Function at 0x471338
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x390
push 0
push 0
dec ecx
jne 0x471340
push ecx
push ebx
push esi
push edi
mov dword [ebp - 4], eax
lea edi, [ebp - 0xdf4]
xor eax, eax
push ebp
push 0x473ef6
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x1e]
push eax
lea ecx, [ebp - 0x1a]
lea edx, [ebp - 0x18]
lea eax, [ebp - 0x16]
call fcn.004188ec
mov eax, dword [0x47b570]
mov dx, word [ebp - 0x16]
mov word [eax], dx
mov eax, dword [0x47b328]
mov dx, word [ebp - 0x18]
mov word [eax], dx
mov eax, dword [0x47b2fc]
mov dx, word [ebp - 0x1a]
mov word [eax], dx
push 0
push 0x473f08
push 0x473f08
push 0x473f08
mov ecx, dword [0x47b404]
xor edx, edx
mov eax, 0x473f0c
call fcn.00424674
mov ebx, eax
test ebx, ebx
jne 0x4713ce
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
call fcn.00424d90
mov ebx, eax
test ebx, ebx
jle 0x471451
lea ecx, [ebp - 0x17f8]
mov eax, dword [0x47b404]
mov edx, ebx
call fcn.00423e94
lea edx, [ebp - 0x17f8]
lea eax, [ebp - 0x16f8]
call fcn.00404e58
mov edx, dword [ebp - 0x16f8]
mov eax, dword [0x47b1d0]
call fcn.00409294
mov edx, dword [0x47b1d0]
mov eax, dword [0x47b1d0]
call fcn.0041bddc
push 0
mov eax, dword [0x47b5cc]
mov eax, dword [eax]
push eax
mov eax, dword [0x47b1d0]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
push eax
call sub.user32.dll_MessageBoxA_1
cmp ebx, 0x1e
jle 0x473e0a
push 0
push 0
push 0x10
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
push eax
call sub.user32.dll_PostMessageA
jmp 0x473e0a
mov edx, edi
mov eax, dword [0x47b404]
call fcn.00424e78
cmp byte [edi + 1], 0x45
jne 0x47153c
cmp byte [edi + 2], 0x2d
jne 0x47153c
cmp byte [edi + 3], 0x30
jne 0x4714cd
cmp byte [edi + 4], 0x33
jne 0x4714cd
lea edx, [ebp - 0x17f8]
mov eax, edi
call fcn.0041c150
lea edx, [ebp - 0x17f8]
lea eax, [ebp - 0x1800]
call fcn.00404e58
push dword [ebp - 0x1800]
push 0x473f20
push 0x473f2c
lea eax, [ebp - 0x17fc]
mov edx, 3
call fcn.00404f74
mov edx, dword [ebp - 0x17fc]
mov eax, dword [0x47b1d0]
call fcn.00409294
jmp 0x47151b
lea edx, [ebp - 0x17f8]
mov eax, edi
call fcn.0041c150
lea edx, [ebp - 0x17f8]
lea eax, [ebp - 0x1808]
call fcn.00404e58
push dword [ebp - 0x1808]
push 0x473f20
push 0x473f5c
lea eax, [ebp - 0x1804]
mov edx, 3
call fcn.00404f74
mov edx, dword [ebp - 0x1804]
mov eax, dword [0x47b1d0]
call fcn.00409294
push 0
mov eax, dword [0x47b3bc]
mov eax, dword [eax]
push eax
mov eax, dword [0x47b1d0]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
push eax
call sub.user32.dll_MessageBoxA_1
jmp 0x4716ee
mov edx, dword [0x47b378]
lea eax, [ebp - 0x1840]
call fcn.00403038
mov edx, dword [0x47b404]
lea eax, [ebp - 0x1840]
mov cl, 0x33
call fcn.00403008
lea edx, [ebp - 0x1840]
lea eax, [ebp - 0x1878]
call fcn.00403038
mov edx, 0x473f80
lea eax, [ebp - 0x1878]
mov cl, 0x37
call fcn.00403008
lea edx, [ebp - 0x1878]
lea eax, [ebp - 0x180c]
call fcn.00404e58
mov edx, dword [ebp - 0x180c]
lea eax, [ebp - 0xcf4]
call fcn.00402e0c
lea eax, [ebp - 0xcf4]
call fcn.00402b90
call fcn.00402874
test eax, eax
mov edx, edi
mov ecx, 0xff
lea eax, [ebp - 0xcf4]
call fcn.004033a8
lea eax, [ebp - 0xcf4]
call fcn.004033b4
call fcn.00402874
test eax, eax
lea eax, [ebp - 0x1880]
mov edx, edi
call fcn.00404e58
mov eax, dword [ebp - 0x1880]
lea edx, [ebp - 0x187c]
call fcn.00408764
mov edx, dword [ebp - 0x187c]
mov eax, edi
mov ecx, 0xff
call fcn.00404e90
lea eax, [ebp - 0x17f8]
push eax
mov ecx, 4
mov edx, 1
mov eax, edi
call fcn.00402798
lea edx, [ebp - 0x17f8]
lea eax, [ebp - 0x1884]
call fcn.00404e58
mov eax, dword [ebp - 0x1884]
lea edx, [ebp - 8]
call fcn.004035dc
mov edx, dword [0x47b5e0]
mov word [edx], ax
lea eax, [ebp - 0x17f8]
push eax
mov ecx, 2
mov edx, 5
mov eax, edi
call fcn.00402798
lea edx, [ebp - 0x17f8]
lea eax, [ebp - 0x1888]
call fcn.00404e58
mov eax, dword [ebp - 0x1888]
lea edx, [ebp - 8]
call fcn.004035dc
mov edx, dword [0x47b3cc]
mov word [edx], ax
lea eax, [ebp - 0x17f8]
push eax
mov ecx, 2
mov edx, 7
mov eax, edi
call fcn.00402798
lea edx, [ebp - 0x17f8]
lea eax, [ebp - 0x188c]
call fcn.00404e58
mov eax, dword [ebp - 0x188c]
lea edx, [ebp - 8]
call fcn.004035dc
mov edx, dword [0x47b480]
mov word [edx], ax
mov eax, dword [0x47b5e0]
mov ax, word [eax]
mov edx, dword [0x47b570]
mov word [edx], ax
lea eax, [ebp - 0xcf4]
call fcn.00402fb0
call fcn.00402874
test eax, eax
mov eax, dword [0x47b3cc]
cmp word [eax], 0
jbe 0x471704
mov eax, dword [0x47b3cc]
cmp word [eax], 0xc
jbe 0x47170e
mov eax, dword [0x47b3cc]
mov word [eax], 0xc
lea eax, [ebp - 0x1a]
push eax
lea ecx, [ebp - 0x20]
lea edx, [ebp - 0x1e]
lea eax, [ebp - 0x1c]
call fcn.00418930
mov edx, edi
movzx eax, word [ebp - 0x1c]
call fcn.004035d0
cmp byte [edi], 2
jae 0x471765
lea eax, [ebp - 0x1894]
mov edx, edi
call fcn.00404e58
mov ecx, dword [ebp - 0x1894]
lea eax, [ebp - 0x1890]
mov edx, 0x473f90
call fcn.00404f00
mov edx, dword [ebp - 0x1890]
mov eax, edi
mov ecx, 0xff
call fcn.00404e90
lea edx, [ebp - 0xef4]
movzx eax, word [ebp - 0x1e]
call fcn.004035d0
cmp byte [ebp - 0xef4], 2
jae 0x4717ba
lea eax, [ebp - 0x189c]
lea edx, [ebp - 0xef4]
call fcn.00404e58
mov ecx, dword [ebp - 0x189c]
lea eax, [ebp - 0x1898]
mov edx, 0x473f90
call fcn.00404f00
mov edx, dword [ebp - 0x1898]
lea eax, [ebp - 0xef4]
mov ecx, 0xff
call fcn.00404e90
lea eax, [ebp - 0x18a4]
mov edx, edi
call fcn.00404e58
push dword [ebp - 0x18a4]
push 0x473f9c
lea eax, [ebp - 0x18a8]
lea edx, [ebp - 0xef4]
call fcn.00404e58
push dword [ebp - 0x18a8]
lea eax, [ebp - 0x18a0]
mov edx, 3
call fcn.00404f74
mov edx, dword [ebp - 0x18a0]
mov eax, edi
mov ecx, 0xff
call fcn.00404e90
lea edx, [ebp - 0xef4]
movzx eax, word [ebp - 0x20]
call fcn.004035d0
cmp byte [ebp - 0xef4], 2
jae 0x471860
lea eax, [ebp - 0x18b0]
lea edx, [ebp - 0xef4]
call fcn.00404e58
mov ecx, dword [ebp - 0x18b0]
lea eax, [ebp - 0x18ac]
mov edx, 0x473f90
call fcn.00404f00
mov edx, dword [ebp - 0x18ac]
lea eax, [ebp - 0xef4]
mov ecx, 0xff
call fcn.00404e90
lea eax, [ebp - 0x18b8]
mov edx, edi
call fcn.00404e58
push dword [ebp - 0x18b8]
push 0x473f9c
lea eax, [ebp - 0x18bc]
lea edx, [ebp - 0xef4]
call fcn.00404e58
push dword [ebp - 0x18bc]
lea eax, [ebp - 0x18b4]
mov edx, 3
call fcn.00404f74
mov edx, dword [ebp - 0x18b4]
lea eax, [ebp - 0x17f8]
mov ecx, 0xff
call fcn.00404e90
lea edx, [ebp - 0x17f8]
mov eax, dword [0x47b5ec]
mov cl, 8
call fcn.00403044
mov eax, dword [0x47b490]
mov ax, word [eax + 2]
test ax, ax
jne 0x4718e7
push 0xc
xor ecx, ecx
mov edx, 1
xor eax, eax
call fcn.0041967c
jmp 0x471912
mov edx, dword [0x47b490]
movzx edx, word [edx + 6]
push edx
mov ecx, dword [0x47b490]
movzx ecx, word [ecx + 4]
mov edx, dword [0x47b490]
movzx edx, ax
mov eax, dword [0x47b490]
movzx eax, word [eax]
call fcn.0041967c
mov eax, dword [0x47b1c8]
mov byte [eax], 0
mov eax, dword [0x47b660]
mov byte [eax], 0
mov eax, dword [0x47b2e8]
mov byte [eax], 0
mov eax, dword [0x47b524]
cmp dword [eax], 0
je 0x471945
mov eax, dword [0x47b524]
mov eax, dword [eax]
mov edx, 0x473fa0
call fcn.0045d328
push 0
push 0x473f08
push 0x473f08
push 0x473f08
mov ecx, dword [0x47b404]
xor edx, edx
mov eax, 0x473fc8
call fcn.00424674
mov ebx, eax
test ebx, ebx
jne 0x47197b
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
call fcn.00424d90
mov ebx, eax
test ebx, ebx
jle 0x4719fe
lea ecx, [ebp - 0x17f8]
mov eax, dword [0x47b404]
mov edx, ebx
call fcn.00423e94
lea edx, [ebp - 0x17f8]
lea eax, [ebp - 0x18c0]
call fcn.00404e58
mov edx, dword [ebp - 0x18c0]
mov eax, dword [0x47b1d0]
call fcn.00409294
mov edx, dword [0x47b1d0]
mov eax, dword [0x47b1d0]
call fcn.0041bddc
push 0
mov eax, dword [0x47b5cc]
mov eax, dword [eax]
push eax
mov eax, dword [0x47b1d0]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
push eax
call sub.user32.dll_MessageBoxA_1
cmp ebx, 0x1e
jle 0x473e0a
push 0
push 0
push 0x10
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
push eax
call sub.user32.dll_PostMessageA
jmp 0x473e0a
mov edx, edi
mov eax, dword [0x47b404]
call fcn.00424e78
cmp byte [edi + 1], 0x45
jne 0x471ae9
cmp byte [edi + 2], 0x2d
jne 0x471ae9
cmp byte [edi + 3], 0x30
jne 0x471a7a
cmp byte [edi + 4], 0x33
jne 0x471a7a
lea edx, [ebp - 0x17f8]
mov eax, edi
call fcn.0041c150
lea edx, [ebp - 0x17f8]
lea eax, [ebp - 0x18c8]
call fcn.00404e58
push dword [ebp - 0x18c8]
push 0x473f20
push 0x473f2c
lea eax, [ebp - 0x18c4]
mov edx, 3
call fcn.00404f74
mov edx, dword [ebp - 0x18c4]
mov eax, dword [0x47b1d0]
call fcn.00409294
jmp 0x471ac8
lea edx, [ebp - 0x17f8]
mov eax, edi
call fcn.0041c150
lea edx, [ebp - 0x17f8]
lea eax, [ebp - 0x18d0]
call fcn.00404e58
push dword [ebp - 0x18d0]
push 0x473f20
push 0x473f5c
lea eax, [ebp - 0x18cc]
mov edx, 3
call fcn.00404f74
mov edx, dword [ebp - 0x18cc]
mov eax, dword [0x47b1d0]
call fcn.00409294
push 0
mov eax, dword [0x47b3bc]
mov eax, dword [eax]
push eax
mov eax, dword [0x47b1d0]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
push eax
call sub.user32.dll_MessageBoxA_1
jmp 0x471f17
mov edx, dword [0x47b378]
lea eax, [ebp - 0x1840]
call fcn.00403038
mov edx, dword [0x47b404]
lea eax, [ebp - 0x1840]
mov cl, 0x33
call fcn.00403008
lea edx, [ebp - 0x1840]
lea eax, [ebp - 0x1878]
call fcn.00403038
mov edx, 0x473f80
lea eax, [ebp - 0x1878]
mov cl, 0x37
call fcn.00403008
lea edx, [ebp - 0x1878]
lea eax, [ebp - 0x18d4]
call fcn.00404e58
mov edx, dword [ebp - 0x18d4]
lea eax, [ebp - 0xcf4]
call fcn.00402e0c
lea eax, [ebp - 0xcf4]
call fcn.00402b90
call fcn.00402874
test eax, eax
mov edx, edi
mov ecx, 0xff
lea eax, [ebp - 0xcf4]
call fcn.004033a8
lea eax, [ebp - 0xcf4]
call fcn.004033b4
call fcn.00402874
test eax, eax
mov edx, edi
mov ecx, 0xff
lea eax, [ebp - 0xcf4]
call fcn.004033a8
lea eax, [ebp - 0xcf4]
call fcn.004033b4
call fcn.00402874
test eax, eax
mov edx, edi
mov eax, 0x473fcc
call fcn.00402a80
test eax, eax
jle 0x471bf0
lea eax, [ebp - 0x17f8]
push eax
mov edx, edi
mov eax, 0x473fcc
call fcn.00402a80
mov ecx, eax
dec ecx
mov edx, 1
mov eax, edi
call fcn.00402798
lea edx, [ebp - 0x17f8]
mov eax, dword [0x47b3f0]
mov cl, 0x1c
call fcn.00403044
mov edx, edi
mov eax, 0x473fd4
call fcn.00402a80
test eax, eax
jle 0x471c48
lea eax, [ebp - 0x17f8]
push eax
mov edx, edi
mov eax, 0x473fd4
call fcn.00402a80
mov ecx, eax
dec ecx
mov edx, 1
mov eax, edi
call fcn.00402798
lea edx, [ebp - 0x17f8]
mov eax, dword [0x47b3f0]
mov cl, 0x1c
call fcn.00403044
mov eax, dword [0x47b3cc]
mov word [eax], 0xc
mov eax, dword [0x47b328]
mov word [eax], 0xc
mov eax, dword [0x47b3f0]
cmp byte [eax], 0
jne 0x471c60
mov eax, dword [0x47b3f0]
mov edx, edi
mov cl, 0x1c
call fcn.00403044
mov edx, edi
mov ecx, 0xff
lea eax, [ebp - 0xcf4]
call fcn.004033a8
lea eax, [ebp - 0xcf4]
call fcn.004033b4
call fcn.00402874
test eax, eax
lea eax, [ebp - 0x18d8]
mov edx, edi
call fcn.00404e58
mov eax, dword [ebp - 0x18d8]
lea edx, [ebp - 8]
call fcn.004035dc
mov word [ebp - 0x16], ax
mov eax, dword [0x47b5e0]
cmp word [eax], 0x76c
jne 0x471cc7
mov eax, dword [0x47b5e0]
mov dx, word [ebp - 0x16]
mov word [eax], dx
mov eax, dword [0x47b570]
mov dx, word [ebp - 0x16]
mov word [eax], dx
mov edx, edi
mov ecx, 0xff
lea eax, [ebp - 0xcf4]
call fcn.004033a8
lea eax, [ebp - 0xcf4]
call fcn.004033b4
call fcn.00402874
test eax, eax
lea eax, [ebp - 0x18dc]
mov edx, edi
call fcn.00404e58
mov eax, dword [ebp - 0x18dc]
lea edx, [ebp - 8]
call fcn.004035dc
mov word [ebp - 0x18], ax
mov eax, dword [0x47b3cc]
cmp word [eax], 0
jne 0x471d2d
mov eax, dword [0x47b3cc]
mov dx, word [ebp - 0x18]
mov word [eax], dx
mov eax, dword [0x47b328]
mov dx, word [ebp - 0x18]
mov word [eax], dx
mov edx, edi
mov ecx, 0xff
lea eax, [ebp - 0xcf4]
call fcn.004033a8
lea eax, [ebp - 0xcf4]
call fcn.004033b4
call fcn.00402874
test eax, eax
lea eax, [ebp - 0x18e0]
mov edx, edi
call fcn.00404e58
mov eax, dword [ebp - 0x18e0]
lea edx, [ebp - 8]
call fcn.004035dc
mov word [ebp - 0x1a], ax
mov eax, dword [0x47b480]
mov dx, word [ebp - 0x1a]
mov word [eax], dx
mov edx, edi
mov ecx, 0xff
lea eax, [ebp - 0xcf4]
call fcn.004033a8
lea eax, [ebp - 0xcf4]
call fcn.004033b4
call fcn.00402874
test eax, eax
mov edx, edi
mov ecx, 0xff
lea eax, [ebp - 0xcf4]
call fcn.004033a8
lea eax, [ebp - 0xcf4]
call fcn.004033b4
call fcn.00402874
test eax, eax
lea eax, [ebp - 0x18e4]
mov edx, edi
call fcn.00404e58
mov eax, dword [ebp - 0x18e4]
lea edx, [ebp - 8]
call fcn.004035dc
mov word [ebp - 0x1c], ax
mov edx, edi
mov ecx, 0xff
lea eax, [ebp - 0xcf4]
call fcn.004033a8
lea eax, [ebp - 0xcf4]
call fcn.004033b4
call fcn.00402874
test eax, eax
lea eax, [ebp - 0x18e8]
mov edx, edi
call fcn.00404e58
mov eax, dword [ebp - 0x18e8]
lea edx, [ebp - 8]
call fcn.004035dc
mov word [ebp - 0x1e], ax
mov edx, edi
mov ecx, 0xff
lea eax, [ebp - 0xcf4]
call fcn.004033a8
lea eax, [ebp - 0xcf4]
call fcn.004033b4
call fcn.00402874
test eax, eax
lea eax, [ebp - 0x18ec]
mov edx, edi
call fcn.00404e58
mov eax, dword [ebp - 0x18ec]
lea edx, [ebp - 8]
call fcn.004035dc
mov word [ebp - 0x20], ax
mov eax, dword [0x47b2fc]
mov dx, word [ebp - 0x1a]
mov word [eax], dx
mov edx, edi
mov ecx, 0xff
lea eax, [ebp - 0xcf4]
call fcn.004033a8
lea eax, [ebp - 0xcf4]
call fcn.004033b4
call fcn.00402874
test eax, eax
cmp byte [edi + 1], 0x54
mov eax, dword [0x47b1c8]
sete byte [eax]
mov edx, edi
mov ecx, 0xff
lea eax, [ebp - 0xcf4]
call fcn.004033a8
lea eax, [ebp - 0xcf4]
call fcn.004033b4
call fcn.00402874
test eax, eax
cmp byte [edi + 1], 0x50
mov eax, dword [0x47b2e8]
sete byte [eax]
mov edx, edi
mov ecx, 0xff
lea eax, [ebp - 0xcf4]
call fcn.004033a8
lea eax, [ebp - 0xcf4]
call fcn.004033b4
call fcn.00402874
test eax, eax
cmp byte [edi + 1], 0x2d
mov eax, dword [0x47b660]
setne byte [eax]
lea eax, [ebp - 0xcf4]
call fcn.00402fb0
call fcn.00402874
test eax, eax
push 0
push 0x473f08
push 0x473f08
push 0x473f08
mov ecx, dword [0x47b404]
xor edx, edx
mov eax, 0x473fdc
call fcn.00424674
mov ebx, eax
test ebx, ebx
jne 0x471f4d
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
call fcn.00424d90
mov ebx, eax
test ebx, ebx
jle 0x471fd0
lea ecx, [ebp - 0x17f8]
mov eax, dword [0x47b404]
mov edx, ebx
call fcn.00423e94
lea edx, [ebp - 0x17f8]
lea eax, [ebp - 0x18f0]
call fcn.00404e58
mov edx, dword [ebp - 0x18f0]
mov eax, dword [0x47b1d0]
call fcn.00409294
mov edx, dword [0x47b1d0]
mov eax, dword [0x47b1d0]
call fcn.0041bddc
push 0
mov eax, dword [0x47b5cc]
mov eax, dword [eax]
push eax
mov eax, dword [0x47b1d0]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
push eax
call sub.user32.dll_MessageBoxA_1
cmp ebx, 0x1e
jle 0x4722f3
push 0
push 0
push 0x10
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
push eax
call sub.user32.dll_PostMessageA
jmp 0x4722f3
lea edx, [ebp - 0xff4]
mov eax, dword [0x47b404]
call fcn.00424e78
lea eax, [ebp - 0xff4]
mov edx, 0xff
call fcn.00419f74
lea edx, [ebp - 0xff4]
mov eax, 0x473fe0
call fcn.00402a80
dec eax
jne 0x47201a
push 0
push 0
push 0x10
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
push eax
call sub.user32.dll_PostMessageA
jmp 0x473e0a
mov edx, dword [0x47b5d8]
lea eax, [ebp - 0x1900]
call fcn.00403038
mov edx, 0x473fe4
lea eax, [ebp - 0x1900]
mov cl, 0xd
call fcn.00403008
lea eax, [ebp - 0x1900]
lea edx, [ebp - 0xff4]
call fcn.00402a80
test eax, eax
jle 0x472091
mov eax, dword [0x47b1d0]
mov edx, 0x473ff0
call fcn.00409294
push 0
push 0x474018
mov eax, dword [0x47b1d0]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
push eax
call sub.user32.dll_MessageBoxA_1
push 0
push 0
push 0x10
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
push eax
call sub.user32.dll_PostMessageA
jmp 0x473e0a
cmp byte [ebp - 0xff3], 0x45
jne 0x4720a7
cmp byte [ebp - 0xff2], 0x2d
je 0x4722f3
mov edx, dword [0x47b378]
lea eax, [ebp - 0x1840]
call fcn.00403038
mov edx, dword [0x47b404]
lea eax, [ebp - 0x1840]
mov cl, 0x33
call fcn.00403008
lea edx, [ebp - 0x1840]
lea eax, [ebp - 0x1878]
call fcn.00403038
mov edx, 0x473f80
lea eax, [ebp - 0x1878]
mov cl, 0x37
call fcn.00403008
lea edx, [ebp - 0x1878]
lea eax, [ebp - 0x1904]
call fcn.00404e58
mov edx, dword [ebp - 0x1904]
lea eax, [ebp - 0xcf4]
call fcn.00402e0c
lea eax, [ebp - 0xcf4]
call fcn.00402b90
call fcn.00402874
test eax, eax
mov eax, dword [0x47b2b8]
xor edx, edx
mov dword [eax], edx
jmp 0x4722ce
lea edx, [ebp - 0xff4]
mov ecx, 0xff
lea eax, [ebp - 0xcf4]
call fcn.004033a8
lea eax, [ebp - 0xcf4]
call fcn.004033b4
call fcn.00402874
test eax, eax
lea eax, [ebp - 0x17f8]
push eax
mov ecx, 1
mov edx, 1
lea eax, [ebp - 0xff4]
call fcn.00402798
lea eax, [ebp - 0x17f8]
mov edx, 0x47402c
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00403060
jne 0x4721c8
lea eax, [ebp - 0x190c]
lea edx, [ebp - 0xff4]
call fcn.00404e58
mov ecx, dword [ebp - 0x190c]
lea eax, [ebp - 0x1908]
mov edx, 0x474038
call fcn.00404f00
mov edx, dword [ebp - 0x1908]
lea eax, [ebp - 0xff4]
mov ecx, 0xff
call fcn.00404e90
mov al, byte [ebp - 0xff3]
cmp al, 0x20
je 0x4722ce
cmp al, 1
je 0x4722ce
mov eax, dword [0x47b2b8]
inc dword [eax]
lea eax, [ebp - 0x17f8]
push eax
lea edx, [ebp - 0xff4]
mov eax, 0x47403c
call fcn.00402a80
mov ecx, eax
dec ecx
mov edx, 1
lea eax, [ebp - 0xff4]
call fcn.00402798
lea eax, [ebp - 0x17f8]
mov edx, dword [0x47b5d8]
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00403060
jne 0x4722ce
lea eax, [ebp - 0x1910]
push eax
lea edx, [ebp - 0x1914]
mov eax, dword [0x47b2b8]
mov eax, dword [eax]
add eax, 0x64
call fcn.00408850
mov eax, dword [ebp - 0x1914]
mov ecx, 2
mov edx, 2
call fcn.00405114
mov edx, dword [ebp - 0x1910]
lea eax, [ebp - 0x17f8]
mov ecx, 0xff
call fcn.00404e90
lea edx, [ebp - 0x17f8]
mov eax, dword [0x47b548]
mov cl, 2
call fcn.00403044
mov eax, dword [0x47b648]
mov edx, dword [0x47b548]
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00403060
je 0x4722ce
mov eax, dword [0x47b670]
mov edx, 0x47402c
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00403060
je 0x4722ce
push 0
push 0x474040
push 0x474060
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
push eax
call sub.user32.dll_MessageBoxA_1
call fcn.00404b04
lea eax, [ebp - 0xcf4]
call fcn.004030ec
test al, al
je 0x472130
lea eax, [ebp - 0xcf4]
call fcn.00402fb0
call fcn.00402874
test eax, eax
mov eax, dword [0x47b2b8]
cmp dword [eax], 2
jle 0x472a29
lea edx, [ebp - 0x17f8]
mov eax, dword [0x47b3f0]
call fcn.0041c150
lea edx, [ebp - 0x17f8]
lea eax, [ebp - 0x191c]
call fcn.00404e58
mov eax, dword [ebp - 0x191c]
lea edx, [ebp - 0x1918]
call fcn.00408764
mov edx, dword [ebp - 0x1918]
lea eax, [ebp - 0x12f4]
mov ecx, 0xff
call fcn.00404e90
cmp byte [ebp - 0x12f4], 8
jb 0x4729ea
lea edx, [ebp - 0x12f4]
mov eax, 0x47403c
call fcn.00402a80
mov ebx, eax
test ebx, ebx
jne 0x47237e
lea edx, [ebp - 0x12f4]
mov eax, 0x474084
call fcn.00402a80
mov ebx, eax
lea eax, [ebp - 0x12f4]
push eax
mov ecx, ebx
dec ecx
mov edx, 1
lea eax, [ebp - 0x12f4]
call fcn.00402798
cmp byte [ebp - 0x12f4], 8
ja 0x4723de
lea eax, [ebp - 0x1924]
lea edx, [ebp - 0x12f4]
call fcn.00404e58
mov ecx, dword [ebp - 0x1924]
lea eax, [ebp - 0x1920]
mov edx, 0x474090
call fcn.00404f00
mov edx, dword [ebp - 0x1920]
lea eax, [ebp - 0x12f4]
mov ecx, 0xff
call fcn.00404e90
lea eax, [ebp - 0x192c]
lea edx, [ebp - 0x12f4]
call fcn.00404e58
mov eax, dword [ebp - 0x192c]
lea ecx, [ebp - 0x1928]
mov edx, 0xa
call fcn.00435cd4
mov edx, dword [ebp - 0x1928]
lea eax, [ebp - 0x12f4]
mov ecx, 0xff
call fcn.00404e90
xor eax, eax
push ebp
push 0x472454
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x1930]
lea edx, [ebp - 0x12f4]
call fcn.00404e58
mov eax, dword [ebp - 0x1930]
call fcn.0040898c
mov ebx, eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4724d5
lea edx, [ebp - 0x193c]
mov eax, dword [0x47b570]
movzx eax, word [eax]
add eax, ebx
call fcn.00408850
mov edx, dword [ebp - 0x193c]
lea eax, [ebp - 0x12f4]
mov ecx, 0xff
call fcn.00404e90
cmp byte [ebp - 0x12f4], 8
ja 0x472546
lea eax, [ebp - 0x1944]
lea edx, [ebp - 0x12f4]
call fcn.00404e58
mov ecx, dword [ebp - 0x1944]
lea eax, [ebp - 0x1940]
mov edx, 0x474090
call fcn.00404f00
mov edx, dword [ebp - 0x1940]
lea eax, [ebp - 0x12f4]
mov ecx, 0xff
call fcn.00404e90
lea eax, [ebp - 0x194c]
lea edx, [ebp - 0x12f4]
call fcn.00404e58
mov eax, dword [ebp - 0x194c]
lea ecx, [ebp - 0x1948]
mov edx, 0xa
call fcn.00435cd4
mov edx, dword [ebp - 0x1948]
lea eax, [ebp - 0x12f4]
mov ecx, 0xff
call fcn.00404e90
lea eax, [ebp - 0x1950]
lea edx, [ebp - 0x12f4]
call fcn.00404e58
lea eax, [ebp - 0x1950]
push eax
lea eax, [ebp - 0x1954]
mov edx, dword [0x47b5d8]
call fcn.00404e58
mov edx, dword [ebp - 0x1954]
pop eax
call fcn.00404ebc
mov edx, dword [ebp - 0x1950]
lea eax, [ebp - 0x12f4]
mov ecx, 0xff
call fcn.00404e90
mov byte [ebp - 0x13f4], 0
xor eax, eax
mov al, byte [ebp - 0x12f4]
test eax, eax
jle 0x472639
mov dword [ebp - 0x24], eax
lea ebx, [ebp - 0x12f3]
lea eax, [ebp - 0x1958]
lea edx, [ebp - 0x13f4]
call fcn.00404e58
lea eax, [ebp - 0x1958]
push eax
lea edx, [ebp - 0x195c]
xor eax, eax
mov al, byte [ebx]
call fcn.00408850
mov edx, dword [ebp - 0x195c]
pop eax
call fcn.00404ebc
mov edx, dword [ebp - 0x1958]
lea eax, [ebp - 0x13f4]
mov ecx, 0xff
call fcn.00404e90
inc ebx
dec dword [ebp - 0x24]
jne 0x4725ea
xor eax, eax
mov dword [ebp - 0x10], eax
push 0
push 0x473f08
push 0x473f08
push 0x473f08
mov edx, 0x4740d8
lea eax, [ebp - 0x1970]
call fcn.00403038
mov edx, dword [0x47b5d8]
lea eax, [ebp - 0x1970]
mov cl, 0xe
call fcn.00403008
lea edx, [ebp - 0x1970]
lea eax, [ebp - 0x1960]
call fcn.00404e58
lea eax, [ebp - 0x1960]
push eax
lea eax, [ebp - 0x1974]
push eax
lea edx, [ebp - 0x1978]
mov eax, dword [0x47b570]
movzx eax, word [eax]
call fcn.00408850
mov eax, dword [ebp - 0x1978]
mov ecx, 2
mov edx, 3
call fcn.00405114
mov edx, dword [ebp - 0x1974]
pop eax
call fcn.00404ebc
mov edx, dword [ebp - 0x1960]
lea eax, [ebp - 0x17f8]
mov ecx, 0xff
call fcn.00404e90
lea eax, [ebp - 0x17f8]
mov ecx, dword [0x47b404]
xor edx, edx
call fcn.00424674
mov ebx, eax
test ebx, ebx
jne 0x472701
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
call fcn.00424d90
mov ebx, eax
test ebx, ebx
jle 0x472784
lea ecx, [ebp - 0x17f8]
mov eax, dword [0x47b404]
mov edx, ebx
call fcn.00423e94
lea edx, [ebp - 0x17f8]
lea eax, [ebp - 0x197c]
call fcn.00404e58
mov edx, dword [ebp - 0x197c]
mov eax, dword [0x47b1d0]
call fcn.00409294
mov edx, dword [0x47b1d0]
mov eax, dword [0x47b1d0]
call fcn.0041bddc
push 0
mov eax, dword [0x47b5cc]
mov eax, dword [eax]
push eax
mov eax, dword [0x47b1d0]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
push eax
call sub.user32.dll_MessageBoxA_1
cmp ebx, 0x1e
jle 0x472a29
push 0
push 0
push 0x10
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
push eax
call sub.user32.dll_PostMessageA
jmp 0x472a29
lea edx, [ebp - 0xff4]
mov eax, dword [0x47b404]
call fcn.00424e78
lea eax, [ebp - 0xff4]
mov edx, 0xff
call fcn.00419f74
lea edx, [ebp - 0xff4]
mov eax, 0x473fe0
call fcn.00402a80
dec eax
jne 0x4727ce
push 0
push 0
push 0x10
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
push eax
call sub.user32.dll_PostMessageA
jmp 0x473e0a
cmp byte [ebp - 0xff3], 0x45
jne 0x4727e4
cmp byte [ebp - 0xff2], 0x2d
je 0x472a29
mov edx, dword [0x47b378]
lea eax, [ebp - 0x1840]
call fcn.00403038
mov edx, dword [0x47b404]
lea eax, [ebp - 0x1840]
mov cl, 0x33
call fcn.00403008
lea edx, [ebp - 0x1840]
lea eax, [ebp - 0x1878]
call fcn.00403038
mov edx, 0x473f80
lea eax, [ebp - 0x1878]
mov cl, 0x37
call fcn.00403008
lea edx, [ebp - 0x1878]
lea eax, [ebp - 0x1980]
call fcn.00404e58
mov edx, dword [ebp - 0x1980]
lea eax, [ebp - 0xcf4]
call fcn.00402e0c
lea eax, [ebp - 0xcf4]
call fcn.00402b90
call fcn.00402874
test eax, eax
jmp 0x472999
lea edx, [ebp - 0xff4]
mov ecx, 0xff
lea eax, [ebp - 0xcf4]
call fcn.004033a8
lea eax, [ebp - 0xcf4]
call fcn.004033b4
call fcn.00402874
test eax, eax
lea eax, [ebp - 0xff4]
mov edx, 0xff
call fcn.00419f74
lea edx, [ebp - 0xff4]
mov eax, 0x4740dc
call fcn.00402a80
mov ebx, eax
lea edx, [ebp - 0xff4]
mov eax, 0x4740e0
call fcn.00402a80
add ebx, eax
dec ebx
je 0x472999
inc dword [ebp - 0x10]
xor eax, eax
mov al, byte [ebp - 0x13f4]
cmp eax, dword [ebp - 0x10]
jl 0x47298c
xor eax, eax
mov dword [ebp - 0x14], eax
mov ebx, 1
lea eax, [ebp - 0x17f8]
push eax
mov edx, dword [ebp - 0x10]
add edx, ebx
mov ecx, 1
lea eax, [ebp - 0xff4]
call fcn.00402798
lea eax, [ebp - 0x17f8]
mov edx, 0x4740e4
call fcn.00402a80
add dword [ebp - 0x14], eax
inc ebx
cmp ebx, 8
jne 0x4728e5
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x10]
add eax, 7
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x1984]
lea edx, [ebp - 0x10f4]
call fcn.00404e58
lea eax, [ebp - 0x1984]
push eax
lea eax, [ebp - 0x17f8]
push eax
mov edx, dword [ebp - 0x14]
inc edx
mov ecx, 1
lea eax, [ebp - 0xff4]
call fcn.00402798
lea edx, [ebp - 0x17f8]
lea eax, [ebp - 0x1988]
call fcn.00404e58
mov edx, dword [ebp - 0x1988]
pop eax
call fcn.00404ebc
mov edx, dword [ebp - 0x1984]
lea eax, [ebp - 0x10f4]
mov ecx, 0xff
call fcn.00404e90
xor eax, eax
mov al, byte [ebp - 0x13f4]
cmp eax, dword [ebp - 0x10]
jl 0x4729ac
lea eax, [ebp - 0xcf4]
call fcn.004030ec
test al, al
je 0x472864
lea eax, [ebp - 0x10f4]
lea edx, [ebp - 0x13f4]
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00403060
je 0x4729d6
push 0
push 0
push 0x10
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
push eax
call sub.user32.dll_PostMessageA
lea eax, [ebp - 0xcf4]
call fcn.00402fb0
call fcn.00402874
test eax, eax
jmp 0x472a29
mov eax, dword [0x47b1d0]
mov edx, 0x474104
call fcn.00409294
push 0
push 0x474150
mov eax, dword [0x47b1d0]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
push eax
call sub.user32.dll_MessageBoxA_1
push 0
push 0
push 0x10
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
push eax
call sub.user32.dll_PostMessageA
jmp 0x473e0a
mov eax, dword [0x47b1c0]
cmp dword [eax], 0
je 0x472a63
mov esi, dword [0x47b1c0]
mov esi, dword [esi]
mov eax, dword [0x47b1c0]
mov eax, dword [eax]
mov eax, dword [eax + 0xf]
mov edx, dword [0x47b1c0]
mov dword [edx], eax
mov edx, 0x13
mov eax, esi
call fcn.004026a8
mov eax, dword [0x47b1c0]
cmp dword [eax], 0
jne 0x472a33
mov eax, dword [0x47b1c0]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x47b294]
mov byte [eax], 0
mov eax, dword [0x47b524]
cmp dword [eax], 0
je 0x472a8f
mov eax, dword [0x47b524]
mov eax, dword [eax]
mov edx, 0x474170
call fcn.0045d328
push 0
push 0x473f08
push 0x473f08
push 0x473f08
mov ecx, dword [0x47b404]
xor edx, edx
mov eax, 0x474198
call fcn.00424674
mov ebx, eax
test ebx, ebx
jne 0x472ac5
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
call fcn.00424d90
mov ebx, eax
test ebx, ebx
jle 0x472b8c
lea ecx, [ebp - 0x17f8]
mov eax, dword [0x47b404]
mov edx, ebx
call fcn.00423e94
lea edx, [ebp - 0x17f8]
lea eax, [ebp - 0x198c]
call fcn.00404e58
mov edx, dword [ebp - 0x198c]
mov eax, dword [0x47b1d0]
call fcn.00409294
mov edx, dword [0x47b1d0]
mov eax, dword [0x47b1d0]
call fcn.0041bddc
push 0
mov eax, dword [0x47b5cc]
mov eax, dword [eax]
push eax
mov eax, dword [0x47b1d0]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
push eax
call sub.user32.dll_MessageBoxA_1
cmp ebx, 0x1e
jle 0x472b43
push 0
push 0
push 0x10
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
push eax
call sub.user32.dll_PostMessageA
mov eax, 0x13
call fcn.00402688
mov ebx, eax
mov eax, dword [0x47b1c0]
mov dword [eax], ebx
mov byte [ebx], 0
lea eax, [ebx + 2]
mov edx, dword [0x47b5d8]
mov cl, 0xc
call fcn.00403044
lea eax, [ebx + 2]
mov edx, dword [0x47b5d8]
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00403060
sete al
mov byte [ebx + 1], al
xor eax, eax
mov dword [ebx + 0xf], eax
jmp 0x472d46
mov edx, edi
mov eax, dword [0x47b404]
call fcn.00424e78
cmp byte [edi + 1], 0x45
jne 0x472bed
cmp byte [edi + 2], 0x2d
jne 0x472bed
mov eax, 0x13
call fcn.00402688
mov ebx, eax
mov eax, dword [0x47b1c0]
mov dword [eax], ebx
mov byte [ebx], 0
lea eax, [ebx + 2]
mov edx, dword [0x47b5d8]
mov cl, 0xc
call fcn.00403044
lea eax, [ebx + 2]
mov edx, dword [0x47b5d8]
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00403060
sete al
mov byte [ebx + 1], al
xor eax, eax
mov dword [ebx + 0xf], eax
jmp 0x472d46
mov eax, dword [0x47b294]
mov byte [eax], 1
mov edx, dword [0x47b378]
lea eax, [ebp - 0x1840]
call fcn.00403038
mov edx, dword [0x47b404]
lea eax, [ebp - 0x1840]
mov cl, 0x33
call fcn.00403008
lea edx, [ebp - 0x1840]
lea eax, [ebp - 0x1878]
call fcn.00403038
mov edx, 0x473f80
lea eax, [ebp - 0x1878]
mov cl, 0x37
call fcn.00403008
lea edx, [ebp - 0x1878]
lea eax, [ebp - 0x1990]
call fcn.00404e58
mov edx, dword [ebp - 0x1990]
lea eax, [ebp - 0xcf4]
call fcn.00402e0c
lea eax, [ebp - 0xcf4]
call fcn.00402b90
call fcn.00402874
test eax, eax
mov edx, edi
mov ecx, 0xff
lea eax, [ebp - 0xcf4]
call fcn.004033a8
lea eax, [ebp - 0xcf4]
call fcn.004033b4
call fcn.00402874
test eax, eax
mov edx, edi
mov ecx, 0xff
lea eax, [ebp - 0xcf4]
call fcn.004033a8
lea eax, [ebp - 0xcf4]
call fcn.004033b4
call fcn.00402874
test eax, eax
jmp 0x472d2f
mov eax, 0x13
call fcn.00402688
mov ebx, eax
mov eax, dword [0x47b1c0]
cmp dword [eax], 0
jne 0x472cdc
mov eax, dword [0x47b1c0]
mov dword [eax], ebx
mov byte [ebx], 0
jmp 0x472cdf
mov dword [esi + 0xf], ebx
mov esi, ebx
lea eax, [ebx + 2]
mov edx, edi
mov cl, 0xc
call fcn.00403044
lea eax, [ebx + 2]
mov edx, dword [0x47b5d8]
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00403060
sete al
mov byte [ebx + 1], al
xor eax, eax
mov dword [ebx + 0xf], eax
mov edx, edi
mov ecx, 0xff
lea eax, [ebp - 0xcf4]
call fcn.004033a8
lea eax, [ebp - 0xcf4]
call fcn.004033b4
call fcn.00402874
test eax, eax
cmp byte [edi], 0
jne 0x472cba
lea eax, [ebp - 0xcf4]
call fcn.00402fb0
call fcn.00402874
test eax, eax
lea ecx, [ebp - 0x11f4]
mov edx, 0x47419c
mov eax, dword [ebp - 4]
call fcn.00477b84
lea eax, [ebp - 0x1998]
lea edx, [ebp - 0x11f4]
call fcn.00404e58
mov eax, dword [ebp - 0x1998]
lea edx, [ebp - 0x1994]
call fcn.004085cc
mov edx, dword [ebp - 0x1994]
mov eax, 0x4741ac
call fcn.0040519c
test eax, eax
jne 0x472e02
mov eax, dword [0x47b1d0]
mov edx, 0x4741c0
call fcn.00409294
mov edx, dword [0x47b1d0]
mov eax, dword [0x47b1d0]
call fcn.0041be1c
lea eax, [ebp - 0x199c]
push eax
lea eax, [ebp - 0x19a0]
mov edx, dword [0x47b1d0]
mov ecx, pe_nt_image_headers32
call fcn.00404e64
mov eax, dword [ebp - 0x19a0]
mov ecx, pe_nt_image_headers32
mov edx, 1
call fcn.00405114
mov edx, dword [ebp - 0x199c]
lea eax, [ebp - 0x11f4]
mov ecx, 0xff
call fcn.00404e90
mov eax, dword [0x47b324]
mov word [eax], 0x2a01
jmp 0x472e5c
lea eax, [ebp - 0x11f4]
push eax
xor ecx, ecx
mov cl, byte [ebp - 0x11f4]
dec ecx
mov edx, 2
lea eax, [ebp - 0x11f4]
call fcn.00402798
lea eax, [ebp - 0x11f4]
push eax
lea edx, [ebp - 0x11f4]
mov eax, 0x4741ec
call fcn.00402a80
mov ecx, eax
dec ecx
mov edx, 1
lea eax, [ebp - 0x11f4]
call fcn.00402798
mov eax, dword [0x47b324]
lea edx, [ebp - 0x11f4]
call fcn.00403038
mov edx, 0x4741f0
lea eax, [ebp - 0x19cc]
call fcn.00403038
mov edx, dword [0x47b5d8]
lea eax, [ebp - 0x19cc]
mov cl, 0x21
call fcn.00403008
lea edx, [ebp - 0x19cc]
lea eax, [ebp - 0x19f0]
call fcn.00403038
mov edx, 0x474208
lea eax, [ebp - 0x19f0]
mov cl, 0x22
call fcn.00403008
lea edx, [ebp - 0x19f0]
lea eax, [ebp - 0x1a14]
call fcn.00403038
mov edx, 0x473fe4
lea eax, [ebp - 0x1a14]
mov cl, 0x23
call fcn.00403008
lea edx, [ebp - 0x1a14]
lea eax, [ebp - 0x1a3c]
call fcn.00403038
mov edx, 0x474208
lea eax, [ebp - 0x1a3c]
mov cl, 0x24
call fcn.00403008
lea edx, [ebp - 0x1a3c]
lea eax, [ebp - 0x19a8]
call fcn.00404e58
push dword [ebp - 0x19a8]
lea eax, [ebp - 0x1a40]
lea edx, [ebp - 0x11f4]
call fcn.00404e58
push dword [ebp - 0x1a40]
push 0x474214
push 0x474220
lea eax, [ebp - 0x19a4]
mov edx, 4
call fcn.00404f74
mov edx, dword [ebp - 0x19a4]
lea eax, [ebp - 0x11f4]
mov ecx, 0xff
call fcn.00404e90
mov eax, dword [0x47b524]
cmp dword [eax], 0
je 0x472f61
mov eax, dword [0x47b524]
mov eax, dword [eax]
mov edx, 0x474224
call fcn.0045d328
push 0
push 0x473f08
push 0x473f08
push 0x473f08
mov ecx, dword [0x47b404]
xor edx, edx
lea eax, [ebp - 0x11f4]
call fcn.00424674
mov ebx, eax
test ebx, ebx
jne 0x472f96
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
call fcn.00424d90
lea ecx, [ebp - 0x11f4]
mov edx, 0x474244
mov eax, dword [ebp - 4]
call fcn.00477b84
lea eax, [ebp - 0x1a48]
lea edx, [ebp - 0x11f4]
call fcn.00404e58
mov eax, dword [ebp - 0x1a48]
lea edx, [ebp - 0x1a44]
call fcn.004085cc
mov edx, dword [ebp - 0x1a44]
mov eax, 0x474254
call fcn.0040519c
test eax, eax
jne 0x473048
mov eax, dword [0x47b1d0]
mov edx, 0x474268
call fcn.00409294
mov edx, dword [0x47b1d0]
mov eax, dword [0x47b1d0]
call fcn.0041be1c
lea eax, [ebp - 0x1a4c]
push eax
lea eax, [ebp - 0x1a50]
mov edx, dword [0x47b1d0]
mov ecx, pe_nt_image_headers32
call fcn.00404e64
mov eax, dword [ebp - 0x1a50]
mov ecx, pe_nt_image_headers32
mov edx, 1
call fcn.00405114
mov edx, dword [ebp - 0x1a4c]
lea eax, [ebp - 0x11f4]
mov ecx, 0xff
call fcn.00404e90
jmp 0x473092
lea eax, [ebp - 0x11f4]
push eax
xor ecx, ecx
mov cl, byte [ebp - 0x11f4]
dec ecx
mov edx, 2
lea eax, [ebp - 0x11f4]
call fcn.00402798
lea eax, [ebp - 0x11f4]
push eax
lea edx, [ebp - 0x11f4]
mov eax, 0x4741ec
call fcn.00402a80
mov ecx, eax
dec ecx
mov edx, 1
lea eax, [ebp - 0x11f4]
call fcn.00402798
mov edx, 0x474294
lea eax, [ebp - 0x19f0]
call fcn.00403038
mov edx, dword [0x47b5d8]
lea eax, [ebp - 0x19f0]
mov cl, 0x22
call fcn.00403008
lea edx, [ebp - 0x19f0]
lea eax, [ebp - 0x1a14]
call fcn.00403038
mov edx, 0x474208
lea eax, [ebp - 0x1a14]
mov cl, 0x23
call fcn.00403008
lea edx, [ebp - 0x1a14]
lea eax, [ebp - 0x1a3c]
call fcn.00403038
mov edx, 0x473fe4
lea eax, [ebp - 0x1a3c]
mov cl, 0x24
call fcn.00403008
lea edx, [ebp - 0x1a3c]
lea eax, [ebp - 0x1a80]
call fcn.00403038
mov edx, 0x474208
lea eax, [ebp - 0x1a80]
mov cl, 0x25
call fcn.00403008
lea edx, [ebp - 0x1a80]
lea eax, [ebp - 0x1a58]
call fcn.00404e58
push dword [ebp - 0x1a58]
lea eax, [ebp - 0x1a84]
lea edx, [ebp - 0x11f4]
call fcn.00404e58
push dword [ebp - 0x1a84]
push 0x474214
push 0x474220
lea eax, [ebp - 0x1a54]
mov edx, 4
call fcn.00404f74
mov edx, dword [ebp - 0x1a54]
lea eax, [ebp - 0x11f4]
mov ecx, 0xff
call fcn.00404e90
mov eax, dword [0x47b524]
cmp dword [eax], 0
je 0x473197
mov eax, dword [0x47b524]
mov eax, dword [eax]
mov edx, 0x4742ac
call fcn.0045d328
push 0
push 0x473f08
push 0x473f08
push 0x473f08
mov ecx, dword [0x47b404]
xor edx, edx
lea eax, [ebp - 0x11f4]
call fcn.00424674
mov ebx, eax
test ebx, ebx
jne 0x4731cc
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
call fcn.00424d90
push 0x4742d4
lea edx, [ebp - 0x1a8c]
mov eax, dword [0x47b570]
movzx eax, word [eax]
call fcn.00408850
push dword [ebp - 0x1a8c]
push 0x4742e8
lea eax, [ebp - 0x1a90]
mov edx, dword [0x47b5d8]
call fcn.00404e58
push dword [ebp - 0x1a90]
push 0x474214
push 0x474300
push 0x474214
lea eax, [ebp - 0x1a94]
mov edx, dword [0x47b378]
call fcn.00404e58
push dword [ebp - 0x1a94]
push 0x474214
push 0x474220
lea eax, [ebp - 0x1a88]
mov edx, 0xa
call fcn.00404f74
mov edx, dword [ebp - 0x1a88]
lea eax, [ebp - 0x15f4]
mov ecx, 0xff
call fcn.00404e90
mov eax, dword [0x47b524]
cmp dword [eax], 0
je 0x473277
mov eax, dword [0x47b524]
mov eax, dword [eax]
mov edx, 0x474304
call fcn.0045d328
push 0
push 0x473f08
push 0x473f08
push 0x473f08
mov ecx, dword [0x47b404]
xor edx, edx
lea eax, [ebp - 0x15f4]
call fcn.00424674
mov ebx, eax
test ebx, ebx
jne 0x4732ac
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
call fcn.00424d90
mov eax, dword [0x47b1d0]
push eax
push pe_nt_image_headers32
call sub.kernel32.dll_GetCurrentDirectoryA
lea edx, [ebp - 0x1a98]
mov eax, dword [0x47b1d0]
call fcn.00409400
mov edx, dword [ebp - 0x1a98]
lea eax, [ebp - 0x16f4]
mov ecx, 0xff
call fcn.00404e90
xor eax, eax
mov al, byte [ebp - 0x16f4]
cmp byte [ebp + eax - 0x16f4], 0x5c
je 0x47332b
lea eax, [ebp - 0x1a9c]
lea edx, [ebp - 0x16f4]
call fcn.00404e58
lea eax, [ebp - 0x1a9c]
mov edx, 0x474330
call fcn.00404ebc
mov edx, dword [ebp - 0x1a9c]
lea eax, [ebp - 0x16f4]
mov ecx, 0xff
call fcn.00404e90
push 0x4742d4
lea edx, [ebp - 0x1aa4]
mov eax, dword [0x47b570]
movzx eax, word [eax]
call fcn.00408850
push dword [ebp - 0x1aa4]
push 0x47433c
lea eax, [ebp - 0x1aa8]
mov edx, dword [0x47b5d8]
call fcn.00404e58
push dword [ebp - 0x1aa8]
push 0x474214
push 0x474300
push 0x474214
lea eax, [ebp - 0x1aac]
lea edx, [ebp - 0x16f4]
call fcn.00404e58
push dword [ebp - 0x1aac]
push 0x474214
push 0x474220
lea eax, [ebp - 0x1aa0]
mov edx, 0xa
call fcn.00404f74
mov edx, dword [ebp - 0x1aa0]
lea eax, [ebp - 0x16f4]
mov ecx, 0xff
call fcn.00404e90
mov eax, dword [0x47b524]
cmp dword [eax], 0
je 0x4733d6
mov eax, dword [0x47b524]
mov eax, dword [eax]
mov edx, 0x47434c
call fcn.0045d328
push 0
push 0x473f08
push 0x473f08
push 0x473f08
mov ecx, dword [0x47b404]
xor edx, edx
lea eax, [ebp - 0x16f4]
call fcn.00424674
mov ebx, eax
test ebx, ebx
jne 0x47340b
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
call fcn.00424d90
mov edx, 0x474370
lea eax, [ebp - 0x1acc]
call fcn.00403038
mov edx, dword [0x47b5d8]
lea eax, [ebp - 0x1acc]
mov cl, 0x14
call fcn.00403008
lea edx, [ebp - 0x1acc]
lea eax, [ebp - 0x1afc]
call fcn.00403038
mov edx, 0x47437c
lea eax, [ebp - 0x1afc]
mov cl, 0x2e
call fcn.00403008
lea edx, [ebp - 0x1afc]
lea eax, [ebp - 0x1b2c]
call fcn.00403038
mov edx, 0x474208
lea eax, [ebp - 0x1b2c]
mov cl, 0x2f
call fcn.00403008
lea edx, [ebp - 0x1b2c]
lea eax, [ebp - 0x1b60]
call fcn.00403038
mov edx, 0x473fe4
lea eax, [ebp - 0x1b60]
mov cl, 0x30
call fcn.00403008
lea edx, [ebp - 0x1b60]
lea eax, [ebp - 0x1ab4]
call fcn.00404e58
push dword [ebp - 0x1ab4]
lea eax, [ebp - 0x1b64]
mov edx, dword [0x47b558]
call fcn.00404e58
push dword [ebp - 0x1b64]
push 0x474220
lea eax, [ebp - 0x1ab0]
mov edx, 3
call fcn.00404f74
mov edx, dword [ebp - 0x1ab0]
lea eax, [ebp - 0x16f4]
mov ecx, 0xff
call fcn.00404e90
push 0
push 0x473f08
push 0x473f08
push 0x473f08
mov ecx, dword [0x47b404]
xor edx, edx
lea eax, [ebp - 0x16f4]
call fcn.00424674
mov ebx, eax
test ebx, ebx
jne 0x473525
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
call fcn.00424d90
mov eax, dword [0x47b524]
cmp dword [eax], 0
je 0x473540
mov eax, dword [0x47b524]
mov eax, dword [eax]
mov edx, 0x474398
call fcn.0045d328
push 0
push 0x473f08
push 0x473f08
push 0x473f08
mov ecx, dword [0x47b404]
xor edx, edx
mov eax, 0x4743c4
call fcn.00424674
mov ebx, eax
test ebx, ebx
jne 0x473576
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
call fcn.00424d90
mov ebx, eax
test ebx, ebx
jle 0x4735f9
lea ecx, [ebp - 0x17f8]
mov eax, dword [0x47b404]
mov edx, ebx
call fcn.00423e94
lea edx, [ebp - 0x17f8]
lea eax, [ebp - 0x1b68]
call fcn.00404e58
mov edx, dword [ebp - 0x1b68]
mov eax, dword [0x47b1d0]
call fcn.00409294
mov edx, dword [0x47b1d0]
mov eax, dword [0x47b1d0]
call fcn.0041bddc
push 0
mov eax, dword [0x47b5cc]
mov eax, dword [eax]
push eax
mov eax, dword [0x47b1d0]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
push eax
call sub.user32.dll_MessageBoxA_1
cmp ebx, 0x1e
jle 0x473902
push 0
push 0
push 0x10
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
push eax
call sub.user32.dll_PostMessageA
jmp 0x473902
mov edx, edi
mov eax, dword [0x47b404]
call fcn.00424e78
cmp byte [edi + 1], 0x45
jne 0x473615
cmp byte [edi + 2], 0x2d
je 0x473902
mov edx, dword [0x47b378]
lea eax, [ebp - 0x1840]
call fcn.00403038
mov edx, dword [0x47b404]
lea eax, [ebp - 0x1840]
mov cl, 0x33
call fcn.00403008
lea edx, [ebp - 0x1840]
lea eax, [ebp - 0x1878]
call fcn.00403038
mov edx, 0x473f80
lea eax, [ebp - 0x1878]
mov cl, 0x37
call fcn.00403008
lea edx, [ebp - 0x1878]
lea eax, [ebp - 0x1b6c]
call fcn.00404e58
mov edx, dword [ebp - 0x1b6c]
lea eax, [ebp - 0xcf4]
call fcn.00402e0c
lea eax, [ebp - 0xcf4]
call fcn.00402b90
call fcn.00402874
test eax, eax
jmp 0x4738dd
mov edx, edi
mov ecx, 0xff
lea eax, [ebp - 0xcf4]
call fcn.004033a8
lea eax, [ebp - 0xcf4]
call fcn.004033b4
call fcn.00402874
test eax, eax
mov eax, edi
mov edx, 0xff
call fcn.00419f74
xor ebx, ebx
mov bl, byte [edi]
cmp ebx, 4
jle 0x473710
cmp byte [edi + 1], 0x4e
je 0x4736da
cmp byte [edi + 1], 0x6e
jne 0x473710
cmp byte [edi + 2], 0x3a
jne 0x473710
lea eax, [ebp - 0x17f8]
push eax
mov ecx, ebx
sub ecx, 2
mov edx, 3
mov eax, edi
call fcn.00402798
lea edx, [ebp - 0x17f8]
mov eax, 0x4743cc
call fcn.00402a80
test eax, eax
jg 0x4738dd
cmp ebx, 2
jle 0x4737ec
mov al, byte [edi + 1]
cmp al, 0x4e
je 0x473728
cmp al, 0x6e
jne 0x4737ec
cmp byte [edi + 2], 0x3a
jne 0x4737ec
cmp byte [edi], 7
jb 0x47378c
lea eax, [ebp - 0xef4]
push eax
mov ecx, 5
mov edx, 3
mov eax, edi
call fcn.00402798
lea edx, [ebp - 0x17f8]
lea eax, [ebp - 0xef4]
call fcn.00418da4
lea edx, [ebp - 0x17f8]
lea eax, [ebp - 0xef4]
call fcn.00403038
lea eax, [ebp - 0xef4]
mov edx, 0x4743d0
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00403060
je 0x4738dd
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x67]
test eax, eax
jne 0x4737ad
mov eax, 0x104
call fcn.00402688
mov ebx, eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x67], ebx
mov eax, dword [ebp - 4]
jmp 0x4737d6
mov edx, dword [ebp - 4]
mov ebx, eax
jmp 0x4737b6
mov ebx, eax
mov eax, dword [ebx + 0x100]
test eax, eax
jne 0x4737b4
mov eax, 0x104
call fcn.00402688
mov dword [ebx + 0x100], eax
mov ebx, dword [ebx + 0x100]
xor eax, eax
mov dword [ebx + 0x100], eax
mov eax, ebx
mov edx, edi
call fcn.00403038
jmp 0x4738dd
test ebx, ebx
jle 0x4738dd
mov edx, edi
mov eax, 0x4743d8
call fcn.00402a80
mov esi, eax
cmp esi, 1
jle 0x4738dd
cmp ebx, esi
jle 0x4738dd
lea eax, [ebp - 0xef4]
push eax
mov ecx, esi
dec ecx
mov edx, 1
mov eax, edi
call fcn.00402798
lea eax, [ebp - 0xef4]
mov edx, 0xff
call fcn.00419f74
lea edx, [ebp - 0x17f8]
lea eax, [ebp - 0xef4]
call fcn.00418da4
lea edx, [ebp - 0x17f8]
lea eax, [ebp - 0xef4]
call fcn.00403038
push edi
mov ecx, ebx
sub ecx, esi
lea edx, [esi + 1]
mov eax, edi
call fcn.00402798
mov eax, edi
mov edx, 0xff
call fcn.00419f74
lea edx, [ebp - 0x17f8]
mov eax, edi
call fcn.00418da4
lea edx, [ebp - 0x17f8]
mov eax, edi
call fcn.00403038
cmp byte [edi], 0
je 0x4738dd
cmp byte [ebp - 0xef4], 0
je 0x4738dd
xor esi, esi
mov ebx, dword [0x47b1b4]
mov eax, dword [0x47b644]
mov dword [ebp - 0x28], eax
mov eax, ebx
lea edx, [ebp - 0xef4]
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00403060
jne 0x4738d0
mov eax, dword [ebp - 0x28]
mov edx, edi
mov cl, 8
call fcn.00403044
jmp 0x4738dd
inc esi
add dword [ebp - 0x28], 9
add ebx, 9
cmp esi, 0xb
jne 0x4738ae
lea eax, [ebp - 0xcf4]
call fcn.004030ec
test al, al
je 0x473695
lea eax, [ebp - 0xcf4]
call fcn.00402fb0
call fcn.00402874
test eax, eax
call fcn.0045f464
mov edx, 0x4743dc
lea eax, [ebp - 0x1b8c]
call fcn.00403038
mov edx, dword [0x47b5d8]
lea eax, [ebp - 0x1b8c]
mov cl, 0x17
call fcn.00403008
lea edx, [ebp - 0x1b8c]
lea eax, [ebp - 0x1ba8]
call fcn.00403038
mov edx, 0x473fe4
lea eax, [ebp - 0x1ba8]
mov cl, 0x18
call fcn.00403008
lea edx, [ebp - 0x1ba8]
lea eax, [ebp - 0x1b74]
call fcn.00404e58
push dword [ebp - 0x1b74]
lea edx, [ebp - 0x1bac]
mov eax, dword [0x47b570]
movzx eax, word [eax]
call fcn.00408850
push dword [ebp - 0x1bac]
push 0x4743f0
lea edx, [ebp - 0x17f8]
mov eax, dword [0x47b3f0]
call fcn.0041c150
lea edx, [ebp - 0x17f8]
lea eax, [ebp - 0x1bb4]
call fcn.00404e58
mov eax, dword [ebp - 0x1bb4]
lea edx, [ebp - 0x1bb0]
call fcn.00408764
push dword [ebp - 0x1bb0]
push 0x474404
lea eax, [ebp - 0x1b70]
mov edx, 5
call fcn.00404f74
mov edx, dword [ebp - 0x1b70]
lea eax, [ebp - 0x11f4]
mov ecx, 0xff
call fcn.00404e90
push 0
push 0x473f08
push 0x473f08
push 0x473f08
mov edx, 0x474408
lea eax, [ebp - 0x1acc]
call fcn.00403038
mov edx, dword [0x47b5d8]
lea eax, [ebp - 0x1acc]
mov cl, 0x14
call fcn.00403008
lea edx, [ebp - 0x1acc]
lea eax, [ebp - 0x1bd4]
call fcn.00403038
mov edx, 0x474414
lea eax, [ebp - 0x1bd4]
mov cl, 0x1c
call fcn.00403008
lea edx, [ebp - 0x1bd4]
lea eax, [ebp - 0x1bf4]
call fcn.00403038
mov edx, 0x474208
lea eax, [ebp - 0x1bf4]
mov cl, 0x1d
call fcn.00403008
lea edx, [ebp - 0x1bf4]
lea eax, [ebp - 0x1c14]
call fcn.00403038
mov edx, 0x474420
lea eax, [ebp - 0x1c14]
mov cl, 0x1e
call fcn.00403008
lea eax, [ebp - 0x1c14]
mov ecx, dword [0x47b404]
xor edx, edx
call fcn.00424674
mov ebx, eax
test ebx, ebx
jne 0x473aa8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
call fcn.00424d90
mov ebx, eax
test ebx, ebx
jle 0x473b2b
lea ecx, [ebp - 0x17f8]
mov eax, dword [0x47b404]
mov edx, ebx
call fcn.00423e94
lea edx, [ebp - 0x17f8]
lea eax, [ebp - 0x1c18]
call fcn.00404e58
mov edx, dword [ebp - 0x1c18]
mov eax, dword [0x47b1d0]
call fcn.00409294
mov edx, dword [0x47b1d0]
mov eax, dword [0x47b1d0]
call fcn.0041bddc
push 0
mov eax, dword [0x47b5cc]
mov eax, dword [eax]
push eax
mov eax, dword [0x47b1d0]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
push eax
call sub.user32.dll_MessageBoxA_1
cmp ebx, 0x1e
jle 0x473e0a
push 0
push 0
push 0x10
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
push eax
call sub.user32.dll_PostMessageA
jmp 0x473e0a
mov edx, edi
mov eax, dword [0x47b404]
call fcn.00424e78
cmp byte [edi + 1], 0x45
jne 0x473c16
cmp byte [edi + 2], 0x2d
jne 0x473c16
cmp byte [edi + 3], 0x30
jne 0x473ba7
cmp byte [edi + 4], 0x33
jne 0x473ba7
lea edx, [ebp - 0x17f8]
mov eax, edi
call fcn.0041c150
lea edx, [ebp - 0x17f8]
lea eax, [ebp - 0x1c20]
call fcn.00404e58
push dword [ebp - 0x1c20]
push 0x473f20
push 0x473f2c
lea eax, [ebp - 0x1c1c]
mov edx, 3
call fcn.00404f74
mov edx, dword [ebp - 0x1c1c]
mov eax, dword [0x47b1d0]
call fcn.00409294
jmp 0x473bf5
lea edx, [ebp - 0x17f8]
mov eax, edi
call fcn.0041c150
lea edx, [ebp - 0x17f8]
lea eax, [ebp - 0x1c28]
call fcn.00404e58
push dword [ebp - 0x1c28]
push 0x473f20
push 0x473f5c
lea eax, [ebp - 0x1c24]
mov edx, 3
call fcn.00404f74
mov edx, dword [ebp - 0x1c24]
mov eax, dword [0x47b1d0]
call fcn.00409294
push 0
mov eax, dword [0x47b3bc]
mov eax, dword [eax]
push eax
mov eax, dword [0x47b1d0]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
push eax
call sub.user32.dll_MessageBoxA_1
jmp 0x473dd7
mov edx, dword [0x47b378]
lea eax, [ebp - 0x1840]
call fcn.00403038
mov edx, dword [0x47b404]
lea eax, [ebp - 0x1840]
mov cl, 0x33
call fcn.00403008
lea edx, [ebp - 0x1840]
lea eax, [ebp - 0x1878]
call fcn.00403038
mov edx, 0x473f80
lea eax, [ebp - 0x1878]
mov cl, 0x37
call fcn.00403008
lea edx, [ebp - 0x1878]
lea eax, [ebp - 0x1c2c]
call fcn.00404e58
mov edx, dword [ebp - 0x1c2c]
lea eax, [ebp - 0xcf4]
call fcn.00402e0c
lea eax, [ebp - 0xcf4]
call fcn.00402b90
call fcn.00402874
test eax, eax
mov edx, edi
mov ecx, 0xff
lea eax, [ebp - 0xcf4]
call fcn.004033a8
lea eax, [ebp - 0xcf4]
call fcn.004033b4
call fcn.00402874
test eax, eax
lea eax, [ebp - 0x1c34]
mov edx, edi
call fcn.00404e58
mov eax, dword [ebp - 0x1c34]
lea edx, [ebp - 0x1c30]
call fcn.00408764
mov eax, dword [ebp - 0x1c30]
call fcn.00404eb4
cmp eax, 0xc
jne 0x473dc5
mov edx, 0x474424
lea eax, [ebp - 0x1c58]
call fcn.00403038
mov edx, dword [0x47b5d8]
lea eax, [ebp - 0x1c58]
mov cl, 0x1a
call fcn.00403008
lea edx, [ebp - 0x1c58]
lea eax, [ebp - 0x1c74]
call fcn.00403038
mov edx, 0x473fe4
lea eax, [ebp - 0x1c74]
mov cl, 0x1b
call fcn.00403008
lea edx, [ebp - 0x1c74]
lea eax, [ebp - 0x1c3c]
call fcn.00404e58
push dword [ebp - 0x1c3c]
lea edx, [ebp - 0x1c78]
mov eax, dword [0x47b570]
movzx eax, word [eax]
call fcn.00408850
push dword [ebp - 0x1c78]
push 0x4743f0
lea edx, [ebp - 0x17f8]
mov eax, dword [0x47b3f0]
call fcn.0041c150
lea edx, [ebp - 0x17f8]
lea eax, [ebp - 0x1c80]
call fcn.00404e58
mov eax, dword [ebp - 0x1c80]
lea edx, [ebp - 0x1c7c]
call fcn.00408764
push dword [ebp - 0x1c7c]
push 0x474404
lea eax, [ebp - 0x1c38]
mov edx, 5
call fcn.00404f74
mov edx, dword [ebp - 0x1c38]
lea eax, [ebp - 0x11f4]
mov ecx, 0xff
call fcn.00404e90
lea eax, [ebp - 0xcf4]
call fcn.00402fb0
call fcn.00402874
test eax, eax
lea eax, [ebp - 0x1c84]
lea edx, [ebp - 0x11f4]
call fcn.00404e58
mov edx, dword [ebp - 0x1c84]
mov eax, dword [0x47b1d0]
call fcn.00409294
mov eax, dword [0x47b1d0]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
push eax
call sub.user32.dll_SetWindowTextA
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x473f00
lea eax, [ebp - 0x1c84]
mov edx, 4
call fcn.00404c18
lea eax, [ebp - 0x1c3c]
mov edx, 0xa
call fcn.00404c18
lea eax, [ebp - 0x1bb4]
mov edx, 3
call fcn.00404c18
lea eax, [ebp - 0x1b74]
mov edx, 5
call fcn.00404c18
lea eax, [ebp - 0x1ab4]
mov edx, 0xd
call fcn.00404c18
lea eax, [ebp - 0x1a58]
mov edx, 7
call fcn.00404c18
lea eax, [ebp - 0x19a8]
mov edx, 0xe
call fcn.00404c18
lea eax, [ebp - 0x1960]
mov edx, 0x18
call fcn.00404c18
lea eax, [ebp - 0x18f0]
mov edx, 0x12
call fcn.00404c18
lea eax, [ebp - 0x18a4]
mov edx, 2
call fcn.00404c18
lea eax, [ebp - 0x18a8]
call fcn.00404bf4
lea eax, [ebp - 0x189c]
mov edx, 9
call fcn.00404c18
lea eax, [ebp - 0x180c]
mov edx, 5
call fcn.00404c18
lea eax, [ebp - 0x16f8]
call fcn.00404bf4
lea eax, [ebp - 0xc]
call fcn.00405314
ret