Function at 0x503524
Capabilities:
Encode data using base64
Encrypt data using rc4 ksa
Hash data using fnv
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5ba0fc
mov eax, dword fs:[0]
push eax
mov eax, 0x3004
call fcn.005aae60
mov eax, dword [0x5f8800]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x2eb8], edi
mov eax, dword [ebp + 0xc]
mov esi, dword [edi + 0x13f194]
movzx eax, ax
push 0x100
mov dword [ebp - 0x2e84], eax
lea eax, [ebp - 0x110]
push 0
push eax
mov dword [ebp - 0x2e8c], 0
mov dword [ebp - 0x2eb0], 0
mov dword [ebp - 0x2e9c], 0
mov dword [ebp - 0x2ea0], 0
mov dword [ebp - 0x2ec4], 0
mov dword [ebp - 0x2ebc], 0
mov dword [ebp - 0x2eb4], 0
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0x118], 0
lea eax, [ebp - 0x2eac]
mov byte [ebp - 0x114], 0
xorps xmm0, xmm0
mov ecx, edi
movups xmmword [ebp - 0x128], xmm0
push eax
lea eax, [ebp - 0x278]
push eax
lea eax, [ebp - 0x2eb4]
push eax
lea eax, [ebp - 0x2ebc]
push eax
lea eax, [ebp - 0x2ec4]
push eax
lea eax, [ebp - 0x2ea0]
push eax
lea eax, [ebp - 0x2e9c]
push eax
lea eax, [ebp - 0x2eb0]
push eax
lea eax, [ebp - 0x2e8c]
push eax
call fcn.00560580
movzx eax, word [edi + 0x145582]
movzx edx, word [edi + 0x14568c]
mov dword [ebp - 0x2e88], eax
movzx eax, ax
mov dword [ebp - 0x2e98], eax
movzx eax, word [edi + 0x145584]
lea ecx, [edx - 1]
mov dword [ebp - 0x2e74], eax
mov ax, word [edi + 0x145586]
sub ax, 5
mov word [ebp - 0x2ec6], 0x61
movzx eax, ax
cmp esi, 5
mov dword [ebp - 0x2ec0], eax
setge al
cmp word [ebp - 0x2ec6], cx
sbb ah, ah
and ah, al
cmp esi, 2
mov si, 0x61
mov byte [ebp - 0x2ec5], ah
setge al
cmp si, cx
mov esi, dword [ebp - 0x2e88]
sbb cl, cl
and cl, al
mov eax, dword [ebp - 0x2e74]
mov byte [ebp - 0x2e7d], cl
movsx ecx, ax
movsx eax, si
mov dword [ebp - 0x2e7c], ecx
mov dword [ebp - 0x2ea8], eax
cmp dx, 0x14
je 0x50330e
push 0
push 0
push 0
push ecx
push eax
push 0x3d
mov ecx, edi
call fcn.0043d1d0
mov byte [ebp - 0x2ea4], 0
jmp 0x503336
movzx eax, byte [edi + 0x189654]
push eax
push 0
push 0
push ecx
push dword [ebp - 0x2ea8]
mov ecx, edi
push 0x3d
call fcn.0043d1d0
mov al, byte [edi + 0x189654]
mov byte [ebp - 0x2ea4], al
push dword [ebp - 0x2ea4]
mov ecx, edi
push 0
push 6
push dword [ebp - 0x2e7c]
push dword [ebp - 0x2ea8]
push 0x46
call fcn.0043d1d0
movsx eax, word [edi + 0x14568c]
cmp eax, 0x92
ja case.0x50336e.1
movzx eax, byte [eax + 0x517b54]
jmp dword [eax*4 + 0x517b18]
mov ecx, edi
call fcn.00566290
mov edx, eax
mov dword [ebp - 0x2e94], edx
jmp 0x503539
mov ecx, dword [edi + 0x14552c]
mov edx, 0x13
add ecx, 2
mov dword [ebp - 0x2e94], edx
mov dword [ebp - 0x2ea4], ecx
jmp 0x50354e
mov ecx, dword [ebp - 0x2e8c]
call fcn.005773c0
movd xmm0, eax
mov ecx, 1
cvtdq2pd xmm0, xmm0
divsd xmm0, qword [0x5db470]
addsd xmm0, qword [0x5c5598]
cvttsd2si edx, xmm0
mov dword [ebp - 0x2e94], edx
jmp 0x50353f
mov ecx, dword [ebp - 0x2e8c]
push 0
push 0
call fcn.005774b0
mov edx, eax
mov dword [ebp - 0x2e94], edx
jmp 0x503539
mov ecx, dword [ebp - 0x2eb0]
call fcn.00577bb0
mov edx, eax
mov dword [ebp - 0x2e94], edx
jmp 0x503539
mov ecx, dword [ebp - 0x2e8c]
call fcn.00577460
mov edx, eax
mov dword [ebp - 0x2e94], edx
jmp 0x503539
mov ecx, dword [ebp - 0x2ea0]
call fcn.005779a0
mov edx, eax
mov dword [ebp - 0x2e94], edx
jmp 0x503539
mov ecx, dword [ebp - 0x2ec4]
call fcn.005776a0
mov edx, eax
mov dword [ebp - 0x2e94], edx
jmp 0x503539
xor edx, edx
xor esi, esi
nop
cmp dword [ebp + esi*4 - 0x278], 0
lea eax, [edx + 1]
cmove eax, edx
cmp dword [ebp + esi*4 - 0x274], 0
lea ecx, [eax + 1]
cmove ecx, eax
cmp dword [ebp + esi*4 - 0x270], 0
lea eax, [ecx + 1]
cmove eax, ecx
cmp dword [ebp + esi*4 - 0x26c], 0
lea ecx, [eax + 1]
cmove ecx, eax
cmp dword [ebp + esi*4 - 0x268], 0
lea edx, [ecx + 1]
cmove edx, ecx
add esi, 5
cmp esi, 0x14
jl 0x503460
mov esi, dword [ebp - 0x2e88]
mov ecx, 1
mov dword [ebp - 0x2e94], edx
jmp 0x50353f
push dword [ebp - 0x2eac]
mov ecx, dword [ebp - 0x2e8c]
call fcn.00577410
jmp 0x5033b3
mov ecx, dword [ebp - 0x2ebc]
call fcn.00577da0
mov edx, eax
mov dword [ebp - 0x2e94], edx
jmp 0x503539
movzx eax, byte [edi + 0x13c67a]
mov ecx, dword [ebp - 0x2e8c]
push eax
movzx eax, word [edi + 0x13c67c]
push eax
call fcn.005774f0
jmp 0x5033b3
mov ecx, dword [ebp - 0x2e8c]
call fcn.005773c0
mov edx, eax
mov dword [ebp - 0x2e94], edx
jmp 0x503539
mov ecx, dword [ebp - 0x2e8c]
push 0
call fcn.00577410
mov edx, eax
mov dword [ebp - 0x2e94], eax
mov ecx, dword [edi + 0x14552c]
mov dword [ebp - 0x2ea4], ecx
cmp edx, 0xffffffff
je 0x503711
cmp edx, ecx
jle 0x5035d5
movsx eax, word [edi + 0x14558a]
push 0
push 0
push 3
movd xmm1, eax
mov eax, edx
sub eax, ecx
mov ecx, edi
cvtdq2pd xmm1, xmm1
movd xmm0, eax
mulsd xmm1, qword [0x5cd590]
cvtdq2pd xmm0, xmm0
push dword [ebp - 0x2e7c]
divsd xmm1, xmm0
push dword [ebp - 0x2ea8]
cvttsd2si esi, xmm1
push 0x3d
call fcn.0043d1d0
mov eax, dword [ebp - 0x2e7c]
mov ecx, edi
push 0
push 0
add eax, 0x23
push 7
add eax, esi
push eax
mov eax, dword [ebp - 0x2ea8]
add eax, 0xf2
push eax
push 0x3d
call fcn.0043d1d0
mov esi, dword [ebp - 0x2e88]
mov edx, dword [ebp - 0x2e94]
mov ecx, dword [ebp - 0x2ea4]
cmp byte [ebp + 0x14], 0
je 0x503676
cmp edx, ecx
jle 0x503676
mov ecx, edi
call fcn.004973c0
cmp eax, 0x3d
jne 0x50367d
mov ecx, dword [ebp - 0x2ea8]
mov eax, dword [ebp + 8]
movsx edx, ax
lea eax, [ecx + 0xeb]
cmp edx, eax
jl 0x50367d
lea eax, [ecx + 0x104]
cmp edx, eax
jg 0x50367d
mov edx, dword [ebp - 0x2e7c]
mov eax, dword [ebp + 0xc]
movsx ecx, ax
lea eax, [edx + 0xa]
cmp ecx, eax
jl 0x50367d
lea eax, [edx + 0x14a]
cmp ecx, eax
jg 0x50367d
mov eax, dword [ebp - 0x2e94]
sub ecx, edx
sub ecx, 0x23
sub eax, dword [ebp - 0x2ea4]
movd xmm1, eax
movd xmm0, ecx
cvtdq2pd xmm1, xmm1
cvtdq2pd xmm0, xmm0
mulsd xmm1, xmm0
divsd xmm1, qword [0x5cd590]
addsd xmm1, qword [0x5c5598]
cvttsd2si eax, xmm1
mov word [edi + 0x14558a], ax
jmp 0x50367d
mov byte [edi + 0x14568e], 0
mov ecx, edi
call fcn.004973c0
cmp eax, 0x3d
jne 0x5036b8
mov ax, word [ebp + 0x10]
test ax, ax
je 0x5036b8
movsx ecx, ax
mov eax, 0x77777777
imul ecx
sub edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
add word [edi + 0x14558a], ax
xor eax, eax
mov word [edi + 0x14a904], ax
mov edx, dword [ebp - 0x2e94]
mov ecx, dword [ebp - 0x2ea4]
cmp edx, ecx
jle 0x5036ec
movsx eax, word [edi + 0x14558a]
mov ecx, edx
sub ecx, dword [ebp - 0x2ea4]
cmp eax, ecx
mov ecx, dword [ebp - 0x2ea4]
jle 0x5036ec
mov eax, edx
sub eax, ecx
mov word [edi + 0x14558a], ax
cmp word [edi + 0x14558a], 0
jl 0x5036fa
cmp edx, ecx
jg 0x503711
xor eax, eax
mov word [edi + 0x14558a], ax
jmp 0x503711
mov eax, dword [ebp - 0x2e98]
mov dword [ebp - 0x2ea4], eax
movsx eax, word [edi + 0x14568c]
dec eax
cmp eax, 0x92
ja case.0x50372b.22
movzx eax, byte [eax + 0x517c00]
jmp dword [eax*4 + 0x517be8]
mov eax, dword [ebp + 8]
movsx ecx, si
add ecx, 0x19
movsx edx, ax
mov dword [ebp - 0x2e7c], ecx
cmp edx, ecx
jl 0x5037a2
movsx eax, si
add eax, 0x41
cmp edx, eax
jg 0x5037a2
mov ecx, dword [ebp - 0x2e74]
mov eax, dword [ebp + 0xc]
movsx edx, cx
add edx, 0x12c
cwde
mov dword [ebp - 0x2ea8], edx
mov dword [ebp - 0x2e78], eax
cmp eax, edx
jl 0x50379c
movsx eax, cx
mov ecx, dword [ebp - 0x2e7c]
add eax, 0x140
cmp dword [ebp - 0x2e78], eax
jg 0x5037a2
mov eax, 6
mov dword [ebp - 0x2e94], 0x14
jmp 0x5037c3
mov ecx, dword [ebp - 0x2e7c]
mov eax, dword [ebp - 0x2e74]
movsx edx, ax
add edx, 0x12c
mov dword [ebp - 0x2e94], 7
mov dword [ebp - 0x2ea8], edx
xor eax, eax
push dword [ebp - 0x2e94]
push eax
push eax
push str.Back
push edx
push ecx
mov ecx, edi
call fcn.0045dd00
cmp byte [ebp - 0x2e7d], 0
je case.0x50372b.22
cmp byte [edi + 0x14568f], 0
jne case.0x50372b.22
mov edx, dword [ebp + 8]
movsx eax, si
add eax, 0xb4
movsx ecx, dx
mov dword [ebp - 0x2e94], eax
mov eax, dword [ebp - 0x2e8c]
cmp dword [eax + 4], 0
jne 0x503894
cmp ecx, dword [ebp - 0x2e94]
jl 0x503860
movsx ecx, si
add ecx, 0xe6
movsx eax, dx
cmp eax, ecx
mov ecx, dword [ebp - 0x2e74]
jg 0x503866
mov eax, dword [ebp + 0xc]
movsx edx, ax
cmp edx, dword [ebp - 0x2ea8]
jl 0x503866
movsx eax, cx
add eax, 0x140
cmp edx, eax
jg 0x503866
mov eax, 6
mov dword [ebp - 0x2e7c], 0x14
jmp 0x503872
mov ecx, dword [ebp - 0x2e74]
xor eax, eax
mov dword [ebp - 0x2e7c], 7
push dword [ebp - 0x2e7c]
mov edx, dword [ebp - 0x2e94]
push eax
push eax
movsx eax, cx
push str.Save
add eax, 0x12c
push eax
push edx
jmp 0x503bfb
cmp ecx, dword [ebp - 0x2e94]
jl 0x5038eb
movsx ecx, si
add ecx, 0xe6
movsx eax, dx
cmp eax, ecx
jg 0x5038eb
mov eax, dword [ebp + 0xc]
movsx edx, ax
cmp edx, dword [ebp - 0x2ea8]
jl 0x5038eb
mov ecx, dword [ebp - 0x2e74]
movsx eax, cx
add eax, 0x140
cmp edx, eax
jg 0x5038eb
push 0x14
push 6
push 6
movsx eax, cx
push str.Apply
add eax, 0x12c
push eax
push dword [ebp - 0x2e94]
jmp 0x503bfb
mov eax, dword [ebp - 0x2e74]
push 7
push 0
push 0
cwde
push str.Apply
add eax, 0x12c
push eax
push dword [ebp - 0x2e94]
jmp 0x503bfb
cmp byte [edi + 0x13c675], 0
je case.0x50372b.22
mov eax, dword [ebp + 8]
movsx edx, si
add edx, 0xb4
movsx ecx, ax
cmp ecx, edx
jl 0x503987
movsx eax, si
add eax, 0xe6
cmp ecx, eax
jg 0x503987
mov ecx, dword [ebp - 0x2e74]
movsx eax, cx
add eax, 0x12c
mov dword [ebp - 0x2e7c], eax
mov eax, dword [ebp + 0xc]
cwde
mov dword [ebp - 0x2e78], eax
cmp eax, dword [ebp - 0x2e7c]
jl 0x503987
movsx eax, cx
add eax, 0x140
cmp dword [ebp - 0x2e78], eax
jg 0x503987
push 0x14
push 6
push 6
push str.Ready
push dword [ebp - 0x2e7c]
push edx
jmp 0x503bfb
mov eax, dword [ebp - 0x2e74]
push 7
push 0
push 0
cwde
push str.Ready
add eax, 0x12c
push eax
push edx
jmp 0x503bfb
mov eax, dword [ebp - 0x2e74]
mov ecx, edi
push 0x14
push 6
cwde
push 6
add eax, 0x12c
push str.Back
push eax
mov dword [ebp - 0x2e7c], eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045dd00
cmp byte [edi + 0x14568f], 0
jne case.0x50372b.22
cmp byte [ebp - 0x2e7d], 0
je case.0x50372b.22
mov eax, dword [ebp - 0x2e8c]
push 0x14
movsx ecx, si
add ecx, 0xb4
cmp dword [eax + 4], 0
push 6
push 6
jne 0x503a17
push str.Save
push dword [ebp - 0x2e7c]
push ecx
jmp 0x503bfb
push str.Apply
push dword [ebp - 0x2e7c]
push ecx
jmp 0x503bfb
mov eax, dword [ebp + 8]
movsx ecx, si
add ecx, 0x19
movsx edx, ax
mov dword [ebp - 0x2e7c], ecx
cmp edx, ecx
jl 0x503aa4
movsx eax, si
add eax, 0x41
cmp edx, eax
jg 0x503aa4
mov ecx, dword [ebp - 0x2e74]
mov eax, dword [ebp + 0xc]
movsx edx, cx
cwde
add edx, 0x12c
mov dword [ebp - 0x2e78], eax
cmp eax, edx
jl 0x503a9e
movsx eax, cx
mov ecx, dword [ebp - 0x2e7c]
add eax, 0x140
cmp dword [ebp - 0x2e78], eax
jg 0x503aa4
mov dword [ebp - 0x2ea8], 0x14
mov eax, 6
push dword [ebp - 0x2ea8]
push eax
push eax
push str.Back
push edx
push ecx
jmp 0x503bfb
mov ecx, dword [ebp - 0x2e7c]
mov eax, dword [ebp - 0x2e74]
movsx edx, ax
mov dword [ebp - 0x2ea8], 7
add edx, 0x12c
push dword [ebp - 0x2ea8]
xor eax, eax
push eax
push eax
push str.Back
push edx
push ecx
jmp 0x503bfb
mov eax, dword [ebp + 8]
movsx ecx, si
add ecx, 0x19
movsx edx, ax
mov dword [ebp - 0x2ea8], ecx
mov dword [ebp - 0x2e90], edx
cmp edx, ecx
jl 0x503b49
movsx eax, si
add eax, 0x41
cmp edx, eax
jg 0x503b49
mov ecx, dword [ebp - 0x2e74]
mov eax, dword [ebp + 0xc]
movsx edx, cx
add edx, 0x12c
cwde
mov dword [ebp - 0x2e7c], edx
mov dword [ebp - 0x2e94], eax
cmp eax, edx
jl 0x503b43
movsx eax, cx
mov ecx, dword [ebp - 0x2ea8]
add eax, 0x140
cmp dword [ebp - 0x2e94], eax
jg 0x503b49
mov eax, 6
mov dword [ebp - 0x2e78], 0x14
jmp 0x503b74
mov ecx, dword [ebp - 0x2ea8]
mov eax, dword [ebp - 0x2e74]
movsx edx, ax
mov eax, dword [ebp + 0xc]
add edx, 0x12c
cwde
mov dword [ebp - 0x2e94], eax
xor eax, eax
mov dword [ebp - 0x2e7c], edx
mov dword [ebp - 0x2e78], 7
push dword [ebp - 0x2e78]
push eax
push eax
push str.Back
push edx
push ecx
mov ecx, edi
call fcn.0045dd00
cmp byte [edi + 0x145abb], 0
jne case.0x50372b.22
movsx ecx, si
add ecx, 0xb4
mov dword [ebp - 0x2e78], ecx
cmp dword [ebp - 0x2e90], ecx
jl 0x503be3
mov eax, dword [ebp + 8]
movsx ecx, si
add ecx, 0xe6
cwde
cmp eax, ecx
mov ecx, dword [ebp - 0x2e7c]
jg 0x503be9
mov edx, dword [ebp - 0x2e94]
cmp edx, ecx
jl 0x503be9
mov eax, dword [ebp - 0x2e74]
cwde
add eax, 0x140
cmp edx, eax
jg 0x503be9
push 0x14
push 6
push 6
jmp 0x503bef
mov ecx, dword [ebp - 0x2e7c]
push 7
push 0
push 0
push str.Save
push ecx
push dword [ebp - 0x2e78]
mov ecx, edi
call fcn.0045dd00
movsx eax, word [edi + 0x14568c]
add eax, 0x14
mov dword [ebp - 0x2e94], 0
cmp eax, 0xa7
ja case.default.0x5101e6
movzx eax, byte [eax + 0x517d40]
jmp dword [eax*4 + 0x517c94]
push str.DRAW_DIALOGBOX_PVPT_MENU187
lea ecx, [ebp - 0xad0]
call fcn.0040f9f0
push 0
push 0
push 0
movsx edi, si
lea eax, [ebp - 0xad0]
push 0
movsx esi, si
mov ecx, 0x5fd3c4
push eax
mov dword [ebp - 4], 0
add edi, 0xf0
add esi, 0x19
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
mov ecx, dword [ebp - 0x2eb8]
push eax
mov eax, dword [ebp - 0x2e74]
cwde
add eax, 0x2d
push eax
push edi
push esi
call fcn.0045d060
lea ecx, [ebp - 0xad0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU188
lea ecx, [ebp - 0xae8]
call fcn.0040f9f0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0xae8]
mov dword [ebp - 4], 1
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e74]
cwde
add eax, 0x3c
push eax
push edi
push esi
mov esi, dword [ebp - 0x2eb8]
mov ecx, esi
call fcn.0045d060
lea ecx, [ebp - 0xae8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov ecx, dword [ebp - 0x2e88]
mov eax, dword [ebp + 8]
movsx edi, cx
add edi, 0x9a
movsx edx, ax
cmp edx, edi
jle 0x503d5d
movsx eax, cx
add eax, 0xe4
cmp edx, eax
jge 0x503d5d
mov ecx, dword [ebp - 0x2e74]
mov eax, dword [ebp + 0xc]
movsx edx, cx
cwde
add edx, 0x124
mov dword [ebp - 0x2e90], eax
cmp eax, edx
jle 0x503d5d
movsx eax, cx
add eax, 0x138
cmp dword [ebp - 0x2e90], eax
jge 0x503d5d
mov eax, 0x11
jmp 0x503d71
mov eax, dword [ebp - 0x2e74]
movsx edx, ax
mov eax, 0x10
add edx, 0x124
push 0
push 0
push eax
push edx
push edi
push 0x47
mov ecx, esi
call fcn.0043d1d0
jmp case.default.0x5101e6
push str.DRAW_DIALOGBOX_PVPT_MENU180
lea ecx, [ebp - 0xb00]
call fcn.0040f9f0
push 0
push 0
push 0
movsx edi, si
lea eax, [ebp - 0xb00]
push 0
movsx esi, si
mov ecx, 0x5fd3c4
push eax
mov dword [ebp - 4], 2
add edi, 0xf0
add esi, 0x19
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
mov ecx, dword [ebp - 0x2eb8]
push eax
mov eax, dword [ebp - 0x2e74]
cwde
add eax, 0x2d
push eax
push edi
push esi
call fcn.0045d060
lea ecx, [ebp - 0xb00]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU181
lea ecx, [ebp - 0xb18]
call fcn.0040f9f0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0xb18]
mov dword [ebp - 4], 3
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e74]
cwde
add eax, 0x3c
push eax
push edi
push esi
mov esi, dword [ebp - 0x2eb8]
mov ecx, esi
call fcn.0045d060
lea ecx, [ebp - 0xb18]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov ecx, dword [ebp - 0x2e88]
mov eax, dword [ebp + 8]
movsx edi, cx
add edi, 0x9a
movsx edx, ax
cmp edx, edi
jle 0x503d5d
movsx eax, cx
add eax, 0xe4
cmp edx, eax
jge 0x503d5d
mov ecx, dword [ebp - 0x2e74]
mov eax, dword [ebp + 0xc]
movsx edx, cx
cwde
add edx, 0x124
mov dword [ebp - 0x2e90], eax
cmp eax, edx
jle 0x503d5d
movsx eax, cx
add eax, 0x138
cmp dword [ebp - 0x2e90], eax
jge 0x503d5d
mov eax, 0x11
jmp 0x503d71
push str.DRAW_DIALOGBOX_PVPT_MENU179
lea ecx, [ebp - 0xb30]
call fcn.0040f9f0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0xb30]
mov dword [ebp - 4], 4
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e74]
mov ecx, edi
cwde
add eax, 0x2d
push eax
movsx eax, si
add eax, 0xf0
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d060
lea ecx, [ebp - 0xb30]
call fcn.00411640
jmp case.default.0x5101e6
push str.DRAW_DIALOGBOX_PVPT_MENU129
lea ecx, [ebp - 0xb48]
call fcn.0040f9f0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0xb48]
mov dword [ebp - 4], 5
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e74]
mov ecx, edi
cwde
add eax, 0x2d
push eax
movsx eax, si
add eax, 0xf0
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d060
lea ecx, [ebp - 0xb48]
call fcn.00411640
jmp case.default.0x5101e6
push str.DRAW_DIALOGBOX_PVPT_MENU128
lea ecx, [ebp - 0xb60]
call fcn.0040f9f0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0xb60]
mov dword [ebp - 4], 6
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e74]
mov ecx, edi
cwde
add eax, 0x2d
push eax
movsx eax, si
add eax, 0xf0
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d060
lea ecx, [ebp - 0xb60]
call fcn.00411640
jmp case.default.0x5101e6
push str.DRAW_DIALOGBOX_PVPT_MENU114
lea ecx, [ebp - 0xb78]
call fcn.0040f9f0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0xb78]
mov dword [ebp - 4], 7
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e74]
mov ecx, edi
cwde
add eax, 0x2d
push eax
movsx eax, si
add eax, 0xf0
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d060
lea ecx, [ebp - 0xb78]
call fcn.00411640
jmp case.default.0x5101e6
push str.DRAW_DIALOGBOX_PVPT_MENU105
lea ecx, [ebp - 0xb90]
call fcn.0040f9f0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0xb90]
mov dword [ebp - 4], 8
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e74]
mov ecx, edi
cwde
add eax, 0x2d
push eax
movsx eax, si
add eax, 0xf0
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d060
lea ecx, [ebp - 0xb90]
call fcn.00411640
jmp case.default.0x5101e6
push str.DRAW_DIALOGBOX_PVPT_MENU104
lea ecx, [ebp - 0xba8]
call fcn.0040f9f0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0xba8]
mov dword [ebp - 4], 9
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e74]
mov ecx, edi
cwde
add eax, 0x2d
push eax
movsx eax, si
add eax, 0xf0
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d060
lea ecx, [ebp - 0xba8]
call fcn.00411640
jmp case.default.0x5101e6
push str.DRAW_DIALOGBOX_PVPT_MENU102
lea ecx, [ebp - 0xbc0]
call fcn.0040f9f0
push 0
push 0
push 0
movsx edi, si
lea eax, [ebp - 0xbc0]
push 0
movsx esi, si
mov ecx, 0x5fd3c4
push eax
mov dword [ebp - 4], 0xa
add edi, 0xf0
add esi, 0x19
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
mov ecx, dword [ebp - 0x2eb8]
push eax
mov eax, dword [ebp - 0x2e74]
cwde
add eax, 0x2d
push eax
push edi
push esi
call fcn.0045d060
lea ecx, [ebp - 0xbc0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU103
lea ecx, [ebp - 0xbd8]
call fcn.0040f9f0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0xbd8]
mov dword [ebp - 4], 0xb
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e74]
cwde
add eax, 0x3c
push eax
push edi
push esi
mov esi, dword [ebp - 0x2eb8]
mov ecx, esi
call fcn.0045d060
lea ecx, [ebp - 0xbd8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov ecx, dword [ebp - 0x2e88]
mov eax, dword [ebp + 8]
movsx edi, cx
add edi, 0x9a
movsx edx, ax
cmp edx, edi
jle 0x503d5d
movsx eax, cx
add eax, 0xe4
cmp edx, eax
jge 0x503d5d
mov ecx, dword [ebp - 0x2e74]
mov eax, dword [ebp + 0xc]
movsx edx, cx
cwde
add edx, 0x124
mov dword [ebp - 0x2e90], eax
cmp eax, edx
jle 0x503d5d
movsx eax, cx
add eax, 0x138
cmp dword [ebp - 0x2e90], eax
jge 0x503d5d
mov eax, 0x11
jmp 0x503d71
push str.DRAW_DIALOGBOX_PVPT_MENU84
lea ecx, [ebp - 0xbf0]
call fcn.0040f9f0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0xbf0]
mov dword [ebp - 4], 0xc
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e74]
mov ecx, edi
cwde
add eax, 0x2d
push eax
movsx eax, si
add eax, 0xf0
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d060
lea ecx, [ebp - 0xbf0]
call fcn.00411640
jmp case.default.0x5101e6
push str.DRAW_DIALOGBOX_PVPT_MENU71
lea ecx, [ebp - 0xc08]
call fcn.0040f9f0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0xc08]
mov dword [ebp - 4], 0xd
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e74]
mov ecx, edi
cwde
add eax, 0x2d
push eax
movsx eax, si
add eax, 0xf0
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d060
lea ecx, [ebp - 0xc08]
call fcn.00411640
jmp case.default.0x5101e6
push str.DRAW_DIALOGBOX_PVPT_MENU68
lea ecx, [ebp - 0xc20]
call fcn.0040f9f0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0xc20]
mov dword [ebp - 4], 0xe
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e74]
mov ecx, edi
cwde
add eax, 0x2d
push eax
movsx eax, si
add eax, 0xf0
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d060
lea ecx, [ebp - 0xc20]
call fcn.00411640
jmp case.default.0x5101e6
push str.DRAW_DIALOGBOX_PVPT_MENU63
lea ecx, [ebp - 0xc38]
call fcn.0040f9f0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0xc38]
mov dword [ebp - 4], 0xf
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e74]
mov ecx, edi
cwde
add eax, 0x2d
push eax
movsx eax, si
add eax, 0xf0
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d060
lea ecx, [ebp - 0xc38]
call fcn.00411640
jmp case.default.0x5101e6
push str.DRAW_DIALOGBOX_PVPT_MENU4
lea ecx, [ebp - 0xc50]
call fcn.0040f9f0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0xc50]
mov dword [ebp - 4], 0x10
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e74]
mov ecx, edi
cwde
add eax, 0x2d
push eax
movsx eax, si
add eax, 0xf0
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d060
lea ecx, [ebp - 0xc50]
call fcn.00411640
jmp case.default.0x5101e6
push str.DRAW_DIALOGBOX_PVPT_MENU2
lea ecx, [ebp - 0xc68]
call fcn.0040f9f0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0xc68]
mov dword [ebp - 4], 0x11
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e74]
mov ecx, edi
cwde
add eax, 0x2d
push eax
movsx eax, si
add eax, 0xf0
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d060
lea ecx, [ebp - 0xc68]
call fcn.00411640
jmp case.default.0x5101e6
push str.DRAW_DIALOGBOX_PVPT_MENU1
lea ecx, [ebp - 0xc80]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, dword [ebp - 0x2e88]
cwde
push 0
push 0xc8
push 0xc8
lea esi, [eax + 0x2d]
mov dword [ebp - 4], 0x12
movsx eax, cx
add eax, 0xf0
mov dword [ebp - 0x2ea0], eax
movsx eax, cx
mov ecx, 0x5fd3c4
add eax, 0x19
mov dword [ebp - 0x2e84], eax
lea eax, [ebp - 0xc80]
push 0xdc
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push esi
push dword [ebp - 0x2ea0]
mov ecx, edi
push dword [ebp - 0x2e84]
call fcn.0045d060
lea ecx, [ebp - 0xc80]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU1
lea ecx, [ebp - 0xc98]
call fcn.0040f9f0
push 0
push 0xc8
push 0xc8
push 0xdc
lea eax, [ebp - 0xc98]
mov dword [ebp - 4], 0x13
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push esi
mov esi, dword [ebp - 0x2e88]
mov ecx, edi
movsx eax, si
add eax, 0xf1
push eax
movsx eax, si
add eax, 0x1a
push eax
call fcn.0045d060
lea ecx, [ebp - 0xc98]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
xor edx, edx
mov dword [ebp - 0x2ea8], edx
cmp dword [edi + 0x14552c], edx
jle 0x50483a
movsx eax, si
mov dword [ebp - 0x2e7c], eax
mov eax, dword [ebp - 0x2e74]
movsx esi, ax
lea eax, [edi + 0x13b664]
add esi, 0x50
mov dword [ebp - 0x2eb4], eax
mov dword [ebp - 0x2eb0], esi
mov esi, dword [ebp + 8]
mov eax, dword [ebp - 0x2eb0]
nop word [eax + eax]
movsx ecx, word [edi + 0x14558a]
add ecx, edx
mov dword [ebp - 0x2e78], ecx
cmp ecx, 0x3e8
jge 0x504834
cmp dword [edi + ecx*4 + 0x13b664], 0
je 0x504809
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2e78]
add esp, 0xc
mov edx, dword [edi + eax*4 + 0x13b664]
add edx, 8
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x2e90], eax
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x5046b0
sub ecx, dword [ebp - 0x2e90]
jne 0x50474c
push 0x19
xorps xmm0, xmm0
mov dword [ebp - 0x298], ecx
mov dword [ebp - 0x294], ecx
lea ecx, [ebp - 0x2a8]
push str.DRAW_DIALOGBOX_PVPT_MENU3
movups xmmword [ebp - 0x2a8], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x2a8]
mov dword [ebp - 4], 0x14
push eax
lea eax, [ebp - 0x2fa0]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x504717
mov ecx, dword [ecx]
mov eax, dword [ebp - 0x2e78]
mov eax, dword [edi + eax*4 + 0x13b664]
push dword [eax + 4]
lea eax, [ebp - 0x110]
push ecx
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2a8]
call fcn.00411640
jmp 0x50475d
push edx
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 8
movsx eax, si
cmp eax, dword [ebp - 0x2e84]
jle 0x5047a2
cmp eax, dword [ebp - 0x2ea0]
jge 0x5047a2
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x2eb0]
movsx edx, ax
cmp edx, ecx
jl 0x5047a2
lea eax, [ecx + 0xf]
cmp edx, eax
jge 0x5047a2
push 0
push 0xff
push 0xff
push 0xff
lea eax, [ebp - 0x110]
push eax
push ecx
jmp 0x5047eb
mov ecx, dword [ebp - 0x2eb4]
mov ecx, dword [ecx]
call fcn.0040ae00
sub eax, 1
je 0x5047d0
sub eax, 1
je 0x5047c3
sub eax, 2
jne 0x504803
push eax
push eax
push eax
jmp 0x5047d9
push 0
push 0
push 0xff
push 0
jmp 0x5047de
push 0
push 0
push 0xff
push 0xff
lea eax, [ebp - 0x110]
push eax
push dword [ebp - 0x2eb0]
mov eax, dword [ebp - 0x2ec0]
mov ecx, dword [ebp - 0x2e7c]
cwde
add eax, ecx
push eax
push ecx
mov ecx, edi
call fcn.0045d060
mov eax, dword [ebp - 0x2eb0]
mov ecx, dword [ebp - 0x2ea8]
add eax, 0xf
add dword [ebp - 0x2eb4], 4
inc ecx
mov edx, ecx
mov dword [ebp - 0x2ea8], ecx
mov dword [ebp - 0x2eb0], eax
cmp ecx, dword [edi + 0x14552c]
jl 0x504650
mov esi, dword [ebp - 0x2e88]
mov eax, dword [ebp + 8]
movsx ecx, si
add ecx, 0x9a
movsx edx, ax
cmp byte [ebp - 0x2e7d], 0
mov dword [ebp - 0x2e9c], ecx
je 0x5048b0
cmp edx, ecx
jle 0x5048a0
movsx eax, si
add eax, 0xe4
cmp edx, eax
jge 0x5048a0
mov ecx, dword [ebp - 0x2e74]
mov eax, dword [ebp + 0xc]
movsx edx, cx
add edx, 0x124
movsx esi, ax
cmp esi, edx
jle 0x50489a
movsx eax, cx
mov ecx, dword [ebp - 0x2e9c]
add eax, 0x138
cmp esi, eax
jge 0x5048a0
mov eax, 0x19
jmp 0x50490c
mov ecx, dword [ebp - 0x2e9c]
mov eax, dword [ebp - 0x2e74]
movsx edx, ax
mov eax, 0x18
jmp 0x504906
cmp edx, ecx
jl 0x5048f8
movsx eax, si
add eax, 0xe4
cmp edx, eax
jg 0x5048f8
mov ecx, dword [ebp - 0x2e74]
mov eax, dword [ebp + 0xc]
movsx edx, cx
add edx, 0x124
movsx esi, ax
cmp esi, edx
jle 0x5048f2
movsx eax, cx
mov ecx, dword [ebp - 0x2e9c]
add eax, 0x138
cmp esi, eax
jge 0x5048f8
mov eax, 0x11
jmp 0x50490c
mov ecx, dword [ebp - 0x2e9c]
mov eax, dword [ebp - 0x2e74]
movsx edx, ax
mov eax, 0x10
add edx, 0x124
push 0
push 0
push eax
push edx
push ecx
push 0x47
mov ecx, edi
call fcn.0043d1d0
jmp case.default.0x5101e6
mov edx, dword [ebp - 0x2e8c]
add edx, 8
mov ecx, edx
lea esi, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x504930
sub ecx, esi
jne 0x504990
push str.DRAW_DIALOGBOX_PVPT_MENU9
lea ecx, [ebp - 0xcb0]
call fcn.0040f9f0
lea eax, [ebp - 0xcb0]
mov dword [ebp - 4], 0x15
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push 0x29
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcb0]
call fcn.00411640
jmp 0x5049a2
push edx
lea eax, [ebp - 0x110]
push 0x29
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
add esp, 0xc
mov eax, dword [ebp - 0x2e74]
lea edx, [ebp - 0x110]
mov ecx, dword [ebp - 0x2e88]
push 0
push 0xc8
cwde
push 0xc8
push 0xdc
push edx
lea esi, [eax + 0x2d]
movsx eax, cx
add eax, 0xf0
push esi
push eax
mov dword [ebp - 0x2e90], eax
movsx eax, cx
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d060
push 0
push 0xc8
push 0xc8
push 0xdc
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
push esi
mov esi, dword [ebp - 0x2e88]
movsx eax, si
add eax, 0xf1
push eax
movsx eax, si
add eax, 0x1a
push eax
call fcn.0045d060
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
push 0x100
lea eax, [ebp - 0x228]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2e8c]
add esp, 0x18
movsx eax, word [eax + 0xae]
sub eax, 1
je 0x504b00
sub eax, 1
je 0x504ab7
sub eax, 1
jne 0x504b56
push str.DRAW_DIALOGBOX_PVPT_MENU8
lea ecx, [ebp - 0xcc8]
call fcn.0040f9f0
lea eax, [ebp - 0xcc8]
mov dword [ebp - 4], 0x18
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x228]
push 0x100
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat_s
lea ecx, [ebp - 0xcc8]
jmp 0x504b47
push str.DRAW_DIALOGBOX_PVPT_MENU7
lea ecx, [ebp - 0xce0]
call fcn.0040f9f0
lea eax, [ebp - 0xce0]
mov dword [ebp - 4], 0x17
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x228]
push 0x100
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat_s
lea ecx, [ebp - 0xce0]
jmp 0x504b47
push str.DRAW_DIALOGBOX_PVPT_MENU6
lea ecx, [ebp - 0xcf8]
call fcn.0040f9f0
lea eax, [ebp - 0xcf8]
mov dword [ebp - 4], 0x16
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x228]
push 0x100
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat_s
lea ecx, [ebp - 0xcf8]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0x5c4a20
lea eax, [ebp - 0x228]
push 0x100
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat_s
mov eax, dword [ebp - 0x2e8c]
add esp, 0xc
movsx eax, word [eax + 0xa0]
sub eax, 1
je 0x504c28
sub eax, 1
je 0x504bdf
sub eax, 1
jne 0x504c7e
push str.DRAW_DIALOGBOX_PVPT_MENU126
lea ecx, [ebp - 0xd10]
call fcn.0040f9f0
lea eax, [ebp - 0xd10]
mov dword [ebp - 4], 0x1b
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x228]
push 0x100
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat_s
lea ecx, [ebp - 0xd10]
jmp 0x504c6f
push str.DRAW_DIALOGBOX_PVPT_MENU125
lea ecx, [ebp - 0xd28]
call fcn.0040f9f0
lea eax, [ebp - 0xd28]
mov dword [ebp - 4], 0x1a
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x228]
push 0x100
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat_s
lea ecx, [ebp - 0xd28]
jmp 0x504c6f
push str.DRAW_DIALOGBOX_PVPT_MENU124
lea ecx, [ebp - 0xd40]
call fcn.0040f9f0
lea eax, [ebp - 0xd40]
mov dword [ebp - 4], 0x19
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x228]
push 0x100
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat_s
lea ecx, [ebp - 0xd40]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU10
lea ecx, [ebp - 0xd58]
call fcn.0040f9f0
lea eax, [ebp - 0x228]
mov dword [ebp - 4], 0x1c
push eax
lea eax, [ebp - 0xd58]
mov ecx, 0x5fd3c4
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd58]
call fcn.00411640
cmp byte [ebp - 0x2e7d], 0
je 0x504d27
mov eax, dword [ebp + 8]
movsx ecx, ax
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x504d27
cmp ecx, dword [ebp - 0x2e90]
jge 0x504d27
mov ecx, dword [ebp - 0x2e74]
mov eax, dword [ebp + 0xc]
movsx edx, cx
cwde
add edx, 0x41
mov dword [ebp - 0x2e90], eax
cmp eax, edx
jl 0x504d27
movsx eax, cx
add eax, 0x4f
cmp dword [ebp - 0x2e90], eax
jg 0x504d27
mov eax, 0xffffff
jmp 0x504d38
mov eax, dword [ebp - 0x2e74]
movsx edx, ax
mov eax, 0x320004
add edx, 0x41
push 0
push eax
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
movsx eax, si
push edx
add eax, 0x19
push eax
call fcn.0045d450
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2e8c]
mov edx, 0x200
add esp, 0xc
movzx ecx, word [eax + 0xac]
cmp cx, dx
jne 0x504e4a
cmp word [eax + 0xc8], 1
jne 0x504de4
push str.DRAW_DIALOGBOX_PVPT_MENU19
lea ecx, [ebp - 0xd70]
call fcn.0040f9f0
lea eax, [ebp - 0xd70]
mov dword [ebp - 4], 0x1d
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
call eax
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd70]
call fcn.00411640
jmp 0x504f68
push str.DRAW_DIALOGBOX_PVPT_MENU20
lea ecx, [ebp - 0xd88]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e8c]
mov ecx, 0x5fd3c4
mov dword [ebp - 4], 0x1e
movsx eax, word [eax + 0xc8]
push eax
lea eax, [ebp - 0xd88]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
call eax
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd88]
call fcn.00411640
jmp 0x504f68
cmp cx, 5
jle 0x504ebe
push str.DRAW_DIALOGBOX_PVPT_MENU21
lea ecx, [ebp - 0xda0]
call fcn.0040f9f0
mov ecx, dword [ebp - 0x2e8c]
mov dword [ebp - 4], 0x1f
movsx eax, word [ecx + 0xc8]
push eax
movsx eax, word [ecx + 0xac]
mov ecx, 0x5fd3c4
push eax
lea eax, [ebp - 0xda0]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
call eax
add esp, 0x10
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xda0]
call fcn.00411640
jmp 0x504f68
movsx eax, word [eax + 0xc8]
push eax
lea eax, [ebp - 0x110]
push 0x5c813c
push eax
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
call eax
mov eax, dword [ebp - 0x2e8c]
mov ecx, 1
add esp, 0xc
cmp cx, word [eax + 0xac]
jge 0x504f68
mov edi, eax
mov esi, ecx
nop dword [eax]
nop dword [eax + eax]
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
movups xmmword [ebp - 0x128], xmm0
mov byte [ebp - 0x114], 0
movsx eax, word [edi + 0xc8]
push eax
lea eax, [ebp - 0x128]
push 0x5d8794
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
lea eax, [ebp - 0x128]
push eax
lea eax, [ebp - 0x110]
push 0x100
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat_s
movsx eax, word [edi + 0xac]
inc esi
add esp, 0x18
cmp esi, eax
jl 0x504f00
mov edi, dword [ebp - 0x2eb8]
mov esi, dword [ebp - 0x2e88]
mov eax, dword [ebp + 8]
movsx ecx, ax
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x504fbc
movsx eax, si
add eax, 0xf0
cmp ecx, eax
mov ecx, dword [ebp - 0x2e74]
jge 0x504fc2
movsx eax, cx
mov dword [ebp - 0x2e90], eax
lea edx, [eax + 0x50]
mov eax, dword [ebp + 0xc]
cwde
mov dword [ebp - 0x2e78], eax
cmp eax, edx
jl 0x504fc2
mov eax, dword [ebp - 0x2e90]
add eax, 0x5e
cmp dword [ebp - 0x2e78], eax
jg 0x504fc2
mov eax, 0xffffff
jmp 0x504fcd
mov ecx, dword [ebp - 0x2e74]
movsx edx, cx
mov eax, 0x320004
add edx, 0x50
push 0
push eax
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
movsx eax, si
push edx
add eax, 0x19
push eax
call fcn.0045d450
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
lea eax, [ebp - 0x128]
push eax
mov eax, dword [ebp - 0x2e8c]
add eax, 0x3c
push eax
call fcn.005666c0
mov eax, dword [ebp - 0x2e8c]
add esp, 0x14
cmp dword [eax + 0x5c], 0xffffffff
je 0x50507f
cmp dword [eax + 0x60], 0xffffffff
je 0x50507f
push str.DRAW_DIALOGBOX_PVPT_MENU11
lea ecx, [ebp - 0xdb8]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e8c]
mov ecx, 0x5fd3c4
mov dword [ebp - 4], 0x20
push dword [eax + 0x60]
push dword [eax + 0x5c]
lea eax, [ebp - 0x128]
push eax
lea eax, [ebp - 0xdb8]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea ecx, [ebp - 0xdb8]
jmp 0x5050cc
push str.DRAW_DIALOGBOX_PVPT_MENU12
lea ecx, [ebp - 0xdd0]
call fcn.0040f9f0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x21
push eax
lea eax, [ebp - 0xdd0]
mov ecx, 0x5fd3c4
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [ebp - 0xdd0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
cmp byte [ebp - 0x2e7d], 0
je 0x505139
mov edx, dword [ebp + 8]
movsx ecx, si
add ecx, 0x1e
movsx eax, dx
cmp eax, ecx
jle 0x505139
movsx ecx, si
add ecx, 0xf0
movsx eax, dx
cmp eax, ecx
mov ecx, dword [ebp - 0x2e74]
jge 0x50513f
movsx eax, cx
mov dword [ebp - 0x2e90], eax
lea edx, [eax + 0x5f]
mov eax, dword [ebp + 0xc]
cwde
mov dword [ebp - 0x2e78], eax
cmp eax, edx
jl 0x50513f
mov eax, dword [ebp - 0x2e90]
add eax, 0x6d
cmp dword [ebp - 0x2e78], eax
jg 0x50513f
mov eax, 0xffffff
jmp 0x50514a
mov ecx, dword [ebp - 0x2e74]
movsx edx, cx
mov eax, 0x320004
add edx, 0x5f
push 0
push eax
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
movsx eax, si
push edx
add eax, 0x19
push eax
call fcn.0045d450
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov ecx, dword [ebp - 0x2e8c]
lea eax, [edi + 0x18bfa6]
add esp, 0xc
movups xmm0, xmmword [ecx + 0xd6]
push eax
push 0
sub esp, 0x10
mov eax, esp
movups xmmword [eax], xmm0
call fcn.005665b0
add esp, 0x18
test al, al
jne 0x505221
push str.DRAW_DIALOGBOX_PVPT_MENU17
lea ecx, [ebp - 0xde8]
call fcn.0040f9f0
mov ecx, dword [ebp - 0x2e8c]
mov dword [ebp - 4], 0x22
movzx eax, word [ecx + 0xe2]
push eax
movzx eax, word [ecx + 0xe0]
push eax
movzx eax, word [ecx + 0xde]
push eax
movzx eax, word [ecx + 0xdc]
push eax
movzx eax, word [ecx + 0xd8]
push eax
movzx eax, word [ecx + 0xd6]
mov ecx, 0x5fd3c4
push eax
lea eax, [ebp - 0xde8]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
lea ecx, [ebp - 0xde8]
jmp 0x50532d
mov ecx, dword [ebp - 0x2e8c]
lea eax, [edi + 0x18bfa6]
push eax
push 0
sub esp, 0x10
movups xmm0, xmmword [ecx + 0xe6]
mov eax, esp
movups xmmword [eax], xmm0
call fcn.005665b0
add esp, 0x18
test al, al
jne 0x5052c6
push str.DRAW_DIALOGBOX_PVPT_MENU18
lea ecx, [ebp - 0xe00]
call fcn.0040f9f0
mov ecx, dword [ebp - 0x2e8c]
mov dword [ebp - 4], 0x23
movzx eax, word [ecx + 0xf2]
push eax
movzx eax, word [ecx + 0xf0]
push eax
movzx eax, word [ecx + 0xee]
push eax
movzx eax, word [ecx + 0xec]
push eax
movzx eax, word [ecx + 0xe8]
push eax
movzx eax, word [ecx + 0xe6]
mov ecx, 0x5fd3c4
push eax
lea eax, [ebp - 0xe00]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
lea ecx, [ebp - 0xe00]
jmp 0x50532d
push str.DRAW_DIALOGBOX_PVPT_MENU13
lea ecx, [ebp - 0xe18]
call fcn.0040f9f0
mov ecx, dword [ebp - 0x2e8c]
mov dword [ebp - 4], 0x24
movzx eax, word [ecx + 0x74]
push eax
movzx eax, word [ecx + 0x72]
push eax
movzx eax, word [ecx + 0x70]
push eax
movzx eax, word [ecx + 0x6e]
push eax
movzx eax, word [ecx + 0x6a]
push eax
movzx eax, word [ecx + 0x68]
mov ecx, 0x5fd3c4
push eax
lea eax, [ebp - 0xe18]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
lea ecx, [ebp - 0xe18]
add esp, 0x20
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
cmp byte [ebp - 0x2e7d], 0
je 0x50539c
mov edx, dword [ebp + 8]
movsx ecx, si
add ecx, 0x1e
movsx eax, dx
cmp eax, ecx
jle 0x50539c
movsx ecx, si
add ecx, 0xf0
movsx eax, dx
cmp eax, ecx
jge 0x50539c
mov ecx, dword [ebp - 0x2e74]
movsx eax, cx
add eax, 0x6e
mov dword [ebp - 0x2e7c], eax
mov eax, dword [ebp + 0xc]
movsx edx, ax
mov dword [ebp - 0x2e78], edx
cmp edx, dword [ebp - 0x2e7c]
jl 0x50539c
movsx eax, cx
add eax, 0x7c
cmp edx, eax
jg 0x50539c
mov edx, 0xffffff
jmp 0x5053bb
mov eax, dword [ebp - 0x2e74]
mov edx, 0x320004
cwde
add eax, 0x6e
mov dword [ebp - 0x2e7c], eax
mov eax, dword [ebp + 0xc]
cwde
mov dword [ebp - 0x2e78], eax
push 0
push edx
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
push dword [ebp - 0x2e7c]
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d450
mov edx, dword [ebp + 8]
movsx ecx, si
add ecx, 0x1e
movsx eax, dx
cmp eax, ecx
jle 0x5054b2
movsx ecx, si
add ecx, 0xf0
movsx eax, dx
cmp eax, ecx
jge 0x5054b2
mov eax, dword [ebp - 0x2e74]
mov ecx, dword [ebp - 0x2e78]
cwde
lea edx, [eax + 0x8c]
mov dword [ebp - 0x2e90], edx
cmp ecx, edx
jl 0x5054b2
add eax, 0x9a
cmp ecx, eax
jg 0x5054b2
push str.DRAW_DIALOGBOX_PVPT_MENU36
lea ecx, [ebp - 0xe30]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2ec0]
movsx ecx, ax
push 0
push 0xff
movsx eax, si
add eax, ecx
mov dword [ebp - 4], 0x25
push 0xff
mov dword [ebp - 0x2e9c], eax
mov ecx, 0x5fd3c4
push 0xff
lea eax, [ebp - 0xe30]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e90]
movsx eax, si
mov ecx, edi
push dword [ebp - 0x2e9c]
push eax
call fcn.0045d060
lea ecx, [ebp - 0xe30]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
jmp 0x505562
push str.DRAW_DIALOGBOX_PVPT_MENU36
lea ecx, [ebp - 0xe48]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2ec0]
movsx ecx, ax
push 0
push 0x32
movsx eax, si
add eax, ecx
mov dword [ebp - 4], 0x26
push 0
mov dword [ebp - 0x2e9c], eax
mov ecx, 0x5fd3c4
push 4
lea eax, [ebp - 0xe48]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e74]
mov ecx, edi
cwde
add eax, 0x8c
push eax
push dword [ebp - 0x2e9c]
movsx eax, si
push eax
call fcn.0045d060
lea ecx, [ebp - 0xe48]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov edx, dword [ebp + 8]
movsx ecx, si
add ecx, 0x1e
movsx eax, dx
cmp eax, ecx
jle 0x5055f1
mov eax, dword [ebp - 0x2e9c]
movsx ecx, si
mov dword [ebp - 0x2e9c], eax
add ecx, 0xf0
movsx eax, dx
cmp eax, ecx
jge 0x5055f1
mov eax, dword [ebp - 0x2e74]
movsx ecx, ax
lea eax, [ecx + 0x9b]
mov dword [ebp - 0x2e90], eax
mov eax, dword [ebp + 0xc]
movsx edx, ax
lea eax, [ecx + 0x9b]
cmp edx, eax
jl 0x5055f1
lea eax, [ecx + 0xa9]
cmp edx, eax
jg 0x5055f1
push str.DRAW_DIALOGBOX_PVPT_MENU67
lea ecx, [ebp - 0xe60]
call fcn.0040f9f0
push 0
push 0xff
push 0xff
push 0xff
lea eax, [ebp - 0xe60]
mov dword [ebp - 4], 0x27
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e90]
movsx eax, si
mov ecx, edi
push dword [ebp - 0x2e9c]
push eax
call fcn.0045d060
lea ecx, [ebp - 0xe60]
jmp 0x50564d
push str.DRAW_DIALOGBOX_PVPT_MENU67
lea ecx, [ebp - 0xe78]
call fcn.0040f9f0
push 0
push 0x32
push 0
push 4
lea eax, [ebp - 0xe78]
mov dword [ebp - 4], 0x28
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e74]
mov ecx, edi
cwde
add eax, 0x9b
push eax
push dword [ebp - 0x2e9c]
movsx eax, si
push eax
call fcn.0045d060
lea ecx, [ebp - 0xe78]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov ecx, dword [ebp - 0x2e8c]
add esp, 0xc
call fcn.0040ae00
sub eax, 1
je 0x5057c1
sub eax, 1
je 0x50572b
sub eax, 2
jne 0x505874
push str.DRAW_DIALOGBOX_PVPT_MENU99
lea ecx, [ebp - 0xea8]
call fcn.0040f9f0
push str.DRAW_DIALOGBOX_PVPT_MENU96
lea ecx, [ebp - 0xe90]
mov dword [ebp - 4], 0x2d
call fcn.0040f9f0
lea eax, [ebp - 0xea8]
mov byte [ebp - 4], 0x2e
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0xe90]
mov ecx, 0x5fd3c4
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [ebp - 0xe90]
call fcn.00411640
lea ecx, [ebp - 0xea8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0xff
jmp 0x505852
push str.DRAW_DIALOGBOX_PVPT_MENU98
lea ecx, [ebp - 0xab8]
call fcn.0040f9f0
push str.DRAW_DIALOGBOX_PVPT_MENU96
lea ecx, [ebp - 0xec0]
mov dword [ebp - 4], 0x2b
call fcn.0040f9f0
lea eax, [ebp - 0xab8]
mov byte [ebp - 4], 0x2c
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0xec0]
mov ecx, 0x5fd3c4
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [ebp - 0xec0]
call fcn.00411640
lea ecx, [ebp - 0xab8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0xff00
jmp 0x505852
push str.DRAW_DIALOGBOX_PVPT_MENU97
lea ecx, [ebp - 0xef0]
call fcn.0040f9f0
push str.DRAW_DIALOGBOX_PVPT_MENU96
lea ecx, [ebp - 0xed8]
mov dword [ebp - 4], 0x29
call fcn.0040f9f0
lea eax, [ebp - 0xef0]
mov byte [ebp - 4], 0x2a
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0xed8]
mov ecx, 0x5fd3c4
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [ebp - 0xed8]
call fcn.00411640
lea ecx, [ebp - 0xef0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0xffff
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
mov eax, dword [ebp - 0x2e74]
cwde
add eax, 0xb9
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d450
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0xf08]
push str.DRAW_DIALOGBOX_PVPT_MENU100
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e8c]
mov ecx, 0x5fd3c4
mov dword [ebp - 4], 0x2f
mov eax, dword [eax + 0x9c]
inc eax
push eax
lea eax, [ebp - 0xf08]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xf08]
call fcn.00411640
push 0
push 0
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
mov eax, dword [ebp - 0x2e74]
cwde
add eax, 0xc8
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d450
mov ecx, dword [ebp - 0x2e8c]
movsx eax, si
mov dword [ebp - 0x2e78], eax
call fcn.0040ae00
cmp eax, 1
je 0x505a74
mov ecx, dword [ebp - 0x2e78]
mov edx, dword [ebp + 8]
add ecx, 0x1e
movsx eax, dx
cmp eax, ecx
jle 0x505a02
movsx ecx, si
add ecx, 0xf0
movsx eax, dx
cmp eax, ecx
jge 0x505a02
mov eax, dword [ebp - 0x2e74]
movsx ecx, ax
lea eax, [ecx + 0xe6]
mov dword [ebp - 0x2e90], eax
mov eax, dword [ebp + 0xc]
movsx edx, ax
lea eax, [ecx + 0xe6]
cmp edx, eax
jl 0x505a02
lea eax, [ecx + 0xf4]
cmp edx, eax
jg 0x505a02
push str.DRAW_DIALOGBOX_PVPT_MENU101
lea ecx, [ebp - 0xf20]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2ec0]
movsx ecx, ax
push 0
push 0xff
movsx eax, si
add eax, ecx
mov dword [ebp - 4], 0x30
push 0xff
mov dword [ebp - 0x2e9c], eax
mov ecx, 0x5fd3c4
push 0xff
lea eax, [ebp - 0xf20]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e90]
movsx eax, si
mov ecx, edi
push dword [ebp - 0x2e9c]
push eax
call fcn.0045d060
lea ecx, [ebp - 0xf20]
jmp 0x505ae3
push str.DRAW_DIALOGBOX_PVPT_MENU101
lea ecx, [ebp - 0xf38]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2ec0]
movsx ecx, ax
push 0
push 0x32
movsx eax, si
add eax, ecx
mov dword [ebp - 4], 0x31
push 0
mov dword [ebp - 0x2e9c], eax
mov ecx, 0x5fd3c4
push 4
lea eax, [ebp - 0xf38]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e74]
mov ecx, edi
cwde
add eax, 0xe6
push eax
push dword [ebp - 0x2e9c]
movsx eax, si
push eax
call fcn.0045d060
lea ecx, [ebp - 0xf38]
jmp 0x505ae3
push str.DRAW_DIALOGBOX_PVPT_MENU101
lea ecx, [ebp - 0xf50]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2ec0]
mov ecx, 0x5fd3c4
push 0
cwde
add eax, dword [ebp - 0x2e78]
push 0x41
push 0x41
mov dword [ebp - 0x2e9c], eax
lea eax, [ebp - 0xf50]
push 0x41
push eax
mov dword [ebp - 4], 0x32
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e74]
mov ecx, edi
cwde
add eax, 0xe6
push eax
push dword [ebp - 0x2e9c]
movsx eax, si
push eax
call fcn.0045d060
lea ecx, [ebp - 0xf50]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
cmp byte [ebp - 0x2e7d], 0
je 0x505c30
mov edx, dword [ebp + 8]
movsx ecx, si
add ecx, 0x1e
movsx eax, dx
cmp eax, ecx
jle 0x505bcf
movsx ecx, si
add ecx, 0xf0
movsx eax, dx
cmp eax, ecx
jge 0x505bcf
mov eax, dword [ebp - 0x2e74]
movsx ecx, ax
lea eax, [ecx + 0xf5]
mov dword [ebp - 0x2e90], eax
mov eax, dword [ebp + 0xc]
movsx edx, ax
lea eax, [ecx + 0xf5]
cmp edx, eax
jl 0x505bcf
lea eax, [ecx + 0x103]
cmp edx, eax
jg 0x505bcf
push str.DRAW_DIALOGBOX_PVPT_MENU186
lea ecx, [ebp - 0xf68]
call fcn.0040f9f0
push 0
push 0xff
push 0xff
push 0xff
lea eax, [ebp - 0xf68]
mov dword [ebp - 4], 0x33
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2ec0]
push dword [ebp - 0x2e90]
movsx ecx, ax
movsx eax, si
add ecx, eax
movsx eax, si
push ecx
push eax
mov ecx, edi
call fcn.0045d060
lea ecx, [ebp - 0xf68]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
jmp 0x505e19
push str.DRAW_DIALOGBOX_PVPT_MENU186
lea ecx, [ebp - 0xf80]
call fcn.0040f9f0
push 0
push 0x32
push 0
push 4
lea eax, [ebp - 0xf80]
mov dword [ebp - 4], 0x34
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e74]
mov ecx, edi
cwde
add eax, 0xf5
push eax
push dword [ebp - 0x2e9c]
movsx eax, si
push eax
call fcn.0045d060
lea ecx, [ebp - 0xf80]
jmp 0x505de5
mov eax, dword [ebp - 0x2e8c]
cmp word [eax + 0xa0], 3
je 0x505cad
mov ecx, eax
call fcn.0040ae00
cmp eax, 4
je 0x505cad
push str.DRAW_DIALOGBOX_PVPT_MENU127
lea ecx, [ebp - 0xf98]
call fcn.0040f9f0
push 0
push 0x41
push 0x41
push 0x41
lea eax, [ebp - 0xf98]
mov dword [ebp - 4], 0x37
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e74]
mov ecx, edi
cwde
add eax, 0xf5
push eax
push dword [ebp - 0x2e9c]
movsx eax, si
push eax
call fcn.0045d060
lea ecx, [ebp - 0xf98]
jmp 0x505de5
mov edx, dword [ebp + 8]
movsx ecx, si
add ecx, 0x1e
movsx eax, dx
cmp eax, ecx
jle 0x505d80
movsx ecx, si
add ecx, 0xf0
movsx eax, dx
cmp eax, ecx
jge 0x505d80
mov eax, dword [ebp - 0x2e74]
movsx ecx, ax
lea eax, [ecx + 0xf5]
mov dword [ebp - 0x2e90], eax
mov eax, dword [ebp + 0xc]
movsx edx, ax
lea eax, [ecx + 0xf5]
cmp edx, eax
jl 0x505d80
lea eax, [ecx + 0x103]
cmp edx, eax
jg 0x505d80
push str.DRAW_DIALOGBOX_PVPT_MENU127
lea ecx, [ebp - 0xfb0]
call fcn.0040f9f0
push 0
push 0xff
push 0xff
push 0xff
lea eax, [ebp - 0xfb0]
mov dword [ebp - 4], 0x35
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2ec0]
push dword [ebp - 0x2e90]
movsx ecx, ax
movsx eax, si
add ecx, eax
movsx eax, si
push ecx
push eax
mov ecx, edi
call fcn.0045d060
lea ecx, [ebp - 0xfb0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
jmp 0x505e19
push str.DRAW_DIALOGBOX_PVPT_MENU127
lea ecx, [ebp - 0xfc8]
call fcn.0040f9f0
push 0
push 0x32
push 0
push 4
lea eax, [ebp - 0xfc8]
mov dword [ebp - 4], 0x36
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e74]
cwde
add eax, 0xf5
push eax
mov eax, dword [ebp - 0x2ec0]
movsx ecx, ax
movsx eax, si
add ecx, eax
movsx eax, si
push ecx
push eax
mov ecx, edi
call fcn.0045d060
lea ecx, [ebp - 0xfc8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov edx, dword [ebp + 8]
movsx ecx, si
add ecx, 0x1e
movsx eax, dx
cmp eax, ecx
jle 0x505eb1
movsx ecx, si
add ecx, 0xf0
movsx eax, dx
cmp eax, ecx
jge 0x505eb1
mov eax, dword [ebp - 0x2e74]
movsx ecx, ax
lea eax, [ecx + 0x104]
mov dword [ebp - 0x2e90], eax
mov eax, dword [ebp + 0xc]
movsx edx, ax
lea eax, [ecx + 0x104]
cmp edx, eax
jl 0x505eb1
lea eax, [ecx + 0x112]
cmp edx, eax
jg 0x505eb1
push str.DRAW_DIALOGBOX_PVPT_MENU123
lea ecx, [ebp - 0xfe0]
call fcn.0040f9f0
push 0
push 0xff
push 0xff
push 0xff
lea eax, [ebp - 0xfe0]
mov dword [ebp - 4], 0x38
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2ec0]
push dword [ebp - 0x2e90]
movsx ecx, ax
movsx eax, si
add ecx, eax
movsx eax, si
push ecx
push eax
mov ecx, edi
call fcn.0045d060
lea ecx, [ebp - 0xfe0]
jmp 0x505f16
push str.DRAW_DIALOGBOX_PVPT_MENU123
lea ecx, [ebp - 0xff8]
call fcn.0040f9f0
push 0
push 0x32
push 0
push 4
lea eax, [ebp - 0xff8]
mov dword [ebp - 4], 0x39
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e74]
cwde
add eax, 0x104
push eax
mov eax, dword [ebp - 0x2ec0]
movsx ecx, ax
movsx eax, si
add ecx, eax
movsx eax, si
push ecx
push eax
mov ecx, edi
call fcn.0045d060
lea ecx, [ebp - 0xff8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
cmp byte [ebp - 0x2e7d], 0
jne 0x5060c7
cmp byte [edi + 0x13c677], 0
movsx ecx, si
mov dword [ebp - 0x2e7c], ecx
je 0x505fdc
mov edx, dword [ebp + 8]
lea eax, [ecx + 0xa0]
mov dword [ebp - 0x2e7c], eax
movsx eax, dx
cmp eax, dword [ebp - 0x2e7c]
jl 0x505fb9
movsx ecx, si
add ecx, 0xe6
movsx eax, dx
cmp eax, ecx
jg 0x505fb9
mov ecx, dword [ebp - 0x2e74]
movsx eax, cx
add eax, 0x12c
mov dword [ebp - 0x2e78], eax
mov eax, dword [ebp + 0xc]
movsx edx, ax
cmp edx, dword [ebp - 0x2e78]
jl 0x505fb9
movsx eax, cx
add eax, 0x140
cmp edx, eax
jg 0x505fb9
push 0x14
push 6
push 6
push str.Teleport
push dword [ebp - 0x2e78]
push dword [ebp - 0x2e7c]
jmp 0x5060c0
mov eax, dword [ebp - 0x2e74]
push 7
push 0
push 0
cwde
push str.Teleport
add eax, 0x12c
push eax
push dword [ebp - 0x2e7c]
jmp 0x5060c0
cmp byte [edi + 0x13c674], 0
je 0x5060a1
mov ecx, dword [ebp - 0x2e8c]
call fcn.005772f0
test al, al
je 0x506099
mov ecx, dword [ebp - 0x2e7c]
mov edx, dword [ebp + 8]
add ecx, 0xaa
mov esi, dword [ebp - 0x2e88]
movsx eax, dx
cmp eax, ecx
jl 0x506074
movsx ecx, si
add ecx, 0xe6
movsx eax, dx
cmp eax, ecx
jg 0x506074
mov ecx, dword [ebp - 0x2e74]
movsx eax, cx
add eax, 0x12c
mov dword [ebp - 0x2e78], eax
mov eax, dword [ebp + 0xc]
movsx edx, ax
cmp edx, dword [ebp - 0x2e78]
jl 0x506074
movsx eax, cx
add eax, 0x140
cmp edx, eax
jg 0x506074
mov eax, dword [ebp - 0x2e7c]
push 0x14
push 6
push 6
push str.Register
push dword [ebp - 0x2e78]
add eax, 0xaa
jmp 0x5060bf
push 7
push 0
push 0
mov eax, dword [ebp - 0x2e74]
cwde
add eax, 0x12c
push str.Register
push eax
mov eax, dword [ebp - 0x2e7c]
add eax, 0xaa
jmp 0x5060bf
push 0xf
push 0xf
push 0xf
jmp 0x50607a
mov eax, dword [ebp - 0x2e74]
push 0xf
push 0xf
push 0xf
cwde
add eax, 0x12c
push str.Teleport
push eax
lea eax, [ecx + 0xa0]
push eax
mov ecx, edi
call fcn.0045dd00
mov ecx, edi
call fcn.0047cff0
mov edx, dword [ebp + 8]
movsx ecx, si
add ecx, 0x1e
movsx eax, dx
cmp eax, ecx
jle case.default.0x5101e6
movsx ecx, si
add ecx, 0xf0
movsx eax, dx
cmp eax, ecx
jge case.default.0x5101e6
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x2e74]
movsx edx, ax
movsx eax, cx
add eax, 0x6e
cmp edx, eax
jl case.default.0x5101e6
movsx eax, cx
add eax, 0x7c
cmp edx, eax
jg case.default.0x5101e6
push str.DRAW_DIALOGBOX_PVPT_MENU17
lea ecx, [ebp - 0x1010]
call fcn.0040f9f0
mov esi, dword [ebp - 0x2e8c]
mov ecx, 0x5fd3c4
mov dword [ebp - 4], 0x3a
movzx eax, word [esi + 0xe2]
push eax
movzx eax, word [esi + 0xe0]
push eax
movzx eax, word [esi + 0xde]
push eax
movzx eax, word [esi + 0xdc]
push eax
movzx eax, word [esi + 0xd8]
push eax
movzx eax, word [esi + 0xd6]
push eax
lea eax, [ebp - 0x1010]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [edi + 0x18a074]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x20
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1010]
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU18
lea ecx, [ebp - 0x1028]
call fcn.0040f9f0
movzx eax, word [esi + 0xf2]
mov ecx, 0x5fd3c4
push eax
movzx eax, word [esi + 0xf0]
push eax
movzx eax, word [esi + 0xee]
push eax
movzx eax, word [esi + 0xec]
push eax
movzx eax, word [esi + 0xe8]
push eax
movzx eax, word [esi + 0xe6]
push eax
lea eax, [ebp - 0x1028]
mov dword [ebp - 4], 0x3b
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [edi + 0x18a200]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x20
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1028]
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU13
lea ecx, [ebp - 0x1040]
call fcn.0040f9f0
movzx eax, word [esi + 0x74]
push eax
movzx eax, word [esi + 0x72]
push eax
movzx eax, word [esi + 0x70]
push eax
movzx eax, word [esi + 0x6e]
push eax
movzx eax, word [esi + 0x6a]
push eax
movzx eax, word [esi + 0x68]
push eax
mov dword [ebp - 4], 0x3c
lea eax, [ebp - 0x1040]
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [edi + 0x18a38c]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x20
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1040]
call fcn.00411640
jmp 0x517aed
mov edx, dword [ebp - 0x2e8c]
add edx, 8
mov ecx, edx
lea esi, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x5062b0
sub ecx, esi
jne 0x506310
push str.DRAW_DIALOGBOX_PVPT_MENU9
lea ecx, [ebp - 0x1058]
call fcn.0040f9f0
lea eax, [ebp - 0x1058]
mov dword [ebp - 4], 0x3d
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push 0x29
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1058]
call fcn.00411640
jmp 0x506322
push edx
lea eax, [ebp - 0x110]
push 0x29
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
add esp, 0xc
mov eax, dword [ebp - 0x2e74]
lea edx, [ebp - 0x110]
mov ecx, dword [ebp - 0x2e88]
push 0
push 0xc8
cwde
push 0xc8
push 0xdc
push edx
lea esi, [eax + 0x2d]
movsx eax, cx
add eax, 0xf0
push esi
push eax
mov dword [ebp - 0x2e90], eax
movsx eax, cx
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d060
push 0
push 0xc8
push 0xc8
push 0xdc
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
push esi
mov esi, dword [ebp - 0x2e88]
movsx eax, si
add eax, 0xf1
push eax
movsx eax, si
add eax, 0x1a
push eax
call fcn.0045d060
mov ecx, edi
call fcn.0047cff0
mov ecx, dword [ebp - 0x2ea4]
xor eax, eax
cmp ax, word [edi + 0x14558a]
jl 0x5065cb
test ecx, ecx
jle 0x5065cb
push 0x100
push eax
lea eax, [ebp - 0x110]
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2e8c]
mov ecx, 0x200
add esp, 0xc
movzx eax, word [eax + 0xac]
cmp ax, cx
jne 0x506443
push str.DRAW_DIALOGBOX_PVPT_MENU19
lea ecx, [ebp - 0x1070]
call fcn.0040f9f0
lea eax, [ebp - 0x1070]
mov dword [ebp - 4], 0x3e
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
call eax
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1070]
call fcn.00411640
jmp 0x50645b
cwde
push eax
lea eax, [ebp - 0x110]
push 0x5c813c
push eax
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
call eax
add esp, 0xc
cmp byte [ebp - 0x2e7d], 0
je 0x50652d
mov eax, dword [ebp + 8]
movsx ecx, ax
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x50652d
cmp ecx, dword [ebp - 0x2e90]
jge 0x50652d
mov ecx, dword [ebp - 0x2e74]
mov eax, dword [ebp + 0xc]
movsx edx, cx
add edx, 0x41
cwde
mov dword [ebp - 0x2e78], edx
mov dword [ebp - 0x2e90], eax
cmp eax, edx
jl 0x50652d
movsx eax, cx
add eax, 0x4f
cmp dword [ebp - 0x2e90], eax
jg 0x50652d
push str.DRAW_DIALOGBOX_PVPT_MENU22
lea ecx, [ebp - 0x1088]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x1088]
mov dword [ebp - 4], 0x3f
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e78]
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x1088]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0xffffff
lea eax, [ebp - 0x110]
push eax
push dword [ebp - 0x2e78]
jmp 0x5065a8
push str.DRAW_DIALOGBOX_PVPT_MENU22
lea ecx, [ebp - 0x10a0]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
cwde
push 0
push 0x320004
mov dword [ebp - 4], 0x40
lea esi, [eax + 0x41]
lea eax, [ebp - 0x10a0]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e88]
mov ecx, edi
cwde
push esi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x10a0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0x320004
lea eax, [ebp - 0x110]
push eax
push esi
mov esi, dword [ebp - 0x2e88]
movsx eax, si
mov ecx, edi
add eax, 0xb4
push eax
call fcn.0045d450
mov ecx, dword [ebp - 0x2ea4]
mov eax, 1
mov dword [ebp - 0x2e94], eax
jmp 0x5065cd
xor eax, eax
mov edx, 1
cmp dx, word [edi + 0x14558a]
jl 0x5067b9
cmp eax, ecx
jge 0x5067b9
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2e8c]
movsx eax, word [eax + 0xc8]
push eax
lea eax, [ebp - 0x110]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
cmp byte [ebp - 0x2e7d], 0
je 0x506710
mov eax, dword [ebp + 8]
movsx ecx, ax
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x506710
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x506710
mov eax, dword [ebp - 0x2e74]
mov ecx, dword [ebp - 0x2e94]
cwde
shl ecx, 4
sub ecx, dword [ebp - 0x2e94]
mov dword [ebp - 0x2e90], eax
lea edx, [eax + 0x41]
mov eax, dword [ebp + 0xc]
add edx, ecx
cwde
mov dword [ebp - 0x2e78], edx
mov dword [ebp - 0x2e84], eax
cmp eax, edx
jl 0x506710
mov eax, dword [ebp - 0x2e90]
add eax, 0x4f
add eax, ecx
cmp dword [ebp - 0x2e84], eax
jg 0x506710
push str.DRAW_DIALOGBOX_PVPT_MENU23
lea ecx, [ebp - 0x10b8]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x10b8]
mov dword [ebp - 4], 0x41
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e78]
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x10b8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0xffffff
lea eax, [ebp - 0x110]
push eax
push dword [ebp - 0x2e78]
jmp 0x50679c
push str.DRAW_DIALOGBOX_PVPT_MENU23
lea ecx, [ebp - 0x10d0]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, dword [ebp - 0x2e94]
cwde
shl ecx, 4
sub ecx, dword [ebp - 0x2e94]
push 0
lea esi, [eax + 0x41]
mov dword [ebp - 4], 0x42
push 0x320004
lea eax, [ebp - 0x10d0]
add esi, ecx
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e88]
mov ecx, edi
cwde
push esi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x10d0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0x320004
lea eax, [ebp - 0x110]
push eax
push esi
mov esi, dword [ebp - 0x2e88]
movsx eax, si
mov ecx, edi
add eax, 0xb4
push eax
call fcn.0045d450
mov eax, dword [ebp - 0x2e94]
inc eax
mov dword [ebp - 0x2e94], eax
mov ecx, 2
cmp cx, word [edi + 0x14558a]
mov ecx, dword [ebp - 0x2ea4]
jl 0x5069b1
cmp eax, ecx
jge 0x5069b1
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2e8c]
movsx eax, word [eax + 0xc6]
push eax
lea eax, [ebp - 0x110]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
cmp byte [ebp - 0x2e7d], 0
je 0x506902
mov eax, dword [ebp + 8]
movsx ecx, ax
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x506902
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x506902
mov eax, dword [ebp - 0x2e74]
mov ecx, dword [ebp - 0x2e94]
cwde
shl ecx, 4
sub ecx, dword [ebp - 0x2e94]
mov dword [ebp - 0x2e90], eax
lea edx, [eax + 0x41]
mov eax, dword [ebp + 0xc]
add edx, ecx
cwde
mov dword [ebp - 0x2e78], edx
mov dword [ebp - 0x2e84], eax
cmp eax, edx
jl 0x506902
mov eax, dword [ebp - 0x2e90]
add eax, 0x4f
add eax, ecx
cmp dword [ebp - 0x2e84], eax
jg 0x506902
push str.DRAW_DIALOGBOX_PVPT_MENU24
lea ecx, [ebp - 0x10e8]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x10e8]
mov dword [ebp - 4], 0x43
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e78]
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x10e8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0xffffff
lea eax, [ebp - 0x110]
push eax
push dword [ebp - 0x2e78]
jmp 0x50698e
push str.DRAW_DIALOGBOX_PVPT_MENU24
lea ecx, [ebp - 0x1100]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, dword [ebp - 0x2e94]
cwde
shl ecx, 4
sub ecx, dword [ebp - 0x2e94]
push 0
lea esi, [eax + 0x41]
mov dword [ebp - 4], 0x44
push 0x320004
lea eax, [ebp - 0x1100]
add esi, ecx
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e88]
mov ecx, edi
cwde
push esi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x1100]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0x320004
lea eax, [ebp - 0x110]
push eax
push esi
mov esi, dword [ebp - 0x2e88]
movsx eax, si
mov ecx, edi
add eax, 0xb4
push eax
call fcn.0045d450
mov eax, dword [ebp - 0x2e94]
mov ecx, dword [ebp - 0x2ea4]
inc eax
mov dword [ebp - 0x2e94], eax
mov edx, 3
cmp dx, word [edi + 0x14558a]
jl 0x506fc7
cmp eax, ecx
jge 0x506fc7
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2e8c]
add esp, 0xc
movsx eax, word [eax + 0xc2]
dec eax
cmp eax, 3
ja case.default.0x5069f8
jmp dword [eax*4 + 0x517de8]
push str.DRAW_DIALOGBOX_PVPT_MENU78
lea ecx, [ebp - 0x1118]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e8c]
mov ecx, 0x5fd3c4
mov dword [ebp - 4], 0x45
movsx eax, word [eax + 0xc4]
push eax
lea eax, [ebp - 0x1118]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
lea ecx, [ebp - 0x1118]
jmp 0x506b4f
push str.DRAW_DIALOGBOX_PVPT_MENU79
lea ecx, [ebp - 0x1130]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e8c]
mov ecx, 0x5fd3c4
mov dword [ebp - 4], 0x46
movsx eax, word [eax + 0xc4]
push eax
lea eax, [ebp - 0x1130]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
lea ecx, [ebp - 0x1130]
jmp 0x506b4f
push str.DRAW_DIALOGBOX_PVPT_MENU88
lea ecx, [ebp - 0x1148]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e8c]
mov ecx, 0x5fd3c4
mov dword [ebp - 4], 0x47
movsx eax, word [eax + 0xc4]
push eax
lea eax, [ebp - 0x1148]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
lea ecx, [ebp - 0x1148]
jmp 0x506b4f
push str.DRAW_DIALOGBOX_PVPT_MENU89
lea ecx, [ebp - 0x1160]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e8c]
mov ecx, 0x5fd3c4
mov dword [ebp - 4], 0x48
movsx eax, word [eax + 0xc4]
push eax
lea eax, [ebp - 0x1160]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
lea ecx, [ebp - 0x1160]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
cmp byte [ebp - 0x2e7d], 0
je 0x506c65
mov eax, dword [ebp + 8]
movsx ecx, ax
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x506c65
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x506c65
mov eax, dword [ebp - 0x2e74]
mov ecx, dword [ebp - 0x2e94]
cwde
shl ecx, 4
sub ecx, dword [ebp - 0x2e94]
mov dword [ebp - 0x2e90], eax
lea edx, [eax + 0x41]
mov eax, dword [ebp + 0xc]
add edx, ecx
cwde
mov dword [ebp - 0x2e78], edx
mov dword [ebp - 0x2e84], eax
cmp eax, edx
jl 0x506c65
mov eax, dword [ebp - 0x2e90]
add eax, 0x4f
add eax, ecx
cmp dword [ebp - 0x2e84], eax
jg 0x506c65
push str.DRAW_DIALOGBOX_PVPT_MENU90
lea ecx, [ebp - 0x1178]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x1178]
mov dword [ebp - 4], 0x49
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e78]
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x1178]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0xffffff
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
push dword [ebp - 0x2e78]
movsx eax, si
add eax, 0xb4
push eax
call fcn.0045d450
jmp 0x506d60
push str.DRAW_DIALOGBOX_PVPT_MENU90
lea ecx, [ebp - 0x1190]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, dword [ebp - 0x2e94]
cwde
shl ecx, 4
sub ecx, dword [ebp - 0x2e94]
mov dword [ebp - 0x2e78], eax
add eax, 0x41
add eax, ecx
mov dword [ebp - 0x2e90], ecx
push 0
mov dword [ebp - 0x2e7c], eax
mov ecx, 0x5fd3c4
push 0x320004
lea eax, [ebp - 0x1190]
mov dword [ebp - 4], 0x4a
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x1190]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0x320004
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
push dword [ebp - 0x2e7c]
movsx eax, si
add eax, 0xb4
push eax
call fcn.0045d450
mov eax, dword [ebp + 8]
movsx edx, ax
mov eax, dword [ebp + 0xc]
movsx ecx, ax
movsx eax, si
add eax, 0x1e
cmp edx, eax
jle case.default.0x506d77
movsx eax, si
add eax, 0xf0
cmp edx, eax
jge case.default.0x506d77
cmp ecx, dword [ebp - 0x2e7c]
jl case.default.0x506d77
mov eax, dword [ebp - 0x2e90]
add eax, 0x4f
add eax, dword [ebp - 0x2e78]
cmp ecx, eax
jg case.default.0x506d77
mov eax, dword [ebp - 0x2e8c]
movsx eax, word [eax + 0xc2]
dec eax
cmp eax, 3
ja case.default.0x506d77
jmp dword [eax*4 + 0x517df8]
push str.DRAW_DIALOGBOX_PVPT_MENU219
lea ecx, [ebp - 0x11a8]
call fcn.0040f9f0
lea eax, [ebp - 0x11a8]
mov dword [ebp - 4], 0x4b
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [edi + 0x18a074]
push 0x80
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
lea ecx, [ebp - 0x11a8]
jmp 0x506fab
push str.DRAW_DIALOGBOX_PVPT_MENU220
lea ecx, [ebp - 0x11c0]
call fcn.0040f9f0
lea eax, [ebp - 0x11c0]
mov dword [ebp - 4], 0x4c
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [edi + 0x18a074]
push 0x80
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
lea ecx, [ebp - 0x11c0]
jmp 0x506fab
push str.DRAW_DIALOGBOX_PVPT_MENU221
lea ecx, [ebp - 0x11d8]
call fcn.0040f9f0
lea eax, [ebp - 0x11d8]
mov dword [ebp - 4], 0x4d
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [edi + 0x18a074]
push 0x80
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
lea ecx, [ebp - 0x11d8]
jmp 0x506fab
push str.DRAW_DIALOGBOX_PVPT_MENU222
lea ecx, [ebp - 0x11f0]
call fcn.0040f9f0
lea eax, [ebp - 0x11f0]
mov dword [ebp - 4], 0x4e
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [edi + 0x18a074]
push 0x80
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x11f0]
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU223
lea ecx, [ebp - 0x1208]
call fcn.0040f9f0
lea eax, [ebp - 0x1208]
mov dword [ebp - 4], 0x4f
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [edi + 0x18a200]
push 0x80
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1208]
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU224
lea ecx, [ebp - 0x1220]
call fcn.0040f9f0
lea eax, [ebp - 0x1220]
mov dword [ebp - 4], 0x50
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [edi + 0x18a38c]
push 0x80
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1220]
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU225
lea ecx, [ebp - 0x1238]
call fcn.0040f9f0
lea eax, [ebp - 0x1238]
mov dword [ebp - 4], 0x51
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [edi + 0x18a518]
push 0x80
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
lea ecx, [ebp - 0x1238]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, dword [ebp - 0x2e94]
inc eax
mov dword [ebp - 0x2e94], eax
mov ecx, 4
cmp cx, word [edi + 0x14558a]
mov ecx, dword [ebp - 0x2ea4]
jl 0x5071c7
cmp eax, ecx
jge 0x5071c7
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov ecx, dword [ebp - 0x2e8c]
movsx eax, word [ecx + 0xd0]
push eax
movsx eax, word [ecx + 0xce]
push eax
lea eax, [ebp - 0x110]
push str._d_d
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x1c
cmp byte [ebp - 0x2e7d], 0
je 0x507118
mov eax, dword [ebp + 8]
movsx ecx, ax
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x507118
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x507118
mov eax, dword [ebp - 0x2e74]
mov ecx, dword [ebp - 0x2e94]
cwde
shl ecx, 4
sub ecx, dword [ebp - 0x2e94]
mov dword [ebp - 0x2e90], eax
lea edx, [eax + 0x41]
mov eax, dword [ebp + 0xc]
add edx, ecx
cwde
mov dword [ebp - 0x2e78], edx
mov dword [ebp - 0x2e84], eax
cmp eax, edx
jl 0x507118
mov eax, dword [ebp - 0x2e90]
add eax, 0x4f
add eax, ecx
cmp dword [ebp - 0x2e84], eax
jg 0x507118
push str.DRAW_DIALOGBOX_PVPT_MENU94
lea ecx, [ebp - 0x1250]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x1250]
mov dword [ebp - 4], 0x52
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e78]
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x1250]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0xffffff
lea eax, [ebp - 0x110]
push eax
push dword [ebp - 0x2e78]
jmp 0x5071a4
push str.DRAW_DIALOGBOX_PVPT_MENU94
lea ecx, [ebp - 0x1268]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, dword [ebp - 0x2e94]
cwde
shl ecx, 4
sub ecx, dword [ebp - 0x2e94]
push 0
lea esi, [eax + 0x41]
mov dword [ebp - 4], 0x53
push 0x320004
lea eax, [ebp - 0x1268]
add esi, ecx
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e88]
mov ecx, edi
cwde
push esi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x1268]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0x320004
lea eax, [ebp - 0x110]
push eax
push esi
mov esi, dword [ebp - 0x2e88]
movsx eax, si
mov ecx, edi
add eax, 0xb4
push eax
call fcn.0045d450
mov eax, dword [ebp - 0x2e94]
mov ecx, dword [ebp - 0x2ea4]
inc eax
mov dword [ebp - 0x2e94], eax
mov edx, 5
cmp dx, word [edi + 0x14558a]
jl 0x507673
cmp eax, ecx
jge 0x507673
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2e8c]
add esp, 0xc
movsx eax, byte [eax + 0xcc]
sub eax, 1
je 0x5072a6
sub eax, 1
je 0x507262
sub eax, 1
jne 0x5072f7
push str.DRAW_DIALOGBOX_PVPT_MENU160
lea ecx, [ebp - 0x1280]
call fcn.0040f9f0
lea eax, [ebp - 0x1280]
mov dword [ebp - 4], 0x56
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004994b0
lea ecx, [ebp - 0x1280]
jmp 0x5072e8
push str.DRAW_DIALOGBOX_PVPT_MENU159
lea ecx, [ebp - 0x1298]
call fcn.0040f9f0
lea eax, [ebp - 0x1298]
mov dword [ebp - 4], 0x55
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004994b0
lea ecx, [ebp - 0x1298]
jmp 0x5072e8
push str.DRAW_DIALOGBOX_PVPT_MENU158
lea ecx, [ebp - 0x12b0]
call fcn.0040f9f0
lea eax, [ebp - 0x12b0]
mov dword [ebp - 4], 0x54
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004994b0
lea ecx, [ebp - 0x12b0]
add esp, 8
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
cmp byte [ebp - 0x2e7d], 0
je 0x5073fe
mov eax, dword [ebp + 8]
movsx ecx, ax
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x5073fe
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x5073fe
mov eax, dword [ebp - 0x2e74]
mov ecx, dword [ebp - 0x2e94]
cwde
shl ecx, 4
sub ecx, dword [ebp - 0x2e94]
mov dword [ebp - 0x2e90], eax
lea edx, [eax + 0x41]
mov eax, dword [ebp + 0xc]
add edx, ecx
cwde
mov dword [ebp - 0x2e78], edx
mov dword [ebp - 0x2e84], eax
cmp eax, edx
jl 0x5073fe
mov eax, dword [ebp - 0x2e90]
add eax, 0x4f
add eax, ecx
cmp dword [ebp - 0x2e84], eax
jg 0x5073fe
push str.DRAW_DIALOGBOX_PVPT_MENU157
lea ecx, [ebp - 0x12c8]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x12c8]
mov dword [ebp - 4], 0x57
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e78]
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x12c8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0xffffff
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
push dword [ebp - 0x2e78]
movsx eax, si
add eax, 0xb4
push eax
call fcn.0045d450
jmp 0x5074f9
push str.DRAW_DIALOGBOX_PVPT_MENU157
lea ecx, [ebp - 0x12e0]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, dword [ebp - 0x2e94]
cwde
shl ecx, 4
sub ecx, dword [ebp - 0x2e94]
mov dword [ebp - 0x2e78], eax
add eax, 0x41
add eax, ecx
mov dword [ebp - 0x2e90], ecx
push 0
mov dword [ebp - 0x2e7c], eax
mov ecx, 0x5fd3c4
push 0x320004
lea eax, [ebp - 0x12e0]
mov dword [ebp - 4], 0x58
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x12e0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0x320004
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
push dword [ebp - 0x2e7c]
movsx eax, si
add eax, 0xb4
push eax
call fcn.0045d450
mov eax, dword [ebp + 8]
movsx edx, ax
mov eax, dword [ebp + 0xc]
movsx ecx, ax
movsx eax, si
add eax, 0x1e
cmp edx, eax
jle 0x507666
movsx eax, si
add eax, 0xf0
cmp edx, eax
jge 0x507666
cmp ecx, dword [ebp - 0x2e7c]
jl 0x507666
mov eax, dword [ebp - 0x2e90]
add eax, 0x4f
add eax, dword [ebp - 0x2e78]
cmp ecx, eax
jg 0x507666
mov eax, dword [ebp - 0x2e8c]
movsx eax, byte [eax + 0xcc]
sub eax, 2
je 0x5075ba
sub eax, 1
jne 0x507666
push str.DRAW_DIALOGBOX_PVPT_MENU216
lea ecx, [ebp - 0x12f8]
call fcn.0040f9f0
lea eax, [ebp - 0x12f8]
mov dword [ebp - 4], 0x5b
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [edi + 0x18a074]
push 0x80
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x12f8]
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU218
lea ecx, [ebp - 0x1310]
call fcn.0040f9f0
lea eax, [ebp - 0x1310]
mov dword [ebp - 4], 0x5c
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [edi + 0x18a200]
push 0x80
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
lea ecx, [ebp - 0x1310]
jmp 0x507657
push str.DRAW_DIALOGBOX_PVPT_MENU216
lea ecx, [ebp - 0x1328]
call fcn.0040f9f0
lea eax, [ebp - 0x1328]
mov dword [ebp - 4], 0x59
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [edi + 0x18a074]
push 0x80
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1328]
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU217
lea ecx, [ebp - 0x1340]
call fcn.0040f9f0
lea eax, [ebp - 0x1340]
mov dword [ebp - 4], 0x5a
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [edi + 0x18a200]
push 0x80
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
lea ecx, [ebp - 0x1340]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, dword [ebp - 0x2e94]
inc eax
mov dword [ebp - 0x2e94], eax
mov ecx, 6
cmp cx, word [edi + 0x14558a]
mov ecx, dword [ebp - 0x2ea4]
jl 0x5079aa
cmp eax, ecx
jge 0x5079aa
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
cmp byte [ebp - 0x2e7d], 0
je 0x50784e
mov eax, dword [ebp + 8]
movsx ecx, ax
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x50784e
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x50784e
mov eax, dword [ebp - 0x2e74]
mov ecx, dword [ebp - 0x2e94]
cwde
shl ecx, 4
sub ecx, dword [ebp - 0x2e94]
mov dword [ebp - 0x2e90], eax
lea edx, [eax + 0x41]
mov eax, dword [ebp + 0xc]
add edx, ecx
cwde
mov dword [ebp - 0x2e7c], edx
mov dword [ebp - 0x2e78], eax
cmp eax, edx
jl 0x50784e
mov eax, dword [ebp - 0x2e90]
add eax, 0x4f
add eax, ecx
cmp dword [ebp - 0x2e78], eax
jg 0x50784e
push str.DRAW_DIALOGBOX_PVPT_MENU25
lea ecx, [ebp - 0x1358]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x1358]
mov dword [ebp - 4], 0x5d
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x1358]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
movsx eax, si
add eax, 0xb4
mov dword [ebp - 0x2e78], eax
mov eax, dword [ebp - 0x2e8c]
cmp byte [eax + 0xca], 0
je 0x5077f9
push str.DRAW_DIALOGBOX_PVPT_MENU34
lea ecx, [ebp - 0x1370]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x1370]
mov dword [ebp - 4], 0x5e
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
mov ecx, edi
push dword [ebp - 0x2e78]
call fcn.0045d450
lea ecx, [ebp - 0x1370]
jmp 0x50798b
push str.DRAW_DIALOGBOX_PVPT_MENU35
lea ecx, [ebp - 0x1388]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x1388]
mov dword [ebp - 4], 0x5f
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
mov ecx, edi
push dword [ebp - 0x2e78]
call fcn.0045d450
lea ecx, [ebp - 0x1388]
jmp 0x50798b
push str.DRAW_DIALOGBOX_PVPT_MENU25
lea ecx, [ebp - 0x13a0]
call fcn.0040f9f0
mov ecx, dword [ebp - 0x2e94]
mov eax, dword [ebp - 0x2e74]
cwde
shl ecx, 4
add eax, 0x41
sub ecx, dword [ebp - 0x2e94]
add eax, ecx
mov dword [ebp - 4], 0x60
push 0
mov dword [ebp - 0x2e7c], eax
mov ecx, 0x5fd3c4
push 0x320004
lea eax, [ebp - 0x13a0]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x13a0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
movsx eax, si
add eax, 0xb4
mov dword [ebp - 0x2e78], eax
mov eax, dword [ebp - 0x2e8c]
cmp byte [eax + 0xca], 0
je 0x50793b
push str.DRAW_DIALOGBOX_PVPT_MENU34
lea ecx, [ebp - 0x13b8]
call fcn.0040f9f0
push 0
push 0xff00
lea eax, [ebp - 0x13b8]
mov dword [ebp - 4], 0x61
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
mov ecx, edi
push dword [ebp - 0x2e78]
call fcn.0045d450
lea ecx, [ebp - 0x13b8]
jmp 0x50798b
push str.DRAW_DIALOGBOX_PVPT_MENU35
lea ecx, [ebp - 0x13d0]
call fcn.0040f9f0
push 0
push 0xff
lea eax, [ebp - 0x13d0]
mov dword [ebp - 4], 0x62
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
mov ecx, edi
push dword [ebp - 0x2e78]
call fcn.0045d450
lea ecx, [ebp - 0x13d0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, dword [ebp - 0x2e94]
mov ecx, dword [ebp - 0x2ea4]
inc eax
mov dword [ebp - 0x2e94], eax
mov edx, 7
cmp dx, word [edi + 0x14558a]
jl 0x507cd5
cmp eax, ecx
jge 0x507cd5
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
cmp byte [ebp - 0x2e7d], 0
je 0x507b7f
mov eax, dword [ebp + 8]
movsx ecx, ax
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x507b7f
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x507b7f
mov eax, dword [ebp - 0x2e74]
mov ecx, dword [ebp - 0x2e94]
cwde
shl ecx, 4
sub ecx, dword [ebp - 0x2e94]
mov dword [ebp - 0x2e90], eax
lea edx, [eax + 0x41]
mov eax, dword [ebp + 0xc]
add edx, ecx
cwde
mov dword [ebp - 0x2e7c], edx
mov dword [ebp - 0x2e78], eax
cmp eax, edx
jl 0x507b7f
mov eax, dword [ebp - 0x2e90]
add eax, 0x4f
add eax, ecx
cmp dword [ebp - 0x2e78], eax
jg 0x507b7f
push str.DRAW_DIALOGBOX_PVPT_MENU26
lea ecx, [ebp - 0x13e8]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x13e8]
mov dword [ebp - 4], 0x63
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x13e8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
movsx eax, si
add eax, 0xb4
mov dword [ebp - 0x2e78], eax
mov eax, dword [ebp - 0x2e8c]
cmp byte [eax + 0xcb], 0
jne 0x507b2a
push str.DRAW_DIALOGBOX_PVPT_MENU15
lea ecx, [ebp - 0x1400]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x1400]
mov dword [ebp - 4], 0x64
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
mov ecx, edi
push dword [ebp - 0x2e78]
call fcn.0045d450
lea ecx, [ebp - 0x1400]
jmp 0x507cbc
push str.DRAW_DIALOGBOX_PVPT_MENU16
lea ecx, [ebp - 0x1418]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x1418]
mov dword [ebp - 4], 0x65
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
mov ecx, edi
push dword [ebp - 0x2e78]
call fcn.0045d450
lea ecx, [ebp - 0x1418]
jmp 0x507cbc
push str.DRAW_DIALOGBOX_PVPT_MENU26
lea ecx, [ebp - 0x1430]
call fcn.0040f9f0
mov ecx, dword [ebp - 0x2e94]
mov eax, dword [ebp - 0x2e74]
cwde
shl ecx, 4
add eax, 0x41
sub ecx, dword [ebp - 0x2e94]
add eax, ecx
mov dword [ebp - 4], 0x66
push 0
mov dword [ebp - 0x2e7c], eax
mov ecx, 0x5fd3c4
push 0x320004
lea eax, [ebp - 0x1430]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x1430]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
movsx eax, si
add eax, 0xb4
mov dword [ebp - 0x2e78], eax
mov eax, dword [ebp - 0x2e8c]
cmp byte [eax + 0xcb], 0
jne 0x507c6c
push str.DRAW_DIALOGBOX_PVPT_MENU15
lea ecx, [ebp - 0x1448]
call fcn.0040f9f0
push 0
push 0xff00
lea eax, [ebp - 0x1448]
mov dword [ebp - 4], 0x67
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
mov ecx, edi
push dword [ebp - 0x2e78]
call fcn.0045d450
lea ecx, [ebp - 0x1448]
jmp 0x507cbc
push str.DRAW_DIALOGBOX_PVPT_MENU16
lea ecx, [ebp - 0x1460]
call fcn.0040f9f0
push 0
push 0xff
lea eax, [ebp - 0x1460]
mov dword [ebp - 4], 0x68
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
mov ecx, edi
push dword [ebp - 0x2e78]
call fcn.0045d450
lea ecx, [ebp - 0x1460]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, dword [ebp - 0x2e94]
inc eax
mov dword [ebp - 0x2e94], eax
mov ecx, 8
cmp cx, word [edi + 0x14558a]
mov ecx, dword [ebp - 0x2ea4]
jl 0x50800c
cmp eax, ecx
jge 0x50800c
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
cmp byte [ebp - 0x2e7d], 0
je 0x507eb0
mov eax, dword [ebp + 8]
movsx ecx, ax
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x507eb0
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x507eb0
mov eax, dword [ebp - 0x2e74]
mov ecx, dword [ebp - 0x2e94]
cwde
shl ecx, 4
sub ecx, dword [ebp - 0x2e94]
mov dword [ebp - 0x2e90], eax
lea edx, [eax + 0x41]
mov eax, dword [ebp + 0xc]
add edx, ecx
cwde
mov dword [ebp - 0x2e7c], edx
mov dword [ebp - 0x2e78], eax
cmp eax, edx
jl 0x507eb0
mov eax, dword [ebp - 0x2e90]
add eax, 0x4f
add eax, ecx
cmp dword [ebp - 0x2e78], eax
jg 0x507eb0
push str.DRAW_DIALOGBOX_PVPT_MENU231
lea ecx, [ebp - 0x1478]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x1478]
mov dword [ebp - 4], 0x69
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x1478]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
movsx eax, si
add eax, 0xb4
mov dword [ebp - 0x2e78], eax
mov eax, dword [ebp - 0x2e8c]
cmp byte [eax + 0xc0], 0
je 0x507e5b
push str.DRAW_DIALOGBOX_PVPT_MENU232
lea ecx, [ebp - 0x1490]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x1490]
mov dword [ebp - 4], 0x6a
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
mov ecx, edi
push dword [ebp - 0x2e78]
call fcn.0045d450
lea ecx, [ebp - 0x1490]
jmp 0x507fed
push str.DRAW_DIALOGBOX_PVPT_MENU233
lea ecx, [ebp - 0x14a8]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x14a8]
mov dword [ebp - 4], 0x6b
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
mov ecx, edi
push dword [ebp - 0x2e78]
call fcn.0045d450
lea ecx, [ebp - 0x14a8]
jmp 0x507fed
push str.DRAW_DIALOGBOX_PVPT_MENU231
lea ecx, [ebp - 0x14c0]
call fcn.0040f9f0
mov ecx, dword [ebp - 0x2e94]
mov eax, dword [ebp - 0x2e74]
cwde
shl ecx, 4
add eax, 0x41
sub ecx, dword [ebp - 0x2e94]
add eax, ecx
mov dword [ebp - 4], 0x6c
push 0
mov dword [ebp - 0x2e7c], eax
mov ecx, 0x5fd3c4
push 0x320004
lea eax, [ebp - 0x14c0]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x14c0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
movsx eax, si
add eax, 0xb4
mov dword [ebp - 0x2e78], eax
mov eax, dword [ebp - 0x2e8c]
cmp byte [eax + 0xc0], 0
je 0x507f9d
push str.DRAW_DIALOGBOX_PVPT_MENU232
lea ecx, [ebp - 0x14d8]
call fcn.0040f9f0
push 0
push 0xff00
lea eax, [ebp - 0x14d8]
mov dword [ebp - 4], 0x6d
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
mov ecx, edi
push dword [ebp - 0x2e78]
call fcn.0045d450
lea ecx, [ebp - 0x14d8]
jmp 0x507fed
push str.DRAW_DIALOGBOX_PVPT_MENU233
lea ecx, [ebp - 0x14f0]
call fcn.0040f9f0
push 0
push 0xff
lea eax, [ebp - 0x14f0]
mov dword [ebp - 4], 0x6e
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
mov ecx, edi
push dword [ebp - 0x2e78]
call fcn.0045d450
lea ecx, [ebp - 0x14f0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, dword [ebp - 0x2e94]
mov ecx, dword [ebp - 0x2ea4]
inc eax
mov dword [ebp - 0x2e94], eax
mov edx, 9
cmp dx, word [edi + 0x14558a]
jl 0x508337
cmp eax, ecx
jge 0x508337
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
cmp byte [ebp - 0x2e7d], 0
je 0x5081e1
mov eax, dword [ebp + 8]
movsx ecx, ax
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x5081e1
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x5081e1
mov eax, dword [ebp - 0x2e74]
mov ecx, dword [ebp - 0x2e94]
cwde
shl ecx, 4
sub ecx, dword [ebp - 0x2e94]
mov dword [ebp - 0x2e90], eax
lea edx, [eax + 0x41]
mov eax, dword [ebp + 0xc]
add edx, ecx
cwde
mov dword [ebp - 0x2e7c], edx
mov dword [ebp - 0x2e78], eax
cmp eax, edx
jl 0x5081e1
mov eax, dword [ebp - 0x2e90]
add eax, 0x4f
add eax, ecx
cmp dword [ebp - 0x2e78], eax
jg 0x5081e1
push str.DRAW_DIALOGBOX_PVPT_MENU234
lea ecx, [ebp - 0x1508]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x1508]
mov dword [ebp - 4], 0x6f
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x1508]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
movsx eax, si
add eax, 0xb4
mov dword [ebp - 0x2e78], eax
mov eax, dword [ebp - 0x2e8c]
cmp byte [eax + 0xc1], 0
je 0x50818c
push str.DRAW_DIALOGBOX_PVPT_MENU15
lea ecx, [ebp - 0x1520]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x1520]
mov dword [ebp - 4], 0x70
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
mov ecx, edi
push dword [ebp - 0x2e78]
call fcn.0045d450
lea ecx, [ebp - 0x1520]
jmp 0x50831e
push str.DRAW_DIALOGBOX_PVPT_MENU16
lea ecx, [ebp - 0x1538]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x1538]
mov dword [ebp - 4], 0x71
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
mov ecx, edi
push dword [ebp - 0x2e78]
call fcn.0045d450
lea ecx, [ebp - 0x1538]
jmp 0x50831e
push str.DRAW_DIALOGBOX_PVPT_MENU234
lea ecx, [ebp - 0x1550]
call fcn.0040f9f0
mov ecx, dword [ebp - 0x2e94]
mov eax, dword [ebp - 0x2e74]
cwde
shl ecx, 4
add eax, 0x41
sub ecx, dword [ebp - 0x2e94]
add eax, ecx
mov dword [ebp - 4], 0x72
push 0
mov dword [ebp - 0x2e7c], eax
mov ecx, 0x5fd3c4
push 0x320004
lea eax, [ebp - 0x1550]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x1550]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
movsx eax, si
add eax, 0xb4
mov dword [ebp - 0x2e78], eax
mov eax, dword [ebp - 0x2e8c]
cmp byte [eax + 0xc1], 0
je 0x5082ce
push str.DRAW_DIALOGBOX_PVPT_MENU15
lea ecx, [ebp - 0x1568]
call fcn.0040f9f0
push 0
push 0xff00
lea eax, [ebp - 0x1568]
mov dword [ebp - 4], 0x73
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
mov ecx, edi
push dword [ebp - 0x2e78]
call fcn.0045d450
lea ecx, [ebp - 0x1568]
jmp 0x50831e
push str.DRAW_DIALOGBOX_PVPT_MENU16
lea ecx, [ebp - 0x1580]
call fcn.0040f9f0
push 0
push 0xff
lea eax, [ebp - 0x1580]
mov dword [ebp - 4], 0x74
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
mov ecx, edi
push dword [ebp - 0x2e78]
call fcn.0045d450
lea ecx, [ebp - 0x1580]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, dword [ebp - 0x2e94]
inc eax
mov dword [ebp - 0x2e94], eax
mov ecx, 0xa
cmp cx, word [edi + 0x14558a]
mov ecx, dword [ebp - 0x2ea4]
jl 0x50870d
cmp eax, ecx
jge 0x50870d
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2e8c]
add esp, 0xc
mov eax, dword [eax + 0xb4]
cmp eax, 0x3c
jle 0x508454
cdq
mov ecx, 0x3c
idiv ecx
test edx, edx
jne 0x5083f6
push str.DRAW_DIALOGBOX_PVPT_MENU29
lea ecx, [ebp - 0x1598]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e8c]
mov dword [ebp - 4], 0x75
mov ecx, dword [eax + 0xb4]
mov eax, 0x88888889
imul ecx
add edx, ecx
mov ecx, 0x5fd3c4
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
lea eax, [ebp - 0x1598]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
lea ecx, [ebp - 0x1598]
jmp 0x5084a3
push str.DRAW_DIALOGBOX_PVPT_MENU30
lea ecx, [ebp - 0x15b0]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e8c]
mov ecx, 0x3c
mov dword [ebp - 4], 0x76
mov eax, dword [eax + 0xb4]
cdq
idiv ecx
mov ecx, 0x5fd3c4
push edx
push eax
lea eax, [ebp - 0x15b0]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea ecx, [ebp - 0x15b0]
jmp 0x5084a6
push str.DRAW_DIALOGBOX_PVPT_MENU28
lea ecx, [ebp - 0x15c8]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e8c]
mov ecx, 0x5fd3c4
mov dword [ebp - 4], 0x77
push dword [eax + 0xb4]
lea eax, [ebp - 0x15c8]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
lea ecx, [ebp - 0x15c8]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
cmp byte [ebp - 0x2e7d], 0
je 0x5085b9
mov eax, dword [ebp + 8]
movsx ecx, ax
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x5085b9
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x5085b9
mov eax, dword [ebp - 0x2e74]
mov ecx, dword [ebp - 0x2e94]
cwde
shl ecx, 4
sub ecx, dword [ebp - 0x2e94]
mov dword [ebp - 0x2e90], eax
lea edx, [eax + 0x41]
mov eax, dword [ebp + 0xc]
add edx, ecx
cwde
mov dword [ebp - 0x2e78], edx
mov dword [ebp - 0x2e84], eax
cmp eax, edx
jl 0x5085b9
mov eax, dword [ebp - 0x2e90]
add eax, 0x4f
add eax, ecx
cmp dword [ebp - 0x2e84], eax
jg 0x5085b9
push str.DRAW_DIALOGBOX_PVPT_MENU152
lea ecx, [ebp - 0x15e0]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x15e0]
mov dword [ebp - 4], 0x78
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e78]
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x15e0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0xffffff
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
push dword [ebp - 0x2e78]
movsx eax, si
add eax, 0xb4
push eax
call fcn.0045d450
jmp 0x5086a4
push str.DRAW_DIALOGBOX_PVPT_MENU152
lea ecx, [ebp - 0x15f8]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, dword [ebp - 0x2e94]
cwde
shl ecx, 4
sub ecx, dword [ebp - 0x2e94]
mov dword [ebp - 0x2e78], eax
add eax, 0x41
add eax, ecx
mov dword [ebp - 0x2e90], ecx
push 0
mov dword [ebp - 0x2e7c], eax
mov ecx, 0x5fd3c4
push 0x320004
lea eax, [ebp - 0x15f8]
mov dword [ebp - 4], 0x79
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x15f8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0x320004
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
push dword [ebp - 0x2e7c]
movsx eax, si
add eax, 0xb4
push eax
call fcn.0045d450
mov eax, dword [ebp + 8]
movsx edx, ax
mov eax, dword [ebp + 0xc]
movsx ecx, ax
movsx eax, si
add eax, 0x1e
cmp edx, eax
jle 0x5086fa
movsx eax, si
add eax, 0xf0
cmp edx, eax
jge 0x5086fa
cmp ecx, dword [ebp - 0x2e7c]
jl 0x5086fa
mov eax, dword [ebp - 0x2e90]
add eax, 0x4f
add eax, dword [ebp - 0x2e78]
cmp ecx, eax
jg 0x5086fa
push str.DRAW_DIALOGBOX_PVPT_MENU215
lea ecx, [ebp - 0x1610]
call fcn.0040f9f0
lea eax, [ebp - 0x1610]
mov dword [ebp - 4], 0x7a
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [edi + 0x18a074]
push 0x80
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1610]
call fcn.00411640
mov eax, dword [ebp - 0x2e94]
mov ecx, dword [ebp - 0x2ea4]
inc eax
mov dword [ebp - 0x2e94], eax
mov edx, 0xb
cmp dx, word [edi + 0x14558a]
jl 0x508b93
cmp eax, ecx
jge 0x508b93
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2e8c]
add esp, 0xc
mov eax, dword [eax + 0xb8]
cmp eax, 0x3c
jle 0x508824
cdq
mov ecx, 0x3c
idiv ecx
test edx, edx
jne 0x5087c6
push str.DRAW_DIALOGBOX_PVPT_MENU29
lea ecx, [ebp - 0x1628]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e8c]
mov dword [ebp - 4], 0x7b
mov ecx, dword [eax + 0xb8]
mov eax, 0x88888889
imul ecx
add edx, ecx
mov ecx, 0x5fd3c4
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
lea eax, [ebp - 0x1628]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
lea ecx, [ebp - 0x1628]
jmp 0x508873
push str.DRAW_DIALOGBOX_PVPT_MENU30
lea ecx, [ebp - 0x1640]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e8c]
mov ecx, 0x3c
mov dword [ebp - 4], 0x7c
mov eax, dword [eax + 0xb8]
cdq
idiv ecx
mov ecx, 0x5fd3c4
push edx
push eax
lea eax, [ebp - 0x1640]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea ecx, [ebp - 0x1640]
jmp 0x508876
push str.DRAW_DIALOGBOX_PVPT_MENU28
lea ecx, [ebp - 0x1658]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e8c]
mov ecx, 0x5fd3c4
mov dword [ebp - 4], 0x7d
push dword [eax + 0xb8]
lea eax, [ebp - 0x1658]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
lea ecx, [ebp - 0x1658]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
cmp byte [ebp - 0x2e7d], 0
je 0x508989
mov eax, dword [ebp + 8]
movsx ecx, ax
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x508989
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x508989
mov eax, dword [ebp - 0x2e74]
mov ecx, dword [ebp - 0x2e94]
cwde
shl ecx, 4
sub ecx, dword [ebp - 0x2e94]
mov dword [ebp - 0x2e90], eax
lea edx, [eax + 0x41]
mov eax, dword [ebp + 0xc]
add edx, ecx
cwde
mov dword [ebp - 0x2e78], edx
mov dword [ebp - 0x2e84], eax
cmp eax, edx
jl 0x508989
mov eax, dword [ebp - 0x2e90]
add eax, 0x4f
add eax, ecx
cmp dword [ebp - 0x2e84], eax
jg 0x508989
push str.DRAW_DIALOGBOX_PVPT_MENU27
lea ecx, [ebp - 0x1670]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x1670]
mov dword [ebp - 4], 0x7e
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e78]
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x1670]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0xffffff
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
push dword [ebp - 0x2e78]
movsx eax, si
add eax, 0xb4
push eax
call fcn.0045d450
jmp 0x508a84
push str.DRAW_DIALOGBOX_PVPT_MENU27
lea ecx, [ebp - 0x1688]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, dword [ebp - 0x2e94]
cwde
shl ecx, 4
sub ecx, dword [ebp - 0x2e94]
mov dword [ebp - 0x2e78], eax
add eax, 0x41
add eax, ecx
mov dword [ebp - 0x2e90], ecx
push 0
mov dword [ebp - 0x2e7c], eax
mov ecx, 0x5fd3c4
push 0x320004
lea eax, [ebp - 0x1688]
mov dword [ebp - 4], 0x7f
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x1688]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0x320004
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
push dword [ebp - 0x2e7c]
movsx eax, si
add eax, 0xb4
push eax
call fcn.0045d450
mov eax, dword [ebp + 8]
movsx edx, ax
mov eax, dword [ebp + 0xc]
movsx ecx, ax
movsx eax, si
add eax, 0x1e
cmp edx, eax
jle 0x508b86
movsx eax, si
add eax, 0xf0
cmp edx, eax
jge 0x508b86
cmp ecx, dword [ebp - 0x2e7c]
jl 0x508b86
mov eax, dword [ebp - 0x2e90]
add eax, 0x4f
add eax, dword [ebp - 0x2e78]
cmp ecx, eax
jg 0x508b86
push str.DRAW_DIALOGBOX_PVPT_MENU91
lea ecx, [ebp - 0x16a0]
call fcn.0040f9f0
lea eax, [ebp - 0x16a0]
mov dword [ebp - 4], 0x80
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [edi + 0x18a074]
push 0x80
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x16a0]
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU213
lea ecx, [ebp - 0x16b8]
call fcn.0040f9f0
lea eax, [ebp - 0x16b8]
mov dword [ebp - 4], 0x81
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [edi + 0x18a200]
push 0x80
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x16b8]
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU214
lea ecx, [ebp - 0x16d0]
call fcn.0040f9f0
lea eax, [ebp - 0x16d0]
mov dword [ebp - 4], 0x82
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [edi + 0x18a38c]
push 0x80
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x16d0]
call fcn.00411640
mov eax, dword [ebp - 0x2e94]
inc eax
mov dword [ebp - 0x2e94], eax
mov ecx, 0xc
cmp cx, word [edi + 0x14558a]
mov ecx, dword [ebp - 0x2ea4]
jl 0x508eca
cmp eax, ecx
jge 0x508eca
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
cmp byte [ebp - 0x2e7d], 0
je 0x508d6e
mov eax, dword [ebp + 8]
movsx ecx, ax
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x508d6e
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x508d6e
mov eax, dword [ebp - 0x2e74]
mov ecx, dword [ebp - 0x2e94]
cwde
shl ecx, 4
sub ecx, dword [ebp - 0x2e94]
mov dword [ebp - 0x2e90], eax
lea edx, [eax + 0x41]
mov eax, dword [ebp + 0xc]
add edx, ecx
cwde
mov dword [ebp - 0x2e7c], edx
mov dword [ebp - 0x2e78], eax
cmp eax, edx
jl 0x508d6e
mov eax, dword [ebp - 0x2e90]
add eax, 0x4f
add eax, ecx
cmp dword [ebp - 0x2e78], eax
jg 0x508d6e
push str.DRAW_DIALOGBOX_PVPT_MENU31
lea ecx, [ebp - 0x16e8]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x16e8]
mov dword [ebp - 4], 0x83
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x16e8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
movsx eax, si
add eax, 0xb4
mov dword [ebp - 0x2e78], eax
mov eax, dword [ebp - 0x2e8c]
cmp byte [eax + 0xbc], 0
je 0x508d19
push str.DRAW_DIALOGBOX_PVPT_MENU34
lea ecx, [ebp - 0x1700]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x1700]
mov dword [ebp - 4], 0x84
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
mov ecx, edi
push dword [ebp - 0x2e78]
call fcn.0045d450
lea ecx, [ebp - 0x1700]
jmp 0x508eab
push str.DRAW_DIALOGBOX_PVPT_MENU35
lea ecx, [ebp - 0x1718]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x1718]
mov dword [ebp - 4], 0x85
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
mov ecx, edi
push dword [ebp - 0x2e78]
call fcn.0045d450
lea ecx, [ebp - 0x1718]
jmp 0x508eab
push str.DRAW_DIALOGBOX_PVPT_MENU31
lea ecx, [ebp - 0x1730]
call fcn.0040f9f0
mov ecx, dword [ebp - 0x2e94]
mov eax, dword [ebp - 0x2e74]
cwde
shl ecx, 4
add eax, 0x41
sub ecx, dword [ebp - 0x2e94]
add eax, ecx
mov dword [ebp - 4], 0x86
push 0
mov dword [ebp - 0x2e7c], eax
mov ecx, 0x5fd3c4
push 0x320004
lea eax, [ebp - 0x1730]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x1730]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
movsx eax, si
add eax, 0xb4
mov dword [ebp - 0x2e78], eax
mov eax, dword [ebp - 0x2e8c]
cmp byte [eax + 0xbc], 0
je 0x508e5b
push str.DRAW_DIALOGBOX_PVPT_MENU34
lea ecx, [ebp - 0x1748]
call fcn.0040f9f0
push 0
push 0xff00
lea eax, [ebp - 0x1748]
mov dword [ebp - 4], 0x87
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
mov ecx, edi
push dword [ebp - 0x2e78]
call fcn.0045d450
lea ecx, [ebp - 0x1748]
jmp 0x508eab
push str.DRAW_DIALOGBOX_PVPT_MENU35
lea ecx, [ebp - 0x1760]
call fcn.0040f9f0
push 0
push 0xff
lea eax, [ebp - 0x1760]
mov dword [ebp - 4], 0x88
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
mov ecx, edi
push dword [ebp - 0x2e78]
call fcn.0045d450
lea ecx, [ebp - 0x1760]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, dword [ebp - 0x2e94]
mov ecx, dword [ebp - 0x2ea4]
inc eax
mov dword [ebp - 0x2e94], eax
mov edx, 0xd
cmp dx, word [edi + 0x14558a]
jl 0x509392
cmp eax, ecx
jge 0x509392
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2e8c]
add esp, 0xc
mov eax, dword [eax + 0xa4]
cmp eax, 0x3c
jle 0x508fe1
cdq
mov ecx, 0x3c
idiv ecx
test edx, edx
jne 0x508f83
push str.DRAW_DIALOGBOX_PVPT_MENU29
lea ecx, [ebp - 0x1778]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e8c]
mov dword [ebp - 4], 0x89
mov ecx, dword [eax + 0xa4]
mov eax, 0x88888889
imul ecx
add edx, ecx
mov ecx, 0x5fd3c4
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
lea eax, [ebp - 0x1778]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
lea ecx, [ebp - 0x1778]
jmp 0x509030
push str.DRAW_DIALOGBOX_PVPT_MENU30
lea ecx, [ebp - 0x1790]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e8c]
mov ecx, 0x3c
mov dword [ebp - 4], 0x8a
mov eax, dword [eax + 0xa4]
cdq
idiv ecx
mov ecx, 0x5fd3c4
push edx
push eax
lea eax, [ebp - 0x1790]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea ecx, [ebp - 0x1790]
jmp 0x509033
push str.DRAW_DIALOGBOX_PVPT_MENU28
lea ecx, [ebp - 0x17a8]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e8c]
mov ecx, 0x5fd3c4
mov dword [ebp - 4], 0x8b
push dword [eax + 0xa4]
lea eax, [ebp - 0x17a8]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
lea ecx, [ebp - 0x17a8]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
cmp byte [ebp - 0x2e7d], 0
je 0x509146
mov eax, dword [ebp + 8]
movsx ecx, ax
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x509146
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x509146
mov eax, dword [ebp - 0x2e74]
mov ecx, dword [ebp - 0x2e94]
cwde
shl ecx, 4
sub ecx, dword [ebp - 0x2e94]
mov dword [ebp - 0x2e90], eax
lea edx, [eax + 0x41]
mov eax, dword [ebp + 0xc]
add edx, ecx
cwde
mov dword [ebp - 0x2e78], edx
mov dword [ebp - 0x2e84], eax
cmp eax, edx
jl 0x509146
mov eax, dword [ebp - 0x2e90]
add eax, 0x4f
add eax, ecx
cmp dword [ebp - 0x2e84], eax
jg 0x509146
push str.DRAW_DIALOGBOX_PVPT_MENU95
lea ecx, [ebp - 0x17c0]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x17c0]
mov dword [ebp - 4], 0x8c
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e78]
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x17c0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0xffffff
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
push dword [ebp - 0x2e78]
movsx eax, si
add eax, 0xb4
push eax
call fcn.0045d450
jmp 0x509241
push str.DRAW_DIALOGBOX_PVPT_MENU95
lea ecx, [ebp - 0x17d8]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, dword [ebp - 0x2e94]
cwde
shl ecx, 4
sub ecx, dword [ebp - 0x2e94]
mov dword [ebp - 0x2e78], eax
add eax, 0x41
add eax, ecx
mov dword [ebp - 0x2e90], ecx
push 0
mov dword [ebp - 0x2e7c], eax
mov ecx, 0x5fd3c4
push 0x320004
lea eax, [ebp - 0x17d8]
mov dword [ebp - 4], 0x8d
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x17d8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0x320004
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
push dword [ebp - 0x2e7c]
movsx eax, si
add eax, 0xb4
push eax
call fcn.0045d450
mov eax, dword [ebp + 8]
movsx edx, ax
mov eax, dword [ebp + 0xc]
movsx ecx, ax
movsx eax, si
add eax, 0x1e
cmp edx, eax
jle 0x509385
movsx eax, si
add eax, 0xf0
cmp edx, eax
jge 0x509385
cmp ecx, dword [ebp - 0x2e7c]
jl 0x509385
mov eax, dword [ebp - 0x2e90]
add eax, 0x4f
add eax, dword [ebp - 0x2e78]
cmp ecx, eax
jg 0x509385
push str.DRAW_DIALOGBOX_PVPT_MENU207
lea ecx, [ebp - 0x17f0]
call fcn.0040f9f0
lea eax, [ebp - 0x17f0]
mov dword [ebp - 4], 0x8e
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [edi + 0x18a074]
push eax
call fcn.0040eac0
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x17f0]
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU208
lea ecx, [ebp - 0x1808]
call fcn.0040f9f0
lea eax, [ebp - 0x1808]
mov dword [ebp - 4], 0x8f
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [edi + 0x18a200]
push eax
call fcn.0040eac0
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1808]
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU209
lea ecx, [ebp - 0x1820]
call fcn.0040f9f0
lea eax, [ebp - 0x1820]
mov dword [ebp - 4], 0x90
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [edi + 0x18a38c]
push eax
call fcn.0040eac0
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1820]
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU210
lea ecx, [ebp - 0x1838]
call fcn.0040f9f0
lea eax, [ebp - 0x1838]
mov dword [ebp - 4], 0x91
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [edi + 0x18a518]
push eax
call fcn.0040eac0
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1838]
call fcn.00411640
mov eax, dword [ebp - 0x2e94]
inc eax
mov dword [ebp - 0x2e94], eax
mov ecx, 0xe
cmp cx, word [edi + 0x14558a]
mov ecx, dword [ebp - 0x2ea4]
jl 0x5097c4
cmp eax, ecx
jge 0x5097c4
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2e8c]
add esp, 0xc
mov eax, dword [eax + 0xa8]
cmp eax, 0x3c
jle 0x5094af
cdq
mov ecx, 0x3c
idiv ecx
test edx, edx
jne 0x509451
push str.DRAW_DIALOGBOX_PVPT_MENU29
lea ecx, [ebp - 0x1850]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e8c]
mov dword [ebp - 4], 0x92
mov ecx, dword [eax + 0xa8]
mov eax, 0x88888889
imul ecx
add edx, ecx
mov ecx, 0x5fd3c4
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
lea eax, [ebp - 0x1850]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
lea ecx, [ebp - 0x1850]
jmp 0x5094fe
push str.DRAW_DIALOGBOX_PVPT_MENU30
lea ecx, [ebp - 0x1868]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e8c]
mov ecx, 0x3c
mov dword [ebp - 4], 0x93
mov eax, dword [eax + 0xa8]
cdq
idiv ecx
mov ecx, 0x5fd3c4
push edx
push eax
lea eax, [ebp - 0x1868]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea ecx, [ebp - 0x1868]
jmp 0x509501
push str.DRAW_DIALOGBOX_PVPT_MENU28
lea ecx, [ebp - 0x1880]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e8c]
mov ecx, 0x5fd3c4
mov dword [ebp - 4], 0x94
push dword [eax + 0xa8]
lea eax, [ebp - 0x1880]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
lea ecx, [ebp - 0x1880]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
cmp byte [ebp - 0x2e7d], 0
je 0x509614
mov eax, dword [ebp + 8]
movsx ecx, ax
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x509614
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x509614
mov eax, dword [ebp - 0x2e74]
mov ecx, dword [ebp - 0x2e94]
cwde
shl ecx, 4
sub ecx, dword [ebp - 0x2e94]
mov dword [ebp - 0x2e90], eax
lea edx, [eax + 0x41]
mov eax, dword [ebp + 0xc]
add edx, ecx
cwde
mov dword [ebp - 0x2e78], edx
mov dword [ebp - 0x2e84], eax
cmp eax, edx
jl 0x509614
mov eax, dword [ebp - 0x2e90]
add eax, 0x4f
add eax, ecx
cmp dword [ebp - 0x2e84], eax
jg 0x509614
push str.DRAW_DIALOGBOX_PVPT_MENU122
lea ecx, [ebp - 0x1898]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x1898]
mov dword [ebp - 4], 0x95
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e78]
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x1898]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0xffffff
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
push dword [ebp - 0x2e78]
movsx eax, si
add eax, 0xb4
push eax
call fcn.0045d450
jmp 0x50970f
push str.DRAW_DIALOGBOX_PVPT_MENU122
lea ecx, [ebp - 0x18b0]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, dword [ebp - 0x2e94]
cwde
shl ecx, 4
sub ecx, dword [ebp - 0x2e94]
mov dword [ebp - 0x2e78], eax
add eax, 0x41
add eax, ecx
mov dword [ebp - 0x2e90], ecx
push 0
mov dword [ebp - 0x2e7c], eax
mov ecx, 0x5fd3c4
push 0x320004
lea eax, [ebp - 0x18b0]
mov dword [ebp - 4], 0x96
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x18b0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0x320004
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
push dword [ebp - 0x2e7c]
movsx eax, si
add eax, 0xb4
push eax
call fcn.0045d450
mov eax, dword [ebp + 8]
movsx edx, ax
mov eax, dword [ebp + 0xc]
movsx ecx, ax
movsx eax, si
add eax, 0x1e
cmp edx, eax
jle 0x5097b1
movsx eax, si
add eax, 0xf0
cmp edx, eax
jge 0x5097b1
cmp ecx, dword [ebp - 0x2e7c]
jl 0x5097b1
mov eax, dword [ebp - 0x2e90]
add eax, 0x4f
add eax, dword [ebp - 0x2e78]
cmp ecx, eax
jg 0x5097b1
push str.DRAW_DIALOGBOX_PVPT_MENU211
lea ecx, [ebp - 0x18c8]
call fcn.0040f9f0
lea eax, [ebp - 0x18c8]
mov dword [ebp - 4], 0x97
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [edi + 0x18a074]
push eax
call fcn.0040eac0
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18c8]
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU212
lea ecx, [ebp - 0x18e0]
call fcn.0040f9f0
lea eax, [ebp - 0x18e0]
mov dword [ebp - 4], 0x98
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [edi + 0x18a200]
push eax
call fcn.0040eac0
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18e0]
call fcn.00411640
mov eax, dword [ebp - 0x2e94]
mov ecx, dword [ebp - 0x2ea4]
inc eax
mov dword [ebp - 0x2e94], eax
mov edx, 0xf
cmp dx, word [edi + 0x14558a]
jl 0x509a69
cmp eax, ecx
jge 0x509a69
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2e8c]
movsx eax, word [eax + 0xb0]
push eax
lea eax, [ebp - 0x110]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
cmp byte [ebp - 0x2e7d], 0
je 0x50991b
mov eax, dword [ebp + 8]
movsx ecx, ax
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x50991b
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x50991b
mov eax, dword [ebp - 0x2e74]
mov ecx, dword [ebp - 0x2e94]
cwde
shl ecx, 4
sub ecx, dword [ebp - 0x2e94]
mov dword [ebp - 0x2e90], eax
lea edx, [eax + 0x41]
mov eax, dword [ebp + 0xc]
add edx, ecx
cwde
mov dword [ebp - 0x2e78], edx
mov dword [ebp - 0x2e84], eax
cmp eax, edx
jl 0x50991b
mov eax, dword [ebp - 0x2e90]
add eax, 0x4f
add eax, ecx
cmp dword [ebp - 0x2e84], eax
jg 0x50991b
push str.DRAW_DIALOGBOX_PVPT_MENU32
lea ecx, [ebp - 0x18f8]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x18f8]
mov dword [ebp - 4], 0x99
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e78]
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x18f8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0xffffff
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
push dword [ebp - 0x2e78]
movsx eax, si
add eax, 0xb4
push eax
call fcn.0045d450
jmp 0x509a06
push str.DRAW_DIALOGBOX_PVPT_MENU32
lea ecx, [ebp - 0x1910]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, dword [ebp - 0x2e94]
cwde
shl ecx, 4
sub ecx, dword [ebp - 0x2e94]
mov dword [ebp - 0x2e78], eax
add eax, 0x41
add eax, ecx
mov dword [ebp - 0x2e90], ecx
push 0
mov dword [ebp - 0x2e7c], eax
mov ecx, 0x5fd3c4
push 0x320004
lea eax, [ebp - 0x1910]
mov dword [ebp - 4], 0x9a
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x1910]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0x320004
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
push dword [ebp - 0x2e7c]
movsx eax, si
add eax, 0xb4
push eax
call fcn.0045d450
mov eax, dword [ebp + 8]
movsx edx, ax
mov eax, dword [ebp + 0xc]
movsx ecx, ax
movsx eax, si
add eax, 0x1e
cmp edx, eax
jle 0x509a5c
movsx eax, si
add eax, 0xf0
cmp edx, eax
jge 0x509a5c
cmp ecx, dword [ebp - 0x2e7c]
jl 0x509a5c
mov eax, dword [ebp - 0x2e90]
add eax, 0x4f
add eax, dword [ebp - 0x2e78]
cmp ecx, eax
jg 0x509a5c
push str.DRAW_DIALOGBOX_PVPT_MENU92
lea ecx, [ebp - 0x1928]
call fcn.0040f9f0
lea eax, [ebp - 0x1928]
mov dword [ebp - 4], 0x9b
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [edi + 0x18a074]
push 0x80
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1928]
call fcn.00411640
mov eax, dword [ebp - 0x2e94]
inc eax
mov dword [ebp - 0x2e94], eax
mov ecx, 0x10
cmp cx, word [edi + 0x14558a]
mov ecx, dword [ebp - 0x2ea4]
jl 0x509d1a
cmp eax, ecx
jge 0x509d1a
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2e8c]
movsx eax, word [eax + 0xb2]
push eax
lea eax, [ebp - 0x110]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
cmp byte [ebp - 0x2e7d], 0
je 0x509bc6
mov eax, dword [ebp + 8]
movsx ecx, ax
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x509bc6
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x509bc6
mov eax, dword [ebp - 0x2e74]
mov ecx, dword [ebp - 0x2e94]
cwde
shl ecx, 4
sub ecx, dword [ebp - 0x2e94]
mov dword [ebp - 0x2e90], eax
lea edx, [eax + 0x41]
mov eax, dword [ebp + 0xc]
add edx, ecx
cwde
mov dword [ebp - 0x2e78], edx
mov dword [ebp - 0x2e84], eax
cmp eax, edx
jl 0x509bc6
mov eax, dword [ebp - 0x2e90]
add eax, 0x4f
add eax, ecx
cmp dword [ebp - 0x2e84], eax
jg 0x509bc6
push str.DRAW_DIALOGBOX_PVPT_MENU33
lea ecx, [ebp - 0x1940]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x1940]
mov dword [ebp - 4], 0x9c
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e78]
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x1940]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0xffffff
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
push dword [ebp - 0x2e78]
movsx eax, si
add eax, 0xb4
push eax
call fcn.0045d450
jmp 0x509cb1
push str.DRAW_DIALOGBOX_PVPT_MENU33
lea ecx, [ebp - 0x1958]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, dword [ebp - 0x2e94]
cwde
shl ecx, 4
sub ecx, dword [ebp - 0x2e94]
mov dword [ebp - 0x2e78], eax
add eax, 0x41
add eax, ecx
mov dword [ebp - 0x2e90], ecx
push 0
mov dword [ebp - 0x2e7c], eax
mov ecx, 0x5fd3c4
push 0x320004
lea eax, [ebp - 0x1958]
mov dword [ebp - 4], 0x9d
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x1958]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0x320004
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
push dword [ebp - 0x2e7c]
movsx eax, si
add eax, 0xb4
push eax
call fcn.0045d450
mov eax, dword [ebp + 8]
movsx edx, ax
mov eax, dword [ebp + 0xc]
movsx ecx, ax
movsx eax, si
add eax, 0x1e
cmp edx, eax
jle 0x509d07
movsx eax, si
add eax, 0xf0
cmp edx, eax
jge 0x509d07
cmp ecx, dword [ebp - 0x2e7c]
jl 0x509d07
mov eax, dword [ebp - 0x2e90]
add eax, 0x4f
add eax, dword [ebp - 0x2e78]
cmp ecx, eax
jg 0x509d07
push str.DRAW_DIALOGBOX_PVPT_MENU93
lea ecx, [ebp - 0x1970]
call fcn.0040f9f0
lea eax, [ebp - 0x1970]
mov dword [ebp - 4], 0x9e
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [edi + 0x18a074]
push 0x80
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1970]
call fcn.00411640
mov eax, dword [ebp - 0x2e94]
mov ecx, dword [ebp - 0x2ea4]
inc eax
mov dword [ebp - 0x2e94], eax
mov edx, 0x11
cmp dx, word [edi + 0x14558a]
jl 0x50a06d
cmp eax, ecx
jge 0x50a06d
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2e8c]
add esp, 0xc
movsx eax, word [eax + 0xbe]
cmp eax, 4
ja case.default.0x509d60
jmp dword [eax*4 + 0x517e08]
push str.DRAW_DIALOGBOX_PVPT_MENU16
lea ecx, [ebp - 0x1988]
call fcn.0040f9f0
lea eax, [ebp - 0x1988]
mov dword [ebp - 4], 0x9f
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004994b0
lea ecx, [ebp - 0x1988]
jmp 0x509ec2
push str.DRAW_DIALOGBOX_PVPT_MENU38
lea ecx, [ebp - 0x19a0]
call fcn.0040f9f0
lea eax, [ebp - 0x19a0]
mov dword [ebp - 4], 0xa0
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004994b0
lea ecx, [ebp - 0x19a0]
jmp 0x509ec2
push str.DRAW_DIALOGBOX_PVPT_MENU39
lea ecx, [ebp - 0x19b8]
call fcn.0040f9f0
lea eax, [ebp - 0x19b8]
mov dword [ebp - 4], 0xa1
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004994b0
lea ecx, [ebp - 0x19b8]
jmp 0x509ec2
push str.DRAW_DIALOGBOX_PVPT_MENU227
lea ecx, [ebp - 0x19d0]
call fcn.0040f9f0
lea eax, [ebp - 0x19d0]
mov dword [ebp - 4], 0xa2
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004994b0
lea ecx, [ebp - 0x19d0]
jmp 0x509ec2
push str.DRAW_DIALOGBOX_PVPT_MENU228
lea ecx, [ebp - 0x19e8]
call fcn.0040f9f0
lea eax, [ebp - 0x19e8]
mov dword [ebp - 4], 0xa3
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004994b0
lea ecx, [ebp - 0x19e8]
add esp, 8
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
cmp byte [ebp - 0x2e7d], 0
je 0x509fc4
mov eax, dword [ebp + 8]
movsx ecx, ax
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x509fc4
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x509fc4
mov eax, dword [ebp - 0x2e74]
mov ecx, dword [ebp - 0x2e94]
cwde
shl ecx, 4
sub ecx, dword [ebp - 0x2e94]
mov dword [ebp - 0x2e90], eax
lea edx, [eax + 0x41]
mov eax, dword [ebp + 0xc]
add edx, ecx
cwde
mov dword [ebp - 0x2e78], edx
mov dword [ebp - 0x2e84], eax
cmp eax, edx
jl 0x509fc4
mov eax, dword [ebp - 0x2e90]
add eax, 0x4f
add eax, ecx
cmp dword [ebp - 0x2e84], eax
jg 0x509fc4
push str.DRAW_DIALOGBOX_PVPT_MENU37
lea ecx, [ebp - 0x1a00]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x1a00]
mov dword [ebp - 4], 0xa4
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e78]
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x1a00]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0xffffff
lea eax, [ebp - 0x110]
push eax
push dword [ebp - 0x2e78]
jmp 0x50a050
push str.DRAW_DIALOGBOX_PVPT_MENU37
lea ecx, [ebp - 0x1a18]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, dword [ebp - 0x2e94]
cwde
shl ecx, 4
sub ecx, dword [ebp - 0x2e94]
push 0
lea esi, [eax + 0x41]
mov dword [ebp - 4], 0xa5
push 0x320004
lea eax, [ebp - 0x1a18]
add esi, ecx
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e88]
mov ecx, edi
cwde
push esi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x1a18]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0x320004
lea eax, [ebp - 0x110]
push eax
push esi
mov esi, dword [ebp - 0x2e88]
movsx eax, si
mov ecx, edi
add eax, 0xb4
push eax
call fcn.0045d450
mov eax, dword [ebp - 0x2e94]
inc eax
mov dword [ebp - 0x2e94], eax
mov ecx, 0x12
cmp cx, word [edi + 0x14558a]
jl 0x50a371
cmp eax, dword [ebp - 0x2ea4]
jge 0x50a371
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
cmp byte [ebp - 0x2e7d], 0
je 0x50a237
mov eax, dword [ebp + 8]
movsx ecx, ax
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x50a237
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x50a237
mov eax, dword [ebp - 0x2e74]
mov ecx, dword [ebp - 0x2e94]
cwde
shl ecx, 4
sub ecx, dword [ebp - 0x2e94]
mov dword [ebp - 0x2e90], eax
lea edx, [eax + 0x41]
mov eax, dword [ebp + 0xc]
add edx, ecx
cwde
mov dword [ebp - 0x2e7c], edx
mov dword [ebp - 0x2e78], eax
cmp eax, edx
jl 0x50a237
mov eax, dword [ebp - 0x2e90]
add eax, 0x4f
add eax, ecx
cmp dword [ebp - 0x2e78], eax
jg 0x50a237
push str.DRAW_DIALOGBOX_PVPT_MENU40
lea ecx, [ebp - 0x1a30]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x1a30]
mov dword [ebp - 4], 0xa6
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x1a30]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, dword [ebp - 0x2e8c]
movsx esi, si
add esi, 0xb4
cmp byte [eax + 0xd2], 0
je 0x50a1e7
push str.DRAW_DIALOGBOX_PVPT_MENU34
lea ecx, [ebp - 0x1a48]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x1a48]
mov dword [ebp - 4], 0xa7
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
mov ecx, edi
push esi
call fcn.0045d450
lea ecx, [ebp - 0x1a48]
jmp 0x50a365
push str.DRAW_DIALOGBOX_PVPT_MENU35
lea ecx, [ebp - 0x1a60]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x1a60]
mov dword [ebp - 4], 0xa8
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
mov ecx, edi
push esi
call fcn.0045d450
lea ecx, [ebp - 0x1a60]
jmp 0x50a365
push str.DRAW_DIALOGBOX_PVPT_MENU40
lea ecx, [ebp - 0x1a78]
call fcn.0040f9f0
mov ecx, dword [ebp - 0x2e94]
mov eax, dword [ebp - 0x2e74]
cwde
shl ecx, 4
add eax, 0x41
sub ecx, dword [ebp - 0x2e94]
add eax, ecx
mov dword [ebp - 4], 0xa9
push 0
mov dword [ebp - 0x2e7c], eax
mov ecx, 0x5fd3c4
push 0x320004
lea eax, [ebp - 0x1a78]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x1a78]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, dword [ebp - 0x2e8c]
movsx esi, si
add esi, 0xb4
cmp byte [eax + 0xd2], 0
je 0x50a31a
push str.DRAW_DIALOGBOX_PVPT_MENU34
lea ecx, [ebp - 0x1a90]
call fcn.0040f9f0
push 0
push 0xff00
lea eax, [ebp - 0x1a90]
mov dword [ebp - 4], 0xaa
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
mov ecx, edi
push esi
call fcn.0045d450
lea ecx, [ebp - 0x1a90]
jmp 0x50a365
push str.DRAW_DIALOGBOX_PVPT_MENU35
lea ecx, [ebp - 0x1aa8]
call fcn.0040f9f0
push 0
push 0xff
lea eax, [ebp - 0x1aa8]
mov dword [ebp - 4], 0xab
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
mov ecx, edi
push esi
call fcn.0045d450
lea ecx, [ebp - 0x1aa8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
lea ecx, [edi + 0x18a074]
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x50a380
jmp 0x517ae9
push str.DRAW_DIALOGBOX_PVPT_MENU66
lea ecx, [ebp - 0x1ac0]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
push 0
cwde
push 0xc8
push 0xc8
push 0xdc
lea esi, [eax + 0x2d]
mov dword [ebp - 4], 0xac
lea eax, [ebp - 0x1ac0]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
mov ecx, dword [ebp - 0x2e88]
push eax
movsx eax, cx
add eax, 0xf0
push esi
push eax
movsx eax, cx
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d060
lea ecx, [ebp - 0x1ac0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU66
lea ecx, [ebp - 0x1ad8]
call fcn.0040f9f0
push 0
push 0xc8
push 0xc8
push 0xdc
lea eax, [ebp - 0x1ad8]
mov dword [ebp - 4], 0xad
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push esi
mov esi, dword [ebp - 0x2e88]
mov ecx, edi
movsx eax, si
add eax, 0xf1
push eax
movsx eax, si
add eax, 0x1a
push eax
call fcn.0045d060
lea ecx, [ebp - 0x1ad8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov ecx, dword [ebp - 0x2e8c]
mov dword [ebp - 0x2eb4], 0xffffffff
call fcn.005773c0
test eax, eax
jne 0x50a578
push str.DRAW_DIALOGBOX_PVPT_MENU64
lea ecx, [ebp - 0x1af0]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2ec0]
push 0
push 0
movsx ecx, ax
lea eax, [ebp - 0x1af0]
push 0
movsx esi, si
push 0
add esi, ecx
mov dword [ebp - 4], 0xae
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e74]
mov ecx, edi
cwde
add eax, 0x96
push eax
mov eax, dword [ebp - 0x2e88]
push esi
cwde
push eax
call fcn.0045d060
lea ecx, [ebp - 0x1af0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU65
lea ecx, [ebp - 0x1b08]
call fcn.0040f9f0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x1b08]
mov dword [ebp - 4], 0xaf
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e74]
mov ecx, edi
cwde
add eax, 0xa5
push eax
push esi
mov esi, dword [ebp - 0x2e88]
movsx eax, si
push eax
call fcn.0045d060
lea ecx, [ebp - 0x1b08]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
jmp 0x50a7b9
cmp byte [ebp - 0x2e7d], 0
jne 0x50a675
cmp byte [edi + 0x13c676], 0
je 0x50a675
push str.DRAW_DIALOGBOX_PVPT_MENU83
lea ecx, [ebp - 0x1b20]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2ec0]
push 0
push 0
movsx ecx, ax
lea eax, [ebp - 0x1b20]
push 0
movsx esi, si
push 0
add esi, ecx
mov dword [ebp - 4], 0xb0
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e74]
mov ecx, edi
cwde
add eax, 0x96
push eax
mov eax, dword [ebp - 0x2e88]
push esi
cwde
push eax
call fcn.0045d060
lea ecx, [ebp - 0x1b20]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU65
lea ecx, [ebp - 0x1b38]
call fcn.0040f9f0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x1b38]
mov dword [ebp - 4], 0xb1
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e74]
mov ecx, edi
cwde
add eax, 0xa5
push eax
push esi
mov esi, dword [ebp - 0x2e88]
movsx eax, si
push eax
call fcn.0045d060
lea ecx, [ebp - 0x1b38]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
jmp 0x50a7c6
mov edx, dword [edi + 0x145534]
xor eax, eax
mov dword [ebp - 0x2e7c], eax
test edx, edx
jle 0x50a7b9
movsx eax, si
mov esi, 2
mov dword [ebp - 0x2e90], eax
mov eax, dword [ebp - 0x2e74]
cwde
mov dword [ebp - 0x2ea8], eax
xor eax, eax
nop dword [eax + eax]
movsx ecx, word [edi + 0x14558a]
imul ecx, edx
add ecx, eax
mov dword [ebp - 0x2e78], ecx
cmp ecx, 0x14
jge 0x50a7b3
mov eax, dword [ebp - 0x2e8c]
mov ecx, dword [eax + ecx*4 + 0xf8]
test ecx, ecx
je 0x50a798
call fcn.00406fe0
mov cl, al
mov eax, dword [ebp - 0x2e7c]
cdq
xor cl, 1
idiv esi
movzx ecx, cl
push ecx
mov ecx, dword [ebp - 0x2e78]
mov esi, edx
mov edx, eax
mov eax, dword [ebp - 0x2e8c]
mov dword [ebp - 0x2e84], edx
mov ecx, dword [eax + ecx*4 + 0xf8]
imul eax, edx, 0x55
push dword [ecx + 0x48]
mov ecx, dword [ebp - 0x2e74]
add ecx, 0x5f
add eax, ecx
mov ecx, dword [ebp - 0x2e88]
push eax
imul eax, esi, 0x64
add ecx, 0x4b
add eax, ecx
mov ecx, edi
push eax
call fcn.0052f730
mov eax, dword [ebp + 8]
imul ecx, esi, 0x64
mov esi, dword [ebp - 0x2e90]
movsx edx, ax
lea eax, [esi + 0x2d]
add eax, ecx
cmp edx, eax
jl 0x50a793
lea eax, [esi + 0x69]
add eax, ecx
cmp edx, eax
jge 0x50a793
imul ecx, dword [ebp - 0x2e84], 0x55
mov esi, dword [ebp - 0x2ea8]
mov eax, dword [ebp + 0xc]
movsx edx, ax
lea eax, [esi + 0x41]
add eax, ecx
cmp edx, eax
jl 0x50a793
lea eax, [esi + 0x7d]
add eax, ecx
mov ecx, dword [ebp - 0x2eb4]
cmp edx, eax
cmovle ecx, dword [ebp - 0x2e78]
mov dword [ebp - 0x2eb4], ecx
mov esi, 2
mov eax, dword [ebp - 0x2e7c]
mov edx, dword [edi + 0x145534]
inc eax
mov dword [ebp - 0x2e7c], eax
cmp eax, edx
jl 0x50a6b0
mov esi, dword [ebp - 0x2e88]
cmp byte [ebp - 0x2e7d], 0
jne 0x50a8cd
movsx edx, si
add edx, 0xa0
cmp byte [edi + 0x13c676], 0
mov dword [ebp - 0x2e78], edx
je 0x50a83f
mov eax, dword [ebp + 8]
movsx ecx, ax
cmp ecx, edx
jl 0x50a832
movsx eax, si
add eax, 0xe6
cmp ecx, eax
jg 0x50a832
mov ecx, dword [ebp - 0x2e74]
mov eax, dword [ebp + 0xc]
movsx esi, cx
cwde
add esi, 0x12c
mov dword [ebp - 0x2e90], eax
cmp eax, esi
jl 0x50a832
movsx eax, cx
add eax, 0x140
cmp dword [ebp - 0x2e90], eax
jg 0x50a832
push 0x14
push 6
push 6
push str.Continue
push esi
jmp 0x50a8c5
push 7
push 0
push 0
push str.Continue
jmp 0x50a8b8
mov ecx, dword [ebp - 0x2e8c]
call fcn.005772b0
mov edx, dword [ebp - 0x2e78]
test al, al
je 0x50a8ad
mov eax, dword [ebp + 8]
movsx ecx, ax
cmp ecx, edx
jl 0x50a8a5
movsx eax, si
add eax, 0xe6
cmp ecx, eax
jg 0x50a8a5
mov ecx, dword [ebp - 0x2e74]
mov eax, dword [ebp + 0xc]
movsx esi, cx
cwde
add esi, 0x12c
mov dword [ebp - 0x2e90], eax
cmp eax, esi
jl 0x50a8a5
movsx eax, cx
add eax, 0x140
cmp dword [ebp - 0x2e90], eax
jg 0x50a8a5
push 0x14
push 6
push 6
push str.Pay_Fees
push esi
jmp 0x50a8c5
push 7
push 0
push 0
jmp 0x50a8b3
push 0xf
push 0xf
push 0xf
push str.Pay_Fees
mov eax, dword [ebp - 0x2e74]
cwde
add eax, 0x12c
push eax
push edx
mov ecx, edi
call fcn.0045dd00
mov ecx, dword [ebp - 0x2eb4]
cmp ecx, 0xffffffff
je case.default.0x5101e6
mov eax, dword [ebp - 0x2e8c]
push 0
mov eax, dword [eax + ecx*4 + 0xf8]
mov ecx, edi
push dword [eax + 0x48]
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.0047daf0
jmp case.default.0x5101e6
push str.DRAW_DIALOGBOX_PVPT_MENU67
lea ecx, [ebp - 0x1b50]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, dword [ebp - 0x2e88]
cwde
push 0
push 0xc8
push 0xc8
lea esi, [eax + 0x2d]
mov dword [ebp - 4], 0xb2
movsx eax, cx
add eax, 0xf0
mov dword [ebp - 0x2e84], eax
movsx eax, cx
mov ecx, 0x5fd3c4
add eax, 0x19
mov dword [ebp - 0x2e78], eax
lea eax, [ebp - 0x1b50]
push 0xdc
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push esi
push dword [ebp - 0x2e84]
mov ecx, edi
push dword [ebp - 0x2e78]
call fcn.0045d060
lea ecx, [ebp - 0x1b50]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU67
lea ecx, [ebp - 0x1b68]
call fcn.0040f9f0
push 0
push 0xc8
push 0xc8
push 0xdc
lea eax, [ebp - 0x1b68]
mov dword [ebp - 4], 0xb3
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push esi
mov esi, dword [ebp - 0x2e88]
mov ecx, edi
movsx eax, si
add eax, 0xf1
push eax
movsx eax, si
add eax, 0x1a
push eax
call fcn.0045d060
lea ecx, [ebp - 0x1b68]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
xor edx, edx
mov dword [ebp - 0x2e7c], edx
cmp dword [edi + 0x14552c], edx
jle 0x50aaf6
movsx eax, si
mov esi, dword [ebp - 0x2e8c]
mov dword [ebp - 0x2ea0], eax
mov eax, dword [ebp - 0x2e74]
movsx ecx, ax
add ecx, 0x50
mov dword [ebp - 0x2eb4], ecx
nop word [eax + eax]
movsx eax, word [edi + 0x14558a]
add eax, edx
cmp eax, 0x200
jge 0x50aaf0
mov eax, dword [esi + eax*4 + 0x148]
mov dword [ebp - 0x2ea8], eax
test eax, eax
je 0x50aad4
mov eax, dword [ebp + 8]
cwde
cmp eax, dword [ebp - 0x2e78]
jle 0x50aa9d
cmp eax, dword [ebp - 0x2e84]
jge 0x50aa9d
mov eax, dword [ebp + 0xc]
movsx edx, ax
cmp edx, ecx
jl 0x50aa9d
lea eax, [ecx + 0xf]
cmp edx, eax
jge 0x50aa9d
push 0
push 0xff
push 0xff
push 0xff
jmp 0x50aaa5
push 0
push 0x32
push 0
push 4
mov eax, dword [ebp - 0x2ea8]
add eax, 8
push eax
mov eax, dword [ebp - 0x2ec0]
push ecx
mov ecx, dword [ebp - 0x2ea0]
cwde
add eax, ecx
push eax
push ecx
mov ecx, edi
call fcn.0045d060
mov edx, dword [ebp - 0x2e7c]
mov ecx, dword [ebp - 0x2eb4]
inc edx
add ecx, 0xf
mov dword [ebp - 0x2e7c], edx
mov dword [ebp - 0x2eb4], ecx
cmp edx, dword [edi + 0x14552c]
jl 0x50aa40
mov esi, dword [ebp - 0x2e88]
cmp byte [ebp - 0x2e7d], 0
jne case.default.0x5101e6
mov ecx, dword [ebp - 0x2e8c]
movsx eax, si
add eax, 0xaa
mov dword [ebp - 0x2e78], eax
call fcn.005772f0
test al, al
je 0x50ab8d
mov eax, dword [ebp + 8]
mov edx, dword [ebp - 0x2e78]
movsx ecx, ax
cmp ecx, edx
jl 0x50ab82
movsx eax, si
add eax, 0xe6
cmp ecx, eax
jg 0x50ab82
mov ecx, dword [ebp - 0x2e74]
mov eax, dword [ebp + 0xc]
movsx esi, cx
cwde
add esi, 0x12c
mov dword [ebp - 0x2e90], eax
cmp eax, esi
jl 0x50ab82
movsx eax, cx
add eax, 0x140
cmp dword [ebp - 0x2e90], eax
jg 0x50ab82
push 0x14
push 6
push 6
push str.Register
push esi
push edx
mov ecx, edi
call fcn.0045dd00
jmp case.default.0x5101e6
push 7
push 0
push 0
jmp 0x50be3c
mov eax, dword [ebp - 0x2e74]
mov ecx, edi
push 0xf
push 0xf
push 0xf
cwde
push str.Register
add eax, 0x12c
push eax
push dword [ebp - 0x2e78]
call fcn.0045dd00
jmp case.default.0x5101e6
mov edx, dword [ebp - 0x2eb0]
add edx, 8
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x50abc5
sub ecx, esi
jne 0x50ac25
push str.DRAW_DIALOGBOX_PVPT_MENU69
lea ecx, [ebp - 0x1b80]
call fcn.0040f9f0
lea eax, [ebp - 0x1b80]
mov dword [ebp - 4], 0xb4
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push 0x29
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1b80]
call fcn.00411640
jmp 0x50ac37
push edx
lea eax, [ebp - 0x110]
push 0x29
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
add esp, 0xc
mov eax, dword [ebp - 0x2e74]
mov ecx, dword [ebp - 0x2e88]
push 0
cwde
push 0xc8
push 0xc8
movsx edx, cx
lea esi, [eax + 0x2d]
add edx, 0xf0
movsx eax, cx
lea ecx, [ebp - 0x110]
push 0xdc
push ecx
push esi
add eax, 0x19
mov dword [ebp - 0x2e78], edx
push edx
push eax
mov ecx, edi
mov dword [ebp - 0x2eb4], eax
call fcn.0045d060
push 0
push 0xc8
push 0xc8
push 0xdc
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
push esi
mov esi, dword [ebp - 0x2e88]
movsx eax, si
add eax, 0xf1
push eax
movsx eax, si
add eax, 0x1a
push eax
call fcn.0045d060
cmp dword [edi + 0x14552c], 0
mov dword [ebp - 0x2ea8], 0
jle 0x50af5f
mov edx, dword [ebp - 0x2eb0]
movsx eax, si
mov esi, dword [ebp + 8]
mov dword [ebp - 0x2e84], eax
mov eax, dword [ebp - 0x2e74]
cwde
add eax, 0x50
mov dword [ebp - 0x2ebc], eax
movsx ecx, word [edi + 0x14558a]
add ecx, dword [ebp - 0x2ea8]
mov dword [ebp - 0x2e7c], ecx
cmp ecx, 0x64
jge 0x50af59
cmp dword [edx + ecx*4 + 0x44], 0
je 0x50af37
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2e7c]
add esp, 0xc
mov ecx, dword [ebp - 0x2eb0]
mov eax, dword [ecx + eax*4 + 0x44]
cmp byte [eax + 0x17], 0
je 0x50ade0
push 0x1a
xorps xmm0, xmm0
mov dword [ebp - 0x2b0], 0
push str.DRAW_DIALOGBOX_PVPT_MENU70
lea ecx, [ebp - 0x2c0]
mov dword [ebp - 0x2ac], 0
movups xmmword [ebp - 0x2c0], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x2c0]
mov dword [ebp - 4], 0xb5
push eax
lea eax, [ebp - 0x2ed0]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x50ada6
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x2eb0]
mov eax, dword [ebp - 0x2e7c]
mov eax, dword [edx + eax*4 + 0x44]
add eax, 0xc
push eax
push ecx
lea eax, [ebp - 0x110]
push eax
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
call eax
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c0]
call fcn.00411640
jmp 0x50adfa
add eax, 0xc
push eax
lea eax, [ebp - 0x110]
push 0x5c7a40
push eax
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
call eax
add esp, 0xc
mov edx, dword [ebp - 0x2eb4]
mov ecx, dword [ebp - 0x2ebc]
movsx eax, si
mov dword [ebp - 0x2ea0], eax
cmp eax, edx
jle 0x50ae46
cmp eax, dword [ebp - 0x2e78]
jge 0x50ae46
mov eax, dword [ebp + 0xc]
cwde
mov dword [ebp - 0x2e90], eax
cmp eax, ecx
jl 0x50ae46
lea eax, [ecx + 0xf]
cmp dword [ebp - 0x2e90], eax
jge 0x50ae46
push 0
push 0xffffff
lea eax, [ebp - 0x110]
push eax
push ecx
push edx
jmp 0x50ae78
mov eax, dword [ebp - 0x2e7c]
mov edx, dword [ebp - 0x2eb0]
push 0
mov eax, dword [edx + eax*4 + 0x44]
cmp byte [eax + 0x18], 0
lea eax, [ebp - 0x110]
je 0x50ae6b
push 0xff00
jmp 0x50ae70
push 0xff
push eax
push ecx
push dword [ebp - 0x2eb4]
mov ecx, edi
call fcn.0045d450
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2e7c]
mov ecx, dword [ebp - 0x2eb0]
mov ecx, dword [ecx + eax*4 + 0x44]
movzx eax, word [ecx + 0x24]
push eax
movzx eax, word [ecx + 0x22]
push eax
movzx eax, word [ecx + 0x20]
push eax
movzx eax, word [ecx + 0x1c]
push eax
movzx eax, word [ecx + 0x1a]
push eax
lea eax, [ebp - 0x110]
push str._04d__02d__02d__02d:_02d
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
mov eax, dword [ebp - 0x2ea0]
add esp, 0x28
mov ecx, dword [ebp - 0x2ebc]
cmp eax, dword [ebp - 0x2eb4]
jle 0x50af09
movsx eax, si
cmp eax, dword [ebp - 0x2e78]
jge 0x50af09
mov eax, dword [ebp + 0xc]
movsx edx, ax
cmp edx, ecx
jl 0x50af09
lea eax, [ecx + 0xf]
cmp edx, eax
jge 0x50af09
push 0
push 0xffffff
jmp 0x50af10
push 0
push 0x320004
lea eax, [ebp - 0x110]
push eax
mov eax, dword [ebp - 0x2e84]
push ecx
add eax, 0x91
mov ecx, edi
push eax
call fcn.0045d450
mov edx, dword [ebp - 0x2eb0]
mov eax, dword [ebp - 0x2ebc]
mov ecx, dword [ebp - 0x2ea8]
add eax, 0xf
inc ecx
mov dword [ebp - 0x2ebc], eax
mov dword [ebp - 0x2ea8], ecx
cmp ecx, dword [edi + 0x14552c]
jl 0x50acf3
mov esi, dword [ebp - 0x2e88]
cmp byte [ebp - 0x2e7d], 0
jne case.default.0x5101e6
push dword [ebp - 0x2eb0]
mov ecx, dword [ebp - 0x2e8c]
movsx eax, si
add eax, 0xc8
mov dword [ebp - 0x2e78], eax
call fcn.00577210
test al, al
je 0x50b001
mov eax, dword [ebp + 8]
mov edx, dword [ebp - 0x2e78]
movsx ecx, ax
cmp ecx, edx
jl 0x50aff1
movsx eax, si
add eax, 0xe6
cmp ecx, eax
jg 0x50aff1
mov ecx, dword [ebp - 0x2e74]
mov eax, dword [ebp + 0xc]
movsx esi, cx
cwde
add esi, 0x12c
mov dword [ebp - 0x2e90], eax
cmp eax, esi
jl 0x50aff1
movsx eax, cx
add eax, 0x140
cmp dword [ebp - 0x2e90], eax
jg 0x50aff1
push 0x14
push 6
push 6
push str.Join
push esi
push edx
mov ecx, edi
call fcn.0045dd00
jmp case.default.0x5101e6
push 7
push 0
push 0
push str.Join
jmp 0x50be41
mov eax, dword [ebp - 0x2e74]
mov ecx, edi
push 0xf
push 0xf
push 0xf
cwde
push str.Join
add eax, 0x12c
push eax
push dword [ebp - 0x2e78]
call fcn.0045dd00
jmp case.default.0x5101e6
push str.DRAW_DIALOGBOX_PVPT_MENU72
lea ecx, [ebp - 0x1b98]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
cwde
push 0
push 0xc8
push 0xc8
lea esi, [eax + 0x2d]
mov dword [ebp - 4], 0xb6
mov eax, dword [ebp - 0x2e88]
cwde
add eax, 0x19
mov dword [ebp - 0x2e90], esi
mov dword [ebp - 0x2ebc], eax
lea eax, [ebp - 0x1b98]
push 0xdc
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e88]
mov ecx, edi
cwde
push esi
add eax, 0xf0
push eax
push dword [ebp - 0x2ebc]
call fcn.0045d060
lea ecx, [ebp - 0x1b98]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU72
lea ecx, [ebp - 0x1bb0]
call fcn.0040f9f0
push 0
push 0xc8
push 0xc8
push 0xdc
lea eax, [ebp - 0x1bb0]
mov dword [ebp - 4], 0xb7
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
mov ecx, dword [ebp - 0x2e88]
push eax
movsx eax, cx
add eax, 0xf1
push esi
push eax
movsx eax, cx
mov ecx, edi
add eax, 0x1a
push eax
call fcn.0045d060
lea ecx, [ebp - 0x1bb0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, dword [ebp - 0x2e9c]
push dword [eax + 4]
lea eax, [ebp - 0x110]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [ebp - 0x1bc8]
push str.DRAW_DIALOGBOX_PVPT_MENU73
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
cwde
push 0
mov dword [ebp - 4], 0xb8
push 0x320004
lea esi, [eax + 0x50]
lea eax, [ebp - 0x1bc8]
mov ecx, 0x5fd3c4
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push esi
push dword [ebp - 0x2ebc]
mov ecx, edi
call fcn.0045d450
lea ecx, [ebp - 0x1bc8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov ecx, dword [ebp - 0x2e88]
lea eax, [ebp - 0x110]
push 0
push 0x320004
movsx edi, cx
mov ecx, dword [ebp - 0x2eb8]
add edi, 0xaa
push eax
push esi
push edi
call fcn.0045d450
push str.DRAW_DIALOGBOX_PVPT_MENU74
lea ecx, [ebp - 0x1be0]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
cwde
push 0
push 0x320004
mov dword [ebp - 4], 0xb9
lea esi, [eax + 0x5f]
lea eax, [ebp - 0x1be0]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
mov ecx, dword [ebp - 0x2eb8]
push eax
push esi
push dword [ebp - 0x2ebc]
call fcn.0045d450
lea ecx, [ebp - 0x1be0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, dword [ebp - 0x2e9c]
push 0
push 0x320004
add eax, 0xc
push eax
push esi
push edi
mov edi, dword [ebp - 0x2eb8]
mov ecx, edi
call fcn.0045d450
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov ecx, dword [ebp - 0x2e9c]
movzx eax, word [ecx + 0x24]
push eax
movzx eax, word [ecx + 0x22]
push eax
movzx eax, word [ecx + 0x20]
push eax
movzx eax, word [ecx + 0x1c]
push eax
movzx eax, word [ecx + 0x1a]
push eax
lea eax, [ebp - 0x110]
push str._04d__02d__02d__02d:_02d
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x28
push str.DRAW_DIALOGBOX_PVPT_MENU75
lea ecx, [ebp - 0x1bf8]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
cwde
push 0
push 0x320004
mov dword [ebp - 4], 0xba
lea esi, [eax + 0x6e]
lea eax, [ebp - 0x1bf8]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push esi
push dword [ebp - 0x2ebc]
mov ecx, edi
call fcn.0045d450
lea ecx, [ebp - 0x1bf8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0x320004
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
push esi
mov esi, dword [ebp - 0x2e88]
movsx eax, si
add eax, 0x91
push eax
call fcn.0045d450
push str.DRAW_DIALOGBOX_PVPT_MENU76
lea ecx, [ebp - 0x1c10]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e90]
mov ecx, 0x5fd3c4
add eax, 0x50
mov dword [ebp - 4], 0xbb
push 0
mov dword [ebp - 0x2e7c], eax
lea eax, [ebp - 0x1c10]
push 0x320004
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
mov ecx, edi
push dword [ebp - 0x2ebc]
call fcn.0045d450
lea ecx, [ebp - 0x1c10]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
movsx eax, si
add eax, 0xd2
mov dword [ebp - 0x2ec4], eax
mov eax, dword [ebp - 0x2e9c]
cmp byte [eax + 0x17], 0
je 0x50b3fc
push str.DRAW_DIALOGBOX_PVPT_MENU15
lea ecx, [ebp - 0x1c28]
call fcn.0040f9f0
push 0
push 0xff00
lea eax, [ebp - 0x1c28]
mov dword [ebp - 4], 0xbc
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
mov ecx, edi
push dword [ebp - 0x2ec4]
call fcn.0045d450
lea ecx, [ebp - 0x1c28]
jmp 0x50b44c
push str.DRAW_DIALOGBOX_PVPT_MENU16
lea ecx, [ebp - 0x1c40]
call fcn.0040f9f0
push 0
push 0xff
lea eax, [ebp - 0x1c40]
mov dword [ebp - 4], 0xbd
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
mov ecx, edi
push dword [ebp - 0x2ec4]
call fcn.0045d450
lea ecx, [ebp - 0x1c40]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU77
lea ecx, [ebp - 0x1c58]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
cwde
add eax, 0x8c
mov dword [ebp - 4], 0xbe
push 0
mov dword [ebp - 0x2e7c], eax
lea eax, [ebp - 0x1c58]
push 0x320004
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
mov ecx, edi
push dword [ebp - 0x2ebc]
call fcn.0045d450
lea ecx, [ebp - 0x1c58]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, dword [ebp - 0x2e9c]
cmp byte [eax + 0x18], 0
je 0x50b524
push str.DRAW_DIALOGBOX_PVPT_MENU15
lea ecx, [ebp - 0x1c70]
call fcn.0040f9f0
push 0
push 0xff00
lea eax, [ebp - 0x1c70]
mov dword [ebp - 4], 0xbf
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
mov ecx, edi
push dword [ebp - 0x2ec4]
call fcn.0045d450
lea ecx, [ebp - 0x1c70]
jmp 0x50b574
push str.DRAW_DIALOGBOX_PVPT_MENU16
lea ecx, [ebp - 0x1c88]
call fcn.0040f9f0
push 0
push 0xff
lea eax, [ebp - 0x1c88]
mov dword [ebp - 4], 0xc0
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
mov ecx, edi
push dword [ebp - 0x2ec4]
call fcn.0045d450
lea ecx, [ebp - 0x1c88]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU149
lea ecx, [ebp - 0x1ca0]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
cwde
add eax, 0x9b
mov dword [ebp - 4], 0xc1
push 0
mov dword [ebp - 0x2e7c], eax
lea eax, [ebp - 0x1ca0]
push 0x320004
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
mov ecx, edi
push dword [ebp - 0x2ebc]
call fcn.0045d450
lea ecx, [ebp - 0x1ca0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, dword [ebp - 0x2e9c]
cmp byte [eax + 0x19], 0
je 0x50b64c
push str.DRAW_DIALOGBOX_PVPT_MENU15
lea ecx, [ebp - 0x1cb8]
call fcn.0040f9f0
push 0
push 0xff00
lea eax, [ebp - 0x1cb8]
mov dword [ebp - 4], 0xc2
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
mov ecx, edi
push dword [ebp - 0x2ec4]
call fcn.0045d450
lea ecx, [ebp - 0x1cb8]
jmp 0x50b69c
push str.DRAW_DIALOGBOX_PVPT_MENU16
lea ecx, [ebp - 0x1cd0]
call fcn.0040f9f0
push 0
push 0xff
lea eax, [ebp - 0x1cd0]
mov dword [ebp - 4], 0xc3
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
mov ecx, edi
push dword [ebp - 0x2ec4]
call fcn.0045d450
lea ecx, [ebp - 0x1cd0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push dword [edi + 0x18bff8]
mov ecx, dword [ebp - 0x2eb0]
call fcn.00577b00
test al, al
jne 0x50b6c9
cmp byte [ebp - 0x2ec5], al
je 0x50b825
mov eax, dword [ebp - 0x2e9c]
mov ecx, dword [ebp - 0x2eb0]
push dword [eax + 8]
call fcn.00577b00
test al, al
jne 0x50b825
mov eax, dword [ebp + 8]
movsx ecx, ax
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x50b7b3
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x50b7b3
mov eax, dword [ebp - 0x2e74]
movsx ecx, ax
lea eax, [ecx + 0xb9]
mov dword [ebp - 0x2e90], eax
mov eax, dword [ebp + 0xc]
movsx edx, ax
lea eax, [ecx + 0xb9]
cmp edx, eax
jl 0x50b7b3
lea eax, [ecx + 0xc7]
cmp edx, eax
jg 0x50b7b3
push str.DRAW_DIALOGBOX_PVPT_MENU80
lea ecx, [ebp - 0x1ce8]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2ec0]
movsx ecx, ax
push 0
push 0xff
movsx eax, si
add eax, ecx
mov dword [ebp - 4], 0xc4
push 0xff
mov dword [ebp - 0x2ebc], eax
mov ecx, 0x5fd3c4
push 0xff
lea eax, [ebp - 0x1ce8]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e90]
movsx eax, si
mov ecx, edi
push dword [ebp - 0x2ebc]
push eax
call fcn.0045d060
lea ecx, [ebp - 0x1ce8]
jmp 0x50b895
push str.DRAW_DIALOGBOX_PVPT_MENU80
lea ecx, [ebp - 0x1d00]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2ec0]
movsx ecx, ax
push 0
push 0x32
movsx eax, si
add eax, ecx
mov dword [ebp - 4], 0xc5
push 0
mov dword [ebp - 0x2ebc], eax
mov ecx, 0x5fd3c4
push 4
lea eax, [ebp - 0x1d00]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e74]
mov ecx, edi
cwde
add eax, 0xb9
push eax
push dword [ebp - 0x2ebc]
movsx eax, si
push eax
call fcn.0045d060
lea ecx, [ebp - 0x1d00]
jmp 0x50b895
push str.DRAW_DIALOGBOX_PVPT_MENU80
lea ecx, [ebp - 0x1d18]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2ec0]
movsx ecx, ax
push 0
push 0x41
movsx eax, si
add eax, ecx
mov dword [ebp - 4], 0xc6
push 0x41
mov dword [ebp - 0x2ebc], eax
mov ecx, 0x5fd3c4
push 0x41
lea eax, [ebp - 0x1d18]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e74]
mov ecx, edi
cwde
add eax, 0xb9
push eax
push dword [ebp - 0x2ebc]
movsx eax, si
push eax
call fcn.0045d060
lea ecx, [ebp - 0x1d18]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, dword [ebp - 0x2e9c]
mov ecx, dword [edi + 0x18bff8]
cmp dword [eax + 8], ecx
jne 0x50b9d7
mov eax, dword [ebp + 8]
movsx ecx, ax
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x50b971
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x50b971
mov eax, dword [ebp - 0x2e74]
movsx ecx, ax
lea eax, [ecx + 0xd7]
mov dword [ebp - 0x2e90], eax
mov eax, dword [ebp + 0xc]
movsx edx, ax
lea eax, [ecx + 0xd7]
cmp edx, eax
jl 0x50b971
lea eax, [ecx + 0xe5]
cmp edx, eax
jg 0x50b971
push str.DRAW_DIALOGBOX_PVPT_MENU82
lea ecx, [ebp - 0x1d30]
call fcn.0040f9f0
push 0
push 0xff
push 0xff
push 0xff
lea eax, [ebp - 0x1d30]
mov dword [ebp - 4], 0xc7
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e90]
movsx eax, si
mov ecx, edi
push dword [ebp - 0x2ebc]
push eax
call fcn.0045d060
lea ecx, [ebp - 0x1d30]
call fcn.00411640
jmp case.default.0x5101e6
push str.DRAW_DIALOGBOX_PVPT_MENU82
lea ecx, [ebp - 0x1d48]
call fcn.0040f9f0
push 0
push 0x32
push 0
push 4
lea eax, [ebp - 0x1d48]
mov dword [ebp - 4], 0xc8
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e74]
mov ecx, edi
cwde
add eax, 0xd7
push eax
push dword [ebp - 0x2ebc]
movsx eax, si
push eax
call fcn.0045d060
lea ecx, [ebp - 0x1d48]
call fcn.00411640
jmp case.default.0x5101e6
push ecx
mov ecx, dword [ebp - 0x2eb0]
call fcn.00577b00
test al, al
jne 0x50ba55
cmp byte [ebp - 0x2ec5], al
jne 0x50ba55
push str.DRAW_DIALOGBOX_PVPT_MENU81
lea ecx, [ebp - 0x1d60]
call fcn.0040f9f0
push 0
push 0x41
push 0x41
push 0x41
lea eax, [ebp - 0x1d60]
mov dword [ebp - 4], 0xcb
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e74]
mov ecx, edi
cwde
add eax, 0xd7
push eax
push dword [ebp - 0x2ebc]
movsx eax, si
push eax
call fcn.0045d060
lea ecx, [ebp - 0x1d60]
call fcn.00411640
jmp case.default.0x5101e6
mov eax, dword [ebp + 8]
movsx ecx, ax
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x50bb19
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x50bb19
mov eax, dword [ebp - 0x2e74]
movsx ecx, ax
lea eax, [ecx + 0xd7]
mov dword [ebp - 0x2e90], eax
mov eax, dword [ebp + 0xc]
movsx edx, ax
lea eax, [ecx + 0xd7]
cmp edx, eax
jl 0x50bb19
lea eax, [ecx + 0xe5]
cmp edx, eax
jg 0x50bb19
push str.DRAW_DIALOGBOX_PVPT_MENU81
lea ecx, [ebp - 0x1d78]
call fcn.0040f9f0
push 0
push 0xff
push 0xff
push 0xff
lea eax, [ebp - 0x1d78]
mov dword [ebp - 4], 0xc9
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2ec0]
push dword [ebp - 0x2e90]
movsx ecx, ax
movsx eax, si
add ecx, eax
movsx eax, si
push ecx
push eax
mov ecx, edi
call fcn.0045d060
lea ecx, [ebp - 0x1d78]
call fcn.00411640
jmp case.default.0x5101e6
push str.DRAW_DIALOGBOX_PVPT_MENU81
lea ecx, [ebp - 0x1d90]
call fcn.0040f9f0
push 0
push 0x32
push 0
push 4
lea eax, [ebp - 0x1d90]
mov dword [ebp - 4], 0xca
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e74]
cwde
add eax, 0xd7
push eax
mov eax, dword [ebp - 0x2ec0]
movsx ecx, ax
movsx eax, si
add ecx, eax
movsx eax, si
push ecx
push eax
mov ecx, edi
call fcn.0045d060
lea ecx, [ebp - 0x1d90]
call fcn.00411640
jmp case.default.0x5101e6
push str.DRAW_DIALOGBOX_PVPT_MENU85
lea ecx, [ebp - 0x1da8]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
push 0
cwde
push 0xc8
push 0xc8
push 0xdc
lea esi, [eax + 0x2d]
mov dword [ebp - 4], 0xcc
lea eax, [ebp - 0x1da8]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
mov ecx, dword [ebp - 0x2e88]
push eax
movsx eax, cx
add eax, 0xf0
push esi
push eax
movsx eax, cx
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d060
lea ecx, [ebp - 0x1da8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU85
lea ecx, [ebp - 0x1dc0]
call fcn.0040f9f0
push 0
push 0xc8
push 0xc8
push 0xdc
lea eax, [ebp - 0x1dc0]
mov dword [ebp - 4], 0xcd
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push esi
mov esi, dword [ebp - 0x2e88]
mov ecx, edi
movsx eax, si
add eax, 0xf1
push eax
movsx eax, si
add eax, 0x1a
push eax
call fcn.0045d060
lea ecx, [ebp - 0x1dc0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU86
lea ecx, [ebp - 0x1dd8]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2ec0]
push 0
push 0x19
movsx ecx, ax
lea eax, [ebp - 0x1dd8]
push 0x19
movsx esi, si
push 0x37
add esi, ecx
mov dword [ebp - 4], 0xce
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e74]
mov ecx, edi
cwde
add eax, 0x55
push eax
mov eax, dword [ebp - 0x2e88]
push esi
cwde
push eax
call fcn.0045d060
lea ecx, [ebp - 0x1dd8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU87
lea ecx, [ebp - 0x1df0]
call fcn.0040f9f0
push 0
push 0x19
push 0x19
push 0x37
lea eax, [ebp - 0x1df0]
mov dword [ebp - 4], 0xcf
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e74]
mov ecx, edi
cwde
add eax, 0x7d
push eax
push esi
mov esi, dword [ebp - 0x2e88]
movsx eax, si
push eax
call fcn.0045d060
lea ecx, [ebp - 0x1df0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov ecx, dword [ebp - 0x2e74]
push 0
push 0x192319
movsx ecx, cx
add ecx, 0x8c
movsx eax, si
push str.____________________
add eax, 0x3c
mov dword [ebp - 0x2e90], ecx
push ecx
push eax
mov ecx, edi
mov dword [ebp - 0x2e78], eax
call fcn.0045d450
cmp byte [edi + 0x189668], 0
je 0x50bda3
mov ecx, edi
call fcn.004973c0
cmp eax, 0x3d
jne 0x50bda3
cmp word [edi + 0x14568c], 8
jne 0x50bdc4
push 0
push 0xffffff
lea eax, [edi + 0x13c62d]
mov ecx, edi
push eax
push dword [ebp - 0x2e90]
push dword [ebp - 0x2e78]
call fcn.0045d450
lea ecx, [edi + 0x13c62d]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x50bdd0
sub ecx, edx
movsx edx, si
lea edx, [edx + 0xaa]
je 0x50be36
mov eax, dword [ebp + 8]
movsx ecx, ax
cmp ecx, edx
jl 0x50ab82
movsx eax, si
add eax, 0xe6
cmp ecx, eax
jg 0x50ab82
mov ecx, dword [ebp - 0x2e74]
mov eax, dword [ebp + 0xc]
movsx esi, cx
cwde
add esi, 0x12c
mov dword [ebp - 0x2e90], eax
cmp eax, esi
jl 0x50ab82
movsx eax, cx
add eax, 0x140
cmp dword [ebp - 0x2e90], eax
jmp 0x50ab67
push 0xf
push 0xf
push 0xf
push str.Register
mov eax, dword [ebp - 0x2e74]
mov ecx, edi
cwde
add eax, 0x12c
push eax
push edx
call fcn.0045dd00
jmp case.default.0x5101e6
push str.DRAW_DIALOGBOX_PVPT_MENU101
lea ecx, [ebp - 0x1e08]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, dword [ebp - 0x2e88]
cwde
push 0
push 0xc8
push 0xc8
lea esi, [eax + 0x2d]
mov dword [ebp - 4], 0xd0
movsx eax, cx
add eax, 0xf0
mov dword [ebp - 0x2e84], eax
movsx eax, cx
mov ecx, 0x5fd3c4
add eax, 0x19
mov dword [ebp - 0x2e78], eax
lea eax, [ebp - 0x1e08]
push 0xdc
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push esi
push dword [ebp - 0x2e84]
mov ecx, edi
push dword [ebp - 0x2e78]
call fcn.0045d060
lea ecx, [ebp - 0x1e08]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU101
lea ecx, [ebp - 0x1e20]
call fcn.0040f9f0
push 0
push 0xc8
push 0xc8
push 0xdc
lea eax, [ebp - 0x1e20]
mov dword [ebp - 4], 0xd1
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push esi
mov esi, dword [ebp - 0x2e88]
mov ecx, edi
movsx eax, si
add eax, 0xf1
push eax
movsx eax, si
add eax, 0x1a
push eax
call fcn.0045d060
lea ecx, [ebp - 0x1e20]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov ecx, edi
call fcn.0047cff0
xor ecx, ecx
mov dword [ebp - 0x2eb4], ecx
cmp dword [edi + 0x14552c], ecx
jle 0x50c1d3
movsx eax, si
mov esi, dword [ebp - 0x2e8c]
mov dword [ebp - 0x2ea0], eax
mov eax, dword [ebp - 0x2e74]
cwde
add eax, 0x50
mov dword [ebp - 0x2ea8], eax
nop word [eax + eax]
movsx eax, word [edi + 0x14558a]
add eax, ecx
mov dword [ebp - 0x2e7c], eax
cmp eax, 0xf
jge 0x50c1d3
cmp dword [esi + eax*4 + 0x948], 0
je 0x50c1b9
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2e7c]
add esp, 0xc
cmp byte [esi + 0xc1], 0
je 0x50c074
test eax, eax
jne 0x50c075
push 0x1b
xorps xmm0, xmm0
mov dword [ebp - 0x2c8], eax
push str.DRAW_DIALOGBOX_PVPT_MENU235
lea ecx, [ebp - 0x2d8]
mov dword [ebp - 0x2c4], eax
movups xmmword [ebp - 0x2d8], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x2d8]
mov dword [ebp - 4], 0xd2
push eax
lea eax, [ebp - 0x2ed8]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x50c04b
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x110]
push 0x100
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2d8]
call fcn.00411640
jmp 0x50c08b
inc eax
push eax
lea eax, [ebp - 0x110]
push str.Round__d
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x2ea8]
cwde
cmp eax, dword [ebp - 0x2e78]
jle 0x50c18b
cmp eax, dword [ebp - 0x2e84]
jge 0x50c18b
mov eax, dword [ebp + 0xc]
movsx edx, ax
cmp edx, ecx
jl 0x50c18b
lea eax, [ecx + 0xf]
cmp edx, eax
jge 0x50c18b
push 0
push 0xff
push 0xff
push 0xff
lea eax, [ebp - 0x110]
push eax
mov eax, dword [ebp - 0x2ec0]
push ecx
mov ecx, dword [ebp - 0x2ea0]
cwde
add eax, ecx
push eax
push ecx
mov ecx, edi
call fcn.0045d060
push 0x1b
xorps xmm0, xmm0
mov dword [ebp - 0x280], 0
push str.DRAW_DIALOGBOX_PVPT_MENU229
lea ecx, [ebp - 0x290]
mov dword [ebp - 0x27c], 0
movups xmmword [ebp - 0x290], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x290]
mov dword [ebp - 4], 0xd3
push eax
lea eax, [ebp - 0x2ee0]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x50c153
mov ecx, dword [ecx]
mov eax, dword [ebp - 0x2e7c]
mov eax, dword [esi + eax*4 + 0x948]
push dword [eax + 0x808]
lea eax, [edi + 0x18a074]
push ecx
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x290]
call fcn.00411640
jmp 0x50c1b3
push 0
push 0x32
push 0
push 4
lea eax, [ebp - 0x110]
push eax
mov eax, dword [ebp - 0x2ec0]
push ecx
mov ecx, dword [ebp - 0x2ea0]
cwde
add eax, ecx
push eax
push ecx
mov ecx, edi
call fcn.0045d060
mov ecx, dword [ebp - 0x2eb4]
add dword [ebp - 0x2ea8], 0xf
inc ecx
mov dword [ebp - 0x2eb4], ecx
cmp ecx, dword [edi + 0x14552c]
jl 0x50bfa0
lea ecx, [edi + 0x18a074]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x50c1e0
jmp 0x517ae9
mov eax, dword [ebp - 0x2e8c]
mov esi, dword [sym.imp.USER32.dll_wsprintfA]
cmp byte [eax + 0xc1], 0
je 0x50c29f
cmp dword [edi + 0x145538], 0
jne 0x50c258
push str.DRAW_DIALOGBOX_PVPT_MENU236
lea ecx, [ebp - 0x1e38]
call fcn.0040f9f0
lea eax, [ebp - 0x1e38]
mov dword [ebp - 4], 0xd4
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004994b0
add esp, 8
lea ecx, [ebp - 0x1e38]
jmp 0x50c2e9
push str.DRAW_DIALOGBOX_PVPT_MENU106
lea ecx, [ebp - 0x1e50]
call fcn.0040f9f0
push dword [edi + 0x145538]
lea eax, [ebp - 0x1e50]
mov dword [ebp - 4], 0xd5
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call esi
lea ecx, [ebp - 0x1e50]
jmp 0x50c2e6
push str.DRAW_DIALOGBOX_PVPT_MENU106
lea ecx, [ebp - 0x1e68]
call fcn.0040f9f0
mov eax, dword [edi + 0x145538]
mov ecx, 0x5fd3c4
inc eax
mov dword [ebp - 4], 0xd6
push eax
lea eax, [ebp - 0x1e68]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call esi
lea ecx, [ebp - 0x1e68]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, dword [ebp - 0x2e74]
mov ecx, dword [ebp - 0x2e88]
push 0
cwde
push 0xc8
push 0xc8
movsx edx, cx
lea esi, [eax + 0x2d]
add edx, 0xf0
movsx eax, cx
lea ecx, [ebp - 0x110]
push 0xdc
push ecx
push esi
add eax, 0x19
mov dword [ebp - 0x2e78], edx
push edx
push eax
mov ecx, edi
mov dword [ebp - 0x2e90], eax
call fcn.0045d060
push 0
push 0xc8
push 0xc8
push 0xdc
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
push esi
mov esi, dword [ebp - 0x2e88]
movsx eax, si
add eax, 0xf1
push eax
movsx eax, si
add eax, 0x1a
push eax
call fcn.0045d060
mov ecx, edi
call fcn.0047cff0
xor edx, edx
mov dword [ebp - 0x2eb4], edx
cmp dword [edi + 0x14552c], edx
jle 0x50c5af
mov eax, dword [ebp - 0x2e74]
movsx ecx, ax
add ecx, 0x50
movsx esi, si
mov dword [ebp - 0x2e9c], ecx
nop dword [eax + eax]
movsx eax, word [edi + 0x14558a]
add eax, edx
mov dword [ebp - 0x2e7c], eax
cmp eax, 0x200
jge 0x50c5af
mov edx, dword [ebp - 0x2ea0]
cmp dword [edx + eax*4 + 8], 0
je case.default.0x50c536
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov ecx, dword [ebp - 0x2e7c]
mov eax, dword [ebp - 0x2ea0]
mov eax, dword [eax + ecx*4 + 8]
push dword [eax + 0x808]
lea eax, [ecx + 1]
push eax
lea eax, [ebp - 0x110]
push str.Fight__d___d_
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
mov eax, dword [ebp + 8]
add esp, 0x1c
mov ecx, dword [ebp - 0x2e9c]
cwde
cmp eax, dword [ebp - 0x2e90]
jle 0x50c51a
cmp eax, dword [ebp - 0x2e78]
jge 0x50c51a
mov eax, dword [ebp + 0xc]
movsx edx, ax
cmp edx, ecx
jl 0x50c51a
lea eax, [ecx + 0xf]
cmp edx, eax
jge 0x50c51a
push 0
push 0xff
push 0xff
push 0xff
lea eax, [ebp - 0x110]
push eax
mov eax, dword [ebp - 0x2ec0]
push ecx
cwde
mov ecx, edi
add eax, esi
push eax
push esi
call fcn.0045d060
push 0x1b
xorps xmm0, xmm0
mov dword [ebp - 0x2e0], 0
push str.DRAW_DIALOGBOX_PVPT_MENU230
lea ecx, [ebp - 0x2f0]
mov dword [ebp - 0x2dc], 0
movups xmmword [ebp - 0x2f0], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x2f0]
mov dword [ebp - 4], 0xd7
push eax
lea eax, [ebp - 0x2ee8]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x50c4df
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x2ea0]
mov eax, dword [ebp - 0x2e7c]
mov eax, dword [edx + eax*4 + 8]
push dword [eax + 0x808]
lea eax, [edi + 0x18a074]
push ecx
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2f0]
call fcn.00411640
jmp 0x50c585
mov eax, dword [ebp - 0x2e7c]
mov edx, dword [ebp - 0x2ea0]
mov eax, dword [edx + eax*4 + 8]
mov eax, dword [eax + 0x80c]
dec eax
cmp eax, 3
ja case.default.0x50c536
jmp dword [eax*4 + 0x517e1c]
push 0
push 0
push 0xff
jmp 0x50c566
push 0
push 0
push 0xff
push 0
jmp 0x50c56b
push 0
push 0
push 0xa5
jmp 0x50c566
push 0
push 0
push 0
push 0xff
lea eax, [ebp - 0x110]
push eax
mov eax, dword [ebp - 0x2ec0]
cwde
push ecx
add eax, esi
mov ecx, edi
push eax
push esi
call fcn.0045d060
mov ecx, dword [ebp - 0x2e9c]
mov eax, dword [ebp - 0x2eb4]
add ecx, 0xf
inc eax
mov dword [ebp - 0x2e9c], ecx
mov edx, eax
mov dword [ebp - 0x2eb4], eax
cmp eax, dword [edi + 0x14552c]
jl 0x50c3b0
lea ecx, [edi + 0x18a074]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x50c5b8
jmp 0x517ae9
push str.DRAW_DIALOGBOX_PVPT_MENU107
lea ecx, [ebp - 0x1e80]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
cwde
add eax, 0x2d
mov dword [ebp - 4], 0xd8
push 0
mov dword [ebp - 0x2e7c], eax
push 0xc8
movsx eax, si
add eax, 0x19
push 0xc8
mov dword [ebp - 0x2ea0], eax
lea eax, [ebp - 0x1e80]
push 0xdc
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
movsx eax, si
mov ecx, edi
add eax, 0xf0
push eax
push dword [ebp - 0x2ea0]
call fcn.0045d060
lea ecx, [ebp - 0x1e80]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU107
lea ecx, [ebp - 0x1e98]
call fcn.0040f9f0
push 0
push 0xc8
push 0xc8
push 0xdc
lea eax, [ebp - 0x1e98]
mov dword [ebp - 4], 0xd9
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e7c]
movsx eax, si
mov ecx, edi
add eax, 0xf1
push eax
movsx eax, si
add eax, 0x1a
push eax
call fcn.0045d060
lea ecx, [ebp - 0x1e98]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, dword [ebp - 0x2ec4]
push dword [eax + 0x808]
lea eax, [ebp - 0x110]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [ebp - 0x1eb0]
push str.DRAW_DIALOGBOX_PVPT_MENU108
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
cwde
push 0
push 0x320004
mov dword [ebp - 4], 0xda
lea esi, [eax + 0x50]
lea eax, [ebp - 0x1eb0]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push esi
push dword [ebp - 0x2ea0]
mov ecx, edi
call fcn.0045d450
lea ecx, [ebp - 0x1eb0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov ecx, dword [ebp - 0x2e88]
push 0
movsx eax, cx
lea ecx, [ebp - 0x110]
push 0x320004
push ecx
add eax, 0xaa
mov ecx, edi
push esi
push eax
mov dword [ebp - 0x2e9c], eax
call fcn.0045d450
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x1ec8]
push str.DRAW_DIALOGBOX_PVPT_MENU109
call fcn.0040f9f0
mov esi, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
movsx eax, si
add eax, 0x5f
mov dword [ebp - 4], 0xdb
push 0
mov dword [ebp - 0x2ea8], eax
lea eax, [ebp - 0x1ec8]
push 0x320004
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2ea8]
mov ecx, edi
push dword [ebp - 0x2ea0]
call fcn.0045d450
lea ecx, [ebp - 0x1ec8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov ecx, dword [ebp - 0x2ec4]
mov eax, dword [ecx + 0x80c]
dec eax
cmp eax, 3
ja case.default.0x50c806
jmp dword [eax*4 + 0x517e2c]
push str.DRAW_DIALOGBOX_PVPT_MENU97
lea ecx, [ebp - 0x1ee0]
call fcn.0040f9f0
push 0
push 0xffff
lea eax, [ebp - 0x1ee0]
mov dword [ebp - 4], 0xdc
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e88]
mov ecx, edi
push dword [ebp - 0x2ea8]
cwde
add eax, 0x82
push eax
call fcn.0045d450
lea ecx, [ebp - 0x1ee0]
jmp 0x50c960
push str.DRAW_DIALOGBOX_PVPT_MENU98
lea ecx, [ebp - 0x1ef8]
call fcn.0040f9f0
push 0
push 0xff00
lea eax, [ebp - 0x1ef8]
mov dword [ebp - 4], 0xdd
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2ea8]
mov ecx, edi
push dword [ebp - 0x2e9c]
call fcn.0045d450
lea ecx, [ebp - 0x1ef8]
jmp 0x50c960
push str.DRAW_DIALOGBOX_PVPT_MENU156
lea ecx, [ebp - 0x1f10]
call fcn.0040f9f0
push 0
push 0xa5ff
lea eax, [ebp - 0x1f10]
mov dword [ebp - 4], 0xde
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2ea8]
mov ecx, edi
push dword [ebp - 0x2e9c]
call fcn.0045d450
lea ecx, [ebp - 0x1f10]
jmp 0x50c960
push str.DRAW_DIALOGBOX_PVPT_MENU99
lea ecx, [ebp - 0x1f28]
call fcn.0040f9f0
push 0
push 0xff
lea eax, [ebp - 0x1f28]
mov dword [ebp - 4], 0xdf
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2ea8]
mov ecx, edi
push dword [ebp - 0x2e9c]
call fcn.0045d450
lea ecx, [ebp - 0x1f28]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov ecx, dword [ebp - 0x2ec4]
movzx eax, word [ecx + 0x81e]
push eax
movzx eax, word [ecx + 0x81c]
push eax
movzx eax, word [ecx + 0x81a]
push eax
movzx eax, word [ecx + 0x818]
push eax
movzx eax, word [ecx + 0x814]
push eax
movzx eax, word [ecx + 0x812]
push eax
lea eax, [ebp - 0x110]
push str._04d__02d__02d__02d:_02d:_02d
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x2c
lea ecx, [ebp - 0x1f40]
push str.DRAW_DIALOGBOX_PVPT_MENU110
call fcn.0040f9f0
push 0
push 0x320004
lea eax, [ebp - 0x1f40]
movsx esi, si
push eax
mov ecx, 0x5fd3c4
mov dword [ebp - 4], 0xe0
add esi, 0x6e
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push esi
push dword [ebp - 0x2ea0]
mov ecx, edi
call fcn.0045d450
lea ecx, [ebp - 0x1f40]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov ecx, dword [ebp - 0x2e88]
push 0
movsx eax, cx
lea ecx, [ebp - 0x110]
push 0x320004
push ecx
add eax, 0x82
mov ecx, edi
push esi
push eax
mov dword [ebp - 0x2e90], eax
call fcn.0045d450
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov ecx, dword [ebp - 0x2ec4]
mov eax, 0x7ee
add esp, 0xc
movzx edx, word [ecx + 0x822]
cmp dx, ax
je 0x50cabf
movzx eax, word [ecx + 0x82e]
push eax
movzx eax, word [ecx + 0x82c]
push eax
movzx eax, word [ecx + 0x82a]
push eax
movzx eax, word [ecx + 0x828]
push eax
movzx eax, word [ecx + 0x824]
push eax
push edx
lea eax, [ebp - 0x110]
push str._04d__02d__02d__02d:_02d:_02d
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x20
jmp 0x50cad3
lea eax, [ebp - 0x110]
push 0x5d93c8
push eax
call fcn.004994b0
add esp, 8
push str.DRAW_DIALOGBOX_PVPT_MENU147
lea ecx, [ebp - 0x1f58]
call fcn.0040f9f0
mov esi, dword [ebp - 0x2e7c]
lea eax, [ebp - 0x1f58]
push 0
push 0x320004
push eax
mov ecx, 0x5fd3c4
mov dword [ebp - 4], 0xe1
add esi, 0x50
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push esi
push dword [ebp - 0x2ea0]
mov ecx, edi
call fcn.0045d450
lea ecx, [ebp - 0x1f58]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0x320004
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
push esi
push dword [ebp - 0x2e90]
call fcn.0045d450
push str.DRAW_DIALOGBOX_PVPT_MENU111
lea ecx, [ebp - 0x1f70]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
cwde
push 0
push 0x320004
mov dword [ebp - 4], 0xe2
lea esi, [eax + 0x8c]
lea eax, [ebp - 0x1f70]
mov dword [ebp - 0x2e78], esi
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push esi
push dword [ebp - 0x2ea0]
mov ecx, edi
call fcn.0045d450
lea ecx, [ebp - 0x1f70]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov esi, dword [ebp - 0x2ec4]
cmp byte [esi + 0x832], 0
je 0x50cc1a
push str.DRAW_DIALOGBOX_PVPT_MENU15
lea ecx, [ebp - 0x1f88]
call fcn.0040f9f0
push 0
push 0xff00
lea eax, [ebp - 0x1f88]
mov dword [ebp - 4], 0xe3
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e78]
mov ecx, edi
push dword [ebp - 0x2e9c]
call fcn.0045d450
lea ecx, [ebp - 0x1f88]
jmp 0x50cc6a
push str.DRAW_DIALOGBOX_PVPT_MENU16
lea ecx, [ebp - 0x1fa0]
call fcn.0040f9f0
push 0
push 0xff
lea eax, [ebp - 0x1fa0]
mov dword [ebp - 4], 0xe4
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e78]
mov ecx, edi
push dword [ebp - 0x2e9c]
call fcn.0045d450
lea ecx, [ebp - 0x1fa0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
cmp word [esi + 0x836], 0
je 0x50d2ba
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2e8c]
movsx ecx, word [eax + 0xb0]
movsx eax, word [esi + 0x836]
add ecx, eax
lea eax, [ebp - 0x110]
push ecx
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
mov esi, dword [ebp - 0x2e88]
add esp, 0x18
cmp byte [ebp - 0x2e7d], 0
je 0x50cde8
mov eax, dword [ebp + 8]
movsx ecx, ax
movsx eax, si
add eax, 0x1e
mov dword [ebp - 0x2eb0], ecx
cmp ecx, eax
jle 0x50cde8
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x50cde8
mov eax, dword [ebp - 0x2e74]
cwde
mov dword [ebp - 0x2e7c], eax
lea edx, [eax + 0x9b]
mov eax, dword [ebp + 0xc]
movsx ecx, ax
mov dword [ebp - 0x2e9c], ecx
cmp ecx, edx
jl 0x50cde8
mov eax, dword [ebp - 0x2e7c]
add eax, 0x9a
cmp ecx, eax
jg 0x50cde8
push str.DRAW_DIALOGBOX_PVPT_MENU32
lea ecx, [ebp - 0x1fb8]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x1fb8]
mov dword [ebp - 4], 0xe5
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e7c]
mov ecx, edi
add eax, 0x9b
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x1fb8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0xffffff
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
mov eax, dword [ebp - 0x2e7c]
add eax, 0x9b
push eax
movsx eax, si
add eax, 0xaa
push eax
call fcn.0045d450
mov eax, dword [ebp - 0x2eb0]
mov dword [ebp - 0x2e78], eax
mov eax, dword [ebp - 0x2e98]
cwde
add eax, 0x1e
mov dword [ebp - 0x2ea0], eax
jmp 0x50cf44
push str.DRAW_DIALOGBOX_PVPT_MENU32
lea ecx, [ebp - 0x1fd0]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
cwde
push 0
mov dword [ebp - 0x2e7c], eax
lea eax, [ebp - 0x1fd0]
push 0x320004
push eax
mov dword [ebp - 4], 0xe6
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
mov edx, dword [ebp - 0x2e7c]
mov ecx, edi
push eax
add edx, 0x9b
movsx eax, si
push edx
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x1fd0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0x320004
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
mov eax, dword [ebp - 0x2e7c]
add eax, 0x9b
push eax
movsx eax, si
add eax, 0xaa
push eax
call fcn.0045d450
mov eax, dword [ebp + 8]
movsx edx, ax
mov eax, dword [ebp + 0xc]
movsx ecx, ax
movsx eax, si
add eax, 0x1e
mov dword [ebp - 0x2eb0], edx
mov dword [ebp - 0x2e9c], ecx
mov dword [ebp - 0x2e78], edx
mov dword [ebp - 0x2ea0], eax
mov dword [ebp - 0x2ebc], edx
mov dword [ebp - 0x2ea8], ecx
cmp edx, eax
jle 0x50cfb3
mov dword [ebp - 0x2e98], eax
mov dword [ebp - 0x2ea0], eax
movsx eax, si
add eax, 0xf0
mov dword [ebp - 0x2ebc], edx
mov dword [ebp - 0x2ea8], ecx
mov dword [ebp - 0x2eb0], edx
cmp edx, eax
jge 0x50cfb3
mov edi, dword [ebp - 0x2eb8]
mov eax, edx
mov dword [ebp - 0x2ebc], edx
mov edx, dword [ebp - 0x2e98]
mov dword [ebp - 0x2ea0], edx
mov edx, dword [ebp - 0x2e7c]
add edx, 0x9b
mov dword [ebp - 0x2ea8], ecx
mov dword [ebp - 0x2eb0], eax
cmp ecx, edx
jl 0x50cfb3
mov dword [ebp - 0x2ebc], eax
mov eax, dword [ebp - 0x2e7c]
add eax, 0x9a
mov dword [ebp - 0x2ea8], ecx
cmp ecx, eax
jg 0x50cfb3
push str.DRAW_DIALOGBOX_PVPT_MENU92
lea ecx, [ebp - 0x1fe8]
call fcn.0040f9f0
lea eax, [ebp - 0x1fe8]
mov dword [ebp - 4], 0xe7
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [edi + 0x18a074]
push 0x80
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1fe8]
call fcn.00411640
mov eax, dword [ebp - 0x2e78]
mov dword [ebp - 0x2ebc], eax
mov eax, dword [ebp - 0x2e84]
cwde
mov dword [ebp - 0x2ea8], eax
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2ec4]
movsx ecx, word [eax + 0x836]
mov eax, dword [ebp - 0x2e8c]
movsx eax, word [eax + 0xb2]
add ecx, eax
lea eax, [ebp - 0x110]
push ecx
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
cmp byte [ebp - 0x2e7d], 0
je 0x50d120
mov eax, dword [ebp - 0x2ea0]
mov edx, dword [ebp - 0x2ea8]
mov dword [ebp - 0x2e9c], edx
cmp dword [ebp - 0x2eb0], eax
jle 0x50d120
movsx eax, si
add eax, 0xf0
mov dword [ebp - 0x2e9c], edx
cmp dword [ebp - 0x2ebc], eax
jge 0x50d120
mov eax, dword [ebp - 0x2e74]
cwde
mov dword [ebp - 0x2e7c], eax
mov eax, dword [ebp + 0xc]
cwde
mov dword [ebp - 0x2e78], eax
mov eax, dword [ebp - 0x2e7c]
add eax, 0xaa
mov dword [ebp - 0x2e9c], edx
cmp dword [ebp - 0x2e78], eax
jl 0x50d120
mov eax, dword [ebp - 0x2e7c]
add eax, 0xa9
mov dword [ebp - 0x2e9c], edx
cmp dword [ebp - 0x2e78], eax
jg 0x50d120
push str.DRAW_DIALOGBOX_PVPT_MENU33
lea ecx, [ebp - 0x2000]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x2000]
mov dword [ebp - 4], 0xe8
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e7c]
mov ecx, edi
add eax, 0xaa
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x2000]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0xffffff
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
mov eax, dword [ebp - 0x2e7c]
add eax, 0xaa
push eax
movsx eax, si
add eax, 0xaa
push eax
call fcn.0045d450
jmp 0x50d215
push str.DRAW_DIALOGBOX_PVPT_MENU33
lea ecx, [ebp - 0x2018]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
cwde
push 0
mov dword [ebp - 0x2e7c], eax
lea eax, [ebp - 0x2018]
push 0x320004
push eax
mov dword [ebp - 4], 0xe9
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e7c]
mov ecx, edi
add eax, 0xaa
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x2018]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0x320004
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
mov eax, dword [ebp - 0x2e7c]
add eax, 0xaa
push eax
movsx eax, si
add eax, 0xaa
push eax
call fcn.0045d450
mov edx, dword [ebp - 0x2e9c]
mov ecx, edx
movsx eax, si
add eax, 0x1e
cmp dword [ebp - 0x2ebc], eax
jle 0x50d27c
mov eax, dword [ebp + 8]
movsx ecx, si
add ecx, 0xf0
cwde
mov dword [ebp - 0x2ea8], edx
cmp eax, ecx
jge 0x50d276
mov eax, dword [ebp - 0x2e7c]
mov ecx, edx
mov esi, dword [ebp - 0x2e88]
add eax, 0xaa
cmp edx, eax
jl 0x50d27c
mov eax, dword [ebp - 0x2e7c]
add eax, 0xa9
cmp edx, eax
jg 0x50d27c
push str.DRAW_DIALOGBOX_PVPT_MENU93
lea ecx, [ebp - 0x2030]
call fcn.0040f9f0
lea eax, [ebp - 0x2030]
mov dword [ebp - 4], 0xea
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [edi + 0x18a074]
push 0x80
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2030]
call fcn.00411640
mov eax, dword [ebp - 0x2e84]
movsx ecx, ax
jmp 0x50d27c
mov ecx, dword [ebp - 0x2ea8]
mov dword [ebp - 0x2e7c], 0x96
mov dword [ebp - 0x2e84], 0x96
mov dword [ebp - 0x2ebc], 0x96
mov dword [ebp - 0x2eb4], 0xd6
mov dword [ebp - 0x2e78], 0xc8
mov dword [ebp - 0x2eb0], 0xc8
jmp 0x50d305
mov eax, dword [ebp - 0x2e84]
mov esi, dword [ebp - 0x2e88]
movsx ecx, ax
mov dword [ebp - 0x2e7c], 0x78
mov dword [ebp - 0x2e84], 0x78
mov dword [ebp - 0x2ebc], 0x78
mov dword [ebp - 0x2eb4], 0xb8
mov dword [ebp - 0x2e78], 0xaa
mov dword [ebp - 0x2eb0], 0xaa
movsx eax, si
add eax, 0x1e
mov dword [ebp - 0x2eac], eax
mov eax, dword [ebp + 8]
movsx edx, ax
mov dword [ebp - 0x2e98], edx
cmp edx, dword [ebp - 0x2eac]
jle 0x50d3ec
movsx eax, si
add eax, 0xf0
cmp edx, eax
jge 0x50d3ec
mov eax, dword [ebp - 0x2e74]
movsx edx, ax
mov eax, dword [ebp - 0x2e78]
add eax, edx
mov dword [ebp - 0x2e78], eax
mov eax, dword [ebp + 0xc]
movsx ecx, ax
mov eax, ecx
mov dword [ebp - 0x2e9c], ecx
cmp ecx, dword [ebp - 0x2e78]
jl 0x50d3ea
mov eax, dword [ebp - 0x2eb4]
add eax, edx
cmp ecx, eax
jg 0x50d3ec
push str.DRAW_DIALOGBOX_PVPT_MENU67
lea ecx, [ebp - 0x2048]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2ec0]
movsx ecx, ax
push 0
push 0xff
movsx eax, si
add eax, ecx
mov dword [ebp - 4], 0xeb
push 0xff
mov dword [ebp - 0x2ea0], eax
mov ecx, 0x5fd3c4
push 0xff
lea eax, [ebp - 0x2048]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e78]
movsx eax, si
mov ecx, edi
push dword [ebp - 0x2ea0]
push eax
call fcn.0045d060
lea ecx, [ebp - 0x2048]
jmp 0x50d463
mov ecx, eax
mov dword [ebp - 0x2e9c], ecx
lea ecx, [ebp - 0x2060]
push str.DRAW_DIALOGBOX_PVPT_MENU67
call fcn.0040f9f0
mov eax, dword [ebp - 0x2ec0]
movsx ecx, ax
push 0
push 0x32
movsx eax, si
add eax, ecx
mov dword [ebp - 4], 0xec
push 0
mov dword [ebp - 0x2ea0], eax
mov ecx, 0x5fd3c4
push 4
lea eax, [ebp - 0x2060]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e74]
mov ecx, edi
cwde
add eax, dword [ebp - 0x2eb0]
push eax
push dword [ebp - 0x2ea0]
movsx eax, si
push eax
call fcn.0045d060
lea ecx, [ebp - 0x2060]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, dword [ebp - 0x2ec4]
cmp byte [eax + 0x833], 0
je 0x50d5c8
mov eax, dword [ebp - 0x2eac]
cmp dword [ebp - 0x2e98], eax
jle 0x50d545
mov eax, dword [ebp + 8]
movsx ecx, si
add ecx, 0xf0
cwde
cmp eax, ecx
jge 0x50d545
mov eax, dword [ebp - 0x2e74]
mov ecx, dword [ebp - 0x2e9c]
cwde
add eax, dword [ebp - 0x2ebc]
mov dword [ebp - 0x2eb0], eax
lea edx, [eax + 0x50]
mov dword [ebp - 0x2e98], edx
cmp ecx, edx
jl 0x50d545
add eax, 0x5e
cmp ecx, eax
jg 0x50d545
push str.DRAW_DIALOGBOX_PVPT_MENU112
lea ecx, [ebp - 0x2078]
call fcn.0040f9f0
push 0
push 0xff
push 0xff
push 0xff
lea eax, [ebp - 0x2078]
mov dword [ebp - 4], 0xed
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e98]
movsx eax, si
mov ecx, edi
push dword [ebp - 0x2ea0]
push eax
call fcn.0045d060
lea ecx, [ebp - 0x2078]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
jmp 0x50d658
push str.DRAW_DIALOGBOX_PVPT_MENU112
lea ecx, [ebp - 0x2090]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
push 0
cwde
add eax, dword [ebp - 0x2e84]
push 0x32
push 0
mov dword [ebp - 0x2eb0], eax
lea eax, [ebp - 0x2090]
push 4
push eax
mov dword [ebp - 4], 0xee
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2eb0]
mov ecx, edi
add eax, 0x50
push eax
push dword [ebp - 0x2ea0]
movsx eax, si
push eax
call fcn.0045d060
lea ecx, [ebp - 0x2090]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, dword [ebp - 0x2e84]
jmp 0x50d652
push str.DRAW_DIALOGBOX_PVPT_MENU112
lea ecx, [ebp - 0x20a8]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
push 0
cwde
add eax, dword [ebp - 0x2e7c]
push 0x41
push 0x41
mov dword [ebp - 0x2eb0], eax
lea eax, [ebp - 0x20a8]
push 0x41
push eax
mov dword [ebp - 4], 0xef
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2eb0]
mov ecx, edi
add eax, 0x50
push eax
push dword [ebp - 0x2ea0]
movsx eax, si
push eax
call fcn.0045d060
lea ecx, [ebp - 0x20a8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, dword [ebp - 0x2e9c]
mov dword [ebp - 0x2e9c], eax
mov eax, dword [ebp - 0x2e7c]
mov dword [ebp - 0x2ebc], eax
mov eax, dword [ebp - 0x2ec4]
movsx ecx, si
mov dword [ebp - 0x2e98], ecx
cmp byte [eax + 0x833], 0
je 0x50d7c3
mov edx, dword [ebp + 8]
add ecx, 0x1e
movsx eax, dx
cmp eax, ecx
jle 0x50d749
mov eax, dword [ebp - 0x2eb0]
movsx ecx, si
mov dword [ebp - 0x2eb0], eax
add ecx, 0xf0
movsx eax, dx
cmp eax, ecx
jge 0x50d749
mov eax, dword [ebp - 0x2e74]
mov edx, dword [ebp - 0x2ebc]
cwde
add edx, eax
mov eax, edx
mov dword [ebp - 0x2eb0], eax
lea ecx, [edx + 0x6e]
mov dword [ebp - 0x2e78], ecx
mov ecx, dword [ebp - 0x2e9c]
cmp ecx, dword [ebp - 0x2e78]
jl 0x50d749
mov dword [ebp - 0x2eb0], eax
lea eax, [edx + 0x7c]
cmp ecx, eax
jg 0x50d749
push str.DRAW_DIALOGBOX_PVPT_MENU113
lea ecx, [ebp - 0x20c0]
call fcn.0040f9f0
push 0
push 0xff
push 0xff
push 0xff
lea eax, [ebp - 0x20c0]
mov dword [ebp - 4], 0xf0
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2ec0]
push dword [ebp - 0x2e78]
movsx ecx, ax
movsx eax, si
add ecx, eax
movsx eax, si
push ecx
push eax
mov ecx, edi
call fcn.0045d060
lea ecx, [ebp - 0x20c0]
jmp 0x50d7ab
push str.DRAW_DIALOGBOX_PVPT_MENU113
lea ecx, [ebp - 0x20d8]
call fcn.0040f9f0
push 0
push 0x32
push 0
push 4
lea eax, [ebp - 0x20d8]
mov dword [ebp - 4], 0xf1
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2eb0]
add eax, 0x6e
push eax
mov eax, dword [ebp - 0x2ec0]
movsx ecx, ax
movsx eax, si
add ecx, eax
movsx eax, si
push ecx
push eax
mov ecx, edi
call fcn.0045d060
lea ecx, [ebp - 0x20d8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, dword [ebp + 0xc]
cwde
mov dword [ebp - 0x2e9c], eax
jmp 0x50d830
push str.DRAW_DIALOGBOX_PVPT_MENU113
lea ecx, [ebp - 0x20f0]
call fcn.0040f9f0
push 0
push 0x41
push 0x41
push 0x41
lea eax, [ebp - 0x20f0]
mov dword [ebp - 4], 0xf2
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2eb0]
mov ecx, edi
add eax, 0x6e
push eax
mov eax, dword [ebp - 0x2ec0]
cwde
add eax, dword [ebp - 0x2e98]
push eax
movsx eax, si
push eax
call fcn.0045d060
lea ecx, [ebp - 0x20f0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
cmp byte [ebp - 0x2e7d], 0
jne 0x50d8fc
mov eax, dword [ebp - 0x2ec4]
movsx ecx, si
add ecx, 0xaa
cmp byte [eax + 0x834], 0
je 0x50d8dc
mov edx, dword [ebp + 8]
movsx eax, dx
cmp eax, ecx
jl 0x50d8b9
movsx ecx, si
add ecx, 0xe6
movsx eax, dx
cmp eax, ecx
jg 0x50d8b9
mov ecx, dword [ebp - 0x2e74]
mov edx, dword [ebp - 0x2e9c]
movsx eax, cx
add eax, 0x12c
mov dword [ebp - 0x2e98], eax
cmp edx, eax
jl 0x50d8b9
movsx eax, cx
add eax, 0x140
cmp edx, eax
jg 0x50d8b9
push 0x14
push 6
push 6
push str.Spectate
push dword [ebp - 0x2e98]
movsx eax, si
add eax, 0xaa
push eax
jmp 0x50d8f5
mov eax, dword [ebp - 0x2e74]
push 7
push 0
push 0
cwde
add eax, 0x12c
push str.Spectate
push eax
movsx eax, si
add eax, 0xaa
push eax
jmp 0x50d8f5
mov eax, dword [ebp - 0x2e74]
push 0xf
push 0xf
push 0xf
cwde
push str.Spectate
add eax, 0x12c
push eax
push ecx
mov ecx, edi
call fcn.0045dd00
lea ecx, [edi + 0x18a074]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x50d905
jmp 0x517ae9
push str.DRAW_DIALOGBOX_PVPT_MENU115
lea ecx, [ebp - 0x2108]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
cwde
push 0
push 0xc8
push 0xc8
lea esi, [eax + 0x2d]
mov dword [ebp - 4], 0xf3
mov eax, dword [ebp - 0x2e88]
cwde
push 0xdc
lea edi, [eax + 0x19]
lea eax, [ebp - 0x2108]
mov dword [ebp - 0x2e98], edi
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
mov ecx, dword [ebp - 0x2eb8]
push eax
mov eax, dword [ebp - 0x2e88]
cwde
push esi
add eax, 0xf0
push eax
push edi
call fcn.0045d060
lea ecx, [ebp - 0x2108]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU115
lea ecx, [ebp - 0x2120]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e88]
mov ecx, 0x5fd3c4
push 0
cwde
push 0xc8
push 0xc8
push 0xdc
lea edi, [eax + 0x1a]
mov dword [ebp - 4], 0xf4
lea eax, [ebp - 0x2120]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e88]
push esi
mov esi, dword [ebp - 0x2eb8]
mov ecx, esi
cwde
add eax, 0xf1
push eax
push edi
call fcn.0045d060
lea ecx, [ebp - 0x2120]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU174
lea ecx, [ebp - 0x2138]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
cwde
add eax, 0x41
mov dword [ebp - 4], 0xf5
push 0
mov dword [ebp - 0x2ea0], eax
lea eax, [ebp - 0x2138]
push 0
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2ea0]
mov ecx, esi
push dword [ebp - 0x2e98]
call fcn.0045d450
lea ecx, [ebp - 0x2138]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU174
lea ecx, [ebp - 0x2150]
call fcn.0040f9f0
push 0
push 0
lea eax, [ebp - 0x2150]
mov dword [ebp - 4], 0xf6
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2ea0]
mov ecx, esi
push edi
call fcn.0045d450
lea ecx, [ebp - 0x2150]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, dword [ebp - 0x2ec4]
mov eax, dword [eax + 0x80c]
cmp eax, 3
je 0x50dd1c
cmp eax, 4
je 0x50dd1c
push str.DRAW_DIALOGBOX_PVPT_MENU176
lea ecx, [ebp - 0x2168]
call fcn.0040f9f0
push 0
push 0
lea eax, [ebp - 0x2168]
mov dword [ebp - 4], 0xf9
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
mov edi, dword [ebp - 0x2e88]
mov ecx, esi
push eax
push dword [ebp - 0x2ea0]
movsx eax, di
add eax, 0xaa
push eax
call fcn.0045d450
lea ecx, [ebp - 0x2168]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU176
lea ecx, [ebp - 0x2180]
call fcn.0040f9f0
push 0
push 0
lea eax, [ebp - 0x2180]
mov dword [ebp - 4], 0xfa
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2ea0]
movsx eax, di
mov ecx, esi
add eax, 0xab
push eax
call fcn.0045d450
lea ecx, [ebp - 0x2180]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, dword [ebp - 0x2e8c]
movsx edx, word [eax + 0xb0]
movsx ecx, word [eax + 0xb2]
mov eax, dword [ebp - 0x2ec4]
mov dword [ebp - 0x2ea8], edx
mov dword [ebp - 0x2eb4], ecx
movzx eax, word [eax + 0x836]
test ax, ax
je 0x50dbed
cwde
add edx, eax
add ecx, eax
mov dword [ebp - 0x2ea8], edx
mov dword [ebp - 0x2eb4], ecx
test ecx, ecx
jle 0x50dde2
mov esi, dword [ebp - 0x2ec4]
xor ecx, ecx
mov dword [ebp - 0x2e7c], ecx
xor edx, edx
mov dword [ebp - 0x2e78], ecx
nop dword [eax + eax]
lea eax, [edx*4]
mov eax, dword [esi + eax + 8]
test eax, eax
je 0x50dc56
mov ecx, dword [ebp - 0x2e78]
mov ax, word [eax + 0x198]
mov ecx, dword [ecx + esi + 8]
cmp ax, word [ecx + 0x198]
jl 0x50dc50
mov ecx, edx
lea eax, [edx*4]
mov dword [ebp - 0x2e7c], ecx
mov dword [ebp - 0x2e78], eax
jmp 0x50dc56
mov ecx, dword [ebp - 0x2e7c]
inc edx
cmp edx, 0x200
jl 0x50dc10
mov esi, dword [ebp - 0x2eb8]
xor eax, eax
mov edi, dword [ebp - 0x2ec4]
xor edx, edx
mov dword [ebp - 0x2e84], eax
mov dword [ebp - 0x2e78], eax
nop dword [eax + eax]
lea eax, [edx*4]
mov eax, dword [edi + eax + 8]
test eax, eax
je 0x50dcc0
cmp edx, ecx
je 0x50dcc0
mov ecx, dword [ebp - 0x2e78]
mov ax, word [eax + 0x198]
mov ecx, dword [ecx + edi + 8]
cmp ax, word [ecx + 0x198]
jl 0x50dcc0
lea eax, [edx*4]
mov dword [ebp - 0x2e84], edx
mov dword [ebp - 0x2e78], eax
mov ecx, dword [ebp - 0x2e7c]
inc edx
cmp edx, 0x200
jl 0x50dc80
mov eax, dword [ebp - 0x2e84]
mov eax, dword [edi + eax*4 + 8]
movsx edx, word [eax + 0x198]
mov eax, ecx
mov ecx, dword [ebp - 0x2eb4]
mov eax, dword [edi + eax*4 + 8]
mov edi, dword [ebp - 0x2e88]
movsx eax, word [eax + 0x198]
sub eax, edx
cmp eax, ecx
jge 0x50dde2
add ecx, edx
cmp ecx, dword [ebp - 0x2ea8]
jle 0x50dde2
mov dword [ebp - 0x2ea8], ecx
jmp 0x50dde2
push str.DRAW_DIALOGBOX_PVPT_MENU175
lea ecx, [ebp - 0x2198]
call fcn.0040f9f0
push 0
push 0
lea eax, [ebp - 0x2198]
mov dword [ebp - 4], 0xf7
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
mov edi, dword [ebp - 0x2e88]
mov ecx, esi
push eax
push dword [ebp - 0x2ea0]
movsx eax, di
add eax, 0x7d
push eax
call fcn.0045d450
lea ecx, [ebp - 0x2198]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU175
lea ecx, [ebp - 0x21b0]
call fcn.0040f9f0
push 0
push 0
lea eax, [ebp - 0x21b0]
mov dword [ebp - 4], 0xf8
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2ea0]
movsx eax, di
mov ecx, esi
add eax, 0x7e
push eax
call fcn.0045d450
lea ecx, [ebp - 0x21b0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, dword [ebp - 0x2e98]
mov dword [ebp - 0x2ea8], eax
xor edx, edx
mov dword [ebp - 0x2ea0], edx
cmp dword [esi + 0x14552c], edx
jle case.default.0x5101e6
movsx eax, di
add eax, 0xf0
mov dword [ebp - 0x2e98], eax
movsx eax, di
add eax, 0x19
mov dword [ebp - 0x2e84], eax
movsx eax, di
mov dword [ebp - 0x2eb4], eax
mov eax, dword [ebp - 0x2e74]
movsx edi, ax
add edi, 0x50
mov dword [ebp - 0x2eb0], edi
mov edi, dword [ebp - 0x2ec4]
mov eax, dword [ebp - 0x2eb0]
nop word [eax + eax]
movsx ecx, word [esi + 0x14558a]
add ecx, edx
mov dword [ebp - 0x2e7c], ecx
cmp ecx, 0x200
jge case.default.0x5101e6
cmp dword [edi + ecx*4 + 8], 0
je 0x50dfde
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [edi + 0x80c]
add esp, 0xc
cmp eax, 3
je 0x50debb
cmp eax, 4
je 0x50debb
mov eax, dword [ebp - 0x2e7c]
push dword [ebp - 0x2ea8]
mov eax, dword [edi + eax*4 + 8]
movsx eax, word [eax + 0x198]
push eax
lea eax, [ebp - 0x110]
push 0x5c8b2c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp 0x50df0a
mov eax, dword [ebp - 0x2e7c]
mov eax, dword [edi + eax*4 + 8]
movzx ecx, word [eax + 0x19a]
movsx eax, word [eax + 0x198]
push eax
cmp cx, 0xffff
je 0x50def5
movsx eax, cx
push eax
lea eax, [ebp - 0x110]
push str._d___d_
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp 0x50df0a
lea eax, [ebp - 0x110]
push str._____d_
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp + 8]
mov edx, dword [ebp - 0x2e84]
mov ecx, dword [ebp - 0x2eb0]
cwde
cmp eax, edx
jle 0x50df69
cmp eax, dword [ebp - 0x2e98]
jge 0x50df69
mov eax, dword [ebp + 0xc]
cwde
mov dword [ebp - 0x2e90], eax
cmp eax, ecx
jl 0x50df69
lea eax, [ecx + 0xf]
cmp dword [ebp - 0x2e90], eax
jge 0x50df69
mov eax, dword [ebp - 0x2e7c]
push 0
push 0xffffff
mov eax, dword [edi + eax*4 + 8]
mov eax, dword [eax + 4]
add eax, 8
push eax
push ecx
push edx
mov ecx, esi
call fcn.0045d450
push 0
push 0xffffff
jmp 0x50dfb8
mov eax, dword [ebp - 0x2e7c]
push 0
mov eax, dword [edi + eax*4 + 8]
mov edx, dword [eax + 4]
add edx, 8
cmp byte [eax + 0x1ad], 0
mov eax, dword [ebp - 0x2e84]
je 0x50dfa2
push 0xff00
push edx
push ecx
push eax
mov ecx, esi
call fcn.0045d450
push 0
push 0xff00
jmp 0x50dfb8
push 0xff
push edx
push ecx
push eax
mov ecx, esi
call fcn.0045d450
push 0
push 0xff
lea eax, [ebp - 0x110]
mov ecx, esi
push eax
mov eax, dword [ebp - 0x2eb4]
push dword [ebp - 0x2eb0]
add eax, 0xb4
push eax
call fcn.0045d450
mov eax, dword [ebp - 0x2eb0]
mov ecx, dword [ebp - 0x2ea0]
add eax, 0xf
inc ecx
mov dword [ebp - 0x2eb0], eax
mov edx, ecx
mov dword [ebp - 0x2ea0], ecx
cmp ecx, dword [esi + 0x14552c]
jl 0x50de40
jmp case.default.0x5101e6
push str.DRAW_DIALOGBOX_PVPT_MENU112
lea ecx, [ebp - 0x21c8]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
cwde
push 0
push 0xc8
push 0xc8
lea esi, [eax + 0x2d]
mov dword [ebp - 4], 0xfb
mov eax, dword [ebp - 0x2e88]
cwde
push 0xdc
lea edi, [eax + 0x19]
lea eax, [ebp - 0x21c8]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
mov ecx, dword [ebp - 0x2eb8]
push eax
mov eax, dword [ebp - 0x2e88]
cwde
push esi
add eax, 0xf0
push eax
push edi
call fcn.0045d060
lea ecx, [ebp - 0x21c8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU112
lea ecx, [ebp - 0x21e0]
call fcn.0040f9f0
push 0
push 0xc8
push 0xc8
push 0xdc
lea eax, [ebp - 0x21e0]
mov dword [ebp - 4], 0xfc
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
mov ecx, dword [ebp - 0x2e88]
push eax
movsx eax, cx
push esi
mov esi, dword [ebp - 0x2eb8]
add eax, 0xf1
push eax
movsx eax, cx
mov ecx, esi
add eax, 0x1a
push eax
call fcn.0045d060
lea ecx, [ebp - 0x21e0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
movzx eax, word [esi + 0x145570]
push eax
lea eax, [ebp - 0x110]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [ebp - 0x21f8]
push str.DRAW_DIALOGBOX_PVPT_MENU116
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
cwde
add eax, 0x50
mov dword [ebp - 4], 0xfd
push 0
mov dword [ebp - 0x2e84], eax
push 0x320004
lea eax, [ebp - 0x21f8]
mov ecx, 0x5fd3c4
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e84]
mov ecx, esi
push edi
call fcn.0045d450
lea ecx, [ebp - 0x21f8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov edi, dword [ebp - 0x2e88]
lea eax, [ebp - 0x110]
push 0
push 0x320004
push eax
push dword [ebp - 0x2e84]
movsx eax, di
mov ecx, esi
add eax, 0xa0
push eax
call fcn.0045d450
mov eax, dword [ebp + 8]
movsx ecx, ax
movsx eax, di
add eax, 0xc8
mov dword [ebp - 0x2e98], ecx
cmp ecx, eax
jl 0x50e201
movsx eax, di
add eax, 0xd4
cmp ecx, eax
jg 0x50e201
mov ecx, dword [ebp + 0xc]
movsx edx, cx
mov ecx, dword [ebp - 0x2e74]
mov dword [ebp - 0x2e7c], edx
cmp edx, dword [ebp - 0x2e84]
jl 0x50e207
movsx eax, cx
add eax, 0x5c
cmp edx, eax
jg 0x50e207
mov dword [ebp - 0x2e78], 0x11
jmp 0x50e21b
mov ecx, dword [ebp - 0x2e74]
mov eax, dword [ebp + 0xc]
cwde
mov dword [ebp - 0x2e78], 0x13
mov dword [ebp - 0x2e7c], eax
push 0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0
push 1
push dword [esi + 0x1892fc]
movsx eax, cx
mov edx, esi
push dword [ebp - 0x2e78]
add eax, 0x55
push eax
mov ecx, dword [edx + 0x14aa00]
mov dword [ebp - 0x2e84], eax
movsx eax, di
add eax, 0xce
push eax
call fcn.0057e2f0
mov ecx, dword [ebp - 0x2e98]
movsx eax, di
add eax, 0xd7
cmp ecx, eax
jl 0x50e29b
movsx eax, di
add eax, 0xe3
cmp ecx, eax
jg 0x50e29b
mov ecx, dword [ebp - 0x2e74]
mov edx, dword [ebp - 0x2e7c]
movsx eax, cx
add eax, 0x50
cmp edx, eax
jl 0x50e29b
movsx eax, cx
add eax, 0x5c
cmp edx, eax
mov edx, 0x12
jle 0x50e2a0
mov edx, 0x14
mov eax, dword [ebp - 0x2e84]
push 0
mov ecx, dword [esi + 0x14aa00]
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0
push 1
push dword [esi + 0x1892fc]
push edx
push eax
movsx eax, di
add eax, 0xdd
push eax
call fcn.0057e2f0
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movzx eax, word [esi + 0x145572]
push eax
lea eax, [ebp - 0x110]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
lea ecx, [ebp - 0x2210]
push str.DRAW_DIALOGBOX_PVPT_MENU117
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
cwde
mov dword [ebp - 0x2e7c], eax
add eax, 0x5f
push 0
mov dword [ebp - 0x2e84], eax
lea eax, [ebp - 0x2210]
push 0x320004
push eax
mov dword [ebp - 4], 0xfe
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e84]
movsx eax, di
mov ecx, esi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x2210]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0x320004
lea eax, [ebp - 0x110]
mov ecx, esi
push eax
push dword [ebp - 0x2e84]
movsx eax, di
add eax, 0xa0
push eax
call fcn.0045d450
mov edx, dword [ebp + 8]
movsx ecx, di
add ecx, 0xc8
movsx eax, dx
cmp eax, ecx
jl 0x50e3e2
movsx ecx, di
add ecx, 0xd4
movsx eax, dx
cmp eax, ecx
mov ecx, dword [ebp + 0xc]
jg 0x50e3e5
movsx edx, cx
mov dword [ebp - 0x2e78], edx
cmp edx, dword [ebp - 0x2e84]
jl 0x50e3e5
mov eax, dword [ebp - 0x2e7c]
add eax, 0x6b
cmp edx, eax
jg 0x50e3e5
mov edx, 0x11
jmp 0x50e3f3
mov ecx, dword [ebp + 0xc]
movsx eax, cx
mov edx, 0x13
mov dword [ebp - 0x2e78], eax
mov eax, dword [ebp - 0x2e7c]
mov edi, 0x64
push 0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0
push 1
push dword [esi + 0x1892fc]
add edi, eax
mov ecx, esi
push edx
push edi
mov dword [ebp - 0x2e98], edi
mov edi, dword [ebp - 0x2e88]
mov ecx, dword [ecx + 0x14aa00]
movsx eax, di
add eax, 0xce
push eax
call fcn.0057e2f0
mov edx, dword [ebp + 8]
movsx ecx, di
add ecx, 0xd7
movsx eax, dx
cmp eax, ecx
jl 0x50e480
movsx ecx, di
add ecx, 0xe3
movsx eax, dx
cmp eax, ecx
jg 0x50e480
mov ecx, dword [ebp - 0x2e74]
mov edx, dword [ebp - 0x2e78]
movsx eax, cx
add eax, 0x5f
cmp edx, eax
jl 0x50e480
movsx eax, cx
add eax, 0x6b
cmp edx, eax
mov eax, 0x12
jle 0x50e485
mov eax, 0x14
push 0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0
mov edx, esi
mov ecx, esi
push 1
push dword [edx + 0x1892fc]
mov ecx, dword [ecx + 0x14aa00]
push eax
push dword [ebp - 0x2e98]
movsx eax, di
add eax, 0xdd
push eax
call fcn.0057e2f0
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movzx eax, word [esi + 0x145576]
push eax
lea eax, [ebp - 0x110]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
lea ecx, [ebp - 0x2228]
push str.DRAW_DIALOGBOX_PVPT_MENU118
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
cwde
mov dword [ebp - 0x2e7c], eax
add eax, 0x6e
push 0
mov dword [ebp - 0x2e84], eax
lea eax, [ebp - 0x2228]
push 0x320004
push eax
mov dword [ebp - 4], 0xff
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e84]
movsx eax, di
mov ecx, esi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x2228]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0x320004
lea eax, [ebp - 0x110]
mov ecx, esi
push eax
push dword [ebp - 0x2e84]
movsx eax, di
add eax, 0xa0
push eax
call fcn.0045d450
mov edx, dword [ebp + 8]
movsx ecx, di
add ecx, 0xc8
movsx eax, dx
cmp eax, ecx
jl 0x50e5ca
movsx ecx, di
add ecx, 0xd4
movsx eax, dx
cmp eax, ecx
mov ecx, dword [ebp + 0xc]
jg 0x50e5cd
movsx edx, cx
mov dword [ebp - 0x2e78], edx
cmp edx, dword [ebp - 0x2e84]
jl 0x50e5cd
mov eax, dword [ebp - 0x2e7c]
add eax, 0x7a
cmp edx, eax
jg 0x50e5cd
mov edx, 0x11
jmp 0x50e5db
mov ecx, dword [ebp + 0xc]
movsx eax, cx
mov edx, 0x13
mov dword [ebp - 0x2e78], eax
mov eax, dword [ebp - 0x2e7c]
mov edi, 0x73
push 0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0
push 1
push dword [esi + 0x1892fc]
add edi, eax
mov ecx, esi
push edx
push edi
mov dword [ebp - 0x2e98], edi
mov edi, dword [ebp - 0x2e88]
mov ecx, dword [ecx + 0x14aa00]
movsx eax, di
add eax, 0xce
push eax
call fcn.0057e2f0
mov edx, dword [ebp + 8]
movsx ecx, di
add ecx, 0xd7
movsx eax, dx
cmp eax, ecx
jl 0x50e668
movsx ecx, di
add ecx, 0xe3
movsx eax, dx
cmp eax, ecx
jg 0x50e668
mov ecx, dword [ebp - 0x2e74]
mov edx, dword [ebp - 0x2e78]
movsx eax, cx
add eax, 0x6e
cmp edx, eax
jl 0x50e668
movsx eax, cx
add eax, 0x7a
cmp edx, eax
mov eax, 0x12
jle 0x50e66d
mov eax, 0x14
push 0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0
mov edx, esi
mov ecx, esi
push 1
push dword [edx + 0x1892fc]
mov ecx, dword [ecx + 0x14aa00]
push eax
push dword [ebp - 0x2e98]
movsx eax, di
add eax, 0xdd
push eax
call fcn.0057e2f0
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movzx eax, word [esi + 0x145578]
push eax
lea eax, [ebp - 0x110]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
lea ecx, [ebp - 0x2240]
push str.DRAW_DIALOGBOX_PVPT_MENU119
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
cwde
add eax, 0x7d
mov dword [ebp - 4], 0x100
push 0
mov dword [ebp - 0x2e84], eax
lea eax, [ebp - 0x2240]
push 0x320004
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e84]
movsx eax, di
mov ecx, esi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x2240]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0x320004
lea eax, [ebp - 0x110]
mov ecx, esi
push eax
push dword [ebp - 0x2e84]
movsx eax, di
add eax, 0xa0
push eax
call fcn.0045d450
mov edx, dword [ebp + 8]
movsx ecx, di
add ecx, 0xc8
movsx eax, dx
cmp eax, ecx
jl 0x50e7b1
movsx ecx, di
add ecx, 0xd4
movsx eax, dx
cmp eax, ecx
jg 0x50e7b1
mov ecx, dword [ebp + 0xc]
movsx edx, cx
mov ecx, dword [ebp - 0x2e74]
mov dword [ebp - 0x2e78], edx
cmp edx, dword [ebp - 0x2e84]
jl 0x50e7b7
movsx eax, cx
add eax, 0x89
cmp edx, eax
jg 0x50e7b7
mov edx, 0x11
jmp 0x50e7c6
mov ecx, dword [ebp - 0x2e74]
mov eax, dword [ebp + 0xc]
mov edx, 0x13
cwde
mov dword [ebp - 0x2e78], eax
push 0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0
push 1
push dword [esi + 0x1892fc]
movsx eax, cx
mov ecx, dword [esi + 0x14aa00]
add eax, 0x82
push edx
push eax
mov dword [ebp - 0x2e84], eax
movsx eax, di
add eax, 0xce
push eax
call fcn.0057e2f0
mov edx, dword [ebp + 8]
movsx ecx, di
add ecx, 0xd7
movsx eax, dx
cmp eax, ecx
jl 0x50e84a
movsx ecx, di
add ecx, 0xe3
movsx eax, dx
cmp eax, ecx
jg 0x50e84a
mov ecx, dword [ebp - 0x2e74]
mov edx, dword [ebp - 0x2e78]
movsx eax, cx
add eax, 0x7d
cmp edx, eax
jl 0x50e84a
movsx eax, cx
add eax, 0x89
cmp edx, eax
jg 0x50e84a
mov ecx, 0x12
jmp 0x50e855
mov edi, dword [ebp - 0x2e88]
mov ecx, 0x14
mov eax, dword [ebp - 0x2e84]
mov edx, esi
push 0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0
push 1
push dword [esi + 0x1892fc]
mov dword [ebp - 0x2e78], esi
push ecx
mov ecx, dword [edx + 0x14aa00]
push eax
movsx eax, di
add eax, 0xdd
push eax
call fcn.0057e2f0
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov esi, dword [ebp - 0x2eb8]
movzx eax, word [esi + 0x14557a]
push eax
lea eax, [ebp - 0x110]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
lea ecx, [ebp - 0x2258]
push str.DRAW_DIALOGBOX_PVPT_MENU120
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
cwde
mov dword [ebp - 0x2e7c], eax
add eax, 0x8c
push 0
mov dword [ebp - 0x2e84], eax
lea eax, [ebp - 0x2258]
push 0x320004
push eax
mov dword [ebp - 4], 0x101
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e84]
movsx eax, di
mov ecx, esi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x2258]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0x320004
lea eax, [ebp - 0x110]
mov ecx, esi
push eax
push dword [ebp - 0x2e84]
movsx eax, di
add eax, 0xa0
push eax
call fcn.0045d450
mov edx, dword [ebp + 8]
movsx ecx, di
add ecx, 0xc8
movsx eax, dx
cmp eax, ecx
jl 0x50e9a9
movsx ecx, di
add ecx, 0xd4
movsx eax, dx
cmp eax, ecx
mov ecx, dword [ebp + 0xc]
jg 0x50e9ac
movsx edx, cx
mov dword [ebp - 0x2e78], edx
cmp edx, dword [ebp - 0x2e84]
jl 0x50e9ac
mov eax, dword [ebp - 0x2e7c]
add eax, 0x98
cmp edx, eax
jg 0x50e9ac
mov edx, 0x11
jmp 0x50e9ba
mov ecx, dword [ebp + 0xc]
movsx eax, cx
mov edx, 0x13
mov dword [ebp - 0x2e78], eax
mov eax, dword [ebp - 0x2e7c]
mov edi, 0x91
push 0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0
push 1
push dword [esi + 0x1892fc]
add edi, eax
mov ecx, esi
push edx
push edi
mov dword [ebp - 0x2e98], edi
mov edi, dword [ebp - 0x2e88]
mov ecx, dword [ecx + 0x14aa00]
movsx eax, di
add eax, 0xce
push eax
call fcn.0057e2f0
mov edx, dword [ebp + 8]
movsx ecx, di
add ecx, 0xd7
movsx eax, dx
cmp eax, ecx
jl 0x50ea4b
movsx ecx, di
add ecx, 0xe3
movsx eax, dx
cmp eax, ecx
jg 0x50ea4b
mov ecx, dword [ebp - 0x2e74]
mov edx, dword [ebp - 0x2e78]
movsx eax, cx
add eax, 0x8c
cmp edx, eax
jl 0x50ea4b
movsx eax, cx
add eax, 0x98
cmp edx, eax
mov eax, 0x12
jle 0x50ea50
mov eax, 0x14
push 0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0
mov edx, esi
mov ecx, esi
push 1
push dword [edx + 0x1892fc]
mov ecx, dword [ecx + 0x14aa00]
push eax
push dword [ebp - 0x2e98]
movsx eax, di
add eax, 0xdd
push eax
call fcn.0057e2f0
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movzx eax, word [esi + 0x14557c]
push eax
lea eax, [ebp - 0x110]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
lea ecx, [ebp - 0x2270]
push str.DRAW_DIALOGBOX_PVPT_MENU121
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
cwde
mov dword [ebp - 0x2e7c], eax
add eax, 0x9b
push 0
mov dword [ebp - 0x2e84], eax
lea eax, [ebp - 0x2270]
push 0x320004
push eax
mov dword [ebp - 4], 0x102
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e84]
movsx eax, di
mov ecx, esi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x2270]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0x320004
lea eax, [ebp - 0x110]
mov ecx, esi
push eax
push dword [ebp - 0x2e84]
movsx eax, di
add eax, 0xa0
push eax
call fcn.0045d450
mov edx, dword [ebp + 8]
movsx ecx, di
add ecx, 0xc8
movsx eax, dx
cmp eax, ecx
jl 0x50eb99
movsx ecx, di
add ecx, 0xd4
movsx eax, dx
cmp eax, ecx
mov ecx, dword [ebp + 0xc]
jg 0x50eb9c
movsx edx, cx
mov dword [ebp - 0x2e78], edx
cmp edx, dword [ebp - 0x2e84]
jl 0x50eb9c
mov eax, dword [ebp - 0x2e7c]
add eax, 0xa7
cmp edx, eax
jg 0x50eb9c
mov edx, 0x11
jmp 0x50ebaa
mov ecx, dword [ebp + 0xc]
movsx eax, cx
mov edx, 0x13
mov dword [ebp - 0x2e78], eax
mov eax, dword [ebp - 0x2e7c]
mov edi, 0xa0
push 0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0
push 1
push dword [esi + 0x1892fc]
add edi, eax
mov ecx, esi
push edx
push edi
mov dword [ebp - 0x2e98], edi
mov edi, dword [ebp - 0x2e88]
mov ecx, dword [ecx + 0x14aa00]
movsx eax, di
add eax, 0xce
push eax
call fcn.0057e2f0
mov edx, dword [ebp + 8]
movsx ecx, di
add ecx, 0xd7
movsx eax, dx
cmp eax, ecx
jl 0x50ec3b
movsx ecx, di
add ecx, 0xe3
movsx eax, dx
cmp eax, ecx
jg 0x50ec3b
mov ecx, dword [ebp - 0x2e74]
mov edx, dword [ebp - 0x2e78]
movsx eax, cx
add eax, 0x9b
cmp edx, eax
jl 0x50ec3b
movsx eax, cx
add eax, 0xa7
cmp edx, eax
mov eax, 0x12
jle 0x50ec40
mov eax, 0x14
push 0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0
mov edx, esi
mov ecx, esi
push 1
push dword [edx + 0x1892fc]
mov ecx, dword [ecx + 0x14aa00]
push eax
push dword [ebp - 0x2e98]
movsx eax, di
add eax, 0xdd
push eax
call fcn.0057e2f0
mov edx, dword [ebp + 8]
movsx eax, di
add eax, 0xb4
mov dword [ebp - 0x2e84], eax
movsx eax, dx
cmp eax, dword [ebp - 0x2e84]
jl 0x50ece2
movsx ecx, di
add ecx, 0xe6
movsx eax, dx
cmp eax, ecx
jg 0x50ece2
mov ecx, dword [ebp - 0x2e74]
mov eax, dword [ebp + 0xc]
movsx edx, cx
add edx, 0x12c
movsx edi, ax
cmp edi, edx
jl 0x50ece2
movsx eax, cx
add eax, 0x140
cmp edi, eax
jg 0x50ece2
push 0x14
push 6
push 6
push str.Change
push edx
push dword [ebp - 0x2e84]
mov ecx, esi
call fcn.0045dd00
jmp case.default.0x5101e6
mov eax, dword [ebp - 0x2e74]
mov ecx, esi
push 7
push 0
push 0
cwde
push str.Change
add eax, 0x12c
push eax
push dword [ebp - 0x2e84]
call fcn.0045dd00
jmp case.default.0x5101e6
push str.DRAW_DIALOGBOX_PVPT_MENU127
lea ecx, [ebp - 0x2288]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
cwde
push 0
push 0xc8
push 0xc8
lea esi, [eax + 0x2d]
mov dword [ebp - 4], 0x103
mov eax, dword [ebp - 0x2e88]
cwde
add eax, 0x19
mov dword [ebp - 0x2eb4], eax
lea eax, [ebp - 0x2288]
push 0xdc
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e88]
mov ecx, edi
cwde
push esi
add eax, 0xf0
push eax
push dword [ebp - 0x2eb4]
call fcn.0045d060
lea ecx, [ebp - 0x2288]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU127
lea ecx, [ebp - 0x22a0]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e88]
mov ecx, 0x5fd3c4
push 0
cwde
push 0xc8
push 0xc8
push 0xdc
lea edi, [eax + 0x1a]
mov dword [ebp - 4], 0x104
lea eax, [ebp - 0x22a0]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
mov ecx, dword [ebp - 0x2eb8]
push eax
mov eax, dword [ebp - 0x2e88]
cwde
push esi
add eax, 0xf1
push eax
push edi
call fcn.0045d060
lea ecx, [ebp - 0x22a0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU174
lea ecx, [ebp - 0x22b8]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
cwde
push 0
push 0
mov dword [ebp - 4], 0x105
lea esi, [eax + 0x41]
lea eax, [ebp - 0x22b8]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov ecx, dword [ebp - 0x2eb8]
push esi
push dword [ebp - 0x2eb4]
call fcn.0045d450
lea ecx, [ebp - 0x22b8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU174
lea ecx, [ebp - 0x22d0]
call fcn.0040f9f0
push 0
push 0
lea eax, [ebp - 0x22d0]
mov dword [ebp - 4], 0x106
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push esi
push edi
mov edi, dword [ebp - 0x2eb8]
mov ecx, edi
call fcn.0045d450
lea ecx, [ebp - 0x22d0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU177
lea ecx, [ebp - 0x22e8]
call fcn.0040f9f0
push 0
push 0
lea eax, [ebp - 0x22e8]
mov dword [ebp - 4], 0x107
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e88]
mov ecx, edi
cwde
push esi
add eax, 0xaf
push eax
call fcn.0045d450
lea ecx, [ebp - 0x22e8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU177
lea ecx, [ebp - 0x2300]
call fcn.0040f9f0
push 0
push 0
lea eax, [ebp - 0x2300]
mov dword [ebp - 4], 0x108
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push esi
mov esi, dword [ebp - 0x2e88]
mov ecx, edi
movsx eax, si
add eax, 0xb0
push eax
call fcn.0045d450
lea ecx, [ebp - 0x2300]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
xor edx, edx
mov dword [ebp - 0x2e78], edx
cmp dword [edi + 0x14552c], edx
jle case.default.0x5101e6
movsx eax, si
mov esi, dword [ebp - 0x2e8c]
mov dword [ebp - 0x2e98], eax
mov eax, dword [ebp - 0x2e74]
movsx ecx, ax
add ecx, 0x50
mov dword [ebp - 0x2e7c], ecx
nop
movsx eax, word [edi + 0x14558a]
add eax, edx
mov dword [ebp - 0x2e84], eax
cmp eax, 0x200
jge case.default.0x5101e6
cmp dword [esi + eax*4 + 0x148], 0
je 0x50f0a7
cmp word [esi + 0xa0], 3
lea eax, [ebp - 0x110]
push 0x100
push 0
push eax
je 0x50f01c
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2e84]
mov eax, dword [esi + eax*4 + 0x148]
push dword [eax + 0x34]
lea eax, [ebp - 0x110]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
jmp 0x50f049
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2e84]
mov eax, dword [esi + eax*4 + 0x148]
push dword [eax + 0x3c]
push dword [eax + 0x38]
lea eax, [ebp - 0x110]
push 0x5c8b2c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x1c
mov eax, dword [ebp - 0x2e84]
mov ecx, edi
push 0
push 0x320004
mov eax, dword [esi + eax*4 + 0x148]
add eax, 8
push eax
push dword [ebp - 0x2e7c]
push dword [ebp - 0x2eb4]
call fcn.0045d450
push 0
push 0x320004
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
push dword [ebp - 0x2e7c]
mov eax, dword [ebp - 0x2e98]
add eax, 0xc8
push eax
call fcn.0045d450
mov ecx, dword [ebp - 0x2e7c]
mov edx, dword [ebp - 0x2e78]
inc edx
add ecx, 0xf
mov dword [ebp - 0x2e78], edx
mov dword [ebp - 0x2e7c], ecx
cmp edx, dword [edi + 0x14552c]
jl 0x50efb0
jmp case.default.0x5101e6
push str.DRAW_DIALOGBOX_PVPT_MENU123
lea ecx, [ebp - 0x2318]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, dword [ebp - 0x2e88]
cwde
push 0
push 0xc8
push 0xc8
lea esi, [eax + 0x2d]
mov dword [ebp - 4], 0x109
movsx eax, cx
add eax, 0xf0
mov dword [ebp - 0x2e7c], eax
movsx eax, cx
mov ecx, 0x5fd3c4
add eax, 0x19
mov dword [ebp - 0x2e78], eax
lea eax, [ebp - 0x2318]
push 0xdc
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push esi
push dword [ebp - 0x2e7c]
mov ecx, edi
push dword [ebp - 0x2e78]
call fcn.0045d060
lea ecx, [ebp - 0x2318]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU123
lea ecx, [ebp - 0x2330]
call fcn.0040f9f0
push 0
push 0xc8
push 0xc8
push 0xdc
lea eax, [ebp - 0x2330]
mov dword [ebp - 4], 0x10a
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push esi
mov esi, dword [ebp - 0x2e88]
mov ecx, edi
movsx eax, si
add eax, 0xf1
push eax
movsx eax, si
add eax, 0x1a
push eax
call fcn.0045d060
lea ecx, [ebp - 0x2330]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
xor ecx, ecx
mov dword [ebp - 0x2e84], ecx
cmp dword [edi + 0x14552c], ecx
jle 0x50f594
movsx eax, si
mov esi, dword [ebp + 8]
mov dword [ebp - 0x2eb4], eax
mov eax, dword [ebp - 0x2e74]
cwde
add eax, 0x50
mov dword [ebp - 0x2ea0], eax
nop word [eax + eax]
movsx eax, word [edi + 0x14558a]
add eax, ecx
mov dword [ebp - 0x2ea8], eax
cmp eax, 0x14
jge 0x50f58e
mov eax, dword [ebp + eax*4 - 0x278]
test eax, eax
je 0x50f574
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov ecx, dword [ebp - 0x2ea8]
add esp, 0xc
xorps xmm0, xmm0
mov eax, dword [ebp + ecx*4 - 0x278]
push 0x1b
movzx ecx, word [eax + 0x52]
movzx eax, word [eax + 0x54]
cmp cx, 0xffff
je 0x50f402
cmp ax, 0xffff
je 0x50f380
cmp cx, ax
jne 0x50f2f6
push str.DRAW_DIALOGBOX_PVPT_MENU131
lea ecx, [ebp - 0x308]
mov dword [ebp - 0x2f8], 0
movups xmmword [ebp - 0x308], xmm0
mov dword [ebp - 0x2f4], 0
call fcn.0040b5c0
lea eax, [ebp - 0x308]
mov dword [ebp - 4], 0x10b
push eax
lea eax, [ebp - 0x2ef0]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov edx, dword [eax]
add edx, 0x20
cmp dword [edx + 0x14], 0xf
jbe 0x50f2cb
mov edx, dword [edx]
mov eax, dword [ebp - 0x2ea8]
mov ecx, dword [ebp + eax*4 - 0x278]
movsx eax, word [ecx + 0x52]
push eax
push edx
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
lea ecx, [ebp - 0x308]
jmp 0x50f4fa
push str.DRAW_DIALOGBOX_PVPT_MENU132
lea ecx, [ebp - 0x320]
mov dword [ebp - 0x310], 0
movups xmmword [ebp - 0x320], xmm0
mov dword [ebp - 0x30c], 0
call fcn.0040b5c0
lea eax, [ebp - 0x320]
mov dword [ebp - 4], 0x10c
push eax
lea eax, [ebp - 0x2ef8]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov edx, dword [eax]
add edx, 0x20
cmp dword [edx + 0x14], 0xf
jbe 0x50f34d
mov edx, dword [edx]
mov eax, dword [ebp - 0x2ea8]
mov ecx, dword [ebp + eax*4 - 0x278]
movsx eax, word [ecx + 0x54]
push eax
movsx eax, word [ecx + 0x52]
push eax
push edx
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea ecx, [ebp - 0x320]
jmp 0x50f4fd
push str.DRAW_DIALOGBOX_PVPT_MENU133
lea ecx, [ebp - 0x338]
mov dword [ebp - 0x328], 0
movups xmmword [ebp - 0x338], xmm0
mov dword [ebp - 0x324], 0
call fcn.0040b5c0
lea eax, [ebp - 0x338]
mov dword [ebp - 4], 0x10d
push eax
lea eax, [ebp - 0x2f00]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov edx, dword [eax]
add edx, 0x20
cmp dword [edx + 0x14], 0xf
jbe 0x50f3d7
mov edx, dword [edx]
mov eax, dword [ebp - 0x2ea8]
mov ecx, dword [ebp + eax*4 - 0x278]
movsx eax, word [ecx + 0x52]
push eax
push edx
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
lea ecx, [ebp - 0x338]
jmp 0x50f4fa
cmp ax, 0xffff
je 0x50f48b
push str.DRAW_DIALOGBOX_PVPT_MENU134
lea ecx, [ebp - 0x350]
mov dword [ebp - 0x340], 0
movups xmmword [ebp - 0x350], xmm0
mov dword [ebp - 0x33c], 0
call fcn.0040b5c0
lea eax, [ebp - 0x350]
mov dword [ebp - 4], 0x10e
push eax
lea eax, [ebp - 0x2f08]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov edx, dword [eax]
add edx, 0x20
cmp dword [edx + 0x14], 0xf
jbe 0x50f463
mov edx, dword [edx]
mov eax, dword [ebp - 0x2ea8]
mov ecx, dword [ebp + eax*4 - 0x278]
movsx eax, word [ecx + 0x54]
push eax
push edx
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
lea ecx, [ebp - 0x350]
jmp 0x50f4fa
push str.DRAW_DIALOGBOX_PVPT_MENU135
lea ecx, [ebp - 0x368]
mov dword [ebp - 0x358], 0
movups xmmword [ebp - 0x368], xmm0
mov dword [ebp - 0x354], 0
call fcn.0040b5c0
lea eax, [ebp - 0x368]
mov dword [ebp - 4], 0x10f
push eax
lea eax, [ebp - 0x2f10]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x50f4e2
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x110]
push 0x100
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
lea ecx, [ebp - 0x368]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov ecx, dword [ebp - 0x2ea0]
movsx eax, si
cmp eax, dword [ebp - 0x2e78]
jle 0x50f546
cmp eax, dword [ebp - 0x2e7c]
jge 0x50f546
mov eax, dword [ebp + 0xc]
movsx edx, ax
cmp edx, ecx
jl 0x50f546
lea eax, [ecx + 0xf]
cmp edx, eax
jge 0x50f546
push 0
push 0xff
push 0xff
push 0xff
jmp 0x50f54e
push 0
push 0x32
push 0
push 4
lea eax, [ebp - 0x110]
push eax
mov eax, dword [ebp - 0x2ec0]
push ecx
mov ecx, dword [ebp - 0x2eb4]
cwde
add eax, ecx
push eax
push ecx
mov ecx, edi
call fcn.0045d060
mov ecx, dword [ebp - 0x2e84]
add dword [ebp - 0x2ea0], 0xf
inc ecx
mov dword [ebp - 0x2e84], ecx
cmp ecx, dword [edi + 0x14552c]
jl 0x50f200
mov esi, dword [ebp - 0x2e88]
cmp byte [ebp - 0x2e7d], 0
jne case.default.0x5101e6
movsx edx, si
add edx, 0x82
cmp byte [edi + 0x13c678], 0
jne 0x50f61f
mov eax, dword [ebp + 8]
movsx ecx, ax
cmp ecx, edx
jl 0x50f60f
movsx eax, si
add eax, 0xe6
cmp ecx, eax
jg 0x50f60f
mov ecx, dword [ebp - 0x2e74]
mov eax, dword [ebp + 0xc]
movsx esi, cx
cwde
add esi, 0x12c
mov dword [ebp - 0x2e98], eax
cmp eax, esi
jl 0x50f60f
movsx eax, cx
add eax, 0x140
cmp dword [ebp - 0x2e98], eax
jg 0x50f60f
push 0x14
push 6
push 6
push str.Claim_Reward
push esi
push edx
mov ecx, edi
call fcn.0045dd00
jmp case.default.0x5101e6
push 7
push 0
push 0
push str.Claim_Reward
jmp 0x50be41
push 0xf
push 0xf
push 0xf
push str.Claim_Reward
jmp 0x50be41
push str.DRAW_DIALOGBOX_PVPT_MENU123
lea ecx, [ebp - 0x2348]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
push 0
cwde
push 0xc8
push 0xc8
push 0xdc
lea esi, [eax + 0x2d]
mov dword [ebp - 4], 0x110
lea eax, [ebp - 0x2348]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
mov ecx, dword [ebp - 0x2e88]
push eax
movsx eax, cx
add eax, 0xf0
push esi
push eax
movsx eax, cx
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d060
lea ecx, [ebp - 0x2348]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU123
lea ecx, [ebp - 0x2360]
call fcn.0040f9f0
push 0
push 0xc8
push 0xc8
push 0xdc
lea eax, [ebp - 0x2360]
mov dword [ebp - 4], 0x111
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push esi
mov esi, dword [ebp - 0x2e88]
mov ecx, edi
movsx eax, si
add eax, 0xf1
push eax
movsx eax, si
add eax, 0x1a
push eax
call fcn.0045d060
lea ecx, [ebp - 0x2360]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov ecx, dword [ebp - 0x2e8c]
push 0
mov dword [ebp - 0x2ea4], 0xffffffff
call fcn.00577410
test eax, eax
jne 0x50f814
push str.DRAW_DIALOGBOX_PVPT_MENU130
lea ecx, [ebp - 0x2378]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2ec0]
push 0
push 0
movsx ecx, ax
lea eax, [ebp - 0x2378]
push 0
movsx esi, si
push 0
add esi, ecx
mov dword [ebp - 4], 0x112
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e74]
mov ecx, edi
cwde
add eax, 0x96
push eax
mov eax, dword [ebp - 0x2e88]
push esi
cwde
push eax
call fcn.0045d060
lea ecx, [ebp - 0x2378]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU65
lea ecx, [ebp - 0x2390]
call fcn.0040f9f0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x2390]
mov dword [ebp - 4], 0x113
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e74]
mov ecx, edi
cwde
add eax, 0xa5
push eax
mov eax, dword [ebp - 0x2e88]
push esi
cwde
push eax
call fcn.0045d060
lea ecx, [ebp - 0x2390]
call fcn.00411640
jmp case.default.0x5101e6
cmp dword [edi + 0x145534], 0
mov dword [ebp - 0x2ea0], 0
jle case.default.0x5101e6
mov eax, dword [ebp - 0x2e74]
xor ecx, ecx
cwde
mov dword [ebp - 0x2e84], eax
movsx eax, si
mov dword [ebp - 0x2e7c], eax
mov eax, dword [edi + 0x145534]
mov dword [ebp - 0x2e90], 2
nop dword [eax]
nop word [eax + eax]
movsx edx, word [edi + 0x14558a]
imul edx, eax
add edx, dword [ebp - 0x2ea0]
mov dword [ebp - 0x2eb4], edx
cmp edx, 0x14
jge 0x50fdff
mov eax, dword [ebp - 0x2e8c]
mov eax, dword [eax + edx*4 + 0x984]
mov dword [ebp - 0x2e98], eax
test eax, eax
je 0x50fdeb
mov edx, dword [ebp - 0x2eac]
mov ax, word [eax + 0x52]
cmp ax, word [edx + 0x52]
jne 0x50fdeb
mov eax, dword [ebp - 0x2e98]
mov ax, word [eax + 0x54]
cmp ax, word [edx + 0x54]
jne 0x50fdeb
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2e8c]
add esp, 0xc
mov ecx, dword [ebp - 0x2eb4]
mov ecx, dword [eax + ecx*4 + 0x984]
mov dword [ebp - 0x2e98], ecx
mov eax, dword [ecx + 8]
add eax, 6
cmp eax, 5
ja case.default.0x50f900
jmp dword [eax*4 + 0x517e3c]
push 0x1e
xorps xmm0, xmm0
mov dword [ebp - 0x370], 0
push str.DRAW_DIALOGBOX_CURRENCY_MENU13
lea ecx, [ebp - 0x380]
mov dword [ebp - 0x36c], 0
movups xmmword [ebp - 0x380], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x380]
mov dword [ebp - 4], 0x114
push eax
lea eax, [ebp - 0x2f18]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x50f963
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x110]
push 0x100
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x380]
call fcn.00411640
jmp 0x50fc74
push 0x1e
xorps xmm0, xmm0
mov dword [ebp - 0x388], 0
push str.DRAW_DIALOGBOX_CURRENCY_MENU14
lea ecx, [ebp - 0x398]
mov dword [ebp - 0x384], 0
movups xmmword [ebp - 0x398], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x398]
mov dword [ebp - 4], 0x115
push eax
lea eax, [ebp - 0x2f20]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x50f9eb
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x110]
push 0x100
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x398]
call fcn.00411640
jmp 0x50fc74
push 0x1e
xorps xmm0, xmm0
mov dword [ebp - 0x3a0], 0
push str.DRAW_DIALOGBOX_CURRENCY_MENU15
lea ecx, [ebp - 0x3b0]
mov dword [ebp - 0x39c], 0
movups xmmword [ebp - 0x3b0], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x3b0]
mov dword [ebp - 4], 0x116
push eax
lea eax, [ebp - 0x2f28]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x50fa73
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x110]
push 0x100
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3b0]
call fcn.00411640
jmp 0x50fc74
push 0x1e
xorps xmm0, xmm0
mov dword [ebp - 0x3b8], 0
push str.DRAW_DIALOGBOX_CURRENCY_MENU16
lea ecx, [ebp - 0x3c8]
mov dword [ebp - 0x3b4], 0
movups xmmword [ebp - 0x3c8], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x3c8]
mov dword [ebp - 4], 0x117
push eax
lea eax, [ebp - 0x2f30]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x50fafb
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x110]
push 0x100
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3c8]
call fcn.00411640
jmp 0x50fc74
push 0x1e
xorps xmm0, xmm0
mov dword [ebp - 0x3d0], 0
push str.DRAW_DIALOGBOX_CURRENCY_MENU17
lea ecx, [ebp - 0x3e0]
mov dword [ebp - 0x3cc], 0
movups xmmword [ebp - 0x3e0], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x3e0]
mov dword [ebp - 4], 0x118
push eax
lea eax, [ebp - 0x2f38]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x50fb83
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x110]
push 0x100
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3e0]
call fcn.00411640
jmp 0x50fc74
push 0x1e
xorps xmm0, xmm0
mov dword [ebp - 0x3e8], 0
push str.DRAW_DIALOGBOX_CURRENCY_MENU18
lea ecx, [ebp - 0x3f8]
mov dword [ebp - 0x3e4], 0
movups xmmword [ebp - 0x3f8], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x3f8]
mov dword [ebp - 4], 0x119
push eax
lea eax, [ebp - 0x2f40]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x50fc0b
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x110]
push 0x100
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3f8]
call fcn.00411640
jmp 0x50fc74
mov eax, dword [ebp - 0x2e94]
cdq
idiv dword [ebp - 0x2e90]
cmp byte [ecx + 0x70], 0
sete cl
imul eax, eax, 0x55
movzx ecx, cl
push ecx
mov ecx, dword [ebp - 0x2e98]
push dword [ecx + 0x48]
mov ecx, dword [ebp - 0x2e74]
add ecx, 0x5f
add eax, ecx
mov ecx, edi
push eax
imul eax, edx, 0x64
add eax, 0x4b
add eax, esi
push eax
call fcn.0052f730
mov edx, dword [ebp - 0x2e94]
mov eax, edx
and eax, reloc.DSOUND.dll_DirectSoundCreate
jns 0x50fc88
dec eax
or eax, 0xfffffffe
inc eax
imul ecx, eax, 0x64
mov eax, dword [ebp + 8]
cwde
mov dword [ebp - 0x2e78], eax
mov eax, dword [ebp - 0x2e7c]
add eax, 0x2d
mov dword [ebp - 0x2e98], ecx
add eax, ecx
cmp dword [ebp - 0x2e78], eax
jl 0x50fd0e
mov eax, dword [ebp - 0x2e7c]
add eax, 0x69
add eax, ecx
cmp dword [ebp - 0x2e78], eax
jge 0x50fd0e
mov eax, edx
cdq
sub eax, edx
sar eax, 1
imul ecx, eax, 0x55
mov eax, dword [ebp + 0xc]
movsx edx, ax
mov eax, dword [ebp - 0x2e84]
add eax, 0x41
add eax, ecx
cmp edx, eax
jl 0x50fd08
mov eax, dword [ebp - 0x2e84]
add eax, 0x7d
add eax, ecx
mov ecx, dword [ebp - 0x2ea4]
cmp edx, eax
mov edx, dword [ebp - 0x2e94]
cmovle ecx, dword [ebp - 0x2eb4]
mov dword [ebp - 0x2ea4], ecx
jmp 0x50fd14
mov edx, dword [ebp - 0x2e94]
mov ecx, dword [ebp - 0x2ea4]
mov esi, dword [ebp - 0x2eb4]
mov eax, dword [ebp - 0x2e8c]
mov eax, dword [eax + esi*4 + 0x984]
mov esi, dword [ebp - 0x2e88]
mov dword [ebp - 0x2e78], eax
mov eax, dword [eax + 8]
add eax, 6
cmp eax, 5
ja case.default.0x50fd49
movzx eax, byte [eax + 0x517e58]
jmp dword [eax*4 + 0x517e54]
mov edi, dword [ebp - 0x2e7c]
mov eax, edx
cdq
add edi, 0x69
sub eax, edx
mov edx, dword [ebp - 0x2e84]
sar eax, 1
add edx, 0x5f
imul eax, eax, 0x55
push 0
add edx, eax
mov eax, dword [ebp - 0x2e98]
add edi, eax
mov dword [ebp - 0x2ea8], edi
mov edi, dword [ebp - 0x2e7c]
add edi, 0x2d
add eax, edi
mov edi, dword [ebp - 0x2e78]
cmp byte [edi + 0x70], 0
mov edi, dword [ebp - 0x2eb8]
je 0x50fdc2
cmp ecx, dword [ebp - 0x2eb4]
lea ecx, [ebp - 0x110]
jne 0x50fdba
push 0xff
push 0xff
push 0xff
jmp 0x50fdce
push 0x32
push 0
push 4
jmp 0x50fdce
push 0xf
push 0xf
push 0xf
lea ecx, [ebp - 0x110]
push ecx
push edx
push dword [ebp - 0x2ea8]
mov ecx, edi
push eax
call fcn.0045d060
mov ecx, dword [ebp - 0x2e94]
inc ecx
mov dword [ebp - 0x2e94], ecx
inc dword [ebp - 0x2ea0]
mov eax, dword [edi + 0x145534]
cmp ecx, eax
jl 0x50f860
mov eax, dword [ebp - 0x2ea4]
cmp eax, 0xffffffff
je case.default.0x5101e6
mov esi, dword [ebp - 0x2e8c]
mov ecx, dword [esi + eax*4 + 0x984]
mov al, byte [edi + 0x1895fb]
cmp byte [ecx + 0x70], 0
je 0x50ff72
test al, al
je 0x50ff7a
mov dword [ebp - 0x2eac], 0
call fcn.00577880
test al, al
je 0x5107da
push str.DRAW_DIALOGBOX_PVPT_MENU136
lea ecx, [ebp - 0x2468]
call fcn.0040f9f0
lea eax, [ebp - 0x2468]
mov dword [ebp - 4], 0x122
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [edi + 0x18a074]
push 0x80
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2468]
call fcn.00411640
mov eax, dword [ebp - 0x2ea4]
mov dword [ebp - 0x2eac], 1
mov eax, dword [esi + eax*4 + 0x984]
movzx ecx, word [eax + 0x56]
movzx eax, word [eax + 0x58]
cmp cx, 0xffff
je 0x51040b
push str.DRAW_DIALOGBOX_PVPT_MENU137
cmp ax, 0xffff
je 0x51037a
cmp cx, ax
jne 0x5102d2
lea ecx, [ebp - 0x2498]
call fcn.0040f9f0
push str.DRAW_DIALOGBOX_PVPT_MENU139
lea ecx, [ebp - 0x2480]
mov dword [ebp - 4], 0x123
call fcn.0040f9f0
lea eax, [ebp - 0x2498]
mov byte [ebp - 4], 0x24
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2ea4]
mov ecx, 0x5fd3c4
mov eax, dword [esi + eax*4 + 0x984]
movsx eax, word [eax + 0x56]
push eax
lea eax, [ebp - 0x2480]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [edi + 0x18a200]
push eax
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
call eax
add esp, 0x10
lea ecx, [ebp - 0x2480]
call fcn.00411640
lea ecx, [ebp - 0x2498]
jmp 0x5104a6
test al, al
je 0x50fe33
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2ea4]
add esp, 0xc
mov ecx, dword [esi + eax*4 + 0x984]
mov eax, dword [ecx + 8]
add eax, 6
cmp eax, 5
ja case.default.0x50ffac
jmp dword [eax*4 + 0x517e60]
push str.DRAW_DIALOGBOX_CURRENCY_MENU13
lea ecx, [ebp - 0x23a8]
call fcn.0040f9f0
lea eax, [ebp - 0x23a8]
mov dword [ebp - 4], 0x11a
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004994b0
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x23a8]
call fcn.00411640
jmp 0x5101c3
push str.DRAW_DIALOGBOX_CURRENCY_MENU14
lea ecx, [ebp - 0x23c0]
call fcn.0040f9f0
lea eax, [ebp - 0x23c0]
mov dword [ebp - 4], 0x11b
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004994b0
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x23c0]
call fcn.00411640
jmp 0x5101c3
push str.DRAW_DIALOGBOX_CURRENCY_MENU15
lea ecx, [ebp - 0x23d8]
call fcn.0040f9f0
lea eax, [ebp - 0x23d8]
mov dword [ebp - 4], 0x11c
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004994b0
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x23d8]
call fcn.00411640
jmp 0x5101c3
push str.DRAW_DIALOGBOX_CURRENCY_MENU16
lea ecx, [ebp - 0x23f0]
call fcn.0040f9f0
lea eax, [ebp - 0x23f0]
mov dword [ebp - 4], 0x11d
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004994b0
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x23f0]
call fcn.00411640
jmp 0x5101c3
push str.DRAW_DIALOGBOX_CURRENCY_MENU17
lea ecx, [ebp - 0x2408]
call fcn.0040f9f0
lea eax, [ebp - 0x2408]
mov dword [ebp - 4], 0x11e
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004994b0
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2408]
call fcn.00411640
jmp 0x5101c3
push str.DRAW_DIALOGBOX_CURRENCY_MENU18
lea ecx, [ebp - 0x2420]
call fcn.0040f9f0
lea eax, [ebp - 0x2420]
mov dword [ebp - 4], 0x11f
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004994b0
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2420]
call fcn.00411640
jmp 0x5101c3
push 0
push dword [ecx + 0x48]
mov ecx, edi
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.0047daf0
mov eax, dword [ebp - 0x2ea4]
mov ecx, dword [esi + eax*4 + 0x984]
mov eax, dword [ecx + 8]
add eax, 6
cmp eax, 5
ja case.default.0x5101e6
movzx eax, byte [eax + 0x517e7c]
jmp dword [eax*4 + 0x517e78]
cmp dword [ecx + 0x28], 0xffffffff
jne 0x510261
push str.DRAW_DIALOGBOX_PVPT_MENU139
lea ecx, [ebp - 0x2438]
call fcn.0040f9f0
lea eax, [ebp - 0x110]
mov dword [ebp - 4], 0x120
push eax
mov eax, dword [ebp - 0x2ea4]
mov ecx, 0x5fd3c4
mov eax, dword [esi + eax*4 + 0x984]
push dword [eax + 0x24]
lea eax, [ebp - 0x2438]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [edi + 0x18a074]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2438]
call fcn.00411640
jmp 0x517aed
push str.DRAW_DIALOGBOX_PVPT_MENU140
lea ecx, [ebp - 0x2450]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2ea4]
lea ecx, [ebp - 0x110]
push ecx
mov ecx, 0x5fd3c4
mov dword [ebp - 4], 0x121
mov eax, dword [esi + eax*4 + 0x984]
push dword [eax + 0x28]
push dword [eax + 0x24]
lea eax, [ebp - 0x2450]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [edi + 0x18a074]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2450]
call fcn.00411640
jmp 0x517aed
lea ecx, [ebp - 0x24c8]
call fcn.0040f9f0
push str.DRAW_DIALOGBOX_PVPT_MENU140
lea ecx, [ebp - 0x24b0]
mov dword [ebp - 4], 0x125
call fcn.0040f9f0
mov eax, dword [ebp - 0x2ea4]
mov ecx, 0x5fd3c4
mov byte [ebp - 4], 0x26
mov esi, dword [esi + eax*4 + 0x984]
lea eax, [ebp - 0x24c8]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
movsx eax, word [esi + 0x58]
mov ecx, 0x5fd3c4
push eax
movsx eax, word [esi + 0x56]
push eax
lea eax, [ebp - 0x24b0]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [edi + 0x18a200]
push eax
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
call eax
add esp, 0x14
lea ecx, [ebp - 0x24b0]
call fcn.00411640
lea ecx, [ebp - 0x24c8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov esi, dword [ebp - 0x2e8c]
jmp 0x5104b2
lea ecx, [ebp - 0x24f8]
call fcn.0040f9f0
push str.DRAW_DIALOGBOX_PVPT_MENU141
lea ecx, [ebp - 0x24e0]
mov dword [ebp - 4], 0x127
call fcn.0040f9f0
lea eax, [ebp - 0x24f8]
mov byte [ebp - 4], 0x28
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2ea4]
mov ecx, 0x5fd3c4
mov eax, dword [esi + eax*4 + 0x984]
movsx eax, word [eax + 0x56]
push eax
lea eax, [ebp - 0x24e0]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [edi + 0x18a200]
push eax
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
call eax
add esp, 0x10
lea ecx, [ebp - 0x24e0]
call fcn.00411640
lea ecx, [ebp - 0x24f8]
jmp 0x5104a6
cmp ax, 0xffff
je 0x5104bc
push str.DRAW_DIALOGBOX_PVPT_MENU137
lea ecx, [ebp - 0x2528]
call fcn.0040f9f0
push str.DRAW_DIALOGBOX_PVPT_MENU142
lea ecx, [ebp - 0x2510]
mov dword [ebp - 4], 0x129
call fcn.0040f9f0
lea eax, [ebp - 0x2528]
mov byte [ebp - 4], 0x2a
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2ea4]
mov ecx, 0x5fd3c4
mov eax, dword [esi + eax*4 + 0x984]
movsx eax, word [eax + 0x58]
push eax
lea eax, [ebp - 0x2510]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [edi + 0x18a200]
push eax
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
call eax
add esp, 0x10
lea ecx, [ebp - 0x2510]
call fcn.00411640
lea ecx, [ebp - 0x2528]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov dword [ebp - 0x2eac], 2
mov eax, dword [ebp - 0x2ea4]
mov eax, dword [esi + eax*4 + 0x984]
movzx ecx, word [eax + 0x5a]
movzx eax, word [eax + 0x5c]
cmp cx, 0xffff
je 0x5106db
push str.DRAW_DIALOGBOX_PVPT_MENU138
cmp ax, 0xffff
je 0x510640
cmp cx, ax
jne 0x51058e
lea ecx, [ebp - 0x2558]
call fcn.0040f9f0
push str.DRAW_DIALOGBOX_PVPT_MENU139
lea ecx, [ebp - 0x2540]
mov dword [ebp - 4], 0x12b
call fcn.0040f9f0
lea eax, [ebp - 0x2558]
mov byte [ebp - 4], 0x2c
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2ea4]
mov ecx, 0x5fd3c4
mov eax, dword [esi + eax*4 + 0x984]
movsx eax, word [eax + 0x5a]
push eax
lea eax, [ebp - 0x2540]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
imul eax, dword [ebp - 0x2eac], 0x18c
add eax, 0x18a074
add eax, edi
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea ecx, [ebp - 0x2540]
call fcn.00411640
lea ecx, [ebp - 0x2558]
jmp 0x510780
lea ecx, [ebp - 0x2588]
call fcn.0040f9f0
push str.DRAW_DIALOGBOX_PVPT_MENU140
lea ecx, [ebp - 0x2570]
mov dword [ebp - 4], 0x12d
call fcn.0040f9f0
mov eax, dword [ebp - 0x2ea4]
mov ecx, 0x5fd3c4
mov byte [ebp - 4], 0x2e
mov esi, dword [esi + eax*4 + 0x984]
lea eax, [ebp - 0x2588]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
movsx eax, word [esi + 0x5c]
mov ecx, 0x5fd3c4
push eax
movsx eax, word [esi + 0x5a]
push eax
lea eax, [ebp - 0x2570]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
imul eax, dword [ebp - 0x2eac], 0x18c
add eax, 0x18a074
add eax, edi
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea ecx, [ebp - 0x2570]
call fcn.00411640
lea ecx, [ebp - 0x2588]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov esi, dword [ebp - 0x2e8c]
jmp 0x51078c
lea ecx, [ebp - 0x25b8]
call fcn.0040f9f0
push str.DRAW_DIALOGBOX_PVPT_MENU141
lea ecx, [ebp - 0x25a0]
mov dword [ebp - 4], 0x12f
call fcn.0040f9f0
lea eax, [ebp - 0x25b8]
mov byte [ebp - 4], 0x30
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2ea4]
mov ecx, 0x5fd3c4
mov eax, dword [esi + eax*4 + 0x984]
movsx eax, word [eax + 0x5a]
push eax
lea eax, [ebp - 0x25a0]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
imul eax, dword [ebp - 0x2eac], 0x18c
add eax, 0x18a074
add eax, edi
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea ecx, [ebp - 0x25a0]
call fcn.00411640
lea ecx, [ebp - 0x25b8]
jmp 0x510780
cmp ax, 0xffff
je 0x510792
push str.DRAW_DIALOGBOX_PVPT_MENU138
lea ecx, [ebp - 0x25e8]
call fcn.0040f9f0
push str.DRAW_DIALOGBOX_PVPT_MENU142
lea ecx, [ebp - 0x25d0]
mov dword [ebp - 4], 0x131
call fcn.0040f9f0
lea eax, [ebp - 0x25e8]
mov byte [ebp - 4], 0x32
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2ea4]
mov ecx, 0x5fd3c4
mov eax, dword [esi + eax*4 + 0x984]
movsx eax, word [eax + 0x5c]
push eax
lea eax, [ebp - 0x25d0]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
imul eax, dword [ebp - 0x2eac], 0x18c
add eax, 0x18a074
add eax, edi
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea ecx, [ebp - 0x25d0]
call fcn.00411640
lea ecx, [ebp - 0x25e8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
inc dword [ebp - 0x2eac]
mov eax, dword [ebp - 0x2ea4]
mov ecx, dword [esi + eax*4 + 0x984]
cmp dword [ecx + 0x60], 0
je 0x5107e0
call fcn.00407180
cmp ax, 1
jne 0x5107da
imul eax, dword [ebp - 0x2eac], 0x18c
push 0x5c4a2a
push 0x80
add eax, 0x18a074
add eax, edi
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
add esp, 0xc
inc dword [ebp - 0x2eac]
mov eax, dword [ebp - 0x2ea4]
mov ecx, dword [esi + eax*4 + 0x984]
cmp dword [ecx + 0x60], 0
je 0x510c0f
call fcn.00407180
cmp ax, 1
jne 0x510c09
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2ea4]
add esp, 0xc
mov ecx, dword [esi + eax*4 + 0x984]
call fcn.00407170
cwde
sub eax, 1
je 0x510880
sub eax, 1
jne 0x5108d6
push str.DRAW_DIALOGBOX_PVPT_MENU138
lea ecx, [ebp - 0x2600]
call fcn.0040f9f0
lea eax, [ebp - 0x2600]
mov dword [ebp - 4], 0x134
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push 0x80
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
lea ecx, [ebp - 0x2600]
jmp 0x5108c7
push str.DRAW_DIALOGBOX_PVPT_MENU137
lea ecx, [ebp - 0x2618]
call fcn.0040f9f0
lea eax, [ebp - 0x2618]
mov dword [ebp - 4], 0x133
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push 0x80
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
lea ecx, [ebp - 0x2618]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, dword [ebp - 0x2ea4]
mov eax, dword [esi + eax*4 + 0x984]
cmp dword [eax + 0x64], 0
je 0x510961
push str.DRAW_DIALOGBOX_PVPT_MENU144
lea ecx, [ebp - 0x2630]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2ea4]
mov dword [ebp - 4], 0x135
mov ecx, dword [esi + eax*4 + 0x984]
imul eax, dword [ebp - 0x2eac], 0x18c
add eax, 0x18a074
add eax, edi
mov dword [ebp - 0x2e9c], eax
lea eax, [ebp - 0x110]
push eax
push dword [ecx + 0x64]
lea eax, [ebp - 0x2630]
push dword [ecx + 0x60]
mov ecx, 0x5fd3c4
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e9c]
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea ecx, [ebp - 0x2630]
jmp 0x5109d4
push str.DRAW_DIALOGBOX_PVPT_MENU143
lea ecx, [ebp - 0x2648]
call fcn.0040f9f0
imul eax, dword [ebp - 0x2eac], 0x18c
mov ecx, 0x5fd3c4
mov dword [ebp - 4], 0x136
add eax, 0x18a074
add eax, edi
mov dword [ebp - 0x2e9c], eax
lea eax, [ebp - 0x110]
push eax
mov eax, dword [ebp - 0x2ea4]
mov eax, dword [esi + eax*4 + 0x984]
push dword [eax + 0x60]
lea eax, [ebp - 0x2648]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e9c]
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea ecx, [ebp - 0x2648]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, dword [ebp - 0x2ea4]
mov ecx, dword [esi + eax*4 + 0x984]
cmp dword [ecx + 0x68], 0xffffffff
jne 0x5109fd
cmp dword [ecx + 0x6c], 0xffffffff
je 0x510c0f
push 0x5c5848
push 0x80
push dword [ebp - 0x2e9c]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat_s
mov eax, dword [ebp - 0x2ea4]
add esp, 0xc
mov eax, dword [esi + eax*4 + 0x984]
cmp dword [eax + 0x68], 0xffffffff
je 0x510b02
push str.DRAW_DIALOGBOX_PVPT_MENU145
lea ecx, [ebp - 0x2660]
call fcn.0040f9f0
lea eax, [ebp - 0x2660]
mov dword [ebp - 4], 0x137
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push 0x80
push dword [ebp - 0x2e9c]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat_s
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2660]
call fcn.00411640
push 0x5c4a20
push 0x80
push dword [ebp - 0x2e9c]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat_s
mov eax, dword [ebp - 0x2ea4]
add esp, 0xc
mov eax, dword [esi + eax*4 + 0x984]
mov eax, dword [eax + 0x68]
cmp eax, 0xffffffff
je 0x510ad0
push eax
mov ecx, edi
call fcn.004159b0
lea eax, [edi + 0x18d57f]
push eax
push 0x80
push dword [ebp - 0x2e9c]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat_s
add esp, 0xc
mov eax, dword [ebp - 0x2ea4]
mov eax, dword [esi + eax*4 + 0x984]
cmp dword [eax + 0x6c], 0xffffffff
je 0x510aea
push 0x5d9824
jmp 0x510aef
push 0x5c5844
push 0x80
push dword [ebp - 0x2e9c]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat_s
add esp, 0xc
mov eax, dword [ebp - 0x2ea4]
mov eax, dword [esi + eax*4 + 0x984]
cmp dword [eax + 0x6c], 0xffffffff
je 0x510be5
push str.DRAW_DIALOGBOX_PVPT_MENU146
lea ecx, [ebp - 0x2678]
call fcn.0040f9f0
imul eax, dword [ebp - 0x2eac], 0x18c
mov ecx, 0x5fd3c4
mov dword [ebp - 4], 0x138
mov dword [ebp - 0x2e84], eax
lea eax, [ebp - 0x2678]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e84]
add eax, 0x18a074
add eax, edi
push 0x80
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat_s
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2678]
call fcn.00411640
mov eax, dword [ebp - 0x2e84]
push 0x5c4a20
add eax, 0x18a074
add eax, edi
push 0x80
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat_s
mov eax, dword [ebp - 0x2ea4]
add esp, 0xc
mov eax, dword [esi + eax*4 + 0x984]
mov eax, dword [eax + 0x6c]
cmp eax, 0xffffffff
je 0x510be5
push eax
mov ecx, edi
call fcn.004159b0
lea eax, [edi + 0x18d57f]
push eax
mov eax, dword [ebp - 0x2e84]
add eax, 0x18a074
add eax, edi
push 0x80
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat_s
add esp, 0xc
imul eax, dword [ebp - 0x2eac], 0x18c
push 0x5c5844
push 0x80
add eax, 0x18a074
add eax, edi
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat_s
add esp, 0xc
mov eax, dword [ebp - 0x2ea4]
cmp dword [ebp - 0x2eac], 0
mov ecx, edi
jne 0x517aef
mov eax, dword [esi + eax*4 + 0x984]
push 0
push dword [eax + 0x48]
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.0047daf0
jmp case.default.0x5101e6
mov eax, dword [ebp - 0x2ebc]
mov edx, dword [eax + 4]
add edx, 8
mov ecx, edx
lea esi, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x510c50
sub ecx, esi
jne 0x510cb0
push str.DRAW_DIALOGBOX_PVPT_MENU148
lea ecx, [ebp - 0x2690]
call fcn.0040f9f0
lea eax, [ebp - 0x2690]
mov dword [ebp - 4], 0x139
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push 0x29
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2690]
call fcn.00411640
jmp 0x510cc2
push edx
lea eax, [ebp - 0x110]
push 0x29
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
add esp, 0xc
mov eax, dword [ebp - 0x2e74]
mov ecx, dword [ebp - 0x2e88]
push 0
cwde
push 0xc8
push 0xc8
movsx edx, cx
lea esi, [eax + 0x2d]
add edx, 0xf0
movsx eax, cx
lea ecx, [ebp - 0x110]
push 0xdc
push ecx
push esi
add eax, 0x19
mov dword [ebp - 0x2e90], edx
push edx
push eax
mov ecx, edi
mov dword [ebp - 0x2e98], eax
call fcn.0045d060
mov ecx, dword [ebp - 0x2e88]
lea eax, [ebp - 0x110]
push 0
push 0xc8
push 0xc8
push 0xdc
push eax
movsx eax, cx
add eax, 0xf1
push esi
push eax
movsx eax, cx
mov ecx, edi
add eax, 0x1a
push eax
call fcn.0045d060
xor ecx, ecx
mov dword [ebp - 0x2e84], ecx
cmp dword [edi + 0x14552c], ecx
jle case.default.0x5101e6
mov eax, dword [ebp - 0x2e74]
mov edx, dword [ebp - 0x2ebc]
cwde
add eax, 0x50
mov dword [ebp - 0x2e9c], eax
nop
movsx esi, word [edi + 0x14558a]
add esi, ecx
cmp esi, 0x64
jge case.default.0x5101e6
cmp dword [edx + esi*4 + 8], 0
je 0x510ee2
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2ebc]
add esp, 0xc
mov eax, dword [eax + esi*4 + 8]
mov eax, dword [eax + 4]
cmp byte [eax + 0x17], 0
je 0x510e4c
push 0x1a
xorps xmm0, xmm0
mov dword [ebp - 0x400], 0
push str.DRAW_DIALOGBOX_PVPT_MENU70
lea ecx, [ebp - 0x410]
mov dword [ebp - 0x3fc], 0
movups xmmword [ebp - 0x410], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x410]
mov dword [ebp - 4], 0x13a
push eax
lea eax, [ebp - 0x2f48]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x510e16
mov ecx, dword [ecx]
mov eax, dword [ebp - 0x2ebc]
mov eax, dword [eax + esi*4 + 8]
mov eax, dword [eax + 4]
add eax, 0xc
push eax
push ecx
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x410]
call fcn.00411640
jmp 0x510e65
add eax, 0xc
push eax
lea eax, [ebp - 0x110]
push 0x5c7a40
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp + 8]
mov edx, dword [ebp - 0x2e98]
mov ecx, dword [ebp - 0x2e9c]
cwde
cmp eax, edx
jle 0x510ea3
cmp eax, dword [ebp - 0x2e90]
jge 0x510ea3
mov eax, dword [ebp + 0xc]
cwde
mov dword [ebp - 0x2e78], eax
cmp eax, ecx
jl 0x510ea3
lea eax, [ecx + 0xf]
cmp dword [ebp - 0x2e78], eax
jge 0x510ea3
push 0
push 0xffffff
jmp 0x510ec6
mov eax, dword [ebp - 0x2ebc]
push 0
mov eax, dword [eax + esi*4 + 8]
mov esi, 0x7ee
cmp word [eax + 8], si
jne 0x510ec1
push 0xff00
jmp 0x510ec6
push 0xff
lea eax, [ebp - 0x110]
push eax
push ecx
push edx
mov ecx, edi
call fcn.0045d450
mov eax, dword [ebp - 0x2e9c]
mov edx, dword [ebp - 0x2ebc]
mov esi, dword [ebp - 0x2e84]
add eax, 0xf
inc esi
mov dword [ebp - 0x2e9c], eax
mov ecx, esi
mov dword [ebp - 0x2e84], esi
cmp esi, dword [edi + 0x14552c]
jl 0x510d70
jmp case.default.0x5101e6
push str.DRAW_DIALOGBOX_PVPT_MENU72
lea ecx, [ebp - 0x26a8]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
cwde
push 0
push 0xc8
push 0xc8
lea esi, [eax + 0x2d]
mov dword [ebp - 4], 0x13b
mov eax, dword [ebp - 0x2e88]
cwde
add eax, 0x19
mov dword [ebp - 0x2e98], esi
mov dword [ebp - 0x2ea0], eax
lea eax, [ebp - 0x26a8]
push 0xdc
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e88]
mov ecx, edi
cwde
push esi
add eax, 0xf0
push eax
push dword [ebp - 0x2ea0]
call fcn.0045d060
lea ecx, [ebp - 0x26a8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU72
lea ecx, [ebp - 0x26c0]
call fcn.0040f9f0
push 0
push 0xc8
push 0xc8
push 0xdc
lea eax, [ebp - 0x26c0]
mov dword [ebp - 4], 0x13c
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
mov ecx, dword [ebp - 0x2e88]
push eax
movsx eax, cx
add eax, 0xf1
push esi
push eax
movsx eax, cx
mov ecx, edi
add eax, 0x1a
push eax
call fcn.0045d060
lea ecx, [ebp - 0x26c0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, dword [ebp - 0x2eb4]
mov eax, dword [eax + 4]
push dword [eax + 4]
lea eax, [ebp - 0x110]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [ebp - 0x26d8]
push str.DRAW_DIALOGBOX_PVPT_MENU73
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
cwde
mov dword [ebp - 4], 0x13d
push 0
lea esi, [eax + 0x50]
push 0x320004
lea eax, [ebp - 0x26d8]
mov ecx, 0x5fd3c4
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push esi
push dword [ebp - 0x2ea0]
mov ecx, edi
call fcn.0045d450
lea ecx, [ebp - 0x26d8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov ecx, dword [ebp - 0x2e88]
lea eax, [ebp - 0x110]
push 0
push 0x320004
movsx edi, cx
mov ecx, dword [ebp - 0x2eb8]
add edi, 0xaa
push eax
push esi
push edi
call fcn.0045d450
push str.DRAW_DIALOGBOX_PVPT_MENU74
lea ecx, [ebp - 0x26f0]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
cwde
push 0
push 0x320004
mov dword [ebp - 4], 0x13e
lea esi, [eax + 0x5f]
lea eax, [ebp - 0x26f0]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
mov ecx, dword [ebp - 0x2eb8]
push eax
push esi
push dword [ebp - 0x2ea0]
call fcn.0045d450
lea ecx, [ebp - 0x26f0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, dword [ebp - 0x2eb4]
push 0
push 0x320004
mov eax, dword [eax + 4]
add eax, 0xc
push eax
push esi
push edi
mov edi, dword [ebp - 0x2eb8]
mov ecx, edi
call fcn.0045d450
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2eb4]
mov ecx, dword [eax + 4]
movzx eax, word [ecx + 0x24]
push eax
movzx eax, word [ecx + 0x22]
push eax
movzx eax, word [ecx + 0x20]
push eax
movzx eax, word [ecx + 0x1c]
push eax
movzx eax, word [ecx + 0x1a]
push eax
push str._04d__02d__02d__02d:_02d
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x28
lea ecx, [ebp - 0x2708]
push str.DRAW_DIALOGBOX_PVPT_MENU75
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
cwde
push 0
push 0x320004
mov dword [ebp - 4], 0x13f
lea esi, [eax + 0x6e]
lea eax, [ebp - 0x2708]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push esi
push dword [ebp - 0x2ea0]
mov ecx, edi
call fcn.0045d450
lea ecx, [ebp - 0x2708]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0x320004
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
push esi
mov esi, dword [ebp - 0x2e88]
movsx eax, si
add eax, 0x91
push eax
call fcn.0045d450
push str.DRAW_DIALOGBOX_PVPT_MENU76
lea ecx, [ebp - 0x2720]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e98]
mov ecx, 0x5fd3c4
add eax, 0x50
mov dword [ebp - 4], 0x140
push 0
mov dword [ebp - 0x2e84], eax
lea eax, [ebp - 0x2720]
push 0x320004
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e84]
mov ecx, edi
push dword [ebp - 0x2ea0]
call fcn.0045d450
lea ecx, [ebp - 0x2720]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
movsx eax, si
mov esi, dword [ebp - 0x2eb4]
add eax, 0xd2
mov dword [ebp - 0x2e78], eax
mov eax, dword [esi + 4]
cmp byte [eax + 0x17], 0
je 0x5112e8
push str.DRAW_DIALOGBOX_PVPT_MENU15
lea ecx, [ebp - 0x2738]
call fcn.0040f9f0
push 0
push 0xff00
lea eax, [ebp - 0x2738]
mov dword [ebp - 4], 0x141
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e84]
mov ecx, edi
push dword [ebp - 0x2e78]
call fcn.0045d450
lea ecx, [ebp - 0x2738]
jmp 0x511338
push str.DRAW_DIALOGBOX_PVPT_MENU16
lea ecx, [ebp - 0x2750]
call fcn.0040f9f0
push 0
push 0xff
lea eax, [ebp - 0x2750]
mov dword [ebp - 4], 0x142
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e84]
mov ecx, edi
push dword [ebp - 0x2e78]
call fcn.0045d450
lea ecx, [ebp - 0x2750]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movzx ecx, word [esi + 8]
mov eax, 0x7ee
add esp, 0xc
cmp cx, ax
je 0x511399
movzx eax, word [esi + 0x14]
push eax
movzx eax, word [esi + 0x12]
push eax
movzx eax, word [esi + 0x10]
push eax
movzx eax, word [esi + 0xe]
push eax
movzx eax, word [esi + 0xa]
push eax
push ecx
lea eax, [ebp - 0x110]
push str._04d__02d__02d__02d:_02d:_02d
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x20
jmp 0x5113ea
push str.DRAW_DIALOGBOX_PVPT_MENU151
lea ecx, [ebp - 0x2768]
call fcn.0040f9f0
lea eax, [ebp - 0x2768]
mov dword [ebp - 4], 0x143
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004994b0
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2768]
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU150
lea ecx, [ebp - 0x2780]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
cwde
push 0
push 0x320004
mov dword [ebp - 4], 0x144
lea esi, [eax + 0x8c]
lea eax, [ebp - 0x2780]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push esi
push dword [ebp - 0x2ea0]
mov ecx, edi
call fcn.0045d450
lea ecx, [ebp - 0x2780]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0x320004
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
mov eax, dword [ebp - 0x2e88]
cwde
push esi
add eax, 0x82
push eax
call fcn.0045d450
jmp case.default.0x5101e6
push str.DRAW_DIALOGBOX_PVPT_MENU161
lea ecx, [ebp - 0x2798]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
cwde
push 0
push 0xc8
push 0xc8
lea esi, [eax + 0x2d]
mov dword [ebp - 4], 0x145
mov eax, dword [ebp - 0x2e88]
cwde
add eax, 0x19
mov dword [ebp - 0x2eb0], eax
lea eax, [ebp - 0x2798]
push 0xdc
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e88]
mov ecx, edi
cwde
push esi
add eax, 0xf0
push eax
push dword [ebp - 0x2eb0]
call fcn.0045d060
lea ecx, [ebp - 0x2798]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU161
lea ecx, [ebp - 0x27b0]
call fcn.0040f9f0
push 0
push 0xc8
push 0xc8
push 0xdc
lea eax, [ebp - 0x27b0]
mov dword [ebp - 4], 0x146
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
mov ecx, dword [ebp - 0x2e88]
push eax
movsx eax, cx
add eax, 0xf1
push esi
push eax
movsx eax, cx
mov ecx, edi
add eax, 0x1a
push eax
call fcn.0045d060
lea ecx, [ebp - 0x27b0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU162
lea ecx, [ebp - 0x2df8]
call fcn.0040f9f0
push 0
push 0x320004
lea eax, [ebp - 0x2df8]
mov dword [ebp - 4], 0x147
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e74]
cwde
add eax, 0x50
push eax
push dword [ebp - 0x2eb0]
mov ecx, edi
call fcn.0045d450
lea ecx, [ebp - 0x2df8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU163
lea ecx, [ebp - 0x27c8]
call fcn.0040f9f0
push 0
push 0x320004
lea eax, [ebp - 0x27c8]
mov dword [ebp - 4], 0x148
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e74]
mov ecx, edi
cwde
add eax, 0x5f
push eax
push dword [ebp - 0x2eb0]
call fcn.0045d450
lea ecx, [ebp - 0x27c8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU164
lea ecx, [ebp - 0x27e0]
call fcn.0040f9f0
push 0
push 0x320004
lea eax, [ebp - 0x27e0]
mov dword [ebp - 4], 0x149
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e74]
mov ecx, edi
cwde
add eax, 0x6e
push eax
push dword [ebp - 0x2eb0]
call fcn.0045d450
lea ecx, [ebp - 0x27e0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU165
lea ecx, [ebp - 0x27f8]
call fcn.0040f9f0
push 0
push 0x320004
lea eax, [ebp - 0x27f8]
mov dword [ebp - 4], 0x14a
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [esi + 0x50]
mov ecx, edi
push eax
push dword [ebp - 0x2eb0]
call fcn.0045d450
lea ecx, [ebp - 0x27f8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU166
lea ecx, [ebp - 0x2810]
call fcn.0040f9f0
mov dword [ebp - 4], 0x14b
push 0
push 0xff
lea eax, [ebp - 0x2810]
mov ecx, 0x5fd3c4
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
mov esi, dword [ebp - 0x2e74]
mov ecx, edi
push eax
movsx eax, si
add eax, 0x9b
push eax
push dword [ebp - 0x2eb0]
call fcn.0045d450
lea ecx, [ebp - 0x2810]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU167
lea ecx, [ebp - 0x2828]
call fcn.0040f9f0
push 0
push 0xff
lea eax, [ebp - 0x2828]
mov dword [ebp - 4], 0x14c
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
movsx eax, si
mov ecx, edi
add eax, 0xaa
push eax
push dword [ebp - 0x2eb0]
call fcn.0045d450
lea ecx, [ebp - 0x2828]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU168
lea ecx, [ebp - 0x2840]
call fcn.0040f9f0
push 0
push 0x320004
lea eax, [ebp - 0x2840]
mov dword [ebp - 4], 0x14d
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
movsx eax, si
mov ecx, edi
add eax, 0xb9
push eax
push dword [ebp - 0x2eb0]
call fcn.0045d450
lea ecx, [ebp - 0x2840]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU169
lea ecx, [ebp - 0x2858]
call fcn.0040f9f0
push 0
push 0x320004
lea eax, [ebp - 0x2858]
mov dword [ebp - 4], 0x14e
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
movsx eax, si
add eax, 0xc8
push eax
push dword [ebp - 0x2eb0]
mov ecx, edi
call fcn.0045d450
lea ecx, [ebp - 0x2858]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, dword [ebp - 0x2e8c]
cmp byte [eax + 0xcc], 3
jne 0x51199e
push str.DRAW_DIALOGBOX_PVPT_MENU170
lea ecx, [ebp - 0x2870]
call fcn.0040f9f0
push 0
push 0x19c8c8
lea eax, [ebp - 0x2870]
mov dword [ebp - 4], 0x14f
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
movsx eax, si
mov ecx, edi
add eax, 0xe6
push eax
push dword [ebp - 0x2eb0]
call fcn.0045d450
lea ecx, [ebp - 0x2870]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU171
lea ecx, [ebp - 0x2888]
call fcn.0040f9f0
push 0
push 0x19c8c8
lea eax, [ebp - 0x2888]
mov dword [ebp - 4], 0x150
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
movsx eax, si
mov ecx, edi
add eax, 0xf5
push eax
push dword [ebp - 0x2eb0]
call fcn.0045d450
lea ecx, [ebp - 0x2888]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU172
lea ecx, [ebp - 0x28a0]
call fcn.0040f9f0
push 0
push 0x19c8c8
lea eax, [ebp - 0x28a0]
mov dword [ebp - 4], 0x151
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
movsx eax, si
mov ecx, edi
add eax, 0x104
push eax
push dword [ebp - 0x2eb0]
call fcn.0045d450
lea ecx, [ebp - 0x28a0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
cmp byte [ebp - 0x2e7d], 0
jne case.default.0x5101e6
mov ecx, dword [ebp - 0x2e88]
mov eax, dword [ebp + 8]
movsx edx, cx
cwde
add edx, 0xaa
mov dword [ebp - 0x2e98], eax
cmp eax, edx
jl 0x511a18
movsx eax, cx
add eax, 0xe6
cmp dword [ebp - 0x2e98], eax
jg 0x511a18
mov eax, dword [ebp + 0xc]
movsx ecx, si
cwde
add ecx, 0x12c
mov dword [ebp - 0x2e98], eax
cmp eax, ecx
jl 0x511a18
movsx eax, si
add eax, 0x140
cmp dword [ebp - 0x2e98], eax
jg 0x511a18
push 0x14
push 6
push 6
push str.Register
push ecx
push edx
mov ecx, edi
call fcn.0045dd00
jmp case.default.0x5101e6
push 7
push 0
push 0
push str.Register
movsx eax, si
mov ecx, edi
add eax, 0x12c
push eax
push edx
call fcn.0045dd00
jmp case.default.0x5101e6
push str.DRAW_DIALOGBOX_PVPT_MENU173
lea ecx, [ebp - 0x28b8]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
cwde
push 0
push 0xc8
push 0xc8
lea esi, [eax + 0x2d]
mov dword [ebp - 4], 0x152
mov eax, dword [ebp - 0x2e88]
cwde
push 0xdc
lea edi, [eax + 0x19]
lea eax, [ebp - 0x28b8]
mov dword [ebp - 0x2e98], edi
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
mov ecx, dword [ebp - 0x2eb8]
push eax
mov eax, dword [ebp - 0x2e88]
cwde
push esi
add eax, 0xf0
push eax
push edi
call fcn.0045d060
lea ecx, [ebp - 0x28b8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU173
lea ecx, [ebp - 0x28d0]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e88]
mov ecx, 0x5fd3c4
push 0
cwde
push 0xc8
push 0xc8
push 0xdc
lea edi, [eax + 0x1a]
mov dword [ebp - 4], 0x153
lea eax, [ebp - 0x28d0]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e88]
push esi
mov esi, dword [ebp - 0x2eb8]
mov ecx, esi
cwde
add eax, 0xf1
push eax
push edi
call fcn.0045d060
lea ecx, [ebp - 0x28d0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU174
lea ecx, [ebp - 0x28e8]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
cwde
add eax, 0x41
mov dword [ebp - 4], 0x154
push 0
mov dword [ebp - 0x2ea0], eax
lea eax, [ebp - 0x28e8]
push 0
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2ea0]
mov ecx, esi
push dword [ebp - 0x2e98]
call fcn.0045d450
lea ecx, [ebp - 0x28e8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU174
lea ecx, [ebp - 0x2900]
call fcn.0040f9f0
push 0
push 0
lea eax, [ebp - 0x2900]
mov dword [ebp - 4], 0x155
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2ea0]
mov ecx, esi
push edi
call fcn.0045d450
lea ecx, [ebp - 0x2900]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, dword [ebp - 0x2ec4]
mov eax, dword [eax + 0x80c]
cmp eax, 3
je 0x511e3c
cmp eax, 4
je 0x511e3c
push str.DRAW_DIALOGBOX_PVPT_MENU176
lea ecx, [ebp - 0x2918]
call fcn.0040f9f0
push 0
push 0
lea eax, [ebp - 0x2918]
mov dword [ebp - 4], pe_nt_image_headers32
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
mov edi, dword [ebp - 0x2e88]
mov ecx, esi
push eax
push dword [ebp - 0x2ea0]
movsx eax, di
add eax, 0xaa
push eax
call fcn.0045d450
lea ecx, [ebp - 0x2918]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU176
lea ecx, [ebp - 0x2930]
call fcn.0040f9f0
push 0
push 0
lea eax, [ebp - 0x2930]
mov dword [ebp - 4], 0x159
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2ea0]
movsx eax, di
mov ecx, esi
add eax, 0xab
push eax
call fcn.0045d450
lea ecx, [ebp - 0x2930]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, dword [ebp - 0x2e8c]
movsx edx, word [eax + 0xb0]
movsx ecx, word [eax + 0xb2]
mov eax, dword [ebp - 0x2ec4]
mov dword [ebp - 0x2eb4], edx
mov dword [ebp - 0x2ea8], ecx
movzx eax, word [eax + 0x836]
test ax, ax
je 0x511d15
cwde
add edx, eax
add ecx, eax
mov dword [ebp - 0x2eb4], edx
mov dword [ebp - 0x2ea8], ecx
test ecx, ecx
jle 0x511f02
mov esi, dword [ebp - 0x2ec4]
xor ecx, ecx
mov dword [ebp - 0x2e7c], ecx
xor edx, edx
mov dword [ebp - 0x2e78], ecx
lea eax, [edx*4]
mov eax, dword [esi + eax + 8]
test eax, eax
je 0x511d79
mov ecx, dword [ebp - 0x2e78]
mov ax, word [eax + 0x198]
mov ecx, dword [ecx + esi + 8]
cmp ax, word [ecx + 0x198]
jl 0x511d73
mov ecx, edx
lea eax, [edx*4]
mov dword [ebp - 0x2e7c], ecx
mov dword [ebp - 0x2e78], eax
jmp 0x511d79
mov ecx, dword [ebp - 0x2e7c]
inc edx
cmp edx, 0x200
jl 0x511d33
mov esi, dword [ebp - 0x2eb8]
xor eax, eax
mov edi, dword [ebp - 0x2ec4]
xor edx, edx
mov dword [ebp - 0x2e84], eax
mov dword [ebp - 0x2e78], eax
nop
lea eax, [edx*4]
mov eax, dword [eax + edi + 8]
test eax, eax
je 0x511de0
cmp edx, ecx
je 0x511de0
mov ecx, dword [ebp - 0x2e78]
mov ax, word [eax + 0x198]
mov ecx, dword [ecx + edi + 8]
cmp ax, word [ecx + 0x198]
jl 0x511de0
lea eax, [edx*4]
mov dword [ebp - 0x2e84], edx
mov dword [ebp - 0x2e78], eax
mov ecx, dword [ebp - 0x2e7c]
inc edx
cmp edx, 0x200
jl 0x511da0
mov eax, dword [ebp - 0x2e84]
mov eax, dword [edi + eax*4 + 8]
movsx edx, word [eax + 0x198]
mov eax, ecx
mov ecx, dword [ebp - 0x2ea8]
mov eax, dword [edi + eax*4 + 8]
mov edi, dword [ebp - 0x2e88]
movsx eax, word [eax + 0x198]
sub eax, edx
cmp eax, ecx
jge 0x511f02
add ecx, edx
cmp ecx, dword [ebp - 0x2eb4]
jle 0x511f02
mov dword [ebp - 0x2eb4], ecx
jmp 0x511f02
push str.DRAW_DIALOGBOX_PVPT_MENU175
lea ecx, [ebp - 0x2948]
call fcn.0040f9f0
push 0
push 0
lea eax, [ebp - 0x2948]
mov dword [ebp - 4], 0x156
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
mov edi, dword [ebp - 0x2e88]
mov ecx, esi
push eax
push dword [ebp - 0x2ea0]
movsx eax, di
add eax, 0x7d
push eax
call fcn.0045d450
lea ecx, [ebp - 0x2948]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU175
lea ecx, [ebp - 0x2960]
call fcn.0040f9f0
push 0
push 0
lea eax, [ebp - 0x2960]
mov dword [ebp - 4], 0x157
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2ea0]
movsx eax, di
mov ecx, esi
add eax, 0x7e
push eax
call fcn.0045d450
lea ecx, [ebp - 0x2960]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, dword [ebp - 0x2e98]
mov dword [ebp - 0x2eb4], eax
xor ecx, ecx
mov dword [ebp - 0x2e7c], ecx
cmp dword [esi + 0x14552c], ecx
jle case.default.0x5101e6
movsx eax, di
add eax, 0x19
mov dword [ebp - 0x2e78], eax
movsx eax, di
mov edi, dword [ebp - 0x2ec4]
mov dword [ebp - 0x2ea8], eax
mov eax, dword [ebp - 0x2e74]
cwde
add eax, 0x50
mov dword [ebp - 0x2ea0], eax
movsx eax, word [esi + 0x14558a]
add eax, ecx
mov dword [ebp - 0x2e84], eax
cmp eax, 0x200
jge case.default.0x5101e6
cmp dword [edi + eax*4 + 8], 0
je 0x51208d
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [edi + 0x80c]
add esp, 0xc
cmp eax, 3
je 0x511fbb
cmp eax, 4
je 0x511fbb
mov eax, dword [ebp - 0x2e84]
push dword [ebp - 0x2eb4]
mov eax, dword [edi + eax*4 + 8]
movsx eax, word [eax + 0x198]
push eax
lea eax, [ebp - 0x110]
push 0x5c8b2c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp 0x51200a
mov eax, dword [ebp - 0x2e84]
mov eax, dword [edi + eax*4 + 8]
movzx ecx, word [eax + 0x19a]
movsx eax, word [eax + 0x198]
push eax
cmp cx, 0xffff
je 0x511ff5
movsx eax, cx
push eax
lea eax, [ebp - 0x110]
push str._d___d_
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp 0x51200a
lea eax, [ebp - 0x110]
push str._____d_
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp - 0x2e84]
push 0
mov eax, dword [edi + eax*4 + 8]
mov ecx, dword [eax + 4]
add ecx, 8
cmp byte [eax + 0x1ad], 0
je 0x512047
push 0xff00
push ecx
push dword [ebp - 0x2ea0]
mov ecx, esi
push dword [ebp - 0x2e78]
call fcn.0045d450
push 0
push 0xff00
jmp 0x512067
push 0xff
push ecx
push dword [ebp - 0x2ea0]
mov ecx, esi
push dword [ebp - 0x2e78]
call fcn.0045d450
push 0
push 0xff
lea eax, [ebp - 0x110]
mov ecx, esi
push eax
mov eax, dword [ebp - 0x2ea8]
push dword [ebp - 0x2ea0]
add eax, 0xb4
push eax
call fcn.0045d450
mov ecx, dword [ebp - 0x2e7c]
add dword [ebp - 0x2ea0], 0xf
inc ecx
mov dword [ebp - 0x2e7c], ecx
cmp ecx, dword [esi + 0x14552c]
jl 0x511f41
jmp case.default.0x5101e6
push str.DRAW_DIALOGBOX_PVPT_MENU226
lea ecx, [ebp - 0x2978]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
push 0
cwde
push 0xc8
push 0xc8
push 0xdc
lea esi, [eax + 0x2d]
mov dword [ebp - 4], 0x15a
lea eax, [ebp - 0x2978]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
mov ecx, dword [ebp - 0x2e88]
push eax
movsx eax, cx
add eax, 0xf0
push esi
push eax
movsx eax, cx
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d060
lea ecx, [ebp - 0x2978]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU226
lea ecx, [ebp - 0x2990]
call fcn.0040f9f0
push 0
push 0xc8
push 0xc8
push 0xdc
lea eax, [ebp - 0x2990]
mov dword [ebp - 4], 0x15b
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push esi
mov esi, dword [ebp - 0x2e88]
mov ecx, edi
movsx eax, si
add eax, 0xf1
push eax
movsx eax, si
add eax, 0x1a
push eax
call fcn.0045d060
lea ecx, [ebp - 0x2990]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov ecx, dword [ebp - 0x2e8c]
push 0
mov dword [ebp - 0x2eb8], 0xffffffff
call fcn.00577410
test eax, eax
jne 0x51229a
push str.DRAW_DIALOGBOX_PVPT_MENU130
lea ecx, [ebp - 0x29a8]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2ec0]
push 0
push 0
movsx ecx, ax
lea eax, [ebp - 0x29a8]
push 0
movsx esi, si
push 0
add esi, ecx
mov dword [ebp - 4], 0x15c
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e74]
mov ecx, edi
cwde
add eax, 0x96
push eax
mov eax, dword [ebp - 0x2e88]
push esi
cwde
push eax
call fcn.0045d060
lea ecx, [ebp - 0x29a8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU65
lea ecx, [ebp - 0x29c0]
call fcn.0040f9f0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x29c0]
mov dword [ebp - 4], 0x15d
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e74]
mov ecx, edi
cwde
add eax, 0xa5
push eax
push esi
mov esi, dword [ebp - 0x2e88]
movsx eax, si
push eax
call fcn.0045d060
lea ecx, [ebp - 0x29c0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
jmp 0x512f0d
mov edx, dword [edi + 0x145534]
mov dword [ebp - 0x2e7c], 0
test edx, edx
jle 0x512f07
movsx eax, si
mov dword [ebp - 0x2e98], eax
mov eax, dword [ebp - 0x2e74]
cwde
mov dword [ebp - 0x2e78], eax
xor eax, eax
nop word [eax + eax]
movsx ecx, word [edi + 0x14558a]
imul ecx, edx
add ecx, dword [ebp - 0x2e7c]
mov dword [ebp - 0x2e84], ecx
cmp ecx, 0x14
jge 0x512423
mov esi, dword [ebp - 0x2e8c]
mov ecx, dword [esi + ecx*4 + 0x984]
test ecx, ecx
je 0x51240f
call fcn.00407160
cmp ax, 3
jne 0x512409
movzx eax, byte [edi + 0x13c67a]
push eax
movzx eax, word [edi + 0x13c67c]
push eax
mov eax, dword [ebp - 0x2e84]
mov ecx, dword [esi + eax*4 + 0x984]
call fcn.005778b0
test al, al
mov eax, dword [ebp - 0x2e94]
je 0x51240f
cdq
mov ecx, 2
idiv ecx
mov esi, edx
mov edx, eax
mov eax, dword [ebp - 0x2e7c]
cmp dword [edi + 0x13c680], eax
mov eax, dword [ebp - 0x2e8c]
setne cl
mov dword [ebp - 0x2e90], edx
movzx ecx, cl
push ecx
mov ecx, dword [ebp - 0x2e84]
mov ecx, dword [eax + ecx*4 + 0x984]
imul eax, edx, 0x55
push dword [ecx + 0x48]
mov ecx, dword [ebp - 0x2e74]
add ecx, 0x5f
add eax, ecx
mov ecx, dword [ebp - 0x2e88]
push eax
imul eax, esi, 0x64
add ecx, 0x4b
add eax, ecx
mov ecx, edi
push eax
call fcn.0052f730
mov eax, dword [ebp + 8]
imul ecx, esi, 0x64
mov esi, dword [ebp - 0x2e98]
movsx edx, ax
lea eax, [esi + 0x2d]
add eax, ecx
cmp edx, eax
jl 0x5123fa
lea eax, [esi + 0x69]
add eax, ecx
cmp edx, eax
jge 0x5123fa
imul ecx, dword [ebp - 0x2e90], 0x55
mov esi, dword [ebp - 0x2e78]
mov eax, dword [ebp + 0xc]
movsx edx, ax
lea eax, [esi + 0x41]
add eax, ecx
cmp edx, eax
jl 0x5123fa
lea eax, [ecx + 0x7d]
mov ecx, dword [ebp - 0x2eb8]
add eax, esi
cmp edx, eax
cmovle ecx, dword [ebp - 0x2e84]
mov dword [ebp - 0x2eb8], ecx
mov eax, dword [ebp - 0x2e94]
inc eax
mov dword [ebp - 0x2e94], eax
jmp 0x51240f
mov eax, dword [ebp - 0x2e94]
inc dword [ebp - 0x2e7c]
mov edx, dword [edi + 0x145534]
cmp eax, edx
jl 0x5122d0
mov eax, dword [ebp - 0x2eb8]
cmp eax, 0xffffffff
je 0x512f07
mov esi, dword [ebp - 0x2e8c]
mov ecx, dword [esi + eax*4 + 0x984]
mov al, byte [edi + 0x1895fb]
cmp byte [ecx + 0x70], 0
je 0x512596
test al, al
je 0x51259e
mov dword [ebp - 0x2eac], 0
call fcn.00577880
test al, al
je 0x512ab2
push str.DRAW_DIALOGBOX_PVPT_MENU136
lea ecx, [ebp - 0x29d8]
call fcn.0040f9f0
lea eax, [ebp - 0x29d8]
mov dword [ebp - 4], 0x15e
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [edi + 0x18a074]
push 0x80
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x29d8]
call fcn.00411640
mov eax, dword [ebp - 0x2eb8]
mov dword [ebp - 0x2eac], 1
mov eax, dword [esi + eax*4 + 0x984]
movzx ecx, word [eax + 0x56]
movzx eax, word [eax + 0x58]
cmp cx, 0xffff
je 0x5126e3
push str.DRAW_DIALOGBOX_PVPT_MENU137
cmp ax, 0xffff
je 0x512652
cmp cx, ax
jne 0x5125aa
lea ecx, [ebp - 0x2a08]
call fcn.0040f9f0
push str.DRAW_DIALOGBOX_PVPT_MENU139
lea ecx, [ebp - 0x29f0]
mov dword [ebp - 4], 0x15f
call fcn.0040f9f0
lea eax, [ebp - 0x2a08]
mov byte [ebp - 4], 0x60
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2eb8]
mov ecx, 0x5fd3c4
mov eax, dword [esi + eax*4 + 0x984]
movsx eax, word [eax + 0x56]
push eax
lea eax, [ebp - 0x29f0]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [edi + 0x18a200]
push eax
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
call eax
add esp, 0x10
lea ecx, [ebp - 0x29f0]
call fcn.00411640
lea ecx, [ebp - 0x2a08]
jmp 0x51277e
test al, al
je 0x512457
push 0
push dword [ecx + 0x48]
mov ecx, edi
jmp 0x512efc
lea ecx, [ebp - 0x2a38]
call fcn.0040f9f0
push str.DRAW_DIALOGBOX_PVPT_MENU140
lea ecx, [ebp - 0x2a20]
mov dword [ebp - 4], 0x161
call fcn.0040f9f0
mov eax, dword [ebp - 0x2eb8]
mov ecx, 0x5fd3c4
mov byte [ebp - 4], 0x62
mov esi, dword [esi + eax*4 + 0x984]
lea eax, [ebp - 0x2a38]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
movsx eax, word [esi + 0x58]
mov ecx, 0x5fd3c4
push eax
movsx eax, word [esi + 0x56]
push eax
lea eax, [ebp - 0x2a20]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [edi + 0x18a200]
push eax
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
call eax
add esp, 0x14
lea ecx, [ebp - 0x2a20]
call fcn.00411640
lea ecx, [ebp - 0x2a38]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov esi, dword [ebp - 0x2e8c]
jmp 0x51278a
lea ecx, [ebp - 0x2a68]
call fcn.0040f9f0
push str.DRAW_DIALOGBOX_PVPT_MENU141
lea ecx, [ebp - 0x2a50]
mov dword [ebp - 4], 0x163
call fcn.0040f9f0
lea eax, [ebp - 0x2a68]
mov byte [ebp - 4], 0x64
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2eb8]
mov ecx, 0x5fd3c4
mov eax, dword [esi + eax*4 + 0x984]
movsx eax, word [eax + 0x56]
push eax
lea eax, [ebp - 0x2a50]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [edi + 0x18a200]
push eax
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
call eax
add esp, 0x10
lea ecx, [ebp - 0x2a50]
call fcn.00411640
lea ecx, [ebp - 0x2a68]
jmp 0x51277e
cmp ax, 0xffff
je 0x512794
push str.DRAW_DIALOGBOX_PVPT_MENU137
lea ecx, [ebp - 0x2a98]
call fcn.0040f9f0
push str.DRAW_DIALOGBOX_PVPT_MENU142
lea ecx, [ebp - 0x2a80]
mov dword [ebp - 4], 0x165
call fcn.0040f9f0
lea eax, [ebp - 0x2a98]
mov byte [ebp - 4], 0x66
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2eb8]
mov ecx, 0x5fd3c4
mov eax, dword [esi + eax*4 + 0x984]
movsx eax, word [eax + 0x58]
push eax
lea eax, [ebp - 0x2a80]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [edi + 0x18a200]
push eax
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
call eax
add esp, 0x10
lea ecx, [ebp - 0x2a80]
call fcn.00411640
lea ecx, [ebp - 0x2a98]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov dword [ebp - 0x2eac], 2
mov eax, dword [ebp - 0x2eb8]
mov eax, dword [esi + eax*4 + 0x984]
movzx ecx, word [eax + 0x5a]
movzx eax, word [eax + 0x5c]
cmp cx, 0xffff
je 0x5129b3
push str.DRAW_DIALOGBOX_PVPT_MENU138
cmp ax, 0xffff
je 0x512918
cmp cx, ax
jne 0x512866
lea ecx, [ebp - 0x2ac8]
call fcn.0040f9f0
push str.DRAW_DIALOGBOX_PVPT_MENU139
lea ecx, [ebp - 0x2ab0]
mov dword [ebp - 4], 0x167
call fcn.0040f9f0
lea eax, [ebp - 0x2ac8]
mov byte [ebp - 4], 0x68
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2eb8]
mov ecx, 0x5fd3c4
mov eax, dword [esi + eax*4 + 0x984]
movsx eax, word [eax + 0x5a]
push eax
lea eax, [ebp - 0x2ab0]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
imul eax, dword [ebp - 0x2eac], 0x18c
add eax, 0x18a074
add eax, edi
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea ecx, [ebp - 0x2ab0]
call fcn.00411640
lea ecx, [ebp - 0x2ac8]
jmp 0x512a58
lea ecx, [ebp - 0x2af8]
call fcn.0040f9f0
push str.DRAW_DIALOGBOX_PVPT_MENU140
lea ecx, [ebp - 0x2ae0]
mov dword [ebp - 4], 0x169
call fcn.0040f9f0
mov eax, dword [ebp - 0x2eb8]
mov ecx, 0x5fd3c4
mov byte [ebp - 4], 0x6a
mov esi, dword [esi + eax*4 + 0x984]
lea eax, [ebp - 0x2af8]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
movsx eax, word [esi + 0x5c]
mov ecx, 0x5fd3c4
push eax
movsx eax, word [esi + 0x5a]
push eax
lea eax, [ebp - 0x2ae0]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
imul eax, dword [ebp - 0x2eac], 0x18c
add eax, 0x18a074
add eax, edi
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea ecx, [ebp - 0x2ae0]
call fcn.00411640
lea ecx, [ebp - 0x2af8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov esi, dword [ebp - 0x2e8c]
jmp 0x512a64
lea ecx, [ebp - 0x2b28]
call fcn.0040f9f0
push str.DRAW_DIALOGBOX_PVPT_MENU141
lea ecx, [ebp - 0x2b10]
mov dword [ebp - 4], 0x16b
call fcn.0040f9f0
lea eax, [ebp - 0x2b28]
mov byte [ebp - 4], 0x6c
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2eb8]
mov ecx, 0x5fd3c4
mov eax, dword [esi + eax*4 + 0x984]
movsx eax, word [eax + 0x5a]
push eax
lea eax, [ebp - 0x2b10]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
imul eax, dword [ebp - 0x2eac], 0x18c
add eax, 0x18a074
add eax, edi
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea ecx, [ebp - 0x2b10]
call fcn.00411640
lea ecx, [ebp - 0x2b28]
jmp 0x512a58
cmp ax, 0xffff
je 0x512a6a
push str.DRAW_DIALOGBOX_PVPT_MENU138
lea ecx, [ebp - 0x2b58]
call fcn.0040f9f0
push str.DRAW_DIALOGBOX_PVPT_MENU142
lea ecx, [ebp - 0x2b40]
mov dword [ebp - 4], 0x16d
call fcn.0040f9f0
lea eax, [ebp - 0x2b58]
mov byte [ebp - 4], 0x6e
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2eb8]
mov ecx, 0x5fd3c4
mov eax, dword [esi + eax*4 + 0x984]
movsx eax, word [eax + 0x5c]
push eax
lea eax, [ebp - 0x2b40]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
imul eax, dword [ebp - 0x2eac], 0x18c
add eax, 0x18a074
add eax, edi
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea ecx, [ebp - 0x2b40]
call fcn.00411640
lea ecx, [ebp - 0x2b58]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
inc dword [ebp - 0x2eac]
mov eax, dword [ebp - 0x2eb8]
mov ecx, dword [esi + eax*4 + 0x984]
cmp dword [ecx + 0x60], 0
je 0x512ab8
call fcn.00407180
cmp ax, 1
jne 0x512ab2
imul eax, dword [ebp - 0x2eac], 0x18c
push 0x5c4a2a
push 0x80
add eax, 0x18a074
add eax, edi
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
add esp, 0xc
inc dword [ebp - 0x2eac]
mov eax, dword [ebp - 0x2eb8]
mov ecx, dword [esi + eax*4 + 0x984]
cmp dword [ecx + 0x60], 0
je 0x512ed8
call fcn.00407180
cmp ax, 1
mov eax, dword [ebp - 0x2eb8]
jne 0x512ed8
mov ecx, dword [esi + eax*4 + 0x984]
call fcn.00407170
cwde
sub eax, 1
je 0x512b42
sub eax, 1
jne 0x512b98
push str.DRAW_DIALOGBOX_PVPT_MENU138
lea ecx, [ebp - 0x2b70]
call fcn.0040f9f0
lea eax, [ebp - 0x2b70]
mov dword [ebp - 4], 0x170
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push 0x80
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
lea ecx, [ebp - 0x2b70]
jmp 0x512b89
push str.DRAW_DIALOGBOX_PVPT_MENU137
lea ecx, [ebp - 0x2b88]
call fcn.0040f9f0
lea eax, [ebp - 0x2b88]
mov dword [ebp - 4], 0x16f
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push 0x80
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
lea ecx, [ebp - 0x2b88]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, dword [ebp - 0x2eb8]
mov eax, dword [esi + eax*4 + 0x984]
cmp dword [eax + 0x64], 0
je 0x512c2a
push str.DRAW_DIALOGBOX_PVPT_MENU144
lea ecx, [ebp - 0x2ba0]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2eb8]
mov dword [ebp - 4], 0x171
mov ecx, dword [esi + eax*4 + 0x984]
imul eax, dword [ebp - 0x2eac], 0x18c
add eax, 0x18a074
add eax, edi
mov dword [ebp - 0x2e9c], eax
lea eax, [ebp - 0x110]
push eax
push dword [ecx + 0x64]
lea eax, [ebp - 0x2ba0]
push dword [ecx + 0x60]
mov ecx, 0x5fd3c4
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e9c]
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea ecx, [ebp - 0x2ba0]
jmp 0x512c9d
push str.DRAW_DIALOGBOX_PVPT_MENU143
lea ecx, [ebp - 0x2bb8]
call fcn.0040f9f0
imul eax, dword [ebp - 0x2eac], 0x18c
mov ecx, 0x5fd3c4
mov dword [ebp - 4], 0x172
add eax, 0x18a074
add eax, edi
mov dword [ebp - 0x2e9c], eax
lea eax, [ebp - 0x110]
push eax
mov eax, dword [ebp - 0x2eb8]
mov eax, dword [esi + eax*4 + 0x984]
push dword [eax + 0x60]
lea eax, [ebp - 0x2bb8]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e9c]
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea ecx, [ebp - 0x2bb8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, dword [ebp - 0x2eb8]
mov ecx, dword [esi + eax*4 + 0x984]
cmp dword [ecx + 0x68], 0xffffffff
jne 0x512cc6
cmp dword [ecx + 0x6c], 0xffffffff
je 0x512ed8
push 0x5c5848
push 0x80
push dword [ebp - 0x2e9c]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat_s
mov eax, dword [ebp - 0x2eb8]
add esp, 0xc
mov eax, dword [esi + eax*4 + 0x984]
cmp dword [eax + 0x68], 0xffffffff
je 0x512dcb
push str.DRAW_DIALOGBOX_PVPT_MENU145
lea ecx, [ebp - 0x2bd0]
call fcn.0040f9f0
lea eax, [ebp - 0x2bd0]
mov dword [ebp - 4], 0x173
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push 0x80
push dword [ebp - 0x2e9c]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat_s
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2bd0]
call fcn.00411640
push 0x5c4a20
push 0x80
push dword [ebp - 0x2e9c]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat_s
mov eax, dword [ebp - 0x2eb8]
add esp, 0xc
mov eax, dword [esi + eax*4 + 0x984]
mov eax, dword [eax + 0x68]
cmp eax, 0xffffffff
je 0x512d99
push eax
mov ecx, edi
call fcn.004159b0
lea eax, [edi + 0x18d57f]
push eax
push 0x80
push dword [ebp - 0x2e9c]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat_s
add esp, 0xc
mov eax, dword [ebp - 0x2eb8]
mov eax, dword [esi + eax*4 + 0x984]
cmp dword [eax + 0x6c], 0xffffffff
je 0x512db3
push 0x5d9824
jmp 0x512db8
push 0x5c5844
push 0x80
push dword [ebp - 0x2e9c]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat_s
add esp, 0xc
mov eax, dword [ebp - 0x2eb8]
mov eax, dword [esi + eax*4 + 0x984]
cmp dword [eax + 0x6c], 0xffffffff
je 0x512eae
push str.DRAW_DIALOGBOX_PVPT_MENU146
lea ecx, [ebp - 0x2be8]
call fcn.0040f9f0
imul eax, dword [ebp - 0x2eac], 0x18c
mov ecx, 0x5fd3c4
mov dword [ebp - 4], 0x174
mov dword [ebp - 0x2e84], eax
lea eax, [ebp - 0x2be8]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e84]
add eax, 0x18a074
add eax, edi
push 0x80
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat_s
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2be8]
call fcn.00411640
mov eax, dword [ebp - 0x2e84]
push 0x5c4a20
add eax, 0x18a074
add eax, edi
push 0x80
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat_s
mov eax, dword [ebp - 0x2eb8]
add esp, 0xc
mov eax, dword [esi + eax*4 + 0x984]
mov eax, dword [eax + 0x6c]
cmp eax, 0xffffffff
je 0x512eae
push eax
mov ecx, edi
call fcn.004159b0
lea eax, [edi + 0x18d57f]
push eax
mov eax, dword [ebp - 0x2e84]
add eax, 0x18a074
add eax, edi
push 0x80
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat_s
add esp, 0xc
imul eax, dword [ebp - 0x2eac], 0x18c
push 0x5c5844
push 0x80
add eax, 0x18a074
add eax, edi
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat_s
mov eax, dword [ebp - 0x2eb8]
add esp, 0xc
cmp dword [ebp - 0x2eac], 0
mov ecx, edi
je 0x512ef0
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.0047f3e0
jmp 0x512f07
mov eax, dword [esi + eax*4 + 0x984]
push 0
push dword [eax + 0x48]
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.0047daf0
mov esi, dword [ebp - 0x2e88]
cmp byte [edi + 0x13c678], 0
jne 0x512f7a
cmp dword [edi + 0x13c680], 0xffffffff
je 0x512f7a
mov eax, dword [ebp + 8]
movsx edx, si
add edx, 0x82
movsx ecx, ax
cmp ecx, edx
jl 0x50f60f
movsx eax, si
add eax, 0xe6
cmp ecx, eax
jg 0x50f60f
mov ecx, dword [ebp - 0x2e74]
mov eax, dword [ebp + 0xc]
movsx esi, cx
cwde
add esi, 0x12c
mov dword [ebp - 0x2e98], eax
cmp eax, esi
jl 0x50f60f
movsx eax, cx
add eax, 0x140
cmp dword [ebp - 0x2e98], eax
jmp 0x50f5f4
mov eax, dword [ebp - 0x2e74]
mov ecx, edi
push 0xf
push 0xf
push 0xf
cwde
add eax, 0x12c
push str.Claim_Reward
push eax
movsx eax, si
add eax, 0x82
push eax
call fcn.0045dd00
jmp case.default.0x5101e6
push str.DRAW_DIALOGBOX_PVPT_MENU5
lea ecx, [ebp - 0x2c00]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
cwde
push 0
push 0xc8
push 0xc8
lea esi, [eax + 0x2d]
mov dword [ebp - 4], 0x175
mov eax, dword [ebp - 0x2e88]
cwde
push 0xdc
lea edi, [eax + 0x19]
lea eax, [ebp - 0x2c00]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
mov ecx, dword [ebp - 0x2eb8]
push eax
mov eax, dword [ebp - 0x2e88]
cwde
push esi
add eax, 0xf0
push eax
push edi
call fcn.0045d060
lea ecx, [ebp - 0x2c00]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU5
lea ecx, [ebp - 0x2c18]
call fcn.0040f9f0
push 0
push 0xc8
push 0xc8
push 0xdc
lea eax, [ebp - 0x2c18]
mov dword [ebp - 4], 0x176
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
mov ecx, dword [ebp - 0x2eb8]
push eax
push esi
mov esi, dword [ebp - 0x2e88]
movsx eax, si
add eax, 0xf1
push eax
movsx eax, si
add eax, 0x1a
push eax
call fcn.0045d060
lea ecx, [ebp - 0x2c18]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU155
lea ecx, [ebp - 0x2c30]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
cwde
add eax, 0x41
mov dword [ebp - 4], 0x177
push 0
mov dword [ebp - 0x2e84], eax
lea eax, [ebp - 0x2c30]
push 0x320004
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e84]
push edi
mov edi, dword [ebp - 0x2eb8]
mov ecx, edi
call fcn.0045d450
lea ecx, [ebp - 0x2c30]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0x192319
push str.____________________
push dword [ebp - 0x2e84]
movsx eax, si
mov ecx, edi
add eax, 0x5f
push eax
mov dword [ebp - 0x2e98], eax
call fcn.0045d450
cmp byte [edi + 0x189668], 0
je 0x51314f
mov ecx, edi
call fcn.004973c0
cmp eax, 0x3d
jne 0x51314f
cmp word [edi + 0x14568c], 0x65
jne 0x513170
push 0
push 0xffffff
lea eax, [edi + 0x13c604]
mov ecx, edi
push eax
push dword [ebp - 0x2e84]
push dword [ebp - 0x2e98]
call fcn.0045d450
cmp byte [edi + 0x14568f], 0
jne 0x5131b0
mov edx, dword [ebp - 0x2e8c]
lea ecx, [edi + 0x13c604]
add edx, 8
mov dword [ebp - 0x2e78], 0x24
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x5131a9
add ecx, 4
add edx, 4
sub dword [ebp - 0x2e78], 4
jae 0x513192
jmp 0x5131b0
mov byte [edi + 0x14568f], 0
mov eax, dword [ebp - 0x2e8c]
movsx eax, word [eax + 0xae]
sub eax, 1
je 0x51325f
sub eax, 1
je 0x51321b
sub eax, 1
jne 0x5132b0
push str.DRAW_DIALOGBOX_PVPT_MENU8
lea ecx, [ebp - 0x2c48]
call fcn.0040f9f0
lea eax, [ebp - 0x2c48]
mov dword [ebp - 4], 0x17a
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004994b0
lea ecx, [ebp - 0x2c48]
jmp 0x5132a1
push str.DRAW_DIALOGBOX_PVPT_MENU7
lea ecx, [ebp - 0x2c60]
call fcn.0040f9f0
lea eax, [ebp - 0x2c60]
mov dword [ebp - 4], 0x179
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004994b0
lea ecx, [ebp - 0x2c60]
jmp 0x5132a1
push str.DRAW_DIALOGBOX_PVPT_MENU6
lea ecx, [ebp - 0x2c78]
call fcn.0040f9f0
lea eax, [ebp - 0x2c78]
mov dword [ebp - 4], 0x178
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004994b0
lea ecx, [ebp - 0x2c78]
add esp, 8
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
cmp byte [ebp - 0x2e7d], 0
je 0x513392
mov eax, dword [ebp + 8]
movsx ecx, ax
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x513392
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x513392
mov eax, dword [ebp - 0x2e74]
movsx edx, ax
mov eax, dword [ebp + 0xc]
cwde
mov dword [ebp - 0x2e78], edx
lea ecx, [edx + 0x50]
mov dword [ebp - 0x2e98], eax
cmp eax, ecx
jl 0x513392
lea eax, [edx + 0x5e]
cmp dword [ebp - 0x2e98], eax
jg 0x513392
push str.DRAW_DIALOGBOX_PVPT_MENU153
lea ecx, [ebp - 0x2c90]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x2c90]
mov dword [ebp - 4], 0x17b
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e78]
mov ecx, edi
add eax, 0x50
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x2c90]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0xffffff
lea eax, [ebp - 0x110]
push eax
mov eax, dword [ebp - 0x2e78]
add eax, 0x50
push eax
jmp 0x51340d
push str.DRAW_DIALOGBOX_PVPT_MENU153
lea ecx, [ebp - 0x2ca8]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
cwde
push 0
push 0x320004
mov dword [ebp - 4], 0x17c
lea esi, [eax + 0x50]
lea eax, [ebp - 0x2ca8]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e88]
mov ecx, edi
cwde
push esi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x2ca8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0x320004
lea eax, [ebp - 0x110]
push eax
push esi
mov esi, dword [ebp - 0x2e88]
movsx eax, si
mov ecx, edi
add eax, 0x8c
push eax
call fcn.0045d450
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2e8c]
add esp, 0xc
movsx eax, word [eax + 0xa0]
sub eax, 1
je 0x5134e2
sub eax, 1
je 0x51349e
sub eax, 1
jne 0x513533
push str.DRAW_DIALOGBOX_PVPT_MENU126
lea ecx, [ebp - 0x2cc0]
call fcn.0040f9f0
lea eax, [ebp - 0x2cc0]
mov dword [ebp - 4], 0x17f
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004994b0
lea ecx, [ebp - 0x2cc0]
jmp 0x513524
push str.DRAW_DIALOGBOX_PVPT_MENU125
lea ecx, [ebp - 0x2cd8]
call fcn.0040f9f0
lea eax, [ebp - 0x2cd8]
mov dword [ebp - 4], 0x17e
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004994b0
lea ecx, [ebp - 0x2cd8]
jmp 0x513524
push str.DRAW_DIALOGBOX_PVPT_MENU124
lea ecx, [ebp - 0x2cf0]
call fcn.0040f9f0
lea eax, [ebp - 0x2cf0]
mov dword [ebp - 4], 0x17d
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004994b0
lea ecx, [ebp - 0x2cf0]
add esp, 8
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
cmp byte [ebp - 0x2e7d], 0
je 0x513625
mov eax, dword [ebp + 8]
movsx ecx, ax
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x513625
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x513625
mov eax, dword [ebp - 0x2e74]
movsx edx, ax
mov eax, dword [ebp + 0xc]
cwde
mov dword [ebp - 0x2e78], edx
lea ecx, [edx + 0x5f]
mov dword [ebp - 0x2e98], eax
cmp eax, ecx
jl 0x513625
lea eax, [edx + 0x6d]
cmp dword [ebp - 0x2e98], eax
jg 0x513625
push str.DRAW_DIALOGBOX_PVPT_MENU154
lea ecx, [ebp - 0x2d08]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x2d08]
mov dword [ebp - 4], 0x180
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e78]
mov ecx, edi
add eax, 0x5f
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x2d08]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0xffffff
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
mov eax, dword [ebp - 0x2e78]
add eax, 0x5f
push eax
movsx eax, si
add eax, 0x8c
push eax
call fcn.0045d450
jmp case.default.0x5101e6
push str.DRAW_DIALOGBOX_PVPT_MENU154
lea ecx, [ebp - 0x2d20]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
cwde
push 0
push 0x320004
mov dword [ebp - 4], 0x181
lea esi, [eax + 0x5f]
lea eax, [ebp - 0x2d20]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e88]
mov ecx, edi
cwde
push esi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x2d20]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0x320004
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
mov eax, dword [ebp - 0x2e88]
cwde
push esi
add eax, 0x8c
push eax
call fcn.0045d450
jmp case.default.0x5101e6
push str.DRAW_DIALOGBOX_PVPT_MENU178
lea ecx, [ebp - 0x2d38]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, dword [ebp - 0x2e88]
cwde
push 0
push 0xc8
push 0xc8
lea esi, [eax + 0x2d]
mov dword [ebp - 4], 0x182
movsx eax, cx
add eax, 0xf0
mov dword [ebp - 0x2e78], eax
movsx eax, cx
mov ecx, 0x5fd3c4
add eax, 0x19
mov dword [ebp - 0x2e84], eax
lea eax, [ebp - 0x2d38]
push 0xdc
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push esi
push dword [ebp - 0x2e78]
mov ecx, edi
push dword [ebp - 0x2e84]
call fcn.0045d060
lea ecx, [ebp - 0x2d38]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU178
lea ecx, [ebp - 0x2d50]
call fcn.0040f9f0
push 0
push 0xc8
push 0xc8
push 0xdc
lea eax, [ebp - 0x2d50]
mov dword [ebp - 4], 0x183
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push esi
mov esi, dword [ebp - 0x2e88]
mov ecx, edi
movsx eax, si
add eax, 0xf1
push eax
movsx eax, si
add eax, 0x1a
push eax
call fcn.0045d060
lea ecx, [ebp - 0x2d50]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
lea eax, [ebp - 0x128]
push eax
mov eax, dword [ebp - 0x2e8c]
add eax, 0x3c
push eax
call fcn.005666c0
add esp, 8
lea ecx, [ebp - 0x2d68]
push str.DRAW_DIALOGBOX_PVPT_MENU41
call fcn.0040f9f0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x184
push eax
lea eax, [ebp - 0x2d68]
mov ecx, 0x5fd3c4
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2d68]
call fcn.00411640
cmp byte [ebp - 0x2e7d], 0
je 0x513888
mov eax, dword [ebp + 8]
movsx ecx, ax
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x513888
cmp ecx, dword [ebp - 0x2e78]
jge 0x513888
mov ecx, dword [ebp - 0x2e74]
movsx eax, cx
add eax, 0x41
mov dword [ebp - 0x2e78], eax
mov eax, dword [ebp + 0xc]
movsx edx, ax
cmp edx, dword [ebp - 0x2e78]
jl 0x513888
movsx eax, cx
add eax, 0x4f
cmp edx, eax
jg 0x513888
push 0
push 0xffffff
lea eax, [ebp - 0x110]
push eax
push dword [ebp - 0x2e78]
jmp 0x5138a1
push 0
push 0x320004
lea eax, [ebp - 0x110]
push eax
mov eax, dword [ebp - 0x2e74]
cwde
add eax, 0x41
push eax
push dword [ebp - 0x2e84]
mov ecx, edi
call fcn.0045d450
movsx eax, word [edi + 0x14568c]
sub eax, 0x66
je 0x513a4c
sub eax, 1
je 0x51396d
sub eax, 1
je 0x51396d
push str.DRAW_DIALOGBOX_PVPT_MENU42
lea ecx, [ebp - 0x2d80]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
cwde
push 0
push 0x320004
mov dword [ebp - 4], 0x188
lea esi, [eax + 0x50]
lea eax, [ebp - 0x2d80]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e88]
mov ecx, edi
cwde
push esi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x2d80]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2e8c]
push dword [eax + 0x5c]
lea eax, [ebp - 0x110]
push 0x5c813c
push eax
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
call eax
add esp, 0x18
jmp 0x513bfc
push str.DRAW_DIALOGBOX_PVPT_MENU42
lea ecx, [ebp - 0x2d98]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
cwde
add eax, 0x50
mov dword [ebp - 4], 0x187
push 0
mov dword [ebp - 0x2e84], eax
lea eax, [ebp - 0x2d98]
push 0x320004
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e84]
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x2d98]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
cmp byte [edi + 0x189668], 0
je 0x5139f9
mov ecx, edi
call fcn.004973c0
cmp eax, 0x3d
jne 0x5139f9
cmp word [edi + 0x14568c], 0x67
jne 0x513a21
push 0
push 0
push 0xffffffffffffffff
push 0
push 0xffffff
lea eax, [edi + 0x18d63e]
mov ecx, edi
push eax
push dword [ebp - 0x2e84]
movsx eax, si
add eax, 0x50
push eax
call fcn.0045d4a0
push 0
push 0x192319
push str._______1_or_1__750_
push dword [ebp - 0x2e84]
movsx eax, si
mov ecx, edi
add eax, 0x50
push eax
mov dword [ebp - 0x2e9c], eax
call fcn.0045d450
jmp 0x513c29
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
cmp byte [ebp - 0x2e7d], 0
je 0x513b77
mov eax, dword [ebp + 8]
movsx ecx, ax
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x513b77
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x513b77
mov eax, dword [ebp - 0x2e74]
movsx edx, ax
mov eax, dword [ebp + 0xc]
cwde
mov dword [ebp - 0x2e78], edx
lea ecx, [edx + 0x50]
mov dword [ebp - 0x2e98], eax
cmp eax, ecx
jl 0x513b77
lea eax, [edx + 0x5e]
cmp dword [ebp - 0x2e98], eax
jg 0x513b77
push str.DRAW_DIALOGBOX_PVPT_MENU42
lea ecx, [ebp - 0x2db0]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x2db0]
mov dword [ebp - 4], 0x185
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e78]
mov ecx, edi
add eax, 0x50
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x2db0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, dword [ebp - 0x2e8c]
push dword [eax + 0x5c]
lea eax, [ebp - 0x110]
push 0x5c813c
push eax
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
call eax
add esp, 0xc
movsx eax, si
lea ecx, [ebp - 0x110]
add eax, 0x50
mov dword [ebp - 0x2e9c], eax
push 0
push 0xffffff
push ecx
mov ecx, dword [ebp - 0x2e78]
add ecx, 0x50
push ecx
push eax
mov ecx, edi
call fcn.0045d450
jmp 0x513c29
push str.DRAW_DIALOGBOX_PVPT_MENU42
lea ecx, [ebp - 0x2dc8]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
cwde
push 0
push 0x320004
mov dword [ebp - 4], 0x186
lea esi, [eax + 0x50]
lea eax, [ebp - 0x2dc8]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e88]
mov ecx, edi
cwde
push esi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x2dc8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, dword [ebp - 0x2e8c]
push dword [eax + 0x5c]
lea eax, [ebp - 0x110]
push 0x5c813c
push eax
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
call eax
add esp, 0xc
mov eax, dword [ebp - 0x2e88]
lea ecx, [ebp - 0x110]
push 0
push 0x320004
push ecx
cwde
mov ecx, edi
add eax, 0x50
push esi
push eax
mov dword [ebp - 0x2e9c], eax
call fcn.0045d450
mov esi, dword [ebp - 0x2e88]
movsx eax, word [edi + 0x14568c]
sub eax, 0x66
je 0x513dbe
sub eax, 3
je 0x513ce7
sub eax, 1
je 0x513ce7
push str.DRAW_DIALOGBOX_PVPT_MENU43
lea ecx, [ebp - 0x2de0]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
cwde
push 0
push 0x320004
mov dword [ebp - 4], 0x18c
lea esi, [eax + 0x5f]
lea eax, [ebp - 0x2de0]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e88]
mov ecx, edi
cwde
push esi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x2de0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2e8c]
push dword [eax + 0x60]
lea eax, [ebp - 0x110]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
jmp 0x513f65
push str.DRAW_DIALOGBOX_PVPT_MENU43
lea ecx, [ebp - 0xaa0]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
cwde
add eax, 0x5f
mov dword [ebp - 4], 0x18b
push 0
mov dword [ebp - 0x2e84], eax
lea eax, [ebp - 0xaa0]
push 0x320004
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e84]
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0xaa0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
cmp byte [edi + 0x189668], 0
je 0x513d73
mov ecx, edi
call fcn.004973c0
cmp eax, 0x3d
jne 0x513d73
cmp word [edi + 0x144cd0], 0x69
jne 0x513d9a
push 0
push 0
push 2
push 0
push 0xffffff
lea eax, [edi + 0x18d63e]
mov ecx, edi
push eax
push dword [ebp - 0x2e84]
push dword [ebp - 0x2e9c]
call fcn.0045d4a0
push 0
push 0x192319
push str._______1_or_1__750_
push dword [ebp - 0x2e84]
mov ecx, edi
push dword [ebp - 0x2e9c]
call fcn.0045d450
jmp 0x513f87
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
cmp byte [ebp - 0x2e7d], 0
je 0x513ee1
mov eax, dword [ebp + 8]
movsx ecx, ax
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x513ee1
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x513ee1
mov eax, dword [ebp - 0x2e74]
movsx edx, ax
mov eax, dword [ebp + 0xc]
cwde
mov dword [ebp - 0x2e78], edx
lea ecx, [edx + 0x5f]
mov dword [ebp - 0x2e98], eax
cmp eax, ecx
jl 0x513ee1
lea eax, [edx + 0x6d]
cmp dword [ebp - 0x2e98], eax
jg 0x513ee1
push str.DRAW_DIALOGBOX_PVPT_MENU43
lea ecx, [ebp - 0x2e10]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x2e10]
mov dword [ebp - 4], 0x189
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e78]
mov ecx, edi
add eax, 0x5f
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x2e10]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, dword [ebp - 0x2e8c]
push dword [eax + 0x60]
lea eax, [ebp - 0x110]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x110]
mov ecx, edi
push 0
push 0xffffff
push eax
mov eax, dword [ebp - 0x2e78]
add eax, 0x5f
push eax
push dword [ebp - 0x2e9c]
call fcn.0045d450
jmp 0x513fb8
push str.DRAW_DIALOGBOX_PVPT_MENU43
lea ecx, [ebp - 0x2e28]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
cwde
push 0
push 0x320004
mov dword [ebp - 4], 0x18a
lea esi, [eax + 0x5f]
lea eax, [ebp - 0x2e28]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e88]
mov ecx, edi
cwde
push esi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x2e28]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, dword [ebp - 0x2e8c]
push dword [eax + 0x60]
lea eax, [ebp - 0x110]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push 0
push 0x320004
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
push esi
push dword [ebp - 0x2e9c]
call fcn.0045d450
mov esi, dword [ebp - 0x2e88]
cmp byte [ebp - 0x2e7d], 0
je 0x51405c
mov eax, dword [ebp + 8]
movsx ecx, ax
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x51405c
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x51405c
mov eax, dword [ebp - 0x2e74]
movsx ecx, ax
lea eax, [ecx + 0x8c]
mov dword [ebp - 0x2e98], eax
mov eax, dword [ebp + 0xc]
movsx edx, ax
lea eax, [ecx + 0x8c]
cmp edx, eax
jl 0x51405c
lea eax, [ecx + 0x9a]
cmp edx, eax
jg 0x51405c
push str.DRAW_DIALOGBOX_PVPT_MENU44
lea ecx, [ebp - 0x2e40]
call fcn.0040f9f0
push 0
push 0xff
push 0xff
push 0xff
lea eax, [ebp - 0x2e40]
mov dword [ebp - 4], 0x18d
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2ec0]
push dword [ebp - 0x2e98]
movsx ecx, ax
movsx eax, si
add ecx, eax
movsx eax, si
push ecx
push eax
mov ecx, edi
call fcn.0045d060
lea ecx, [ebp - 0x2e40]
call fcn.00411640
jmp case.default.0x5101e6
push str.DRAW_DIALOGBOX_PVPT_MENU44
lea ecx, [ebp - 0x2e58]
call fcn.0040f9f0
push 0
push 0x32
push 0
push 4
lea eax, [ebp - 0x2e58]
mov dword [ebp - 4], 0x18e
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e74]
cwde
add eax, 0x8c
push eax
mov eax, dword [ebp - 0x2ec0]
movsx ecx, ax
movsx eax, si
add ecx, eax
movsx eax, si
push ecx
push eax
mov ecx, edi
call fcn.0045d060
lea ecx, [ebp - 0x2e58]
call fcn.00411640
jmp case.default.0x5101e6
push str.DRAW_DIALOGBOX_PVPT_MENU182
lea ecx, [ebp - 0x2e70]
call fcn.0040f9f0
lea eax, [ebp - 0x2e70]
mov dword [ebp - 4], 0x18f
push eax
lea eax, [ebp - 0x2f50]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x514107
mov ecx, dword [ecx]
mov eax, dword [ebp - 0x2e74]
push 0
push 0xc8
push 0xc8
cwde
add eax, 0x2d
push 0xdc
push ecx
push eax
mov dword [ebp - 0x2e98], eax
mov ecx, edi
movsx eax, si
add eax, 0xf0
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d060
lea ecx, [ebp - 0x2e70]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU182
lea ecx, [ebp - 0x518]
call fcn.0040f9f0
lea eax, [ebp - 0x518]
mov dword [ebp - 4], 0x190
push eax
lea eax, [ebp - 0x2f58]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x51418f
mov eax, dword [eax]
push 0
push 0xc8
push 0xc8
push 0xdc
push eax
push dword [ebp - 0x2e98]
movsx eax, si
mov ecx, edi
add eax, 0xf1
push eax
movsx eax, si
add eax, 0x1a
push eax
call fcn.0045d060
lea ecx, [ebp - 0x518]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU183
lea ecx, [ebp - 0x530]
call fcn.0040f9f0
lea eax, [ebp - 0x530]
mov dword [ebp - 4], 0x191
push eax
lea eax, [ebp - 0x2f60]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x51420c
mov ecx, dword [ecx]
mov eax, dword [ebp - 0x2e74]
push 0
cwde
push 0
add eax, 0x41
push ecx
push eax
mov dword [ebp - 0x2e84], eax
mov ecx, edi
movsx eax, si
add eax, 0x32
push eax
call fcn.0045d450
lea ecx, [ebp - 0x530]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU183
lea ecx, [ebp - 0x548]
call fcn.0040f9f0
lea eax, [ebp - 0x548]
mov dword [ebp - 4], 0x192
push eax
lea eax, [ebp - 0x2f68]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x51427e
mov eax, dword [eax]
push 0
push 0
push eax
push dword [ebp - 0x2e84]
movsx eax, si
mov ecx, edi
add eax, 0x33
push eax
call fcn.0045d450
lea ecx, [ebp - 0x548]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU184
lea ecx, [ebp - 0x560]
call fcn.0040f9f0
lea eax, [ebp - 0x560]
mov dword [ebp - 4], 0x193
push eax
lea eax, [ebp - 0x2f70]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x5142e5
mov eax, dword [eax]
push 0
push 0
push eax
push dword [ebp - 0x2e84]
movsx eax, si
mov ecx, edi
add eax, 0x78
push eax
call fcn.0045d450
lea ecx, [ebp - 0x560]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU184
lea ecx, [ebp - 0x578]
call fcn.0040f9f0
lea eax, [ebp - 0x578]
mov dword [ebp - 4], 0x194
push eax
lea eax, [ebp - 0x2f78]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x51434c
mov eax, dword [eax]
push 0
push 0
push eax
push dword [ebp - 0x2e84]
movsx eax, si
mov ecx, edi
add eax, 0x79
push eax
call fcn.0045d450
lea ecx, [ebp - 0x578]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU185
lea ecx, [ebp - 0x590]
call fcn.0040f9f0
lea eax, [ebp - 0x590]
mov dword [ebp - 4], 0x195
push eax
lea eax, [ebp - 0x2f80]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x5143b3
mov eax, dword [eax]
push 0
push 0
push eax
mov eax, dword [ebp - 0x2e74]
mov ecx, edi
cwde
add eax, 0x41
push eax
movsx eax, si
add eax, 0xbe
push eax
call fcn.0045d450
lea ecx, [ebp - 0x590]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU185
lea ecx, [ebp - 0x5a8]
call fcn.0040f9f0
lea eax, [ebp - 0x5a8]
mov dword [ebp - 4], 0x196
push eax
lea eax, [ebp - 0x2f88]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x514421
mov eax, dword [eax]
push 0
push 0
push eax
mov eax, dword [ebp - 0x2e74]
mov ecx, edi
cwde
add eax, 0x41
push eax
movsx eax, si
add eax, 0xbf
push eax
call fcn.0045d450
lea ecx, [ebp - 0x5a8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU45
lea ecx, [ebp - 0x5c0]
call fcn.0040f9f0
lea eax, [ebp - 0x5c0]
mov dword [ebp - 4], 0x197
push eax
lea eax, [ebp - 0x2f90]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x51448f
mov ecx, dword [ecx]
mov eax, dword [ebp - 0x2e74]
push 0
cwde
push 0x320004
add eax, 0x50
push ecx
push eax
mov dword [ebp - 0x2e84], eax
mov ecx, edi
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x5c0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
movsx eax, word [edi + 0x14568c]
add eax, 0xffffff94
cmp eax, 0x19
ja case.0x5144de.110
movzx eax, byte [eax + 0x517e8c]
jmp dword [eax*4 + 0x517e84]
cmp byte [edi + 0x189668], 0
je 0x514503
mov ecx, edi
call fcn.004973c0
cmp eax, 0x3d
jne 0x514503
test byte [edi + 0x14568c], 1
jne 0x51452b
push 0
push 0
push 2
push 0
push 0xffffff
lea eax, [edi + 0x18d63e]
mov ecx, edi
push eax
push dword [ebp - 0x2e84]
movsx eax, si
add eax, 0x46
push eax
call fcn.0045d4a0
push 0
push 0x192319
push str._______2011__2030_
push dword [ebp - 0x2e84]
movsx eax, si
add eax, 0x44
jmp 0x514797
mov eax, dword [ebp - 0x2e8c]
movzx eax, word [eax + 0xd6]
push eax
lea eax, [ebp - 0x110]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
cmp word [edi + 0x14568c], 0x6b
jne 0x5145e3
mov eax, dword [ebp + 8]
movsx edx, si
add edx, 0x46
movsx ecx, ax
mov dword [ebp - 0x2e98], edx
mov dword [ebp - 0x2e78], ecx
cmp ecx, edx
jle 0x5145e3
movsx eax, si
add eax, 0x78
cmp ecx, eax
jge 0x5145e3
mov eax, dword [ebp + 0xc]
movsx edx, ax
mov dword [ebp - 0x2e7c], edx
cmp edx, dword [ebp - 0x2e84]
jl 0x5145e3
mov ecx, dword [ebp - 0x2e74]
movsx eax, cx
add eax, 0x5e
cmp edx, eax
jg 0x5145e3
push 0
push 0xffffff
lea eax, [ebp - 0x110]
push eax
movsx eax, cx
mov ecx, edi
add eax, 0x50
push eax
push dword [ebp - 0x2e98]
call fcn.0045d450
jmp 0x51461e
push 0
push 0x320004
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
mov eax, dword [ebp - 0x2e74]
cwde
add eax, 0x50
push eax
movsx eax, si
add eax, 0x46
push eax
call fcn.0045d450
mov eax, dword [ebp + 8]
cwde
mov dword [ebp - 0x2e78], eax
mov eax, dword [ebp + 0xc]
cwde
mov dword [ebp - 0x2e7c], eax
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2e8c]
movzx eax, word [eax + 0xe6]
push eax
lea eax, [ebp - 0x110]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
cmp word [edi + 0x14568c], 0x6b
jne 0x5146bf
mov ecx, dword [ebp - 0x2e78]
movsx eax, si
add eax, 0x82
mov dword [ebp - 0x2e98], eax
cmp ecx, eax
jle 0x5146bf
movsx eax, si
add eax, 0xb4
cmp ecx, eax
jge 0x5146bf
mov ecx, dword [ebp - 0x2e74]
mov edx, dword [ebp - 0x2e7c]
movsx eax, cx
add eax, 0x50
cmp edx, eax
jl 0x5146bf
movsx eax, cx
add eax, 0x5e
cmp edx, eax
jg 0x5146bf
push 0
push 0xffffff
lea eax, [ebp - 0x110]
push eax
movsx eax, cx
add eax, 0x50
push eax
push dword [ebp - 0x2e98]
jmp 0x5146e1
push 0
push 0x320004
lea eax, [ebp - 0x110]
push eax
mov eax, dword [ebp - 0x2e74]
cwde
add eax, 0x50
push eax
movsx eax, si
add eax, 0x82
push eax
mov ecx, edi
call fcn.0045d450
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2e8c]
movzx eax, word [eax + 0x68]
push eax
lea eax, [ebp - 0x110]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
cmp word [edi + 0x14568c], 0x6b
jne 0x514776
mov eax, dword [ebp + 8]
movsx ecx, ax
movsx eax, si
add eax, 0xbe
cmp ecx, eax
jle 0x514776
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x514776
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x2e74]
movsx edx, ax
movsx eax, cx
add eax, 0x50
cmp edx, eax
jl 0x514776
movsx eax, cx
add eax, 0x5e
cmp edx, eax
jg 0x514776
push 0
lea eax, [ebp - 0x110]
push 0xffffff
push eax
movsx eax, cx
jmp 0x51478b
push 0
lea eax, [ebp - 0x110]
push 0x320004
push eax
mov eax, dword [ebp - 0x2e74]
cwde
add eax, 0x50
push eax
movsx eax, si
add eax, 0xbe
push eax
mov ecx, edi
call fcn.0045d450
push str.DRAW_DIALOGBOX_PVPT_MENU46
lea ecx, [ebp - 0x5d8]
call fcn.0040f9f0
lea eax, [ebp - 0x5d8]
mov dword [ebp - 4], 0x198
push eax
lea eax, [ebp - 0x2f98]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x5147db
mov ecx, dword [ecx]
mov eax, dword [ebp - 0x2e74]
push 0
cwde
push 0x320004
mov dword [ebp - 0x2e7c], eax
add eax, 0x5f
push ecx
push eax
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x5d8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
movsx eax, word [edi + 0x14568c]
add eax, 0xffffff92
cmp eax, 0x19
ja case.0x51482e.112
movzx eax, byte [eax + 0x517eb0]
jmp dword [eax*4 + 0x517ea8]
cmp byte [edi + 0x189668], 0
je 0x514853
mov ecx, edi
call fcn.004973c0
cmp eax, 0x3d
jne 0x514853
test byte [edi + 0x14568c], 1
jne 0x51487f
push 0
push 0
push 2
push 0
push 0xffffff
lea eax, [edi + 0x18d63e]
mov ecx, edi
push eax
mov eax, dword [ebp - 0x2e7c]
add eax, 0x5f
push eax
movsx eax, si
add eax, 0x46
push eax
call fcn.0045d4a0
mov eax, dword [ebp - 0x2e7c]
push 0
push 0x192319
add eax, 0x5f
push str._____1__12_
push eax
movsx eax, si
add eax, 0x44
jmp 0x514b03
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2e8c]
movzx eax, word [eax + 0xd8]
push eax
lea eax, [ebp - 0x110]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
cmp word [edi + 0x14568c], 0x6b
jne 0x51494f
mov eax, dword [ebp + 8]
movsx edx, si
movsx ecx, ax
add edx, 0x46
mov dword [ebp - 0x2e78], ecx
cmp ecx, edx
jle 0x51494f
movsx eax, si
add eax, 0x78
cmp ecx, eax
jge 0x51494f
mov eax, dword [ebp + 0xc]
mov esi, dword [ebp - 0x2e88]
movsx ecx, ax
mov eax, dword [ebp - 0x2e7c]
add eax, 0x5f
mov dword [ebp - 0x2e84], ecx
cmp ecx, eax
jl 0x51494f
mov eax, dword [ebp - 0x2e7c]
add eax, 0x6d
cmp ecx, eax
jg 0x51494f
push 0
push 0xffffff
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
mov eax, dword [ebp - 0x2e74]
cwde
add eax, 0x5f
push eax
push edx
call fcn.0045d450
jmp 0x51498a
push 0
push 0x320004
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
mov eax, dword [ebp - 0x2e74]
cwde
add eax, 0x5f
push eax
movsx eax, si
add eax, 0x46
push eax
call fcn.0045d450
mov eax, dword [ebp + 8]
cwde
mov dword [ebp - 0x2e78], eax
mov eax, dword [ebp + 0xc]
cwde
mov dword [ebp - 0x2e84], eax
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2e8c]
movzx eax, word [eax + 0xe8]
push eax
lea eax, [ebp - 0x110]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
cmp word [edi + 0x14568c], 0x6b
jne 0x514a2b
mov ecx, dword [ebp - 0x2e78]
movsx eax, si
add eax, 0x82
mov dword [ebp - 0x2e98], eax
cmp ecx, eax
jle 0x514a2b
movsx eax, si
add eax, 0xb4
cmp ecx, eax
jge 0x514a2b
mov ecx, dword [ebp - 0x2e74]
mov edx, dword [ebp - 0x2e84]
movsx eax, cx
add eax, 0x5f
cmp edx, eax
jl 0x514a2b
movsx eax, cx
add eax, 0x6d
cmp edx, eax
jg 0x514a2b
push 0
push 0xffffff
lea eax, [ebp - 0x110]
push eax
movsx eax, cx
add eax, 0x5f
push eax
push dword [ebp - 0x2e98]
jmp 0x514a4d
push 0
push 0x320004
lea eax, [ebp - 0x110]
push eax
mov eax, dword [ebp - 0x2e74]
cwde
add eax, 0x5f
push eax
movsx eax, si
add eax, 0x82
push eax
mov ecx, edi
call fcn.0045d450
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2e8c]
movzx eax, word [eax + 0x6a]
push eax
lea eax, [ebp - 0x110]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
cmp word [edi + 0x14568c], 0x6b
jne 0x514ae2
mov eax, dword [ebp + 8]
movsx ecx, ax
movsx eax, si
add eax, 0xbe
cmp ecx, eax
jle 0x514ae2
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x514ae2
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x2e74]
movsx edx, ax
movsx eax, cx
add eax, 0x5f
cmp edx, eax
jl 0x514ae2
movsx eax, cx
add eax, 0x6d
cmp edx, eax
jg 0x514ae2
push 0
lea eax, [ebp - 0x110]
push 0xffffff
push eax
movsx eax, cx
jmp 0x514af7
push 0
lea eax, [ebp - 0x110]
push 0x320004
push eax
mov eax, dword [ebp - 0x2e74]
cwde
add eax, 0x5f
push eax
movsx eax, si
add eax, 0xbe
push eax
mov ecx, edi
call fcn.0045d450
push str.DRAW_DIALOGBOX_PVPT_MENU47
lea ecx, [ebp - 0x5f0]
call fcn.0040f9f0
lea eax, [ebp - 0x5f0]
mov dword [ebp - 4], 0x199
push eax
lea eax, [ebp - 0x2fd8]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x514b47
mov ecx, dword [ecx]
mov eax, dword [ebp - 0x2e74]
push 0
cwde
push 0x320004
mov dword [ebp - 0x2e7c], eax
add eax, 0x6e
push ecx
push eax
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x5f0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
movsx eax, word [edi + 0x14568c]
add eax, 0xffffff90
cmp eax, 0x19
ja case.0x514b9a.114
movzx eax, byte [eax + 0x517ed4]
jmp dword [eax*4 + 0x517ecc]
cmp byte [edi + 0x189668], 0
je 0x514bbf
mov ecx, edi
call fcn.004973c0
cmp eax, 0x3d
jne 0x514bbf
test byte [edi + 0x14568c], 1
jne 0x514beb
push 0
push 0
push 2
push 0
push 0xffffff
lea eax, [edi + 0x18d63e]
mov ecx, edi
push eax
mov eax, dword [ebp - 0x2e7c]
add eax, 0x6e
push eax
movsx eax, si
add eax, 0x46
push eax
call fcn.0045d4a0
mov eax, dword [ebp - 0x2e7c]
push 0
push 0x192319
add eax, 0x6e
push str._____1__31_
push eax
movsx eax, si
add eax, 0x44
jmp 0x514e6f
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2e8c]
movzx eax, word [eax + 0xdc]
push eax
lea eax, [ebp - 0x110]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
cmp word [edi + 0x14568c], 0x6b
jne 0x514cbb
mov eax, dword [ebp + 8]
movsx edx, si
movsx ecx, ax
add edx, 0x46
mov dword [ebp - 0x2e78], ecx
cmp ecx, edx
jle 0x514cbb
movsx eax, si
add eax, 0x78
cmp ecx, eax
jge 0x514cbb
mov eax, dword [ebp + 0xc]
mov esi, dword [ebp - 0x2e88]
movsx ecx, ax
mov eax, dword [ebp - 0x2e7c]
add eax, 0x6e
mov dword [ebp - 0x2e84], ecx
cmp ecx, eax
jl 0x514cbb
mov eax, dword [ebp - 0x2e7c]
add eax, 0x7c
cmp ecx, eax
jg 0x514cbb
push 0
push 0xffffff
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
mov eax, dword [ebp - 0x2e74]
cwde
add eax, 0x6e
push eax
push edx
call fcn.0045d450
jmp 0x514cf6
push 0
push 0x320004
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
mov eax, dword [ebp - 0x2e74]
cwde
add eax, 0x6e
push eax
movsx eax, si
add eax, 0x46
push eax
call fcn.0045d450
mov eax, dword [ebp + 8]
cwde
mov dword [ebp - 0x2e78], eax
mov eax, dword [ebp + 0xc]
cwde
mov dword [ebp - 0x2e84], eax
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2e8c]
movzx eax, word [eax + 0xec]
push eax
lea eax, [ebp - 0x110]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
cmp word [edi + 0x14568c], 0x6b
jne 0x514d97
mov ecx, dword [ebp - 0x2e78]
movsx eax, si
add eax, 0x82
mov dword [ebp - 0x2e98], eax
cmp ecx, eax
jle 0x514d97
movsx eax, si
add eax, 0xb4
cmp ecx, eax
jge 0x514d97
mov ecx, dword [ebp - 0x2e74]
mov edx, dword [ebp - 0x2e84]
movsx eax, cx
add eax, 0x6e
cmp edx, eax
jl 0x514d97
movsx eax, cx
add eax, 0x7c
cmp edx, eax
jg 0x514d97
push 0
push 0xffffff
lea eax, [ebp - 0x110]
push eax
movsx eax, cx
add eax, 0x6e
push eax
push dword [ebp - 0x2e98]
jmp 0x514db9
push 0
push 0x320004
lea eax, [ebp - 0x110]
push eax
mov eax, dword [ebp - 0x2e74]
cwde
add eax, 0x6e
push eax
movsx eax, si
add eax, 0x82
push eax
mov ecx, edi
call fcn.0045d450
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2e8c]
movzx eax, word [eax + 0x6e]
push eax
lea eax, [ebp - 0x110]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
cmp word [edi + 0x14568c], 0x6b
jne 0x514e4e
mov eax, dword [ebp + 8]
movsx ecx, ax
movsx eax, si
add eax, 0xbe
cmp ecx, eax
jle 0x514e4e
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x514e4e
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x2e74]
movsx edx, ax
movsx eax, cx
add eax, 0x6e
cmp edx, eax
jl 0x514e4e
movsx eax, cx
add eax, 0x7c
cmp edx, eax
jg 0x514e4e
push 0
lea eax, [ebp - 0x110]
push 0xffffff
push eax
movsx eax, cx
jmp 0x514e63
push 0
lea eax, [ebp - 0x110]
push 0x320004
push eax
mov eax, dword [ebp - 0x2e74]
cwde
add eax, 0x6e
push eax
movsx eax, si
add eax, 0xbe
push eax
mov ecx, edi
call fcn.0045d450
push str.DRAW_DIALOGBOX_PVPT_MENU48
lea ecx, [ebp - 0x608]
call fcn.0040f9f0
lea eax, [ebp - 0x608]
mov dword [ebp - 4], 0x19a
push eax
lea eax, [ebp - 0x2fa8]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x514eb3
mov ecx, dword [ecx]
mov eax, dword [ebp - 0x2e74]
push 0
cwde
push 0x320004
add eax, 0x7d
push ecx
push eax
mov dword [ebp - 0x2e84], eax
mov ecx, edi
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x608]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
movsx eax, word [edi + 0x14568c]
add eax, 0xffffff8e
cmp eax, 0x19
ja case.0x514f02.116
movzx eax, byte [eax + 0x517ef8]
jmp dword [eax*4 + 0x517ef0]
cmp byte [edi + 0x189668], 0
je 0x514f27
mov ecx, edi
call fcn.004973c0
cmp eax, 0x3d
jne 0x514f27
test byte [edi + 0x14568c], 1
jne 0x514f4f
push 0
push 0
push 2
push 0
push 0xffffff
lea eax, [edi + 0x18d63e]
mov ecx, edi
push eax
push dword [ebp - 0x2e84]
movsx eax, si
add eax, 0x46
push eax
call fcn.0045d4a0
push 0
push 0x192319
push str._____0__23_
push dword [ebp - 0x2e84]
movsx eax, si
add eax, 0x44
jmp 0x5151d4
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2e8c]
movzx eax, word [eax + 0xde]
push eax
lea eax, [ebp - 0x110]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
cmp word [edi + 0x14568c], 0x6b
jne 0x51501c
mov eax, dword [ebp + 8]
movsx edx, si
add edx, 0x46
movsx ecx, ax
mov dword [ebp - 0x2e98], edx
mov dword [ebp - 0x2e78], ecx
cmp ecx, edx
jle 0x51501c
movsx eax, si
add eax, 0x78
cmp ecx, eax
jge 0x51501c
mov eax, dword [ebp + 0xc]
movsx edx, ax
mov dword [ebp - 0x2e7c], edx
cmp edx, dword [ebp - 0x2e84]
jl 0x51501c
mov ecx, dword [ebp - 0x2e74]
movsx eax, cx
add eax, 0x8b
cmp edx, eax
jg 0x51501c
push 0
push 0xffffff
lea eax, [ebp - 0x110]
push eax
movsx eax, cx
mov ecx, edi
add eax, 0x7d
push eax
push dword [ebp - 0x2e98]
call fcn.0045d450
jmp 0x515057
push 0
push 0x320004
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
mov eax, dword [ebp - 0x2e74]
cwde
add eax, 0x7d
push eax
movsx eax, si
add eax, 0x46
push eax
call fcn.0045d450
mov eax, dword [ebp + 8]
cwde
mov dword [ebp - 0x2e78], eax
mov eax, dword [ebp + 0xc]
cwde
mov dword [ebp - 0x2e7c], eax
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2e8c]
movzx eax, word [eax + 0xee]
push eax
lea eax, [ebp - 0x110]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
cmp word [edi + 0x14568c], 0x6b
jne 0x5150fa
mov ecx, dword [ebp - 0x2e78]
movsx eax, si
add eax, 0x82
mov dword [ebp - 0x2e98], eax
cmp ecx, eax
jle 0x5150fa
movsx eax, si
add eax, 0xb4
cmp ecx, eax
jge 0x5150fa
mov ecx, dword [ebp - 0x2e74]
mov edx, dword [ebp - 0x2e7c]
movsx eax, cx
add eax, 0x7d
cmp edx, eax
jl 0x5150fa
movsx eax, cx
add eax, 0x8b
cmp edx, eax
jg 0x5150fa
push 0
push 0xffffff
lea eax, [ebp - 0x110]
push eax
movsx eax, cx
add eax, 0x7d
push eax
push dword [ebp - 0x2e98]
jmp 0x51511c
push 0
push 0x320004
lea eax, [ebp - 0x110]
push eax
mov eax, dword [ebp - 0x2e74]
cwde
add eax, 0x7d
push eax
movsx eax, si
add eax, 0x82
push eax
mov ecx, edi
call fcn.0045d450
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2e8c]
movzx eax, word [eax + 0x70]
push eax
lea eax, [ebp - 0x110]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
cmp word [edi + 0x14568c], 0x6b
jne 0x5151b3
mov eax, dword [ebp + 8]
movsx ecx, ax
movsx eax, si
add eax, 0xbe
cmp ecx, eax
jle 0x5151b3
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x5151b3
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x2e74]
movsx edx, ax
movsx eax, cx
add eax, 0x7d
cmp edx, eax
jl 0x5151b3
movsx eax, cx
add eax, 0x8b
cmp edx, eax
jg 0x5151b3
push 0
lea eax, [ebp - 0x110]
push 0xffffff
push eax
movsx eax, cx
jmp 0x5151c8
push 0
lea eax, [ebp - 0x110]
push 0x320004
push eax
mov eax, dword [ebp - 0x2e74]
cwde
add eax, 0x7d
push eax
movsx eax, si
add eax, 0xbe
push eax
mov ecx, edi
call fcn.0045d450
push str.DRAW_DIALOGBOX_PVPT_MENU49
lea ecx, [ebp - 0x620]
call fcn.0040f9f0
lea eax, [ebp - 0x620]
mov dword [ebp - 4], 0x19b
push eax
lea eax, [ebp - 0x2fb0]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x515218
mov ecx, dword [ecx]
mov eax, dword [ebp - 0x2e74]
push 0
cwde
push 0x320004
mov dword [ebp - 0x2e7c], eax
add eax, 0x8c
push ecx
push eax
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x620]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
movsx eax, word [edi + 0x14568c]
add eax, 0xffffff8c
cmp eax, 0x19
ja case.0x51526d.118
movzx eax, byte [eax + 0x517f1c]
jmp dword [eax*4 + 0x517f14]
cmp byte [edi + 0x189668], 0
je 0x515292
mov ecx, edi
call fcn.004973c0
cmp eax, 0x3d
jne 0x515292
test byte [edi + 0x14568c], 1
jne 0x5152c0
push 0
push 0
push 2
push 0
push 0xffffff
lea eax, [edi + 0x18d63e]
mov ecx, edi
push eax
mov eax, dword [ebp - 0x2e7c]
add eax, 0x8c
push eax
movsx eax, si
add eax, 0x46
push eax
call fcn.0045d4a0
mov eax, dword [ebp - 0x2e7c]
push 0
push 0x192319
add eax, 0x8c
push str._____0__59_
push eax
movsx eax, si
add eax, 0x44
jmp 0x515560
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2e8c]
movzx eax, word [eax + 0xe0]
push eax
lea eax, [ebp - 0x110]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
cmp word [edi + 0x14568c], 0x6b
jne 0x51539c
mov eax, dword [ebp + 8]
movsx edx, si
movsx ecx, ax
add edx, 0x46
mov dword [ebp - 0x2e78], ecx
cmp ecx, edx
jle 0x51539c
movsx eax, si
add eax, 0x78
cmp ecx, eax
jge 0x51539c
mov eax, dword [ebp + 0xc]
mov esi, dword [ebp - 0x2e88]
movsx ecx, ax
mov eax, dword [ebp - 0x2e7c]
add eax, 0x8c
mov dword [ebp - 0x2e84], ecx
cmp ecx, eax
jl 0x51539c
mov eax, dword [ebp - 0x2e7c]
add eax, 0x9a
cmp ecx, eax
jg 0x51539c
push 0
push 0xffffff
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
mov eax, dword [ebp - 0x2e74]
cwde
add eax, 0x8c
push eax
push edx
call fcn.0045d450
jmp 0x5153d9
push 0
push 0x320004
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
mov eax, dword [ebp - 0x2e74]
cwde
add eax, 0x8c
push eax
movsx eax, si
add eax, 0x46
push eax
call fcn.0045d450
mov eax, dword [ebp + 8]
cwde
mov dword [ebp - 0x2e78], eax
mov eax, dword [ebp + 0xc]
cwde
mov dword [ebp - 0x2e84], eax
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2e8c]
movzx eax, word [eax + 0xf0]
push eax
lea eax, [ebp - 0x110]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
cmp word [edi + 0x14568c], 0x6b
jne 0x515480
mov ecx, dword [ebp - 0x2e78]
movsx eax, si
add eax, 0x82
mov dword [ebp - 0x2e98], eax
cmp ecx, eax
jle 0x515480
movsx eax, si
add eax, 0xb4
cmp ecx, eax
jge 0x515480
mov ecx, dword [ebp - 0x2e74]
mov edx, dword [ebp - 0x2e84]
movsx eax, cx
add eax, 0x8c
cmp edx, eax
jl 0x515480
movsx eax, cx
add eax, 0x9a
cmp edx, eax
jg 0x515480
push 0
push 0xffffff
lea eax, [ebp - 0x110]
push eax
movsx eax, cx
add eax, 0x8c
push eax
push dword [ebp - 0x2e98]
jmp 0x5154a4
push 0
push 0x320004
lea eax, [ebp - 0x110]
push eax
mov eax, dword [ebp - 0x2e74]
cwde
add eax, 0x8c
push eax
movsx eax, si
add eax, 0x82
push eax
mov ecx, edi
call fcn.0045d450
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2e8c]
movzx eax, word [eax + 0x72]
push eax
lea eax, [ebp - 0x110]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
cmp word [edi + 0x14568c], 0x6b
jne 0x51553d
mov eax, dword [ebp + 8]
movsx ecx, ax
movsx eax, si
add eax, 0xbe
cmp ecx, eax
jle 0x51553d
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x51553d
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x2e74]
movsx edx, ax
movsx eax, cx
add eax, 0x8c
cmp edx, eax
jl 0x51553d
movsx eax, cx
add eax, 0x9a
cmp edx, eax
jg 0x51553d
push 0
lea eax, [ebp - 0x110]
push 0xffffff
push eax
movsx eax, cx
jmp 0x515552
push 0
lea eax, [ebp - 0x110]
push 0x320004
push eax
mov eax, dword [ebp - 0x2e74]
cwde
add eax, 0x8c
push eax
movsx eax, si
add eax, 0xbe
push eax
mov ecx, edi
call fcn.0045d450
push str.DRAW_DIALOGBOX_PVPT_MENU50
lea ecx, [ebp - 0x638]
call fcn.0040f9f0
lea eax, [ebp - 0x638]
mov dword [ebp - 4], 0x19c
push eax
lea eax, [ebp - 0x2fb8]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x5155a4
mov ecx, dword [ecx]
mov eax, dword [ebp - 0x2e74]
push 0
cwde
push 0x320004
mov dword [ebp - 0x2e7c], eax
add eax, 0x9b
push ecx
push eax
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x638]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
movsx eax, word [edi + 0x14568c]
add eax, 0xffffff8a
cmp eax, 0x19
ja case.0x5155f9.120
movzx eax, byte [eax + 0x517f40]
jmp dword [eax*4 + 0x517f38]
cmp byte [edi + 0x189668], 0
je 0x51561f
mov ecx, edi
call fcn.004973c0
cmp eax, 0x3d
jne 0x51561f
cmp word [edi + 0x14568c], 0x76
jne 0x51564d
push 0
push 0
push 2
push 0
push 0xffffff
lea eax, [edi + 0x18d63e]
mov ecx, edi
push eax
mov eax, dword [ebp - 0x2e7c]
add eax, 0x9b
push eax
movsx eax, si
add eax, 0x46
push eax
call fcn.0045d4a0
mov eax, dword [ebp - 0x2e7c]
mov ecx, edi
push 0
push 0x192319
add eax, 0x9b
push str._____0__59_
push eax
movsx eax, si
add eax, 0x44
push eax
call fcn.0045d450
jmp case.default.0x5101e6
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2e8c]
movzx eax, word [eax + 0xe2]
push eax
lea eax, [ebp - 0x110]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
cmp word [edi + 0x14568c], 0x6b
jne 0x515731
mov eax, dword [ebp + 8]
movsx edx, si
movsx ecx, ax
add edx, 0x46
mov dword [ebp - 0x2e78], ecx
cmp ecx, edx
jle 0x515731
movsx eax, si
add eax, 0x78
cmp ecx, eax
jge 0x515731
mov eax, dword [ebp + 0xc]
mov esi, dword [ebp - 0x2e88]
movsx ecx, ax
mov eax, dword [ebp - 0x2e7c]
add eax, 0x9b
mov dword [ebp - 0x2e84], ecx
cmp ecx, eax
jl 0x515731
mov eax, dword [ebp - 0x2e7c]
add eax, 0xa9
cmp ecx, eax
jg 0x515731
push 0
push 0xffffff
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
mov eax, dword [ebp - 0x2e74]
cwde
add eax, 0x9b
push eax
push edx
call fcn.0045d450
jmp 0x51576e
push 0
push 0x320004
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
mov eax, dword [ebp - 0x2e74]
cwde
add eax, 0x9b
push eax
movsx eax, si
add eax, 0x46
push eax
call fcn.0045d450
mov eax, dword [ebp + 8]
cwde
mov dword [ebp - 0x2e78], eax
mov eax, dword [ebp + 0xc]
cwde
mov dword [ebp - 0x2e84], eax
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2e8c]
movzx eax, word [eax + 0xf2]
push eax
lea eax, [ebp - 0x110]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
cmp word [edi + 0x14568c], 0x6b
jne 0x515815
mov ecx, dword [ebp - 0x2e78]
movsx eax, si
add eax, 0x82
mov dword [ebp - 0x2e98], eax
cmp ecx, eax
jle 0x515815
movsx eax, si
add eax, 0xb4
cmp ecx, eax
jge 0x515815
mov ecx, dword [ebp - 0x2e74]
mov edx, dword [ebp - 0x2e84]
movsx eax, cx
add eax, 0x9b
cmp edx, eax
jl 0x515815
movsx eax, cx
add eax, 0xa9
cmp edx, eax
jg 0x515815
push 0
push 0xffffff
lea eax, [ebp - 0x110]
push eax
movsx eax, cx
add eax, 0x9b
push eax
push dword [ebp - 0x2e98]
jmp 0x515839
push 0
push 0x320004
lea eax, [ebp - 0x110]
push eax
mov eax, dword [ebp - 0x2e74]
cwde
add eax, 0x9b
push eax
movsx eax, si
add eax, 0x82
push eax
mov ecx, edi
call fcn.0045d450
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2e8c]
movzx eax, word [eax + 0x74]
push eax
lea eax, [ebp - 0x110]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
cmp word [edi + 0x14568c], 0x6b
jne 0x5158d2
mov eax, dword [ebp + 8]
movsx ecx, ax
movsx eax, si
add eax, 0xbe
cmp ecx, eax
jle 0x5158d2
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x5158d2
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x2e74]
movsx edx, ax
movsx eax, cx
add eax, 0x9b
cmp edx, eax
jl 0x5158d2
movsx eax, cx
add eax, 0xa9
cmp edx, eax
jg 0x5158d2
push 0
lea eax, [ebp - 0x110]
push 0xffffff
push eax
movsx eax, cx
jmp 0x5158e7
push 0
lea eax, [ebp - 0x110]
push 0x320004
push eax
mov eax, dword [ebp - 0x2e74]
cwde
add eax, 0x9b
mov ecx, edi
push eax
movsx eax, si
add eax, 0xbe
push eax
call fcn.0045d450
jmp case.default.0x5101e6
push str.DRAW_DIALOGBOX_PVPT_MENU66
lea ecx, [ebp - 0x650]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, dword [ebp - 0x2e88]
cwde
push 0
push 0xc8
push 0xc8
lea esi, [eax + 0x2d]
mov dword [ebp - 4], 0x19d
movsx eax, cx
add eax, 0xf0
mov dword [ebp - 0x2e7c], eax
movsx eax, cx
mov ecx, 0x5fd3c4
add eax, 0x19
mov dword [ebp - 0x2e78], eax
lea eax, [ebp - 0x650]
push 0xdc
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push esi
push dword [ebp - 0x2e7c]
mov ecx, edi
push dword [ebp - 0x2e78]
call fcn.0045d060
lea ecx, [ebp - 0x650]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU66
lea ecx, [ebp - 0x668]
call fcn.0040f9f0
push 0
push 0xc8
push 0xc8
push 0xdc
lea eax, [ebp - 0x668]
mov dword [ebp - 4], 0x19e
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push esi
mov esi, dword [ebp - 0x2e88]
mov ecx, edi
movsx eax, si
add eax, 0xf1
push eax
movsx eax, si
add eax, 0x1a
push eax
call fcn.0045d060
lea ecx, [ebp - 0x668]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
xor ecx, ecx
mov dword [ebp - 0x2e84], ecx
cmp dword [edi + 0x14552c], ecx
jle 0x515cfc
movsx eax, si
mov esi, dword [ebp - 0x2e8c]
mov dword [ebp - 0x2ea8], eax
mov eax, dword [ebp - 0x2e74]
cwde
add eax, 0x50
mov dword [ebp - 0x2eb4], eax
nop word [eax + eax]
movsx eax, word [edi + 0x14558a]
add eax, ecx
mov dword [ebp - 0x2ea0], eax
cmp eax, 0x14
jge 0x515cf6
cmp dword [esi + eax*4 + 0xf8], 0
je 0x515cdc
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov ecx, dword [ebp - 0x2ea0]
add esp, 0xc
mov ecx, dword [esi + ecx*4 + 0xf8]
call fcn.00407180
cwde
sub eax, 1
je 0x515c3c
sub eax, 1
je 0x515b7e
sub eax, 1
jne 0x515c70
mov dword [ebp - 0x118], eax
xorps xmm0, xmm0
mov byte [ebp - 0x114], al
lea eax, [ebp - 0x128]
push eax
mov eax, dword [ebp - 0x2ea0]
movups xmmword [ebp - 0x128], xmm0
mov eax, dword [esi + eax*4 + 0xf8]
add eax, 0xc
push eax
call fcn.005666c0
add esp, 8
mov dword [ebp - 0x418], 0
xorps xmm0, xmm0
mov dword [ebp - 0x414], 0
lea ecx, [ebp - 0x428]
movups xmmword [ebp - 0x428], xmm0
push 0x1e
push str.DRAW_DIALOGBOX_CURRENCY_MENU45
call fcn.0040b5c0
lea eax, [ebp - 0x428]
mov dword [ebp - 4], 0x1a0
push eax
lea eax, [ebp - 0x2fc0]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x515b3c
mov ecx, dword [ecx]
mov eax, dword [ebp - 0x2ea0]
mov eax, dword [esi + eax*4 + 0xf8]
push dword [eax + 0x30]
push dword [eax + 0x2c]
lea eax, [ebp - 0x128]
push eax
push ecx
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x428]
call fcn.00411640
jmp 0x515c70
mov eax, dword [ebp - 0x2ea0]
mov eax, dword [esi + eax*4 + 0xf8]
mov eax, dword [eax + 0x4c]
mov eax, dword [eax + 0x30]
test eax, eax
jne 0x515c25
push 0x14
xorps xmm0, xmm0
mov dword [ebp - 0x430], eax
push str.DEF_DETAULTQUESTNAME
lea ecx, [ebp - 0x440]
mov dword [ebp - 0x42c], eax
movups xmmword [ebp - 0x440], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x440]
mov dword [ebp - 4], 0x19f
push eax
lea eax, [ebp - 0x2fc8]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x515bed
mov ecx, dword [ecx]
mov eax, dword [ebp - 0x2ea0]
mov eax, dword [esi + eax*4 + 0xf8]
mov eax, dword [eax + 0x4c]
push dword [eax + 4]
lea eax, [ebp - 0x110]
push ecx
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x440]
call fcn.00411640
jmp 0x515c70
push dword [eax + 8]
lea eax, [ebp - 0x110]
push 0x5c7a40
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
jmp 0x515c6d
mov eax, dword [ebp - 0x2ea0]
mov ecx, edi
push 0
mov eax, dword [esi + eax*4 + 0xf8]
push dword [eax + 0x48]
call fcn.0052fab0
lea eax, [edi + 0x18966d]
push eax
lea eax, [ebp - 0x110]
push 0x100
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
add esp, 0xc
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x2eb4]
cwde
cmp eax, dword [ebp - 0x2e78]
jle 0x515cae
cmp eax, dword [ebp - 0x2e7c]
jge 0x515cae
mov eax, dword [ebp + 0xc]
movsx edx, ax
cmp edx, ecx
jl 0x515cae
lea eax, [ecx + 0xf]
cmp edx, eax
jge 0x515cae
push 0
push 0xff
push 0xff
push 0xff
jmp 0x515cb6
push 0
push 0x32
push 0
push 4
lea eax, [ebp - 0x110]
push eax
mov eax, dword [ebp - 0x2ec0]
push ecx
mov ecx, dword [ebp - 0x2ea8]
cwde
add eax, ecx
push eax
push ecx
mov ecx, edi
call fcn.0045d060
mov ecx, dword [ebp - 0x2e84]
add dword [ebp - 0x2eb4], 0xf
inc ecx
mov dword [ebp - 0x2e84], ecx
cmp ecx, dword [edi + 0x14552c]
jl 0x515a40
mov esi, dword [ebp - 0x2e88]
mov eax, dword [ebp + 8]
movsx ecx, si
add ecx, 0x9a
movsx edx, ax
mov dword [ebp - 0x2e84], ecx
cmp edx, ecx
jle 0x515d5c
movsx eax, si
add eax, 0xe4
cmp edx, eax
jge 0x515d5c
mov ecx, dword [ebp - 0x2e74]
mov eax, dword [ebp + 0xc]
movsx edx, cx
add edx, 0x124
movsx esi, ax
cmp esi, edx
jle 0x515d56
movsx eax, cx
mov ecx, dword [ebp - 0x2e84]
add eax, 0x138
cmp esi, eax
jge 0x515d5c
mov eax, 0x19
jmp 0x50490c
mov ecx, dword [ebp - 0x2e84]
mov eax, dword [ebp - 0x2e74]
movsx edx, ax
mov eax, 0x18
jmp 0x504906
push str.DRAW_DIALOGBOX_PVPT_MENU123
lea ecx, [ebp - 0x680]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, dword [ebp - 0x2e88]
cwde
push 0
push 0xc8
push 0xc8
lea esi, [eax + 0x2d]
mov dword [ebp - 4], 0x1a1
movsx eax, cx
add eax, 0xf0
mov dword [ebp - 0x2e7c], eax
movsx eax, cx
mov ecx, 0x5fd3c4
add eax, 0x19
mov dword [ebp - 0x2e78], eax
lea eax, [ebp - 0x680]
push 0xdc
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push esi
push dword [ebp - 0x2e7c]
mov ecx, edi
push dword [ebp - 0x2e78]
call fcn.0045d060
lea ecx, [ebp - 0x680]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU123
lea ecx, [ebp - 0x698]
call fcn.0040f9f0
push 0
push 0xc8
push 0xc8
push 0xdc
lea eax, [ebp - 0x698]
mov dword [ebp - 4], 0x1a2
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push esi
mov esi, dword [ebp - 0x2e88]
mov ecx, edi
movsx eax, si
add eax, 0xf1
push eax
movsx eax, si
add eax, 0x1a
push eax
call fcn.0045d060
lea ecx, [ebp - 0x698]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
xor ecx, ecx
mov dword [ebp - 0x2e84], ecx
cmp dword [edi + 0x14552c], ecx
jle 0x515cfc
movsx eax, si
mov esi, dword [ebp - 0x2e8c]
mov dword [ebp - 0x2ea8], eax
mov eax, dword [ebp - 0x2e74]
cwde
add eax, 0x50
mov dword [ebp - 0x2eb4], eax
nop dword [eax]
nop dword [eax + eax]
movsx eax, word [edi + 0x14558a]
add eax, ecx
mov dword [ebp - 0x2ea0], eax
cmp eax, 0x14
jge 0x515cf6
cmp dword [esi + eax*4 + 0x984], 0
je 0x516495
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov ecx, dword [ebp - 0x2ea0]
add esp, 0xc
mov ecx, dword [esi + ecx*4 + 0x984]
call fcn.00407180
cwde
sub eax, 1
je 0x5160b2
sub eax, 1
je 0x515fee
sub eax, 1
jne 0x516429
mov dword [ebp - 0x118], eax
xorps xmm0, xmm0
mov byte [ebp - 0x114], al
lea eax, [ebp - 0x128]
push eax
mov eax, dword [ebp - 0x2ea0]
movups xmmword [ebp - 0x128], xmm0
mov eax, dword [esi + eax*4 + 0x984]
add eax, 0xc
push eax
call fcn.005666c0
add esp, 8
mov dword [ebp - 0x448], 0
xorps xmm0, xmm0
mov dword [ebp - 0x444], 0
lea ecx, [ebp - 0x458]
movups xmmword [ebp - 0x458], xmm0
push 0x1e
push str.DRAW_DIALOGBOX_CURRENCY_MENU45
call fcn.0040b5c0
lea eax, [ebp - 0x458]
mov dword [ebp - 4], 0x1aa
push eax
lea eax, [ebp - 0x2fd0]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x515fac
mov ecx, dword [ecx]
mov eax, dword [ebp - 0x2ea0]
mov eax, dword [esi + eax*4 + 0x984]
push dword [eax + 0x30]
push dword [eax + 0x2c]
lea eax, [ebp - 0x128]
push eax
push ecx
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x458]
call fcn.00411640
jmp 0x516429
mov eax, dword [ebp - 0x2ea0]
mov eax, dword [esi + eax*4 + 0x984]
mov eax, dword [eax + 0x4c]
mov eax, dword [eax + 0x30]
test eax, eax
jne 0x516098
push 0x14
xorps xmm0, xmm0
mov dword [ebp - 0x460], eax
push str.DEF_DETAULTQUESTNAME
lea ecx, [ebp - 0x470]
mov dword [ebp - 0x45c], eax
movups xmmword [ebp - 0x470], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x470]
mov dword [ebp - 4], 0x1a9
push eax
lea eax, [ebp - 0x3010]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x51605d
mov ecx, dword [ecx]
mov eax, dword [ebp - 0x2ea0]
mov eax, dword [esi + eax*4 + 0x984]
mov eax, dword [eax + 0x4c]
push dword [eax + 4]
lea eax, [ebp - 0x110]
push ecx
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x470]
call fcn.00411640
jmp 0x516429
push dword [eax + 8]
lea eax, [ebp - 0x110]
push 0x5c7a40
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
jmp 0x516426
mov eax, dword [ebp - 0x2ea0]
mov ecx, dword [esi + eax*4 + 0x984]
mov eax, dword [ecx + 8]
add eax, 6
cmp eax, 5
ja case.default.0x5160ce
jmp dword [eax*4 + 0x517f5c]
push 0x1e
xorps xmm0, xmm0
mov dword [ebp - 0x478], 0
push str.DRAW_DIALOGBOX_CURRENCY_MENU13
lea ecx, [ebp - 0x488]
mov dword [ebp - 0x474], 0
movups xmmword [ebp - 0x488], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x488]
mov dword [ebp - 4], 0x1a3
push eax
lea eax, [ebp - 0x2fe0]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x516131
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x110]
push 0x100
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x488]
call fcn.00411640
jmp 0x516429
push 0x1e
xorps xmm0, xmm0
mov dword [ebp - 0x490], 0
push str.DRAW_DIALOGBOX_CURRENCY_MENU14
lea ecx, [ebp - 0x4a0]
mov dword [ebp - 0x48c], 0
movups xmmword [ebp - 0x4a0], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x4a0]
mov dword [ebp - 4], 0x1a4
push eax
lea eax, [ebp - 0x2fe8]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x5161b9
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x110]
push 0x100
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4a0]
call fcn.00411640
jmp 0x516429
push 0x1e
xorps xmm0, xmm0
mov dword [ebp - 0x4a8], 0
push str.DRAW_DIALOGBOX_CURRENCY_MENU15
lea ecx, [ebp - 0x4b8]
mov dword [ebp - 0x4a4], 0
movups xmmword [ebp - 0x4b8], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x4b8]
mov dword [ebp - 4], 0x1a5
push eax
lea eax, [ebp - 0x2ff0]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x516241
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x110]
push 0x100
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4b8]
call fcn.00411640
jmp 0x516429
push 0x1e
xorps xmm0, xmm0
mov dword [ebp - 0x4c0], 0
push str.DRAW_DIALOGBOX_CURRENCY_MENU16
lea ecx, [ebp - 0x4d0]
mov dword [ebp - 0x4bc], 0
movups xmmword [ebp - 0x4d0], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x4d0]
mov dword [ebp - 4], 0x1a6
push eax
lea eax, [ebp - 0x2ff8]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x5162c9
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x110]
push 0x100
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4d0]
call fcn.00411640
jmp 0x516429
push 0x1e
xorps xmm0, xmm0
mov dword [ebp - 0x4d8], 0
push str.DRAW_DIALOGBOX_CURRENCY_MENU17
lea ecx, [ebp - 0x4e8]
mov dword [ebp - 0x4d4], 0
movups xmmword [ebp - 0x4e8], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x4e8]
mov dword [ebp - 4], 0x1a7
push eax
lea eax, [ebp - 0x3008]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x516351
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x110]
push 0x100
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4e8]
call fcn.00411640
jmp 0x516429
push 0x1e
xorps xmm0, xmm0
mov dword [ebp - 0x4f0], 0
push str.DRAW_DIALOGBOX_CURRENCY_MENU18
lea ecx, [ebp - 0x500]
mov dword [ebp - 0x4ec], 0
movups xmmword [ebp - 0x500], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x500]
mov dword [ebp - 4], 0x1a8
push eax
lea eax, [ebp - 0x3000]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x5163d9
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x110]
push 0x100
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x500]
call fcn.00411640
jmp 0x516429
push 0
push dword [ecx + 0x48]
mov ecx, edi
call fcn.0052fab0
lea eax, [edi + 0x18966d]
push eax
lea eax, [ebp - 0x110]
push 0x100
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
add esp, 0xc
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x2eb4]
cwde
cmp eax, dword [ebp - 0x2e78]
jle 0x516467
cmp eax, dword [ebp - 0x2e7c]
jge 0x516467
mov eax, dword [ebp + 0xc]
movsx edx, ax
cmp edx, ecx
jl 0x516467
lea eax, [ecx + 0xf]
cmp edx, eax
jge 0x516467
push 0
push 0xff
push 0xff
push 0xff
jmp 0x51646f
push 0
push 0x32
push 0
push 4
lea eax, [ebp - 0x110]
push eax
mov eax, dword [ebp - 0x2ec0]
push ecx
mov ecx, dword [ebp - 0x2ea8]
cwde
add eax, ecx
push eax
push ecx
mov ecx, edi
call fcn.0045d060
mov ecx, dword [ebp - 0x2e84]
add dword [ebp - 0x2eb4], 0xf
inc ecx
mov dword [ebp - 0x2e84], ecx
cmp ecx, dword [edi + 0x14552c]
jl 0x515eb0
jmp 0x515cf6
push str.DRAW_DIALOGBOX_PVPT_MENU189
lea ecx, [ebp - 0x6b0]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
cwde
push 0
push 0xc8
push 0xc8
lea esi, [eax + 0x2d]
mov dword [ebp - 4], 0x1ab
mov eax, dword [ebp - 0x2e88]
cwde
add eax, 0xf0
mov dword [ebp - 0x2e78], eax
lea eax, [ebp - 0x6b0]
push 0xdc
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e88]
mov ecx, edi
push esi
push dword [ebp - 0x2e78]
cwde
add eax, 0x19
push eax
call fcn.0045d060
lea ecx, [ebp - 0x6b0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_PVPT_MENU189
lea ecx, [ebp - 0x6c8]
call fcn.0040f9f0
push 0
push 0xc8
push 0xc8
push 0xdc
lea eax, [ebp - 0x6c8]
mov dword [ebp - 4], 0x1ac
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push esi
mov esi, dword [ebp - 0x2e88]
mov ecx, edi
movsx eax, si
add eax, 0xf1
push eax
movsx eax, si
add eax, 0x1a
push eax
call fcn.0045d060
lea ecx, [ebp - 0x6c8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov ecx, edi
call fcn.0047cff0
mov eax, dword [ebp - 0x2eac]
cmp byte [eax + 0x50], 0
je 0x516604
push str.DRAW_DIALOGBOX_PVPT_MENU15
lea ecx, [ebp - 0x6e0]
call fcn.0040f9f0
lea eax, [ebp - 0x6e0]
mov dword [ebp - 4], 0x1ad
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004994b0
lea ecx, [ebp - 0x6e0]
jmp 0x516646
push str.DRAW_DIALOGBOX_PVPT_MENU16
lea ecx, [ebp - 0x6f8]
call fcn.0040f9f0
lea eax, [ebp - 0x6f8]
mov dword [ebp - 4], 0x1ae
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004994b0
lea ecx, [ebp - 0x6f8]
add esp, 8
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
cmp byte [ebp - 0x2e7d], 0
je 0x516727
mov eax, dword [ebp + 8]
movsx ecx, ax
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x516727
cmp ecx, dword [ebp - 0x2e78]
jge 0x516727
mov ecx, dword [ebp - 0x2e74]
mov eax, dword [ebp + 0xc]
movsx edx, cx
add edx, 0x41
cwde
mov dword [ebp - 0x2e78], edx
mov dword [ebp - 0x2e98], eax
cmp eax, edx
jl 0x516727
movsx eax, cx
add eax, 0x4f
cmp dword [ebp - 0x2e98], eax
jg 0x516727
push str.DRAW_DIALOGBOX_PVPT_MENU190
lea ecx, [ebp - 0x710]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x710]
mov dword [ebp - 4], 0x1af
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e78]
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x710]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0xffffff
lea eax, [ebp - 0x110]
push eax
push dword [ebp - 0x2e78]
jmp 0x5167a2
push str.DRAW_DIALOGBOX_PVPT_MENU190
lea ecx, [ebp - 0x728]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
cwde
push 0
push 0x320004
mov dword [ebp - 4], 0x1b0
lea esi, [eax + 0x41]
lea eax, [ebp - 0x728]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e88]
mov ecx, edi
cwde
push esi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x728]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0x320004
lea eax, [ebp - 0x110]
push eax
push esi
mov esi, dword [ebp - 0x2e88]
movsx eax, si
mov ecx, edi
add eax, 0x8c
push eax
call fcn.0045d450
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2eac]
add esp, 0xc
movzx edx, word [eax + 0x52]
cmp dx, 0xffff
je 0x5168f9
movzx eax, word [eax + 0x54]
cmp ax, 0xffff
je 0x5168a2
cmp dx, ax
jne 0x516846
push str.DRAW_DIALOGBOX_PVPT_MENU191
lea ecx, [ebp - 0x740]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2eac]
mov ecx, 0x5fd3c4
mov dword [ebp - 4], 0x1b1
movsx eax, word [eax + 0x52]
push eax
lea eax, [ebp - 0x740]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
call eax
add esp, 0xc
lea ecx, [ebp - 0x740]
jmp 0x516999
push str.DRAW_DIALOGBOX_PVPT_MENU192
lea ecx, [ebp - 0x758]
call fcn.0040f9f0
mov ecx, dword [ebp - 0x2eac]
mov dword [ebp - 4], 0x1b2
movsx eax, word [ecx + 0x54]
push eax
movsx eax, word [ecx + 0x52]
mov ecx, 0x5fd3c4
push eax
lea eax, [ebp - 0x758]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
call eax
add esp, 0x10
lea ecx, [ebp - 0x758]
jmp 0x516999
push str.DRAW_DIALOGBOX_PVPT_MENU193
lea ecx, [ebp - 0x770]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2eac]
mov ecx, 0x5fd3c4
mov dword [ebp - 4], 0x1b3
movsx eax, word [eax + 0x52]
push eax
lea eax, [ebp - 0x770]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
call eax
add esp, 0xc
lea ecx, [ebp - 0x770]
jmp 0x516999
cmp word [eax + 0x54], 0xffff
je 0x516954
push str.DRAW_DIALOGBOX_PVPT_MENU194
lea ecx, [ebp - 0x788]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2eac]
mov ecx, 0x5fd3c4
mov dword [ebp - 4], 0x1b4
movsx eax, word [eax + 0x54]
push eax
lea eax, [ebp - 0x788]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
call eax
add esp, 0xc
lea ecx, [ebp - 0x788]
jmp 0x516999
push str.DRAW_DIALOGBOX_PVPT_MENU195
lea ecx, [ebp - 0x7a0]
call fcn.0040f9f0
lea eax, [ebp - 0x7a0]
mov dword [ebp - 4], 0x1b5
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004994b0
add esp, 8
lea ecx, [ebp - 0x7a0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
cmp byte [ebp - 0x2e7d], 0
je 0x516a80
mov eax, dword [ebp + 8]
movsx ecx, ax
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x516a80
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x516a80
mov eax, dword [ebp - 0x2e74]
movsx edx, ax
mov eax, dword [ebp + 0xc]
cwde
mov dword [ebp - 0x2e78], edx
lea ecx, [edx + 0x5f]
mov dword [ebp - 0x2e98], eax
cmp eax, ecx
jl 0x516a80
lea eax, [edx + 0x6d]
cmp dword [ebp - 0x2e98], eax
jg 0x516a80
push str.DRAW_DIALOGBOX_PVPT_MENU196
lea ecx, [ebp - 0x7b8]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x7b8]
mov dword [ebp - 4], 0x1b6
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e78]
mov ecx, edi
add eax, 0x5f
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x7b8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0xffffff
lea eax, [ebp - 0x110]
push eax
mov eax, dword [ebp - 0x2e78]
add eax, 0x5f
push eax
jmp 0x516afb
push str.DRAW_DIALOGBOX_PVPT_MENU196
lea ecx, [ebp - 0x7d0]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
cwde
push 0
push 0x320004
mov dword [ebp - 4], 0x1b7
lea esi, [eax + 0x5f]
lea eax, [ebp - 0x7d0]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e88]
mov ecx, edi
cwde
push esi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x7d0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0x320004
lea eax, [ebp - 0x110]
push eax
push esi
mov esi, dword [ebp - 0x2e88]
movsx eax, si
mov ecx, edi
add eax, 0x8c
push eax
call fcn.0045d450
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2eac]
add esp, 0xc
movzx ecx, word [eax + 0x56]
cmp cx, 0xffff
je 0x516c4f
movzx eax, word [eax + 0x58]
cmp ax, 0xffff
je 0x516bf9
cmp cx, ax
jne 0x516b9e
push str.DRAW_DIALOGBOX_PVPT_MENU191
lea ecx, [ebp - 0x7e8]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2eac]
mov ecx, 0x5fd3c4
mov dword [ebp - 4], 0x1b8
movsx eax, word [eax + 0x56]
push eax
lea eax, [ebp - 0x7e8]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [ebp - 0x7e8]
jmp 0x516cee
push str.DRAW_DIALOGBOX_PVPT_MENU192
lea ecx, [ebp - 0x800]
call fcn.0040f9f0
mov ecx, dword [ebp - 0x2eac]
mov dword [ebp - 4], 0x1b9
movsx eax, word [ecx + 0x58]
push eax
movsx eax, word [ecx + 0x56]
mov ecx, 0x5fd3c4
push eax
lea eax, [ebp - 0x800]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea ecx, [ebp - 0x800]
jmp 0x516cee
push str.DRAW_DIALOGBOX_PVPT_MENU193
lea ecx, [ebp - 0x818]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2eac]
mov ecx, 0x5fd3c4
mov dword [ebp - 4], 0x1ba
movsx eax, word [eax + 0x56]
push eax
lea eax, [ebp - 0x818]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [ebp - 0x818]
jmp 0x516cee
cmp word [eax + 0x58], 0xffff
je 0x516ca9
push str.DRAW_DIALOGBOX_PVPT_MENU194
lea ecx, [ebp - 0x830]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2eac]
mov ecx, 0x5fd3c4
mov dword [ebp - 4], 0x1bb
movsx eax, word [eax + 0x58]
push eax
lea eax, [ebp - 0x830]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [ebp - 0x830]
jmp 0x516cee
push str.DRAW_DIALOGBOX_PVPT_MENU195
lea ecx, [ebp - 0x848]
call fcn.0040f9f0
lea eax, [ebp - 0x848]
mov dword [ebp - 4], 0x1bc
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004994b0
add esp, 8
lea ecx, [ebp - 0x848]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
cmp byte [ebp - 0x2e7d], 0
je 0x516e38
mov eax, dword [ebp + 8]
movsx ecx, ax
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x516e38
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x516e38
mov ecx, dword [ebp - 0x2e74]
mov eax, dword [ebp + 0xc]
movsx edx, cx
add edx, 0x6e
cwde
mov dword [ebp - 0x2e78], edx
mov dword [ebp - 0x2e98], eax
cmp eax, edx
jl 0x516e38
movsx eax, cx
add eax, 0x7c
cmp dword [ebp - 0x2e98], eax
jg 0x516e38
push str.DRAW_DIALOGBOX_PVPT_MENU197
lea ecx, [ebp - 0x860]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x860]
mov dword [ebp - 4], 0x1bd
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x2e78]
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x860]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0xffffff
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
push dword [ebp - 0x2e78]
movsx eax, si
add eax, 0x8c
push eax
call fcn.0045d450
push str.DRAW_DIALOGBOX_PVPT_MENU198
lea ecx, [ebp - 0x878]
call fcn.0040f9f0
lea eax, [ebp - 0x878]
mov dword [ebp - 4], 0x1be
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [edi + 0x18a074]
push eax
call fcn.0040eac0
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x878]
call fcn.00411640
jmp 0x516ec3
push str.DRAW_DIALOGBOX_PVPT_MENU197
lea ecx, [ebp - 0x890]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
cwde
push 0
push 0x320004
mov dword [ebp - 4], 0x1bf
lea esi, [eax + 0x6e]
lea eax, [ebp - 0x890]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e88]
mov ecx, edi
cwde
push esi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x890]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0x320004
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
push esi
mov esi, dword [ebp - 0x2e88]
movsx eax, si
add eax, 0x8c
push eax
call fcn.0045d450
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2eac]
add esp, 0xc
movzx ecx, word [eax + 0x5a]
cmp cx, 0xffff
je 0x517007
movzx eax, word [eax + 0x5c]
cmp ax, 0xffff
je 0x516fb1
cmp cx, ax
jne 0x516f56
push str.DRAW_DIALOGBOX_PVPT_MENU191
lea ecx, [ebp - 0x8a8]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2eac]
mov ecx, 0x5fd3c4
mov dword [ebp - 4], 0x1c0
movsx eax, word [eax + 0x5a]
push eax
lea eax, [ebp - 0x8a8]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [ebp - 0x8a8]
jmp 0x5170a6
push str.DRAW_DIALOGBOX_PVPT_MENU192
lea ecx, [ebp - 0x8c0]
call fcn.0040f9f0
mov ecx, dword [ebp - 0x2eac]
mov dword [ebp - 4], 0x1c1
movsx eax, word [ecx + 0x5c]
push eax
movsx eax, word [ecx + 0x5a]
mov ecx, 0x5fd3c4
push eax
lea eax, [ebp - 0x8c0]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea ecx, [ebp - 0x8c0]
jmp 0x5170a6
push str.DRAW_DIALOGBOX_PVPT_MENU193
lea ecx, [ebp - 0x8d8]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2eac]
mov ecx, 0x5fd3c4
mov dword [ebp - 4], 0x1c2
movsx eax, word [eax + 0x5a]
push eax
lea eax, [ebp - 0x8d8]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [ebp - 0x8d8]
jmp 0x5170a6
cmp word [eax + 0x5c], 0xffff
je 0x517061
push str.DRAW_DIALOGBOX_PVPT_MENU194
lea ecx, [ebp - 0x8f0]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2eac]
mov ecx, 0x5fd3c4
mov dword [ebp - 4], 0x1c3
movsx eax, word [eax + 0x5c]
push eax
lea eax, [ebp - 0x8f0]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [ebp - 0x8f0]
jmp 0x5170a6
push str.DRAW_DIALOGBOX_PVPT_MENU195
lea ecx, [ebp - 0x908]
call fcn.0040f9f0
lea eax, [ebp - 0x908]
mov dword [ebp - 4], 0x1c4
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004994b0
add esp, 8
lea ecx, [ebp - 0x908]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
cmp byte [ebp - 0x2e7d], 0
je 0x5171fe
mov eax, dword [ebp + 8]
movsx ecx, ax
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x5171fe
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x5171fe
mov eax, dword [ebp - 0x2e74]
movsx edx, ax
mov eax, dword [ebp + 0xc]
cwde
mov dword [ebp - 0x2e78], edx
lea ecx, [edx + 0x7d]
mov dword [ebp - 0x2e98], eax
cmp eax, ecx
jl 0x5171fe
lea eax, [edx + 0x8b]
cmp dword [ebp - 0x2e98], eax
jg 0x5171fe
push str.DRAW_DIALOGBOX_PVPT_MENU199
lea ecx, [ebp - 0x920]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x920]
mov dword [ebp - 4], 0x1c5
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e78]
mov ecx, edi
add eax, 0x7d
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x920]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0xffffff
lea ecx, [ebp - 0x110]
movsx eax, si
push ecx
mov ecx, dword [ebp - 0x2e78]
add eax, 0x8c
add ecx, 0x7d
mov dword [ebp - 0x2e84], eax
push ecx
push eax
mov ecx, edi
call fcn.0045d450
push str.DRAW_DIALOGBOX_PVPT_MENU200
lea ecx, [ebp - 0x938]
call fcn.0040f9f0
lea eax, [ebp - 0x938]
mov dword [ebp - 4], 0x1c6
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [edi + 0x18a074]
push eax
call fcn.0040eac0
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x938]
call fcn.00411640
jmp 0x517295
push str.DRAW_DIALOGBOX_PVPT_MENU199
lea ecx, [ebp - 0x950]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
cwde
push 0
push 0x320004
mov dword [ebp - 4], 0x1c7
lea esi, [eax + 0x7d]
lea eax, [ebp - 0x950]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e88]
mov ecx, edi
cwde
push esi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x950]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov ecx, dword [ebp - 0x2e88]
push 0
movsx eax, cx
lea ecx, [ebp - 0x110]
push 0x320004
push ecx
add eax, 0x8c
mov ecx, edi
push esi
push eax
mov dword [ebp - 0x2e84], eax
call fcn.0045d450
mov esi, dword [ebp - 0x2e88]
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2eac]
add esp, 0xc
cmp dword [eax + 0x28], 0xffffffff
je 0x51730b
push str.DRAW_DIALOGBOX_PVPT_MENU204
lea ecx, [ebp - 0x968]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2eac]
mov ecx, 0x5fd3c4
mov dword [ebp - 4], 0x1c8
push dword [eax + 0x64]
push dword [eax + 0x60]
lea eax, [ebp - 0x968]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea ecx, [ebp - 0x968]
jmp 0x51735a
push str.DRAW_DIALOGBOX_PVPT_MENU205
lea ecx, [ebp - 0x980]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2eac]
mov ecx, 0x5fd3c4
mov dword [ebp - 4], 0x1c9
push dword [eax + 0x60]
lea eax, [ebp - 0x980]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [ebp - 0x980]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov ecx, dword [edi + 0x13c690]
call fcn.00407170
cwde
sub eax, 1
je 0x517414
sub eax, 1
je 0x517414
push str.DRAW_DIALOGBOX_PVPT_MENU201
lea ecx, [ebp - 0x998]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
cwde
push 0
push 0x320004
mov dword [ebp - 4], 0x1cc
lea esi, [eax + 0x9b]
lea eax, [ebp - 0x998]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e88]
mov ecx, edi
cwde
push esi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x998]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0x320004
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
push esi
push dword [ebp - 0x2e84]
call fcn.0045d450
mov esi, dword [ebp - 0x2e88]
jmp 0x51758e
cmp byte [ebp - 0x2e7d], 0
je 0x517500
mov eax, dword [ebp + 8]
movsx ecx, ax
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x517500
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x517500
mov eax, dword [ebp - 0x2e74]
movsx edx, ax
mov eax, dword [ebp + 0xc]
cwde
mov dword [ebp - 0x2e78], edx
lea ecx, [edx + 0x9b]
mov dword [ebp - 0x2e98], eax
cmp eax, ecx
jl 0x517500
lea eax, [edx + 0xa9]
cmp dword [ebp - 0x2e98], eax
jg 0x517500
push str.DRAW_DIALOGBOX_PVPT_MENU201
lea ecx, [ebp - 0x9b0]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x9b0]
mov dword [ebp - 4], 0x1ca
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e78]
mov ecx, edi
add eax, 0x9b
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x9b0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0xffffff
lea eax, [ebp - 0x110]
push eax
mov eax, dword [ebp - 0x2e78]
add eax, 0x9b
push eax
jmp 0x51757e
push str.DRAW_DIALOGBOX_PVPT_MENU201
lea ecx, [ebp - 0x9c8]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
cwde
push 0
push 0x320004
mov dword [ebp - 4], 0x1cb
lea esi, [eax + 0x9b]
lea eax, [ebp - 0x9c8]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e88]
mov ecx, edi
cwde
push esi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x9c8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0x320004
lea eax, [ebp - 0x110]
push eax
push esi
mov esi, dword [ebp - 0x2e88]
movsx eax, si
mov ecx, edi
add eax, 0x8c
push eax
call fcn.0045d450
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2eac]
add esp, 0xc
mov eax, dword [eax + 0x68]
cmp eax, 0xffffffff
je 0x5175ca
push eax
lea eax, [ebp - 0x110]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x51761b
push str.DRAW_DIALOGBOX_PVPT_MENU206
lea ecx, [ebp - 0x9e0]
call fcn.0040f9f0
lea eax, [ebp - 0x9e0]
mov dword [ebp - 4], 0x1cd
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004994b0
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9e0]
call fcn.00411640
mov ecx, dword [edi + 0x13c690]
call fcn.00407170
cwde
sub eax, 1
je 0x517693
sub eax, 1
je 0x517693
push str.DRAW_DIALOGBOX_PVPT_MENU202
lea ecx, [ebp - 0x9f8]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
cwde
push 0
push 0x320004
mov dword [ebp - 4], 0x1d0
lea esi, [eax + 0xaa]
lea eax, [ebp - 0x9f8]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e88]
mov ecx, edi
cwde
push esi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x9f8]
jmp 0x5177f3
cmp byte [ebp - 0x2e7d], 0
je 0x517796
mov eax, dword [ebp + 8]
movsx ecx, ax
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x517796
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x517796
mov eax, dword [ebp - 0x2e74]
movsx edx, ax
mov eax, dword [ebp + 0xc]
cwde
mov dword [ebp - 0x2e78], edx
lea ecx, [edx + 0xaa]
mov dword [ebp - 0x2e98], eax
cmp eax, ecx
jl 0x517796
lea eax, [edx + 0xb8]
cmp dword [ebp - 0x2e98], eax
jg 0x517796
push str.DRAW_DIALOGBOX_PVPT_MENU202
lea ecx, [ebp - 0xa10]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0xa10]
mov dword [ebp - 4], 0x1ce
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e78]
mov ecx, edi
add eax, 0xaa
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0xa10]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0xffffff
lea ecx, [ebp - 0x110]
movsx eax, si
push ecx
mov ecx, dword [ebp - 0x2e78]
add eax, 0x8c
add ecx, 0xaa
mov dword [ebp - 0x2e84], eax
push ecx
push eax
mov ecx, edi
call fcn.0045d450
jmp 0x517830
push str.DRAW_DIALOGBOX_PVPT_MENU202
lea ecx, [ebp - 0xa28]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
cwde
push 0
push 0x320004
mov dword [ebp - 4], 0x1cf
lea esi, [eax + 0xaa]
lea eax, [ebp - 0xa28]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e88]
mov ecx, edi
cwde
push esi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0xa28]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov ecx, dword [ebp - 0x2e88]
push 0
movsx eax, cx
lea ecx, [ebp - 0x110]
push 0x320004
push ecx
add eax, 0x8c
mov ecx, edi
push esi
push eax
mov dword [ebp - 0x2e84], eax
call fcn.0045d450
mov esi, dword [ebp - 0x2e88]
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2eac]
add esp, 0xc
mov eax, dword [eax + 0x6c]
cmp eax, 0xffffffff
je 0x51786c
push eax
lea eax, [ebp - 0x110]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x5178bd
push str.DRAW_DIALOGBOX_PVPT_MENU206
lea ecx, [ebp - 0xa40]
call fcn.0040f9f0
lea eax, [ebp - 0xa40]
mov dword [ebp - 4], 0x1d1
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004994b0
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa40]
call fcn.00411640
mov ecx, dword [edi + 0x13c690]
call fcn.00407170
cwde
sub eax, 1
je 0x51795e
sub eax, 1
je 0x51795e
push str.DRAW_DIALOGBOX_PVPT_MENU203
lea ecx, [ebp - 0xa58]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
cwde
push 0
push 0x320004
mov dword [ebp - 4], 0x1d4
lea esi, [eax + 0xb9]
lea eax, [ebp - 0xa58]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e88]
mov ecx, edi
cwde
push esi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0xa58]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0x320004
lea eax, [ebp - 0x110]
push eax
push esi
push dword [ebp - 0x2e84]
jmp 0x517ad2
cmp byte [ebp - 0x2e7d], 0
je 0x517a4d
mov eax, dword [ebp + 8]
movsx ecx, ax
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x517a4d
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x517a4d
mov eax, dword [ebp - 0x2e74]
movsx edx, ax
mov eax, dword [ebp + 0xc]
cwde
mov dword [ebp - 0x2e78], edx
lea ecx, [edx + 0xb9]
mov dword [ebp - 0x2e98], eax
cmp eax, ecx
jl 0x517a4d
lea eax, [edx + 0xc7]
cmp dword [ebp - 0x2e98], eax
jg 0x517a4d
push str.DRAW_DIALOGBOX_PVPT_MENU203
lea ecx, [ebp - 0xa70]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0xa70]
mov dword [ebp - 4], 0x1d2
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e78]
mov ecx, edi
add eax, 0xb9
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0xa70]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0xffffff
lea eax, [ebp - 0x110]
push eax
mov eax, dword [ebp - 0x2e78]
add eax, 0xb9
push eax
movsx eax, si
jmp 0x517acc
push str.DRAW_DIALOGBOX_PVPT_MENU203
lea ecx, [ebp - 0xa88]
call fcn.0040f9f0
mov eax, dword [ebp - 0x2e74]
mov ecx, 0x5fd3c4
cwde
push 0
push 0x320004
mov dword [ebp - 4], 0x1d3
lea esi, [eax + 0xb9]
lea eax, [ebp - 0xa88]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x2e88]
mov ecx, edi
cwde
push esi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0xa88]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0x320004
lea eax, [ebp - 0x110]
push eax
mov eax, dword [ebp - 0x2e88]
push esi
cwde
add eax, 0x8c
push eax
mov ecx, edi
call fcn.0045d450
lea ecx, [edi + 0x18a074]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x517ae2
sub ecx, edx
je case.default.0x5101e6
mov ecx, edi
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.0047f3e0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005aa550
mov esp, ebp
pop ebp
ret 0x10