Function at 0x4171f0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x45b8d5
mov eax, dword fs:[0]
push eax
sub esp, 0x888
mov eax, dword [0x46e3d0]
xor eax, esp
mov dword [esp + 0x880], eax
push ebx
push esi
push edi
mov eax, dword [0x46e3d0]
xor eax, esp
push eax
lea eax, [esp + 0x898]
mov dword fs:[0], eax
mov edi, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
push edi
push 0x462348
push 0x400
mov dword [esp + 0x40], eax
mov dword [0x471e68], eax
lea eax, [esp + 0x98]
push 0x200
push eax
call fcn.0043ef21
add esp, 0x14
lea ecx, [esp + 0x38]
call fcn.0042a750
xor ebx, ebx
mov dword [esp + 0x8a0], ebx
lea eax, [esp + 0x8c]
mov dword [esp + 0x2c], 7
mov dword [esp + 0x28], ebx
mov word [esp + 0x18], bx
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x417290
sub eax, edx
sar eax, 1
push eax
lea ecx, [esp + 0x90]
push ecx
lea esi, [esp + 0x1c]
call fcn.00406f20
mov edx, esi
push ebx
push edx
or eax, 0xffffffff
lea esi, [esp + 0x40]
mov byte [esp + 0x8a8], 1
call fcn.00406d90
cmp dword [esp + 0x2c], 8
jb 0x4172dd
mov eax, dword [esp + 0x18]
push eax
call fcn.0043ef40
add esp, 4
cmp dword [esp + 0x50], 8
mov edx, dword [esp + 0x3c]
mov dword [esp + 0x2c], 7
mov dword [esp + 0x28], ebx
mov word [esp + 0x18], bx
jae 0x4172fd
lea edx, [esp + 0x3c]
cmp dword [0x471b30], ebx
je 0x417340
mov eax, edx
lea esi, [eax + 2]
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x417310
mov ecx, dword [0x471b30]
sub eax, esi
sar eax, 1
push ecx
add eax, eax
push eax
push 1
push edx
call fcn.0043fe21
mov ecx, dword [0x471b30]
push ecx
call fcn.004402ef
add esp, 0x14
mov dword [esp + 0x8a0], 0xffffffff
cmp dword [esp + 0x50], 8
jb 0x41735f
mov edx, dword [esp + 0x3c]
push edx
call fcn.0043ef40
add esp, 4
mov eax, edi
mov dword [esp + 0x50], 7
mov dword [esp + 0x4c], ebx
mov word [esp + 0x3c], bx
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x417375
sub eax, edx
sar eax, 1
push eax
push edi
lea esi, [esp + 0x40]
call fcn.00406f20
push 0xffffffffffffffff
push ebx
mov eax, esi
mov ecx, 0x47202c
mov dword [esp + 0x8a8], 2
call fcn.00406cc0
mov dword [esp + 0x8a0], 0xffffffff
cmp dword [esp + 0x50], 8
jb 0x4173c8
mov eax, dword [esp + 0x3c]
push eax
call fcn.0043ef40
add esp, 4
mov eax, edi
mov dword [esp + 0x50], 7
mov dword [esp + 0x4c], ebx
mov word [esp + 0x3c], bx
lea edx, [eax + 2]
mov edi, edi
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x4173e0
sub eax, edx
sar eax, 1
push eax
push edi
lea esi, [esp + 0x40]
call fcn.00406f20
mov ecx, esi
mov dword [esp + 0x8a0], 3
call fcn.00418940
mov dword [esp + 0x8a0], 0xffffffff
cmp dword [esp + 0x50], 8
mov esi, eax
jb 0x41742d
mov ecx, dword [esp + 0x3c]
push ecx
call fcn.0043ef40
add esp, 4
cmp esi, ebx
je 0x417643
cmp dword [0x471ee4], ebx
je 0x417643
lea edx, [esp + 0x54]
push edx
call fcn.0041fb00
add esp, 4
push 0xffffffffffffffff
push ebx
mov ecx, 0x471fbc
mov dword [esp + 0x8a8], 4
call fcn.00406cc0
mov dword [esp + 0x8a0], 0xffffffff
cmp dword [esp + 0x6c], 8
jb 0x417485
mov eax, dword [esp + 0x58]
push eax
call fcn.0043ef40
add esp, 4
mov ecx, dword [0x471e68]
push ebx
push 0x416a70
push ebx
push 0xa2
push ecx
call dword [sym.imp.USER32.dll_DialogBoxParamW]
mov edx, dword [esp + 0x34]
push 0x6d
push edx
call dword [sym.imp.USER32.dll_LoadAcceleratorsW]
mov edi, dword [sym.imp.USER32.dll_GetMessageW]
push ebx
push ebx
mov esi, eax
push ebx
lea eax, [esp + 0x60]
push eax
call edi
test eax, eax
je 0x4174fa
mov edx, dword [esp + 0x54]
lea ecx, [esp + 0x54]
push ecx
push esi
push edx
call dword [sym.imp.USER32.dll_TranslateAcceleratorW]
test eax, eax
jne 0x4174ec
lea eax, [esp + 0x54]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea ecx, [esp + 0x54]
push ecx
call dword [sym.imp.USER32.dll_DispatchMessageW]
push ebx
push ebx
push ebx
lea edx, [esp + 0x60]
push edx
call edi
test eax, eax
jne 0x4174c1
push 0x462378
push 0x400
lea eax, [esp + 0x94]
push 0x200
push eax
call fcn.0043ef21
add esp, 0x10
lea ecx, [esp + 0x38]
call fcn.0042a750
mov dword [esp + 0x8a0], 5
mov edi, 7
lea eax, [esp + 0x8c]
mov dword [esp + 0x2c], edi
mov dword [esp + 0x28], ebx
mov word [esp + 0x18], bx
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x417550
sub eax, edx
sar eax, 1
push eax
lea ecx, [esp + 0x90]
push ecx
lea esi, [esp + 0x1c]
call fcn.00406f20
mov edx, esi
push ebx
push edx
or eax, 0xffffffff
lea esi, [esp + 0x40]
mov byte [esp + 0x8a8], 6
call fcn.00406d90
mov esi, 8
cmp dword [esp + 0x2c], esi
jb 0x4175a1
mov eax, dword [esp + 0x18]
push eax
call fcn.0043ef40
add esp, 4
cmp dword [esp + 0x50], esi
mov edx, dword [esp + 0x3c]
mov dword [esp + 0x2c], edi
mov dword [esp + 0x28], ebx
mov word [esp + 0x18], bx
jae 0x4175bc
lea edx, [esp + 0x3c]
mov edi, dword [0x471b30]
cmp edi, ebx
je 0x4175fb
mov eax, edx
lea esi, [eax + 2]
jmp 0x4175d0
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x4175d0
sub eax, esi
sar eax, 1
push edi
lea ecx, [eax + eax]
push ecx
push 1
push edx
call fcn.0043fe21
mov edx, dword [0x471b30]
push edx
call fcn.004402ef
add esp, 0x14
mov dword [esp + 0x8a0], 0xffffffff
cmp dword [esp + 0x50], 8
jb 0x41761a
mov eax, dword [esp + 0x3c]
push eax
call fcn.0043ef40
add esp, 4
mov ecx, dword [0x471e7c]
cmp ecx, ebx
je 0x417634
mov edx, dword [ecx]
mov eax, dword [edx + 4]
push ebx
push 1
call eax
mov dword [0x471e7c], ebx
mov ecx, 0x471fbc
call fcn.0041f7a0
jmp 0x418302
call fcn.0041a2b0
test eax, eax
jne 0x417664
push 0x40
push 0x4602a4
push 0x4623a0
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x418302
push 0x462410
push 0x400
lea ecx, [esp + 0x94]
push 0x200
push ecx
call fcn.0043ef21
add esp, 0x10
lea ecx, [esp + 0x38]
call fcn.0042a750
mov edi, 7
mov dword [esp + 0x8a0], edi
lea eax, [esp + 0x8c]
mov dword [esp + 0x2c], edi
mov dword [esp + 0x28], ebx
mov word [esp + 0x18], bx
lea edx, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x4176b0
sub eax, edx
sar eax, 1
push eax
lea edx, [esp + 0x90]
push edx
lea esi, [esp + 0x1c]
call fcn.00406f20
mov eax, esi
push ebx
push eax
or eax, 0xffffffff
lea esi, [esp + 0x40]
mov byte [esp + 0x8a8], 8
call fcn.00406d90
mov esi, 8
cmp dword [esp + 0x2c], esi
jb 0x417701
mov ecx, dword [esp + 0x18]
push ecx
call fcn.0043ef40
add esp, 4
cmp dword [esp + 0x50], esi
mov edx, dword [esp + 0x3c]
mov dword [esp + 0x2c], edi
mov dword [esp + 0x28], ebx
mov word [esp + 0x18], bx
jae 0x41771c
lea edx, [esp + 0x3c]
mov edi, dword [0x471b30]
cmp edi, ebx
je 0x41775a
mov eax, edx
lea esi, [eax + 2]
jmp 0x417730
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x417730
sub eax, esi
sar eax, 1
push edi
add eax, eax
push eax
push 1
push edx
call fcn.0043fe21
mov ecx, dword [0x471b30]
push ecx
call fcn.004402ef
add esp, 0x14
mov dword [esp + 0x8a0], 0xffffffff
cmp dword [esp + 0x50], 8
jb 0x417779
mov edx, dword [esp + 0x3c]
push edx
call fcn.0043ef40
add esp, 4
call fcn.0041a620
test eax, eax
jne 0x417898
push 0x462468
push 0x400
lea eax, [esp + 0x94]
push 0x200
push eax
call fcn.0043ef21
add esp, 0x10
lea ecx, [esp + 0x38]
call fcn.0042a750
mov dword [esp + 0x8a0], 9
mov edi, 7
lea eax, [esp + 0x8c]
mov dword [esp + 0x2c], edi
mov dword [esp + 0x28], ebx
mov word [esp + 0x18], bx
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x4177d5
sub eax, edx
sar eax, 1
push eax
lea ecx, [esp + 0x90]
push ecx
lea esi, [esp + 0x1c]
call fcn.00406f20
mov edx, esi
push ebx
push edx
or eax, 0xffffffff
lea esi, [esp + 0x40]
mov byte [esp + 0x8a8], 0xa
call fcn.00406d90
mov esi, 8
cmp dword [esp + 0x2c], esi
jb 0x417826
mov eax, dword [esp + 0x18]
push eax
call fcn.0043ef40
add esp, 4
cmp dword [esp + 0x50], esi
mov edx, dword [esp + 0x3c]
mov dword [esp + 0x2c], edi
mov dword [esp + 0x28], ebx
mov word [esp + 0x18], bx
jae 0x417841
lea edx, [esp + 0x3c]
mov edi, dword [0x471b30]
cmp edi, ebx
je 0x41787b
mov eax, edx
lea esi, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x417850
sub eax, esi
sar eax, 1
push edi
lea ecx, [eax + eax]
push ecx
push 1
push edx
call fcn.0043fe21
mov edx, dword [0x471b30]
push edx
call fcn.004402ef
add esp, 0x14
cmp dword [esp + 0x50], 8
jb 0x418302
mov eax, dword [esp + 0x3c]
push eax
call fcn.0043ef40
add esp, 4
jmp 0x418302
push 0x4624d0
push 0x400
lea ecx, [esp + 0x94]
push 0x200
push ecx
call fcn.0043ef21
add esp, 0x10
lea ecx, [esp + 0x38]
call fcn.0042a750
mov dword [esp + 0x8a0], 0xb
mov edi, 7
lea eax, [esp + 0x8c]
mov dword [esp + 0x2c], edi
mov dword [esp + 0x28], ebx
mov word [esp + 0x18], bx
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x4178e7
sub eax, edx
sar eax, 1
push eax
lea edx, [esp + 0x90]
push edx
lea esi, [esp + 0x1c]
call fcn.00406f20
mov eax, esi
push ebx
push eax
or eax, 0xffffffff
lea esi, [esp + 0x40]
mov byte [esp + 0x8a8], 0xc
call fcn.00406d90
mov esi, 8
cmp dword [esp + 0x2c], esi
jb 0x417938
mov ecx, dword [esp + 0x18]
push ecx
call fcn.0043ef40
add esp, 4
cmp dword [esp + 0x50], esi
mov edx, dword [esp + 0x3c]
mov dword [esp + 0x2c], edi
mov dword [esp + 0x28], ebx
mov word [esp + 0x18], bx
jae 0x417953
lea edx, [esp + 0x3c]
mov edi, dword [0x471b30]
cmp edi, ebx
je 0x41798c
mov eax, edx
lea esi, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x417962
sub eax, esi
sar eax, 1
push edi
add eax, eax
push eax
push 1
push edx
call fcn.0043fe21
mov ecx, dword [0x471b30]
push ecx
call fcn.004402ef
add esp, 0x14
mov dword [esp + 0x8a0], 0xffffffff
cmp dword [esp + 0x50], 8
jb 0x4179ab
mov edx, dword [esp + 0x3c]
push edx
call fcn.0043ef40
add esp, 4
mov ecx, 0x471e68
call fcn.00415c20
test eax, eax
jne 0x417af2
push 0x462530
push 0x400
lea eax, [esp + 0x94]
push 0x200
push eax
call fcn.0043ef21
add esp, 0x10
lea ecx, [esp + 0x38]
call fcn.0042a750
mov dword [esp + 0x8a0], 0xd
mov edi, 7
lea eax, [esp + 0x8c]
mov dword [esp + 0x2c], edi
mov dword [esp + 0x28], ebx
mov word [esp + 0x18], bx
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x417a10
sub eax, edx
sar eax, 1
push eax
lea ecx, [esp + 0x90]
push ecx
lea esi, [esp + 0x1c]
call fcn.00406f20
mov edx, esi
push ebx
push edx
or eax, 0xffffffff
lea esi, [esp + 0x40]
mov byte [esp + 0x8a8], 0xe
call fcn.00406d90
mov esi, 8
cmp dword [esp + 0x2c], esi
jb 0x417a61
mov eax, dword [esp + 0x18]
push eax
call fcn.0043ef40
add esp, 4
cmp dword [esp + 0x50], esi
mov edx, dword [esp + 0x3c]
mov dword [esp + 0x2c], edi
mov dword [esp + 0x28], ebx
mov word [esp + 0x18], bx
jae 0x417a7c
lea edx, [esp + 0x3c]
mov edi, dword [0x471b30]
cmp edi, ebx
je 0x417abb
mov eax, edx
lea esi, [eax + 2]
jmp 0x417a90
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x417a90
sub eax, esi
sar eax, 1
push edi
lea ecx, [eax + eax]
push ecx
push 1
push edx
call fcn.0043fe21
mov edx, dword [0x471b30]
push edx
call fcn.004402ef
add esp, 0x14
mov dword [esp + 0x8a0], 0xffffffff
cmp dword [esp + 0x50], 8
jb 0x417ada
mov eax, dword [esp + 0x3c]
push eax
call fcn.0043ef40
add esp, 4
push 0x30
push 0x4602a4
push ebx
push ecx
call fcn.00406c20
mov ecx, 0x46257c
jmp 0x4182f8
push 0x4625a0
push 0x400
lea ecx, [esp + 0x94]
push 0x200
push ecx
call fcn.0043ef21
add esp, 0x10
lea ecx, [esp + 0x38]
call fcn.0042a750
mov dword [esp + 0x8a0], 0xf
mov edi, 7
lea eax, [esp + 0x8c]
mov dword [esp + 0x2c], edi
mov dword [esp + 0x28], ebx
mov word [esp + 0x18], bx
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x417b41
sub eax, edx
sar eax, 1
push eax
lea edx, [esp + 0x90]
push edx
lea esi, [esp + 0x1c]
call fcn.00406f20
mov eax, esi
push ebx
push eax
or eax, 0xffffffff
lea esi, [esp + 0x40]
mov byte [esp + 0x8a8], 0x10
call fcn.00406d90
mov esi, 8
cmp dword [esp + 0x2c], esi
jb 0x417b92
mov ecx, dword [esp + 0x18]
push ecx
call fcn.0043ef40
add esp, 4
cmp dword [esp + 0x50], esi
mov edx, dword [esp + 0x3c]
mov dword [esp + 0x2c], edi
mov dword [esp + 0x28], ebx
mov word [esp + 0x18], bx
jae 0x417bad
lea edx, [esp + 0x3c]
mov edi, dword [0x471b30]
cmp edi, ebx
je 0x417bea
mov eax, edx
lea esi, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x417bc0
sub eax, esi
sar eax, 1
push edi
add eax, eax
push eax
push 1
push edx
call fcn.0043fe21
mov ecx, dword [0x471b30]
push ecx
call fcn.004402ef
add esp, 0x14
mov dword [esp + 0x8a0], 0xffffffff
cmp dword [esp + 0x50], 8
jb 0x417c09
mov edx, dword [esp + 0x3c]
push edx
call fcn.0043ef40
add esp, 4
call fcn.00428730
sub eax, 1
je 0x4182e5
sub eax, 1
je 0x4182d0
sub eax, 1
je 0x4182bb
push 0x462650
push 0x400
lea eax, [esp + 0x94]
push 0x200
push eax
call fcn.0043ef21
add esp, 0x10
lea ecx, [esp + 0x54]
call fcn.0042a750
mov dword [esp + 0x8a0], 0x11
lea eax, [esp + 0x8c]
mov dword [esp + 0x50], 7
mov dword [esp + 0x4c], ebx
mov word [esp + 0x3c], bx
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x417c77
sub eax, edx
sar eax, 1
push eax
lea ecx, [esp + 0x90]
push ecx
lea esi, [esp + 0x40]
call fcn.00406f20
mov edx, esi
push ebx
push edx
or eax, 0xffffffff
lea esi, [esp + 0x5c]
mov byte [esp + 0x8a8], 0x12
call fcn.00406d90
mov edi, 8
cmp dword [esp + 0x50], edi
jb 0x417cc8
mov eax, dword [esp + 0x3c]
push eax
call fcn.0043ef40
add esp, 4
cmp dword [esp + 0x6c], edi
mov esi, dword [esp + 0x58]
jae 0x417cd6
lea esi, [esp + 0x58]
call fcn.0041a270
mov dword [esp + 0x8a0], 0xffffffff
cmp dword [esp + 0x6c], edi
jb 0x417cf9
mov ecx, dword [esp + 0x58]
push ecx
call fcn.0043ef40
add esp, 4
lea edx, [esp + 0x54]
push edx
call fcn.0041fb00
add esp, 4
push 0xffffffffffffffff
push ebx
mov ecx, 0x471fbc
mov dword [esp + 0x8a8], 0x13
call fcn.00406cc0
lea ecx, [esp + 0x54]
mov dword [esp + 0x8a0], 0xffffffff
call fcn.00406ab0
cmp dword [0x471fd4], edi
mov eax, dword [0x471fc0]
jae 0x417d44
mov eax, 0x471fc0
push eax
push 0x4626b8
push 0x400
lea eax, [esp + 0x98]
push 0x200
push eax
call fcn.0043ef21
add esp, 0x14
lea ecx, [esp + 0x38]
call fcn.0042a750
mov dword [esp + 0x8a0], 0x14
lea eax, [esp + 0x8c]
mov dword [esp + 0x6c], 7
mov dword [esp + 0x68], ebx
mov word [esp + 0x58], bx
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x417d93
sub eax, edx
sar eax, 1
push eax
lea ecx, [esp + 0x90]
push ecx
lea esi, [esp + 0x5c]
call fcn.00406f20
mov edx, esi
push ebx
push edx
or eax, 0xffffffff
lea esi, [esp + 0x40]
mov byte [esp + 0x8a8], 0x15
call fcn.00406d90
cmp dword [esp + 0x6c], edi
jb 0x417ddf
mov eax, dword [esp + 0x58]
push eax
call fcn.0043ef40
add esp, 4
cmp dword [esp + 0x50], edi
mov esi, dword [esp + 0x3c]
jae 0x417ded
lea esi, [esp + 0x3c]
call fcn.0041a270
mov dword [esp + 0x8a0], 0xffffffff
cmp dword [esp + 0x50], edi
jb 0x417e10
mov ecx, dword [esp + 0x3c]
push ecx
call fcn.0043ef40
add esp, 4
mov edx, dword [0x471e68]
push ebx
push 0x406350
push ebx
push 0x3ea
push edx
call dword [sym.imp.USER32.dll_DialogBoxParamW]
cmp eax, 1
mov edi, dword [sym.imp.USER32.dll_GetMessageW]
jne 0x41804e
call fcn.00406bc0
xor ecx, ecx
mov esi, eax
call fcn.0040fd00
call fcn.00416790
test eax, eax
jne 0x417edd
push 0x4622d0
push 0x400
lea eax, [esp + 0x94]
push 0x200
push eax
call fcn.0043ef21
add esp, 0x10
lea ecx, [esp + 0x54]
call fcn.0042a750
lea edx, [esp + 0x8c]
lea eax, [esp + 0x70]
mov dword [esp + 0x8a0], 0x16
call fcn.00406a70
push ebx
push eax
or eax, 0xffffffff
lea esi, [esp + 0x5c]
mov byte [esp + 0x8a8], 0x17
call fcn.00406d90
lea ecx, [esp + 0x70]
call fcn.00406ab0
cmp dword [esp + 0x6c], 8
mov esi, dword [esp + 0x58]
jae 0x417ec4
lea esi, [esp + 0x58]
call fcn.0041a270
lea ecx, [esp + 0x54]
mov dword [esp + 0x8a0], 0xffffffff
call fcn.00406ab0
call fcn.00426440
cmp eax, ebx
jne 0x417f76
push 0x462308
push 0x400
lea ecx, [esp + 0x94]
push 0x200
push ecx
call fcn.0043ef21
add esp, 0x10
lea ecx, [esp + 0x54]
call fcn.0042a750
lea edx, [esp + 0x8c]
lea eax, [esp + 0x70]
mov dword [esp + 0x8a0], 0x18
call fcn.00406a70
push ebx
push eax
or eax, 0xffffffff
lea esi, [esp + 0x5c]
mov byte [esp + 0x8a8], 0x19
call fcn.00406d90
lea ecx, [esp + 0x70]
call fcn.00406ab0
cmp dword [esp + 0x6c], 8
mov esi, dword [esp + 0x58]
jae 0x417f5b
lea esi, [esp + 0x58]
call fcn.0041a270
lea ecx, [esp + 0x54]
mov dword [esp + 0x8a0], 0xffffffff
call fcn.00406ab0
jmp 0x417f92
movzx ecx, word [0x471e8c]
cmp ecx, ebx
jbe 0x417f92
mov edi, dword [0x471f60]
call fcn.00418330
mov edi, dword [sym.imp.USER32.dll_GetMessageW]
mov edx, dword [0x471f5c]
push 0x10
call fcn.00406330
add esp, 4
mov edx, str.Trial0
lea eax, [esp + 0x54]
call fcn.00406a70
mov ecx, eax
mov esi, str.Trial1
mov dword [esp + 0x8a0], 0x1a
call fcn.00411e30
lea ecx, [esp + 0x54]
mov byte [esp + 0x33], al
mov dword [esp + 0x8a0], 0xffffffff
call fcn.00406ab0
push 1
mov edx, 1
call fcn.00406330
mov edx, dword [esp + 0x38]
add esp, 4
push 0x6d
push edx
call dword [sym.imp.USER32.dll_LoadAcceleratorsW]
push ebx
push ebx
mov esi, eax
push ebx
lea eax, [esp + 0x44]
push eax
call edi
test eax, eax
je 0x418049
jmp 0x418010
mov edx, dword [esp + 0x38]
lea ecx, [esp + 0x38]
push ecx
push esi
push edx
call dword [sym.imp.USER32.dll_TranslateAcceleratorW]
test eax, eax
jne 0x41803b
lea eax, [esp + 0x38]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea ecx, [esp + 0x38]
push ecx
call dword [sym.imp.USER32.dll_DispatchMessageW]
push ebx
push ebx
push ebx
lea edx, [esp + 0x44]
push edx
call edi
test eax, eax
jne 0x418010
call fcn.00406bc0
push 0x462708
push 0x400
lea eax, [esp + 0x94]
push 0x200
push eax
call fcn.0043ef21
add esp, 0x10
lea ecx, [esp + 0x38]
call fcn.0042a750
mov dword [esp + 0x8a0], 0x1b
lea eax, [esp + 0x8c]
mov dword [esp + 0x6c], 7
mov dword [esp + 0x68], ebx
mov word [esp + 0x58], bx
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x4180a0
sub eax, edx
sar eax, 1
push eax
lea ecx, [esp + 0x90]
push ecx
lea esi, [esp + 0x5c]
call fcn.00406f20
mov edx, esi
push ebx
push edx
or eax, 0xffffffff
lea esi, [esp + 0x40]
mov byte [esp + 0x8a8], 0x1c
call fcn.00406d90
cmp dword [esp + 0x6c], 8
jb 0x4180ed
mov eax, dword [esp + 0x58]
push eax
call fcn.0043ef40
add esp, 4
cmp dword [esp + 0x50], 8
mov esi, dword [esp + 0x3c]
jae 0x4180fc
lea esi, [esp + 0x3c]
call fcn.0041a270
mov dword [esp + 0x8a0], 0xffffffff
cmp dword [esp + 0x50], 8
jb 0x418120
mov ecx, dword [esp + 0x3c]
push ecx
call fcn.0043ef40
add esp, 4
mov dword [0x471300], ebx
call fcn.00416770
mov edx, dword [0x471e68]
push ebx
push 0x416a70
push ebx
push 0xa2
push edx
call dword [sym.imp.USER32.dll_DialogBoxParamW]
mov eax, dword [esp + 0x34]
push 0x6d
push eax
call dword [sym.imp.USER32.dll_LoadAcceleratorsW]
push ebx
push ebx
push ebx
lea ecx, [esp + 0x60]
push ecx
mov esi, eax
call edi
test eax, eax
je 0x41819a
mov eax, dword [esp + 0x54]
lea edx, [esp + 0x54]
push edx
push esi
push eax
call dword [sym.imp.USER32.dll_TranslateAcceleratorW]
test eax, eax
jne 0x41818c
lea ecx, [esp + 0x54]
push ecx
call dword [sym.imp.USER32.dll_TranslateMessage]
lea edx, [esp + 0x54]
push edx
call dword [sym.imp.USER32.dll_DispatchMessageW]
push ebx
push ebx
push ebx
lea eax, [esp + 0x60]
push eax
call edi
test eax, eax
jne 0x418161
push 0x462378
push 0x400
lea ecx, [esp + 0x494]
push 0x200
push ecx
call fcn.0043ef21
add esp, 0x10
lea ecx, [esp + 0x70]
call fcn.0042a750
mov dword [esp + 0x8a0], 0x1d
lea eax, [esp + 0x48c]
mov dword [esp + 0x2c], 7
mov dword [esp + 0x28], ebx
mov word [esp + 0x18], bx
lea edx, [eax + 2]
jmp 0x4181f0
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x4181f0
sub eax, edx
sar eax, 1
push eax
lea edx, [esp + 0x490]
push edx
lea esi, [esp + 0x1c]
call fcn.00406f20
mov eax, esi
push ebx
push eax
or eax, 0xffffffff
lea esi, [esp + 0x78]
mov byte [esp + 0x8a8], 0x1e
call fcn.00406d90
mov edi, 8
cmp dword [esp + 0x2c], edi
jb 0x418241
mov ecx, dword [esp + 0x18]
push ecx
call fcn.0043ef40
add esp, 4
cmp dword [esp + 0x88], edi
mov esi, dword [esp + 0x74]
mov dword [esp + 0x2c], 7
mov dword [esp + 0x28], ebx
mov word [esp + 0x18], bx
jae 0x418263
lea esi, [esp + 0x74]
call fcn.0041a270
mov dword [esp + 0x8a0], 0xffffffff
cmp dword [esp + 0x88], edi
jb 0x418289
mov edx, dword [esp + 0x74]
push edx
call fcn.0043ef40
add esp, 4
mov dword [esp + 0x88], 7
mov dword [esp + 0x84], ebx
mov word [esp + 0x74], bx
call fcn.00416a50
mov ecx, 0x471fbc
call fcn.0041f7a0
mov ebx, 0x471e68
call fcn.00415df0
jmp 0x418302
push 0x30
push 0x4602a4
push ebx
push ecx
call fcn.00406c20
mov ecx, 0x4625ec
jmp 0x4182f8
push 0x30
push 0x4602a4
push ebx
push ecx
call fcn.00406c20
mov ecx, 0x462638
jmp 0x4182f8
push 0x30
push 0x4602a4
push ebx
push ecx
call fcn.00406c20
mov ecx, 0x462614
add esp, 4
mov edx, eax
call fcn.00410df0
xor eax, eax
mov ecx, dword [esp + 0x898]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x880]
xor ecx, esp
call fcn.0043ef12
mov esp, ebp
pop ebp
ret 0x10