Function at 0x40ed90
Capabilities:
Check for time delay via gettickcount
Encrypt data using speck

Disassembly:
sub esp, 0x120
push ebx
push ebp
push esi
push edi
mov di, word [esp + 0x140]
mov eax, 0x7fff
mov dword [esp + 0x30], edx
mov edx, dword [esp + 0x148]
mov dword [esp + 0x14], ecx
movzx ebp, di
mov dword [esp + 0x54], eax
cmp edx, 0xffc3d44f
je 0x40edda
cmp edx, 0xffc3d44e
je 0x40edda
mov byte [esp + 0x22], 0
cmp edx, 0xffc3d44d
jne 0x40eddf
mov byte [esp + 0x22], 1
mov ecx, dword [0x4e8c50]
mov ebx, dword [esp + 0x13c]
test ecx, ecx
jne 0x40edfd
lea esi, [esp + 0x5c]
mov dword [esp + 0x1c], esi
jmp 0x40eebd
mov eax, dword [0x4e8c6c]
imul esi, eax, 0xd4
inc eax
add esi, ecx
xor ecx, ecx
cmp eax, dword [0x4e478c]
mov dword [esp + 0x1c], esi
cmovge eax, ecx
mov ecx, dword [esp + 0x144]
mov dword [0x4e8c6c], eax
mov byte [esi], bl
mov byte [esi + 6], cl
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
mov dword [0x4e8c68], eax
sub ecx, dword [0x4ea750]
mov dword [0x4ea750], eax
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
shr ecx, 0x1f
addsd xmm0, qword [ecx*8 + 0x4dcb50]
cvtpd2ps xmm0, xmm0
divss xmm0, dword [0x4dca5c]
movss dword [esi + 8], xmm0
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov ecx, dword [esp + 0x1c]
mov esi, eax
add ecx, 0xc
test esi, esi
je 0x40ee9f
cmp esi, dword [0x4e8c64]
je 0x40ee98
push esi
push ecx
push 0x418
push dword [0x4e8c44]
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x40eeac
xor eax, eax
mov word [ecx], ax
jmp 0x40eeac
mov dword [ecx], 0x2f004e
mov dword [ecx + 4], 0x41
mov edx, dword [esp + 0x148]
mov dword [0x4e8c64], esi
mov esi, dword [esp + 0x1c]
cmp bl, 0xe7
jne 0x40ef12
mov ecx, dword [esp + 0x138]
push 0x7fff
push esi
push edx
push dword [esp + 0x150]
mov ax, word [ecx + 4]
mov edx, dword [esp + 0x40]
push 0
push 0xe7
push ecx
push dword [esp + 0x150]
mov ecx, dword [esp + 0x34]
mov word [esi + 2], ax
mov eax, 0x55
mov word [esi + 4], ax
call fcn.00410940
add esp, 0x20
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x120
ret
mov al, bl
mov word [esi + 2], di
mov esi, dword [0x4ea784]
add al, 0x64
mov cl, 3
mov edi, 0x20
cmp cl, al
sbb eax, eax
and eax, ebp
mov ebp, dword [esp + 0x14]
movzx eax, ax
mov dword [esp + 0x24], eax
cmp ebp, dword [0x4e8e68]
jne 0x40ef72
mov cl, byte [esp + 0x14c]
and cl, 1
mov dword [esp + 0x40], ecx
jne 0x40eff9
mov al, byte [esp + 0x144]
movzx ecx, bl
xor al, 1
shl al, 7
mov byte [ecx + 0x4e8e78], al
mov ecx, dword [esp + 0x40]
jmp 0x40eff9
mov edx, dword [esp + 0x14c]
mov ecx, edx
movzx ebp, bl
shr ecx, 4
and ecx, 0xffffff01
mov dword [esp + 0x40], ecx
lea eax, [ebp*4]
add eax, ebp
cmp byte [esi + eax*4 + 8], 0
jne 0x40eff5
test dl, 0x10
jne 0x40eff5
cmp bl, 0xa0
je 0x40efaa
cmp bl, 0xa1
jne 0x40efc9
cmp byte [esp + 0x144], 0
jne 0x40efc9
cmp bl, 0xa0
mov eax, edi
mov edx, 0x10
cmove eax, edx
test byte [0x4e8f7a], al
jne 0x40eff5
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov esi, dword [0x4ea784]
mov ecx, dword [esp + 0x40]
mov dword [0x4ea758], eax
mov dword [0x4ea754], eax
mov al, byte [esp + 0x144]
xor al, 1
shl al, 7
mov byte [ebp + 0x4e8e78], al
mov ebp, dword [esp + 0x14]
mov dl, byte [esp + 0x22]
test dl, dl
je 0x40f008
mov eax, 0x69
jmp 0x40f015
mov eax, 0x61
test cl, cl
cmovne edi, eax
movzx eax, di
cmp byte [0x4e8e67], 0
mov ecx, dword [esp + 0x1c]
lea edi, [ecx + 4]
mov word [edi], ax
mov dword [esp + 0x50], edi
je 0x40f060
cmp bl, 0x5b
je 0x40f036
cmp bl, 0x5c
jne 0x40f060
mov eax, dword [esp + 0x144]
test al, al
jne 0x40f067
push 0
push SysReAllocString
push 0x7fff
push ecx
mov ecx, dword [esp + 0x158]
push ecx
push 0
push ecx
mov ecx, ebp
jmp 0x41078c
mov eax, dword [esp + 0x144]
cmp byte [0x4ea776], 0
mov ebp, dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov edi, dword [sym.imp.USER32.dll_FindWindowW]
je 0x40f11b
cmp bl, 0x1b
jne 0x40f11b
test al, al
jne 0x40f11b
push 0
push str.32771
call edi
test eax, eax
je 0x40f111
push 0
push eax
call ebp
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp esi, eax
jne 0x40f111
push 0xffc3d44d
push 0
push 0
push 0
mov dl, bl
xor ecx, ecx
call fcn.00419b50
mov dl, byte [0x4e8f7d]
mov ecx, 1
push 0xffc3d44d
shr dl, 3
push 0
and dl, 1
push 0
push 0
or dl, 0xa4
call fcn.00419b50
mov ecx, dword [esp + 0x3c]
add esp, 0x20
push 0
push SysReAllocString
push 0x7fff
push ecx
mov ecx, dword [esp + 0x158]
push ecx
push 0
push ecx
mov ecx, dword [esp + 0x30]
push 0x1b
jmp 0x41078d
mov esi, dword [0x4ea784]
mov dl, byte [esp + 0x22]
mov eax, dword [esp + 0x24]
movzx eax, ax
mov dword [esp + 0x40], eax
lea ecx, [eax + eax*4]
mov eax, dword [0x4ea788]
mov dh, byte [eax + ecx*4 + 0x13]
lea eax, [eax + ecx*4]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x2c], eax
mov byte [esp + 0x23], dh
cmp ecx, dword [0x4e8e6c]
jne 0x40f14d
test dh, dh
jne 0x40f15a
movzx eax, bl
lea eax, [eax + eax*4]
lea eax, [esi + eax*4]
mov dword [esp + 0x2c], eax
test dl, dl
je 0x40f1d1
mov edx, dword [esp + 0x148]
cmp edx, 0xffc3d44e
jne 0x40f191
cmp byte [esp + 0x144], 0
je 0x40f191
cmp dword [0x4e8fa4], eax
jne 0x40f191
mov byte [eax + 0xd], 0
mov byte [eax + 0x10], 0
mov dword [0x4e8fa4], 0
mov ecx, dword [esp + 0x1c]
push 0x7fff
push ecx
push edx
push dword [esp + 0x150]
mov ecx, dword [esp + 0x24]
push dword [esp + 0x34]
mov edx, dword [esp + 0x44]
push ebx
push dword [esp + 0x150]
push dword [esp + 0x150]
call fcn.00410940
add esp, 0x20
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x120
ret
mov edx, dword [esp + 0x144]
mov ecx, 0x7fff
mov dword [esp + 0x58], ecx
test dl, dl
jne 0x40f1ec
mov byte [eax + 0x11], dl
mov word [eax + 4], cx
mov eax, dword [esp + 0x14]
cmp eax, dword [0x4e8e68]
jne 0x40f27e
test bl, bl
jne 0x40f240
mov ecx, dword [esp + 0x1c]
push 0x7fff
push ecx
mov ecx, dword [esp + 0x150]
push ecx
push edx
push dword [esp + 0x34]
mov edx, dword [esp + 0x44]
mov ecx, eax
push 0
push dword [esp + 0x150]
push dword [esp + 0x150]
call fcn.00410940
add esp, 0x20
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x120
ret
cmp bl, 1
je 0x40f24a
cmp bl, 2
jne 0x40f27e
cmp dword [0x4e8c1c], 0
jne 0x40f2b3
push 0
push str.32768
call edi
test eax, eax
je 0x40f26d
push 0
push eax
call ebp
cmp eax, dword [0x4e9e1c]
je 0x40f2ac
mov esi, dword [0x4ea784]
mov edx, dword [esp + 0x144]
mov eax, dword [esp + 0x14]
mov ecx, dword [0x4e8fa4]
mov edi, dword [esp + 0x2c]
test ecx, ecx
je 0x40f2eb
cmp ecx, edi
je 0x40f2eb
test dl, dl
jne 0x40f2eb
cmp byte [ecx + 0x12], 0xff
je 0x40f2eb
cmp eax, dword [0x4e8e6c]
jne 0x40f2da
xor eax, eax
cmp byte [edi + 8], al
sete al
jmp 0x40f2e3
mov edx, dword [esp + 0x144]
mov ecx, dword [esp + 0x2c]
mov al, dl
xor al, 1
push 0x7fff
mov byte [ecx + 0x10], 0
mov byte [ecx + 0xd], al
mov ecx, dword [esp + 0x20]
push ecx
mov ecx, dword [esp + 0x150]
push ecx
push edx
jmp 0x40f1a3
mov eax, dword [0x4e8fa4]
movzx eax, byte [eax + 8]
test eax, eax
je 0x40f2eb
mov byte [ecx + 0x12], 1
cmp byte [edi + 9], 0
jne 0x40f316
cmp byte [edi + 0xa], 0
jne 0x40f316
mov ecx, dword [esp + 0x1c]
mov al, dl
push 0x7fff
push ecx
mov ecx, dword [esp + 0x150]
xor al, 1
push ecx
mov byte [edi + 0xd], al
push edx
jmp 0x40f1a3
mov dword [esp + 0x44], 0
mov ebp, 0x7fff
mov dword [esp + 0x34], ebp
mov dword [esp + 0x38], ebp
mov byte [esp + 0x11], 0
test dl, dl
je 0x40f372
mov ch, byte [edi + 0x10]
mov al, byte [edi + 0xd]
mov byte [esp + 0x13], al
movzx eax, word [edi + 4]
mov byte [esp + 0x2b], ch
mov ecx, ebp
mov byte [edi + 0x10], 0
cmp ax, cx
je 0x40f35f
mov ebp, eax
mov word [edi + 4], cx
mov dword [esp + 0x34], ebp
mov dword [esp + 0x38], ebp
mov al, byte [edi + 0xc]
test al, 8
je 0x40f382
and al, 0xf7
mov byte [esp + 0x11], 1
mov byte [edi + 0xc], al
jmp 0x40f382
mov al, byte [esp + 0x13]
mov byte [esp + 0x13], al
mov al, byte [esp + 0x13]
mov byte [esp + 0x2b], al
mov al, dl
xor cl, cl
xor al, 1
mov byte [edi + 0xd], al
mov eax, dword [esp + 0x14]
cmp eax, dword [0x4e8e6c]
jne 0x40f400
cmp byte [edi + 8], cl
je 0x40f426
cmp byte [esi + 0xcb5], cl
jne 0x40f3b4
cmp byte [esi + 0xcc9], cl
jne 0x40f3b4
xor al, al
jmp 0x40f3b6
mov al, 1
cmp byte [esi + 0xcdd], 0
mov byte [esi + 0x161], al
jne 0x40f3d2
cmp byte [esi + 0xcf1], 0
jne 0x40f3d2
xor al, al
jmp 0x40f3d4
mov al, 1
cmp byte [esi + 0xc8d], 0
mov byte [esi + 0x175], al
jne 0x40f3f6
cmp byte [esi + 0xca1], 0
jne 0x40f3f6
xor al, al
mov byte [esi + 0x14d], al
jmp 0x40f426
mov al, 1
mov byte [esi + 0x14d], al
jmp 0x40f426
cmp dword [0x4e8e6c], 0
jne 0x40f426
mov cl, 1
call fcn.0041c260
mov esi, dword [0x4ea784]
mov ah, al
mov byte [0x4e8f7c], ah
mov cl, 1
mov byte [0x4e8f7d], ah
mov eax, dword [edi]
test eax, eax
je 0x40f436
cmp dword [eax], 6
mov byte [esp + 0x22], 1
je 0x40f43b
mov byte [esp + 0x22], 0
test cl, cl
jne 0x40f44c
mov cl, 1
call fcn.0041c260
mov esi, dword [0x4ea784]
mov al, byte [edi + 9]
mov ecx, dword [esp + 0x144]
test al, al
je 0x40f818
test cl, cl
jne 0x40f818
mov ecx, dword [0x4e8fa4]
test ecx, ecx
je 0x40f47e
cmp byte [edi + 0xa], 0
je 0x40f47e
cmp edi, ecx
jne 0x40f811
mov dh, byte [edi + 0xc]
shr dh, 4
not dh
and dh, 1
mov byte [esp + 0x1b], dh
cmp al, 1
jne 0x40f5f7
cmp byte [esp + 0x23], 0
mov ecx, dword [esp + 0x40]
jne 0x40f4a3
movzx ecx, bl
xor edx, edx
movzx eax, cx
cmp byte [esp + 0x23], dl
mov dword [esp + 0x48], ecx
cmovne edx, eax
movzx eax, cl
xor ecx, ecx
cmp byte [esp + 0x23], cl
push 0
cmovne eax, ecx
mov cl, al
call fcn.0041c4a0
mov dh, al
xor dl, dl
xor eax, eax
mov byte [esp + 0x16], dh
xor ecx, ecx
mov byte [esp + 0x43], dl
add esp, 4
mov dword [esp + 0x4c], eax
cmp cx, word [0x4e8fd4]
jae 0x40f657
nop dword [eax]
cmp byte [esp + 0x23], 0
mov ecx, dword [0x4e8fc4]
mov edi, dword [ecx + eax*4]
je 0x40f506
movzx eax, word [edi + 0xa]
jmp 0x40f50a
movzx eax, byte [edi + 0x11]
cmp dword [esp + 0x48], eax
je 0x40f519
test byte [edi + 0xe], dh
je 0x40f5d2
cmp word [edi + 6], 0
je 0x40f555
cmp byte [edi + 0x19], 0
je 0x40f5d2
cmp byte [0x4e8e61], 0
jne 0x40f5d2
test byte [edi + 0x13], 1
mov dh, byte [esp + 0x1b]
jne 0x40f5ed
test dh, dh
jne 0x40f5ed
mov dl, 1
mov byte [esp + 0x3f], dl
jmp 0x40f5ce
mov esi, dword [edi + 0x20]
mov eax, esi
test eax, eax
je 0x40f5d2
nop
cmp byte [eax + 0x20], 0
jne 0x40f56f
mov eax, dword [eax + 0xc]
test eax, eax
jne 0x40f560
jmp 0x40f5d2
test dl, dl
je 0x40f580
test byte [edi + 0x13], 1
je 0x40f5d2
nop dword [eax]
cmp byte [esi + 0x20], 0
je 0x40f5c7
cmp byte [0x4e8e61], 0
je 0x40f595
cmp byte [esi + 0x21], 0
je 0x40f5c7
mov ecx, dword [esi + 8]
test ecx, ecx
je 0x40f5a8
mov edx, dword [edi + 0x1c]
call fcn.00413aa0
test eax, eax
je 0x40f5c3
test byte [esi + 0x1d], 1
mov dh, byte [esp + 0x1b]
jne 0x40f5ed
test dh, dh
jne 0x40f5ed
mov dl, 1
mov byte [esp + 0x3f], dl
test byte [edi + 0x13], dl
je 0x40f5ce
jmp 0x40f5c7
mov dl, byte [esp + 0x3f]
mov esi, dword [esi + 0xc]
test esi, esi
jne 0x40f580
mov dh, byte [esp + 0x12]
mov ecx, dword [esp + 0x4c]
movzx eax, word [0x4e8fd4]
inc ecx
mov dword [esp + 0x4c], ecx
cmp ecx, eax
jge 0x40f64d
mov eax, ecx
jmp 0x40f4f0
mov esi, dword [0x4ea784]
mov edi, dword [esp + 0x2c]
mov byte [esp + 0x12], 0
cmp edi, dword [0x4e8fa4]
je 0x40f60e
mov dword [0x4e8fa4], edi
mov byte [edi + 0x12], 0
cmp byte [edi + 0xa], 0
je 0x40f7a0
mov al, byte [edi + 8]
mov dl, byte [0x4e8f7c]
test al, al
je 0x40f629
not al
and dl, al
mov eax, dword [esp + 0x14]
cmp eax, dword [0x4e8e6c]
jne 0x40f668
cmp byte [esp + 0x23], 0
je 0x40f668
mov eax, dword [0x4ea77c]
movzx ecx, dl
shl ecx, 9
add ecx, dword [esp + 0x40]
jmp 0x40f678
mov esi, dword [0x4ea784]
mov edi, dword [esp + 0x2c]
mov dh, dl
mov byte [esp + 0x1b], dh
test dl, dl
jne 0x40f5f7
mov byte [esp + 0x12], 1
jmp 0x40f60e
movzx ecx, dl
movzx eax, bl
shl ecx, 8
add ecx, eax
mov eax, dword [0x4ea778]
movzx ecx, word [eax + ecx*2]
mov eax, ecx
movzx ebp, cx
and eax, 0x7fff
mov dword [esp + 0x34], ebp
add eax, 0xffff8006
mov dword [esp + 0x38], ebp
cmp ax, 4
jbe 0x40f7aa
mov eax, 0x7fff
cmp cx, ax
je 0x40f7aa
test dh, dh
jne 0x40f6b8
mov byte [edi + 0x12], 0xff
jmp 0x40f779
test dl, dl
jne 0x40f779
push 0
lea eax, [esp + 0x15]
push eax
push dword [esp + 0x150]
lea ecx, [esp + 0x44]
call fcn.004143c0
add esp, 0xc
mov dword [esp + 0x44], eax
test eax, eax
je 0x40f6ef
cmp byte [esp + 0x11], 0
je 0x40f6ef
mov ebp, dword [esp + 0x38]
jmp 0x40f76b
mov ebp, dword [esp + 0x38]
mov dword [esp + 0x34], ebp
cmp bp, word [0x4e8fd4]
jae 0x40f762
mov ecx, dword [0x4ea780]
mov eax, 0x7fff
movzx esi, bp
add esi, esi
add ecx, esi
cmp word [ecx], ax
je 0x40f762
push 0
lea eax, [esp + 0x15]
mov byte [esp + 0x15], 0
push eax
push dword [esp + 0x150]
call fcn.004143c0
add esp, 0xc
test eax, eax
je 0x40f762
cmp byte [esp + 0x11], 0
je 0x40f762
cmp dword [esp + 0x44], 0
mov dh, byte [esp + 0x1b]
je 0x40f74f
mov byte [esp + 0x11], 0
jmp 0x40f773
mov dword [esp + 0x44], eax
mov eax, dword [0x4ea780]
movzx ebp, word [esi + eax]
mov dword [esp + 0x38], ebp
jmp 0x40f76f
mov ebp, 0x7fff
mov dword [esp + 0x38], ebp
mov dh, byte [esp + 0x1b]
mov dword [esp + 0x34], ebp
mov esi, dword [0x4ea784]
test ebp, 0x8000
je 0x40f787
mov word [edi + 4], bp
jmp 0x40f7aa
cmp bp, word [0x4e8fd4]
jae 0x40f7a0
mov eax, dword [0x4ea780]
movzx ecx, bp
mov ax, word [eax + ecx*2]
mov word [edi + 4], ax
mov eax, 0x7fff
cmp bp, ax
jne 0x40f811
cmp byte [esp + 0x12], 0
je 0x40f7bd
mov eax, dword [esp + 0x50]
mov ecx, 0x23
mov word [eax], cx
test dh, dh
jne 0x40f7c5
or byte [edi + 0xc], 8
cmp byte [edi + 8], 0
jne 0x40f7f9
test dh, dh
je 0x40f7f9
cmp byte [esp + 0x22], 0
jne 0x40f7f9
mov ecx, dword [esp + 0x1c]
push 0
push SysReAllocString
push 0x7fff
push ecx
push dword [esp + 0x158]
mov byte [edi + 0x11], 1
push 0
jmp 0x410787
mov ecx, dword [esp + 0x1c]
push 0x7fff
push ecx
push dword [esp + 0x150]
push 0
jmp 0x40f1a3
mov ecx, dword [esp + 0x144]
cmp byte [edi + 0xa], 0
mov byte [esp + 0x12], 0
je 0x40f88a
test cl, cl
je 0x40f88a
mov al, byte [esp + 0x2b]
cmp dword [0x4e8fa4], edi
jne 0x40f841
test al, al
je 0x40f88a
mov dword [0x4e8fa4], 0
cmp byte [edi + 0xb], 0
jne 0x40f885
test al, al
je 0x40f86f
cmp byte [esp + 0x11], 0
jne 0x40f86f
push 0
push SysReAllocString
push 0x7fff
push dword [esp + 0x28]
push dword [esp + 0x158]
push ecx
jmp 0x410787
push 0x7fff
push dword [esp + 0x20]
push dword [esp + 0x150]
push ecx
jmp 0x40f1a3
mov byte [esp + 0x12], 1
cmp byte [edi + 9], 0
je 0x40f9bd
test cl, cl
je 0x40f9bd
mov ecx, dword [0x4e8fa4]
xor eax, eax
cmp ecx, edi
cmove ecx, eax
mov dword [0x4e8fa4], ecx
cmp byte [edi + 0xe], al
je 0x40f8d2
push 0xffc3d44d
push eax
push eax
push eax
mov dl, 0x12
mov byte [edi + 0xe], al
lea ecx, [eax + 1]
call fcn.00419b50
mov esi, dword [0x4ea784]
add esp, 0x10
cmp byte [edi + 0xf], 0
je 0x40f8fc
push 0xffc3d44d
push 0
push 0
push 0
mov dl, 0x10
mov byte [edi + 0xf], 0
mov ecx, 1
call fcn.00419b50
mov esi, dword [0x4ea784]
add esp, 0x10
mov cl, byte [esp + 0x22]
mov al, byte [edi + 0x12]
test cl, cl
je 0x40f97a
cmp al, 2
jne 0x40f961
mov ebp, dword [esp + 0x24]
mov dl, bl
push 0xffc3d44e
push 0
push 0
push ebp
mov ecx, 1
call fcn.00419b50
push 0xffc3d44d
push 0
push 0
push ebp
mov dl, bl
mov ecx, 2
call fcn.00419b50
add esp, 0x20
push 0
push SysReAllocString
push 0x7fff
push dword [esp + 0x28]
push dword [esp + 0x158]
push dword [esp + 0x158]
jmp 0x410787
cmp al, 1
jne 0x40f997
push 0x7fff
push dword [esp + 0x20]
push dword [esp + 0x150]
jmp 0x40f19c
test al, al
jle 0x40f997
mov eax, 0x7fff
cmp bp, ax
jne 0x40f997
cmp byte [edi + 8], 0
jne 0x40f965
cmp byte [esp + 0x11], 0
jne 0x40f965
jmp 0x40f93e
cmp byte [edi + 0xa], 0
jne 0x40f9b0
cmp byte [edi + 8], 0
jne 0x40f965
cmp byte [esp + 0x11], 0
jne 0x40f965
test cl, cl
jne 0x40f965
jmp 0x40f93e
cmp byte [esp + 0x13], 0
jne 0x40f9bd
cmp byte [edi + 0xb], 0
je 0x40f965
xor ebp, ebp
mov dword [esp + 0x4c], ebp
cmp dword [0x4e8fa4], ebp
je 0x40fd54
mov ecx, dword [esp + 0x144]
test cl, cl
je 0x40f9e4
cmp byte [edi + 0xb], 0
je 0x40fd54
mov edx, dword [esp + 0x34]
mov eax, 0x7fff
cmp dx, ax
jne 0x4100f2
movzx edi, word [edi + 6]
cmp di, ax
je 0x40fb37
mov eax, dword [0x4e8fc4]
movzx ecx, di
mov edx, dword [eax + ecx*4]
mov al, byte [edx + 0x11]
test al, al
jne 0x40fa2d
cmp word [edx + 0xa], 0
je 0x40fa8b
movzx eax, word [edx + 0xa]
lea ecx, [eax + eax*4]
mov eax, dword [0x4ea788]
lea eax, [eax + ecx*4]
jmp 0x40fa36
movzx eax, al
lea eax, [eax + eax*4]
lea eax, [esi + eax*4]
cmp byte [eax + 0xd], 0
movzx edi, word [edx + 0xc]
mov ecx, dword [esp + 0x144]
je 0x40fa77
cmp byte [edx + 0x16], 0
je 0x40fa6a
test cl, cl
jne 0x40fa83
mov ecx, dword [esp + 0x2c]
mov ax, word [edx + 4]
mov word [ecx + 4], ax
test ebp, ebp
jne 0x40fa9a
mov ecx, dword [esp + 0x144]
jmp 0x40fa77
test cl, cl
jne 0x40fa77
test ebp, ebp
cmove ebp, edx
mov dword [esp + 0x4c], ebp
mov eax, 0x7fff
cmp di, ax
jne 0x40fa03
jmp 0x40fa92
mov ebp, edx
mov dword [esp + 0x4c], ebp
jmp 0x40fa92
mov ecx, dword [esp + 0x144]
test ebp, ebp
je 0x40fb37
movzx ecx, byte [ebp + 0x11]
cmp ecx, 0x12
ja case.0x40faaa.1
movzx eax, byte [ecx + 0x4107bc]
jmp dword [eax*4 + 0x4107a8]
cmp byte [esi + 0xca1], 0
mov eax, 0xc80
mov ecx, 0xc94
cmovne eax, ecx
add eax, esi
jmp 0x40fb10
cmp byte [esi + 0xcc9], 0
mov eax, 0xca8
mov ecx, 0xcbc
cmovne eax, ecx
add eax, esi
jmp 0x40fb10
cmp byte [esi + 0xcf1], 0
mov eax, 0xcd0
mov ecx, 0xce4
cmovne eax, ecx
add eax, esi
jmp 0x40fb10
movzx eax, word [ebp + 0xa]
lea ecx, [eax + eax*4]
mov eax, dword [0x4ea788]
lea eax, [eax + ecx*4]
jmp 0x40fb10
lea eax, [ecx + ecx*4]
lea eax, [esi + eax*4]
mov dword [0x4e8fa4], eax
movzx eax, word [ebp + 6]
test ax, ax
jne 0x40fb22
movzx eax, word [ebp + 4]
mov ecx, dword [esp + 0x144]
movzx edx, ax
mov dword [esp + 0x34], edx
mov dword [esp + 0x38], edx
movzx edi, ax
mov eax, 0x7ffe
cmp di, ax
je 0x40fb4f
mov eax, 0x7ffd
cmp di, ax
jne 0x40fd50
mov esi, dword [esp + 0x2c]
test cl, cl
jne 0x40fb5b
mov byte [esi + 0x10], 1
test byte [0x4e8f7d], 0xc
jne 0x40fb82
push 0xffc3d44d
push 0
push 0
push 0
mov dl, 0x12
xor ecx, ecx
call fcn.00419b50
mov ecx, dword [esp + 0x154]
add esp, 0x10
cmp bl, 0xa2
je 0x40fb8c
cmp bl, 0xa3
jne 0x40fbaf
mov ebp, dword [esp + 0x24]
test cl, cl
jne 0x40fbb3
push 0xffc3d44d
push 0
push 0
push ebp
mov dl, bl
mov ecx, 1
call fcn.00419b50
add esp, 0x10
jmp 0x40fbb3
mov ebp, dword [esp + 0x24]
mov eax, dword [0x4e8fa4]
mov byte [eax + 0xe], 1
mov eax, 0x7ffd
cmp di, ax
jne 0x40fbf4
test byte [0x4e8f7d], 0x30
jne 0x40fbe6
push 0xffc3d44d
push 0
push 0
push 0
mov dl, 0x10
xor ecx, ecx
call fcn.00419b50
add esp, 0x10
mov eax, dword [0x4e8fa4]
mov byte [eax + 0xf], 1
jmp 0x40fc74
mov eax, 0x7ffe
cmp di, ax
jne 0x40fc74
cmp bl, 0xa0
je 0x40fc08
cmp bl, 0xa1
jne 0x40fc2f
cmp byte [esp + 0x144], 0
jne 0x40fc2f
push 0xffc3d44d
push 0
push 0
push ebp
mov ebp, 1
mov dl, bl
mov ecx, ebp
call fcn.00419b50
add esp, 0x10
jmp 0x40fc34
mov ebp, 1
test byte [0x4e8f7d], 0x10
je 0x40fc54
push 0xffc3d44d
push 0
push 0
push 0
mov dl, 0xa0
mov ecx, ebp
call fcn.00419b50
add esp, 0x10
test byte [0x4e8f7d], 0x20
je 0x40fc74
push 0xffc3d44d
push 0
push 0
push 0
mov dl, 0xa1
mov ecx, ebp
call fcn.00419b50
add esp, 0x10
test byte [0x4e8f7d], 1
mov ebp, 1
je 0x40fc99
push 0xffc3d44d
push 0
push 0
push 0
mov dl, 0xa2
mov ecx, ebp
call fcn.00419b50
add esp, 0x10
test byte [0x4e8f7d], 2
je 0x40fcb9
push 0xffc3d44d
push 0
push 0
push 0
mov dl, 0xa3
mov ecx, ebp
call fcn.00419b50
add esp, 0x10
push 0xffc3d44d
push 0
push 0
push 0
mov dl, 9
mov ecx, 2
call fcn.00419b50
mov eax, 0x7ffd
add esp, 0x10
cmp di, ax
jne 0x40fd17
mov eax, dword [0x4e8fa4]
cmp byte [eax + 0xf], 0
je 0x40fd17
cmp bl, 0x60
jb 0x40fcf2
cmp bl, 0x69
jbe 0x40fcf7
cmp bl, 0x6e
jne 0x40fd17
push 0xffc3d44d
push 0
push 0
push 0
mov dl, 0x10
mov ecx, ebp
call fcn.00419b50
mov eax, dword [0x4e8fa4]
add esp, 0x10
mov byte [eax + 0xf], 0
mov eax, dword [esp + 0x50]
mov ecx, 0x68
mov word [eax], cx
mov eax, dword [esp + 0x144]
test al, al
jne 0x40fd32
mov byte [esi + 0x11], 1
mov ecx, dword [esp + 0x1c]
push 0
push SysReAllocString
push 0x7fff
push ecx
mov ecx, dword [esp + 0x158]
push ecx
jmp 0x410786
mov edi, dword [esp + 0x2c]
mov esi, dword [esp + 0x34]
mov eax, 0x7fff
cmp si, ax
jne 0x4100f6
mov al, byte [edi + 8]
mov dl, byte [0x4e8f7c]
test al, al
je 0x40fd77
not al
and dl, al
mov eax, dword [esp + 0x14]
mov dh, byte [esp + 0x23]
cmp eax, dword [0x4e8e6c]
jne 0x40fda7
test dh, dh
je 0x40fda7
mov eax, dword [0x4ea77c]
movzx ecx, dl
shl ecx, 9
add ecx, dword [esp + 0x40]
movzx ebp, word [eax + ecx*2]
movzx eax, bl
mov dword [esp + 0x48], eax
jmp 0x40fdbf
movzx eax, bl
movzx ecx, dl
shl ecx, 8
add ecx, eax
mov dword [esp + 0x48], eax
mov eax, dword [0x4ea778]
movzx ebp, word [eax + ecx*2]
movzx ecx, bp
movzx eax, bp
mov esi, eax
mov dword [esp + 0x34], ecx
mov edi, eax
mov dword [esp + 0x38], ecx
mov ecx, eax
cmp bp, word [esp + 0x58]
jne 0x40fe62
cmp byte [0x4ea776], 0
je 0x40fe62
cmp bl, 9
je 0x40fe62
mov edi, dword [esp + 0x14]
and dl, 0xf3
cmp edi, dword [0x4e8e6c]
jne 0x40fe10
test dh, dh
je 0x40fe10
mov eax, dword [0x4ea77c]
movzx ecx, dl
shl ecx, 9
add ecx, dword [esp + 0x40]
jmp 0x40fe1f
mov eax, dword [0x4ea778]
movzx ecx, dl
shl ecx, 8
add ecx, dword [esp + 0x48]
movzx eax, word [eax + ecx*2]
mov ecx, 0x7ff9
movzx ebp, ax
movzx edx, ax
and eax, 0x7fff
mov dword [esp + 0x34], ebp
mov dword [esp + 0x38], ebp
cmp ax, cx
jbe 0x410027
mov ecx, edx
mov esi, edx
mov edi, edx
mov edx, 0x7fff
cmp ax, dx
jb 0x40fe66
mov ecx, dword [esp + 0x144]
mov eax, edx
jmp 0x410037
mov ebp, dword [esp + 0x34]
test cx, cx
movzx eax, di
mov ecx, dword [esp + 0x144]
movzx edx, si
jns 0x40ff64
test cl, cl
jne 0x40ffe1
mov edi, dword [esp + 0x2c]
mov eax, 0x7fff
cmp word [edi + 4], ax
jne 0x40fe97
mov word [edi + 4], bp
mov ah, byte [0x4e8f7c]
mov ebp, 0x7fff
mov al, ah
and al, 0xc0
movzx ecx, al
neg ecx
sbb ecx, ecx
and ecx, 8
mov edx, ecx
or edx, 1
test ah, 0xc
cmove edx, ecx
mov ecx, edx
or ecx, 4
test ah, 0x30
cmove ecx, edx
movzx edx, word [edi + 6]
mov esi, ecx
or esi, 2
test ah, 3
cmove esi, ecx
cmp dx, bp
je 0x40ff38
nop word [eax + eax]
mov eax, dword [0x4e8fc4]
movzx ecx, dx
mov ecx, dword [eax + ecx*4]
cmp byte [ecx + 0x15], 0
movzx edx, word [ecx + 0xc]
jne 0x40ff03
movzx eax, byte [ecx + 0xf]
not eax
test byte [0x4e8f7c], al
jne 0x40ff33
cmp byte [ecx + 0x16], 0
jne 0x40ff33
cmp byte [ecx + 0x11], 0
jne 0x40ff33
cmp word [ecx + 0xa], 0
jne 0x40ff33
cmp word [ecx + 6], 0
jne 0x40ff33
mov eax, esi
not eax
test dword [ecx], eax
jne 0x40ff33
movzx eax, byte [0x4e8f7c]
not eax
test byte [ecx + 0xe], al
je 0x40ff4d
cmp dx, bp
jne 0x40fee0
mov ecx, dword [esp + 0x144]
mov eax, ebp
movzx esi, ax
mov dword [esp + 0x38], esi
jmp 0x40ffe5
movzx eax, word [ecx + 4]
mov ecx, dword [esp + 0x144]
movzx esi, ax
mov dword [esp + 0x38], esi
jmp 0x40ffe5
mov ebp, 0x7fff
cmp dx, bp
je 0x410035
and eax, ebp
test cl, cl
je 0x40fff8
cmp ax, word [0x4e8fd4]
jae 0x40ffda
mov esi, eax
mov eax, dword [0x4ea780]
cmp word [eax + esi*2], bp
je 0x40ffda
cmp byte [esp + 0x12], 0
jne 0x40ffcb
mov eax, dword [esp + 0x50]
lea ecx, [esp + 0x38]
push eax
lea eax, [esp + 0x15]
push eax
push dword [esp + 0x150]
call fcn.004143c0
mov ecx, dword [esp + 0x150]
add esp, 0xc
mov dword [esp + 0x44], eax
test eax, eax
je 0x40ffcb
mov esi, dword [esp + 0x38]
jmp 0x40ffe5
mov eax, dword [0x4ea780]
movzx esi, word [eax + esi*2]
mov dword [esp + 0x38], esi
jmp 0x40ffe5
cmp byte [esp + 0x12], 0
jne 0x41003f
mov esi, dword [esp + 0x34]
mov eax, 0x7fff
cmp si, ax
je 0x410037
mov ebp, dword [esp + 0x4c]
jmp 0x4100f6
mov esi, dword [esp + 0x34]
cmp ax, word [0x4e8fd4]
jae 0x40ffe5
mov edi, dword [esp + 0x2c]
cmp word [edi + 4], bp
jne 0x40ffe5
mov ecx, eax
mov eax, dword [0x4ea780]
mov ax, word [eax + ecx*2]
mov ecx, dword [esp + 0x144]
mov word [edi + 4], ax
jmp 0x40ffe5
mov ecx, dword [esp + 0x144]
mov eax, 0x7fff
jmp 0x41003b
mov eax, ebp
mov edi, dword [esp + 0x14]
test cl, cl
je 0x41006c
mov eax, dword [esp + 0x2c]
cmp byte [eax + 8], 0
jne 0x40f86f
cmp byte [eax + 9], 0
je 0x40f86f
cmp byte [esp + 0x11], 0
jne 0x40f86f
cmp byte [esp + 0x22], 0
jmp 0x40f850
mov esi, dword [esp + 0x2c]
cmp word [esi + 4], ax
lea ecx, [esi + 4]
jne 0x410092
push 0x7fff
push dword [esp + 0x20]
mov ecx, edi
push dword [esp + 0x150]
push 0
jmp 0x40f1a7
mov ebp, dword [esp + 0x148]
lea eax, [esp + 0x11]
push 0
push eax
push ebp
call fcn.004143c0
movzx ecx, byte [esp + 0x1d]
add esp, 0xc
test eax, eax
mov eax, 1
cmove ecx, eax
test cl, cl
sete al
mov byte [esi + 0x11], al
test cl, cl
je 0x4100d7
push 0x7fff
push dword [esp + 0x20]
mov ecx, edi
push ebp
push 0
jmp 0x40f1a7
push 0
push SysReAllocString
push 0x7fff
push dword [esp + 0x28]
push ebp
push 0
push ecx
mov ecx, edi
jmp 0x41078c
mov esi, dword [esp + 0x34]
mov edi, dword [esp + 0x148]
mov eax, esi
and eax, 0x7fff
cmp ax, word [0x4e8fd4]
jae 0x4101f7
cmp dword [esp + 0x44], 0
jne 0x4101f7
mov esi, dword [esp + 0x50]
lea eax, [esp + 0x11]
push esi
push eax
push edi
lea ecx, [esp + 0x44]
call fcn.004143c0
add esp, 0xc
mov dword [esp + 0x44], eax
test eax, eax
jne 0x4101f3
cmp word [esi], 0x69
jne 0x410154
push 0x7fff
push dword [esp + 0x20]
push edi
jmp 0x40f19c
mov ecx, dword [esp + 0x144]
test cl, cl
je 0x410190
mov eax, dword [esp + 0x2c]
cmp byte [eax + 0x11], 0
je 0x410180
push 0
push SysReAllocString
push 0x7fff
push dword [esp + 0x28]
push edi
push ecx
jmp 0x410787
push 0x7fff
push dword [esp + 0x20]
push edi
push ecx
jmp 0x40f1a3
mov esi, dword [esp + 0x2c]
mov eax, 0x7fff
cmp word [esi + 4], ax
lea ecx, [esi + 4]
je 0x4101e2
push 0
lea eax, [esp + 0x15]
mov byte [esp + 0x15], 0
push eax
push edi
call fcn.004143c0
add esp, 0xc
test eax, eax
je 0x4101de
cmp byte [esp + 0x11], 0
jne 0x4101de
push 0
push SysReAllocString
push 0x7fff
push dword [esp + 0x28]
mov byte [esi + 0x11], 1
push edi
push 0
jmp 0x410787
or byte [esi + 0xc], 8
push 0x7fff
push dword [esp + 0x20]
push edi
push 0
jmp 0x40f1a3
mov esi, dword [esp + 0x38]
mov ecx, dword [0x4e8fa4]
and esi, 0x7fff
test ecx, ecx
je 0x41022a
test ebp, ebp
jne 0x41021b
cmp byte [ecx + 8], 0
je 0x41022a
cmp byte [esp + 0x144], 0
jne 0x41022a
mov eax, dword [0x4e8fa4]
cmp byte [eax + 0x12], 0xff
je 0x41022a
mov byte [eax + 0x12], 2
test byte [0x4e8f7d], 0xcc
je 0x4102ed
cmp byte [esp + 0x11], 0
jne 0x4102ed
cmp byte [0x4ea775], 0
jne 0x41025b
mov eax, dword [esp + 0x14]
cmp eax, dword [0x4e8e68]
jne 0x4102ed
test byte [0x4e8f7d], 0xc0
je 0x410287
cmp si, word [0x4e8fd4]
jae 0x410287
mov eax, dword [0x4e8fc4]
movzx ecx, si
mov eax, dword [eax + ecx*4]
test byte [eax + 0xf], 0xc0
je 0x410287
mov byte [0x4ea774], 1
jmp 0x4102ed
cmp byte [0x4ea774], 0
jne 0x4102ed
mov al, byte [0x4e8f7d]
test al, 0xc
je 0x4102ed
test al, 3
jne 0x4102ed
cmp si, word [0x4e8fd4]
jae 0x4102ed
mov eax, dword [0x4e8fc4]
movzx ecx, si
mov eax, dword [eax + ecx*4]
test byte [eax + 0xf], 0xc
je 0x4102ed
cmp dword [0x4e8e6c], 0
je 0x4102c9
mov byte [0x4ea774], 1
jmp 0x4102ed
movzx eax, word [0x4e4d04]
mov ecx, 2
mov dl, byte [0x4e4c1e]
push 0xffc3d44d
push 0
push 0
push eax
call fcn.00419b50
add esp, 0x10
movzx ecx, si
lea eax, [ecx - 0x7ffa]
cmp eax, 4
ja case.default.0x4102ff
jmp dword [eax*4 + 0x4107d0]
cmp byte [0x4ea776], 0
je 0x410145
xor al, al
test byte [0x4e8f7d], 4
je 0x410325
mov edx, 0xa4
jmp 0x410337
test byte [0x4e8f7d], 8
movzx edx, al
mov eax, 0xa5
cmovne edx, eax
cmp byte [0x4ea776], 0
mov dword [esp + 0x48], edx
je 0x4103c5
mov eax, 0x7ffb
cmp si, ax
je case.0x4102ff.32765
test dl, dl
movzx eax, dl
push 0xffc3d44d
mov ecx, 0x12
mov ebp, 1
cmovne ecx, eax
push 0
push 0
mov dl, cl
mov ecx, ebp
push 0
call fcn.00419b50
mov esi, dword [esp + 0x3c]
add esp, 0x10
cmp byte [esi + 8], 0
je 0x4103b4
cmp bl, 0x5b
je 0x4103b4
cmp bl, 0x5c
je 0x4103b4
cmp byte [esp + 0x144], 0
jne 0x4103b4
push 0xffc3d44d
push 0
push 0
push 0
mov dl, bl
mov ecx, ebp
call fcn.00419b50
add esp, 0x10
mov byte [0x4ea776], 0
mov ebp, 0x7fff
jmp 0x41054d
cmp bl, 0xa4
je 0x4103d4
mov byte [esp + 0x2b], 0
cmp bl, 0xa5
jne 0x4103d9
mov byte [esp + 0x2b], 1
cmp bl, 0xa0
je 0x4103e7
cmp bl, 0xa1
je 0x4103e7
xor cl, cl
jmp 0x4103e9
mov cl, 1
mov byte [esp + 0x12], cl
cmp bl, 0xa2
je 0x4103fc
mov byte [esp + 0x13], 0
cmp bl, 0xa3
jne 0x410401
mov byte [esp + 0x13], 1
xor dl, dl
test byte [0x4e8f7d], 0x10
mov dword [esp + 0x44], edx
je 0x410417
mov edx, 0xa0
jmp 0x41043a
test byte [0x4e8f7d], 0x20
mov eax, dword [esp + 0x144]
je 0x41042b
mov dl, 0xa1
jmp 0x410441
test al, al
jne 0x410445
test cl, cl
movzx edx, dl
movzx eax, bl
cmovne edx, eax
mov eax, dword [esp + 0x144]
mov dword [esp + 0x44], edx
xor cl, cl
test byte [0x4e8f7d], 1
mov dword [esp + 0x40], ecx
je 0x41045b
mov byte [esp + 0x40], 0xa2
jmp 0x410481
test byte [0x4e8f7d], 2
je 0x41046b
mov byte [esp + 0x40], 0xa3
jmp 0x410481
test al, al
jne 0x410481
cmp byte [esp + 0x13], 0
movzx ecx, cl
movzx eax, bl
cmovne ecx, eax
mov dword [esp + 0x40], ecx
mov byte [esp + 0x13], 0
mov ebp, 1
test dl, dl
je 0x4104a9
push 0xffc3d44d
push 0
push 0
push 0
mov ecx, ebp
call fcn.00419b50
add esp, 0x10
mov byte [esp + 0x13], 1
mov eax, dword [esp + 0x40]
test al, al
je 0x4104c8
push 0xffc3d44d
push 0
push 0
push 0
mov dl, al
mov ecx, ebp
call fcn.00419b50
add esp, 0x10
cmp byte [esp + 0x2b], 0
je 0x4104dd
cmp byte [esp + 0x144], 0
jne 0x4104e5
mov al, bl
jmp 0x4104e1
mov eax, dword [esp + 0x48]
test al, al
jne 0x4104fc
push 0xffc3d44d
push 0
push 0
push 0
mov dl, 0x12
xor ecx, ecx
call fcn.00419b50
add esp, 0x10
push 0xffc3d44d
push 0
push 0
push 0
mov dl, 9
mov ecx, 2
call fcn.00419b50
add esp, 0x10
cmp byte [esp + 0x13], 0
je 0x41053d
cmp byte [esp + 0x12], 0
jne 0x41053d
mov dl, byte [esp + 0x44]
xor ecx, ecx
push 0xffc3d44d
push 0
push 0
push 0
call fcn.00419b50
add esp, 0x10
mov byte [0x4ea776], 1
mov ebp, 0x7fff
mov esi, dword [esp + 0x2c]
mov eax, dword [esp + 0x50]
mov ecx, 0x68
mov word [eax], cx
mov eax, dword [esp + 0x144]
test al, al
je 0x41072b
cmp byte [esp + 0x22], 0
je 0x4106fe
cmp byte [esi + 9], 0
je 0x4106fe
mov ebp, dword [esp + 0x24]
mov dl, bl
push 0xffc3d44e
push 0
push 0
push ebp
mov ecx, 1
call fcn.00419b50
push 0xffc3d44d
push 0
push 0
push ebp
mov dl, bl
mov ecx, 2
call fcn.00419b50
mov eax, dword [esp + 0x74]
add esp, 0x20
push 0
push SysReAllocString
push eax
push dword [esp + 0x28]
push edi
push dword [esp + 0x158]
jmp 0x410787
cmp byte [0x4ea776], 0
je 0x410145
mov eax, dword [esp + 0x144]
test al, al
jne 0x41061e
cmp bl, 0xa2
je 0x4105f9
cmp bl, 0xa3
je 0x4105f9
cmp bl, 0xa0
je 0x4105f9
cmp bl, 0xa1
jne 0x41061e
push 0xffc3d44d
push 0
push 0
mov ebp, 1
mov dl, bl
push 0
mov ecx, ebp
call fcn.00419b50
mov eax, dword [esp + 0x154]
add esp, 0x10
jmp 0x410623
mov ebp, 1
test byte [0x4e8f7d], 0xc
je 0x41063a
test al, al
je 0x410651
cmp bl, 0xa4
je 0x41063a
cmp bl, 0xa5
jne 0x410651
push 0xffc3d44d
push 0
push 0
push 0
mov dl, 0x12
xor ecx, ecx
call fcn.00419b50
add esp, 0x10
mov eax, 0x7ffd
cmp si, ax
jne 0x4106ab
test byte [0x4e8f7d], 0x30
jne 0x4106ab
push 0xffc3d44d
push 0
push 0
push 0
mov dl, 0x10
xor ecx, ecx
call fcn.00419b50
push 0xffc3d44d
push 0
push 0
push 0
mov dl, 9
mov ecx, 2
call fcn.00419b50
push 0xffc3d44d
push 0
push 0
push 0
mov dl, 0x10
mov ecx, ebp
call fcn.00419b50
add esp, 0x30
jmp 0x410544
push 0xffc3d44d
push 0
push 0
push 0
mov dl, 9
mov ecx, 2
call fcn.00419b50
add esp, 0x10
jmp 0x410544
mov ebp, ecx
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x54], ebp
mov eax, dword [ecx + 8]
test eax, eax
je 0x410549
cmp byte [eax], 5
mov esi, dword [esp + 0x2c]
jne 0x41054d
movzx eax, word [ecx + 0x18]
shl eax, 0x10
or ebp, eax
mov dword [esp + 0x54], ebp
jmp 0x41054d
cmp byte [esi + 8], 0
je 0x410717
cmp byte [esi + 0x11], 0
mov ecx, dword [esp + 0x1c]
jne 0x41077c
push ebp
push ecx
push edi
push eax
jmp 0x40f1a3
cmp byte [esp + 0x11], 0
je 0x410778
mov ecx, dword [esp + 0x1c]
push ebp
push ecx
push edi
push eax
jmp 0x40f1a3
cmp byte [esp + 0x11], 0
mov byte [esi + 0x10], 1
je 0x410747
mov ecx, dword [esp + 0x1c]
or byte [esi + 0xc], 8
push ebp
push ecx
push edi
push eax
jmp 0x40f1a3
cmp bl, 0xa4
je 0x410751
cmp bl, 0xa5
jne 0x410774
push 0xffc3d450
push 0
push 0
push dword [esp + 0x30]
mov dl, bl
mov ecx, 1
call fcn.00419b50
mov eax, dword [esp + 0x154]
add esp, 0x10
mov byte [esi + 0x11], 1
mov ecx, dword [esp + 0x1c]
push 0
push SysReAllocString
push ebp
push ecx
push edi
push eax
push ecx
mov ecx, dword [esp + 0x30]
push ebx
mov edx, dword [esp + 0x158]
call fcn.004107f0
add esp, 0x20
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x120
ret