Function at 0x4b8dbe
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1ac
mov eax, dword [0x55f900]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push 0x37
xor ebx, ebx
lea eax, [ebp - 0x3c]
push ebx
push eax
call fcn.004c37f0
xor eax, eax
mov dword [ebp - 0x94], ebx
lea edi, [ebp - 0x90]
mov dword [ebp - 0x118], ebx
stosd dword es:[edi], eax
add esp, 0xc
mov dword [ebp - 0xf0], ebx
mov dword [ebp - 0x110], ebx
mov dword [ebp - 0xec], ebx
stosd dword es:[edi], eax
push 6
pop ecx
push 0xa
stosd dword es:[edi], eax
mov dword [ebp - 0xe8], ebx
mov dword [ebp - 0xf4], ebx
mov dword [ebp - 0x100], ebx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
lea edi, [ebp - 0x174]
rep stosd dword es:[edi], eax
pop ecx
lea edi, [ebp - 0x7c]
rep stosd dword es:[edi], eax
call fcn.0040d273
test eax, eax
je 0x4b8e52
call fcn.0040cf05
call fcn.0040ca94
mov dword [ebp - 0x18c], eax
jmp 0x4b8e58
mov dword [ebp - 0x18c], ebx
call fcn.0044eadc
cmp eax, 0x35a5011f
je 0x4b8e69
call fcn.004b83fd
push 0x4fbebc
call fcn.0040f9fc
push ebx
call fcn.0040bb55
pop ecx
pop ecx
push 0x309
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebx
push ebx
call fcn.0046a855
push eax
push str._sSoundsKaChing.wav
push ebx
call fcn.0048b25d
push eax
call fcn.00486d1a
push ebx
push ebx
mov dword [ebp - 0x19c], eax
call fcn.0046a855
push eax
push str._sSoundsIntroWait1.dav
push ebx
call fcn.0048b25d
push eax
call fcn.00486d1a
push ebx
push ebx
mov dword [ebp - 0x138], eax
call fcn.0046a855
push eax
push str._sSoundsIntroWait2.dav
push ebx
call fcn.0048b25d
add esp, 0x44
push eax
call fcn.00486d1a
push ebx
push ebx
mov dword [ebp - 0x15c], eax
call fcn.0046a855
push eax
push str._sSoundsIntroWait3.dav
push ebx
call fcn.0048b25d
push eax
call fcn.00486d1a
push ebx
push ebx
mov dword [ebp - 0x158], eax
call fcn.0046a855
push eax
push str._sSoundsIntroWait4.dav
push ebx
call fcn.0048b25d
push eax
call fcn.00486d1a
push ebx
push ebx
mov dword [ebp - 0x154], eax
call fcn.0046a855
push eax
push str._sSoundsIntroWait5.dav
push ebx
call fcn.0048b25d
add esp, 0x48
push eax
call fcn.00486d1a
push ebx
push ebx
mov dword [ebp - 0x150], eax
call fcn.0046a855
push eax
push str._sSoundsIntroWait6.dav
push ebx
call fcn.0048b25d
push eax
call fcn.00486d1a
mov dword [ebp - 0x148], eax
push ebx
push ebx
call fcn.0046a855
push eax
push str._sSoundsIntroWait7.dav
push ebx
call fcn.0048b25d
push eax
call fcn.00486d1a
push ebx
push ebx
mov dword [ebp - 0x14c], eax
call fcn.0046a855
push eax
push str._sSoundsIntroWait8.dav
push ebx
call fcn.0048b25d
add esp, 0x48
push eax
call fcn.00486d1a
push ebx
push ebx
mov dword [ebp - 0x13c], eax
call fcn.0046a855
push eax
push str._sSoundsIntroPaulaDrop.dav
push ebx
call fcn.0048b25d
push eax
call fcn.00486d1a
push ebx
push ebx
mov dword [ebp - 0x1a0], eax
call fcn.0046a855
push eax
push str._sSoundsIntroRevision.dav
push ebx
call fcn.0048b25d
push eax
call fcn.00486d1a
push ebx
push ebx
mov dword [ebp - 0x1a4], eax
call fcn.0046a855
push eax
push str._sSoundsIntroNapaLogo.dav
push ebx
call fcn.0048b25d
add esp, 0x48
push eax
call fcn.00486d1a
push ebx
push ebx
mov dword [ebp - 0x1a8], eax
call fcn.0046a855
push eax
push str._sSoundsIntroLeaving.dav
push ebx
call fcn.0048b25d
push eax
call fcn.00486d1a
push ebx
push ebx
mov dword [ebp - 0x178], eax
call fcn.0046a855
push eax
push str._sSoundsIntroAcronym.dav
push ebx
call fcn.0048b25d
push eax
call fcn.00486d1a
push ebx
push ebx
mov dword [ebp - 0xfc], eax
call fcn.0046a855
push eax
push str._sSoundsIntroPing.dav
push ebx
call fcn.0048b25d
add esp, 0x48
push eax
call fcn.00486d1a
push ebx
push ebx
mov dword [ebp - 0x180], eax
call fcn.0046a855
push eax
push str._sSoundsIntroPing2.dav
push ebx
call fcn.0048b25d
push eax
call fcn.00486d1a
add esp, 0x1c
mov dword [ebp - 0x184], eax
call fcn.0040cb03
push eax
call fcn.0040cc4a
push eax
call fcn.0047c897
mov esi, 0x53f134
mov dword [ebp - 0x188], eax
push esi
call fcn.004b821a
mov dword [ebp - 0x140], eax
lea eax, [ebp - 0x94]
push esi
push eax
call fcn.004248de
push esi
call fcn.004b8356
push ebx
mov dword [ebp - 0x144], eax
call fcn.004b8523
push ebx
call fcn.004b7b8d
add esp, 0x20
push 0x37
call fcn.004b845c
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.0048dd2a
push ebx
lea eax, [ebp - 0x3c]
push 0x2e
push eax
call fcn.0048c19c
add esp, 0x18
cmp dword [0x661ae0], ebx
je 0x4b913f
xor eax, eax
lea edi, [ebp - 0x4c]
stosd dword es:[edi], eax
push 0x248
push str.C:UsersOfficeDocumentsVisual_StudioPAULATitlePage.c
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x4c]
push eax
call fcn.004b5bf0
push ecx
mov edi, esp
lea esi, [ebp - 0x4c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.0047fa94
push eax
push str.._04d
lea eax, [ebp - 0x3c]
push 0x37
push eax
call fcn.0048d960
add esp, 0x20
push 0x59
pop eax
push 9
pop edi
push 0x24
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x174], eax
pop eax
mov dword [ebp - 0x54], edi
mov dword [ebp - 0x170], 0x13
mov dword [ebp - 0x50], 0xffffffd4
mov dword [ebp - 0x16c], 0x1b
mov dword [ebp - 0x4c], 0xffffffce
mov dword [ebp - 0x10c], eax
mov dword [ebp - 0x168], eax
mov dword [ebp - 0x48], 0xffffffc8
mov dword [ebp - 0x164], 0x2d
mov dword [ebp - 0x44], 0xffffffc2
mov dword [ebp - 0x160], 0x35
mov dword [ebp - 0x40], 0xffffffbc
mov dword [ebp - 0x120], ebx
call fcn.004b729a
mov dword [ebp - 0x124], eax
xor esi, esi
cmp dword [ebp + esi - 0x7c], 0
jne 0x4b91e4
push 0
push dword [ebp + esi - 0x54]
push dword [ebp + esi - 0x174]
push dword [ebp + esi - 0x94]
call fcn.0047dd09
add esp, 0x10
add esi, 4
cmp esi, 0x18
jl 0x4b91c1
cmp dword [ebp - 0x64], 0
jne 0x4b920e
push 0
push dword [ebp - 0x10c]
push dword [ebp - 0x120]
push dword [ebp - 0x144]
call fcn.0047dd09
add esp, 0x10
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x7c], 1
test eax, eax
jle 0x4b9229
sub eax, 3
xor edx, edx
mov dword [ebp - 0x7c], edx
jmp 0x4b922b
xor edx, edx
xor ecx, ecx
test eax, eax
cmovs eax, ecx
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x174], eax
cmp edi, 9
jge 0x4b924a
inc edi
mov dword [ebp - 0x7c], edx
mov dword [ebp - 0x54], edi
mov ebx, dword [ebp - 0x1a0]
xor ecx, ecx
mov esi, edx
inc ecx
mov eax, dword [ebp + esi - 0x50]
cmp eax, ecx
jge 0x4b9268
inc eax
mov dword [ebp + esi - 0x78], edx
mov dword [ebp + esi - 0x50], eax
jmp 0x4b9280
cmp dword [ebp + esi - 0x78], edx
jne 0x4b9280
push edx
push ebx
mov dword [ebp + esi - 0x78], ecx
call fcn.004881ff
pop ecx
pop ecx
xor ecx, ecx
xor edx, edx
inc ecx
add esi, 4
cmp esi, 0x14
jl 0x4b9255
mov ebx, dword [ebp - 0x124]
mov dword [ebp - 0x64], ecx
mov ecx, dword [ebp - 0x120]
test ecx, ecx
jle 0x4b929e
mov dword [ebp - 0x64], edx
test ecx, ecx
lea eax, [ecx - 1]
cmovle eax, ecx
mov ecx, dword [ebp - 0x10c]
mov dword [ebp - 0x120], eax
cmp ecx, 0xb
jle 0x4b92ba
mov dword [ebp - 0x64], edx
lea eax, [ecx - 1]
cmovle eax, ecx
mov dword [ebp - 0x10c], eax
call fcn.004b729a
mov ecx, eax
sub ecx, ebx
cmp ecx, 0xa
ja 0x4b92eb
push 0xa
pop eax
sub eax, ecx
cmp eax, 0x7ffffffe
ja 0x4b92e3
push eax
jmp 0x4b92e5
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
xor eax, eax
cmp dword [ebp + eax*4 - 0x7c], 0
je 0x4b92fa
inc eax
cmp eax, 6
jle 0x4b92ed
cmp eax, 6
jge 0x4b9316
push 0x661aec
call fcn.004b8523
pop ecx
test eax, eax
jne 0x4b9316
mov edi, dword [ebp - 0x54]
jmp 0x4b91b4
push 0xfffffffffffffff3
pop ebx
push 2
pop esi
push 0x661aec
call fcn.004b8523
pop ecx
test eax, eax
jne 0x4b9339
push eax
push dword [ebp - 0x1a8]
call fcn.004881ff
pop ecx
pop ecx
call fcn.004b729a
push 0
push esi
push ebx
push dword [ebp - 0x140]
mov edi, eax
mov dword [ebp - 0xf8], edi
call fcn.0047dd09
add esp, 0x10
mov dword [ebp - 0x7c], 1
cmp ebx, 3
jge 0x4b9368
and dword [ebp - 0x7c], 0
cmp ebx, 3
lea eax, [ebx + 1]
cmovge eax, ebx
mov ebx, eax
cmp esi, 2
jge 0x4b937c
and dword [ebp - 0x7c], 0
cmp esi, 2
lea eax, [esi + 1]
cmovge eax, esi
mov esi, eax
call fcn.004b729a
mov ecx, eax
sub ecx, edi
push 0xa
pop edi
cmp ecx, edi
ja 0x4b93ac
mov eax, edi
sub eax, ecx
cmp eax, 0x7ffffffe
ja 0x4b93a5
push eax
jmp 0x4b93a6
push edi
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [ebp - 0x7c], 0
jne 0x4b93c5
push 0x661aec
call fcn.004b8523
pop ecx
test eax, eax
je 0x4b9339
mov dword [ebp - 0x134], ebx
mov ebx, 0x661aec
push ebx
mov dword [ebp - 0x124], esi
call fcn.004b8523
pop ecx
test eax, eax
jne 0x4b9443
xor esi, esi
push ebx
call fcn.004b8523
pop ecx
test eax, eax
jne 0x4b93fc
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
inc esi
cmp esi, 5
jl 0x4b93e3
push 0
push dword [ebp - 0x19c]
call fcn.004881ff
push 2
push 0x3b
call fcn.0040e96c
push 0x53f690
call fcn.0040f5a2
push str.____2
call fcn.0040dc63
add esp, 0x18
xor esi, esi
push ebx
call fcn.004b8523
pop ecx
test eax, eax
jne 0x4b9443
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
inc esi
cmp esi, edi
jl 0x4b942b
cmp dword [0x661ae4], 0
je 0x4b9456
call fcn.004b729a
mov dword [0x661ae8], eax
push ebx
call fcn.004b8523
pop ecx
test eax, eax
jne 0x4b9e17
xor ecx, ecx
xor edx, edx
inc ecx
mov dword [ebp - 0x198], edx
push 2
pop eax
mov ebx, ecx
mov dword [ebp - 0x114], ecx
mov dword [ebp - 0x130], ecx
mov esi, edx
mov ecx, edi
mov dword [ebp - 0x11c], eax
xor eax, eax
mov dword [ebp - 0x128], edx
lea edi, [ebp - 0xe4]
mov dword [ebp - 0x190], edx
rep stosd dword es:[edi], eax
push 0xa
pop ecx
lea edi, [ebp - 0xbc]
mov dword [ebp - 0x104], ebx
mov dword [ebp - 0x194], edx
mov dword [ebp - 0x12c], edx
mov dword [ebp - 0x17c], edx
rep stosd dword es:[edi], eax
call fcn.004ccf29
and eax, reloc.WSOCK32.dll_closesocket
jns 0x4b94d5
dec eax
or eax, 0xfffffffc
inc eax
add eax, 5
mov dword [ebp + esi*4 - 0xbc], eax
inc esi
cmp esi, 0xa
jl 0x4b94c4
xor ecx, ecx
lea eax, [ecx + 0x40]
mov dword [ebp + ecx*4 - 0xe4], eax
inc ecx
cmp ecx, 0xa
jl 0x4b94e7
call fcn.004b729a
mov edi, eax
mov dword [ebp - 0xf8], edi
test byte [ebp - 0x128], 1
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x1ac], eax
je 0x4b9526
cmp dword [ebp - 0x114], 0
je 0x4b953d
push 0x1e
jmp 0x4b9531
cmp dword [ebp - 0x114], 0
je 0x4b953d
push 0x1f
push 2
push 0x3f
call fcn.0040be76
add esp, 0xc
and dword [ebp - 0x114], 0
call fcn.004b729a
sub eax, dword [ebp - 0x198]
cmp eax, 0x87
jb 0x4b9571
call fcn.004b729a
inc dword [ebp - 0x128]
mov dword [ebp - 0x198], eax
mov dword [ebp - 0x114], 1
call fcn.004b729a
sub eax, dword [ebp - 0x17c]
cmp eax, 0x16
jb 0x4b961b
lea eax, [ebp - 0x3c]
xor edi, edi
push eax
call fcn.004cd280
pop ecx
test eax, eax
jle 0x4b960a
mov ebx, dword [ebp + edi*4 - 0xbc]
cmp ebx, 2
jg 0x4b95b2
lea eax, [ebp - 0x3c]
inc edi
push eax
call fcn.004cd280
pop ecx
cmp edi, eax
jl 0x4b9595
jmp 0x4b9604
lea esi, [ebx - 1]
push 0x53f69c
mov dword [ebp + edi*4 - 0xbc], esi
call fcn.0040f5a2
push esi
push dword [ebp + edi*4 - 0xe4]
call fcn.0040e96c
movsx eax, byte [ebp + edi - 0x3c]
push eax
call fcn.00410864
push 0x20
push ebx
push dword [ebp + edi*4 - 0xe4]
call fcn.0040bec5
add esp, 0x1c
cmp esi, 2
jg 0x4b9604
push 0
push dword [ebp - 0x1a4]
call fcn.004881ff
pop ecx
pop ecx
mov ebx, dword [ebp - 0x104]
call fcn.004b729a
mov edi, dword [ebp - 0xf8]
mov dword [ebp - 0x17c], eax
mov ecx, dword [0x661ae4]
test ecx, ecx
je 0x4b9669
call fcn.004b729a
sub eax, dword [0x661ae8]
cmp eax, 0x493e0
jbe 0x4b9641
xor ecx, ecx
mov dword [0x661ae4], ecx
jmp 0x4b9647
mov ecx, dword [0x661ae4]
test ecx, ecx
je 0x4b9669
cmp dword [ebp - 0x118], 0
jne 0x4b968f
call fcn.004b729a
mov ecx, dword [0x661ae4]
sub eax, edi
mov dword [ebp - 0x118], eax
jmp 0x4b968f
mov esi, dword [ebp - 0x118]
test esi, esi
je 0x4b9688
call fcn.004b729a
mov ecx, dword [0x661ae4]
mov edi, eax
sub edi, esi
mov dword [ebp - 0xf8], edi
and dword [ebp - 0x118], 0
test ebx, ebx
je 0x4b97db
mov esi, dword [ebp - 0x11c]
mov eax, esi
sub eax, 3
je 0x4b97a8
sub eax, 1
je 0x4b9783
sub eax, 1
je 0x4b975e
sub eax, 1
je 0x4b9739
sub eax, 1
je 0x4b9711
push 0x17
pop ebx
push ebx
push 0xa
push 0xf
call fcn.0040be76
push ebx
push 0xa
push ebx
call fcn.0040be76
push ebx
push 0xa
push 0x21
call fcn.0040be76
push ebx
push 0xa
push 0x2f
call fcn.0040be76
push ebx
push 0xa
push 0x38
call fcn.0040be76
add esp, 0x3c
cmp esi, 3
jbe 0x4b97d3
xor eax, eax
mov dword [ebp - 0x11c], eax
jmp 0x4b97d3
test ecx, ecx
jne 0x4b9723
push ecx
push dword [ebp - 0xfc]
call fcn.004881ff
pop ecx
pop ecx
push 0x17
push 0xa
push 0x2f
call fcn.0040be76
push 0x1f
push 0xa
push 0x38
jmp 0x4b97cb
test ecx, ecx
jne 0x4b974b
push ecx
push dword [ebp - 0xfc]
call fcn.004881ff
pop ecx
pop ecx
push 0x17
push 0xa
push 0x21
call fcn.0040be76
push 0x1f
push 0xa
push 0x2f
jmp 0x4b97cb
test ecx, ecx
jne 0x4b9770
push ecx
push dword [ebp - 0xfc]
call fcn.004881ff
pop ecx
pop ecx
push 0x17
push 0xa
push 0x17
call fcn.0040be76
push 0x1f
push 0xa
push 0x21
jmp 0x4b97cb
test ecx, ecx
jne 0x4b9795
push ecx
push dword [ebp - 0xfc]
call fcn.004881ff
pop ecx
pop ecx
push 0x17
push 0xa
push 0xf
call fcn.0040be76
push 0x1f
push 0xa
push 0x17
jmp 0x4b97cb
test ecx, ecx
jne 0x4b97ba
push ecx
push dword [ebp - 0xfc]
call fcn.004881ff
pop ecx
pop ecx
push 0x17
push 0xa
push 0x38
call fcn.0040be76
push 0x1f
push 0xa
push 0xf
call fcn.0040be76
add esp, 0x18
xor ebx, ebx
mov dword [ebp - 0x104], ebx
call fcn.004b729a
sub eax, dword [ebp - 0x190]
mov esi, 0x309
cmp eax, esi
jb 0x4b9817
call fcn.004b729a
sub eax, edi
cmp eax, 0xbb8
jbe 0x4b9817
call fcn.004b729a
inc dword [ebp - 0x11c]
xor ebx, ebx
inc ebx
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x104], ebx
cmp dword [ebp - 0x130], 0
je 0x4b98b6
mov eax, dword [ebp - 0x12c]
test al, 3
je 0x4b9850
push 0x17
push 0x15
call fcn.0040e96c
push 0x4e9af4
call fcn.0040f5a2
push str.Press_New_Line_to_Begin_Accounting.
call fcn.0040dc63
add esp, 0x10
jmp 0x4b98ae
test eax, eax
je 0x4b98ae
cmp dword [0x661ae4], 0
jne 0x4b9884
mov eax, dword [0x661b48]
inc eax
mov dword [0x661b48], eax
push 0
cmp eax, 4
jg 0x4b9877
push dword [ebp - 0x180]
jmp 0x4b987d
push dword [ebp - 0x184]
call fcn.004881ff
pop ecx
pop ecx
push 0x17
push 0x15
call fcn.0040e96c
push 0x4e9af0
call fcn.0040f5a2
push str.Press_New_Line_to_Begin_Accounting.
call fcn.0040dc63
push 0x4e9af4
call fcn.0040f5a2
add esp, 0x14
xor eax, eax
mov dword [ebp - 0x130], eax
call fcn.004b729a
sub eax, dword [ebp - 0x194]
cmp eax, esi
jb 0x4b98ed
call fcn.004b729a
sub eax, edi
cmp eax, 0x7d0
jbe 0x4b98ed
call fcn.004b729a
inc dword [ebp - 0x12c]
mov dword [ebp - 0x194], eax
xor eax, eax
inc eax
mov dword [ebp - 0x130], eax
cmp dword [0x661afc], 0
mov esi, dword [ebp - 0xec]
jne 0x4b9b2e
cmp dword [0x661ae4], 0
jne 0x4b9b2e
cmp esi, 7
ja case.default.0x4b9916
jmp dword [esi*4 + 0x4ba2aa]
call fcn.004b729a
sub eax, edi
cmp eax, 0x2710
jbe 0x4b9b33
push 0
push dword [ebp - 0x138]
call fcn.004881ff
mov eax, dword [ebp - 0x138]
pop ecx
pop ecx
mov dword [ebp - 0xf0], eax
call fcn.004b729a
inc esi
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xec], esi
jmp 0x4b9b2e
call fcn.004b729a
sub eax, dword [ebp - 0xe8]
cmp eax, 0x7530
jbe 0x4b9b33
call fcn.004b729a
sub eax, dword [ebp - 0xf4]
cmp eax, 0x2710
jbe 0x4b9b33
push 0
push dword [ebp - 0x15c]
call fcn.004881ff
mov eax, dword [ebp - 0x15c]
jmp 0x4b9942
call fcn.004b729a
sub eax, dword [ebp - 0xe8]
cmp eax, 0x7530
jbe 0x4b9b33
call fcn.004b729a
sub eax, dword [ebp - 0xf4]
cmp eax, 0x2710
jbe 0x4b9b33
push 0
push dword [ebp - 0x158]
call fcn.004881ff
mov eax, dword [ebp - 0x158]
jmp 0x4b9942
call fcn.004b729a
sub eax, dword [ebp - 0xe8]
cmp eax, 0x7530
jbe 0x4b9b33
call fcn.004b729a
sub eax, dword [ebp - 0xf4]
cmp eax, 0x2710
jbe 0x4b9b33
push 0
push dword [ebp - 0x154]
call fcn.004881ff
mov eax, dword [ebp - 0x154]
jmp 0x4b9942
call fcn.004b729a
sub eax, dword [ebp - 0xe8]
cmp eax, 0xea60
jbe 0x4b9b33
call fcn.004b729a
sub eax, dword [ebp - 0xf4]
cmp eax, 0x2710
jbe 0x4b9b33
push 0
push dword [ebp - 0x150]
call fcn.004881ff
mov eax, dword [ebp - 0x150]
jmp 0x4b9942
call fcn.004b729a
sub eax, dword [ebp - 0xe8]
cmp eax, 0x7530
jbe 0x4b9b33
call fcn.004b729a
sub eax, dword [ebp - 0xf4]
cmp eax, 0x2710
jbe 0x4b9b33
push 0
push dword [ebp - 0x148]
call fcn.004881ff
mov eax, dword [ebp - 0x148]
jmp 0x4b9942
call fcn.004b729a
sub eax, dword [ebp - 0xe8]
cmp eax, 0xea60
jbe 0x4b9b33
call fcn.004b729a
sub eax, dword [ebp - 0xf4]
cmp eax, 0x2710
jbe 0x4b9b33
push 0
push dword [ebp - 0x14c]
call fcn.004881ff
mov eax, dword [ebp - 0x14c]
jmp 0x4b9942
call fcn.004b729a
sub eax, dword [ebp - 0xe8]
cmp eax, 0x7530
jbe 0x4b9b33
push 0
push dword [ebp - 0x13c]
call fcn.004881ff
mov eax, dword [ebp - 0x13c]
jmp 0x4b9942
call fcn.004b729a
sub eax, dword [ebp - 0xe8]
cmp eax, 0x1f40
ja 0x4b9dce
cmp esi, 7
ja 0x4b9b76
call fcn.004b729a
sub eax, dword [ebp - 0xe8]
cmp eax, 0x2710
jbe 0x4b9b76
call fcn.004b729a
sub eax, edi
cmp eax, 0x50910
jbe 0x4b9b76
cmp dword [0x661ae4], 0
jne 0x4b9d68
and dword [ebp - 0xe8], 0
mov dword [ebp - 0xec], 7
jmp 0x4b9d68
push 0xd
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
js 0x4b9d68
push 0x1b
xor edi, edi
pop esi
push esi
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x4b9cb2
cmp byte [esi + 0x661b68], 0
jne 0x4b9cc5
xor edi, edi
mov byte [esi + 0x661b68], 1
inc edi
test edi, edi
je 0x4b9d68
push 0x661aec
call fcn.004b8523
pop ecx
test eax, eax
jne 0x4b9d68
cmp dword [ebp - 0xec], eax
je 0x4b9d68
cmp dword [0x661ae4], eax
jne 0x4b9d68
call fcn.004b729a
sub eax, dword [0x661b4c]
cmp eax, 0xbb8
jbe 0x4b9d54
call fcn.004b729a
mov ecx, dword [0x661b54]
sub eax, dword [ebp - 0xe8]
add ecx, 0xbb8
cmp eax, ecx
jbe 0x4b9d54
push dword [ebp - 0xf0]
call fcn.004873ce
pop ecx
test eax, eax
jne 0x4b9d3a
call fcn.004b729a
sub eax, dword [0x661b50]
cmp eax, 0x1b58
jb 0x4b9d3a
call fcn.004b729a
mov esi, dword [ebp - 0x100]
inc esi
mov dword [0x661b4c], eax
cmp dword [0x661b58], 0
mov dword [ebp - 0x100], esi
jle 0x4b9cd7
xor esi, esi
call fcn.004ccf29
cdq
idiv dword [0x661b58]
inc edx
cmp edx, dword [0x661b5c]
jne 0x4b9c82
inc esi
cmp esi, 0xa
jl 0x4b9c67
mov esi, dword [ebp - 0x100]
mov eax, dword [0x661b58]
mov dword [0x661b5c], edx
test eax, eax
jle 0x4b9cdb
add eax, eax
cmp esi, eax
jle 0x4b9cdb
and dword [ebp - 0xe8], 0
push 7
pop eax
mov dword [ebp - 0xec], eax
jmp 0x4b9d54
cmp esi, 0x100
jae 0x4ba2a2
mov byte [esi + 0x661b68], 0
inc esi
cmp esi, 0x87
jl 0x4b9b8c
jmp 0x4b9bb3
mov edx, esi
jmp 0x4b9c88
xor eax, eax
push eax
push edx
push eax
push eax
call fcn.0046a855
pop ecx
pop ecx
push eax
push str._sSoundsIntroIntel_d.dav
push 0
call fcn.0048b25d
add esp, 0x10
push eax
call fcn.004884bd
pop ecx
pop ecx
test eax, eax
jne 0x4b9d25
cmp dword [0x661b58], eax
jne 0x4b9d25
test esi, esi
jle 0x4b9d25
mov eax, dword [ebp - 0x1ac]
add dword [0x661b54], 0x2ee0
mov dword [0x661b58], eax
call fcn.004b729a
mov esi, eax
mov dword [ebp - 0xe8], esi
mov dword [0x661b50], esi
jmp 0x4b9d54
mov eax, dword [0x661b4c]
test eax, eax
jne 0x4b9d4a
call fcn.004b729a
jmp 0x4b9d4f
add eax, 0x7d0
mov dword [0x661b4c], eax
cmp dword [0x661b58], 0
jne 0x4b9d68
call fcn.004b729a
mov dword [ebp - 0xf4], eax
mov esi, 0x661aec
push esi
call fcn.004b7b8d
pop ecx
test eax, eax
je 0x4b9d97
cmp eax, 0x13
jne 0x4b9ddc
call fcn.004b83fd
call fcn.004b729a
mov dword [ebp - 0xe8], eax
call fcn.004b729a
mov dword [0x661ae8], eax
call fcn.0040d29e
test eax, eax
je 0x4b9db0
push 0x2710
call dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.0040c9b2
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
push esi
call fcn.004b8523
pop ecx
test eax, eax
jne 0x4b9e1c
mov edi, dword [ebp - 0xf8]
jmp 0x4b9504
inc esi
xor ebx, ebx
mov dword [ebp - 0xec], esi
jmp 0x4ba085
mov ebx, eax
xor eax, eax
push 0x20001
push eax
push eax
push eax
mov dword [ebp - 0x110], ebx
call fcn.0046a855
push eax
push str._sSoundsCodeEntered.wav
push 0
call fcn.0048b25d
add esp, 0x14
push eax
call dword [sym.imp.WINMM.dll_PlaySoundA]
push 0x2ee
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x4b9e22
mov esi, 0x661aec
mov ebx, dword [ebp - 0x110]
call fcn.00488bda
push esi
call fcn.004b8523
pop ecx
test eax, eax
je 0x4b9e59
or eax, 0xffffffff
test ebx, ebx
cmove ebx, eax
mov dword [ebp - 0x110], ebx
call fcn.0040d29e
test eax, eax
je 0x4b9e59
push 0x4e20
call dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.0040c9b2
cmp dword [ebp - 0x50], 0
jl 0x4b9e6e
push 0
push dword [ebp - 0x178]
call fcn.004881ff
pop ecx
pop ecx
push 0x28
lea eax, [ebp - 0x7c]
push 0
push eax
call fcn.004c37f0
add esp, 0xc
cmp dword [0x53e324], 0
je 0x4ba085
mov ebx, dword [ebp - 0x48]
call fcn.004b729a
push 0
mov dword [ebp - 0xf8], eax
call fcn.0040f9fc
mov edi, dword [ebp - 0x188]
push eax
push edi
call fcn.0047f5cf
push edi
call fcn.0047e17d
push 0
push 0
push dword [ebp - 0x124]
push dword [ebp - 0x134]
push edi
push dword [ebp - 0x140]
call fcn.0047cc7b
add esp, 0x28
xor esi, esi
push 0
push 0
push dword [ebp + esi - 0x54]
push dword [ebp + esi - 0x174]
push edi
push dword [ebp + esi - 0x94]
call fcn.0047cc7b
add esi, 4
add esp, 0x18
cmp esi, 0x18
jl 0x4b9ed4
mov esi, dword [ebp - 0x10c]
push 0
push 0
push esi
push dword [ebp - 0x120]
push edi
push dword [ebp - 0x144]
call fcn.0047cc7b
xor eax, eax
push eax
push eax
push eax
push edi
call fcn.0047dd09
add esp, 0x28
lea edi, [ebp - 0x7c]
xor eax, eax
inc eax
push 7
pop ecx
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x108]
test eax, eax
jle 0x4b9f56
cmp eax, 0x50
jge 0x4b9f60
add eax, 7
xor ecx, ecx
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x7c], ecx
jmp 0x4b9f62
cmp eax, 0xffffffb0
jle 0x4b9f60
sub eax, 8
jmp 0x4b9f43
xor ecx, ecx
mov eax, dword [ebp - 0x134]
cmp eax, 0xfffffff1
jle 0x4b9f82
cmp dword [ebp - 0x124], 0xfffffff7
jle 0x4b9f82
sub eax, 4
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x170]
cmp eax, 0xfffffff6
jle 0x4b9fa1
cmp dword [ebp - 0x50], 0xfffffff7
jle 0x4b9fa1
sub eax, 3
mov dword [ebp - 0x78], ecx
mov dword [ebp - 0x170], eax
jmp 0x4b9fbe
mov eax, dword [ebp - 0x16c]
cmp eax, 0xfffffff6
jle 0x4b9fbe
cmp dword [ebp - 0x4c], 0xfffffff7
jle 0x4b9fbe
sub eax, 5
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x16c], eax
mov eax, dword [ebp - 0x160]
cmp eax, 0x50
jge 0x4b9fdd
cmp dword [ebp - 0x40], 0xfffffff7
jle 0x4b9fdd
add eax, 3
mov dword [ebp - 0x68], ecx
mov dword [ebp - 0x160], eax
jmp 0x4b9ffa
mov eax, dword [ebp - 0x164]
cmp eax, 0x50
jge 0x4b9ffa
cmp dword [ebp - 0x44], 0xfffffff7
jle 0x4b9ffa
add eax, 5
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x40], 1
jge 0x4ba008
cmp ebx, 0xfffffff7
jle 0x4ba022
dec ebx
jmp 0x4ba01c
cmp dword [ebp - 0x78], 0
je 0x4ba022
cmp dword [ebp - 0x68], 0
je 0x4ba022
cmp ebx, 0x51
jge 0x4ba022
add ebx, 5
mov dword [ebp - 0x70], ecx
mov dword [ebp - 0x48], ebx
cmp esi, 0x1c
jge 0x4ba02a
mov dword [ebp - 0x64], ecx
lea eax, [esi + 2]
cmovge eax, esi
mov dword [ebp - 0x10c], eax
call fcn.004b729a
sub eax, dword [ebp - 0xf8]
cmp eax, 0x14
ja 0x4ba05e
push 0x14
pop ecx
sub ecx, eax
cmp ecx, 0x7ffffffe
ja 0x4ba056
push ecx
jmp 0x4ba058
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
xor eax, eax
cmp dword [ebp + eax*4 - 0x7c], 0
je 0x4ba06d
inc eax
cmp eax, 6
jle 0x4ba060
cmp eax, 6
jge 0x4ba07f
cmp dword [0x53e324], 0
jne 0x4b9e8e
mov ebx, dword [ebp - 0x110]
push 0x4fbebc
mov dword [0x661aec], 1
call fcn.0040bb55
push dword [ebp - 0x19c]
call fcn.00486fc8
push dword [ebp - 0x138]
call fcn.00486fc8
push dword [ebp - 0x15c]
call fcn.00486fc8
push dword [ebp - 0x158]
call fcn.00486fc8
push dword [ebp - 0x154]
call fcn.00486fc8
push dword [ebp - 0x150]
call fcn.00486fc8
push dword [ebp - 0x148]
call fcn.00486fc8
push dword [ebp - 0x14c]
call fcn.00486fc8
push dword [ebp - 0x13c]
call fcn.00486fc8
push dword [ebp - 0x1a0]
call fcn.00486fc8
push dword [ebp - 0x1a4]
call fcn.00486fc8
push dword [ebp - 0x178]
call fcn.00486fc8
push dword [ebp - 0x1a8]
call fcn.00486fc8
push dword [ebp - 0xfc]
call fcn.00486fc8
push dword [ebp - 0x180]
call fcn.00486fc8
add esp, 0x40
push dword [ebp - 0x184]
call fcn.00486fc8
push dword [ebp - 0x140]
call fcn.0047ca45
push dword [ebp - 0x144]
call fcn.0047ca45
push dword [ebp - 0x188]
call fcn.0047ca45
add esp, 0x10
xor esi, esi
push dword [ebp + esi*4 - 0x94]
call fcn.0047ca45
inc esi
pop ecx
cmp esi, 6
jl 0x4ba172
cmp dword [0x661af8], 0
je 0x4ba192
xor edi, edi
jmp 0x4ba198
mov edi, ebx
test ebx, ebx
jne 0x4ba1d3
push 0
call fcn.004880a7
push 0
push 0
call fcn.0046a855
push eax
push str._sSoundsIntroWait9.dav
push 0
call fcn.0048b25d
push eax
call fcn.00486d1a
mov esi, eax
push 1
push esi
call fcn.004881ff
push esi
call fcn.00486fc8
add esp, 0x28
jmp 0x4ba275
mov edi, ebx
test ebx, ebx
jg 0x4ba275
mov edi, dword [ebp - 0xec]
cmp edi, 6
jae 0x4ba251
call fcn.004b729a
mov esi, dword [ebp - 0xf8]
sub eax, esi
cmp eax, 0x2bf20
ja 0x4ba251
cmp edi, 4
jae 0x4ba23f
call fcn.004b729a
sub eax, esi
cmp eax, 0x1d4c0
ja 0x4ba23f
cmp edi, 2
jae 0x4ba22d
call fcn.004b729a
sub eax, esi
cmp eax, 0x7530
ja 0x4ba22d
cmp dword [ebp - 0x100], 2
mov edi, ebx
jl 0x4ba275
xor eax, eax
push eax
push eax
push eax
call fcn.0046a855
push eax
push str._sSoundsIntroResponse1.dav
jmp 0x4ba261
xor eax, eax
push eax
push eax
push eax
call fcn.0046a855
push eax
push str._sSoundsIntroResponse2.dav
jmp 0x4ba261
xor eax, eax
push eax
push eax
push eax
call fcn.0046a855
push eax
push str._sSoundsIntroResponse3.dav
push 0
call fcn.0048b25d
add esp, 0x14
push eax
call fcn.0048847c
pop ecx
pop ecx
mov edi, ebx
mov eax, dword [ebp - 0x18c]
test eax, eax
je 0x4ba286
push eax
call fcn.0040fc4c
pop ecx
push 0x4fbebc
call fcn.0040f9fc
pop ecx
mov ecx, dword [ebp - 4]
mov eax, edi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004c2120
leave
ret
call fcn.004c22cb
nop dword [eax]
sbb eax, 0x61004b99
cdq
dec ebx
add byte [edx - 0x19ffb467], ah
cdq
dec ebx
add byte [edx], ch
lcall 0x4b, 0x9a6e004b
mov dl, 0x9a
dec ebx
add dh, ch
lcall 0x83ec, 0x8b55004b
push ebp
mov ebp, esp
sub esp, 0x74
invalid
add cl, bh
push ebp
add byte [ebx], dh
lds ecx, [ecx + 0x6583fc45]
movsb byte es:[edi], byte [esi]
add byte [ebx], dh
ror byte [ebx - 0x74acf3b3], 0x5d
or byte [ecx + 0x5d89a04d], cl
pushfd
push esi
push edi
lea edi, [ebp - 0x30]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
test ebx, ebx
je 0x4ba328
test ecx, ecx
je 0x4ba328
mov esi, dword [ebx]
mov dword [ebp - 0x4c], esi
test esi, esi
jle 0x4ba328
push 0x70
push esi
call fcn.004ccef4
mov dword [ebp - 0x48], eax
pop ecx
pop ecx
test eax, eax
jne 0x4ba339
push 0x70
push esi
push str.:5:CalculateTopSeven___FAILED:_calloc__d___d__FAILED_
call fcn.0041c80a
add esp, 0xc
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004c2120
leave
ret
lea eax, [ebp - 0x30]
push eax
call fcn.004b598d
lea eax, [ebp - 0x14]
push eax
call fcn.0049686e
mov esi, eax
lea edi, [ebp - 0x74]
mov eax, dword [ebp - 0x4c]
pop ecx
pop ecx
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x3c], eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea edi, [ebx + 0x4f4]
xor esi, esi
mov ebx, dword [ebp - 0x48]
mov dword [ebp - 0x40], esi
add ebx, 0x48
mov dword [ebp - 0x38], edi
push 0x70
lea eax, [ebx - 0x48]
push 0
push eax
call fcn.004c37f0
mov eax, dword [edi]
add esp, 0xc
test eax, eax
je 0x4ba5ea
mov esi, dword [eax + 8]
test esi, esi
jle 0x4ba3ae
mov eax, dword [edi - 0x4f0]
mov dword [ebx - 0x48], eax
lea eax, [ebx - 0x44]
push 0x32
push dword [edi - 0x35c]
push eax
call fcn.0048dd2a
add esp, 0xc
xor eax, eax
push 4
push eax
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x5c]
push eax
call fcn.004c37f0
add esp, 0xc
sub esi, 1
mov dword [ebp - 0x44], esi
js 0x4ba5dd
imul eax, esi, 0x1234
mov dword [ebp - 0x34], eax
mov ecx, eax
mov eax, dword [edi]
add eax, ecx
mov dword [ebp - 0x54], eax
cmp dword [eax + 0xbc], 0
je 0x4ba5c2
sub esp, 0x10
lea esi, [ebp - 0x74]
mov edi, esp
add eax, 0x1c
sub esp, 0x10
mov dword [ebp - 0x50], eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, eax
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004b5dfb
add esp, 0x20
test eax, eax
je 0x4ba42b
mov ecx, dword [ebp - 0x58]
inc ecx
mov dword [ebp - 0x58], ecx
cmp ecx, 0xa
jg 0x4ba5da
jmp 0x4ba5bc
mov esi, dword [ebp - 0x50]
sub esp, 0x10
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004b7250
push eax
push dword [ebp - 0x5c]
call fcn.004b5c7f
add esp, 0x18
test eax, eax
jne 0x4ba5bc
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x54]
cmp dword [eax + 0xf78], 0
jne 0x4ba49e
cmp dword [eax + 0xf90], 0
jne 0x4ba49e
cmp dword [eax + 0x10b0], 0
jne 0x4ba49e
cmp dword [eax + 0xd04], 0
je 0x4ba483
cmp dword [eax + 0xd08], 0
jne 0x4ba4b8
cmp dword [eax + 0x8dc], 0
mov edi, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x34]
jne 0x4ba5c2
inc dword [ebx + 0x1c]
jmp 0x4ba5c2
cmp dword [eax + 0xcfc], 0
je 0x4ba5bc
cmp dword [eax + 0xd00], 0
je 0x4ba5bc
mov esi, dword [ebp - 0x50]
sub esp, 0x10
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004b7250
mov esi, dword [ebp - 0x54]
add esp, 0x10
mov dword [ebp - 0x5c], eax
cmp dword [esi + 0xf78], 0
jne 0x4ba50f
cmp dword [esi + 0xf90], 0
jne 0x4ba50f
cmp dword [esi + 0x10b0], 0
jne 0x4ba50f
mov eax, dword [esi + 0xd14]
add dword [ebx - 4], eax
mov eax, dword [esi + 0xd04]
add dword [ebx - 0xc], eax
mov eax, dword [esi + 0xd18]
add dword [ebx], eax
mov eax, dword [esi + 0xd08]
jmp 0x4ba52f
mov eax, dword [esi + 0xd0c]
add dword [ebx - 4], eax
mov eax, dword [esi + 0xcfc]
add dword [ebx - 0xc], eax
mov eax, dword [esi + 0xd10]
add dword [ebx], eax
mov eax, dword [esi + 0xd00]
add dword [ebx - 8], eax
mov eax, dword [esi + 0x8dc]
add dword [ebx + 0x24], eax
mov eax, dword [esi + 0x8dc]
test eax, eax
jne 0x4ba54a
inc dword [ebx + 0x1c]
jmp 0x4ba5bc
jle 0x4ba586
inc dword [ebx + 0xc]
mov eax, dword [esi + 0x8bc]
test eax, eax
jle 0x4ba566
cmp dword [esi + 0x8dc], eax
jle 0x4ba566
inc dword [ebx + 0x10]
jmp 0x4ba5bc
mov eax, dword [esi + 0x8dc]
cmp eax, 5
jg 0x4ba576
inc dword [ebx + 0x18]
jmp 0x4ba5bc
mov edi, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x34]
cmp eax, 0x19
jg 0x4ba5c2
inc dword [ebx + 0x14]
jmp 0x4ba5c2
inc dword [ebx + 4]
mov eax, dword [esi + 0x8c0]
test eax, eax
jle 0x4ba5a9
push eax
call fcn.004494b4
neg eax
pop ecx
cmp dword [esi + 0x8dc], eax
jge 0x4ba5a9
inc dword [ebx + 8]
jmp 0x4ba5bc
mov eax, dword [esi + 0x8dc]
cmp eax, 0xfffffffb
jge 0x4ba571
cmp eax, 0xffffffe7
jl 0x4ba5bc
inc dword [ebx + 0x14]
mov edi, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x44]
sub ecx, 0x1234
dec eax
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x44], eax
test eax, eax
jns 0x4ba3d9
mov edi, dword [ebp - 0x38]
mov esi, dword [ebp - 0x40]
cmp dword [ebx - 0xc], esi
cmovg esi, dword [ebx - 0xc]
mov dword [ebp - 0x40], esi
add edi, 4
add ebx, 0x70
sub dword [ebp - 0x3c], 1
mov dword [ebp - 0x38], edi
jne 0x4ba370
mov ebx, dword [ebp - 0x48]
movd xmm3, esi
mov esi, dword [ebp - 0x4c]
cvtdq2ps xmm3, xmm3
lea ecx, [ebx + 0x64]
movd xmm2, dword [ecx - 0x28]
mov edx, dword [ecx - 0x18]
add edx, dword [ecx - 0x10]
add edx, dword [ecx]
cvtdq2ps xmm2, xmm2
divss xmm2, xmm3
test edx, edx
jg 0x4ba62b
and dword [ecx - 0x2c], 0
jmp 0x4ba691
cmp dword [ecx], 0
je 0x4ba639
movd xmm0, dword [ecx]
cvtdq2ps xmm0, xmm0
jmp 0x4ba641
movss xmm0, dword [0x541968]
mov eax, dword [ecx - 0x14]
add eax, dword [ecx - 0xc]
add edx, eax
test edx, edx
jle 0x4ba691
xorps xmm1, xmm1
cvtsi2ss xmm1, dword [ecx - 8]
divss xmm1, dword [0x54196c]
addss xmm1, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, dword [ecx - 4]
mulss xmm0, dword [0x50b280]
addss xmm1, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, edx
divss xmm1, xmm0
mulss xmm1, dword [0x4f24d8]
mulss xmm1, xmm2
movss dword [ecx - 0x2c], xmm1
add ecx, 0x70
sub esi, 1
jne 0x4ba60d
push 7
or eax, 0xffffffff
lea edi, [ebp - 0x20]
pop ecx
rep stosd dword es:[edi], eax
xor edi, edi
add ebx, 0x38
xor ecx, ecx
cmp dword [ebp + ecx*4 - 0x20], 0
jl 0x4ba6be
inc ecx
cmp ecx, 7
jl 0x4ba6af
jmp 0x4ba6d8
movss xmm0, dword [ebx]
ucomiss xmm0, dword [0x4eea18]
lahf
test ah, 0x44
jnp 0x4ba6d3
mov dword [ebp + ecx*4 - 0x20], edi
cmp ecx, 7
jl 0x4ba72d
xor esi, esi
movss xmm0, dword [ebx]
cvtps2pd xmm0, xmm0
push ecx
push ecx
movsd qword [esp], xmm0
call fcn.004d6351
imul eax, dword [ebp + esi*4 - 0x20], 0x70
mov ecx, dword [ebp - 0x48]
fstp dword [ebp - 0x40]
movss xmm0, dword [eax + ecx + 0x38]
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.004d6351
movss xmm0, dword [ebp - 0x40]
fstp dword [ebp - 0x3c]
fld dword [ebp - 0x3c]
fstp dword [ebp - 0x3c]
comiss xmm0, dword [ebp - 0x3c]
pop ecx
pop ecx
ja 0x4ba729
inc esi
cmp esi, 7
jl 0x4ba6da
jmp 0x4ba72d
mov dword [ebp + esi*4 - 0x20], edi
inc edi
add ebx, 0x70
cmp edi, dword [ebp - 0x4c]
jl 0x4ba6ad
xor edi, edi
lea ebx, [ebp - 0x20]
push 7
inc edi
pop ecx
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x40], ecx
mov esi, edi
cmp edi, 7
jge 0x4ba7c0
mov edi, dword [ebp - 0x48]
mov eax, dword [ebp + esi*4 - 0x20]
test eax, eax
js 0x4ba7ba
imul eax, eax, 0x70
push ecx
push ecx
movss xmm0, dword [eax + edi + 0x38]
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.004d6351
mov eax, dword [ebx]
mov dword [ebp - 0x4c], eax
imul eax, eax, 0x70
fstp dword [ebp - 0x54]
movss xmm0, dword [eax + edi + 0x38]
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.004d6351
movss xmm0, dword [ebp - 0x54]
fstp dword [ebp - 0x44]
fld dword [ebp - 0x44]
fstp dword [ebp - 0x44]
comiss xmm0, dword [ebp - 0x44]
pop ecx
pop ecx
jbe 0x4ba7b4
mov eax, dword [ebp + esi*4 - 0x20]
mov dword [ebx], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp + esi*4 - 0x20], eax
inc esi
cmp esi, 7
jl 0x4ba753
mov edi, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x40]
inc edi
add ebx, 4
sub ecx, 1
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x40], ecx
jne 0x4ba749
mov ebx, dword [ebp - 0x60]
lea ecx, [ebp - 0x20]
xor esi, esi
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x40], esi
mov eax, ebx
mov dword [ebp - 0x44], ebx
mov ecx, dword [ecx]
test ecx, ecx
js 0x4ba84d
imul esi, ecx, 0x70
mov edi, eax
push 0x1c
pop ecx
add esi, dword [ebp - 0x48]
rep movsd dword es:[edi], dword [esi]
mov esi, dword [ebp - 0x40]
mov edi, dword [ebp - 0x64]
push dword [esi + ebx]
push edi
call fcn.004390da
pop ecx
pop ecx
test eax, eax
js 0x4ba82d
push dword [esi + ebx]
push edi
call fcn.004390da
push eax
push edi
call fcn.0043c3eb
push eax
call fcn.0049e155
add esp, 0x14
mov dword [esi + ebx + 0x68], eax
jmp 0x4ba85a
and dword [esi + ebx + 0x68], 0
push str.Nov_22_2024
push 0x3be
push str.C:UsersOfficeDocumentsVisual_StudioPAULATopSeven.c
push 1
call fcn.0041c29e
add esp, 0x10
jmp 0x4ba85a
push 0x70
push 0
push eax
call fcn.004c37f0
add esp, 0xc
mov ecx, dword [ebp - 0x3c]
add esi, 0x70
mov eax, dword [ebp - 0x44]
add ecx, 4
add eax, 0x70
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x44], eax
cmp esi, 0x310
jl 0x4ba7e6
sub esp, 0x10
lea esi, [ebp - 0x74]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004b7250
mov edi, dword [ebp - 0x64]
add esp, 0x10
mov dword [ebx + 0x310], eax
push 0x32
push edi
call fcn.0043becf
pop ecx
push eax
lea eax, [ebx + 0x314]
push eax
call fcn.0048dd2a
lea eax, [ebx + 0x380]
push eax
lea eax, [ebx + 0x388]
push eax
lea eax, [ebx + 0x384]
push eax
lea ecx, [ebx + 0x38c]
push ecx
push 0xffffffffffffffff
push edi
call fcn.004968a9
add esp, 0x24
mov dword [ebx + 0x348], eax
lea esi, [ebx + 0x34c]
test eax, eax
js 0x4ba8ff
push 0x32
push eax
push edi
call fcn.0043c254
pop ecx
pop ecx
push eax
push esi
call fcn.0048dd2a
add esp, 0xc
jmp 0x4ba906
push esi
call fcn.0048b21b
pop ecx
push esi
call fcn.0048c30a
pop ecx
test eax, eax
jne 0x4ba9a3
sub esp, 0x10
lea esi, [ebp - 0x74]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004b7250
add esp, 0x10
lea esi, [ebp - 0x30]
push eax
sub esp, 0x10
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004b7250
add esp, 0x10
push eax
call fcn.004b702a
push ecx
push ecx
mov edi, esp
mov dword [ebp - 0x60], eax
lea esi, [ebx + 0x38c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004b7250
add esp, 0x10
lea esi, [ebp - 0x30]
push eax
sub esp, 0x10
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004b7250
add esp, 0x10
push eax
call fcn.004b702a
pop ecx
pop ecx
mov ecx, dword [ebp - 0x60]
sub ecx, eax
mov dword [ebx + 0x39c], ecx
jns 0x4ba9a3
push ecx
lea eax, [ebx + 0x34c]
push eax
push str.:7:CalculateTopSeven___encountered_a_problem:_The_number_of_days_till__ss_supremacy_expires_was_calculated_to_be__d_but_should_never_be_less_than_0___
call fcn.0041c80a
add esp, 0xc
and dword [ebx + 0x39c], 0
push dword [ebp - 0x48]
call fcn.004cceff
xor eax, eax
pop ecx
inc eax
jmp 0x4ba32a