41b2c0
mov ecx, dword [ebp - 0x19c]
sub eax, edx
add eax, ebx
push eax
push 0x5e75
push ecx
call fcn.004413e0
jmp 0x41c640
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41b2e7
sub eax, edx
mov edx, dword [esi + 0x150]
push edx
push 0x5e55
mov dword [ebp - 0x1b0], eax
call fcn.004865f0
add esp, 4
push eax
mov eax, dword [ebp - 0x1b0]
add eax, ebx
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
test edi, edi
je 0x41c643
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41b328
mov cx, word [0x5a47f0]
push 0x5e74
mov word [edi], cx
call fcn.004865f0
add esp, 4
mov esi, eax
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41b350
sub eax, esi
lea edi, [ebx - 1]
lea esp, [esp]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x41b360
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
mov eax, ebx
rep movsb byte es:[edi], byte [esi]
lea edx, [eax + 1]
jmp 0x41b380
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41b380
sub eax, edx
mov edx, dword [ebp - 0x19c]
add eax, ebx
push eax
push 0x5e75
push edx
call fcn.004413e0
jmp 0x41c640
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41b3a7
sub eax, edx
mov dword [ebp - 0x1b0], eax
mov eax, dword [esi + 0x150]
push eax
push 0x5394
call fcn.004865f0
mov ecx, dword [ebp - 0x1b0]
add esp, 4
push eax
lea edx, [ebx + ecx]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
test edi, edi
je 0x41c643
lea edi, [ebx - 1]
lea esp, [esp]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41b3f0
mov ax, word [0x5a47f0]
push 0x5e74
mov word [edi], ax
call fcn.004865f0
add esp, 4
mov esi, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41b410
sub eax, esi
lea edi, [ebx - 1]
lea esp, [esp]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x41b420
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
mov eax, ebx
rep movsb byte es:[edi], byte [esi]
lea edx, [eax + 1]
jmp 0x41b440
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41b440
sub eax, edx
mov edx, dword [ebp - 0x19c]
lea ecx, [ebx + eax]
push ecx
push 0x5e75
push edx
call fcn.004413e0
jmp 0x41c640
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41b468
sub eax, edx
mov dword [ebp - 0x1b0], eax
mov eax, dword [esi + 0x150]
push eax
push 0x5e56
call fcn.004865f0
mov ecx, dword [ebp - 0x1b0]
add esp, 4
push eax
lea edx, [ebx + ecx]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
test edi, edi
je 0x41c643
lea edi, [ebx - 1]
lea ebx, [ebx]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41b4b0
mov ax, word [0x5a47f0]
push 0x5e74
mov word [edi], ax
call fcn.004865f0
add esp, 4
mov esi, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41b4d0
sub eax, esi
lea edi, [ebx - 1]
lea esp, [esp]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x41b4e0
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
mov eax, ebx
rep movsb byte es:[edi], byte [esi]
lea edx, [eax + 1]
jmp 0x41b500
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41b500
jmp 0x41b2c7
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41b511
sub eax, edx
mov edx, dword [esi + 0x150]
push edx
push 0x5e57
mov dword [ebp - 0x1b0], eax
call fcn.004865f0
add esp, 4
push eax
mov eax, dword [ebp - 0x1b0]
add eax, ebx
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
test edi, edi
je 0x41c643
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41b552
mov cx, word [0x5a47f0]
push 0x5e74
mov word [edi], cx
call fcn.004865f0
add esp, 4
mov esi, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41b573
sub eax, esi
lea edi, [ebx - 1]
nop
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x41b580
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
mov eax, ebx
rep movsb byte es:[edi], byte [esi]
lea edx, [eax + 1]
jmp 0x41b5a0
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41b5a0
sub eax, edx
mov edx, dword [ebp - 0x19c]
add eax, ebx
push eax
push 0x5e75
push edx
call fcn.004413e0
jmp 0x41c640
push 0x5e53
call fcn.004865f0
add esp, 4
mov esi, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41b5d1
sub eax, esi
lea edi, [ebx - 1]
lea ecx, [ecx]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x41b5e0
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
mov eax, ebx
rep movsb byte es:[edi], byte [esi]
lea edx, [eax + 1]
jmp 0x41b600
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41b600
sub eax, edx
lea esi, [ebx + eax]
mov eax, dword [ebp - 0x1a0]
mov ecx, dword [eax + 0x150]
push ecx
push 0x5e55
call fcn.004865f0
add esp, 4
push eax
push esi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
cmp dword [ebp - 0x19c], 0
je 0x41c643
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41b641
mov dx, word [0x5a47f0]
push 0x5e74
mov word [edi], dx
call fcn.004865f0
add esp, 4
mov esi, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41b662
sub eax, esi
lea edi, [ebx - 1]
mov edi, edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x41b670
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
mov eax, ebx
rep movsb byte es:[edi], byte [esi]
lea edx, [eax + 1]
jmp 0x41b690
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41b690
sub eax, edx
add eax, ebx
push eax
mov eax, dword [ebp - 0x19c]
push 0x5e75
push eax
call fcn.004413e0
jmp 0x41c640
push 0x5f06
call fcn.004865f0
add esp, 4
mov esi, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41b6c1
sub eax, esi
lea edi, [ebx - 1]
lea ecx, [ecx]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x41b6d0
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
cmp dword [ebp - 0x19c], 0
rep movsb byte es:[edi], byte [esi]
je 0x41c643
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41b6f6
mov cx, word [0x5a47f0]
push 0x5e74
mov word [edi], cx
call fcn.004865f0
add esp, 4
mov esi, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41b717
sub eax, esi
lea edi, [ebx - 1]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x41b723
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
mov eax, ebx
rep movsb byte es:[edi], byte [esi]
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41b740
sub eax, edx
mov edx, dword [ebp - 0x19c]
add eax, ebx
push eax
push 0x5e75
push edx
call fcn.004413e0
jmp 0x41c640
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41b767
sub eax, edx
lea edi, [ebx + eax]
mov eax, dword [esi + 0x150]
push eax
push 0x5f07
call fcn.004865f0
add esp, 4
push eax
push edi
jmp 0x41c63a
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41b793
mov ecx, dword [esi + 0x150]
push ecx
sub eax, edx
push 0x5f08
lea edi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push edi
jmp 0x41c63a
mov eax, ebx
lea edx, [eax + 1]
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41b7c0
sub eax, edx
push 1
push 0x5f14
lea esi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push esi
jmp 0x41c63a
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41b7e7
sub eax, edx
mov edx, dword [esi + 0x150]
push edx
push 0x5f15
lea edi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push edi
jmp 0x41c63a
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41b813
sub eax, edx
lea edi, [ebx + eax]
mov eax, dword [esi + 0x150]
push eax
push 0x5f16
call fcn.004865f0
add esp, 4
push eax
push edi
jmp 0x41c63a
mov eax, ebx
lea edx, [eax + 1]
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41b840
mov ecx, dword [esi + 0x150]
push ecx
sub eax, edx
push 0x5f1c
lea edi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push edi
jmp 0x41c63a
mov eax, ebx
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41b870
sub eax, edx
mov edx, dword [esi + 0x150]
push edx
push 0x5f20
lea edi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push edi
jmp 0x41c63a
mov eax, ebx
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41b8a0
sub eax, edx
lea edi, [ebx + eax]
mov eax, dword [esi + 0x150]
push eax
push 0x5f21
call fcn.004865f0
add esp, 4
push eax
push edi
jmp 0x41c63a
mov eax, ebx
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41b8d0
mov ecx, dword [esi + 0x150]
push 4
push ecx
sub eax, edx
push 0x52b3
lea edi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push edi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp 0x41c643
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41b907
sub eax, edx
mov edx, dword [esi + 0x150]
push edx
push 0x5f2a
lea edi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push edi
jmp 0x41c63a
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41b933
sub eax, edx
lea edi, [ebx + eax]
mov eax, dword [esi + 0x150]
push eax
push 0x5f36
call fcn.004865f0
add esp, 4
push eax
push edi
jmp 0x41c63a
mov eax, ebx
lea edx, [eax + 1]
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41b960
sub eax, edx
push 0x5f69
lea esi, [ebx + eax]
call fcn.004865f0
push eax
push esi
jmp 0x41c63a
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41b982
sub eax, edx
push 0x5f7a
lea esi, [ebx + eax]
call fcn.004865f0
push eax
push esi
jmp 0x41c63a
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41b9a4
sub eax, edx
push 0x525c
lea esi, [ebx + eax]
call fcn.004865f0
push eax
push esi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
test edi, edi
je 0x41c643
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41b9d0
mov cx, word [0x5a47f0]
push 0x5e74
mov word [edi], cx
call fcn.004865f0
add esp, 4
mov esi, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41b9f1
sub eax, esi
lea edi, [ebx - 1]
lea ecx, [ecx]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x41ba00
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
mov eax, ebx
rep movsb byte es:[edi], byte [esi]
lea edx, [eax + 1]
jmp 0x41ba20
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41ba20
sub eax, edx
mov edx, dword [ebp - 0x19c]
add eax, ebx
push eax
push 0x5e75
push edx
call fcn.004413e0
jmp 0x41c640
mov edx, dword [esi + 0x150]
mov esi, dword [esi + 0x158]
test edx, edx
jle 0x41baa1
mov eax, ebx
lea edi, [eax + 1]
jmp 0x41ba60
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41ba60
push edx
sub eax, edi
push 0x52a0
lea edi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push 0x5a4d80
push edi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea edi, [ebx - 1]
lea ecx, [ecx]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41ba90
mov ax, word [0x5a47f0]
mov word [edi], ax
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41baa6
sub eax, edx
push esi
push 0x529f
lea edi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push edi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x41c88b
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41bad5
sub eax, edx
push 0x4c4c7b
lea esi, [ebx + eax]
call fcn.004865f0
push eax
push esi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x41c88b
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41bb00
sub eax, edx
push 0x534e
lea esi, [ebx + eax]
call fcn.004865f0
push eax
push esi
jmp 0x41c63a
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41bb22
sub eax, edx
push 0x534f
lea esi, [ebx + eax]
call fcn.004865f0
push eax
push esi
jmp 0x41c63a
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41bb44
sub eax, edx
push 0x5355
lea esi, [ebx + eax]
call fcn.004865f0
push eax
push esi
jmp 0x41c63a
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41bb66
sub eax, edx
push 0x5363
lea esi, [ebx + eax]
call fcn.004865f0
push eax
push esi
jmp 0x41c63a
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41bb88
sub eax, edx
push 0x53f2
lea esi, [ebx + eax]
call fcn.004865f0
push eax
push esi
jmp 0x41c63a
mov eax, ebx
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41bbb0
mov ecx, dword [esi + 0x150]
push ecx
sub eax, edx
push 0x6018
lea edi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push edi
jmp 0x41c63a
mov eax, ebx
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41bbe0
push 0x537f
jmp 0x41bbff
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41bbf3
push 0x5380
sub eax, edx
lea edi, [ebx + eax]
call fcn.004865f0
push eax
push edi
call dword [sym.imp.USER32.dll_wsprintfA]
mov esi, dword [esi + 0x150]
add esp, 0xc
cmp esi, 2
jne 0x41bc24
lea edi, [esi + 0x3a]
jmp 0x41bc30
cmp esi, 3
jne 0x41c643
lea edi, [esi + 0x43]
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41bc35
sub eax, edx
push edi
push 0x5396
lea esi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push esi
jmp 0x41c63a
mov esi, dword [esi + 0x150]
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41bc61
sub eax, edx
push esi
push 0x4c4c39
lea edi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push edi
jmp 0x41c63a
mov esi, dword [esi + 0x150]
mov eax, ebx
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41bc90
sub eax, edx
push esi
push 0x4c4c3a
lea edi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push edi
jmp 0x41c63a
mov esi, dword [esi + 0x150]
mov eax, ebx
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41bcc0
sub eax, edx
push esi
push 0x5389
lea edi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push edi
jmp 0x41c63a
mov edx, dword [esi + 0x150]
push edx
call fcn.00483b40
add esp, 4
xor edx, edx
test eax, eax
je 0x41bcfc
mov edx, dword [eax + 0x1611]
mov eax, ebx
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41bd01
sub eax, esi
push edx
lea esi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push 0x53ca
call fcn.004865f0
add esp, 4
push eax
push esi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
test edi, edi
je 0x41c643
lea edi, [ebx - 1]
lea ebx, [ebx]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41bd40
mov ax, word [0x5a47f0]
push 0x5e74
mov word [edi], ax
call fcn.004865f0
add esp, 4
mov esi, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41bd60
sub eax, esi
lea edi, [ebx - 1]
lea esp, [esp]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x41bd70
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
mov eax, ebx
rep movsb byte es:[edi], byte [esi]
lea edx, [eax + 1]
jmp 0x41bd90
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41bd90
jmp 0x41b2c7
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41bda1
sub eax, edx
push 0x4c4bc7
lea esi, [ebx + eax]
call fcn.004865f0
push eax
push esi
jmp 0x41c63a
mov esi, dword [esi + 0x150]
mov eax, ebx
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41bdd0
sub eax, edx
push esi
push 0x4c4bcf
lea edi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push edi
jmp 0x41c63a
lea eax, [ebx - 1]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41bdf4
mov dx, word [0x5a4c7c]
mov word [eax], dx
mov cl, byte [0x5a4c7e]
mov byte [eax + 2], cl
mov edx, dword [esi + 0x150]
push edx
call fcn.00481900
add esp, 4
mov dword [ebp - 0x1a8], eax
test eax, eax
je 0x41c34d
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41be31
sub eax, edx
push 0x4c5eee
lea esi, [ebx + eax]
call fcn.004865f0
push eax
push 0x5a4c1c
push esi
mov esi, dword [sym.imp.USER32.dll_wsprintfA]
call esi
add esp, 0x10
lea edi, [ebx - 1]
lea esp, [esp]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41be60
mov ax, word [0x5a47f0]
mov ecx, dword [ebp - 0x1a8]
mov word [edi], ax
mov ecx, dword [ecx + 4]
mov edx, ecx
and edx, 0x1b800fdf
xor eax, eax
mov dword [ebp - 0x19c], ecx
cmp edx, 0x1b800fdf
jne 0x41beb2
push ebx
push 0x5ea9
push eax
call fcn.0040f450
push ebx
push 0x5ec4
push eax
call fcn.0040f450
add esp, 0x18
jmp 0x41c0a0
test cl, 1
je 0x41bf52
mov eax, ecx
and eax, 0x1b800001
cmp eax, 0x1b800001
je 0x41bf33
test ecx, 0x8000000
je 0x41bee0
push ebx
push 0x5dcf
jmp 0x41bf39
test ecx, 0x1000000
je 0x41bef3
push ebx
push 0x5dd0
jmp 0x41bf39
test ecx, 0x800000
je 0x41bf03
push ebx
push 0x5dd1
jmp 0x41bf39
test ecx, 0x2000000
je 0x41bf13
push ebx
push 0x5dd2
jmp 0x41bf39
test ecx, 0x4000000
je 0x41bf23
push ebx
push 0x5dd3
jmp 0x41bf39
test ecx, 0x10400000
je 0x41bf33
push ebx
push 0x5dd4
jmp 0x41bf39
push ebx
push 0x5ea9
push 0
call fcn.0040f450
add esp, 0xc
mov dword [ebp - 0x1a4], 0x4c5ef3
jmp 0x41c0a0
mov edx, ecx
and edx, 0xfde
cmp edx, 0xfde
jne 0x41bf6f
push ebx
push 0x5ec4
push 0
jmp 0x41c08e
test ecx, 0x8000000
je 0x41bf8d
push ebx
push 0x5dcf
push 0
call fcn.0040f450
mov ecx, dword [ebp - 0x19c]
add esp, 0xc
test cl, 2
je 0x41bfa7
push ebx
push 0x5e48
push eax
call fcn.0040f450
mov ecx, dword [ebp - 0x19c]
add esp, 0xc
test cl, 4
je 0x41bfc1
push ebx
push 0x5e49
push eax
call fcn.0040f450
mov ecx, dword [ebp - 0x19c]
add esp, 0xc
test cl, 8
je 0x41bfdb
push ebx
push 0x5e4a
push eax
call fcn.0040f450
mov ecx, dword [ebp - 0x19c]
add esp, 0xc
test cl, 0x10
je 0x41bff5
push ebx
push 0x5e4b
push eax
call fcn.0040f450
mov ecx, dword [ebp - 0x19c]
add esp, 0xc
test cl, cl
jns 0x41c00e
push ebx
push 0x5e44
push eax
call fcn.0040f450
mov ecx, dword [ebp - 0x19c]
add esp, 0xc
test cl, 0x40
je 0x41c028
push ebx
push 0x5e45
push eax
call fcn.0040f450
mov ecx, dword [ebp - 0x19c]
add esp, 0xc
test ecx, 0x100
je 0x41c045
push ebx
push 0x5e4c
push eax
call fcn.0040f450
mov ecx, dword [ebp - 0x19c]
add esp, 0xc
test ecx, 0x200
je 0x41c062
push ebx
push 0x5e4d
push eax
call fcn.0040f450
mov ecx, dword [ebp - 0x19c]
add esp, 0xc
test ecx, 0x400
je 0x41c07f
push ebx
push 0x5e4e
push eax
call fcn.0040f450
mov ecx, dword [ebp - 0x19c]
add esp, 0xc
test ecx, 0x800
je 0x41c096
push ebx
push 0x5e4f
push eax
call fcn.0040f450
add esp, 0xc
mov dword [ebp - 0x1a4], 0x4c5efc
test eax, eax
je 0x41c0b8
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41c0a7
mov ax, word [0x5a47f0]
mov word [edi], ax
mov eax, ebx
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41c0c0
sub eax, edx
push 0x4c5eef
lea edi, [ebx + eax]
call fcn.004865f0
push eax
push 0x5a4c1c
push edi
call esi
add esp, 0x10
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41c0e5
mov cx, word [0x5a47f0]
mov esi, dword [ebp - 0x1a8]
mov word [edi], cx
mov dword [ebp - 0x19c], 0
add esi, 0xc
mov dword [ebp - 0x1b0], 0xa
mov eax, 1
lea esp, [esp]
cmp dword [esi - 4], 0
je 0x41c1a9
cmp dword [esi], 0
je 0x41c1a9
cmp dword [ebp - 0x19c], 0
jne 0x41c144
mov dword [ebp - 0x19c], eax
jmp 0x41c159
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41c147
mov dx, word [0x5a4bd4]
mov word [edi], dx
mov eax, dword [esi - 4]
push eax
call fcn.00487bb0
mov ecx, ebx
add esp, 4
mov dword [ebp - 0x1a0], eax
lea edi, [ecx + 1]
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x41c170
sub ecx, edi
lea edi, [ebx + ecx]
mov ecx, dword [eax + 0x7c]
push ecx
call fcn.004865f0
mov edx, dword [esi]
add esp, 4
push eax
push edx
push 0x4c5ef1
call fcn.004865f0
add esp, 4
push eax
push edi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
mov eax, 1
add esi, 8
sub dword [ebp - 0x1b0], eax
jne 0x41c120
lea edi, [ebx - 1]
jmp 0x41c1c0
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41c1c0
mov ax, word [0x5a47f0]
mov word [edi], ax
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41c1d6
sub eax, edx
push 0x4c5ef0
lea esi, [ebx + eax]
call fcn.004865f0
push eax
push 0x5a4c1c
push esi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea edi, [ebx - 1]
nop
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41c200
mov edx, dword [ebp - 0x1a8]
mov cx, word [0x5a47f0]
add edx, 0x5c
mov word [edi], cx
mov dword [ebp - 0x19c], 0
mov dword [ebp - 0x1a8], edx
mov dword [ebp - 0x1b0], 9
jmp 0x41c240
mov eax, dword [ebp - 0x1a8]
cmp dword [eax - 4], 0
je 0x41c33a
cmp dword [ebp - 0x19c], 0
jne 0x41c265
mov dword [ebp - 0x19c], 1
jmp 0x41c27a
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41c268
mov cx, word [0x5a4bd4]
mov word [edi], cx
mov eax, dword [ebp - 0x1a8]
mov esi, dword [eax - 4]
sub esi, 0x43
test dword [eax], 0xffff0000
mov eax, ebx
lea edx, [eax + 1]
je 0x41c2f6
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41c297
sub eax, edx
mov edx, dword [ebp - 0x1a8]
mov edi, dword [edx]
push 0x4c5ef2
mov dword [ebp - 0x1c4], eax
call fcn.004865f0
mov ecx, dword [ebp - 0x1a4]
add esp, 4
push eax
mov eax, edi
and eax, 0xffff
push eax
sar edi, 0x10
add ecx, esi
push edi
push ecx
call fcn.004865f0
mov edx, dword [ebp - 0x1c4]
add esp, 4
push eax
add edx, ebx
push str._s_d_d_s
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
jmp 0x41c33a
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41c2f6
sub eax, edx
push 0x4c5ef2
lea edi, [ebx + eax]
call fcn.004865f0
mov edx, dword [ebp - 0x1a4]
add esp, 4
push eax
mov eax, dword [ebp - 0x1a8]
mov ecx, dword [eax]
push ecx
add edx, esi
push edx
call fcn.004865f0
add esp, 4
push eax
push str._s_d_s
push edi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
add dword [ebp - 0x1a8], 8
dec dword [ebp - 0x1b0]
jne 0x41c240
lea eax, [ebx - 1]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41c350
mov cx, word [0x5a4c7c]
mov word [eax], cx
mov dl, byte [0x5a4c7e]
mov byte [eax + 2], dl
jmp 0x41c643
cmp byte [ebx], 0
je 0x41c389
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41c378
mov ax, word [0x5a47f0]
mov word [edi], ax
lea eax, [ebx - 1]
lea esp, [esp]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41c390
mov cx, word [0x5a4c7c]
mov word [eax], cx
mov dl, byte [0x5a4c7e]
mov byte [eax + 2], dl
movzx eax, word [esi + 0x158]
push 1
push eax
push ebx
push 0
push 0
call fcn.004188c0
add esp, 0x14
lea eax, [ebx - 1]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41c3c5
jmp 0x41c878
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41c3d7
sub eax, edx
lea edi, [ebx + eax]
mov eax, dword [esi + 0x150]
push eax
push 0x6019
call fcn.004865f0
add esp, 4
push eax
push edi
jmp 0x41c63a
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41c403
mov ecx, dword [esi + 0x150]
push ecx
sub eax, edx
push 0x601a
lea edi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push edi
jmp 0x41c63a
mov eax, ebx
lea edx, [eax + 1]
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41c430
sub eax, edx
mov edx, dword [esi + 0x150]
push edx
push 0x601b
lea edi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push edi
jmp 0x41c63a
mov eax, ebx
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41c460
sub eax, edx
lea edi, [ebx + eax]
mov eax, dword [esi + 0x150]
push eax
push 0x601c
call fcn.004865f0
add esp, 4
push eax
push edi
jmp 0x41c63a
mov eax, ebx
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41c490
mov ecx, dword [esi + 0x150]
push ecx
sub eax, edx
push 0x601d
lea edi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push edi
jmp 0x41c63a
mov eax, ebx
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41c4c0
sub eax, edx
mov edx, dword [esi + 0x150]
push edx
push 0x601e
lea edi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push edi
jmp 0x41c63a
mov eax, ebx
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41c4f0
sub eax, edx
push 0x6020
lea esi, [ebx + eax]
call fcn.004865f0
push eax
push esi
jmp 0x41c63a
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41c512
sub eax, edx
push 0x6021
lea esi, [ebx + eax]
call fcn.004865f0
push eax
push esi
jmp 0x41c63a
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41c534
sub eax, edx
lea edi, [ebx + eax]
mov eax, dword [esi + 0x150]
push eax
push 0x6023
call fcn.004865f0
add esp, 4
push eax
push edi
jmp 0x41c63a
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41c560
mov ecx, dword [esi + 0x150]
push ecx
sub eax, edx
push 0x6026
lea edi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push edi
jmp 0x41c63a
mov eax, ebx
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41c590
sub eax, edx
mov edx, dword [esi + 0x150]
push edx
push 0x6029
lea edi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push edi
jmp 0x41c63a
mov eax, ebx
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41c5c0
sub eax, edx
mov edi, eax
mov eax, dword [esi + 0x150]
push eax
push 0x602a
call fcn.004865f0
add esp, 4
push eax
lea ecx, [ebx + edi]
push ecx
jmp 0x41c63a
mov eax, ebx
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41c5f0
sub eax, edx
push 0x602b
mov esi, eax
call fcn.004865f0
push eax
lea edx, [ebx + esi]
push edx
jmp 0x41c63a
mov eax, ebx
test edx, 0x18000
lea edx, [eax + 1]
je 0x41c653
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41c620
sub eax, edx
push 0x5ecc
mov esi, eax
call fcn.004865f0
push eax
lea eax, [ebx + esi]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebx - 1]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41c646
jmp 0x41c878
mov dword [ebp - 0x1c0], ecx
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41c660
sub eax, edx
lea edi, [ebx + eax]
mov eax, dword [ebp - 0x1a4]
push eax
call fcn.00489650
mov ecx, dword [esi + 0x150]
add esp, 4
push eax
push ecx
push 0x5e90
call fcn.004865f0
add esp, 4
push eax
push edi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea eax, [ebx - 1]
mov edi, edi
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41c6a0
mov dx, word [0x5a4c7c]
mov word [eax], dx
mov cl, byte [0x5a4c7e]
mov byte [eax + 2], cl
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41c6c0
sub eax, edx
mov dword [ebp - 0x19c], eax
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41c6d2
mov dx, word [0x5a47f0]
mov eax, ebx
mov word [edi], dx
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41c6f0
push 1
sub eax, edx
lea edi, [ebx + eax]
mov eax, dword [esi + 0x150]
mov esi, dword [ebp - 0x1a4]
push edi
push eax
push esi
push 0
push 0
push 0
call fcn.00412260
add esp, 0x1c
cmp byte [edi], 0
je 0x41c747
lea eax, [ebx - 1]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41c727
mov cx, word [0x5a4c7c]
mov word [eax], cx
mov dl, byte [0x5a4c7e]
mov byte [eax + 2], dl
jmp 0x41c751
mov eax, dword [ebp - 0x19c]
mov byte [ebx + eax], 0
cmp esi, 0x13
jne 0x41c88b
cmp byte [ebx], 0
je 0x41c778
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41c766
mov cx, word [0x5a47f0]
mov word [edi], cx
cmp dword [ebp - 0x1a8], 0
lea eax, [ebx - 1]
je 0x41c7a5
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41c788
mov dx, word [0x5a4c7c]
mov word [eax], dx
mov cl, byte [0x5a4c7e]
jmp 0x41c7bd
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41c7a5
mov dx, word [0x5a4c3c]
mov word [eax], dx
mov cl, byte [0x5a4c3e]
mov edx, dword [ebp - 0x1a0]
mov byte [eax + 2], cl
movzx eax, word [edx + 0x162]
test ax, ax
je 0x41c7d9
mov edx, eax
jmp 0x41c7e6
mov eax, dword [ebp - 0x1b8]
movzx edx, word [eax + 0xf66]
mov eax, ebx
test edx, edx
jne 0x41c81e
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41c7f3
sub eax, edx
push 0x5ec1
lea esi, [ebx + eax]
call fcn.004865f0
push eax
push str._s:____
push esi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp 0x41c868
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41c821
sub eax, esi
push edx
lea esi, [ebx + eax]
call fcn.0048b2b0
push eax
call fcn.004865f0
add esp, 8
push eax
push 0x5eb4
call fcn.004865f0
add esp, 4
push eax
push 0x4f1d
call fcn.004865f0
add esp, 4
push eax
push str._s_s:__s
push esi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea eax, [ebx - 1]
jmp 0x41c870
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41c870
mov cx, word [0x5a4c7c]
mov word [eax], cx
mov dl, byte [0x5a4c7e]
mov byte [eax + 2], dl
mov esi, dword [ebp - 0x1bc]
test esi, 0xc0000000
jne 0x41c8ad
test dword [ebp - 0x1cc], 0x20000000
je 0x41c963
cmp byte [ebx], 0
je 0x41c8d1
lea edi, [ebx - 1]
lea esp, [esp]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41c8c0
mov ax, word [0x5a47f0]
mov word [edi], ax
lea eax, [ebx - 1]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41c8d4
mov cx, word [0x5a4c80]
mov word [eax], cx
mov dl, byte [0x5a4c82]
mov byte [eax + 2], dl
xor eax, eax
test esi, esi
jns 0x41c900
push ebx
push 0x5dd5
jmp 0x41c916
test dword [ebp - 0x1cc], 0x20000000
je 0x41c920
push ebx
push 0x5f19
push 0
call fcn.0040f450
add esp, 0xc
test dword [ebp - 0x1bc], 0x40000000
je 0x41c93f
push ebx
push 0x5dd6
push eax
call fcn.0040f450
add esp, 0xc
lea eax, [ebx - 1]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41c942
mov cx, word [0x5a4c7c]
mov esi, dword [ebp - 0x1bc]
mov word [eax], cx
mov dl, byte [0x5a4c7e]
mov byte [eax + 2], dl
test esi, 0x1fdf
je 0x41ea12
cmp byte [ebx], 0
je 0x41c991
lea edi, [ebx - 1]
jmp 0x41c980
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41c980
mov ax, word [0x5a47f0]
mov word [edi], ax
mov esi, dword [ebp - 0x1b4]
mov ecx, 0x200
test word [esi + 2], cx
jne 0x41cac7
movzx edx, word [esi]
push edx
call fcn.00488420
add esp, 4
test eax, eax
jne 0x41cac7
movzx ecx, byte [esi + 0x46]
mov eax, ecx
sar eax, 4
and eax, 0xf
cmp eax, 4
jle 0x41c9ce
sub eax, 0x10
mov edx, dword [ebp - 0x1a0]
movzx edi, byte [edx + 0x140]
add edi, eax
test edi, edi
jle 0x41cca2
and ecx, 0xf
mov edx, edi
sub edx, ecx
jns 0x41c9f2
xor edx, edx
jmp 0x41c9fa
test edx, edx
jne 0x41ca1b
lea esi, [ebx - 1]
lea ecx, [ecx]
mov cl, byte [esi + 1]
inc esi
test cl, cl
jne 0x41ca00
mov cx, word [0x5a4c80]
mov word [esi], cx
mov cl, byte [0x5a4c82]
mov byte [esi + 2], cl
test eax, eax
mov eax, ebx
lea esi, [eax + 1]
jle 0x41ca4e
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41ca28
push edi
push edx
sub eax, esi
push 0x5eb8
lea esi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push str._s:__d__3_d_1
jmp 0x41caa1
jns 0x41ca80
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41ca54
push edi
push edx
sub eax, esi
push 0x5eb8
lea esi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push str._s:__d__2_d_1
jmp 0x41caa1
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41ca80
push edi
push edx
sub eax, esi
push 0x5eb8
lea esi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push str._s:__d__1_d
push esi
mov esi, dword [sym.imp.USER32.dll_wsprintfA]
call esi
add esp, 0x14
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41cab0
mov dx, word [0x5a47f0]
mov word [edi], dx
jmp 0x41cca8
movzx esi, byte [esi + 0x46]
push 0x4c4b8f
call fcn.004865f0
push 0x4c4b90
mov dword [ebp - 0x1c0], eax
call fcn.004865f0
push 0x4c4b93
mov dword [ebp - 0x1b0], eax
call fcn.004865f0
mov dword [ebp - 0x1a8], eax
mov eax, esi
sar eax, 4
and eax, 0xf
add esp, 0xc
and esi, 0xf
mov dword [ebp - 0x19c], eax
mov dword [ebp - 0x1a4], esi
je 0x41cba7
mov edx, esi
lea eax, [ebx - 1]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41cb20
mov cx, word [0x5a4c40]
mov word [eax], cx
mov cl, byte [0x5a4c42]
mov byte [eax + 2], cl
jmp 0x41cb40
mov ecx, dword [ebp - 0x1a8]
dec edx
mov esi, ecx
lea esp, [esp]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41cb50
sub ecx, esi
mov eax, ecx
lea edi, [ebx - 1]
mov edi, edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x41cb60
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
test edx, edx
jne 0x41cb40
lea eax, [ebx - 1]
lea ecx, [ecx]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41cb80
mov dx, word [0x5a4c7c]
mov esi, dword [ebp - 0x1a4]
mov word [eax], dx
mov cl, byte [0x5a4c7e]
mov byte [eax + 2], cl
mov eax, dword [ebp - 0x19c]
mov edx, eax
sub edx, esi
je 0x41cc10
lea eax, [ebx - 1]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41cbb4
mov cx, word [0x5a4c7c]
mov word [eax], cx
mov cl, byte [0x5a4c7e]
mov byte [eax + 2], cl
nop
mov eax, dword [ebp - 0x1c0]
dec edx
mov esi, eax
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41cbe0
sub eax, esi
lea edi, [ebx - 1]
lea esp, [esp]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x41cbf0
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
test edx, edx
jne 0x41cbd0
mov eax, dword [ebp - 0x19c]
mov edx, dword [ebp - 0x1a0]
movzx edx, byte [edx + 0x318]
sub edx, eax
test edx, edx
jle 0x41cc8a
lea eax, [ebx - 1]
lea ebx, [ebx]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41cc30
mov cx, word [0x5a4c7c]
mov word [eax], cx
mov cl, byte [0x5a4c7e]
mov byte [eax + 2], cl
jmp 0x41cc50
mov eax, dword [ebp - 0x1b0]
dec edx
mov esi, eax
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41cc60
sub eax, esi
lea edi, [ebx - 1]
lea esp, [esp]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x41cc70
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
test edx, edx
jne 0x41cc50
lea edi, [ebx - 1]
lea ecx, [ecx]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41cc90
mov dx, word [0x5a47f0]
mov word [edi], dx
mov esi, dword [sym.imp.USER32.dll_wsprintfA]
test dword [ebp - 0x1bc], 0x4001000
jne 0x41cfe5
mov ecx, dword [ebp - 0x1b4]
lea eax, [ebp - 0x1ac]
push eax
push ecx
call fcn.00487fb0
mov edx, dword [ebp - 0x1b4]
push edx
mov edi, eax
call fcn.00488030
add esp, 0xc
mov dword [ebp - 0x1a4], eax
mov dword [ebp - 0x19c], 0
call fcn.0044eec0
mov ecx, dword [ebp - 0x1b4]
cmp dword [ecx + 0x23], eax
jne 0x41cd06
mov dword [ebp - 0x19c], 1
cmp dword [ebp - 0x1ac], 0
mov eax, ebx
lea edx, [eax + 1]
jne 0x41ce15
cmp dword [ebp - 0x1a4], 0
jne 0x41cd98
cmp dword [ebp - 0x19c], 0
je 0x41cd65
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41cd32
push edi
sub eax, edx
push 0
push 0x5ec6
mov dword [ebp - 0x1c4], eax
call fcn.004865f0
mov edx, dword [ebp - 0x1c4]
add esp, 4
push eax
push str._3_s:_2__d_1__d
add edx, ebx
push edx
jmp 0x41cf13
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41cd65
push edi
sub eax, edx
push 0
push 0x5ec6
mov dword [ebp - 0x1c4], eax
call fcn.004865f0
add esp, 4
push eax
mov eax, dword [ebp - 0x1c4]
push str._2_s:__d_1__d
add eax, ebx
push eax
jmp 0x41cf13
cmp dword [ebp - 0x19c], 0
je 0x41cde0
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41cda5
mov ecx, dword [ebp - 0x1a4]
push edi
push ecx
sub eax, edx
push 0x5ec6
mov dword [ebp - 0x1c4], eax
call fcn.004865f0
mov edx, dword [ebp - 0x1c4]
add esp, 4
push eax
push str._3_s:_1__d__d
add edx, ebx
push edx
jmp 0x41cf13
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41cde0
sub eax, edx
mov dword [ebp - 0x1c4], eax
mov eax, dword [ebp - 0x1a4]
push edi
push eax
push 0x5ec6
call fcn.004865f0
mov ecx, dword [ebp - 0x1c4]
add esp, 4
push eax
push str._s:__d__d
jmp 0x41cf10
cmp dword [ebp - 0x1a4], 0
jne 0x41ce96
cmp dword [ebp - 0x19c], 0
je 0x41ce63
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41ce30
push edi
sub eax, edx
push 0
push 0x5ec6
mov dword [ebp - 0x1c4], eax
call fcn.004865f0
mov edx, dword [ebp - 0x1c4]
add esp, 4
push eax
push str._3_s:_2__d_1__2_d_1
add edx, ebx
push edx
jmp 0x41cf13
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41ce63
push edi
sub eax, edx
push 0
push 0x5ec6
mov dword [ebp - 0x1c4], eax
call fcn.004865f0
add esp, 4
push eax
mov eax, dword [ebp - 0x1c4]
push str._2_s:__d_1__2_d_1
add eax, ebx
push eax
jmp 0x41cf13
cmp dword [ebp - 0x19c], 0
je 0x41cee0
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41cea3
mov ecx, dword [ebp - 0x1a4]
push edi
push ecx
sub eax, edx
push 0x5ec6
mov dword [ebp - 0x1c4], eax
call fcn.004865f0
mov edx, dword [ebp - 0x1c4]
add esp, 4
push eax
push str._3_s:_1__d__2_d_1
add edx, ebx
push edx
jmp 0x41cf13
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41cee0
sub eax, edx
mov dword [ebp - 0x1c4], eax
mov eax, dword [ebp - 0x1a4]
push edi
push eax
push 0x5ec6
call fcn.004865f0
mov ecx, dword [ebp - 0x1c4]
add esp, 4
push eax
push str._s:__d__2_d_1
add ecx, ebx
push ecx
call esi
add esp, 0x14
lea edi, [ebx - 1]
jmp 0x41cf20
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41cf20
mov dx, word [0x5a47f0]
mov eax, dword [ebp - 0x1a0]
mov word [edi], dx
cmp word [eax + 0x2f3], 0
je 0x41cfe5
lea eax, [ebx - 1]
lea esp, [esp]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41cf50
mov cx, word [0x5a4c40]
mov word [eax], cx
mov dl, byte [0x5a4c42]
push 0x5f89
mov byte [eax + 2], dl
call fcn.004865f0
add esp, 4
mov esi, eax
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41cf80
sub eax, esi
lea edi, [ebx - 1]
lea esp, [esp]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x41cf90
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [ebx - 1]
lea esp, [esp]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41cfb0
mov ax, word [0x5a47f0]
mov word [edi], ax
lea eax, [ebx - 1]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41cfc4
mov cx, word [0x5a4c7c]
mov esi, dword [sym.imp.USER32.dll_wsprintfA]
mov word [eax], cx
mov dl, byte [0x5a4c7e]
mov byte [eax + 2], dl
test dword [ebp - 0x1cc], 0x200000
je 0x41d045
mov eax, dword [ebp - 0x1b4]
movzx edx, word [eax]
mov ecx, dword [eax + 0x4b]
push edx
mov dword [ebp - 0x1a4], ecx
call fcn.00486520
mov edx, dword [eax + 0xd]
mov eax, ebx
add esp, 4
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41d018
sub eax, edi
lea edi, [ebx + eax]
mov eax, dword [ebp - 0x1a4]
push edx
push eax
push 0x4c5eed
call fcn.004865f0
add esp, 4
push eax
push str._s:__d__d
push edi
call esi
add esp, 0x14
mov eax, dword [ebp - 0x1bc]
test eax, 0x1001
je 0x41d284
push 0x5ddb
mov dword [ebp - 0x1ac], 1
call fcn.004865f0
add esp, 4
mov esi, eax
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41d070
sub eax, esi
lea edi, [ebx - 1]
lea esp, [esp]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x41d080
mov edx, dword [ebp - 0x1b4]
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
movsx esi, byte [edx + 0x44]
add esi, dword [ebp - 0x198]
mov ecx, dword [ebp - 0x1a0]
mov edi, dword [ecx + 0xf5]
test esi, esi
jle 0x41d0da
lea eax, [ebx - 1]
lea esp, [esp]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41d0c0
mov cx, word [0x5a4e3c]
mov word [eax], cx
mov dl, byte [0x5a4e3e]
jmp 0x41d0f8
jns 0x41d0fb
lea eax, [ebx - 1]
nop
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41d0e0
mov cx, word [0x5a4c80]
mov word [eax], cx
mov dl, byte [0x5a4c82]
mov byte [eax + 2], dl
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41d100
sub eax, edx
movsx ecx, di
sar edi, 0x10
movsx edx, di
add ecx, esi
push ecx
add edx, esi
push edx
add eax, ebx
push str.__d_d
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
test esi, esi
je 0x41d14b
lea eax, [ebx - 1]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41d130
mov cx, word [0x5a4c7c]
mov word [eax], cx
mov dl, byte [0x5a4c7e]
mov byte [eax + 2], dl
test dword [ebp - 0x1bc], 0x1000
jne 0x41d49b
lea edi, [ebx - 1]
mov edi, edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41d160
mov ax, word [0x5a47f0]
push 0x5dd8
mov word [edi], ax
call fcn.004865f0
add esp, 4
mov esi, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41d180
sub eax, esi
lea edi, [ebx - 1]
lea esp, [esp]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x41d190
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
mov eax, ebx
rep movsb byte es:[edi], byte [esi]
lea esi, [eax + 1]
jmp 0x41d1b0
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41d1b0
mov ecx, dword [ebp - 0x1a0]
movzx edx, byte [ecx + 0x98]
mov edi, dword [sym.imp.USER32.dll_wsprintfA]
push edx
sub eax, esi
add eax, ebx
push 0x5a4658
push eax
call edi
mov eax, dword [ebp - 0x1b8]
movsx ecx, word [eax + 0x4ff]
movzx eax, word [eax + 0x4f3]
add ecx, eax
mov eax, 0x10624dd3
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
add esp, 0xc
cmp eax, 1
jle 0x41d20d
mov eax, 1
jmp 0x41d211
test eax, eax
jle 0x41d22d
mov esi, ebx
lea edx, [esi + 1]
mov cl, byte [esi]
inc esi
test cl, cl
jne 0x41d216
push eax
sub esi, edx
push 0x5a4e84
add esi, ebx
push esi
call edi
add esp, 0xc
mov ecx, dword [ebp - 0x1b4]
push ecx
call fcn.004114a0
mov ecx, eax
add esp, 4
test ecx, ecx
jle 0x41d49b
mov eax, 0x66666667
imul ecx
sar edx, 2
mov esi, edx
shr esi, 0x1f
add esi, edx
test esi, esi
jle 0x41d49b
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41d264
sub eax, edx
push esi
add eax, ebx
push str._E__d__1
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x41d49b
mov edx, dword [ebp - 0x1b4]
test eax, 0x800
je 0x41d398
mov eax, dword [ebp - 0x1a0]
movsx ecx, byte [edx + 0x44]
mov dword [ebp - 0x1ac], 2
movzx eax, word [eax + 0xfb]
add eax, ecx
mov dword [ebp - 0x19c], ecx
mov dword [ebp - 0x1a4], eax
je 0x41d49b
push 0x5dde
call fcn.004865f0
add esp, 4
mov esi, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41d2d3
sub eax, esi
lea edi, [ebx - 1]
nop
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x41d2e0
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, dword [ebp - 0x19c]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
test eax, eax
jle 0x41d31d
lea eax, [ebx - 1]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41d303
mov cx, word [0x5a4e3c]
mov word [eax], cx
mov dl, byte [0x5a4e3e]
jmp 0x41d33a
jns 0x41d33d
lea eax, [ebx - 1]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41d322
mov cx, word [0x5a4c80]
mov word [eax], cx
mov dl, byte [0x5a4c82]
mov byte [eax + 2], dl
mov eax, dword [ebp - 0x1a4]
push 0
push 0
push ebx
push 0
push eax
call fcn.0040f5f0
add esp, 0x14
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41d356
cmp dword [ebp - 0x19c], 0
mov cx, word [0x5a4bd8]
mov word [edi], cx
je 0x41d49b
lea eax, [ebx - 1]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41d378
mov dx, word [0x5a4c7c]
mov word [eax], dx
mov cl, byte [0x5a4c7e]
mov byte [eax + 2], cl
jmp 0x41d49b
movsx eax, byte [edx + 0x44]
mov ecx, dword [ebp - 0x1a0]
add eax, dword [ebp - 0x198]
mov dword [ebp - 0x1ac], 4
movzx ecx, word [ecx + 0xfd]
add ecx, eax
mov dword [ebp - 0x19c], eax
mov dword [ebp - 0x1a4], ecx
je 0x41d49b
push 0x5ddd
call fcn.004865f0
add esp, 4
mov esi, eax
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41d3e0
sub eax, esi
lea edi, [ebx - 1]
lea esp, [esp]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x41d3f0
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, dword [ebp - 0x19c]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
test eax, eax
jle 0x41d42d
lea eax, [ebx - 1]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41d413
mov dx, word [0x5a4e3c]
mov word [eax], dx
mov cl, byte [0x5a4e3e]
jmp 0x41d44a
jns 0x41d44d
lea eax, [ebx - 1]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41d432
mov dx, word [0x5a4c80]
mov word [eax], dx
mov cl, byte [0x5a4c82]
mov byte [eax + 2], cl
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41d452
sub eax, edx
mov edx, dword [ebp - 0x1a4]
push edx
add eax, ebx
push 0x5a4e74
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
cmp dword [ebp - 0x19c], 0
je 0x41d49b
lea eax, [ebx - 1]
nop
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41d480
mov cx, word [0x5a4c7c]
mov word [eax], cx
mov dl, byte [0x5a4c7e]
mov byte [eax + 2], dl
lea eax, [ebx - 1]
mov edi, edi
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41d4a0
test byte [ebp - 0x1ac], 1
mov cx, word [0x5a4c4c]
mov esi, dword [ebp - 0x1a0]
mov word [eax], cx
mov dl, byte [0x5a4c4e]
mov byte [eax + 2], dl
jne 0x41d4f0
mov eax, dword [esi + 0xf5]
test eax, eax
je 0x41d4f0
push 0
push 1
push ebx
push 0x5ddb
push eax
call fcn.0040f990
add esp, 4
push eax
call fcn.0040f5f0
add esp, 0x14
test byte [ebp - 0x1ac], 4
jne 0x41d517
movzx eax, word [esi + 0xfd]
test eax, eax
je 0x41d517
push 0
push 1
push ebx
push 0x5ddd
push eax
call fcn.0040f5f0
add esp, 0x14
test byte [ebp - 0x1ac], 2
jne 0x41d53e
movzx eax, word [esi + 0xfb]
test eax, eax
je 0x41d53e
push 0
push 1
push ebx
push 0x5dde
push eax
call fcn.0040f5f0
add esp, 0x14
movsx eax, word [esi + 0x111]
test eax, eax
je 0x41d55a
imul eax, eax, 0x64
push 1
push ebx
push 0x3c
push eax
call fcn.0040f4c0
add esp, 0x10
movzx eax, word [esi + 0xf3]
test eax, eax
je 0x41d578
push 0
push 1
push ebx
push 0x5dd9
push eax
call fcn.0040f5f0
add esp, 0x14
mov eax, dword [esi + 0xeb]
test eax, eax
je 0x41d595
push 0
push 1
push ebx
push 0x5dda
push eax
call fcn.0040f5f0
add esp, 0x14
mov eax, dword [esi + 0xef]
test eax, eax
je 0x41d5b2
push 0
push 1
push ebx
push 0x5e07
push eax
call fcn.0040f5f0
add esp, 0x14
lea eax, [ebx - 1]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41d5b5
mov cx, word [0x5a4c4c]
mov word [eax], cx
mov dl, byte [0x5a4c4e]
mov byte [eax + 2], dl
movzx eax, word [esi + 0x105]
add eax, dword [ebp - 0x194]
je 0x41d5f2
push 0
push 1
push ebx
push 0x5dc6
push eax
call fcn.0040f5f0
add esp, 0x14
movzx eax, word [esi + 0x107]
add eax, dword [ebp - 0x190]
je 0x41d614
push 0
push 1
push ebx
push 0x5dc7
push eax
call fcn.0040f5f0
add esp, 0x14
movzx eax, word [esi + 0x109]
add eax, dword [ebp - 0x18c]
je 0x41d636
push 0
push 1
push ebx
push 0x5dc8
push eax
call fcn.0040f5f0
add esp, 0x14
movzx eax, word [esi + 0x10b]
add eax, dword [ebp - 0x188]
je 0x41d658
push 0
push 1
push ebx
push 0x5dc9
push eax
call fcn.0040f5f0
add esp, 0x14
movzx eax, word [esi + 0x10d]
add eax, dword [ebp - 0x184]
je 0x41d67a
push 0
push 1
push ebx
push 0x5dca
push eax
call fcn.0040f5f0
add esp, 0x14
movzx eax, word [esi + 0x10f]
add eax, dword [ebp - 0x180]
je 0x41d69c
push 0
push 1
push ebx
push 0x5dcb
push eax
call fcn.0040f5f0
add esp, 0x14
test dword [ebp - 0x1bc], 0x1101
je 0x41d787
mov eax, dword [ebp - 0x1b4]
mov al, byte [eax + 0x45]
test al, al
je 0x41d787
movzx ecx, word [esi + 0xff]
add ecx, dword [ebp - 0x100]
movzx eax, al
add eax, ecx
mov dword [ebp - 0x1a4], eax
je 0x41d7a9
cmp byte [ebx], 0
je 0x41d6f5
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41d6e3
mov dx, word [0x5a47f0]
mov word [edi], dx
push 0x5de1
call fcn.004865f0
add esp, 4
mov esi, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41d704
sub eax, esi
lea edi, [ebx - 1]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x41d710
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea eax, [ebx - 1]
lea esp, [esp]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41d730
mov cx, word [0x5a4e3c]
push 0
mov word [eax], cx
mov dl, byte [0x5a4e3e]
push 0
push ebx
mov byte [eax + 2], dl
mov eax, dword [ebp - 0x1a4]
push 0
push eax
call fcn.0040f5f0
add esp, 0x14
lea eax, [ebx - 1]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41d764
mov cx, word [0x5a4c4c]
mov esi, dword [ebp - 0x1a0]
mov word [eax], cx
mov dl, byte [0x5a4c4e]
mov byte [eax + 2], dl
jmp 0x41d7a9
movzx eax, word [esi + 0xff]
add eax, dword [ebp - 0x100]
je 0x41d7a9
push 0
push 1
push ebx
push 0x5de1
push eax
call fcn.0040f5f0
add esp, 0x14
mov eax, dword [ebp - 0x1b4]
mov al, byte [eax + 0x48]
test al, al
jne 0x41d7e0
movzx eax, word [esi + 0xf9]
test eax, eax
je 0x41d8d1
push 0
push reloc.DSOUND.dll_DirectSoundCreate
push ebx
push 0x5ddc
push eax
call fcn.0040f5f0
add esp, 0x14
jmp 0x41d8d1
movsx ecx, al
movzx eax, word [esi + 0xf9]
add eax, ecx
mov dword [ebp - 0x19c], ecx
mov dword [ebp - 0x1a4], eax
je 0x41d8d1
cmp byte [ebx], 0
je 0x41d818
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41d806
mov cx, word [0x5a47f0]
mov word [edi], cx
push 0x5ddc
call fcn.004865f0
add esp, 4
mov esi, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41d827
sub eax, esi
lea edi, [ebx - 1]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x41d833
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, dword [ebp - 0x19c]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
test eax, eax
jle 0x41d870
lea eax, [ebx - 1]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41d856
mov dx, word [0x5a4e3c]
mov word [eax], dx
mov cl, byte [0x5a4e3e]
jmp 0x41d88d
jns 0x41d890
lea eax, [ebx - 1]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41d875
mov dx, word [0x5a4c80]
mov word [eax], dx
mov cl, byte [0x5a4c82]
mov byte [eax + 2], cl
mov edx, dword [ebp - 0x1a4]
push 0
push closesocket
push ebx
push 0
push edx
call fcn.0040f5f0
add esp, 0x14
lea eax, [ebx - 1]
lea esp, [esp]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41d8b0
mov cx, word [0x5a4c4c]
mov esi, dword [ebp - 0x1a0]
mov word [eax], cx
mov dl, byte [0x5a4c4e]
mov byte [eax + 2], dl
movzx eax, word [esi + 0x101]
add eax, dword [ebp - 0x134]
je 0x41d8f3
push 0
push 1
push ebx
push 0x5ddf
push eax
call fcn.0040f5f0
add esp, 0x14
test byte [ebp - 0x1bc], 6
je 0x41d9d4
mov eax, dword [ebp - 0x1b4]
mov al, byte [eax + 0x45]
test al, al
je 0x41d9d4
movzx ecx, word [esi + 0x103]
add ecx, dword [ebp - 0x130]
movzx eax, al
add eax, ecx
mov dword [ebp - 0x1a4], eax
je 0x41d9f6
cmp byte [ebx], 0
je 0x41d949
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41d937
mov dx, word [0x5a47f0]
mov word [edi], dx
push 0x5de0
call fcn.004865f0
add esp, 4
mov esi, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41d958
sub eax, esi
lea edi, [ebx - 1]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x41d964
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea eax, [ebx - 1]
lea ecx, [ecx]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41d980
mov cx, word [0x5a4e3c]
push 0
mov word [eax], cx
mov dl, byte [0x5a4e3e]
push 0
push ebx
mov byte [eax + 2], dl
mov eax, dword [ebp - 0x1a4]
push 0
push eax
call fcn.0040f5f0
add esp, 0x14
lea eax, [ebx - 1]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41d9b4
mov cx, word [0x5a4c4c]
mov word [eax], cx
mov dl, byte [0x5a4c4e]
mov byte [eax + 2], dl
jmp 0x41d9f6
movzx eax, word [esi + 0x103]
add eax, dword [ebp - 0x130]
je 0x41d9f6
push 0
push 1
push ebx
push 0x5de0
push eax
call fcn.0040f5f0
add esp, 0x14
lea eax, [ebp - 0x178]
mov dword [ebp - 0x19c], 0
mov dword [ebp - 0x1a8], 0x5de2
mov dword [ebp - 0x1a4], eax
mov dword [ebp - 0x1b0], 8
mov ecx, 1
jmp 0x41da30
mov edx, dword [ebp - 0x1a0]
mov eax, dword [ebp - 0x1a8]
movzx esi, byte [edx + eax - 0x5cc5]
mov edx, dword [ebp - 0x1a4]
add esi, dword [edx]
je 0x41daf6
cmp dword [ebp - 0x19c], 0
lea edi, [ebx - 1]
jne 0x41da80
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41da62
mov ax, word [0x5a47f0]
mov word [edi], ax
mov dword [ebp - 0x19c], ecx
jmp 0x41da92
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41da80
mov cx, word [0x5a4bd4]
mov word [edi], cx
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41da97
sub eax, edx
push 0x5dea
lea edi, [ebx + eax]
call fcn.004865f0
mov edx, dword [ebp - 0x1a8]
add esp, 4
push eax
push edx
call fcn.004865f0
add esp, 4
push eax
push 0x5a4c44
push edi
call dword [sym.imp.USER32.dll_wsprintfA]
push 0
push 0
push ebx
push 0
push esi
call fcn.0040f5f0
add esp, 0x24
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41dae0
mov ax, word [0x5a4bd8]
mov word [edi], ax
mov ecx, 1
add dword [ebp - 0x1a4], 4
add dword [ebp - 0x1a8], ecx
sub dword [ebp - 0x1b0], ecx
jne 0x41da30
lea ecx, [ebp - 0x154]
mov dword [ebp - 0x1a4], ecx
mov dword [ebp - 0x19c], 0
mov dword [ebp - 0x1a8], 0x5de2
mov dword [ebp - 0x1b0], 8
mov ecx, 1
mov edi, edi
mov edx, dword [ebp - 0x1a0]
mov eax, dword [ebp - 0x1a8]
movsx esi, byte [edx + eax - 0x5cce]
mov edx, dword [ebp - 0x1a4]
add esi, dword [edx]
je 0x41dc06
cmp dword [ebp - 0x19c], 0
lea edi, [ebx - 1]
jne 0x41db90
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41db72
mov ax, word [0x5a47f0]
mov word [edi], ax
mov dword [ebp - 0x19c], ecx
jmp 0x41dba2
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41db90
mov cx, word [0x5a4bd4]
mov word [edi], cx
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41dba7
sub eax, edx
push 0x5deb
lea edi, [ebx + eax]
call fcn.004865f0
mov edx, dword [ebp - 0x1a8]
add esp, 4
push eax
push edx
call fcn.004865f0
add esp, 4
push eax
push 0x5a4c44
push edi
call dword [sym.imp.USER32.dll_wsprintfA]
push 0
push 0
push ebx
push 0
push esi
call fcn.0040f5f0
add esp, 0x24
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41dbf0
mov ax, word [0x5a4bd8]
mov word [edi], ax
mov ecx, 1
add dword [ebp - 0x1a4], 4
add dword [ebp - 0x1a8], ecx
sub dword [ebp - 0x1b0], ecx
jne 0x41db40
mov ecx, dword [ebp - 0x1a0]
mov esi, 0x5de2
mov dword [ebp - 0x1b0], 8
jmp 0x41dc40
movsx eax, byte [ecx + esi - 0x5cbc]
mov dword [ebp - 0x19c], eax
test eax, eax
je 0x41dcc1
lea edi, [ebx - 1]
lea esp, [esp]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41dc60
mov cx, word [0x5a47f0]
mov eax, ebx
mov word [edi], cx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41dc77
sub eax, edx
push esi
lea edi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push 0x5f2c
call fcn.004865f0
add esp, 4
push eax
push edi
call dword [sym.imp.USER32.dll_wsprintfA]
mov edx, dword [ebp - 0x19c]
push 0
push closesocket
push ebx
push 0
push edx
call fcn.0040f5f0
mov ecx, dword [ebp - 0x1a0]
add esp, 0x20
inc esi
dec dword [ebp - 0x1b0]
jne 0x41dc40
mov edx, dword [ecx + 0x130]
test edx, edx
je 0x41dd0e
cmp byte [ebx], 0
je 0x41dcf5
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41dce4
mov ax, word [0x5a47f0]
mov word [edi], ax
push 0
push 0
push ebx
push 0x4c4b46
push edx
call fcn.0040f5f0
mov ecx, dword [ebp - 0x1a0]
add esp, 0x14
mov edx, dword [ecx + 0x134]
test edx, edx
je 0x41dd4f
cmp byte [ebx], 0
je 0x41dd36
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41dd24
mov cx, word [0x5a47f0]
mov word [edi], cx
push 0
push 0
push ebx
push 0x4c4b47
push edx
call fcn.0040f5f0
mov ecx, dword [ebp - 0x1a0]
add esp, 0x14
movzx eax, byte [ecx + 0x13e]
add eax, dword [ebp - 0x118]
mov dword [ebp - 0x1a4], eax
je 0x41ddd8
cmp byte [ebx], 0
je 0x41dd82
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41dd70
mov dx, word [0x5a47f0]
mov word [edi], dx
push 0x5deb
call fcn.004865f0
add esp, 4
mov esi, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41dd91
sub eax, esi
lea edi, [ebx - 1]
lea ecx, [ecx]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x41dda0
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
push 0
push closesocket
mov ecx, eax
mov eax, dword [ebp - 0x1a4]
push ebx
and ecx, 3
push 0x5df1
push eax
rep movsb byte es:[edi], byte [esi]
call fcn.0040f5f0
mov ecx, dword [ebp - 0x1a0]
add esp, 0x14
movzx eax, byte [ecx + 0x13a]
add eax, dword [ebp - 0x114]
mov dword [ebp - 0x1a4], eax
je 0x41de68
cmp byte [ebx], 0
je 0x41de12
lea edi, [ebx - 1]
lea esp, [esp]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41de00
mov cx, word [0x5a47f0]
mov word [edi], cx
push 0x5deb
call fcn.004865f0
add esp, 4
mov esi, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41de21
sub eax, esi
lea edi, [ebx - 1]
lea ecx, [ecx]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x41de30
mov edx, dword [ebp - 0x1a4]
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
push 0
push closesocket
push ebx
mov ecx, eax
and ecx, 3
push 0x5df2
push edx
rep movsb byte es:[edi], byte [esi]
call fcn.0040f5f0
mov ecx, dword [ebp - 0x1a0]
add esp, 0x14
movzx eax, byte [ecx + 0x13d]
add eax, dword [ebp - 0x110]
mov dword [ebp - 0x1a4], eax
je 0x41def8
cmp byte [ebx], 0
je 0x41dea1
lea edi, [ebx - 1]
lea esp, [esp]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41de90
mov ax, word [0x5a47f0]
mov word [edi], ax
push 0x5deb
call fcn.004865f0
add esp, 4
mov esi, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41deb0
sub eax, esi
lea edi, [ebx - 1]
lea esp, [esp]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x41dec0
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
push 0
mov ecx, eax
push closesocket
and ecx, 3
push ebx
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebp - 0x1a4]
push 0x5df3
push ecx
call fcn.0040f5f0
mov ecx, dword [ebp - 0x1a0]
add esp, 0x14
movzx eax, byte [ecx + 0x13f]
add eax, dword [ebp - 0x10c]
mov dword [ebp - 0x1a4], eax
je 0x41df88
cmp byte [ebx], 0
je 0x41df32
lea edi, [ebx - 1]
lea esp, [esp]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41df20
mov dx, word [0x5a47f0]
mov word [edi], dx
push 0x5deb
call fcn.004865f0
add esp, 4
mov esi, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41df41
sub eax, esi
lea edi, [ebx - 1]
lea ecx, [ecx]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x41df50
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
push 0
push closesocket
mov ecx, eax
mov eax, dword [ebp - 0x1a4]
push ebx
and ecx, 3
push 0x5df4
push eax
rep movsb byte es:[edi], byte [esi]
call fcn.0040f5f0
mov ecx, dword [ebp - 0x1a0]
add esp, 0x14
movzx eax, byte [ecx + 0x13b]
add eax, dword [ebp - 0x108]
mov dword [ebp - 0x1a4], eax
je 0x41e018
cmp byte [ebx], 0
je 0x41dfc2
lea edi, [ebx - 1]
lea esp, [esp]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41dfb0
mov cx, word [0x5a47f0]
mov word [edi], cx
push 0x5deb
call fcn.004865f0
add esp, 4
mov esi, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41dfd1
sub eax, esi
lea edi, [ebx - 1]
lea ecx, [ecx]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x41dfe0
mov edx, dword [ebp - 0x1a4]
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
push 0
push closesocket
push ebx
mov ecx, eax
and ecx, 3
push 0x5df5
push edx
rep movsb byte es:[edi], byte [esi]
call fcn.0040f5f0
mov ecx, dword [ebp - 0x1a0]
add esp, 0x14
movzx eax, byte [ecx + 0x13c]
add eax, dword [ebp - 0x104]
mov dword [ebp - 0x1a4], eax
je 0x41e0a8
cmp byte [ebx], 0
je 0x41e051
lea edi, [ebx - 1]
lea esp, [esp]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41e040
mov ax, word [0x5a47f0]
mov word [edi], ax
push 0x5deb
call fcn.004865f0
add esp, 4
mov esi, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41e060
sub eax, esi
lea edi, [ebx - 1]
lea esp, [esp]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x41e070
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
push 0
mov ecx, eax
push closesocket
and ecx, 3
push ebx
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebp - 0x1a4]
push 0x5df6
push ecx
call fcn.0040f5f0
mov ecx, dword [ebp - 0x1a0]
add esp, 0x14
mov eax, dword [ebp - 0x128]
test eax, eax
je 0x41e15c
cmp eax, 2
jl 0x41e15c
cmp eax, 0x31
jg 0x41e15c
lea edi, [ebx - 1]
jmp 0x41e0d0
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41e0d0
mov dx, word [0x5a47f0]
push 0x5dcd
mov word [edi], dx
call fcn.004865f0
add esp, 4
mov esi, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41e0f1
sub eax, esi
lea edi, [ebx - 1]
lea ecx, [ecx]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x41e100
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, dword [ebp - 0x128]
add eax, 0x5df9
and ecx, 3
push eax
rep movsb byte es:[edi], byte [esi]
call fcn.004865f0
add esp, 4
mov esi, eax
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41e130
sub eax, esi
lea edi, [ebx - 1]
lea esp, [esp]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x41e140
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebp - 0x1a0]
movzx eax, byte [ecx + 0x2ee]
mov dword [ebp - 0x19c], eax
test eax, eax
je 0x41e1c9
cmp byte [ebx], 0
movzx edx, byte [ecx + 0x2ed]
je 0x41e192
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41e180
mov cx, word [0x5a47f0]
mov word [edi], cx
mov eax, ebx
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41e197
sub eax, esi
lea esi, [ebx + eax]
mov eax, dword [ebp - 0x19c]
push eax
push edx
push 0x5f57
call fcn.004865f0
add esp, 4
push eax
push esi
call dword [sym.imp.USER32.dll_wsprintfA]
mov ecx, dword [ebp - 0x1a0]
add esp, 0x10
movzx eax, byte [ecx + 0x2f0]
mov dword [ebp - 0x19c], eax
test eax, eax
je 0x41e239
cmp byte [ebx], 0
movzx edx, byte [ecx + 0x2ef]
je 0x41e202
lea edi, [ebx - 1]
lea ecx, [ecx]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41e1f0
mov cx, word [0x5a47f0]
mov word [edi], cx
mov eax, ebx
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41e207
sub eax, esi
lea esi, [ebx + eax]
mov eax, dword [ebp - 0x19c]
push eax
push edx
push 0x5f58
call fcn.004865f0
add esp, 4
push eax
push esi
call dword [sym.imp.USER32.dll_wsprintfA]
mov ecx, dword [ebp - 0x1a0]
add esp, 0x10
movzx eax, byte [ecx + 0x2f2]
mov dword [ebp - 0x19c], eax
test eax, eax
je 0x41e2a9
cmp byte [ebx], 0
movzx edx, byte [ecx + 0x2f1]
je 0x41e272
lea edi, [ebx - 1]
lea ecx, [ecx]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41e260
mov cx, word [0x5a47f0]
mov word [edi], cx
mov eax, ebx
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41e277
sub eax, esi
lea esi, [ebx + eax]
mov eax, dword [ebp - 0x19c]
push eax
push edx
push 0x5f59
call fcn.004865f0
add esp, 4
push eax
push esi
call dword [sym.imp.USER32.dll_wsprintfA]
mov ecx, dword [ebp - 0x1a0]
add esp, 0x10
cmp byte [ecx + 0x2ec], 0
je 0x41e303
cmp byte [ebx], 0
je 0x41e2d2
lea edi, [ebx - 1]
mov edi, edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41e2c0
mov cx, word [0x5a47f0]
mov word [edi], cx
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41e2d7
sub eax, edx
push 0x533d
lea esi, [ebx + eax]
call fcn.004865f0
push eax
push str._8_s
push esi
call dword [sym.imp.USER32.dll_wsprintfA]
mov ecx, dword [ebp - 0x1a0]
add esp, 0x10
cmp word [ecx + 0x138], 0
je 0x41e32b
lea eax, [ebx - 1]
mov dl, byte [eax + 1]
inc eax
test dl, dl
jne 0x41e310
mov dx, word [0x5a4c40]
mov word [eax], dx
mov dl, byte [0x5a4c42]
mov byte [eax + 2], dl
cmp byte [ecx + 0x319], 0
je 0x41e3e3
lea edi, [ebx - 1]
jmp 0x41e340
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41e340
mov ax, word [0x5a47f0]
mov word [edi], ax
movzx edi, byte [ecx + 0x31a]
mov ecx, dword [ebp - 0x1b8]
movzx edx, word [ecx + 0x41b]
lea eax, [ebx - 1]
cmp edi, edx
jl 0x41e390
lea esp, [esp]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41e370
mov cx, word [0x5a4c40]
mov word [eax], cx
mov dl, byte [0x5a4c42]
jmp 0x41e3a8
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41e390
mov cx, word [0x5a4c80]
mov word [eax], cx
mov dl, byte [0x5a4c82]
mov byte [eax + 2], dl
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41e3b0
sub eax, edx
lea esi, [ebx + eax]
mov eax, dword [ebp - 0x1a0]
movzx ecx, byte [eax + 0x319]
push ecx
push edi
push 0x5fbd
call fcn.004865f0
add esp, 4
push eax
push esi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
mov esi, dword [ebp - 0x1d0]
test esi, esi
jne 0x41e3f9
test dword [ebp - 0x1cc], 0x5000000
je 0x41e416
mov edx, dword [ebp + 0x10]
mov edi, dword [ebp - 0x1a0]
mov eax, dword [ebp - 0x1b4]
push edx
push ebx
push edi
push eax
call fcn.00411f90
add esp, 0x10
jmp 0x41e41c
mov edi, dword [ebp - 0x1a0]
push 0
push 0
push 0
push 0
lea ecx, [edi + 0x16c]
push ecx
push ebx
call fcn.0040f9b0
add esp, 0x18
lea eax, [ebx - 1]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41e437
mov dx, word [0x5a4e68]
mov word [eax], dx
mov cl, byte [0x5a4e6a]
mov edx, dword [ebp - 0x1ac]
push 0
mov byte [eax + 2], cl
movzx eax, word [edi + 0xd8]
mov ecx, dword [ebp - 0x1b4]
push edx
push eax
push 6
add ecx, 0x28
push ecx
lea edx, [ebp - 0x198]
push edx
push ebx
call fcn.00417470
add esp, 0x1c
test eax, eax
je 0x41e48d
or dword [ebp - 0x1ac], 0x80000000
cmp byte [ebx], 0
je 0x41e4a6
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41e495
mov ax, word [0x5a47f0]
mov word [edi], ax
test esi, esi
jne 0x41e5f7
test byte [ebp - 0x1ac], 6
mov esi, dword [ebp - 0x198]
je 0x41e5aa
test esi, esi
je 0x41e5aa
cmp esi, 0xf
jg 0x41e4f4
mov ecx, dword [ebp - 0x1a0]
movzx ecx, word [ecx + 0xd8]
mov eax, 0x66666667
imul ecx
sar edx, 2
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
imul ecx, esi
jmp 0x41e57a
cmp esi, 0x14
jg 0x41e52b
mov ecx, dword [ebp - 0x1a0]
movzx edx, word [ecx + 0xd8]
lea ecx, [esi - 0xf]
imul ecx, edx
mov eax, 0x66666667
imul edx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, eax
shl edx, 4
sub edx, eax
add ecx, edx
jmp 0x41e57a
mov eax, dword [ebp - 0x1a0]
movzx edi, word [eax + 0xd8]
lea ecx, [esi - 0x14]
imul ecx, edi
mov dword [ebp - 0x1c4], ecx
fild dword [ebp - 0x1c4]
fmul qword [0x5a4e60]
call fcn.00551960
mov dword [ebp - 0x1c4], eax
mov eax, 0x66666667
imul edi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [edi + eax*2]
add ecx, eax
lea ecx, [ecx + ecx*4]
sub ecx, dword [ebp - 0x1c4]
lea edi, [ebx - 1]
lea ecx, [ecx]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41e580
mov dx, word [0x5a4c40]
push 0
push 1
push ebx
mov word [edi], dx
mov al, byte [0x5a4c42]
push 0x1e
push ecx
mov byte [edi + 2], al
call fcn.0040f5f0
add esp, 0x14
test byte [ebp - 0x1ac], 2
je 0x41e5f7
test esi, esi
je 0x41e5f7
lea ecx, [esi - 0x10]
cmp ecx, 4
ja 0x41e5f7
lea eax, [ebx - 1]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41e5c6
mov dx, word [0x5a4c40]
push 0
push 1
push ebx
mov word [eax], dx
mov cl, byte [0x5a4c42]
push 0x5dde
add esi, 0xfffffff1
push esi
mov byte [eax + 2], cl
call fcn.0040f5f0
add esp, 0x14
lea eax, [ebx - 1]
lea ebx, [ebx]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41e600
test byte [ebp + 0x10], 1
mov dx, word [0x5a4c3c]
mov word [eax], dx
mov cl, byte [0x5a4c3e]
mov byte [eax + 2], cl
je 0x41e657
cmp dword [ebp - 0x1d0], 0
jne 0x41e657
test byte [ebp - 0x1ac], 6
je 0x41e657
mov edx, dword [ebp - 0x1b8]
movzx eax, byte [edx + 0xf75]
test eax, eax
je 0x41e657
push 0
push 1
push ebx
push 0x5f2b
push eax
call fcn.0040f5f0
add esp, 0x14
mov eax, dword [ebp - 0x1b4]
test byte [eax + 2], 0x40
je 0x41e6b6
cmp byte [ebx], 0
je 0x41e682
lea edi, [ebx - 1]
nop
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41e670
mov cx, word [0x5a47f0]
mov word [edi], cx
push 0x5355
call fcn.004865f0
add esp, 4
mov esi, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41e691
sub eax, esi
lea edi, [ebx - 1]
lea ecx, [ecx]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x41e6a0
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edx, dword [ebp - 0x1b4]
test byte [edx + 2], 0x80
je 0x41e716
cmp byte [ebx], 0
je 0x41e6e1
lea edi, [ebx - 1]
mov edi, edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41e6d0
mov ax, word [0x5a47f0]
mov word [edi], ax
push 0x5359
call fcn.004865f0
add esp, 4
mov esi, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41e6f0
sub eax, esi
lea edi, [ebx - 1]
lea esp, [esp]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x41e700
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebp - 0x1b4]
mov eax, dword [ecx + 0x40]
test eax, eax
je 0x41e854
cmp eax, 0xffffffff
jne 0x41e78b
cmp byte [ebx], 0
je 0x41e74a
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41e738
mov dx, word [0x5a47f0]
mov word [edi], dx
push 0x534c
call fcn.004865f0
add esp, 4
mov esi, eax
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41e760
sub eax, esi
lea edi, [ebx - 1]
lea esp, [esp]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x41e770
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x41e854
push 0
call fcn.005528bb
mov edx, dword [ebp - 0x1b4]
mov ecx, dword [edx + 0x40]
add esp, 4
cmp ecx, eax
jle 0x41e84d
push ecx
call fcn.00441520
add esp, 4
mov dword [ebp - 0x1a8], eax
test eax, eax
je 0x41e854
cmp byte [ebx], 0
je 0x41e7d6
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41e7c5
mov ax, word [0x5a47f0]
mov word [edi], ax
push 0x534d
call fcn.004865f0
add esp, 4
mov esi, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41e7e5
sub eax, esi
lea edi, [ebx - 1]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x41e7f1
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
mov eax, ebx
rep movsb byte es:[edi], byte [esi]
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41e810
mov ecx, dword [ebp - 0x1a8]
sub eax, edx
mov edx, dword [ecx + 4]
push edx
mov edx, dword [ecx + 8]
push edx
mov edx, dword [ecx + 0xc]
push edx
mov edx, dword [ecx + 0x10]
mov ecx, dword [ecx + 0x14]
inc edx
push edx
add ecx, 0x76c
push ecx
add eax, ebx
push str.:_04d__02d__02d__02d:_02d
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x1c
jmp 0x41e854
mov dword [edx + 0x40], 0
lea eax, [ebx - 1]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41e857
mov dx, word [0x5a4c7c]
mov esi, dword [ebp - 0x1a0]
mov word [eax], dx
mov edx, dword [ebp - 0x1b8]
mov cl, byte [0x5a4c7e]
push edx
push ebx
mov byte [eax + 2], cl
mov eax, dword [ebp + 0x10]
push esi
push eax
call fcn.00418420
mov eax, dword [ebp - 0x1b4]
add esp, 0x10
xor edx, edx
add eax, 0x4f
mov dword [ebp - 0x1c4], eax
mov ecx, 9
movzx edi, word [eax]
add edx, edi
add eax, 2
dec ecx
jne 0x41e8a3
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41e8b1
mov cx, word [0x5a47f0]
mov word [edi], cx
lea eax, [ebx - 1]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41e8c6
mov cx, word [0x5a4c4c]
mov word [eax], cx
mov cl, byte [0x5a4c4e]
mov byte [eax + 2], cl
movzx edi, word [esi + 0x31d]
test di, di
je 0x41e918
mov eax, ebx
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41e8f2
push edi
push edx
sub eax, esi
push 0x4c5f05
lea esi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push esi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea eax, [ebx - 1]
jmp 0x41e920
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41e920
mov cx, word [0x5a4c40]
mov word [eax], cx
mov dl, byte [0x5a4c42]
mov ecx, dword [ebp - 0x1bc]
mov byte [eax + 2], dl
xor eax, eax
mov dword [ebp - 0x1a4], eax
test cl, 1
je 0x41e959
mov eax, 0x4c5ef3
mov dword [ebp - 0x1a4], eax
test ecx, 0xfde
je 0x41e96d
mov dword [ebp - 0x1a4], 0x4c5efc
jmp 0x41e975
test eax, eax
je 0x41ea04
mov eax, dword [ebp - 0x1c4]
xor esi, esi
mov dword [ebp - 0x1a8], eax
jmp 0x41e990
mov ecx, dword [ebp - 0x1a8]
cmp word [ecx], 0
je 0x41e9f7
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41e9a3
mov dx, word [0x5a47f0]
mov eax, ebx
mov word [edi], dx
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41e9c0
sub eax, edx
mov edx, dword [ebp - 0x1a4]
lea edi, [ebx + eax]
mov eax, dword [ebp - 0x1a8]
movzx ecx, word [eax]
push ecx
add edx, esi
push edx
call fcn.004865f0
add esp, 4
push eax
push str._s_d
push edi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
add dword [ebp - 0x1a8], 2
inc esi
cmp esi, 8
jle 0x41e990
dec ebx
mov al, byte [ebx + 1]
inc ebx
test al, al
jne 0x41ea05
jmp 0x41f5fe
test dword [ebp - 0x1cc], 0x100000
je 0x41f011
cmp byte [ebx], 0
je 0x41ea42
lea edi, [ebx - 1]
lea ebx, [ebx]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41ea30
mov dx, word [0x5a47f0]
mov word [edi], dx
mov eax, dword [ebp - 0x1b4]
movzx ecx, byte [eax + 0x46]
mov edx, 0x200
mov dword [ebp - 0x1a4], ecx
test word [eax + 2], dx
je 0x41ec2a
push 0x4c4b8f
call fcn.004865f0
push 0x4c4b90
mov dword [ebp - 0x1c0], eax
call fcn.004865f0
push 0x4c4b93
mov dword [ebp - 0x1b0], eax
call fcn.004865f0
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x1a4]
mov ecx, eax
sar ecx, 4
and ecx, 0xf
add esp, 0xc
and eax, 0xf
mov dword [ebp - 0x19c], ecx
mov dword [ebp - 0x1a4], eax
je 0x41eb47
mov edx, eax
lea eax, [ebx - 1]
lea esp, [esp]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41eac0
mov cx, word [0x5a4c40]
mov word [eax], cx
mov cl, byte [0x5a4c42]
mov byte [eax + 2], cl
jmp 0x41eae0
mov ecx, dword [ebp - 0x1a8]
dec edx
mov esi, ecx
lea esp, [esp]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41eaf0
sub ecx, esi
mov eax, ecx
lea edi, [ebx - 1]
mov edi, edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x41eb00
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
test edx, edx
jne 0x41eae0
lea eax, [ebx - 1]
lea ecx, [ecx]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41eb20
mov dx, word [0x5a4c7c]
mov word [eax], dx
mov cl, byte [0x5a4c7e]
mov byte [eax + 2], cl
mov eax, dword [ebp - 0x1a4]
mov ecx, dword [ebp - 0x19c]
mov edx, ecx
sub edx, eax
je 0x41ebb0
lea eax, [ebx - 1]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41eb54
mov cx, word [0x5a4c7c]
mov word [eax], cx
mov cl, byte [0x5a4c7e]
mov byte [eax + 2], cl
nop
mov eax, dword [ebp - 0x1c0]
dec edx
mov esi, eax
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41eb80
sub eax, esi
lea edi, [ebx - 1]
lea esp, [esp]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x41eb90
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
test edx, edx
jne 0x41eb70
mov ecx, dword [ebp - 0x19c]
mov edx, dword [ebp - 0x1a0]
movzx edx, byte [edx + 0x318]
sub edx, ecx
test edx, edx
jle 0x41ec2a
lea eax, [ebx - 1]
lea ebx, [ebx]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41ebd0
mov cx, word [0x5a4c7c]
mov word [eax], cx
mov cl, byte [0x5a4c7e]
mov byte [eax + 2], cl
jmp 0x41ebf0
mov eax, dword [ebp - 0x1b0]
dec edx
mov esi, eax
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41ec00
sub eax, esi
lea edi, [ebx - 1]
lea esp, [esp]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x41ec10
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
test edx, edx
jne 0x41ebf0
lea eax, [ebx - 1]
lea ecx, [ecx]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41ec30
mov dx, word [0x5a4c4c]
mov word [eax], dx
mov cl, byte [0x5a4c4e]
mov edx, dword [ebp - 0x1a0]
mov byte [eax + 2], cl
mov eax, dword [edx + 0xf5]
test eax, eax
je 0x41ec72
push 0
push 1
sar eax, 0x10
push ebx
cwde
push 0x5ddb
push eax
call fcn.0040f5f0
add esp, 0x14
mov ecx, dword [ebp - 0x1a0]
movzx eax, word [ecx + 0xfd]
test eax, eax
je 0x41ec96
push 0
push 1
push ebx
push 0x5ddd
push eax
call fcn.0040f5f0
add esp, 0x14
mov edx, dword [ebp - 0x1a0]
movzx eax, word [edx + 0xf3]
test eax, eax
je 0x41ecba
push 0
push 1
push ebx
push 0x5dd9
push eax
call fcn.0040f5f0
add esp, 0x14
mov eax, dword [ebp - 0x1a0]
movzx eax, word [eax + 0x105]
add eax, dword [ebp - 0x194]
je 0x41ece2
push 0
push 1
push ebx
push 0x5dc6
push eax
call fcn.0040f5f0
add esp, 0x14
mov ecx, dword [ebp - 0x1a0]
movzx eax, word [ecx + 0x107]
add eax, dword [ebp - 0x190]
je 0x41ed0a
push 0
push 1
push ebx
push 0x5dc7
push eax
call fcn.0040f5f0
add esp, 0x14
mov edx, dword [ebp - 0x1a0]
movzx eax, word [edx + 0x10b]
add eax, dword [ebp - 0x188]
je 0x41ed32
push 0
push 1
push ebx
push 0x5dc9
push eax
call fcn.0040f5f0
add esp, 0x14
mov eax, dword [ebp - 0x1a0]
movzx eax, word [eax + 0x10d]
add eax, dword [ebp - 0x184]
je 0x41ed5a
push 0
push 1
push ebx
push 0x5dca
push eax
call fcn.0040f5f0
add esp, 0x14
lea ecx, [ebp - 0x178]
mov dword [ebp - 0x1b0], ecx
mov dword [ebp - 0x19c], 0
mov dword [ebp - 0x1a8], 0x5de2
mov dword [ebp - 0x1c0], 8
mov ecx, 1
lea esp, [esp]
mov edx, dword [ebp - 0x1a0]
mov eax, dword [ebp - 0x1a8]
movzx esi, byte [eax + edx - 0x5cc5]
mov edx, dword [ebp - 0x1b0]
add esi, dword [edx]
je 0x41ee56
cmp dword [ebp - 0x19c], 0
lea edi, [ebx - 1]
jne 0x41ede0
mov edi, edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41edc0
mov ax, word [0x5a47f0]
mov word [edi], ax
mov dword [ebp - 0x19c], ecx
jmp 0x41edf2
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41ede0
mov cx, word [0x5a4bd4]
mov word [edi], cx
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41edf7
sub eax, edx
push 0x5dea
lea edi, [ebx + eax]
call fcn.004865f0
mov edx, dword [ebp - 0x1a8]
add esp, 4
push eax
push edx
call fcn.004865f0
add esp, 4
push eax
push 0x5a4c44
push edi
call dword [sym.imp.USER32.dll_wsprintfA]
push 0
push 0
push ebx
push 0
push esi
call fcn.0040f5f0
add esp, 0x24
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41ee40
mov ax, word [0x5a4bd8]
mov word [edi], ax
mov ecx, 1
add dword [ebp - 0x1b0], 4
add dword [ebp - 0x1a8], ecx
sub dword [ebp - 0x1c0], ecx
jne 0x41ed90
lea edx, [ebp - 0x154]
mov dword [ebp - 0x19c], 0
mov dword [ebp - 0x1a8], 0x5de2
mov dword [ebp - 0x1b0], edx
mov dword [ebp - 0x1c0], 8
lea esp, [esp]
mov eax, dword [ebp - 0x1a0]
mov edx, dword [ebp - 0x1a8]
movsx esi, byte [edx + eax - 0x5cce]
mov eax, dword [ebp - 0x1b0]
add esi, dword [eax]
je 0x41ef67
cmp dword [ebp - 0x19c], 0
lea edi, [ebx - 1]
jne 0x41eef0
mov edi, edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41eed0
mov dx, word [0x5a47f0]
mov word [edi], dx
mov dword [ebp - 0x19c], ecx
jmp 0x41ef01
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41eef0
mov ax, word [0x5a4bd4]
mov word [edi], ax
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41ef06
sub eax, edx
push 0x5deb
lea edi, [ebx + eax]
call fcn.004865f0
mov ecx, dword [ebp - 0x1a8]
add esp, 4
push eax
push ecx
call fcn.004865f0
add esp, 4
push eax
push 0x5a4c44
push edi
call dword [sym.imp.USER32.dll_wsprintfA]
push 0
push 0
push ebx
push 0
push esi
call fcn.0040f5f0
add esp, 0x24
lea edi, [ebx - 1]
nop
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41ef50
mov dx, word [0x5a4bd8]
mov word [edi], dx
mov ecx, 1
add dword [ebp - 0x1b0], 4
add dword [ebp - 0x1a8], ecx
sub dword [ebp - 0x1c0], ecx
jne 0x41eea0
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41ef83
mov ax, word [0x5a47f0]
mov word [edi], ax
lea eax, [ebx - 1]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41ef97
mov cx, word [0x5a4e68]
mov word [eax], cx
mov dl, byte [0x5a4e6a]
mov ecx, dword [ebp - 0x1a0]
mov byte [eax + 2], dl
mov eax, dword [ebp - 0x1ac]
movzx edx, word [ecx + 0xd8]
push 0
push eax
mov eax, dword [ebp - 0x1b4]
push edx
push 6
add eax, 0x28
push eax
lea ecx, [ebp - 0x198]
push ecx
push ebx
call fcn.00417470
add esp, 0x1c
dec ebx
mov al, byte [ebx + 1]
inc ebx
test al, al
jne 0x41efe6
mov dx, word [0x5a4c7c]
mov word [ebx], dx
mov al, byte [0x5a4c7e]
pop esi
pop edi
mov byte [ebx + 2], al
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005517d0
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 0x1b4]
movzx eax, word [ecx]
cmp eax, 0x1da0
jg 0x41f034
je 0x41f03f
sub eax, 0x1cf5
je 0x41f03f
sub eax, 0x61
je 0x41f03f
jmp 0x41f0b6
cmp eax, 0xbbae
jne 0x41f0b6
cmp byte [ebx], 0
je 0x41f059
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41f047
mov dx, word [0x5a47f0]
mov word [edi], dx
lea eax, [ebx - 1]
lea esp, [esp]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41f060
mov cx, word [0x5a4c3c]
mov word [eax], cx
mov dl, byte [0x5a4c3e]
push 0x5ecc
mov byte [eax + 2], dl
call fcn.004865f0
add esp, 4
mov esi, eax
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41f090
sub eax, esi
lea edi, [ebx - 1]
lea esp, [esp]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x41f0a0
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebp - 0x1bc]
and eax, 0x200000
mov dword [ebp - 0x1a8], eax
lea eax, [ebx - 1]
je 0x41f0f0
lea esp, [esp]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41f0d0
mov cx, word [0x5a4c7c]
mov word [eax], cx
mov dl, byte [0x5a4c7e]
jmp 0x41f108
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41f0f0
mov cx, word [0x5a4c3c]
mov word [eax], cx
mov dl, byte [0x5a4c3e]
mov esi, dword [ebp - 0x1a0]
mov byte [eax + 2], dl
test dword [esi + 0x16c], 0x20000000
lea eax, [esi + 0x16c]
mov dword [ebp - 0x1b0], eax
jne 0x41f4c0
movzx eax, word [esi + 0xf3]
test ax, ax
je 0x41f170
movzx ecx, word [esi + 0x12e]
push 0
push 1
test cx, cx
je 0x41f15e
lea edx, [ebx + 2]
push edx
push 0x5dd9
push ecx
push eax
call fcn.0040f6c0
add esp, 0x18
jmp 0x41f170
lea ecx, [ebx + 2]
push ecx
push 0x5dd9
push eax
call fcn.0040f5f0
add esp, 0x14
mov eax, dword [esi + 0xeb]
test eax, eax
je 0x41f23b
xor edi, edi
test eax, eax
jns 0x41f1bb
mov ecx, dword [ebp - 0x1b8]
neg eax
cmp dword [ecx + 0x3f5], eax
jae 0x41f1bb
mov edi, 1
lea eax, [ebx - 1]
lea esp, [esp]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41f1a0
mov dx, word [0x5a4c80]
mov word [eax], dx
mov cl, byte [0x5a4c82]
mov byte [eax + 2], cl
movzx eax, word [esi + 0x12e]
push 0
push 1
lea edx, [ebx + 2]
push edx
push 0x5dda
test ax, ax
je 0x41f1e6
mov ecx, dword [esi + 0xeb]
push eax
push ecx
call fcn.0040f6c0
add esp, 0x18
jmp 0x41f1f5
mov eax, dword [esi + 0xeb]
push eax
call fcn.0040f5f0
add esp, 0x14
test edi, edi
je 0x41f23b
cmp dword [ebp - 0x1a8], 0
lea eax, [ebx - 1]
je 0x41f220
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41f205
mov cx, word [0x5a4c7c]
mov word [eax], cx
mov dl, byte [0x5a4c7e]
jmp 0x41f238
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41f220
mov cx, word [0x5a4c3c]
mov word [eax], cx
mov dl, byte [0x5a4c3e]
mov byte [eax + 2], dl
mov eax, dword [ebp - 0x1a0]
mov esi, dword [eax + 0xef]
test esi, esi
je 0x41f3c9
xor ecx, ecx
mov dword [ebp - 0x19c], ecx
test esi, esi
jns 0x41f360
cmp byte [ebx], cl
je 0x41f278
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41f266
mov dx, word [0x5a47f0]
mov word [edi], dx
mov eax, dword [ebp - 0x1b8]
movzx edx, word [eax + 0x40f]
neg esi
cmp edx, esi
jge 0x41f296
mov ecx, 1
mov dword [ebp - 0x19c], ecx
mov eax, 0x51eb851f
imul esi
sar edx, 5
mov edi, edx
shr edi, 0x1f
add edi, edx
mov eax, edi
imul eax, eax, 0x64
sub esi, eax
mov edx, esi
test ecx, ecx
je 0x41f2d2
lea eax, [ebx - 1]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41f2b7
mov cx, word [0x5a4c80]
mov word [eax], cx
mov cl, byte [0x5a4c82]
mov byte [eax + 2], cl
mov eax, ebx
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41f2d7
push edx
sub eax, esi
push edi
push 0x4e41
lea esi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push str._s___d._02d
push esi
mov esi, dword [sym.imp.USER32.dll_wsprintfA]
call esi
add esp, 0x14
cmp dword [ebp - 0x19c], 0
je 0x41f3cf
cmp dword [ebp - 0x1a8], 0
lea eax, [ebx - 1]
je 0x41f340
lea ecx, [ecx]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41f320
mov dx, word [0x5a4c7c]
mov word [eax], dx
mov cl, byte [0x5a4c7e]
mov byte [eax + 2], cl
jmp 0x41f3cf
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41f340
mov dx, word [0x5a4c3c]
mov word [eax], dx
mov cl, byte [0x5a4c3e]
mov byte [eax + 2], cl
jmp 0x41f3cf
cmp byte [ebx], cl
je 0x41f379
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41f367
mov dx, word [0x5a47f0]
mov word [edi], dx
mov eax, ebx
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41f380
sub eax, edx
mov edi, eax
mov eax, 0x51eb851f
imul esi
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ecx, eax
imul ecx, ecx, 0x64
sub esi, ecx
push esi
push eax
push 0x4e41
call fcn.004865f0
mov esi, dword [sym.imp.USER32.dll_wsprintfA]
add esp, 4
push eax
lea edx, [ebx + edi]
push str._s__d._02d
push edx
call esi
add esp, 0x14
jmp 0x41f3cf
mov esi, dword [sym.imp.USER32.dll_wsprintfA]
mov ecx, dword [ebp - 0x1a0]
mov al, byte [ecx + 0x142]
test al, al
je 0x41f3fe
push 0
push 1
lea ecx, [ebx + 2]
push ecx
movzx edx, al
push 0x5ec5
push edx
call fcn.0040f5f0
mov ecx, dword [ebp - 0x1a0]
add esp, 0x14
cmp byte [ecx + 0x145], 0
je 0x41f463
cmp byte [ebx], 0
je 0x41f424
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41f413
mov ax, word [0x5a47f0]
mov word [edi], ax
mov eax, ebx
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41f430
mov ecx, dword [ebp - 0x1a0]
sub eax, edx
movzx edx, byte [ecx + 0x145]
push edx
push 0x535b
lea edi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push edi
call esi
add esp, 0xc
jmp 0x41f4c6
cmp byte [ecx + 0x144], 0
je 0x41f4c6
cmp byte [ebx], 0
je 0x41f489
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41f478
mov ax, word [0x5a47f0]
mov word [edi], ax
mov eax, ebx
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41f490
mov ecx, dword [ebp - 0x1a0]
sub eax, edx
movzx edx, byte [ecx + 0x144]
push edx
push 0x525b
lea edi, [ebx + eax]
call fcn.004865f0
add esp, 4
push eax
push edi
call esi
add esp, 0xc
jmp 0x41f4c6
mov esi, dword [sym.imp.USER32.dll_wsprintfA]
cmp dword [ebp - 0x1c0], 0
jne 0x41f59b
mov eax, dword [ebp - 0x1a0]
cmp byte [eax + 0x2f5], 0
je 0x41f59b
mov ecx, dword [eax + 0x2f7]
test ecx, ecx
je 0x41f59b
cmp byte [ebx], 0
je 0x41f511
lea edi, [ebx - 1]
lea esp, [esp]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x41f500
mov ax, word [0x5a47f0]
mov word [edi], ax
lea edx, [ebp - 0x84]
push edx
mov eax, 0x10624dd3
mul ecx
shr edx, 6
push 0x5e75
push edx
call fcn.004413e0
add esp, 0xc
lea eax, [ebx - 1]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41f533
mov cx, word [0x5a4c3c]
mov word [eax], cx
mov dl, byte [0x5a4c3e]
mov byte [eax + 2], dl
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41f553
sub eax, edx
lea edi, [ebx + eax]
lea eax, [ebp - 0x84]
push eax
push 0x5395
call fcn.004865f0
add esp, 4
push eax
push edi
call esi
add esp, 0xc
lea eax, [ebx - 1]
lea ecx, [ecx]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x41f580
mov cx, word [0x5a4cc0]
mov word [eax], cx
mov dl, byte [0x5a4cc2]
mov byte [eax + 2], dl
cmp dword [ebp - 0x1d0], 0
jne 0x41f5b0
test dword [ebp - 0x1cc], 0x5000000
je 0x41f5cb
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp - 0x1a0]
mov edx, dword [ebp - 0x1b4]
push eax
push ebx
push ecx
push edx
call fcn.00411f90
add esp, 0x10
cmp byte [ebx], 0x40
push 0
push 0
push 0
push 1
jne 0x41f5e5
mov eax, dword [ebp - 0x1b0]
push eax
lea ecx, [ebx + 2]
push ecx
jmp 0x41f5ed
mov edx, dword [ebp - 0x1b0]
push edx
push ebx
call fcn.0040f9b0
add esp, 0x18
dec ebx
mov al, byte [ebx + 1]
inc ebx
test al, al
jne 0x41f5f6
mov ax, word [0x5a4c7c]
mov word [ebx], ax
mov cl, byte [0x5a4c7e]
mov byte [ebx + 2], cl
pop esi
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop ebx
call fcn.005517d0
mov esp, ebp
pop ebp
ret