Function at 0x433784
Capabilities:
Authenticate hmac
Encrypt data using speck
Log keystrokes via application hook
Parse credit card information
Parse pe header

Disassembly:
push ebx
push esi
push edi
push ebp
add esp, 0xfffffe4c
mov dword [esp], edx
mov ebp, eax
mov byte [esp + 4], 0
mov eax, dword [0x48d8b0]
mov byte [eax], 1
mov eax, dword [esp]
mov dword [ebp], eax
mov eax, dword [0x48d2e8]
mov edx, dword [esp]
mov dword [eax], edx
mov dl, 1
mov eax, dword [esp]
call fcn.0041552c
mov eax, dword [0x48d8ac]
movzx eax, word [eax]
mov ecx, 0x64
xor edx, edx
div ecx
cmp edx, 0x13
jne 0x433815
cmp byte [ebp + 0x54], 0x3a
jne 0x4337ea
mov eax, dword [0x48d510]
cmp dword [eax], 0
je 0x4337ea
mov eax, dword [0x48d4cc]
cmp dword [eax], 0
jne 0x433815
push 0xfffffffffffffff0
mov eax, dword [ebp]
push eax
call sub.user32.dll_GetWindowLongA
mov edx, dword [0x48d498]
mov dword [edx], eax
mov eax, dword [0x48d498]
mov eax, dword [eax]
and eax, 0xfffdffff
push eax
push 0xfffffffffffffff0
mov eax, dword [ebp]
push eax
call sub.user32.dll_SetWindowLongA
mov al, byte [ebp + 0x54]
cmp al, 0x28
je 0x433828
cmp al, 0x29
je 0x433828
cmp al, 1
je 0x433828
cmp al, 0x48
jne 0x433838
push 0x64
mov eax, dword [ebp]
push eax
call sub.user32.dll_GetDlgItem
mov dword [0x49ba70], eax
cmp byte [ebp + 0x54], 1
jne 0x43385e
push 0x65
mov eax, dword [ebp]
push eax
call sub.user32.dll_GetDlgItem
mov dword [0x49ba74], eax
push 0x66
mov eax, dword [ebp]
push eax
call sub.user32.dll_GetDlgItem
mov dword [0x49ba78], eax
cmp byte [ebp + 0x54], 0x2e
jne 0x4338a2
mov bl, 1
lea eax, [ebp + 0x48]
mov dword [esp + 0x40], eax
xor eax, eax
mov al, bl
add eax, 0xce
push eax
mov eax, dword [ebp]
push eax
call sub.user32.dll_GetDlgItem
mov esi, eax
mov eax, dword [esp + 0x40]
mov dword [eax], esi
push 0
push 0x14
push 0x141
push esi
call sub.user32.dll_SendMessageA
inc ebx
add dword [esp + 0x40], 4
cmp bl, 3
jne 0x43386d
cmp byte [ebp + 0x54], 0x3c
jne 0x4338ce
push 0x30a
mov eax, dword [ebp]
push eax
call sub.user32.dll_GetDlgItem
mov dword [ebp + 0x48], eax
push 0
push 0xff
push 0x141
mov eax, dword [ebp + 0x48]
push eax
call sub.user32.dll_SendMessageA
mov al, byte [ebp + 0x54]
cmp al, 0x20
je 0x4338d9
cmp al, 0x21
jne 0x4338e0
mov byte [esp + 0x26], 0x32
jmp 0x43391b
cmp al, 0x17
jne 0x4338eb
mov byte [esp + 0x26], 0x13
jmp 0x43391b
cmp al, 0x18
jne 0x4338f6
mov byte [esp + 0x26], 0x16
jmp 0x43391b
cmp byte [ebp + 0x54], 0x12
je 0x433902
cmp byte [ebp + 0x54], 0x15
jne 0x433909
mov byte [esp + 0x26], 0x32
jmp 0x43391b
cmp byte [ebp + 0x54], 0x1e
jne 0x433916
mov byte [esp + 0x26], 0xc
jmp 0x43391b
mov byte [esp + 0x26], 0x64
mov al, byte [ebp + 0x54]
cmp al, 0x12
je 0x433952
cmp al, 0x15
je 0x433952
cmp al, 0x16
je 0x433952
cmp al, 0x14
je 0x433952
cmp al, 0x1c
je 0x433952
cmp al, 0x1d
je 0x433952
cmp al, 0x17
je 0x433952
cmp al, 0x20
je 0x433952
cmp al, 0x21
je 0x433952
cmp al, 0x18
je 0x433952
cmp al, 0x1e
je 0x433952
cmp al, 0x42
je 0x433952
cmp al, 0x43
jne 0x43397a
push 0x30a
mov eax, dword [ebp]
push eax
call sub.user32.dll_GetDlgItem
mov dword [ebp + 0x48], eax
push 0
xor eax, eax
mov al, byte [esp + 0x2a]
push eax
push 0x141
mov eax, dword [ebp + 0x48]
push eax
call sub.user32.dll_SendMessageA
cmp byte [ebp + 0x54], 6
je 0x43398a
cmp byte [ebp + 0x54], 7
jne 0x433a0d
push 0x457
mov eax, dword [ebp]
push eax
call sub.user32.dll_GetDlgItem
mov dword [ebp + 0x50], eax
mov eax, dword [0x48d550]
cmp byte [eax + 0x188c], 2
sete al
and eax, 0x7f
mov edx, dword [0x48d498]
mov dword [edx], eax
mov edi, 4
mov eax, dword [0x48d4dc]
mov dword [esp + 0x40], eax
mov eax, dword [0x48d498]
mov eax, dword [eax]
add eax, eax
mov edx, dword [esp + 0x40]
mov edx, dword [edx + eax*8]
mov eax, dword [ebp + 0x50]
call fcn.0042bb9c
add dword [esp + 0x40], 4
dec edi
jne 0x4339c3
mov eax, dword [0x48d498]
mov eax, dword [eax]
add eax, eax
mov edx, dword [0x48d4dc]
lea eax, [edx + eax*8]
mov edx, dword [0x48d550]
movzx edx, byte [edx + 0x1907]
mov edx, dword [eax + edx*4]
mov eax, dword [ebp + 0x50]
call fcn.0042bc08
mov al, byte [ebp + 0x54]
cmp al, 0x12
je 0x433a40
cmp al, 0x13
je 0x433a40
cmp al, 0x15
je 0x433a40
cmp al, 0x16
je 0x433a40
cmp al, 0x14
je 0x433a40
cmp al, 0x1c
je 0x433a40
cmp al, 0x1d
je 0x433a40
cmp al, 0x17
je 0x433a40
cmp al, 0x20
je 0x433a40
cmp al, 0x21
je 0x433a40
cmp al, 0x18
je 0x433a40
cmp al, 0x19
jne 0x433aa1
push 0x457
mov eax, dword [ebp]
push eax
call sub.user32.dll_GetDlgItem
mov dword [ebp + 0x50], eax
cmp byte [ebp + 0x54], 0x13
sete al
and eax, 0x7f
mov ebx, 2
sub ebx, eax
test ebx, ebx
jl 0x433a82
inc ebx
xor edi, edi
mov eax, edi
add ax, 0x293
call fcn.0040bc04
mov edx, eax
mov eax, dword [ebp + 0x50]
call fcn.0042bb9c
inc edi
dec ebx
jne 0x433a69
mov eax, dword [0x48d550]
movzx eax, byte [eax + 0x18ad]
add ax, 0x293
call fcn.0040bc04
mov edx, eax
mov eax, dword [ebp + 0x50]
call fcn.0042bc08
cmp byte [ebp + 0x54], 0x1a
jne 0x433ade
push 0x457
mov eax, dword [ebp]
push eax
call sub.user32.dll_GetDlgItem
mov dword [ebp + 0x50], eax
mov ax, 0x293
call fcn.0040bc04
mov edx, eax
mov eax, dword [ebp + 0x50]
call fcn.0042bb9c
mov ax, 0x293
call fcn.0040bc04
mov edx, eax
mov eax, dword [ebp + 0x50]
call fcn.0042bc08
cmp byte [ebp + 0x54], 0x15
je 0x433aea
cmp byte [ebp + 0x54], 0x16
jne 0x433b12
push 0x309
mov eax, dword [ebp]
push eax
call sub.user32.dll_GetDlgItem
mov dword [ebp + 0x4c], eax
push 0
xor eax, eax
mov al, byte [esp + 0x2a]
push eax
push 0x141
mov eax, dword [ebp + 0x4c]
push eax
call sub.user32.dll_SendMessageA
mov eax, dword [0x48d8ac]
mov ax, word [eax]
mov edx, dword [0x48d458]
cmp ax, 0xff
ja 0x433b2e
and eax, 0xff
bt dword [edx], eax
setb al
test al, al
jne 0x433b7c
mov eax, dword [0x48d550]
cmp byte [eax + 0x188c], 3
je 0x433b56
mov ecx, dword [0x48d2b4]
mov eax, ebp
mov dx, 1
call fcn.0042d910
jmp 0x433b66
mov ecx, 0x4385bc
mov eax, ebp
mov dx, 1
call fcn.0042d910
mov ax, 5
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 2
call fcn.0042d910
mov eax, dword [0x48d8ac]
movzx eax, word [eax]
mov ecx, 0x64
xor edx, edx
div ecx
mov eax, dword [0x48d640]
cmp edx, 0xff
ja 0x433b9d
bt dword [eax], edx
jae 0x433bb5
mov ax, 9
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 3
call fcn.0042d910
mov eax, dword [0x48d354]
push eax
mov eax, dword [ebp]
push eax
call sub.user32.dll_GetWindowRect
mov eax, dword [0x48d354]
mov eax, dword [eax + 8]
mov edx, dword [0x48d354]
sub eax, dword [edx]
mov edx, dword [0x48d724]
mov edx, dword [edx]
sub edx, eax
sar edx, 1
jns 0x433be5
adc edx, 0
mov dword [esp + 5], edx
mov eax, dword [0x48d354]
mov eax, dword [eax + 0xc]
mov edx, dword [0x48d354]
sub eax, dword [edx + 4]
mov edx, dword [0x48d870]
mov edx, dword [edx]
sub edx, eax
sar edx, 1
jns 0x433c0b
adc edx, 0
sub edx, 0xa
mov dword [esp + 9], edx
push 0
mov eax, dword [0x48d354]
mov eax, dword [eax + 0xc]
mov edx, dword [0x48d354]
sub eax, dword [edx + 4]
push eax
mov eax, dword [0x48d354]
mov eax, dword [eax + 8]
mov edx, dword [0x48d354]
sub eax, dword [edx]
push eax
mov eax, dword [esp + 0x15]
push eax
mov eax, dword [esp + 0x15]
push eax
mov eax, dword [ebp]
push eax
call sub.user32.dll_MoveWindow
cmp byte [ebp + 0x54], 0x48
jne 0x433eea
mov eax, ebp
call fcn.00433598
mov ax, 0x2eb
call fcn.0040bc04
mov edx, eax
mov eax, dword [0x48da44]
call fcn.00405c48
mov eax, dword [0x48d930]
mov eax, dword [eax]
mov edx, dword [0x48d524]
mov eax, dword [edx + eax*4 - 4]
cmp byte [eax + 0x55d], 0
jne 0x433cb1
mov eax, dword [0x48d930]
mov eax, dword [eax]
mov edx, dword [0x48d524]
mov eax, dword [edx + eax*4 - 4]
mov eax, dword [eax + 0x14]
call fcn.0040fb28
push eax
mov eax, dword [0x48da44]
push eax
call sub.kernel32.dll_lstrcatA
jmp 0x433cd1
mov eax, dword [0x48d930]
mov eax, dword [eax]
mov edx, dword [0x48d524]
mov eax, dword [edx + eax*4 - 4]
mov eax, dword [eax + 0x14]
push eax
mov eax, dword [0x48da44]
push eax
call sub.kernel32.dll_lstrcatA
mov eax, dword [0x48da44]
push eax
mov eax, dword [ebp]
push eax
call sub.user32.dll_SetWindowTextA
mov eax, dword [0x48d550]
fild dword [eax + 0x19d8]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.004123c0
mov ecx, eax
mov eax, ebp
mov dx, 0x67
call fcn.0042d910
mov ecx, dword [0x48d550]
add ecx, 0x400
mov eax, ebp
mov dx, 0x71
call fcn.0042d910
mov ecx, dword [0x48d550]
add ecx, 0x194b
mov eax, ebp
mov dx, 0x68
call fcn.0042d910
mov eax, dword [0x48d930]
mov eax, dword [eax]
mov edx, dword [0x48d524]
mov eax, dword [edx + eax*4 - 4]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x30]
cmp byte [eax + 0x55d], 0
je 0x433d61
mov eax, ebp
xor ecx, ecx
mov dx, 0x69
call fcn.0042e904
mov eax, dword [0x48d550]
movzx eax, word [eax + 0x19cc]
mov dword [esp + 0x174], eax
fild dword [esp + 0x174]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.004123c0
mov ecx, eax
mov eax, ebp
mov dx, 0x69
call fcn.0042d910
mov eax, dword [0x48d550]
movzx eax, word [eax + 0x19ce]
mov dword [esp + 0x174], eax
fild dword [esp + 0x174]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.004123c0
mov ecx, eax
mov eax, ebp
mov dx, 0x6a
call fcn.0042d910
mov eax, dword [0x48d550]
mov eax, dword [eax + 0x19d0]
mov dword [esp + 0x178], eax
xor eax, eax
mov dword [esp + 0x17c], eax
fild qword [esp + 0x178]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.004123c0
mov ecx, eax
mov eax, ebp
mov dx, 0x6b
call fcn.0042d910
mov eax, dword [0x48d550]
mov eax, dword [eax + 0x19d4]
mov dword [esp + 0x178], eax
xor eax, eax
mov dword [esp + 0x17c], eax
fild qword [esp + 0x178]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.004123c0
mov ecx, eax
mov eax, ebp
mov dx, 0x6c
call fcn.0042d910
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x1935]
mov eax, ebp
mov cx, 0xcb
call fcn.0042d8fc
mov eax, dword [0x48d930]
mov eax, dword [eax]
mov edx, dword [0x48d524]
mov eax, dword [edx + eax*4 - 4]
cmp byte [eax + 0x55d], 0
jg 0x433e7d
mov eax, ebp
xor ecx, ecx
mov dx, 0xcc
call fcn.0042e904
jmp 0x433e94
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x19c4]
mov eax, ebp
mov cx, 0xcc
call fcn.0042d8fc
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x1980]
mov eax, ebp
mov cx, 0xcd
call fcn.0042d8fc
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x19c5]
mov eax, ebp
mov cx, 0xce
call fcn.0042d8fc
mov eax, dword [0x48d550]
cmp byte [eax + 0x19c5], 0
je 0x433eea
mov eax, ebp
xor ecx, ecx
mov dx, 0x6a
call fcn.0043863c
mov eax, ebp
xor ecx, ecx
mov dx, 0x6e
call fcn.0043863c
cmp byte [ebp + 0x54], 0x37
jne 0x434050
mov edi, 2
mov eax, dword [0x48d550]
add eax, 0x18f8
mov dword [esp + 0x40], eax
mov ecx, edi
add cx, 0x63
mov eax, dword [esp + 0x40]
mov dl, byte [eax]
mov eax, ebp
call fcn.0042d8fc
inc edi
inc dword [esp + 0x40]
cmp edi, 0x11
jne 0x433f07
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x18d6]
mov eax, ebp
mov cx, 9
call fcn.0042d8fc
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x18d3]
mov eax, ebp
mov cx, 0x63
call fcn.0042d8fc
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x18f0]
mov eax, ebp
mov cx, 0x62
call fcn.0042d8fc
mov ecx, dword [0x48d550]
mov cl, byte [ecx + 0x1905]
mov eax, ebp
mov dx, 0x62
call fcn.0042e904
mov ecx, dword [0x48d550]
mov cl, byte [ecx + 0x1905]
mov eax, ebp
mov dx, 0x63
call fcn.0042e904
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x18e1]
mov eax, ebp
mov cx, 0xa
call fcn.0042d8fc
mov eax, dword [0x48d550]
movzx eax, byte [eax + 0x188d]
push eax
push 0x64
mov eax, dword [ebp]
push eax
call sub.user32.dll_CheckDlgButton
mov eax, dword [0x48d550]
fild word [eax + 0x183a]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.004123c0
mov ecx, eax
mov eax, ebp
mov dx, 0x30a
call fcn.0042d910
mov eax, dword [0x48d550]
movzx eax, word [eax + 0x1872]
mov dword [esp + 0x174], eax
fild dword [esp + 0x174]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.004123c0
mov ecx, eax
mov eax, ebp
mov dx, 0x30b
call fcn.0042d910
mov eax, dword [0x48d550]
movzx eax, word [eax + 0x1876]
mov dword [esp + 0x174], eax
fild dword [esp + 0x174]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.004123c0
mov ecx, eax
mov eax, ebp
mov dx, 0x30c
call fcn.0042d910
cmp byte [ebp + 0x54], 0x31
jne 0x43407f
mov ax, 0x268
call fcn.0040bc04
push eax
mov eax, dword [ebp]
push eax
call sub.user32.dll_SetWindowTextA
mov ax, 0x15e
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0xcf
call fcn.0042d910
cmp byte [ebp + 0x54], 0x42
je 0x43408f
cmp byte [ebp + 0x54], 0x43
jne 0x4341bf
mov ax, 0x30e
call fcn.0040bc04
push eax
mov eax, dword [ebp]
push eax
call sub.user32.dll_SetWindowTextA
push 0
push 8
push 0x141
mov eax, dword [ebp + 0x48]
push eax
call sub.user32.dll_SendMessageA
cmp byte [ebp + 0x54], 0x42
jne 0x434135
mov eax, dword [0x48d550]
mov eax, dword [eax + 0x1780]
mov dword [esp + 0x178], eax
xor eax, eax
mov dword [esp + 0x17c], eax
fild qword [esp + 0x178]
add esp, 0xfffffff8
fistp qword [esp]
wait
mov dl, 8
xor eax, eax
call fcn.0040fe88
mov edx, eax
mov eax, dword [0x48da44]
call fcn.00405c48
mov ax, 0x2d2
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0xcf
call fcn.0042d910
push 0
push 0
mov dl, 8
xor eax, eax
call fcn.0040fe88
mov edx, eax
mov eax, dword [ebp + 0x48]
call fcn.0042bb9c
mov edx, dword [0x48da44]
mov eax, dword [ebp + 0x48]
call fcn.0042bb9c
jmp 0x4341ae
mov eax, dword [0x48d550]
mov eax, dword [eax + 0x1784]
mov dword [esp + 0x178], eax
xor eax, eax
mov dword [esp + 0x17c], eax
fild qword [esp + 0x178]
add esp, 0xfffffff8
fistp qword [esp]
wait
mov dl, 8
xor eax, eax
call fcn.0040fe88
mov edx, eax
mov eax, dword [0x48da44]
call fcn.00405c48
mov ax, 0x30f
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0xcf
call fcn.0042d910
mov edx, dword [0x48da44]
mov eax, dword [ebp + 0x48]
call fcn.0042bb9c
push 0
push 0xffffffffffffffff
mov dl, 8
xor eax, eax
call fcn.0040fe88
mov edx, eax
mov eax, dword [ebp + 0x48]
call fcn.0042bb9c
mov ecx, dword [0x48da44]
mov eax, ebp
mov dx, 0x30a
call fcn.0042d910
cmp byte [ebp + 0x54], 0x40
je 0x4341cf
cmp byte [ebp + 0x54], 0x41
jne 0x434292
mov eax, dword [0x48d208]
mov dl, 1
call fcn.00406564
mov ecx, dword [0x48d208]
mov eax, ebp
mov dx, 0x30a
call fcn.0042d910
mov ecx, dword [0x48d208]
mov eax, ebp
mov dx, 0x30b
call fcn.0042d910
push 0
push 0x11
call sub.gdi32.dll_GetStockObject
push eax
push 0x30
push 0x30a
mov eax, dword [ebp]
push eax
call sub.user32.dll_GetDlgItem
push eax
call sub.user32.dll_SendMessageA
push 0
push 0x11
call sub.gdi32.dll_GetStockObject
push eax
push 0x30
push 0x30b
mov eax, dword [ebp]
push eax
call sub.user32.dll_GetDlgItem
push eax
call sub.user32.dll_SendMessageA
mov eax, dword [0x48d208]
xor edx, edx
call fcn.00406564
mov ax, 0x281
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0xcf
call fcn.0042d910
mov ax, 0x282
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0xd0
call fcn.0042d910
cmp byte [ebp + 0x54], 0x41
sete al
and eax, 0x7f
add ax, 0x16c
call fcn.0040bc04
push eax
mov eax, dword [ebp]
push eax
call sub.user32.dll_SetWindowTextA
cmp byte [ebp + 0x54], 0x44
jne 0x434647
mov ecx, dword [0x48db14]
mov eax, ebp
mov dx, 0x30c
call fcn.0042d910
mov eax, dword [0x48d550]
cmp byte [eax + 0x188c], 1
jne 0x4342e5
mov edi, 0x18d
mov dword [esp + 0x40], 0x48c368
mov eax, dword [esp + 0x40]
mov ecx, dword [eax]
mov eax, ebp
mov edx, edi
call fcn.0042d910
inc edi
add dword [esp + 0x40], 4
cmp edi, 0x197
jne 0x4342c8
mov eax, dword [0x48d930]
mov eax, dword [eax]
mov edx, dword [0x48d524]
mov eax, dword [edx + eax*4 - 4]
cmp byte [eax + 0x55d], 0
setne al
and eax, 0x7f
add ax, 0x322
call fcn.0040bc04
mov edx, eax
mov eax, dword [0x48da44]
call fcn.00405c48
mov eax, dword [0x48da44]
call fcn.0042b9bc
mov eax, dword [0x48da44]
push eax
mov eax, dword [ebp]
push eax
call sub.user32.dll_SetWindowTextA
mov eax, dword [0x48d930]
mov eax, dword [eax]
mov edx, dword [0x48d524]
mov eax, dword [edx + eax*4 - 4]
cmp byte [eax + 0x55d], 0
je 0x43442d
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x18f3]
mov eax, ebp
mov cx, 0x194
call fcn.0042d8fc
mov eax, dword [0x48d34c]
mov eax, dword [eax]
mov dword [esp + 0x178], eax
xor eax, eax
mov dword [esp + 0x17c], eax
fild qword [esp + 0x178]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.004123c0
mov ecx, eax
mov eax, ebp
mov dx, 0x198
call fcn.0042d910
mov eax, dword [0x48da9c]
mov eax, dword [eax]
mov dword [esp + 0x178], eax
xor eax, eax
mov dword [esp + 0x17c], eax
fild qword [esp + 0x178]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.004123c0
mov ecx, eax
mov eax, ebp
mov dx, 0x199
call fcn.0042d910
mov eax, dword [0x48d550]
movzx eax, word [eax + 0x1878]
mov dword [esp + 0x174], eax
fild dword [esp + 0x174]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.004123c0
mov ecx, eax
mov eax, ebp
mov dx, 0x19a
call fcn.0042d910
mov edi, 0x196
mov eax, ebp
mov cl, 1
mov edx, edi
call fcn.0042e904
inc edi
cmp edi, 0x19d
jne 0x43440c
mov eax, ebp
mov cl, 1
mov dx, 0x194
call fcn.0042e904
mov eax, ebp
mov cx, 0x191
mov dl, 1
call fcn.0042d8fc
mov eax, dword [0x48d550]
cmp byte [eax + 0x18e8], 0
setne dl
mov eax, ebp
mov cx, 9
call fcn.0042d8fc
mov eax, dword [0x48d550]
cmp byte [eax + 0x18e8], 0
je 0x434489
mov ax, 0x15d
call fcn.0040bc04
mov edx, dword [0x48d550]
movzx edx, byte [edx + 0x18e8]
mov ecx, dword [0x48d470]
mov edx, dword [ecx + edx*4 - 4]
call fcn.0040f5a0
jmp 0x4344ae
mov ax, 0x15d
call fcn.0040bc04
mov edx, dword [0x48d550]
movzx edx, byte [edx + 0x188e]
mov ecx, dword [0x48d470]
mov edx, dword [ecx + edx*4 - 4]
call fcn.0040f5a0
mov ecx, dword [0x48da44]
mov eax, ebp
mov dx, 9
call fcn.0042d910
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x18f4]
mov eax, ebp
mov cx, 0x195
call fcn.0042d8fc
mov eax, dword [0x48d930]
mov eax, dword [eax]
mov edx, dword [0x48d524]
mov eax, dword [edx + eax*4 - 4]
cmp byte [eax + 0x55d], 0
je 0x434508
mov edx, dword [0x48d550]
add edx, 0x200
mov eax, dword [0x48da44]
call fcn.00405c48
jmp 0x434510
mov eax, dword [0x48da44]
mov byte [eax], 0
mov eax, dword [0x48d930]
mov eax, dword [eax]
mov edx, dword [0x48d524]
mov eax, dword [edx + eax*4 - 4]
mov eax, dword [eax + 0x14]
push eax
mov eax, dword [0x48da44]
push eax
call sub.kernel32.dll_lstrcatA
mov eax, dword [0x48da44]
call fcn.00405bdc
dec eax
mov edx, dword [0x48d498]
mov dword [edx], eax
mov eax, dword [0x48d498]
mov eax, dword [eax]
mov edx, dword [0x48da44]
cmp byte [edx + eax], 0x3a
jne 0x434567
mov eax, dword [0x48d498]
mov eax, dword [eax]
mov edx, dword [0x48da44]
mov byte [edx + eax], 0
mov eax, dword [0x48d3d0]
push eax
mov eax, dword [0x48da44]
push eax
call sub.kernel32.dll_lstrcatA
mov ecx, dword [0x48da44]
mov eax, ebp
mov dx, 0x30b
call fcn.0042d910
mov eax, dword [0x48d550]
cmp byte [eax + 0x18e7], 0
je 0x434647
mov eax, ebp
mov cx, 0x190
mov dl, 1
call fcn.0042d8fc
mov eax, dword [0x48d208]
mov dl, 1
call fcn.00406564
mov eax, dword [0x48d550]
cmp byte [eax + 0x18dc], 0
je 0x4345df
mov eax, dword [0x48da44]
call fcn.0042ebc0
mov ecx, dword [0x48da44]
mov eax, ebp
mov dx, 0x30a
call fcn.0042d910
jmp 0x4345f0
mov ecx, dword [0x48d208]
mov eax, ebp
mov dx, 0x30a
call fcn.0042d910
mov eax, dword [0x48d208]
xor edx, edx
call fcn.00406564
mov eax, ebp
mov cl, 1
mov dx, 0x18f
call fcn.0043863c
mov ecx, dword [0x48d550]
mov cl, byte [ecx + 0x18dc]
mov eax, ebp
mov dx, 4
call fcn.0043863c
mov eax, ebp
mov cl, 1
mov dx, 0x30a
call fcn.0043863c
mov ecx, dword [0x48d550]
mov cl, byte [ecx + 0x18dc]
xor cl, 1
mov eax, ebp
mov dx, 0x30a
call fcn.0042e904
cmp byte [ebp + 0x54], 0x22
jne 0x434851
mov ecx, dword [0x48da44]
mov eax, dword [0x48d390]
mov al, byte [eax]
mov dl, 1
call fcn.0041ac5c
mov ecx, dword [0x48da44]
mov eax, ebp
mov dx, 5
call fcn.0042d910
mov eax, dword [0x48dbc0]
cmp byte [eax], 0
je 0x43468d
mov eax, ebp
xor ecx, ecx
mov dx, 0x64
call fcn.0042e904
mov eax, dword [0x48d778]
mov eax, dword [eax]
mov dword [esp + 0x178], eax
xor eax, eax
mov dword [esp + 0x17c], eax
fild qword [esp + 0x178]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.004123c0
mov ecx, eax
mov eax, ebp
mov dx, 0x64
call fcn.0042d910
mov eax, dword [0x48d778]
mov eax, dword [eax]
mov dword [esp + 0x178], eax
xor eax, eax
mov dword [esp + 0x17c], eax
fild qword [esp + 0x178]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.004123c0
mov ecx, eax
mov eax, ebp
mov dx, 8
call fcn.0042d910
mov eax, dword [0x48d410]
mov eax, dword [eax]
mov dword [esp + 0x178], eax
xor eax, eax
mov dword [esp + 0x17c], eax
fild qword [esp + 0x178]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.004123c0
mov ecx, eax
mov eax, ebp
mov dx, 0x65
call fcn.0042d910
mov eax, dword [0x48d410]
mov eax, dword [eax]
mov edx, dword [0x48d778]
sub eax, dword [edx]
inc eax
mov dword [esp + 0x178], eax
xor eax, eax
mov dword [esp + 0x17c], eax
fild qword [esp + 0x178]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.004123c0
mov edx, eax
mov eax, dword [0x48d830]
call fcn.00405c48
mov eax, dword [0x48d294]
cmp byte [eax], 0
je 0x43478b
push 0x4385c8
mov eax, dword [0x48d830]
push eax
call sub.kernel32.dll_lstrcatA
mov ax, 0x1fb
call fcn.0040bc04
mov edx, dword [0x48d830]
call fcn.0040f5a0
mov eax, dword [0x48da44]
push eax
mov eax, dword [ebp]
push eax
call sub.user32.dll_SetWindowTextA
mov eax, dword [0x48d294]
cmp byte [eax], 0
jne 0x4347c5
mov eax, ebp
xor ecx, ecx
mov dx, 0x18f
call fcn.0043863c
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x189b]
mov eax, ebp
mov cx, 0x18f
call fcn.0042d8fc
mov eax, dword [0x48d6f4]
cmp byte [eax], 0
jne 0x43481a
mov eax, dword [0x48d410]
mov eax, dword [eax]
mov edx, dword [0x48d778]
sub eax, dword [edx]
cmp eax, 0x7530
jbe 0x43480b
mov eax, ebp
mov cx, 0x192
mov dl, 1
call fcn.0042d8fc
jmp 0x434851
mov eax, ebp
mov cx, 0x191
mov dl, 1
call fcn.0042d8fc
jmp 0x434851
mov ecx, dword [0x48d6f4]
movzx ecx, byte [ecx]
add cx, 0x190
mov eax, ebp
mov dl, 1
call fcn.0042d8fc
mov eax, dword [0x48d6f4]
cmp byte [eax], 3
jne 0x434851
mov edi, 5
mov eax, ebp
xor ecx, ecx
mov edx, edi
call fcn.0042e904
inc edi
cmp edi, 9
jne 0x434840
cmp byte [ebp + 0x54], 0x23
jne 0x4348db
mov ax, 0x1fb
call fcn.0040bc04
mov edx, eax
mov eax, dword [0x48da44]
call fcn.00405c48
mov eax, dword [0x48da44]
mov dl, 0x7e
call fcn.00405cf8
inc eax
mov byte [eax], 0
mov eax, dword [0x48d370]
call fcn.0040fb28
mov edx, eax
mov eax, dword [0x48da44]
call fcn.0040f5a0
mov eax, dword [0x48da44]
push eax
mov eax, dword [ebp]
push eax
call sub.user32.dll_SetWindowTextA
mov eax, ebp
mov cx, 0x191
mov dl, 1
call fcn.0042d8fc
mov edi, 1
mov ebx, edi
mov eax, ebx
add ax, 0x2d7
dec eax
call fcn.0040bc04
mov ecx, eax
mov edx, ebx
add dx, 0x190
mov eax, ebp
call fcn.0042d910
inc edi
cmp edi, 4
jne 0x4348b7
cmp byte [ebp + 0x54], 1
jne 0x434989
mov ax, 0x2bf
call fcn.0040bc04
push eax
mov eax, dword [ebp]
push eax
call sub.user32.dll_SetWindowTextA
mov edi, 1
mov ebx, edi
mov eax, ebx
add ax, 0x2bf
call fcn.0040bc04
mov ecx, eax
mov edx, ebx
add dx, 3
mov eax, ebp
call fcn.0042d910
inc edi
cmp edi, 8
jne 0x4348fd
cmp byte [0x49bafd], 0
je 0x43494f
mov eax, ebp
xor ecx, ecx
mov dx, 6
call fcn.0042e904
mov eax, ebp
xor ecx, ecx
mov dx, 7
call fcn.0042e904
mov eax, ebp
xor ecx, ecx
mov dx, 0x66
call fcn.0042e904
mov eax, ebp
call fcn.0042d970
mov eax, dword [0x48d784]
cmp dword [eax], 0
je 0x43496c
mov eax, dword [0x48d784]
mov eax, dword [eax]
cmp byte [eax], 0
jne 0x434982
mov eax, ebp
xor ecx, ecx
mov dx, 1
call fcn.0042e904
mov byte [0x49bafc], 0
jmp 0x434989
mov byte [0x49bafc], 1
cmp byte [ebp + 0x54], 0x45
jne 0x434c0f
mov edi, 1
mov eax, dword [0x48d550]
add eax, 0x1880
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x40]
mov al, byte [eax]
cmp al, 0x1a
jle 0x4349cd
movsx eax, al
lea eax, [eax + eax*4]
mov edx, dword [0x48d7fc]
cmp byte [edx + eax*4 - 0x210], 0
jne 0x4349cd
mov eax, dword [esp + 0x40]
mov byte [eax], 3
mov eax, dword [esp + 0x40]
mov al, byte [eax]
cmp al, 0xde
jge 0x4349f8
movsx eax, al
mov edx, eax
shl eax, 3
sub eax, edx
mov edx, dword [0x48d8cc]
cmp byte [edx + eax*2 + 0x221], 0
jne 0x4349f8
mov eax, dword [esp + 0x40]
mov byte [eax], 0xfd
mov edx, edi
mov eax, ebp
call fcn.00432b7c
inc edi
inc dword [esp + 0x40]
cmp edi, 3
jne 0x4349a6
mov ax, 0x242
call fcn.0040bc04
push eax
mov eax, dword [ebp]
push eax
call sub.user32.dll_SetWindowTextA
mov edi, 0xd
mov ebx, edi
mov eax, ebx
add ax, 0x244
sub ax, 0xd
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov edx, ebx
call fcn.0042d910
inc edi
cmp edi, 0x12
jne 0x434a23
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x1936]
mov eax, ebp
mov cx, 0xc
call fcn.0042d8fc
mov edx, dword [0x48d550]
mov dl, byte [edx + 0xa44]
mov eax, ebp
mov cx, 0x12
call fcn.0042d8fc
mov eax, ebp
call fcn.0042ec00
mov eax, dword [0x48d550]
cmp byte [eax + 0x1936], 0
jne 0x434b3d
mov eax, dword [0x48d550]
mov eax, dword [eax + 0x179c]
mov dword [esp + 0x178], eax
xor eax, eax
mov dword [esp + 0x17c], eax
fild qword [esp + 0x178]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.004123c0
mov ecx, eax
mov eax, ebp
mov dx, 0x64
call fcn.0042d910
mov eax, dword [0x48d550]
mov eax, dword [eax + 0x17a0]
mov dword [esp + 0x178], eax
xor eax, eax
mov dword [esp + 0x17c], eax
fild qword [esp + 0x178]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.004123c0
mov ecx, eax
mov eax, ebp
mov dx, 0x65
call fcn.0042d910
mov eax, dword [0x48d550]
mov eax, dword [eax + 0x17a4]
mov dword [esp + 0x178], eax
xor eax, eax
mov dword [esp + 0x17c], eax
fild qword [esp + 0x178]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.004123c0
mov ecx, eax
mov eax, ebp
mov dx, 0x66
call fcn.0042d910
mov ax, 0x33b
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0x12
call fcn.0042d910
mov eax, dword [0x48d550]
movzx eax, word [eax + 0x17bc]
mov dword [esp + 0x174], eax
fild dword [esp + 0x174]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.004123c0
mov ecx, eax
mov eax, ebp
mov dx, 0x67
call fcn.0042d910
mov ecx, dword [0x48d550]
add ecx, 0x1dfa
mov eax, ebp
mov dx, 0x68
call fcn.0042d910
mov eax, ebp
mov ecx, 5
mov edx, 4
call fcn.00433738
mov eax, ebp
mov ecx, 5
mov edx, 5
call fcn.00433738
mov eax, ebp
mov ecx, 0xc
mov edx, 6
call fcn.00433738
mov eax, ebp
mov ecx, 0xc
mov edx, 7
call fcn.00433738
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x1937]
mov eax, ebp
mov cx, 0x10
call fcn.0042d8fc
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x1938]
mov eax, ebp
mov cx, 0x11
call fcn.0042d8fc
cmp byte [ebp + 0x54], 0x3b
jne 0x434c9a
mov eax, dword [0x48d59c]
push dword [eax + 4]
push dword [eax]
call fcn.00410208
mov ecx, eax
mov eax, ebp
mov dx, 0x30a
call fcn.0042d910
mov ax, 0x13b
call fcn.0040bc04
push eax
mov eax, dword [ebp]
push eax
call sub.user32.dll_SetWindowTextA
mov edx, dword [0x48d5e0]
mov eax, dword [0x48da44]
call fcn.00405c48
push 0x4385cc
mov eax, dword [0x48da44]
push eax
call sub.kernel32.dll_lstrcatA
mov eax, dword [0x48d550]
movzx eax, byte [eax + 0x18be]
add ax, 0x10
call fcn.0040bc04
push eax
mov eax, dword [0x48da44]
push eax
call sub.kernel32.dll_lstrcatA
mov ecx, dword [0x48da44]
mov eax, ebp
mov dx, 0xcf
call fcn.0042d910
cmp byte [ebp + 0x54], 0x3c
jne 0x434d02
mov eax, ebp
mov ecx, dword [0x49bae8]
mov dx, 0x30a
call fcn.0042d910
mov bl, 9
mov eax, dword [0x48d30c]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x40]
mov eax, dword [eax]
test eax, eax
je 0x434cd0
mov edx, eax
mov eax, dword [ebp + 0x48]
call fcn.0042bb9c
add dword [esp + 0x40], 4
dec bl
jne 0x434cbc
mov ax, 0x13b
call fcn.0040bc04
push eax
mov eax, dword [ebp]
push eax
call sub.user32.dll_SetWindowTextA
mov ax, 0x26c
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0xcf
call fcn.0042d910
cmp byte [ebp + 0x54], 0x49
jne 0x434d5c
mov eax, ebp
mov ecx, dword [0x49baec]
mov dx, 0x30a
call fcn.0042d910
mov eax, dword [0x49baec]
call fcn.00405eac
mov ax, 0x2ee
call fcn.0040bc04
push eax
mov ax, 0x2ed
call fcn.0040bc04
pop edx
call fcn.0040f5a0
mov eax, dword [0x48da44]
push eax
mov eax, dword [ebp]
push eax
call sub.user32.dll_SetWindowTextA
mov ecx, dword [0x48da44]
mov eax, ebp
mov dx, 0xcf
call fcn.0042d910
cmp byte [ebp + 0x54], 0x4a
jne 0x434db6
mov eax, ebp
mov ecx, dword [0x49baec]
mov dx, 0x30a
call fcn.0042d910
mov eax, dword [0x49baec]
call fcn.00405eac
mov ax, 0x170
call fcn.0040bc04
push eax
mov ax, 0x2ed
call fcn.0040bc04
pop edx
call fcn.0040f5a0
mov eax, dword [0x48da44]
push eax
mov eax, dword [ebp]
push eax
call sub.user32.dll_SetWindowTextA
mov ecx, dword [0x48da44]
mov eax, ebp
mov dx, 0xcf
call fcn.0042d910
cmp byte [ebp + 0x54], 0x39
jne 0x435019
mov eax, dword [0x48d930]
mov eax, dword [eax]
mov edx, dword [0x48d524]
mov eax, dword [edx + eax*4 - 4]
fild qword [eax + 0x494]
fcomp dword [0x4385d0]
fnstsw ax
sahf
setne al
mov byte [esp + 0x2c], al
xor eax, eax
mov al, byte [esp + 0x2c]
add ax, 0x152
call fcn.0040bc04
push eax
mov eax, dword [ebp]
push eax
call sub.user32.dll_SetWindowTextA
mov eax, dword [0x48d550]
cmp byte [eax + 0x18af], 0
je 0x434e31
mov edi, 0x63
mov eax, ebp
xor ecx, ecx
mov edx, edi
call fcn.0042e904
inc edi
cmp edi, 0x6b
jne 0x434e13
mov eax, ebp
xor ecx, ecx
mov dx, 4
call fcn.0042e904
mov ecx, dword [0x48d550]
movzx ecx, byte [ecx + 0x18af]
add cx, 0x3e8
mov eax, ebp
mov dl, 1
call fcn.0042d8fc
mov eax, dword [0x48d550]
movzx eax, byte [eax + 0x18af]
add eax, 0x3e8
push eax
mov eax, dword [ebp]
push eax
call sub.user32.dll_GetDlgItem
push eax
call sub.user32.dll_SetFocus
mov eax, dword [0x48d550]
cmp byte [eax + 0x18af], 4
sete cl
mov eax, ebp
mov dx, 0x6b
call fcn.0042e904
mov eax, dword [0x48d550]
movzx eax, byte [eax + 0x18aa]
mov dword [esp + 0x174], eax
fild dword [esp + 0x174]
add esp, 0xfffffff8
fistp qword [esp]
wait
mov dl, 2
xor eax, eax
call fcn.0040fe88
mov ecx, eax
mov eax, ebp
mov dx, 0x6b
call fcn.0042d910
mov eax, dword [0x48d550]
cmp byte [eax + 0x18af], 7
sete cl
mov eax, ebp
mov dx, 0x6c
call fcn.0042e904
mov eax, dword [0x48d550]
movzx eax, byte [eax + 0x182c]
mov dword [esp + 0x174], eax
fild dword [esp + 0x174]
add esp, 0xfffffff8
fistp qword [esp]
wait
mov dl, 2
xor eax, eax
call fcn.0040fe88
mov ecx, eax
mov eax, ebp
mov dx, 0x6c
call fcn.0042d910
mov eax, dword [0x48d550]
cmp byte [eax + 0x18af], 8
sete cl
mov eax, ebp
mov dx, 0x6d
call fcn.0042e904
mov eax, dword [0x48d550]
movzx eax, byte [eax + 0x182d]
mov dword [esp + 0x174], eax
fild dword [esp + 0x174]
add esp, 0xfffffff8
fistp qword [esp]
wait
mov dl, 2
xor eax, eax
call fcn.0040fe88
mov ecx, eax
mov eax, ebp
mov dx, 0x6d
call fcn.0042d910
mov ecx, dword [0x48d550]
movzx ecx, byte [ecx + 0x18d7]
add cx, 0x66
mov eax, ebp
mov dl, 1
call fcn.0042d8fc
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x18d4]
mov eax, ebp
mov cx, 0x63
call fcn.0042d8fc
mov eax, dword [0x48d550]
mov al, byte [eax + 0x18a2]
call fcn.00430420
mov ecx, eax
mov eax, ebp
mov dx, 0x65
call fcn.0042d910
mov eax, dword [0x48d550]
cmp byte [eax + 0x18d4], 0
je 0x434fe5
mov eax, dword [0x48d550]
fild dword [eax + 0x178c]
add esp, 0xfffffff8
fistp qword [esp]
wait
xor edx, edx
mov al, 1
call fcn.0040fe88
mov edx, eax
mov eax, dword [0x48da44]
call fcn.00405c48
jmp 0x435008
mov eax, dword [0x48d550]
fild dword [eax + 0x178c]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.004123c0
mov edx, eax
mov eax, dword [0x48da44]
call fcn.00405c48
mov ecx, dword [0x48da44]
mov eax, ebp
mov dx, 0x64
call fcn.0042d910
cmp byte [ebp + 0x54], 0x2e
jne 0x435166
mov eax, dword [0x48d928]
cmp dword [eax], 1
jle 0x435091
mov eax, dword [0x48d930]
mov eax, dword [eax]
mov edx, dword [0x48d524]
mov eax, dword [edx + eax*4 - 4]
cmp byte [eax + 0x55d], 0
jne 0x435091
mov eax, dword [0x48d930]
mov eax, dword [eax]
mov edx, dword [0x48d524]
mov eax, dword [edx + eax*4 - 4]
cmp dword [eax + 0x4c], 0
jne 0x435091
mov eax, dword [0x48dba4]
cmp byte [eax], 0
je 0x43509e
mov eax, ebp
mov cx, 0x64
mov dl, 1
call fcn.0042d8fc
mov eax, ebp
xor ecx, ecx
mov dx, 0xcf
call fcn.0042e904
mov eax, ebp
xor ecx, ecx
mov dx, 0xd0
call fcn.0042e904
jmp 0x43509e
mov eax, ebp
xor ecx, ecx
mov dx, 0x64
call fcn.0042e904
mov bl, 1
mov eax, dword [0x48d27c]
mov dword [esp + 0x40], eax
lea esi, [ebp + 0x48]
mov eax, dword [esp + 0x40]
push dword [eax + 4]
push dword [eax]
call fcn.00410208
mov ecx, eax
xor edx, edx
mov dl, bl
add dx, 0x309
mov eax, ebp
call fcn.0042d910
mov edi, 1
mov eax, edi
add ax, 0xbf
dec eax
call fcn.0040bc04
mov edx, eax
mov eax, dword [esi]
call fcn.0042bb9c
inc edi
cmp edi, 7
jne 0x4350d1
xor eax, eax
mov al, bl
add ax, 0xc3
dec eax
call fcn.0040bc04
mov edx, eax
mov eax, dword [esi]
call fcn.0042bc08
inc ebx
add esi, 4
add dword [esp + 0x40], 8
cmp bl, 3
jne 0x4350ac
mov ax, 0x27d
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0x64
call fcn.0042d910
mov ax, 0x284
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0x190
call fcn.0042d910
mov ax, 0x285
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0x191
call fcn.0042d910
mov ax, 0x286
call fcn.0040bc04
push eax
mov eax, dword [ebp]
push eax
call sub.user32.dll_SetWindowTextA
cmp byte [ebp + 0x54], 0x28
jne 0x435342
mov ax, 0x1c9
call fcn.0040bc04
push eax
mov eax, dword [ebp]
push eax
call sub.user32.dll_SetWindowTextA
push 0
mov eax, dword [0x48d658]
mov eax, dword [eax + 0xc]
push eax
push 0x30
push 0x64
mov eax, dword [ebp]
push eax
call sub.user32.dll_SendDlgItemMessageA
xor ebx, ebx
mov eax, dword [0x48d7b8]
xor edx, edx
mov dword [eax], edx
mov word [esp + 0x24], 0
mov byte [esp + 0x44], 0
mov byte [0x49bae1], 0
mov eax, dword [0x48d7b8]
mov eax, dword [eax]
push eax
call sub.user32.dll_EnumClipboardFormats
mov edx, dword [0x48d7b8]
mov dword [edx], eax
mov eax, dword [0x48d7b8]
mov eax, dword [eax]
cmp eax, 0xd
ja case.0x4351de.0
jmp dword [eax*4 + 0x4351e5]
mov edx, 0x4385d4
lea eax, [esp + 0x44]
call fcn.00405c48
jmp 0x4352f2
mov edx, 0x4385dc
lea eax, [esp + 0x44]
call fcn.00405c48
jmp 0x4352f2
mov edx, 0x4385e8
lea eax, [esp + 0x44]
call fcn.00405c48
jmp 0x4352f2
mov edx, 0x4385f0
lea eax, [esp + 0x44]
call fcn.00405c48
jmp 0x4352f2
mov edx, 0x4385f8
lea eax, [esp + 0x44]
call fcn.00405c48
jmp 0x4352f2
mov edx, 0x438600
lea eax, [esp + 0x44]
call fcn.00405c48
jmp 0x4352f2
mov byte [0x49bae1], 1
mov edx, 0x438608
lea eax, [esp + 0x44]
call fcn.00405c48
mov eax, dword [0x48d550]
cmp byte [eax + 0x189e], 1
jne 0x4352f2
xor eax, eax
mov al, bl
mov word [esp + 0x24], ax
jmp 0x4352f2
mov edx, 0x438614
lea eax, [esp + 0x44]
call fcn.00405c48
mov eax, dword [0x48d550]
cmp byte [eax + 0x189e], 2
jne 0x4352f2
xor eax, eax
mov al, bl
mov word [esp + 0x24], ax
jmp 0x4352f2
push 0x1e
lea eax, [esp + 0x48]
push eax
mov eax, dword [0x48d7b8]
mov eax, dword [eax]
push eax
call sub.user32.dll_GetClipboardFormatNameA
cmp byte [esp + 0x44], 0
je 0x43530d
lea edx, [esp + 0x44]
mov eax, dword [0x49ba70]
call fcn.0042bb9c
inc ebx
mov byte [esp + 0x44], 0
mov eax, dword [0x48d7b8]
cmp dword [eax], 0
je 0x435320
cmp bl, 0x19
jne 0x4351b9
cmp byte [0x49bae1], 0
je 0x435338
mov edx, 0x438620
mov eax, dword [0x49ba70]
call fcn.0042bb9c
mov ax, word [esp + 0x24]
call fcn.0042bc30
cmp byte [ebp + 0x54], 0x29
jne 0x435429
mov eax, dword [0x48d930]
mov eax, dword [eax]
mov edx, dword [0x48d524]
mov eax, dword [edx + eax*4 - 4]
fild qword [eax + 0x494]
fcomp dword [0x4385d0]
fnstsw ax
sahf
setne al
mov byte [esp + 0x2c], al
xor eax, eax
mov al, byte [esp + 0x2c]
add ax, 0x155
call fcn.0040bc04
push eax
mov eax, dword [ebp]
push eax
call sub.user32.dll_SetWindowTextA
push 0
mov eax, dword [0x48d658]
mov eax, dword [eax + 0xc]
push eax
push 0x30
push 0x64
mov eax, dword [ebp]
push eax
call sub.user32.dll_SendDlgItemMessageA
mov edi, 1
mov eax, edi
add ax, 0xaf
dec eax
call fcn.0040bc04
mov edx, eax
mov eax, dword [0x49ba70]
call fcn.0042bb9c
inc edi
cmp edi, 0xf
jne 0x4353a9
mov eax, dword [0x48d550]
movzx eax, byte [eax + 0x18b1]
call fcn.0042bc30
mov ax, 0x26d
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0x12c
call fcn.0042d910
mov eax, ebp
mov cl, 1
mov dx, 0x12c
call fcn.0043863c
mov eax, dword [0x48d928]
cmp dword [eax], 1
jle 0x435429
mov eax, ebp
mov cl, 1
mov dx, 0x12c
call fcn.0042e904
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x18eb]
mov eax, ebp
mov cx, 0x12c
call fcn.0042d8fc
cmp byte [ebp + 0x54], 0x2d
jne 0x43552a
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x18d8]
mov eax, ebp
mov cx, 0xb
call fcn.0042d8fc
mov eax, dword [0x48d498]
xor edx, edx
mov dword [eax], edx
mov ax, 6
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 2
call fcn.0042d910
mov ax, 0xa
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 3
call fcn.0042d910
mov ax, 0x287
call fcn.0040bc04
push eax
mov eax, dword [ebp]
push eax
call sub.user32.dll_SetWindowTextA
mov ax, 0x288
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0xb
call fcn.0042d910
mov ax, 0x289
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 1
call fcn.0042d910
mov ax, 0x28a
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 4
call fcn.0042d910
mov ax, 0x28b
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 5
call fcn.0042d910
mov eax, ebp
call fcn.0043184c
mov eax, ebp
call fcn.0042de74
mov edx, dword [0x48d550]
movsx edx, word [edx + 0x1838]
mov eax, dword [ebp + 0x1c]
dec eax
call fcn.0040bb7c
mov edx, dword [0x48d550]
mov word [edx + 0x1838], ax
mov eax, dword [0x48d550]
movsx eax, word [eax + 0x1838]
mov dword [ebp + 0x18], eax
cmp byte [ebp + 0x54], 0x3e
jne 0x435665
mov eax, ebp
xor ecx, ecx
mov dx, 2
call fcn.0043863c
mov eax, ebp
xor ecx, ecx
mov dx, 5
call fcn.0043863c
mov ecx, dword [0x48d2b4]
mov eax, ebp
mov dx, 1
call fcn.0042d910
mov ax, 5
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 2
call fcn.0042d910
mov ax, 6
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 3
call fcn.0042d910
mov ax, 8
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 4
call fcn.0042d910
cmp byte [0x49bae0], 0
jne 0x4355c1
mov ax, 0x2cc
call fcn.0040bc04
mov edx, eax
mov eax, dword [0x48da44]
call fcn.00405c48
jmp 0x4355eb
xor eax, eax
mov al, byte [0x49bae0]
mov dword [esp + 0x174], eax
fild dword [esp + 0x174]
add esp, 0xfffffff8
fistp qword [esp]
wait
mov ax, 0xab
call fcn.0040bc04
call fcn.0040f4d4
mov eax, dword [0x48da44]
push eax
mov eax, dword [ebp]
push eax
call sub.user32.dll_SetWindowTextA
mov eax, ebp
call fcn.004319a0
mov eax, ebp
call fcn.0042e3cc
or ebx, 0xffffffff
inc ebx
movsx eax, bx
cmp eax, dword [ebp + 0x1c]
jge 0x43562a
mov eax, ebp
mov edx, ebx
call fcn.0042c390
movsx eax, ax
mov edx, dword [0x48d930]
cmp eax, dword [edx]
jne 0x43560b
movsx eax, bx
cmp eax, dword [ebp + 0x1c]
jge 0x43563a
movsx eax, bx
mov dword [ebp + 0x18], eax
jmp 0x435641
mov dword [ebp + 0x18], 0xffffffff
cmp dword [ebp + 0x18], 0xffffffff
setg cl
mov eax, ebp
mov dx, 3
call fcn.0042e904
cmp dword [ebp + 0x18], 0xffffffff
setg cl
mov eax, ebp
mov dx, 4
call fcn.0042e904
cmp byte [ebp + 0x54], 0x2c
jne 0x435672
mov eax, ebp
call fcn.00430180
cmp byte [ebp + 0x54], 0x3a
jne 0x4356ce
mov eax, ebp
call fcn.00431194
mov eax, dword [0x48d510]
cmp dword [eax], 0
jle 0x435693
mov eax, dword [0x48d4cc]
cmp dword [eax], 0
jg 0x435697
xor ecx, ecx
jmp 0x435699
mov cl, 1
mov eax, ebp
mov dx, 1
call fcn.0042e904
mov eax, dword [0x48d4cc]
cmp dword [eax], 0x3e7
jg 0x4356bf
mov eax, ebp
mov edx, 1
call fcn.0042db98
jmp 0x4356ce
push 0
push 0x64
push 1
mov eax, dword [ebp]
push eax
call sub.user32.dll_SetTimer
cmp byte [ebp + 0x54], 3
je 0x4356de
cmp byte [ebp + 0x54], 5
jne 0x43580e
mov ax, 8
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 1
call fcn.0042d910
mov ax, 6
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 2
call fcn.0042d910
mov ax, 0x27e
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 4
call fcn.0042d910
push 0x64
mov eax, dword [ebp]
push eax
call sub.user32.dll_GetDlgItem
mov ebx, eax
cmp byte [ebp + 0x54], 3
jne 0x43579d
mov eax, ebx
call fcn.00432dd0
test al, al
je 0x4385aa
push 0
push 0
push 0xb1
push ebx
call sub.user32.dll_SendMessageA
mov ax, 0x235
call fcn.0040bc04
mov edx, eax
mov eax, dword [0x48da44]
call fcn.00405c48
push 0x43862c
mov eax, dword [0x48da44]
push eax
call sub.kernel32.dll_lstrcatA
mov eax, dword [0x48d944]
call fcn.0040fb28
push eax
mov eax, dword [0x48da44]
push eax
call sub.kernel32.dll_lstrcatA
mov eax, dword [0x48da44]
push eax
mov eax, dword [ebp]
push eax
call sub.user32.dll_SetWindowTextA
jmp 0x4357d8
mov eax, dword [0x48d944]
mov byte [eax], 0
mov ecx, dword [0x48d6d0]
mov eax, ebp
mov dx, 0x64
call fcn.0042d910
push 0xa
push 0xa
push 0xb1
push ebx
call sub.user32.dll_SendMessageA
mov ax, 0x235
call fcn.0040bc04
push eax
mov eax, dword [ebp]
push eax
call sub.user32.dll_SetWindowTextA
push 0
mov eax, dword [0x48d658]
mov eax, dword [eax]
push eax
push 0x30
push ebx
call sub.user32.dll_SendMessageA
mov eax, dword [0x48d498]
mov dword [eax], 0xc
mov eax, dword [0x48d498]
push eax
push 1
push 0xcb
push ebx
call sub.user32.dll_SendMessageA
push ebx
call sub.user32.dll_SetFocus
mov al, byte [ebp + 0x54]
cmp al, 3
je 0x435825
cmp al, 5
je 0x435825
cmp al, 0x13
je 0x435825
cmp al, 0xf
je 0x435825
cmp al, 0x31
jne 0x43584a
mov eax, dword [0x48d858]
mov eax, dword [eax]
call fcn.00405aec
push eax
mov eax, dword [0x48e700]
push eax
mov eax, 0x43311c
push eax
push 2
call sub.user32.dll_SetWindowsHookExA
mov dword [0x49bac4], eax
cmp byte [ebp + 0x54], 2
jne 0x4358a3
mov eax, ebp
mov dl, 1
call fcn.004310b4
xor edx, edx
xor eax, eax
call fcn.00430f28
push 0xd
mov eax, dword [0x48d738]
mov eax, dword [eax]
push eax
call sub.user32.dll_LoadIconA
mov edx, eax
mov eax, dword [0x49baf8]
call fcn.0040b2b8
mov dword [0x49ba8c], eax
mov eax, dword [ebp + 4]
mov ecx, 1
mov edx, dword [0x49baf8]
call fcn.0040b2f4
mov eax, ebp
call fcn.00431504
mov eax, ebp
call fcn.004315e0
cmp byte [ebp + 0x54], 0x10
je 0x4358b3
cmp byte [ebp + 0x54], 0x11
jne 0x43593b
mov eax, 0xa8
call fcn.0042b9f4
mov eax, dword [0x48da44]
push eax
mov eax, dword [ebp]
push eax
call sub.user32.dll_SetWindowTextA
cmp byte [ebp + 0x54], 0x10
jne 0x435901
mov ax, 0x318
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0xcf
call fcn.0042d910
mov ecx, dword [0x48d550]
add ecx, 0x859
mov eax, ebp
mov dx, 0x30a
call fcn.0042d910
jmp 0x43593b
mov ax, 0x319
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0xcf
call fcn.0042d910
mov eax, dword [0x48d550]
fild dword [eax + 0x16f4]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.004123c0
mov ecx, eax
mov eax, ebp
mov dx, 0x30a
call fcn.0042d910
cmp byte [ebp + 0x54], 0x26
jne 0x4359b1
mov ax, 0x1a0
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0xcf
call fcn.0042d910
mov ax, 0x9b
call fcn.0040bc04
push eax
mov eax, dword [ebp]
push eax
call sub.user32.dll_SetWindowTextA
mov eax, dword [0x48d930]
mov eax, dword [eax]
mov edx, dword [0x48d524]
mov eax, dword [edx + eax*4 - 4]
mov eax, dword [eax + 0x4a8]
mov dword [esp + 0x178], eax
xor eax, eax
mov dword [esp + 0x17c], eax
fild qword [esp + 0x178]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.004123c0
mov ecx, eax
mov eax, ebp
mov dx, 0x30a
call fcn.0042d910
cmp byte [ebp + 0x54], 0x25
je 0x4359bd
cmp byte [ebp + 0x54], 0x26
jne 0x4359e2
mov eax, 0x7e
call fcn.0042b9f4
mov eax, dword [0x48da44]
mov dl, 0x26
call fcn.0040fa38
mov eax, dword [0x48da44]
push eax
mov eax, dword [ebp]
push eax
call sub.user32.dll_SetWindowTextA
cmp byte [ebp + 0x54], 0x25
jne 0x435b4f
mov eax, ebp
mov cx, 0xc8
mov dl, 1
call fcn.0042d8fc
mov eax, ebp
xor ecx, ecx
mov dx, 0x64
call fcn.0042e904
mov eax, dword [0x48d390]
movsx eax, byte [eax]
mov edx, dword [0x48d270]
mov eax, dword [edx + eax*4 + 0x98]
mov dword [esp + 0x178], eax
xor eax, eax
mov dword [esp + 0x17c], eax
fild qword [esp + 0x178]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.004123c0
mov ecx, eax
mov eax, ebp
mov dx, 0x14
call fcn.0042d910
mov eax, dword [0x48d390]
movsx eax, byte [eax]
mov edx, eax
shl eax, 3
sub eax, edx
mov edx, dword [0x48d8cc]
lea eax, [edx + eax*2 + 0x214]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x34]
movzx eax, word [eax]
mov dword [esp + 0x174], eax
fild dword [esp + 0x174]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.004123c0
mov ecx, eax
mov eax, ebp
mov dx, 0x15
call fcn.0042d910
mov eax, dword [esp + 0x34]
movzx eax, word [eax + 2]
mov dword [esp + 0x174], eax
fild dword [esp + 0x174]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.004123c0
mov ecx, eax
mov eax, ebp
mov dx, 0x16
call fcn.0042d910
mov eax, dword [esp + 0x34]
movzx eax, word [eax + 4]
mov dword [esp + 0x174], eax
fild dword [esp + 0x174]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.004123c0
mov ecx, eax
mov eax, ebp
mov dx, 0x17
call fcn.0042d910
mov ax, 0x2ca
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0xa
call fcn.0042d910
mov ax, 0x1b3
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0xb
call fcn.0042d910
mov ax, 0x1b5
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0xc
call fcn.0042d910
mov ax, 0x1b7
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0xd
call fcn.0042d910
cmp byte [ebp + 0x54], 0x24
jne 0x435e47
mov eax, dword [0x48d8b0]
mov byte [eax], 1
mov eax, dword [0x48d550]
mov eax, dword [eax + 0x1778]
mov edx, dword [0x48d564]
cmp eax, dword [edx]
jbe 0x435b89
mov eax, dword [0x48d564]
mov eax, dword [eax]
mov edx, dword [0x48d550]
mov dword [edx + 0x1778], eax
mov eax, dword [0x48d550]
mov eax, dword [eax + 0x1778]
mov dword [esp + 0x178], eax
xor eax, eax
mov dword [esp + 0x17c], eax
fild qword [esp + 0x178]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.004123c0
mov ecx, eax
mov eax, ebp
mov dx, 0xd0
call fcn.0042d910
mov eax, dword [0x48d930]
mov eax, dword [eax]
mov edx, dword [0x48d524]
mov eax, dword [edx + eax*4 - 4]
cmp byte [eax + 0x55d], 0
jle 0x435cc6
mov eax, dword [0x48d930]
mov eax, dword [eax]
mov edx, dword [0x48d524]
mov eax, dword [edx + eax*4 - 4]
movsx eax, byte [eax + 0x55d]
mov edx, dword [0x48d340]
movsx eax, byte [edx + eax - 1]
mov edx, dword [0x48d498]
mov dword [edx], eax
mov eax, dword [0x48d498]
cmp dword [eax], 1
je 0x435c39
mov eax, dword [0x48d498]
cmp dword [eax], 2
je 0x435c39
mov eax, dword [0x48d498]
cmp dword [eax], 3
je 0x435c39
mov eax, dword [0x48d498]
cmp dword [eax], 0xffffffff
jne 0x435cc6
mov eax, ebp
mov cl, 1
mov dx, 0xd1
call fcn.0043863c
mov eax, ebp
mov cl, 1
mov dx, 0xd2
call fcn.0043863c
mov eax, dword [0x48d930]
mov eax, dword [eax]
mov edx, dword [0x48d524]
mov eax, dword [edx + eax*4 - 4]
lea edx, [eax + 0x4a4]
mov eax, dword [0x48d550]
mov eax, dword [eax + 0x1778]
call fcn.0041ea20
mov edx, dword [0x48d498]
mov dword [edx], eax
mov eax, dword [0x48d498]
cmp dword [eax], 0xffffffff
jne 0x435c9e
mov ecx, 0x438630
mov eax, ebp
mov dx, 0xd1
call fcn.0042d910
jmp 0x435cbe
mov eax, dword [0x48d498]
fild dword [eax]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.004123c0
mov ecx, eax
mov eax, ebp
mov dx, 0xd1
call fcn.0042d910
mov eax, dword [0x48d8b0]
mov byte [eax], 0
mov eax, dword [0x48d390]
cmp byte [eax], 0
jle 0x435cef
mov eax, ebp
xor ecx, ecx
mov dx, 0xc8
call fcn.0042e904
mov eax, ebp
mov cx, 0x64
mov dl, 1
call fcn.0042d8fc
jmp 0x435db3
mov eax, dword [0x48d550]
movzx eax, byte [eax + 0x18c6]
inc eax
imul cx, ax, 0x64
mov eax, ebp
mov dl, 1
call fcn.0042d8fc
lea eax, [esp + 0x1e]
push eax
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x22]
mov edx, dword [0x48d550]
mov edx, dword [edx + 0x1778]
mov eax, dword [0x48d390]
mov al, byte [eax]
call fcn.00412fa8
movzx eax, word [esp + 0x1a]
mov dword [esp + 0x174], eax
fild dword [esp + 0x174]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.004123c0
mov ecx, eax
mov eax, ebp
mov dx, 0xc9
call fcn.0042d910
movzx eax, word [esp + 0x1e]
mov dword [esp + 0x174], eax
fild dword [esp + 0x174]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.004123c0
mov ecx, eax
mov eax, ebp
mov dx, 0xca
call fcn.0042d910
movzx eax, word [esp + 0x1c]
mov dword [esp + 0x174], eax
fild dword [esp + 0x174]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.004123c0
mov ecx, eax
mov eax, ebp
mov dx, 0xcb
call fcn.0042d910
mov bl, 0xc9
mov eax, ebp
mov dx, 0xc8
call fcn.0043affc
mov ecx, eax
xor edx, edx
mov dl, bl
mov eax, ebp
call fcn.0042e904
inc ebx
cmp bl, 0xcf
jne 0x435db5
xor ebx, ebx
mov eax, ebp
mov dx, 0x64
call fcn.0043affc
mov ecx, eax
xor edx, edx
mov dl, bl
add dx, 0xcf
mov eax, ebp
call fcn.0042e904
inc ebx
cmp bl, 4
jne 0x435dd5
xor ebx, ebx
mov eax, ebp
mov dx, 0x64
call fcn.0043affc
mov ecx, eax
xor edx, edx
mov dl, bl
add dx, 0xd0
mov eax, ebp
call fcn.0042e904
inc ebx
cmp bl, 2
jne 0x435dfa
mov eax, ebp
mov dx, 0x64
call fcn.0043affc
and eax, 0x7f
mov edx, eax
shl eax, 3
sub eax, edx
add eax, 0xc9
push eax
mov eax, dword [ebp]
push eax
call sub.user32.dll_GetDlgItem
push eax
call sub.user32.dll_SetFocus
cmp byte [ebp + 0x54], 0x27
jne 0x435ef2
mov eax, dword [0x48d550]
mov eax, dword [eax + 0x1770]
mov edx, dword [0x48d564]
cmp eax, dword [edx]
jbe 0x435e79
mov eax, dword [0x48d564]
mov eax, dword [eax]
mov edx, dword [0x48d550]
mov dword [edx + 0x1770], eax
mov eax, dword [0x48d550]
mov eax, dword [eax + 0x1770]
mov dword [esp + 0x178], eax
xor eax, eax
mov dword [esp + 0x17c], eax
fild qword [esp + 0x178]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.004123c0
mov ecx, eax
mov eax, ebp
mov dx, 0xd0
call fcn.0042d910
mov ax, 0x26f
call fcn.0040bc04
push eax
mov ax, 0x331
call fcn.0040bc04
pop edx
call fcn.0040f5a0
mov eax, dword [0x48da44]
push eax
mov eax, dword [ebp]
push eax
call sub.user32.dll_SetWindowTextA
mov ax, 0x270
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0xc8
call fcn.0042d910
cmp byte [ebp + 0x54], 0x1f
jne 0x435f58
mov eax, dword [0x48d550]
movzx eax, byte [eax + 0x18be]
add ax, 0x10
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0xd0
call fcn.0042d910
mov eax, dword [0x48d550]
push dword [eax + 0x16e8]
push dword [eax + 0x16e4]
call fcn.00410208
mov ecx, eax
mov eax, ebp
mov dx, 0x30a
call fcn.0042d910
mov ecx, dword [0x48d550]
movzx ecx, byte [ecx + 0x1896]
add cx, 0x12d
mov eax, ebp
mov dl, 1
call fcn.0042d8fc
cmp byte [ebp + 0x54], 0x1e
jne 0x4361ca
mov eax, dword [0x48d930]
mov eax, dword [eax]
mov edx, dword [0x48d524]
mov eax, dword [edx + eax*4 - 4]
cmp dword [eax + 0x4c], 0
je 0x435f87
mov eax, dword [0x48d550]
cmp byte [eax + 0x18e5], 0
jne 0x435f8b
xor eax, eax
jmp 0x435f8d
mov al, 1
mov byte [esp + 0x2d], al
mov eax, dword [0x48d550]
mov al, byte [eax + 0x18be]
or al, byte [esp + 0x2d]
and eax, 0x7f
add ax, 0x10
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0xd0
call fcn.0042d910
mov eax, dword [0x48d550]
push dword [eax + 0x1700]
push dword [eax + 0x16fc]
call fcn.00410208
mov ecx, eax
mov eax, ebp
mov dx, 0x30a
call fcn.0042d910
mov bl, 9
mov esi, dword [0x48d550]
add esi, 0x1724
fild qword [esi]
fcomp dword [0x4385d0]
fnstsw ax
sahf
jbe 0x43600b
push dword [esi + 4]
push dword [esi]
call fcn.00410208
mov edx, eax
mov eax, dword [ebp + 0x48]
call fcn.0042bb9c
add esi, 8
dec bl
jne 0x435fea
cmp byte [esp + 0x2d], 0
je 0x436032
mov eax, dword [0x48d550]
mov byte [eax + 0x1894], 1
mov eax, ebp
xor ecx, ecx
mov dx, 4
call fcn.0042e904
mov eax, dword [0x48d550]
cmp byte [eax + 0x1894], 5
jne 0x436080
mov eax, dword [0x48d930]
mov eax, dword [eax]
mov edx, dword [0x48d524]
mov eax, dword [edx + eax*4 - 4]
cmp byte [eax + 0x8d], 0
jne 0x436080
mov eax, dword [0x48d930]
mov eax, dword [eax]
mov edx, dword [0x48d524]
mov eax, dword [edx + eax*4 - 4]
cmp byte [eax + 0x8e], 0
jne 0x436080
mov eax, dword [0x48d550]
mov byte [eax + 0x1894], 1
mov eax, dword [0x48d550]
movzx eax, byte [eax + 0x1894]
mov ecx, dword [eax*4 + 0x48c334]
mov eax, ebp
mov dx, 4
call fcn.0042d910
mov eax, dword [0x48d550]
cmp byte [eax + 0x188c], 1
jne 0x4360dc
mov edi, 0x12c
mov esi, 0x48c34c
mov eax, ebp
mov ecx, dword [esi]
mov edx, edi
call fcn.0042d910
inc edi
add esi, 4
cmp edi, 0x132
jne 0x4360b6
mov eax, dword [0x48c364]
push eax
mov eax, dword [ebp]
push eax
call sub.user32.dll_SetWindowTextA
cmp byte [esp + 0x2d], 0
je 0x4361af
mov edi, 1
mov edx, edi
add dx, 0x12c
mov eax, ebp
xor ecx, ecx
call fcn.0042e904
inc edi
cmp edi, 4
jne 0x4360ec
mov eax, ebp
mov cx, 0x12c
mov dl, 1
call fcn.0042d8fc
mov eax, ebp
xor ecx, ecx
mov dx, 0x30a
call fcn.0043863c
mov eax, ebp
mov cl, 1
mov dx, 0x30b
call fcn.0043863c
mov eax, dword [0x48d550]
push dword [eax + 0x1700]
push dword [eax + 0x16fc]
call fcn.0040fdac
mov edx, dword [0x48d930]
mov edx, dword [edx]
mov ecx, dword [0x48d524]
mov edx, dword [ecx + edx*4 - 4]
mov edx, dword [edx + 0x4c]
call fcn.00419530
mov edx, dword [0x48d498]
mov dword [edx], eax
mov eax, dword [0x48d498]
fild dword [eax]
add esp, 0xfffffff8
fistp qword [esp]
wait
mov dl, 8
xor eax, eax
call fcn.0040fe88
mov ecx, eax
mov eax, ebp
mov dx, 0x30b
call fcn.0042d910
mov ax, 0x111
call fcn.0040bc04
push eax
mov ax, 0x331
call fcn.0040bc04
pop edx
call fcn.0040f5a0
mov eax, dword [0x48da44]
push eax
mov eax, dword [ebp]
push eax
call sub.user32.dll_SetWindowTextA
jmp 0x4361ca
mov ecx, dword [0x48d550]
movzx ecx, byte [ecx + 0x1895]
add cx, 0x12c
mov eax, ebp
mov dl, 1
call fcn.0042d8fc
cmp byte [ebp + 0x54], 0x32
je 0x4361da
cmp byte [ebp + 0x54], 0x3d
jne 0x436272
mov bl, 1
mov eax, ebx
call fcn.00430420
mov ecx, eax
xor edx, edx
mov dl, bl
add dx, 0x64
mov eax, ebp
call fcn.0042d910
inc ebx
cmp bl, 7
jne 0x4361dc
cmp byte [ebp + 0x54], 0x32
jne 0x436245
mov ecx, dword [0x48d550]
movzx ecx, byte [ecx + 0x18b0]
add cx, 0x64
mov eax, ebp
mov dl, 1
call fcn.0042d8fc
mov ax, 9
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 3
call fcn.0042d910
mov ax, 0x26e
call fcn.0040bc04
push eax
mov eax, dword [ebp]
push eax
call sub.user32.dll_SetWindowTextA
jmp 0x436272
mov ax, 0x95
call fcn.0040bc04
push eax
mov eax, dword [ebp]
push eax
call sub.user32.dll_SetWindowTextA
mov ecx, dword [0x48d550]
movzx ecx, byte [ecx + 0x18a2]
add cx, 0x64
mov eax, ebp
mov dl, 1
call fcn.0042d8fc
cmp byte [ebp + 0x54], 0x3f
jne 0x4363c7
mov bl, 1
mov esi, dword [0x48d550]
add esi, 0x1910
cmp bl, 8
jae 0x4362a7
mov eax, ebx
call fcn.00430420
mov ecx, eax
xor edx, edx
mov dl, bl
add dx, 0x64
mov eax, ebp
call fcn.0042d910
xor ecx, ecx
mov cl, bl
add cx, 0x64
mov eax, ebp
mov dl, byte [esi]
call fcn.0042d8fc
inc ebx
inc esi
cmp bl, 0x1a
jne 0x43628a
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x18ef]
mov eax, ebp
mov cx, 0x63
call fcn.0042d8fc
mov ecx, dword [0x48d550]
mov cl, byte [ecx + 0x1926]
mov eax, ebp
mov dx, 0x63
call fcn.0042e904
mov ax, 0x28d
call fcn.0040bc04
push eax
mov eax, dword [ebp]
push eax
call sub.user32.dll_SetWindowTextA
mov ax, 0x28e
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0x6c
call fcn.0042d910
mov ax, 0x28f
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0x63
call fcn.0042d910
mov ax, 0x1fa
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0x71
call fcn.0042d910
mov eax, dword [0x48d550]
movsx eax, byte [eax + 0x187c]
mov dword [esp + 0x174], eax
fild dword [esp + 0x174]
add esp, 0xfffffff8
fistp qword [esp]
wait
mov al, 2
call fcn.00412400
mov ecx, eax
mov eax, ebp
mov dx, 0x73
call fcn.0042d910
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x1889]
mov eax, ebp
mov cx, 0x64
call fcn.0042d8fc
mov eax, dword [0x48d550]
movzx eax, byte [eax + 0x1887]
push eax
push 0x75
mov eax, dword [ebp]
push eax
call sub.user32.dll_CheckDlgButton
mov eax, dword [0x48d550]
mov al, byte [eax + 0x1887]
call fcn.00411ed4
mov ecx, dword [0x48da44]
mov eax, ebp
mov dx, 0x75
call fcn.0042d910
cmp byte [ebp + 0x54], 0x2b
jne 0x436583
mov edi, 1
mov esi, dword [0x48d5ac]
cmp byte [esi], 0
je 0x4363f4
movsx eax, byte [esi]
mov edx, dword [0x48d524]
cmp dword [edx + eax*4 - 4], 0
jne 0x4363f4
mov byte [esi], 0
cmp byte [esi], 0
je 0x436416
movsx eax, byte [esi]
mov edx, dword [0x48d524]
mov eax, dword [edx + eax*4 - 4]
mov ecx, dword [eax + 0x14]
mov edx, edi
add dx, 0x64
mov eax, ebp
call fcn.0042d910
inc edi
inc esi
cmp edi, 3
jne 0x4363dc
mov ecx, dword [0x48d89c]
mov ecx, dword [ecx]
mov eax, ebp
mov dx, 0x67
call fcn.0042d910
mov eax, dword [0x48d550]
movzx eax, byte [eax + 0x18bc]
add eax, eax
add ax, 0x157
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0xc9
call fcn.0042d910
mov eax, dword [0x48d550]
movzx eax, byte [eax + 0x18bc]
add eax, eax
add ax, 0x158
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0xcc
call fcn.0042d910
mov eax, dword [0x48d550]
movzx eax, word [eax + 0x1870]
mov dword [esp + 0x174], eax
fild dword [esp + 0x174]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.004123c0
mov ecx, eax
mov eax, ebp
mov dx, 0xcb
call fcn.0042d910
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x18b5]
mov eax, ebp
mov cx, 0x197
call fcn.0042d8fc
mov eax, dword [0x48d550]
cmp byte [eax + 0x18b5], 0
je 0x4364dd
mov eax, ebp
mov cl, 1
mov dx, 0xcb
call fcn.0042e904
mov eax, dword [0x48d3bc]
push dword [eax + 4]
push dword [eax]
call fcn.00410208
mov ecx, eax
mov eax, ebp
mov dx, 0x12d
call fcn.0042d910
mov eax, dword [0x48d3bc]
push dword [eax + 0xc]
push dword [eax + 8]
call fcn.00410208
mov ecx, eax
mov eax, ebp
mov dx, 0x12e
call fcn.0042d910
mov eax, dword [0x48da98]
push dword [eax + 4]
push dword [eax]
call fcn.004123c0
mov ecx, eax
mov eax, ebp
mov dx, 0x12f
call fcn.0042d910
mov edi, 0x191
mov eax, edi
add ax, 0x2cf
sub ax, 0x191
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov edx, edi
call fcn.0042d910
inc edi
cmp edi, 0x198
jne 0x436537
mov ax, 0x87
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0x198
call fcn.0042d910
mov ax, 0x2d6
call fcn.0040bc04
push eax
mov eax, dword [ebp]
push eax
call sub.user32.dll_SetWindowTextA
cmp byte [ebp + 0x54], 0x20
je 0x436593
cmp byte [ebp + 0x54], 0x21
jne 0x436705
mov ecx, dword [0x48d550]
add ecx, 0x800
mov eax, ebp
mov dx, 0x30b
call fcn.0042d910
mov eax, ebp
mov dl, 1
call fcn.0042e7dc
cmp byte [ebp + 0x54], 0x20
jne 0x436624
mov eax, dword [0x48d4e4]
push dword [eax + 4]
push dword [eax]
call fcn.00410208
mov ecx, eax
mov eax, ebp
mov dx, 0x30e
call fcn.0042d910
mov eax, dword [0x48d1d4]
push dword [eax + 4]
push dword [eax]
call fcn.00410208
mov ecx, eax
mov eax, ebp
mov dx, 0x30f
call fcn.0042d910
mov eax, dword [0x48d550]
cmp byte [eax + 0x189e], 1
sete dl
mov eax, ebp
mov cx, 0x30c
call fcn.0042d8fc
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x18df]
mov eax, ebp
mov cx, 0x311
call fcn.0042d8fc
jmp 0x436658
mov eax, ebp
xor ecx, ecx
mov dx, 0x30e
call fcn.0042e904
mov eax, ebp
xor ecx, ecx
mov dx, 0x30f
call fcn.0042e904
mov eax, ebp
xor ecx, ecx
mov dx, 0x30c
call fcn.0042e904
mov eax, ebp
xor ecx, ecx
mov dx, 0x311
call fcn.0043863c
mov edx, dword [0x48d3e4]
mov dl, byte [edx]
mov eax, ebp
mov cx, 0x310
call fcn.0042d8fc
mov bl, 1
jmp 0x4366b4
mov edx, dword [0x48d364]
mov eax, dword [0x48da44]
call fcn.00405c48
push 0x438634
mov eax, dword [0x48da44]
push eax
call sub.kernel32.dll_lstrcatA
mov eax, dword [0x48d364]
add eax, 0x8e
push eax
mov eax, dword [0x48da44]
push eax
call sub.kernel32.dll_lstrcatA
mov edx, dword [0x48da44]
mov eax, dword [ebp + 0x48]
call fcn.0042bb9c
inc ebx
mov eax, ebp
mov edx, ebx
call fcn.0042bc98
test al, al
jne 0x43666f
mov edx, dword [0x48d3c0]
mov eax, dword [0x48da44]
call fcn.00405c48
push 0x438634
mov eax, dword [0x48da44]
push eax
call sub.kernel32.dll_lstrcatA
mov eax, dword [0x48d3c0]
add eax, 0x8e
push eax
mov eax, dword [0x48da44]
push eax
call sub.kernel32.dll_lstrcatA
mov edx, dword [0x48da44]
mov eax, dword [ebp + 0x48]
call fcn.0042bc08
cmp byte [ebp + 0x54], 0x12
jb 0x4367ee
cmp byte [ebp + 0x54], 0x16
ja 0x4367ee
mov eax, dword [0x48d928]
cmp dword [eax], 1
jle 0x436747
mov eax, ebp
mov cl, 1
mov dx, 0x325
call fcn.0042e904
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x18c8]
mov eax, ebp
mov cx, 0x325
call fcn.0042d8fc
mov eax, dword [0x48d628]
cmp byte [eax], 0
jne 0x4367c0
mov eax, dword [0x48d550]
cmp byte [eax + 0x18c1], 0
je 0x436781
mov eax, dword [0x48d930]
mov eax, dword [eax]
mov edx, dword [0x48d524]
mov eax, dword [edx + eax*4 - 4]
fild qword [eax + 0x494]
fcomp dword [0x4385d0]
fnstsw ax
sahf
jne 0x436785
xor edx, edx
jmp 0x436787
mov dl, 1
mov eax, ebp
mov cx, 0x324
call fcn.0042d8fc
mov eax, dword [0x48d930]
mov eax, dword [eax]
mov edx, dword [0x48d524]
mov eax, dword [edx + eax*4 - 4]
fild qword [eax + 0x494]
fcomp dword [0x4385d0]
fnstsw ax
sahf
setne cl
mov eax, ebp
mov dx, 0x324
call fcn.0042e904
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x18b7]
mov eax, ebp
mov cx, 0x326
call fcn.0042d8fc
mov ecx, dword [0x48d550]
mov cl, byte [ecx + 0x18b7]
mov eax, ebp
mov dx, 0xd0
call fcn.0042e904
cmp byte [ebp + 0x54], 0x12
je 0x43680a
cmp byte [ebp + 0x54], 0x13
je 0x43680a
cmp byte [ebp + 0x54], 0x14
je 0x43680a
cmp byte [ebp + 0x54], 0x17
jne 0x43688a
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x1930]
mov eax, ebp
mov cx, 0x329
call fcn.0042d8fc
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x1934]
mov eax, ebp
mov cx, 0x328
call fcn.0042d8fc
mov edi, 1
mov esi, dword [0x48d550]
add esi, 0x17b0
fild dword [esi]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.004123c0
mov ecx, eax
mov edx, edi
add dx, 0xd0
mov eax, ebp
call fcn.0042d910
mov ecx, dword [0x48d550]
mov cl, byte [ecx + 0x1934]
mov edx, edi
add dx, 0xd0
mov eax, ebp
call fcn.0042e904
inc edi
add esi, 4
cmp edi, 3
jne 0x436849
cmp byte [ebp + 0x54], 0x13
jne 0x4368e9
mov ecx, dword [0x48d550]
add ecx, 0x1a7a
mov eax, ebp
mov dx, 0x30a
call fcn.0042d910
mov ecx, dword [0x48d550]
movzx ecx, byte [ecx + 0x1882]
add cx, 0x64
mov eax, ebp
mov dl, 1
call fcn.0042d8fc
mov eax, dword [0x48d550]
cmp byte [eax + 0x18a6], 1
je 0x4368e9
mov eax, ebp
xor ecx, ecx
mov dx, 0x64
call fcn.0043863c
mov eax, ebp
xor ecx, ecx
mov dx, 0x65
call fcn.0043863c
cmp byte [ebp + 0x54], 0xf
jne 0x436aa9
mov ax, 0x2ea
call fcn.0040bc04
mov edx, eax
mov eax, dword [0x48da44]
call fcn.00405c48
mov eax, dword [0x48d348]
push eax
mov eax, dword [0x48da44]
push eax
call sub.kernel32.dll_lstrcatA
mov eax, dword [0x48da44]
push eax
mov eax, dword [ebp]
push eax
call sub.user32.dll_SetWindowTextA
mov eax, dword [0x48da44]
mov byte [eax], 0
mov ebx, dword [0x48d550]
add ebx, 0x1b7a
push ebx
mov eax, dword [0x48da44]
push eax
call sub.kernel32.dll_lstrcatA
mov eax, ebx
call fcn.00405bdc
inc eax
add ebx, eax
cmp byte [ebx], 0
je 0x436961
mov eax, dword [0x48da44]
call fcn.0040cd5c
cmp byte [ebx], 0
jne 0x43693c
mov ecx, dword [0x48da44]
mov eax, ebp
mov dx, 0x30a
call fcn.0042d910
mov ecx, dword [0x48d550]
add ecx, 0x400
mov eax, ebp
mov dx, 0x71
call fcn.0042d910
mov eax, dword [0x48d550]
movsx eax, byte [eax + 0x1890]
add ax, 0x33d
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0xc9
call fcn.0042d910
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x18a1]
xor dl, 1
mov eax, ebp
mov cx, 0xca
call fcn.0042d8fc
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x1831]
mov eax, ebp
mov cx, 0xcb
call fcn.0042d8fc
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x187b]
mov eax, ebp
mov cx, 0xcc
call fcn.0042d8fc
mov edx, dword [0x48d550]
mov dl, byte [edx + 0xa46]
mov eax, ebp
mov cx, 0xcd
call fcn.0042d8fc
mov ax, 0x121
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0xcb
call fcn.0042d910
mov eax, dword [0x48d930]
mov eax, dword [eax]
mov edx, dword [0x48d524]
mov eax, dword [edx + eax*4 - 4]
movsx eax, byte [eax + 0x55d]
mov edx, dword [0x48d340]
cmp byte [edx + eax - 1], 0xff
setne cl
mov eax, ebp
mov dx, 0xca
call fcn.0043863c
mov ecx, dword [0x48d2a0]
mov cl, byte [ecx]
mov eax, ebp
mov dx, 0xcb
call fcn.0043863c
mov eax, dword [0x48d930]
mov eax, dword [eax]
mov edx, dword [0x48d524]
mov eax, dword [edx + eax*4 - 4]
movsx eax, byte [eax + 0x55d]
mov edx, dword [0x48d340]
cmp byte [edx + eax - 1], 0xff
jne 0x436a98
mov eax, dword [0x48d4c8]
cmp byte [eax], 0
jne 0x436a9c
xor ecx, ecx
jmp 0x436a9e
mov cl, 1
mov eax, ebp
mov dx, 0xcd
call fcn.0043863c
cmp byte [ebp + 0x54], 0x12
je 0x436abf
cmp byte [ebp + 0x54], 0x13
je 0x436abf
cmp byte [ebp + 0x54], 0x15
jne 0x436be2
cmp byte [ebp + 0x54], 0x13
je 0x436b0a
mov ecx, dword [0x48d550]
add ecx, 0x12a3
mov eax, ebp
mov dx, 0x30a
call fcn.0042d910
mov bl, 9
mov esi, dword [0x48d550]
add esi, 0x1309
cmp byte [esi], 0
je 0x436af9
mov edx, esi
mov eax, dword [ebp + 0x48]
call fcn.0042bb9c
add esi, 0x33
dec bl
jne 0x436aea
mov eax, dword [0x48d570]
call fcn.0040ccc8
mov eax, dword [0x48d550]
mov al, byte [eax + 0x189c]
mov edx, dword [0x48da44]
mov byte [edx], al
mov eax, dword [0x48da44]
mov byte [eax + 1], 0
mov ecx, dword [0x48da44]
mov eax, ebp
mov dx, 0xd0
call fcn.0042d910
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x18bf]
mov eax, ebp
mov cx, 0x323
call fcn.0042d8fc
mov eax, dword [0x48d550]
cmp byte [eax + 0x18b3], 0
jne 0x436b6e
mov eax, dword [0x48d550]
cmp byte [eax + 0x188a], 0
jne 0x436b6e
xor edx, edx
jmp 0x436b70
mov dl, 1
mov eax, ebp
mov cx, 0x322
call fcn.0042d8fc
mov eax, dword [0x48d550]
cmp byte [eax + 0x188a], 0
jne 0x436bc8
cmp byte [ebp + 0x54], 0x13
je 0x436bab
mov eax, dword [0x48d550]
cmp byte [eax + 0x18c0], 0
setne dl
mov eax, ebp
mov cx, 0x327
call fcn.0042d8fc
jmp 0x436be2
mov eax, dword [0x48d550]
movzx eax, byte [eax + 0x18c0]
push eax
push 0x327
mov eax, dword [ebp]
push eax
call sub.user32.dll_CheckDlgButton
jmp 0x436be2
mov eax, ebp
xor ecx, ecx
mov dx, 0x327
call fcn.0042e904
mov eax, ebp
xor ecx, ecx
mov dx, 0x322
call fcn.0042e904
cmp byte [ebp + 0x54], 0x15
jne 0x436c77
mov ecx, dword [0x48d550]
add ecx, 0x12d6
mov eax, ebp
mov dx, 0x309
call fcn.0042d910
mov bl, 9
mov esi, dword [0x48d550]
add esi, 0x14d4
lea eax, [esp + 0x180]
mov edx, esi
mov ecx, 0x33
call fcn.00403310
lea eax, [esp + 0x180]
mov edx, 0x438638
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402d10
je 0x436c46
mov edx, esi
mov eax, dword [ebp + 0x4c]
call fcn.0042bb9c
add esi, 0x33
dec bl
jne 0x436c11
mov eax, dword [0x48d550]
cmp byte [eax + 0x18c4], 0
je 0x436c6a
mov eax, ebp
mov cx, 0x320
mov dl, 1
call fcn.0042d8fc
jmp 0x436c77
mov eax, ebp
mov cx, 0x321
mov dl, 1
call fcn.0042d8fc
cmp byte [ebp + 0x54], 0x14
je 0x436c89
cmp byte [ebp + 0x54], 0x1c
je 0x436c89
cmp byte [ebp + 0x54], 0x1d
jne 0x436cc4
mov ecx, dword [0x48d550]
add ecx, 0xabf
mov eax, ebp
mov dx, 0x30a
call fcn.0042d910
mov bl, 9
mov esi, dword [0x48d550]
add esi, 0xb89
cmp byte [esi], 0
je 0x436cbd
mov edx, esi
mov eax, dword [ebp + 0x48]
call fcn.0042bb9c
add esi, 0x65
dec bl
jne 0x436cae
cmp byte [ebp + 0x54], 0x14
jne 0x436d0e
mov eax, ebp
mov cl, 1
mov dx, 0x320
call fcn.0042e904
mov eax, dword [0x48d550]
movzx eax, byte [eax + 0x189c]
mov dword [esp + 0x174], eax
fild dword [esp + 0x174]
add esp, 0xfffffff8
fistp qword [esp]
wait
mov dl, 2
xor eax, eax
call fcn.0040fe88
mov ecx, eax
mov eax, ebp
mov dx, 0xd0
call fcn.0042d910
cmp byte [ebp + 0x54], 0x1c
jne 0x436e2f
mov ax, 0xcb
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0x320
call fcn.0042d910
mov ax, 0xbd
call fcn.0040bc04
push eax
mov eax, dword [ebp]
push eax
call sub.user32.dll_SetWindowTextA
mov ax, 0x96
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0xcf
call fcn.0042d910
mov eax, dword [0x48d550]
cmp byte [eax + 0x18c1], 0
je 0x436d87
mov eax, dword [0x48d930]
mov eax, dword [eax]
mov edx, dword [0x48d524]
mov eax, dword [edx + eax*4 - 4]
fild qword [eax + 0x494]
fcomp dword [0x4385d0]
fnstsw ax
sahf
jne 0x436d8b
xor edx, edx
jmp 0x436d8d
mov dl, 1
mov eax, ebp
mov cx, 0x324
call fcn.0042d8fc
mov eax, dword [0x48d930]
mov eax, dword [eax]
mov edx, dword [0x48d524]
mov eax, dword [edx + eax*4 - 4]
fild qword [eax + 0x494]
fcomp dword [0x4385d0]
fnstsw ax
sahf
setne cl
mov eax, ebp
mov dx, 0x324
call fcn.0042e904
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x18b7]
mov eax, ebp
mov cx, 0x326
call fcn.0042d8fc
mov eax, dword [0x48d550]
cmp byte [eax + 0x18b7], 0
je 0x436df8
mov eax, ebp
mov cl, 1
mov dx, 0xd0
call fcn.0042e904
mov eax, dword [0x48d550]
movzx eax, byte [eax + 0x189c]
mov dword [esp + 0x174], eax
fild dword [esp + 0x174]
add esp, 0xfffffff8
fistp qword [esp]
wait
mov dl, 2
xor eax, eax
call fcn.0040fe88
mov ecx, eax
mov eax, ebp
mov dx, 0xd0
call fcn.0042d910
cmp byte [ebp + 0x54], 0x1d
jne 0x436f8a
mov ax, 0xcb
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0x320
call fcn.0042d910
mov ax, 0xbd
call fcn.0040bc04
push eax
mov eax, dword [ebp]
push eax
call sub.user32.dll_SetWindowTextA
mov eax, dword [0x48d6b8]
mov eax, dword [eax]
call fcn.0040fb28
push eax
mov ax, 0x97
call fcn.0040bc04
pop edx
call fcn.0040f5a0
mov ecx, dword [0x48da44]
mov eax, ebp
mov dx, 0xcf
call fcn.0042d910
mov ecx, dword [0x48d550]
add ecx, 0xa5a
mov eax, ebp
mov dx, 0x30a
call fcn.0042d910
mov eax, dword [0x48d550]
cmp byte [eax + 0x18c1], 0
je 0x436ed6
mov eax, dword [0x48d930]
mov eax, dword [eax]
mov edx, dword [0x48d524]
mov eax, dword [edx + eax*4 - 4]
fild qword [eax + 0x494]
fcomp dword [0x4385d0]
fnstsw ax
sahf
jne 0x436eda
xor edx, edx
jmp 0x436edc
mov dl, 1
mov eax, ebp
mov cx, 0x324
call fcn.0042d8fc
mov eax, dword [0x48d930]
mov eax, dword [eax]
mov edx, dword [0x48d524]
mov eax, dword [edx + eax*4 - 4]
fild qword [eax + 0x494]
fcomp dword [0x4385d0]
fnstsw ax
sahf
setne cl
mov eax, ebp
mov dx, 0x324
call fcn.0042e904
mov eax, ebp
xor ecx, ecx
mov dx, 0x324
call fcn.0042e904
mov eax, ebp
xor ecx, ecx
mov dx, 0x30b
call fcn.0042e904
mov eax, ebp
xor ecx, ecx
mov dx, 0x326
call fcn.0042e904
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x18b7]
mov eax, ebp
mov cx, 0x326
call fcn.0042d8fc
mov eax, dword [0x48d550]
movzx eax, byte [eax + 0x189c]
mov dword [esp + 0x174], eax
fild dword [esp + 0x174]
add esp, 0xfffffff8
fistp qword [esp]
wait
mov dl, 2
xor eax, eax
call fcn.0040fe88
mov ecx, eax
mov eax, ebp
mov dx, 0xd0
call fcn.0042d910
cmp byte [ebp + 0x54], 0x16
jne 0x43705e
mov ecx, dword [0x48d550]
add ecx, 0xabf
mov eax, ebp
mov dx, 0x30a
call fcn.0042d910
mov bl, 9
mov esi, dword [0x48d550]
add esi, 0xb89
cmp byte [esi], 0
je 0x436fc8
mov edx, esi
mov eax, dword [ebp + 0x48]
call fcn.0042bb9c
cmp byte [esi + 0x38d], 0
je 0x436fdf
lea edx, [esi + 0x38d]
mov eax, dword [ebp + 0x4c]
call fcn.0042bb9c
add esi, 0x65
dec bl
jne 0x436fb9
mov eax, dword [0x48d550]
movzx eax, byte [eax + 0x189c]
mov dword [esp + 0x174], eax
fild dword [esp + 0x174]
add esp, 0xfffffff8
fistp qword [esp]
wait
mov dl, 2
xor eax, eax
call fcn.0040fe88
mov ecx, eax
mov eax, ebp
mov dx, 0xd0
call fcn.0042d910
mov ecx, dword [0x48d550]
add ecx, 0xb24
mov eax, ebp
mov dx, 0x309
call fcn.0042d910
mov eax, dword [0x48d550]
cmp byte [eax + 0x18c4], 0
je 0x437051
mov eax, ebp
mov cx, 0x320
mov dl, 1
call fcn.0042d8fc
jmp 0x43705e
mov eax, ebp
mov cx, 0x321
mov dl, 1
call fcn.0042d8fc
cmp byte [ebp + 0x54], 0x17
jne 0x437162
mov eax, ebp
mov cl, 1
mov dx, 0x320
call fcn.0042e904
mov eax, ebp
xor ecx, ecx
mov dx, 0x326
call fcn.0042e904
mov eax, ebp
xor ecx, ecx
mov dx, 0xd0
call fcn.0042e904
mov ax, 0x98
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0xcf
call fcn.0042d910
mov ax, 0x99
call fcn.0040bc04
push eax
mov eax, dword [ebp]
push eax
call sub.user32.dll_SetWindowTextA
mov ecx, dword [0x48d550]
add ecx, 0x878
mov eax, ebp
mov dx, 0x30a
call fcn.0042d910
mov bl, 9
mov esi, dword [0x48d550]
add esi, 0x88c
cmp byte [esi], 0
je 0x4370ec
mov edx, esi
mov eax, dword [ebp + 0x48]
call fcn.0042bb9c
add esi, 0x14
dec bl
jne 0x4370dd
mov eax, dword [0x48d550]
cmp byte [eax + 0x18c1], 0
je 0x437123
mov eax, dword [0x48d930]
mov eax, dword [eax]
mov edx, dword [0x48d524]
mov eax, dword [edx + eax*4 - 4]
fild qword [eax + 0x494]
fcomp dword [0x4385d0]
fnstsw ax
sahf
jne 0x437127
xor edx, edx
jmp 0x437129
mov dl, 1
mov eax, ebp
mov cx, 0x324
call fcn.0042d8fc
mov eax, dword [0x48d930]
mov eax, dword [eax]
mov edx, dword [0x48d524]
mov eax, dword [edx + eax*4 - 4]
fild qword [eax + 0x494]
fcomp dword [0x4385d0]
fnstsw ax
sahf
setne cl
mov eax, ebp
mov dx, 0x324
call fcn.0042e904
cmp byte [ebp + 0x54], 0x18
jne 0x43723d
mov ecx, dword [0x48d550]
movzx ecx, byte [ecx + 0x1898]
add cx, 0x64
mov eax, ebp
mov dl, 1
call fcn.0042d8fc
mov eax, ebp
mov cl, 1
mov dx, 0x320
call fcn.0042e904
mov ecx, dword [0x48d550]
add ecx, 0x940
mov eax, ebp
mov dx, 0x30a
call fcn.0042d910
mov bl, 9
mov esi, dword [0x48d550]
add esi, 0x958
cmp byte [esi], 0
je 0x4371c7
mov edx, esi
mov eax, dword [ebp + 0x48]
call fcn.0042bb9c
add esi, 0x18
dec bl
jne 0x4371b8
mov eax, dword [0x48d550]
cmp byte [eax + 0x18c1], 0
je 0x4371fe
mov eax, dword [0x48d930]
mov eax, dword [eax]
mov edx, dword [0x48d524]
mov eax, dword [edx + eax*4 - 4]
fild qword [eax + 0x494]
fcomp dword [0x4385d0]
fnstsw ax
sahf
jne 0x437202
xor edx, edx
jmp 0x437204
mov dl, 1
mov eax, ebp
mov cx, 0x324
call fcn.0042d8fc
mov eax, dword [0x48d930]
mov eax, dword [eax]
mov edx, dword [0x48d524]
mov eax, dword [edx + eax*4 - 4]
fild qword [eax + 0x494]
fcomp dword [0x4385d0]
fnstsw ax
sahf
setne cl
mov eax, ebp
mov dx, 0x324
call fcn.0042e904
cmp byte [ebp + 0x54], 0x14
je 0x43725b
cmp byte [ebp + 0x54], 0x12
je 0x43725b
cmp byte [ebp + 0x54], 0x13
je 0x43725b
cmp byte [ebp + 0x54], 0x17
je 0x43725b
cmp byte [ebp + 0x54], 0x18
jne 0x4372ca
mov edx, dword [0x48d550]
movzx edx, byte [edx + 0x18a6]
mov eax, 1
call fcn.0040bb84
add ax, 0xcb
dec eax
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0x320
call fcn.0042d910
mov eax, dword [0x48d628]
cmp byte [eax], 0
jne 0x4372b0
mov eax, dword [0x48d550]
movzx eax, byte [eax + 0x18a6]
push eax
push 0x320
mov eax, dword [ebp]
push eax
call sub.user32.dll_CheckDlgButton
jmp 0x4372ca
mov eax, ebp
xor ecx, ecx
mov dx, 0x324
call fcn.0042e904
mov eax, ebp
xor ecx, ecx
mov dx, 0x320
call fcn.0042e904
cmp byte [ebp + 0x54], 0xe
jne 0x437375
mov ax, 0x53
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0xcf
call fcn.0042d910
mov eax, dword [0x48d550]
movzx eax, byte [eax + 0x188c]
lea eax, [eax + eax*4]
mov edx, dword [0x48d96c]
lea ecx, [edx + eax]
mov eax, ebp
mov dx, 1
call fcn.0042d910
mov eax, dword [0x48d550]
movzx eax, byte [eax + 0x188c]
lea eax, [eax + eax*2]
mov edx, dword [0x48d360]
lea ecx, [edx + eax*2]
mov eax, ebp
mov dx, 2
call fcn.0042d910
mov ax, 0x155
call fcn.0040bc04
push eax
mov eax, dword [ebp]
push eax
call sub.user32.dll_SetWindowTextA
mov eax, dword [0x48d550]
cmp dword [eax + 0x17ac], 0
jle 0x437375
mov eax, dword [0x48d550]
fild dword [eax + 0x17ac]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.004123c0
mov ecx, eax
mov eax, ebp
mov dx, 0x30a
call fcn.0042d910
cmp byte [ebp + 0x54], 6
jne 0x4373bb
mov ax, 0x9a
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0xcf
call fcn.0042d910
mov ax, 0x9b
call fcn.0040bc04
push eax
mov eax, dword [ebp]
push eax
call sub.user32.dll_SetWindowTextA
mov ecx, dword [0x48d550]
add ecx, 0x1a20
mov eax, ebp
mov dx, 0x30a
call fcn.0042d910
cmp byte [ebp + 0x54], 7
jne 0x437426
mov ax, 0x9a
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0xcf
call fcn.0042d910
cmp byte [0x49ba6d], 0
jne 0x4373f5
mov ax, 0x20c
call fcn.0040bc04
push eax
mov eax, dword [ebp]
push eax
call sub.user32.dll_SetWindowTextA
jmp 0x43740f
mov ax, 0x9f
call fcn.0040bc04
push eax
mov eax, dword [ebp]
push eax
call sub.user32.dll_SetWindowTextA
mov byte [0x49ba6d], 0
mov ecx, dword [0x48d550]
add ecx, 0x1a2d
mov eax, ebp
mov dx, 0x30a
call fcn.0042d910
cmp byte [ebp + 0x54], 0x1b
jne 0x4375ed
mov eax, 0x7f
call fcn.0042b9f4
mov eax, dword [0x48da44]
push eax
mov eax, dword [ebp]
push eax
call sub.user32.dll_SetWindowTextA
mov ax, 0x21e
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0x62
call fcn.0042d910
mov ax, 0x21c
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0x66
call fcn.0042d910
mov ax, 0x2b1
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0x65
call fcn.0042d910
mov ax, 0x2b2
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0x63
call fcn.0042d910
mov ax, 0x85
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0x69
call fcn.0042d910
mov eax, dword [0x48d930]
mov eax, dword [eax]
mov edx, dword [0x48d524]
mov eax, dword [edx + eax*4 - 4]
add eax, 0xc
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x38]
cmp dword [eax + 0x5c], 0
jne 0x437522
mov eax, dword [0x48d550]
push dword [eax + 0x1718]
push dword [eax + 0x1714]
call fcn.00410208
mov ecx, eax
mov eax, ebp
mov dx, 0x67
call fcn.0042d910
mov eax, dword [0x48d550]
fild dword [eax + 0x171c]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.004123c0
mov ecx, eax
mov eax, ebp
mov dx, 0x68
call fcn.0042d910
jmp 0x43755e
mov eax, dword [esp + 0x38]
push dword [eax + 0x58]
push dword [eax + 0x54]
call fcn.00410208
mov ecx, eax
mov eax, ebp
mov dx, 0x67
call fcn.0042d910
mov eax, dword [esp + 0x38]
fild dword [eax + 0x5c]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.004123c0
mov ecx, eax
mov eax, ebp
mov dx, 0x68
call fcn.0042d910
mov eax, dword [0x48d550]
cmp byte [eax + 0x18f2], 0
je 0x4375a9
mov eax, ebp
mov cx, 0x69
mov dl, 1
call fcn.0042d8fc
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x1862]
mov eax, ebp
mov cx, 0x65
call fcn.0042d8fc
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x1863]
mov eax, ebp
mov cx, 0x66
call fcn.0042d8fc
jmp 0x4375ed
mov eax, dword [0x48d930]
mov eax, dword [eax]
mov edx, dword [0x48d524]
mov eax, dword [edx + eax*4 - 4]
mov dl, byte [eax + 0x8e]
mov eax, ebp
mov cx, 0x65
call fcn.0042d8fc
mov eax, dword [0x48d930]
mov eax, dword [eax]
mov edx, dword [0x48d524]
mov eax, dword [edx + eax*4 - 4]
mov dl, byte [eax + 0x8d]
mov eax, ebp
mov cx, 0x66
call fcn.0042d8fc
cmp byte [ebp + 0x54], 8
jne 0x437657
mov ax, 0x9c
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0xcf
call fcn.0042d910
mov ax, 0x9d
call fcn.0040bc04
push eax
mov eax, dword [ebp]
push eax
call sub.user32.dll_SetWindowTextA
mov eax, dword [0x48d550]
mov eax, dword [eax + 0x17a8]
mov dword [esp + 0x178], eax
xor eax, eax
mov dword [esp + 0x17c], eax
fild qword [esp + 0x178]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.004123c0
mov ecx, eax
mov eax, ebp
mov dx, 0x30a
call fcn.0042d910
cmp byte [ebp + 0x54], 0x33
je 0x437663
cmp byte [ebp + 0x54], 0x34
jne 0x43766a
mov eax, ebp
call fcn.00431b20
cmp byte [ebp + 0x54], 0x35
jne 0x437677
mov eax, ebp
call fcn.00432678
cmp byte [ebp + 0x54], 0x2a
jne 0x4376f3
mov ax, 0xa0
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0xcf
call fcn.0042d910
mov eax, dword [0x48d39c]
push dword [eax + 4]
push dword [eax]
call fcn.00410208
push eax
mov ax, 0xa1
call fcn.0040bc04
pop edx
call fcn.0040f5a0
mov eax, dword [0x48da44]
push eax
mov eax, dword [ebp]
push eax
call sub.user32.dll_SetWindowTextA
mov eax, dword [0x48d550]
cmp dword [eax + 0x177c], 0
jle 0x4376f3
mov eax, dword [0x48d550]
fild dword [eax + 0x177c]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.004123c0
mov ecx, eax
mov eax, ebp
mov dx, 0x30a
call fcn.0042d910
cmp byte [ebp + 0x54], 0x47
jne 0x43779b
mov ax, 0x2a6
call fcn.0040bc04
mov edx, eax
mov eax, dword [0x48da44]
call fcn.00405c48
mov eax, dword [0x48da44]
mov dl, 0x26
call fcn.0040fa38
mov eax, dword [0x48da44]
push eax
mov eax, dword [ebp]
push eax
call sub.user32.dll_SetWindowTextA
mov ax, 0x184
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0xcf
call fcn.0042d910
push 0x457
mov eax, dword [ebp]
push eax
call sub.user32.dll_GetDlgItem
mov dword [ebp + 0x50], eax
mov edi, 0xa
mov esi, dword [0x48d4f4]
mov eax, dword [ebp + 0x50]
mov edx, dword [esi]
call fcn.0042bb9c
add esi, 4
dec edi
jne 0x43775f
mov eax, dword [0x48d550]
cmp byte [eax + 0x188e], 0
je 0x43779b
mov eax, dword [0x48d550]
movzx eax, byte [eax + 0x188e]
mov edx, dword [0x48d4f4]
mov edx, dword [edx + eax*4 - 4]
mov eax, dword [ebp + 0x50]
call fcn.0042bc08
cmp byte [ebp + 0x54], 0x46
jne 0x43798e
mov eax, dword [0x48d7cc]
movzx eax, byte [eax]
mov edx, dword [0x48d4f4]
mov eax, dword [edx + eax*4 - 4]
push eax
mov eax, dword [ebp]
push eax
call sub.user32.dll_SetWindowTextA
mov eax, ebp
xor ecx, ecx
mov dx, 1
call fcn.0043863c
mov eax, ebp
xor ecx, ecx
mov dx, 3
call fcn.0043863c
mov ax, 6
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 2
call fcn.0042d910
mov ecx, dword [0x48d830]
mov eax, ebp
mov dx, 0xcf
call fcn.0042d910
mov eax, dword [0x48d7cc]
cmp byte [eax], 6
ja 0x437876
mov eax, dword [0x48d318]
xor edx, edx
mov dword [eax], edx
mov dword [eax + 4], edx
mov eax, dword [0x48d7cc]
movzx eax, byte [eax]
mov edx, dword [0x48d5b0]
xor ecx, ecx
mov cl, byte [edx + eax - 1]
mov edx, dword [0x48d5d8]
mov eax, dword [0x48d318]
call fcn.00405a94
mov eax, dword [0x48d318]
push dword [eax + 4]
push dword [eax]
mov eax, dword [0x48d7cc]
movzx eax, byte [eax]
mov edx, dword [0x48d5b0]
mov dl, byte [edx + eax - 1]
add edx, edx
xor eax, eax
call fcn.0040fe88
mov edx, dword [0x48d590]
mov eax, dword [0x48da44]
call fcn.00405c48
jmp 0x43791b
mov eax, dword [0x48d7cc]
movzx eax, byte [eax]
mov edx, dword [0x48d5b0]
xor ecx, ecx
mov cl, byte [edx + eax - 1]
mov edx, dword [0x48d5d8]
lea eax, [esp + 0x154]
call fcn.00405a94
mov eax, dword [0x48d7cc]
cmp byte [eax], 8
je 0x4378b0
mov eax, dword [0x48d7cc]
cmp byte [eax], 9
jne 0x4378f3
mov eax, dword [0x48d7cc]
cmp byte [eax], 9
sete al
and eax, 0x7f
lea eax, [eax + eax*2]
add ax, 4
test ax, ax
jl 0x4378f3
inc eax
mov word [esp + 0x3c], ax
xor ebx, ebx
lea eax, [esp + 0x154]
movsx edx, bx
shl edx, 2
add eax, edx
mov edx, 4
call fcn.0040cd28
inc ebx
dec word [esp + 0x3c]
jne 0x4378d2
push 0
mov eax, dword [0x48d7cc]
movzx eax, byte [eax]
mov edx, dword [0x48d5b0]
xor ecx, ecx
mov cl, byte [edx + eax - 1]
mov edx, dword [0x48da44]
lea eax, [esp + 0x158]
call fcn.00411f2c
mov ecx, dword [0x48da44]
mov eax, ebp
mov dx, 0x30a
call fcn.0042d910
push 2
mov eax, dword [ebp]
push eax
call sub.user32.dll_GetDlgItem
mov edx, dword [0x48d498]
mov dword [edx], eax
push 0x30a
mov eax, dword [ebp]
push eax
call sub.user32.dll_GetDlgItem
mov edx, dword [0x48d498]
mov dword [edx], eax
mov eax, dword [0x48d498]
mov eax, dword [eax]
push eax
call sub.user32.dll_SetFocus
push 0
push 1
push 0xcf
mov eax, dword [0x48d498]
mov eax, dword [eax]
push eax
call sub.user32.dll_SendMessageA
push 0xffffffffffffffff
push 0
push 0xb1
mov eax, dword [0x48d498]
mov eax, dword [eax]
push eax
call sub.user32.dll_SendMessageA
mov eax, 4
call fcn.00402dd8
dec eax
cmp byte [ebp + 0x54], 9
je 0x4379bb
cmp byte [ebp + 0x54], 0xa
je 0x4379bb
cmp byte [ebp + 0x54], 0xb
je 0x4379bb
cmp byte [ebp + 0x54], 0xc
je 0x4379bb
cmp byte [ebp + 0x54], 0xd
jne 0x437c07
cmp byte [ebp + 0x54], 9
jne 0x437af1
mov eax, 0x26
call fcn.0042b9f4
mov eax, dword [0x48d930]
mov eax, dword [eax]
mov edx, dword [0x48d524]
mov eax, dword [edx + eax*4 - 4]
fild qword [eax + 0x494]
fcomp dword [0x4385d0]
fnstsw ax
sahf
setne al
mov byte [esp + 0x2c], al
mov eax, dword [0x48d498]
xor edx, edx
mov dword [eax], edx
mov ebx, dword [0x48d330]
movsx ebx, word [ebx]
test ebx, ebx
jle 0x437a6b
mov esi, dword [0x48d524]
cmp dword [esi], 0
je 0x437a65
mov eax, dword [esi]
cmp byte [eax + 0x55d], 0
jne 0x437a65
mov eax, dword [esi]
cmp dword [eax + 0x4c], 0
jne 0x437a65
cmp byte [esp + 0x2c], 1
jne 0x437a44
mov eax, dword [esi]
fild qword [eax + 0x494]
fcomp dword [0x4385d0]
fnstsw ax
sahf
jne 0x437a5e
cmp byte [esp + 0x2c], 0
jne 0x437a65
mov eax, dword [esi]
fild qword [eax + 0x494]
fcomp dword [0x4385d0]
fnstsw ax
sahf
jne 0x437a65
mov eax, dword [0x48d498]
inc dword [eax]
add esi, 4
dec ebx
jne 0x437a12
mov eax, dword [0x48d928]
cmp dword [eax], 1
jle 0x437adb
mov eax, dword [0x48d930]
mov eax, dword [eax]
mov edx, dword [0x48d524]
mov eax, dword [edx + eax*4 - 4]
cmp byte [eax + 0x55d], 0
jne 0x437adb
mov eax, dword [0x48d930]
mov eax, dword [eax]
mov edx, dword [0x48d524]
mov eax, dword [edx + eax*4 - 4]
cmp dword [eax + 0x4c], 0
jne 0x437adb
mov eax, dword [0x48d928]
mov eax, dword [eax]
mov edx, dword [0x48d498]
cmp eax, dword [edx]
jne 0x437adb
mov eax, dword [0x48dbc8]
cmp byte [eax], 0
je 0x437ace
mov eax, ebp
mov cx, 0x64
mov dl, 1
call fcn.0042d8fc
mov eax, ebp
mov cl, 1
mov dx, 0x64
call fcn.0043863c
mov ax, 0x27d
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0x64
call fcn.0042d910
cmp byte [ebp + 0x54], 0xa
jne 0x437b40
mov eax, dword [0x48d930]
mov eax, dword [eax]
mov edx, dword [0x48d524]
mov eax, dword [edx + eax*4 - 4]
movsx eax, byte [eax + 0x55d]
add eax, 0x40
mov edx, dword [0x48d830]
mov byte [edx], al
mov eax, dword [0x48d830]
mov byte [eax + 1], 0x3a
mov eax, dword [0x48d830]
mov byte [eax + 2], 0
mov ax, 0x1f8
call fcn.0040bc04
mov edx, dword [0x48d830]
call fcn.0040f5a0
cmp byte [ebp + 0x54], 0xb
jne 0x437b50
mov eax, 9
call fcn.0042b9f4
cmp byte [ebp + 0x54], 0xc
jne 0x437b60
mov eax, 0x99
call fcn.0042b9f4
cmp byte [ebp + 0x54], 0xd
jne 0x437b70
mov eax, 0xa6
call fcn.0042b9f4
mov eax, dword [0x48da44]
push eax
mov eax, dword [ebp]
push eax
call sub.user32.dll_SetWindowTextA
mov ax, 0x1ca
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0x65
call fcn.0042d910
mov ax, 0x1cb
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0x66
call fcn.0042d910
mov ax, 0x24d
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0xca
call fcn.0042d910
mov ax, 0x24e
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0xcb
call fcn.0042d910
xor edi, edi
mov eax, edi
add ax, 0x315
call fcn.0040bc04
mov ecx, eax
mov edx, edi
add dx, 4
mov eax, ebp
call fcn.0042d910
inc edi
cmp edi, 3
jne 0x437bd9
mov eax, ebp
call fcn.00432af4
mov eax, ebp
call fcn.004327cc
cmp byte [ebp + 0x54], 0x19
je 0x437c17
cmp byte [ebp + 0x54], 0x1a
jne 0x437cdf
mov bl, 1
mov esi, dword [0x48d550]
add esi, 0x1943
xor ecx, ecx
mov cl, bl
add cx, 0x63
mov eax, ebp
mov dl, byte [esi]
call fcn.0042d8fc
inc ebx
inc esi
cmp bl, 5
jne 0x437c25
mov eax, dword [0x48d550]
movzx eax, byte [eax + 0x189d]
mov dword [esp + 0x174], eax
fild dword [esp + 0x174]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.004123c0
mov ecx, eax
mov eax, ebp
mov dx, 0x63
call fcn.0042d910
mov eax, dword [0x48d550]
cmp byte [eax + 0x18c1], 0
je 0x437ca0
mov eax, dword [0x48d930]
mov eax, dword [eax]
mov edx, dword [0x48d524]
mov eax, dword [edx + eax*4 - 4]
fild qword [eax + 0x494]
fcomp dword [0x4385d0]
fnstsw ax
sahf
jne 0x437ca4
xor edx, edx
jmp 0x437ca6
mov dl, 1
mov eax, ebp
mov cx, 0x324
call fcn.0042d8fc
mov eax, dword [0x48d930]
mov eax, dword [eax]
mov edx, dword [0x48d524]
mov eax, dword [edx + eax*4 - 4]
fild qword [eax + 0x494]
fcomp dword [0x4385d0]
fnstsw ax
sahf
setne cl
mov eax, ebp
mov dx, 0x324
call fcn.0042e904
cmp byte [ebp + 0x54], 0x2f
je 0x437cef
cmp byte [ebp + 0x54], 0x30
jne 0x438003
cmp byte [ebp + 0x54], 0x30
jne 0x437d1a
mov eax, 0xa4
call fcn.0042b9f4
mov eax, dword [0x48da44]
mov dl, 0x26
call fcn.0040fa38
mov eax, dword [0x48da44]
push eax
mov eax, dword [ebp]
push eax
call sub.user32.dll_SetWindowTextA
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x1908]
mov eax, ebp
mov cx, 0x65
call fcn.0042d8fc
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x1909]
mov eax, ebp
mov cx, 0x66
call fcn.0042d8fc
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x190a]
mov eax, ebp
mov cx, 0x67
call fcn.0042d8fc
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x190c]
mov eax, ebp
mov cx, 0x69
call fcn.0042d8fc
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x190d]
mov eax, ebp
mov cx, 0x6a
call fcn.0042d8fc
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x190e]
mov eax, ebp
mov cx, 0x6b
call fcn.0042d8fc
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x1874]
mov eax, ebp
mov cx, 0x6c
call fcn.0042d8fc
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x194a]
mov eax, ebp
mov cx, 0x72
call fcn.0042d8fc
mov eax, dword [0x48d930]
mov eax, dword [eax]
mov edx, dword [0x48d524]
mov eax, dword [edx + eax*4 - 4]
cmp byte [eax + 0x55d], 0x1a
jg 0x437e08
mov eax, dword [0x48d550]
cmp byte [eax + 0x1875], 0
setne dl
mov eax, ebp
mov cx, 0x6d
call fcn.0042d8fc
jmp 0x437e15
mov eax, ebp
xor ecx, ecx
mov dx, 0x6d
call fcn.0042e904
mov ax, 0x2a6
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0x6d
call fcn.0042d910
mov eax, dword [0x48d550]
cmp byte [eax + 0x1a3a], 0
jne 0x437e4e
mov edx, dword [0x48d84c]
mov eax, dword [0x48d550]
add eax, 0x1a3a
call fcn.00405c48
mov ecx, dword [0x48d550]
add ecx, 0x1a3a
mov eax, ebp
mov dx, 0x30a
call fcn.0042d910
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x1981]
mov eax, ebp
mov cx, 0x70
call fcn.0042d8fc
mov eax, dword [0x48da44]
call fcn.0040f9c8
test al, al
je 0x437eb4
mov eax, dword [0x48d550]
cmp byte [eax + 0x185f], 0
je 0x437ec1
mov eax, ebp
mov cx, 0x6f
mov dl, 1
call fcn.0042d8fc
mov eax, ebp
mov cx, 0x70
mov dl, 1
call fcn.0042d8fc
jmp 0x437ec1
mov eax, ebp
xor ecx, ecx
mov dx, 0x6f
call fcn.0042e904
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x1982]
mov eax, ebp
mov cx, 0x71
call fcn.0042d8fc
mov eax, dword [0x48d930]
mov eax, dword [eax]
mov edx, dword [0x48d524]
mov eax, dword [edx + eax*4 - 4]
movsx eax, byte [eax + 0x55d]
mov edx, dword [0x48d340]
movsx eax, byte [edx + eax - 1]
mov edx, dword [0x48d498]
mov dword [edx], eax
mov eax, dword [0x48d498]
cmp dword [eax], 0xffffffff
jne 0x437f13
cmp byte [ebp + 0x54], 0x30
jne 0x437f22
mov eax, ebp
xor ecx, ecx
mov dx, 0x6e
call fcn.0043863c
jmp 0x437f39
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x18ae]
mov eax, ebp
mov cx, 0x6e
call fcn.0042d8fc
mov eax, dword [0x48d498]
cmp dword [eax], 0xffffffff
jl 0x437f4d
mov eax, dword [0x48d498]
cmp dword [eax], 3
jle 0x437f81
mov eax, ebp
mov cx, 0x67
mov dl, 1
call fcn.0042d8fc
mov eax, ebp
mov cx, 0x68
xor edx, edx
call fcn.0042d8fc
mov eax, ebp
xor ecx, ecx
mov dx, 0x67
call fcn.0042e904
mov eax, ebp
xor ecx, ecx
mov dx, 0x68
call fcn.0042e904
mov eax, dword [0x48d498]
cmp dword [eax], 0xffffffff
je 0x437fa5
mov eax, ebp
xor ecx, ecx
mov dx, 0x6a
call fcn.0042e904
mov eax, ebp
mov cx, 0x6a
xor edx, edx
call fcn.0042d8fc
cmp byte [ebp + 0x54], 0x2f
je 0x437fb5
mov eax, dword [0x48d498]
cmp dword [eax], 0xffffffff
je 0x437fcc
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x190b]
mov eax, ebp
mov cx, 0x68
call fcn.0042d8fc
cmp byte [ebp + 0x54], 0x30
jne 0x438003
mov eax, dword [0x48d498]
cmp dword [eax], 0xffffffff
jne 0x438003
mov eax, ebp
xor ecx, ecx
mov dx, 0x68
call fcn.0042e904
mov eax, ebp
mov cx, 0x67
mov dl, 1
call fcn.0042d8fc
mov eax, ebp
xor ecx, ecx
mov dx, 0x67
call fcn.0042e904
cmp byte [ebp + 0x54], 0x38
jne 0x438127
mov eax, dword [0x48d550]
cmp byte [eax + 0x18f1], 0
setne dl
mov eax, ebp
mov cx, 9
call fcn.0042d8fc
mov eax, dword [0x48d550]
movzx eax, byte [eax + 0x192c]
push eax
push 0xa
mov eax, dword [ebp]
push eax
call sub.user32.dll_CheckDlgButton
push 0xa
mov eax, dword [ebp]
push eax
call sub.user32.dll_IsDlgButtonChecked
cmp eax, 2
sete al
and eax, 0x7f
add ax, 0x2ef
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0xa
call fcn.0042d910
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x18c9]
mov eax, ebp
mov cx, 0x59
call fcn.0042d8fc
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x18e9]
mov eax, ebp
mov cx, 0x5b
call fcn.0042d8fc
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x18bd]
mov eax, ebp
mov cx, 0x51
call fcn.0042d8fc
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x18dc]
mov eax, ebp
mov cx, 0x52
call fcn.0042d8fc
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x18e6]
mov eax, ebp
mov cx, 0x50
call fcn.0042d8fc
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x18ea]
xor dl, 1
mov eax, ebp
mov cx, 0x4f
call fcn.0042d8fc
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x18f5]
mov eax, ebp
mov cx, 0x4e
call fcn.0042d8fc
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x18cf]
xor dl, 1
mov eax, ebp
mov cx, 0x4d
call fcn.0042d8fc
cmp byte [ebp + 0x54], 0x36
jne 0x4384ef
push 0
mov eax, dword [0x48d658]
mov eax, dword [eax]
push eax
push 0x30
push 0x69
mov eax, dword [ebp]
push eax
call sub.user32.dll_SendDlgItemMessageA
mov eax, dword [0x48d550]
add eax, 0x16bc
push eax
push 0x69
mov eax, dword [ebp]
push eax
call sub.user32.dll_SetDlgItemTextA
mov eax, dword [0x48d550]
movzx eax, byte [eax + 0x18a4]
push eax
push 0x60
mov eax, dword [ebp]
push eax
call sub.user32.dll_CheckDlgButton
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x18c3]
mov eax, ebp
mov cx, 0x5e
call fcn.0042d8fc
mov eax, dword [0x48d550]
movzx eax, byte [eax + 0x18a3]
push eax
push 0x5c
mov eax, dword [ebp]
push eax
call sub.user32.dll_CheckDlgButton
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x18c5]
mov eax, ebp
mov cx, 0x5d
call fcn.0042d8fc
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x192f]
mov eax, ebp
mov cx, 0x5f
call fcn.0042d8fc
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x18e5]
mov eax, ebp
mov cx, 0x53
call fcn.0042d8fc
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x18e2]
mov eax, ebp
mov cx, 0x50
call fcn.0042d8fc
mov eax, dword [0x48d550]
movzx eax, byte [eax + 0x18a8]
push eax
push 0x4f
mov eax, dword [ebp]
push eax
call sub.user32.dll_CheckDlgButton
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x1931]
mov eax, ebp
mov cx, 0x5a
call fcn.0042d8fc
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x18db]
mov eax, ebp
mov cx, 0x55
call fcn.0042d8fc
mov eax, dword [0x48d550]
movzx eax, byte [eax + 0x189f]
push eax
push 0x58
mov eax, dword [ebp]
push eax
call sub.user32.dll_CheckDlgButton
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x18be]
mov eax, ebp
mov cx, 0x61
call fcn.0042d8fc
mov eax, dword [0x48d550]
movzx eax, byte [eax + 0x18a0]
mov dword [esp + 0x174], eax
fild dword [esp + 0x174]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.004123c0
mov ecx, eax
mov eax, ebp
mov dx, 0x5b
call fcn.0042d910
mov eax, dword [0x48d550]
movzx eax, byte [eax + 0x18ab]
mov dword [esp + 0x174], eax
fild dword [esp + 0x174]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.004123c0
mov ecx, eax
mov eax, ebp
mov dx, 0x4d
call fcn.0042d910
mov eax, dword [0x48d550]
movzx eax, word [eax + 0x1df8]
mov dword [esp + 0x174], eax
fild dword [esp + 0x174]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.004123c0
mov ecx, eax
mov eax, ebp
mov dx, 0x4b
call fcn.0042d910
mov ax, 0x25d
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0x49
call fcn.0042d910
mov eax, dword [0x48d550]
cmp byte [eax + 0x1932], 2
sete al
and eax, 0x7f
add ax, 0x2bd
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 0x56
call fcn.0042d910
mov eax, dword [0x48d550]
movzx eax, byte [eax + 0x1932]
push eax
push 0x56
mov eax, dword [ebp]
push eax
call sub.user32.dll_CheckDlgButton
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x193b]
mov eax, ebp
mov cx, 0x48
call fcn.0042d8fc
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x1933]
mov eax, ebp
mov cx, 0x46
call fcn.0042d8fc
mov eax, dword [0x48d550]
movzx eax, byte [eax + 0x1885]
push eax
push 0x47
mov eax, dword [ebp]
push eax
call sub.user32.dll_CheckDlgButton
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x18d1]
mov eax, ebp
mov cx, 0x62
call fcn.0042d8fc
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x18d2]
mov eax, ebp
mov cx, 0x65
call fcn.0042d8fc
mov ecx, dword [0x48d550]
mov cl, byte [ecx + 0x18d2]
mov eax, ebp
mov dx, 0x68
call fcn.0042e904
mov ecx, dword [0x48d550]
add ecx, 0xa30
mov eax, ebp
mov dx, 0x68
call fcn.0042d910
mov eax, dword [0x48d550]
movzx eax, byte [eax + 0x18a5]
mov dword [esp + 0x174], eax
fild dword [esp + 0x174]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.004123c0
mov ecx, eax
mov eax, ebp
mov dx, 0x4e
call fcn.0042d910
mov edx, dword [0x48d550]
add edx, 0x100
mov eax, dword [0x48da44]
call fcn.00405c48
mov eax, dword [0x48da44]
call fcn.0040fb68
mov ecx, eax
mov eax, ebp
mov dx, 0x63
call fcn.0042d910
mov edx, dword [0x48d550]
add edx, 0x200
mov eax, dword [0x48da44]
call fcn.00405c48
mov eax, dword [0x48da44]
call fcn.0040fb68
mov ecx, eax
mov eax, ebp
mov dx, 0x67
call fcn.0042d910
mov edx, dword [0x48d550]
add edx, 0x300
mov eax, dword [0x48da44]
call fcn.00405c48
mov eax, dword [0x48da44]
call fcn.0040fb68
mov ecx, eax
mov eax, ebp
mov dx, 0x66
call fcn.0042d910
mov ecx, dword [0x48d550]
add ecx, 0x500
mov eax, ebp
mov dx, 0x64
call fcn.0042d910
mov ecx, dword [0x48d550]
add ecx, 0x1c7a
mov eax, ebp
mov dx, 0x6d
call fcn.0042d910
cmp byte [ebp + 0x54], 4
jne 0x438580
mov eax, 0xae
call fcn.0042b9f4
mov eax, dword [0x48da44]
push eax
mov eax, dword [ebp]
push eax
call sub.user32.dll_SetWindowTextA
mov ecx, dword [0x48da20]
mov ecx, dword [ecx]
mov eax, ebp
mov dx, 0xc8
call fcn.0042d910
push 0xc8
mov eax, dword [ebp]
push eax
call sub.user32.dll_GetDlgItem
mov ebx, eax
push 0x430b18
push 0xfffffffffffffffc
push ebx
call sub.user32.dll_SetWindowLongA
mov dword [0x49bac8], eax
mov ax, 0x101
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 1
call fcn.0042d910
mov ax, 6
call fcn.0040bc04
mov ecx, eax
mov eax, ebp
mov dx, 2
call fcn.0042d910
mov eax, ebp
xor ecx, ecx
mov dx, 4
call fcn.0043863c
mov eax, dword [0x48d8ac]
movzx eax, word [eax]
mov ecx, 0x64
xor edx, edx
div ecx
cmp edx, 0x13
jne 0x43859d
mov eax, ebp
call fcn.00432da0
mov eax, dword [0x48d8b0]
mov byte [eax], 0
mov byte [esp + 4], 1
mov al, byte [esp + 4]
add esp, 0x1b4
pop ebp
pop edi
pop esi
pop ebx
ret