Function at 0x50509c
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff18
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0xe8], ebx
mov dword [ebp - 0xe4], ebx
mov dword [ebp - 0xe0], ebx
mov dword [ebp - 0x1c], ebx
mov esi, dword [ebp + 0x10]
lea edi, [ebp - 0x6c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x50688b
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov dword [ebp - 0x50], eax
xor eax, eax
mov dword [ebp - 0x54], eax
xor eax, eax
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
cmp byte [eax + 0x18], 0
je 0x505109
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x70]
mov dword [ebp - 0x44], eax
jmp 0x505112
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x14]
mov dword [ebp - 0x44], eax
cmp byte [ebp + 8], 0
je 0x505172
mov eax, dword [ebp - 0x44]
call fcn.0042aaf0
call fcn.0047ecf4
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
and eax, 0xffff
shr ax, 8
movzx eax, ax
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
shr eax, 2
sub dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0xfc
jle 0x505153
mov dword [ebp - 0x4c], 0xfc
mov eax, dword [ebp - 0x4c]
shl eax, 8
mov edx, dword [ebp - 0x48]
and edx, 0xff00ff
or eax, edx
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
call fcn.0047ef0c
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0x44]
call fcn.0042b7a0
mov byte [ebp - 0x3d], 0
mov eax, dword [ebp - 4]
call fcn.004a4068
test al, al
jne 0x505465
mov eax, dword [ebp - 4]
cmp dword [eax + 0x23c], 0
je 0x50530e
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x23c]
call fcn.004ad04c
test byte [eax + 0x1c], 0x10
jne 0x50530e
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x23c]
mov eax, dword [eax + 0x78]
cmp eax, dword [ebp - 4]
je 0x505308
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x23c]
call fcn.004ad04c
mov dword [ebp - 0x3c], eax
push 0
mov eax, dword [ebp + 0xc]
push eax
lea eax, [ebp - 0x6c]
push eax
call sub.user32.dll_OffsetRect
lea esi, [ebp - 0x6c]
lea edi, [ebp - 0x9c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0
mov eax, dword [ebp - 0xc]
call fcn.005016e8
neg eax
add eax, dword [ebp + 0xc]
mov edx, dword [ebp - 4]
add eax, dword [edx + 0x230]
push eax
lea eax, [ebp - 0x9c]
push eax
call sub.user32.dll_OffsetRect
lea ecx, [ebp - 0xa4]
lea edx, [ebp - 0x9c]
mov eax, dword [ebp - 4]
call fcn.00457f08
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x98], eax
lea ecx, [ebp - 0xa4]
lea edx, [ebp - 0x94]
mov eax, dword [ebp - 4]
call fcn.00457f08
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x90], eax
lea ecx, [ebp - 0xa4]
lea edx, [ebp - 0x9c]
mov eax, dword [ebp - 0x3c]
call fcn.00457f34
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x98], eax
lea ecx, [ebp - 0xa4]
lea edx, [ebp - 0x94]
mov eax, dword [ebp - 0x3c]
call fcn.00457f34
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x90], eax
push 0
mov eax, dword [ebp + 0xc]
neg eax
push eax
lea eax, [ebp - 0x6c]
push eax
call sub.user32.dll_OffsetRect
lea eax, [ebp - 0x9c]
push eax
push 0
mov eax, dword [ebp - 8]
call fcn.0042c3ec
mov edx, eax
lea ecx, [ebp - 0x6c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x23c]
call fcn.004ac520
mov byte [ebp - 0x3d], 1
jmp 0x505319
lea edx, [ebp - 0x6c]
mov eax, dword [ebp - 8]
call fcn.0042be80
mov eax, dword [ebp - 8]
call fcn.0042c3ec
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x2b8]
jne 0x50533e
mov eax, dword [ebp - 4]
cmp byte [eax + 0x2b4], 1
je 0x50535a
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2d0]
cmp eax, dword [ebp - 0x10]
jne 0x5053ef
cmp byte [ebp + 8], 0
jne 0x5053ef
mov eax, dword [ebp - 4]
cmp byte [eax + 0x235], 0
je 0x5053a3
dec dword [ebp - 0x60]
dec dword [ebp - 0x64]
push 0xf
lea edx, [ebp - 0x6c]
mov ecx, 2
mov eax, dword [ebp - 0x18]
call fcn.00482754
inc dword [ebp - 0x60]
inc dword [ebp - 0x64]
push 0xffffffffffffffff
push 0xffffffffffffffff
lea eax, [ebp - 0x6c]
push eax
call sub.user32.dll_InflateRect
push 1
push 1
lea eax, [ebp - 0x6c]
push eax
call sub.user32.dll_OffsetRect
jmp 0x505457
dec dword [ebp - 0x60]
dec dword [ebp - 0x64]
push 3
lea edx, [ebp - 0x6c]
mov ecx, 8
mov eax, dword [ebp - 0x18]
call fcn.00482754
push 0xc
lea edx, [ebp - 0x6c]
mov ecx, 2
mov eax, dword [ebp - 0x18]
call fcn.00482754
inc dword [ebp - 0x60]
inc dword [ebp - 0x64]
push 0xffffffffffffffff
push 0xffffffffffffffff
lea eax, [ebp - 0x6c]
push eax
call sub.user32.dll_InflateRect
push 1
push 1
lea eax, [ebp - 0x6c]
push eax
call sub.user32.dll_OffsetRect
jmp 0x505457
mov eax, dword [ebp - 4]
cmp byte [eax + 0x235], 0
je 0x50540f
push 0xf
lea edx, [ebp - 0x6c]
mov ecx, 4
mov eax, dword [ebp - 0x18]
call fcn.00482754
jmp 0x505457
push 0xc
lea edx, [ebp - 0x6c]
mov ecx, 1
mov eax, dword [ebp - 0x18]
call fcn.00482754
dec dword [ebp - 0x60]
dec dword [ebp - 0x64]
push 3
lea edx, [ebp - 0x6c]
mov ecx, 4
mov eax, dword [ebp - 0x18]
call fcn.00482754
inc dword [ebp - 0x68]
inc dword [ebp - 0x6c]
push 0xc
lea edx, [ebp - 0x6c]
mov ecx, 4
mov eax, dword [ebp - 0x18]
call fcn.00482754
dec dword [ebp - 0x60]
dec dword [ebp - 0x64]
inc dword [ebp - 0x68]
inc dword [ebp - 0x6c]
dec dword [ebp - 0x60]
jmp 0x505524
mov byte [ebp - 0x3d], 1
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x2b8]
jne 0x505483
mov eax, dword [ebp - 4]
cmp byte [eax + 0x2b4], 1
je 0x505497
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x2d0]
jne 0x5054a0
cmp byte [ebp + 8], 0
jne 0x5054a0
mov dword [ebp - 0x50], 3
jmp 0x5054d2
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x2c4]
je 0x5054c2
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x2d0]
sete al
and al, byte [ebp + 8]
je 0x5054cb
mov dword [ebp - 0x50], 2
jmp 0x5054d2
mov dword [ebp - 0x50], 1
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x6c]
push eax
push 0
push 0
mov eax, dword [ebp - 8]
call fcn.0042c3ec
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x214]
push eax
mov eax, dword [0x5be428]
mov eax, dword [eax]
call eax
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x50]
push eax
push 1
mov eax, dword [ebp - 8]
call fcn.0042c3ec
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x214]
push eax
mov eax, dword [0x5be428]
mov eax, dword [eax]
call eax
sub dword [ebp - 0x64], 4
mov eax, dword [ebp - 0x10]
cmp byte [eax + 0x1a], 0
jne 0x50553e
mov eax, dword [ebp - 0x10]
cmp byte [eax + 0x19], 0
je 0x505698
mov eax, dword [ebp - 0x64]
sub eax, 2
mov edx, dword [ebp - 0x6c]
add edx, 5
cmp eax, edx
jle 0x505698
mov eax, dword [ebp - 0x10]
cmp byte [eax + 0x1a], 0
je 0x5055b3
mov eax, dword [ebp - 0x68]
add eax, 7
push eax
lea eax, [ebp - 0x8c]
push eax
mov eax, dword [ebp - 0x64]
sub eax, 5
mov ecx, dword [ebp - 0x64]
mov edx, dword [ebp - 0x68]
call fcn.0041d318
mov eax, dword [ebp - 0x10]
cmp byte [eax + 0x1b], 0
je 0x50559c
push 0xff000012
push 1
lea ecx, [ebp - 0x8c]
xor edx, edx
mov eax, dword [ebp - 8]
call fcn.0047ddfc
jmp 0x5055b3
push 0xff000012
push 1
lea ecx, [ebp - 0x8c]
mov dl, 2
mov eax, dword [ebp - 8]
call fcn.0047ddfc
mov eax, dword [ebp - 0x10]
cmp byte [eax + 0x19], 0
je 0x505694
mov eax, dword [0x5c03d8]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x68]
add eax, 0xe
mov edx, dword [ebp - 0x60]
call fcn.0047c948
push eax
lea eax, [ebp - 0x8c]
push eax
mov edx, dword [ebp - 0x68]
add edx, 0xa
mov eax, dword [ebp - 0x64]
sub eax, 5
mov ecx, dword [ebp - 0x64]
call fcn.0041d318
cmp byte [ebp - 0x3d], 0
je 0x50564d
mov eax, dword [ebp - 0x88]
push eax
mov eax, dword [ebp - 0x80]
sub eax, dword [ebp - 0x88]
push eax
lea eax, [ebp - 0xb4]
push eax
mov ecx, dword [ebp - 0x84]
sub ecx, dword [ebp - 0x8c]
xor edx, edx
xor eax, eax
call fcn.0041d318
lea eax, [ebp - 0xb4]
push eax
mov eax, dword [ebp - 0x30]
call fcn.00430a48
push eax
mov eax, dword [ebp - 8]
call fcn.0042c3ec
mov ecx, dword [ebp - 0x8c]
mov edx, dword [ebp - 0x30]
call fcn.0047e55c
jmp 0x505694
mov eax, dword [ebp - 0x80]
sub eax, dword [ebp - 0x88]
push eax
lea eax, [ebp - 0xb4]
push eax
mov ecx, dword [ebp - 0x84]
sub ecx, dword [ebp - 0x8c]
xor edx, edx
xor eax, eax
call fcn.0041d318
lea eax, [ebp - 0xb4]
push eax
mov eax, dword [ebp - 0x30]
call fcn.00430a48
push eax
lea edx, [ebp - 0x8c]
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 8]
call fcn.0042ba10
sub dword [ebp - 0x64], 8
lea esi, [ebp - 0x6c]
lea edi, [ebp - 0x7c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
cmp byte [eax + 5], 0
je 0x505806
mov eax, dword [ebp - 0x64]
sub eax, 4
mov edx, dword [ebp - 0x6c]
add edx, 5
cmp eax, edx
jle 0x505806
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x14]
call fcn.0042b798
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x10]
call fcn.0042b4b8
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x10]
cmp byte [eax + 4], 0
je 0x5056fe
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x240]
call fcn.0042b7a0
jmp 0x505712
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x258]
call fcn.0042b7a0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x14]
call fcn.0042b798
mov edx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x10]
call fcn.0042b4c0
lea ecx, [ebp - 0xa4]
mov edx, dword [ebp - 0x68]
add edx, 0xa
mov eax, dword [ebp - 0x64]
sub eax, 4
call fcn.0041d2f0
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0xc8], eax
lea ecx, [ebp - 0xd4]
mov edx, dword [ebp - 0x68]
add edx, 0xa
mov eax, dword [ebp - 0x64]
call fcn.0041d2f0
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0x68]
add eax, 0xe
mov edx, dword [ebp - 0x60]
call fcn.0047c948
mov edx, eax
lea ecx, [ebp - 0xdc]
mov eax, dword [ebp - 0x64]
sub eax, 2
call fcn.0041d2f0
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0xb8], eax
lea edx, [ebp - 0xcc]
mov ecx, 2
mov eax, dword [ebp - 8]
call fcn.0042bf84
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0x24]
call fcn.0042b7a0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x10]
mov edx, dword [ebp - 0x20]
call fcn.0042b4c0
mov eax, dword [ebp - 0x10]
cmp byte [eax + 0x5c], 0
je 0x505802
mov eax, dword [ebp - 0x10]
cmp byte [eax + 0x88], 0
jne 0x505806
sub dword [ebp - 0x74], 6
mov eax, dword [ebp - 0x10]
cmp byte [eax + 0x5c], 0
je 0x505969
mov eax, dword [ebp - 0x10]
cmp byte [eax + 0x88], 0
je 0x505969
mov eax, dword [ebp - 0x74]
sub eax, 8
mov edx, dword [ebp - 0x7c]
add edx, 5
cmp eax, edx
jge 0x505843
xor eax, eax
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x7c]
add eax, 5
mov dword [ebp - 0x74], eax
jmp 0x50584e
mov dword [ebp - 0x14], 9
sub dword [ebp - 0x74], 9
mov eax, dword [ebp - 0x70]
sub eax, dword [ebp - 0x68]
sar eax, 1
jns 0x50585b
adc eax, 0
add eax, dword [ebp - 0x68]
add eax, 3
push eax
lea eax, [ebp - 0x8c]
push eax
mov ecx, dword [ebp - 0x74]
add ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x70]
sub edx, dword [ebp - 0x68]
sar edx, 1
jns 0x50587c
adc edx, 0
add edx, dword [ebp - 0x68]
sub edx, 3
mov eax, dword [ebp - 0x74]
call fcn.0041d318
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0x44]
call fcn.0042b7a0
cmp dword [ebp - 0x14], 0
jle 0x505969
mov eax, dword [ebp - 0x10]
cmp byte [eax + 0x5c], 1
sete al
mov edx, dword [ebp - 4]
xor al, byte [edx + 0x234]
je 0x5058c1
mov eax, dword [0x5c03c8]
mov dword [ebp - 0x30], eax
jmp 0x5058c9
mov eax, dword [0x5c03cc]
mov dword [ebp - 0x30], eax
cmp byte [ebp - 0x3d], 0
je 0x505921
mov eax, dword [ebp - 0x88]
push eax
push 6
lea eax, [ebp - 0xb4]
push eax
mov ecx, 9
xor edx, edx
xor eax, eax
call fcn.0041d318
lea eax, [ebp - 0xb4]
push eax
mov eax, dword [ebp - 0x30]
call fcn.004308d8
mov ecx, 5
xor edx, edx
call fcn.0042c354
push eax
mov eax, dword [ebp - 8]
call fcn.0042c3ec
mov ecx, dword [ebp - 0x8c]
mov edx, dword [ebp - 0x30]
call fcn.0047e55c
jmp 0x505965
push 6
lea eax, [ebp - 0xb4]
push eax
mov ecx, 9
xor edx, edx
xor eax, eax
call fcn.0041d318
lea eax, [ebp - 0xb4]
push eax
mov eax, dword [ebp - 0x30]
call fcn.004308d8
mov ecx, 5
xor edx, edx
call fcn.0042c354
push eax
lea edx, [ebp - 0x8c]
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 8]
call fcn.0042ba10
sub dword [ebp - 0x74], 3
mov eax, dword [ebp - 0x10]
mov al, byte [eax + 0x4d]
add al, 0xfe
sub al, 2
jb 0x505979
add dword [ebp - 0x7c], 5
mov eax, dword [ebp - 0x74]
cmp eax, dword [ebp - 0x7c]
jl 0x506854
mov eax, dword [ebp - 0x10]
cmp byte [eax + 0x4d], 1
jne 0x5059dd
lea eax, [ebp - 0x7c]
push eax
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x2b8]
jne 0x5059ac
mov eax, dword [ebp - 4]
cmp byte [eax + 0x2b4], 1
je 0x5059c4
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2d0]
cmp eax, dword [ebp - 0x10]
jne 0x5059c0
cmp byte [ebp + 8], 0
je 0x5059c4
xor eax, eax
jmp 0x5059c6
mov al, 1
push eax
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0x10c]
jmp 0x5064d3
mov eax, dword [ebp - 0x10]
mov al, byte [eax + 0x4d]
add al, 0xfe
sub al, 2
jae 0x505dd3
mov eax, dword [ebp - 4]
cmp dword [eax + 0x26c], 0
je 0x506854
mov eax, dword [ebp - 0x10]
cmp byte [eax + 0x4d], 2
jne 0x505a11
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x38]
mov dword [ebp - 0x2c], eax
jmp 0x505a33
lea eax, [ebp - 0xe0]
mov edx, dword [ebp - 0x10]
mov edx, dword [edx + 0x60]
call fcn.0040472c
mov eax, dword [ebp - 0xe0]
or edx, 0xffffffff
call fcn.004095b4
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xffffffff
jne 0x505a4a
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0xf0]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26c]
call fcn.00465a04
mov edx, eax
dec edx
mov ecx, dword [ebp - 0x2c]
xor eax, eax
call fcn.0047c8ec
test al, al
je 0x506854
mov dl, 1
mov eax, dword [0x42a004]
call fcn.00430310
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26c]
mov edx, dword [eax + 0x34]
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
call dword [ecx + 0x40]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26c]
mov edx, dword [eax + 0x30]
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26c]
mov eax, dword [eax + 0x30]
add eax, dword [ebp - 0x78]
push eax
lea eax, [ebp - 0x8c]
push eax
mov edx, dword [ebp - 0x74]
sub edx, dword [ebp - 0x7c]
inc edx
sar edx, 1
jns 0x505ac9
adc edx, 0
add edx, dword [ebp - 0x7c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26c]
mov eax, dword [eax + 0x34]
sar eax, 1
jns 0x505adf
adc eax, 0
sub edx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26c]
add edx, dword [eax + 0x34]
mov eax, dword [ebp - 0x74]
call fcn.0047c948
push eax
mov eax, dword [ebp - 0x74]
sub eax, dword [ebp - 0x7c]
inc eax
sar eax, 1
jns 0x505b04
adc eax, 0
add eax, dword [ebp - 0x7c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x26c]
mov edx, dword [edx + 0x34]
sar edx, 1
jns 0x505b1a
adc edx, 0
sub eax, edx
mov edx, dword [ebp - 0x7c]
call fcn.0047c91c
mov edx, dword [ebp - 0x70]
sub edx, dword [ebp - 0x78]
inc edx
sar edx, 1
jns 0x505b32
adc edx, 0
add edx, dword [ebp - 0x78]
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x26c]
mov ecx, dword [ecx + 0x30]
sar ecx, 1
jns 0x505b48
adc ecx, 0
sub edx, ecx
pop ecx
call fcn.0041d318
lea eax, [ebp - 0x8c]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26c]
mov eax, dword [eax + 0x30]
push eax
lea eax, [ebp - 0xb4]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26c]
mov edx, dword [eax + 0x34]
add edx, dword [ebp - 0x7c]
dec edx
mov eax, dword [ebp - 0x74]
call fcn.0047c948
mov edx, eax
sub edx, dword [ebp - 0x7c]
inc edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26c]
mov eax, dword [eax + 0x34]
call fcn.0047c948
mov ecx, eax
xor edx, edx
xor eax, eax
call fcn.0041d318
lea eax, [ebp - 0xb4]
push eax
mov eax, dword [ebp - 0x30]
call fcn.004308d8
mov ecx, dword [ebp - 8]
pop edx
call fcn.0042bcd0
mov eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0x64]
jge 0x505db7
mov eax, dword [ebp - 4]
cmp dword [eax + 0x270], 0
je 0x505d28
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x270]
call fcn.00465a04
cmp eax, dword [ebp - 0x2c]
jle 0x505d28
push 0
push 0x1fffffff
push 0x1fffffff
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x30]
call fcn.004308d8
call fcn.0042c3ec
push eax
mov eax, dword [ebp - 0x2c]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26c]
call fcn.00465678
push eax
call sub.comctl32.dll_ImageList_DrawEx
mov dl, 1
mov eax, dword [0x42a004]
call fcn.00430310
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x270]
mov edx, dword [eax + 0x34]
mov eax, dword [ebp - 0x34]
mov ecx, dword [eax]
call dword [ecx + 0x40]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x270]
mov edx, dword [eax + 0x30]
mov eax, dword [ebp - 0x34]
mov ecx, dword [eax]
call dword [ecx + 0x34]
push 0
push 0x1fffffff
push 0x1fffffff
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x34]
call fcn.004308d8
call fcn.0042c3ec
push eax
mov eax, dword [ebp - 0x2c]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x270]
call fcn.00465678
push eax
call sub.comctl32.dll_ImageList_DrawEx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26c]
mov eax, dword [eax + 0x30]
push eax
lea eax, [ebp - 0xb4]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26c]
mov edx, dword [eax + 0x34]
add edx, dword [ebp - 0x7c]
dec edx
mov eax, dword [ebp - 0x74]
call fcn.0047c948
mov edx, eax
sub edx, dword [ebp - 0x7c]
inc edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26c]
mov eax, dword [eax + 0x34]
call fcn.0047c948
mov ecx, eax
xor edx, edx
xor eax, eax
call fcn.0041d318
lea eax, [ebp - 0xb4]
push eax
mov eax, dword [ebp - 0x34]
push eax
push 0xff
mov eax, dword [ebp - 0x30]
call fcn.004308d8
call fcn.0042c3ec
push eax
mov eax, dword [ebp - 8]
call fcn.0042c3ec
lea edx, [ebp - 0x8c]
pop ecx
call fcn.00480d0c
mov eax, dword [ebp - 0x34]
call fcn.0040356c
jmp 0x505db7
push 0
mov eax, dword [ebp - 0x2c]
push eax
push 1
mov eax, dword [ebp - 0x30]
call fcn.004308d8
mov edx, eax
xor ecx, ecx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26c]
call fcn.00466040
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26c]
mov eax, dword [eax + 0x30]
push eax
lea eax, [ebp - 0xb4]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26c]
mov edx, dword [eax + 0x34]
add edx, dword [ebp - 0x7c]
dec edx
mov eax, dword [ebp - 0x74]
call fcn.0047c948
mov edx, eax
sub edx, dword [ebp - 0x7c]
inc edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26c]
mov eax, dword [eax + 0x34]
call fcn.0047c948
mov ecx, eax
xor edx, edx
xor eax, eax
call fcn.0041d318
lea eax, [ebp - 0xb4]
push eax
mov eax, dword [ebp - 0x30]
call fcn.004308d8
mov ecx, eax
lea edx, [ebp - 0x8c]
mov eax, dword [ebp - 8]
call fcn.0042bcd0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26c]
mov eax, dword [eax + 0x34]
add dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x30]
call fcn.0040356c
jmp 0x506854
mov eax, dword [ebp - 4]
cmp dword [eax + 0x26c], 0
je 0x506154
mov eax, dword [ebp - 0x10]
cmp byte [eax + 0x3c], 0
jne 0x506154
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x38]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xffffffff
jne 0x505e10
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0xf0]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26c]
call fcn.00465a04
mov edx, eax
dec edx
mov ecx, dword [ebp - 0x2c]
xor eax, eax
call fcn.0047c8ec
test al, al
je 0x506154
mov dl, 1
mov eax, dword [0x42a004]
call fcn.00430310
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26c]
mov edx, dword [eax + 0x34]
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
call dword [ecx + 0x40]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26c]
mov edx, dword [eax + 0x30]
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
call dword [ecx + 0x34]
push 0
lea eax, [ebp - 0x8c]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26c]
mov edx, dword [eax + 0x34]
add edx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x74]
call fcn.0047c948
mov ecx, eax
mov edx, dword [ebp - 0x70]
add edx, dword [ebp - 0x78]
inc edx
sar edx, 1
jns 0x505e9a
adc edx, 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26c]
mov eax, dword [eax + 0x30]
sar eax, 1
jns 0x505ead
adc eax, 0
sub edx, eax
mov eax, dword [ebp - 0x7c]
call fcn.0041d318
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26c]
mov eax, dword [eax + 0x30]
add eax, dword [ebp - 0x88]
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0x8c]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26c]
mov eax, dword [eax + 0x30]
push eax
lea eax, [ebp - 0xb4]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26c]
mov edx, dword [eax + 0x34]
add edx, dword [ebp - 0x7c]
dec edx
mov eax, dword [ebp - 0x74]
call fcn.0047c948
mov edx, eax
sub edx, dword [ebp - 0x7c]
inc edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26c]
mov eax, dword [eax + 0x34]
call fcn.0047c948
mov ecx, eax
xor edx, edx
xor eax, eax
call fcn.0041d318
lea eax, [ebp - 0xb4]
push eax
mov eax, dword [ebp - 0x30]
call fcn.004308d8
mov ecx, dword [ebp - 8]
pop edx
call fcn.0042bcd0
mov eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0x64]
jge 0x50613d
mov eax, dword [ebp - 4]
cmp dword [eax + 0x270], 0
je 0x5060a4
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x270]
call fcn.00465a04
cmp eax, dword [ebp - 0x2c]
jle 0x5060a4
push 0
push 0x1fffffff
push 0x1fffffff
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x30]
call fcn.004308d8
call fcn.0042c3ec
push eax
mov eax, dword [ebp - 0x2c]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26c]
call fcn.00465678
push eax
call sub.comctl32.dll_ImageList_DrawEx
mov dl, 1
mov eax, dword [0x42a004]
call fcn.00430310
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x270]
mov edx, dword [eax + 0x34]
mov eax, dword [ebp - 0x34]
mov ecx, dword [eax]
call dword [ecx + 0x40]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x270]
mov edx, dword [eax + 0x30]
mov eax, dword [ebp - 0x34]
mov ecx, dword [eax]
call dword [ecx + 0x34]
push 0
push 0x1fffffff
push 0x1fffffff
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x34]
call fcn.004308d8
call fcn.0042c3ec
push eax
mov eax, dword [ebp - 0x2c]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x270]
call fcn.00465678
push eax
call sub.comctl32.dll_ImageList_DrawEx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26c]
mov eax, dword [eax + 0x30]
push eax
lea eax, [ebp - 0xb4]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26c]
mov edx, dword [eax + 0x34]
add edx, dword [ebp - 0x7c]
dec edx
mov eax, dword [ebp - 0x74]
call fcn.0047c948
mov edx, eax
sub edx, dword [ebp - 0x7c]
inc edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26c]
mov eax, dword [eax + 0x34]
call fcn.0047c948
mov ecx, eax
xor edx, edx
xor eax, eax
call fcn.0041d318
lea eax, [ebp - 0xb4]
push eax
mov eax, dword [ebp - 0x34]
push eax
push 0xff
mov eax, dword [ebp - 0x30]
call fcn.004308d8
call fcn.0042c3ec
push eax
mov eax, dword [ebp - 8]
call fcn.0042c3ec
lea edx, [ebp - 0x8c]
pop ecx
call fcn.00480d0c
mov eax, dword [ebp - 0x34]
call fcn.0040356c
jmp 0x50613d
push 0
mov eax, dword [ebp - 0x2c]
push eax
push 1
mov eax, dword [ebp - 0x30]
call fcn.004308d8
mov edx, eax
xor ecx, ecx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26c]
call fcn.00466040
xor edx, edx
mov eax, dword [ebp - 0x30]
call fcn.00431b18
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26c]
mov eax, dword [eax + 0x30]
push eax
lea eax, [ebp - 0xb4]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26c]
mov edx, dword [eax + 0x34]
add edx, dword [ebp - 0x7c]
dec edx
mov eax, dword [ebp - 0x74]
call fcn.0047c948
mov edx, eax
sub edx, dword [ebp - 0x7c]
inc edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26c]
mov eax, dword [eax + 0x34]
call fcn.0047c948
mov ecx, eax
xor edx, edx
xor eax, eax
call fcn.0041d318
lea eax, [ebp - 0xb4]
push eax
mov eax, dword [ebp - 0x30]
call fcn.004308d8
mov ecx, eax
lea edx, [ebp - 0x8c]
mov eax, dword [ebp - 8]
call fcn.0042bcd0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26c]
mov eax, dword [eax + 0x34]
add dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x30]
call fcn.0040356c
mov eax, dword [ebp - 0x74]
cmp eax, dword [ebp - 0x7c]
jl 0x506854
mov eax, dword [ebp - 0x10]
cmp byte [eax + 0x4d], 0
jne 0x5064a5
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0x10]
mov edx, dword [edx + 0x60]
call fcn.00404c10
mov edx, dword [ebp - 0x1c]
mov eax, 0x5068a0
call fcn.004050bc
dec eax
jne 0x50627b
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2fc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0x44]
mov dword [eax + 0x24], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x68]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x2fc]
mov edx, dword [edx + 0x14]
mov dword [edx + 0xc], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x68]
call fcn.0042b294
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x2fc]
mov edx, dword [edx + 0x14]
mov byte [edx + 0x11], al
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x68]
call fcn.0042b1b4
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x2fc]
mov edx, dword [edx + 0x14]
mov dword [edx + 0x14], eax
lea edx, [ebp - 0xe4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x68]
call fcn.0042b1e4
mov edx, dword [ebp - 0xe4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2fc]
mov eax, dword [eax + 0x14]
add eax, 0x1c
call fcn.004044e8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x68]
call fcn.0042b2fc
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x2fc]
mov edx, dword [edx + 0x14]
mov byte [edx + 0x18], al
push 0
xor ecx, ecx
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2fc]
call fcn.004a67f8
lea eax, [ebp - 0x7c]
push eax
push 0x1fffffff
lea ecx, [ebp - 0xa4]
xor edx, edx
xor eax, eax
call fcn.0041d2f0
lea ecx, [ebp - 0xa4]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2fc]
call fcn.004a8e94
jmp 0x5064a5
mov eax, dword [ebp - 4]
cmp byte [eax + 0x25d], 0
je 0x5062ae
mov dword [ebp - 0x38], 2
mov eax, dword [ebp - 0x10]
mov al, byte [eax + 0x5e]
dec al
je 0x50629e
dec al
je 0x5062a7
jmp 0x5062d3
mov dword [ebp - 0x38], 1
jmp 0x5062d3
xor eax, eax
mov dword [ebp - 0x38], eax
jmp 0x5062d3
xor eax, eax
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x10]
mov al, byte [eax + 0x5e]
dec al
je 0x5062c3
dec al
je 0x5062cc
jmp 0x5062d3
mov dword [ebp - 0x38], 1
jmp 0x5062d3
mov dword [ebp - 0x38], 2
mov eax, dword [ebp - 0x10]
mov al, byte [eax + 0xc]
sub al, 1
jb 0x5062e5
je 0x5062eb
dec al
je 0x5062f1
jmp 0x5062f5
or dword [ebp - 0x38], 0
jmp 0x5062f5
or dword [ebp - 0x38], 4
jmp 0x5062f5
or dword [ebp - 0x38], 8
mov eax, dword [ebp - 4]
cmp byte [eax + 0x25d], 0
je 0x506308
or dword [ebp - 0x38], 0x20000
mov eax, dword [ebp - 4]
cmp byte [eax + 0x229], 0
je 0x506327
or dword [ebp - 0x38], 0x10
mov eax, dword [ebp - 0x10]
cmp byte [eax + 0xc], 1
jne 0x506349
or dword [ebp - 0x38], 0
jmp 0x506349
mov eax, dword [ebp - 0x10]
mov edx, dword [eax + 0x60]
mov eax, 0x5068b4
call fcn.004050bc
test eax, eax
jne 0x506349
mov eax, dword [ebp - 0x38]
or eax, 0x20
or eax, 0x8000
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x14]
mov dl, 1
call fcn.0042b8bc
xor eax, eax
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x2c4]
jne 0x5063bf
mov eax, dword [ebp - 4]
call fcn.004a4068
test al, al
jne 0x5063bf
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0x18]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0xc]
call fcn.0042b294
mov byte [ebp - 0x25], al
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0xc]
mov edx, 0xff00000d
call fcn.0042afd4
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0xc]
call fcn.0042b294
mov edx, eax
or dl, byte [0x5068bc]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0xc]
call fcn.0042b2a0
jmp 0x5063ef
mov eax, dword [ebp - 0x10]
cmp byte [eax + 0x18], 0
je 0x5063de
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x68]
mov edx, dword [eax + 0x18]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0xc]
call fcn.0042afd4
jmp 0x5063ef
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 0x10]
mov edx, dword [edx + 0x10]
call fcn.0042afd4
mov eax, dword [ebp - 4]
call fcn.004a4068
test al, al
je 0x506439
lea eax, [ebp - 0x7c]
push eax
push 0
mov eax, dword [ebp - 0x38]
or eax, 0x800
push eax
push 0xffffffffffffffff
mov eax, dword [ebp - 0x1c]
call fcn.00404d98
push eax
mov eax, dword [ebp - 0x50]
push eax
push 1
mov eax, dword [ebp - 8]
call fcn.0042c3ec
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x214]
push eax
mov eax, dword [0x5be6c8]
mov eax, dword [eax]
call eax
jmp 0x506462
lea eax, [ebp - 0x7c]
push eax
mov eax, dword [ebp - 0x38]
or eax, 0x800
push eax
mov eax, dword [ebp - 8]
call fcn.0042c3ec
push eax
mov eax, dword [ebp - 0x1c]
call fcn.00404d98
mov edx, eax
or ecx, 0xffffffff
pop eax
call fcn.00482428
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x2c4]
jne 0x506498
mov eax, dword [ebp - 4]
call fcn.004a4068
test al, al
jne 0x506498
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 0x20]
call fcn.0042afd4
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0xc]
mov dl, byte [ebp - 0x25]
call fcn.0042b2a0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x14]
xor edx, edx
call fcn.0042b8bc
lea eax, [ebp - 0xe8]
mov edx, dword [ebp - 0x1c]
call fcn.0040472c
mov edx, dword [ebp - 0xe8]
mov eax, dword [ebp - 8]
call fcn.0042c228
add eax, 3
add dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x74]
cmp eax, dword [ebp - 0x7c]
jl 0x506854
mov eax, dword [ebp - 4]
cmp dword [eax + 0x26c], 0
je 0x506854
mov eax, dword [ebp - 0x10]
cmp byte [eax + 0x3c], 2
jne 0x506854
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x38]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xffffffff
jne 0x506510
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0xf0]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26c]
call fcn.00465a04
mov edx, eax
dec edx
mov ecx, dword [ebp - 0x2c]
xor eax, eax
call fcn.0047c8ec
test al, al
je 0x506854
mov dl, 1
mov eax, dword [0x42a004]
call fcn.00430310
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26c]
mov edx, dword [eax + 0x34]
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
call dword [ecx + 0x40]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26c]
mov edx, dword [eax + 0x30]
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
call dword [ecx + 0x34]
push 0
lea eax, [ebp - 0x8c]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26c]
mov edx, dword [eax + 0x34]
add edx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x74]
call fcn.0047c948
mov ecx, eax
mov edx, dword [ebp - 0x70]
add edx, dword [ebp - 0x78]
inc edx
sar edx, 1
jns 0x50659a
adc edx, 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26c]
mov eax, dword [eax + 0x30]
sar eax, 1
jns 0x5065ad
adc eax, 0
sub edx, eax
mov eax, dword [ebp - 0x7c]
call fcn.0041d318
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26c]
mov eax, dword [eax + 0x30]
add eax, dword [ebp - 0x88]
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0x8c]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26c]
mov eax, dword [eax + 0x30]
push eax
lea eax, [ebp - 0xb4]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26c]
mov edx, dword [eax + 0x34]
add edx, dword [ebp - 0x7c]
dec edx
mov eax, dword [ebp - 0x74]
call fcn.0047c948
mov edx, eax
sub edx, dword [ebp - 0x7c]
inc edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26c]
mov eax, dword [eax + 0x34]
call fcn.0047c948
mov ecx, eax
xor edx, edx
xor eax, eax
call fcn.0041d318
lea eax, [ebp - 0xb4]
push eax
mov eax, dword [ebp - 0x30]
call fcn.004308d8
mov ecx, dword [ebp - 8]
pop edx
call fcn.0042bcd0
mov eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0x64]
jge 0x50683d
mov eax, dword [ebp - 4]
cmp dword [eax + 0x270], 0
je 0x5067a4
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x270]
call fcn.00465a04
cmp eax, dword [ebp - 0x2c]
jle 0x5067a4
push 0
push 0x1fffffff
push 0x1fffffff
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x30]
call fcn.004308d8
call fcn.0042c3ec
push eax
mov eax, dword [ebp - 0x2c]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26c]
call fcn.00465678
push eax
call sub.comctl32.dll_ImageList_DrawEx
mov dl, 1
mov eax, dword [0x42a004]
call fcn.00430310
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x270]
mov edx, dword [eax + 0x34]
mov eax, dword [ebp - 0x34]
mov ecx, dword [eax]
call dword [ecx + 0x40]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x270]
mov edx, dword [eax + 0x30]
mov eax, dword [ebp - 0x34]
mov ecx, dword [eax]
call dword [ecx + 0x34]
push 0
push 0x1fffffff
push 0x1fffffff
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x34]
call fcn.004308d8
call fcn.0042c3ec
push eax
mov eax, dword [ebp - 0x2c]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x270]
call fcn.00465678
push eax
call sub.comctl32.dll_ImageList_DrawEx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26c]
mov eax, dword [eax + 0x30]
push eax
lea eax, [ebp - 0xb4]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26c]
mov edx, dword [eax + 0x34]
add edx, dword [ebp - 0x7c]
dec edx
mov eax, dword [ebp - 0x74]
call fcn.0047c948
mov edx, eax
sub edx, dword [ebp - 0x7c]
inc edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26c]
mov eax, dword [eax + 0x34]
call fcn.0047c948
mov ecx, eax
xor edx, edx
xor eax, eax
call fcn.0041d318
lea eax, [ebp - 0xb4]
push eax
mov eax, dword [ebp - 0x34]
push eax
push 0xff
mov eax, dword [ebp - 0x30]
call fcn.004308d8
call fcn.0042c3ec
push eax
mov eax, dword [ebp - 8]
call fcn.0042c3ec
lea edx, [ebp - 0x8c]
pop ecx
call fcn.00480d0c
mov eax, dword [ebp - 0x34]
call fcn.0040356c
jmp 0x50683d
push 0
mov eax, dword [ebp - 0x2c]
push eax
push 1
mov eax, dword [ebp - 0x30]
call fcn.004308d8
mov edx, eax
xor ecx, ecx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26c]
call fcn.00466040
xor edx, edx
mov eax, dword [ebp - 0x30]
call fcn.00431b18
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26c]
mov eax, dword [eax + 0x30]
push eax
lea eax, [ebp - 0xb4]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26c]
mov edx, dword [eax + 0x34]
add edx, dword [ebp - 0x7c]
dec edx
mov eax, dword [ebp - 0x74]
call fcn.0047c948
mov edx, eax
sub edx, dword [ebp - 0x7c]
inc edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26c]
mov eax, dword [eax + 0x34]
call fcn.0047c948
mov ecx, eax
xor edx, edx
xor eax, eax
call fcn.0041d318
lea eax, [ebp - 0xb4]
push eax
mov eax, dword [ebp - 0x30]
call fcn.004308d8
mov ecx, eax
lea edx, [ebp - 0x8c]
mov eax, dword [ebp - 8]
call fcn.0042bcd0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x26c]
mov eax, dword [eax + 0x34]
add dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x30]
call fcn.0040356c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x506892
lea eax, [ebp - 0xe8]
call fcn.00404494
lea eax, [ebp - 0xe4]
call fcn.00404494
lea eax, [ebp - 0xe0]
call fcn.00404494
lea eax, [ebp - 0x1c]
call fcn.00404bb0
ret