Function at 0x4ebc50
Capabilities:
Get graphical window text
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x56d936
mov eax, dword fs:[0]
push eax
sub esp, 0x7ac
mov eax, dword [0x661850]
xor eax, ebp
mov dword [ebp - 0x3c], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x7b8], ecx
push str.Sat_May_30_14:16:42_2015
push 0x400
push str.CShortMsgWnd::OnLButtonUp
push str.GameProcessShortMsgWnd.cpp
lea ecx, [ebp - 0xd]
call fcn.004024e0
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x7b8]
mov byte [eax + 0x36], 0
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ebp - 0x7b8]
add ecx, 0xc4
mov eax, dword [ebp - 0x7b8]
mov edx, dword [eax + 0xc4]
mov eax, dword [edx + 0xc]
call eax
movzx ecx, al
test ecx, ecx
je 0x4ebd27
push 0
mov edx, dword [ebp - 0x7b8]
mov eax, dword [edx + 0x1e00]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 0
mov ecx, dword [ebp - 0x7b8]
mov edx, dword [ecx + 0x1e04]
push edx
call dword [sym.imp.USER32.dll_ShowWindow]
mov byte [ebp - 0x7a1], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd]
call fcn.00402620
mov al, byte [ebp - 0x7a1]
jmp 0x4ecd6f
mov dword [ebp - 0x14], 0
jmp 0x4ebd39
mov eax, dword [ebp - 0x14]
add eax, 1
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 5
jge 0x4ebda2
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp - 0x14]
imul eax, eax, 0x130
mov ecx, dword [ebp - 0x14]
imul ecx, ecx, 0x130
mov edx, dword [ebp - 0x7b8]
lea ecx, [edx + ecx + 0x1f4]
mov edx, dword [ebp - 0x7b8]
mov eax, dword [edx + eax + 0x1f4]
mov edx, dword [eax + 0xc]
call edx
movzx eax, al
test eax, eax
je 0x4ebda0
mov byte [ebp - 0x7a2], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd]
call fcn.00402620
mov al, byte [ebp - 0x7a2]
jmp 0x4ecd6f
jmp 0x4ebd30
mov ecx, dword [ebp - 0x7b8]
mov edx, dword [ebp - 0x7b8]
mov eax, dword [ecx + 0x920]
cmp eax, dword [edx + 0xb0]
jne 0x4ebf6b
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ebp - 0x7b8]
add ecx, 0x9c8
mov eax, dword [ebp - 0x7b8]
mov edx, dword [eax + 0x9c8]
mov eax, dword [edx + 0xc]
call eax
movzx ecx, al
test ecx, ecx
je 0x4ebe46
call fcn.0040ada0
sub eax, dword [0x66ad78]
cmp eax, 0x1388
jbe 0x4ebe25
mov ecx, dword [ebp - 0x7b8]
add ecx, 0x1e08
call fcn.0043c1c0
push 0
mov ecx, 0x7c46b0
call fcn.005073d0
call fcn.0040ada0
mov dword [0x66ad78], eax
mov byte [ebp - 0x7a3], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd]
call fcn.00402620
mov al, byte [ebp - 0x7a3]
jmp 0x4ecd6f
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x7b8]
add ecx, 0xaf8
mov edx, dword [ebp - 0x7b8]
mov eax, dword [edx + 0xaf8]
mov edx, dword [eax + 0xc]
call edx
movzx eax, al
test eax, eax
je 0x4ebf6b
push 0
mov ecx, dword [ebp - 0x7b8]
mov edx, dword [ecx + 0xbc]
push edx
mov ecx, 0x7c46b0
call fcn.005076a0
mov ecx, dword [ebp - 0x7b8]
add ecx, 0x1e08
call fcn.00515120
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x7b8]
add ecx, 0x1e08
call fcn.0049ebd0
mov dword [ebp - 0x1c], 0
jmp 0x4ebec6
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
cmp ecx, dword [ebp - 0x18]
jge 0x4ebf3a
mov ecx, dword [ebp - 0x7b8]
add ecx, 0x1e08
call fcn.004edfb0
mov dword [ebp - 0x20], eax
mov edx, dword [ebp - 0x7b8]
mov eax, dword [ebp - 0x20]
mov ecx, dword [edx + 0xbc]
cmp ecx, dword [eax]
jne 0x4ebf27
mov ecx, dword [ebp - 0x7b8]
add ecx, 0x1e08
call fcn.004eddd0
mov byte [ebp - 0x7a4], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd]
call fcn.00402620
mov al, byte [ebp - 0x7a4]
jmp 0x4ecd6f
mov ecx, dword [ebp - 0x7b8]
add ecx, 0x1e08
call fcn.004edf40
jmp 0x4ebebd
mov edx, dword [ebp - 0x7b8]
mov dword [edx + 0x1c8c], 0xffffffff
mov byte [ebp - 0x7a5], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd]
call fcn.00402620
mov al, byte [ebp - 0x7a5]
jmp 0x4ecd6f
mov eax, dword [ebp - 0x7b8]
mov ecx, dword [ebp - 0x7b8]
mov edx, dword [eax + 0x920]
cmp edx, dword [ecx + 0xb4]
jne 0x4ec35d
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0x7b8]
add ecx, 0xca0
mov edx, dword [ebp - 0x7b8]
mov eax, dword [edx + 0xca0]
mov edx, dword [eax + 0xc]
call edx
movzx eax, al
test eax, eax
je 0x4ec10e
mov ecx, dword [ebp - 0x7b8]
mov edx, dword [ecx + 0x1c88]
sub edx, 1
js 0x4ec0ed
mov ecx, dword [ebp - 0x7b8]
add ecx, 0x1e08
call fcn.00515120
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jle 0x4ec0ed
mov eax, dword [ebp - 0x7b8]
mov ecx, dword [eax + 0x1c88]
sub ecx, 1
cmp ecx, dword [ebp - 0x24]
jge 0x4ec0ed
mov ecx, dword [ebp - 0x7b8]
add ecx, 0x1e08
call fcn.0049ebd0
mov dword [ebp - 0x2c], 0
jmp 0x4ec027
mov edx, dword [ebp - 0x2c]
add edx, 1
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x7b8]
mov ecx, dword [eax + 0x1c88]
sub ecx, 1
cmp dword [ebp - 0x2c], ecx
jge 0x4ec04e
mov ecx, dword [ebp - 0x7b8]
add ecx, 0x1e08
call fcn.004edf40
jmp 0x4ec01e
mov ecx, dword [ebp - 0x7b8]
add ecx, 0x1e08
call fcn.004edfb0
mov dword [ebp - 0x28], eax
mov edx, dword [ebp - 0x28]
push edx
mov ecx, 0x7c46b0
call fcn.00507600
mov eax, dword [ebp - 0x7b8]
mov ecx, dword [eax + 0x1c88]
sub ecx, 1
mov edx, dword [ebp - 0x7b8]
mov dword [edx + 0x1c88], ecx
mov eax, dword [ebp - 0x28]
add eax, 8
push eax
push 0x3c
mov ecx, dword [ebp - 0x7b8]
add ecx, 0x1c94
push ecx
call fcn.005477d6
add esp, 0xc
mov edx, dword [ebp - 0x28]
add edx, 0x21
push edx
push 0x12c
mov eax, dword [ebp - 0x7b8]
add eax, 0x1cd0
push eax
call fcn.005477d6
add esp, 0xc
mov ecx, dword [ebp - 0x7b8]
mov edx, dword [ebp - 0x28]
mov eax, dword [edx]
mov dword [ecx + 0x1c78], eax
mov ecx, dword [ebp - 0x28]
movzx edx, word [ecx + 4]
mov eax, dword [ebp - 0x7b8]
mov dword [eax + 0x1c7c], edx
mov byte [ebp - 0x7a6], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd]
call fcn.00402620
mov al, byte [ebp - 0x7a6]
jmp 0x4ecd6f
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ebp - 0x7b8]
add ecx, 0xdd0
mov eax, dword [ebp - 0x7b8]
mov edx, dword [eax + 0xdd0]
mov eax, dword [edx + 0xc]
call eax
movzx ecx, al
test ecx, ecx
je 0x4ec27e
mov ecx, dword [ebp - 0x7b8]
add ecx, 0x1e08
call fcn.00515120
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jle 0x4ec25d
mov edx, dword [ebp - 0x7b8]
mov eax, dword [edx + 0x1c88]
add eax, 1
cmp eax, dword [ebp - 0x30]
jge 0x4ec25d
mov ecx, dword [ebp - 0x7b8]
add ecx, 0x1e08
call fcn.0049ebd0
mov dword [ebp - 0x38], 0
jmp 0x4ec197
mov ecx, dword [ebp - 0x38]
add ecx, 1
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x7b8]
mov eax, dword [edx + 0x1c88]
add eax, 1
cmp dword [ebp - 0x38], eax
jge 0x4ec1be
mov ecx, dword [ebp - 0x7b8]
add ecx, 0x1e08
call fcn.004edf40
jmp 0x4ec18e
mov ecx, dword [ebp - 0x7b8]
add ecx, 0x1e08
call fcn.004edfb0
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x34]
push ecx
mov ecx, 0x7c46b0
call fcn.00507600
mov edx, dword [ebp - 0x7b8]
mov eax, dword [edx + 0x1c88]
add eax, 1
mov ecx, dword [ebp - 0x7b8]
mov dword [ecx + 0x1c88], eax
mov edx, dword [ebp - 0x34]
add edx, 8
push edx
push 0x3c
mov eax, dword [ebp - 0x7b8]
add eax, 0x1c94
push eax
call fcn.005477d6
add esp, 0xc
mov ecx, dword [ebp - 0x34]
add ecx, 0x21
push ecx
push 0x12c
mov edx, dword [ebp - 0x7b8]
add edx, 0x1cd0
push edx
call fcn.005477d6
add esp, 0xc
mov eax, dword [ebp - 0x7b8]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ecx]
mov dword [eax + 0x1c78], edx
mov eax, dword [ebp - 0x34]
movzx ecx, word [eax + 4]
mov edx, dword [ebp - 0x7b8]
mov dword [edx + 0x1c7c], ecx
mov byte [ebp - 0x7a7], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd]
call fcn.00402620
mov al, byte [ebp - 0x7a7]
jmp 0x4ecd6f
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0x7b8]
add ecx, 0xf00
mov edx, dword [ebp - 0x7b8]
mov eax, dword [edx + 0xf00]
mov edx, dword [eax + 0xc]
call edx
movzx eax, al
test eax, eax
je 0x4ec310
mov ecx, dword [ebp - 0x7b8]
mov edx, dword [ebp - 0x7b8]
mov eax, dword [edx + 0xb8]
mov dword [ecx + 0x920], eax
mov ecx, dword [ebp - 0x7b8]
add ecx, 0x1c94
push ecx
mov edx, dword [ebp - 0x7b8]
mov eax, dword [edx + 0x1e00]
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov ecx, dword [ebp - 0x7b8]
mov byte [ecx + 0x1dfd], 1
mov byte [ebp - 0x7a8], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd]
call fcn.00402620
mov al, byte [ebp - 0x7a8]
jmp 0x4ecd6f
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x7b8]
add ecx, 0x1030
mov edx, dword [ebp - 0x7b8]
mov eax, dword [edx + 0x1030]
mov edx, dword [eax + 0xc]
call edx
movzx eax, al
test eax, eax
je 0x4ec35d
mov byte [ebp - 0x7a9], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd]
call fcn.00402620
mov al, byte [ebp - 0x7a9]
jmp 0x4ecd6f
mov ecx, dword [ebp - 0x7b8]
mov edx, dword [ebp - 0x7b8]
mov eax, dword [ecx + 0x920]
cmp eax, dword [edx + 0xb8]
jne 0x4ec5a4
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ebp - 0x7b8]
add ecx, 0x1250
mov eax, dword [ebp - 0x7b8]
mov edx, dword [eax + 0x1250]
mov eax, dword [edx + 0xc]
call eax
movzx ecx, al
test ecx, ecx
je 0x4ec527
lea ecx, [ebp - 0x294]
call fcn.004edfd0
push 0x1c
lea edx, [ebp - 0x294]
push edx
mov eax, dword [ebp - 0x7b8]
mov ecx, dword [eax + 0x1e00]
push ecx
call dword [sym.imp.USER32.dll_GetWindowTextA]
push 0x1f4
lea edx, [ebp - 0x235]
push edx
mov eax, dword [ebp - 0x7b8]
mov ecx, dword [eax + 0x1e04]
push ecx
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea edx, [ebp - 0x235]
push edx
call fcn.00545a90
add esp, 4
cmp eax, 0x1f
jbe 0x4ec42d
push 0x1c
lea eax, [ebp - 0x235]
push eax
lea ecx, [ebp - 0x254]
push ecx
call fcn.00545160
add esp, 0xc
mov byte [ebp - 0x237], 0x2e
mov byte [ebp - 0x236], 0x2e
jmp 0x4ec445
lea edx, [ebp - 0x235]
push edx
push 0x1f
lea eax, [ebp - 0x254]
push eax
call fcn.005477d6
add esp, 0xc
lea ecx, [ebp - 0x294]
push ecx
push 0x66ac78
call fcn.00548180
add esp, 8
test eax, eax
jne 0x4ec475
lea edx, [ebp - 0x235]
push edx
push 0x66ab70
call fcn.00548180
add esp, 8
test eax, eax
je 0x4ec4ba
lea eax, [ebp - 0x294]
push eax
mov ecx, 0x7c46b0
call fcn.00507470
lea ecx, [ebp - 0x294]
push ecx
push 0x100
push 0x66ac78
call fcn.005477d6
add esp, 0xc
lea edx, [ebp - 0x235]
push edx
push 0x104
push 0x66ab70
call fcn.005477d6
add esp, 0xc
jmp 0x4ec506
push 0
mov eax, dword [ebp - 0x7b8]
mov ecx, dword [eax + 0x1e00]
push ecx
call dword [sym.imp.USER32.dll_ShowWindow]
push 0
mov edx, dword [ebp - 0x7b8]
mov eax, dword [edx + 0x1e04]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 0x13
mov ecx, 0x6eeef8
call fcn.00496ec0
push 0x1a4
push 0
push 0x582858
mov ecx, 0x6f09c4
call fcn.00513b70
mov byte [ebp - 0x7aa], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd]
call fcn.00402620
mov al, byte [ebp - 0x7aa]
jmp 0x4ecd6f
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ebp - 0x7b8]
add ecx, 0x1380
mov eax, dword [ebp - 0x7b8]
mov edx, dword [eax + 0x1380]
mov eax, dword [edx + 0xc]
call eax
movzx ecx, al
test ecx, ecx
je 0x4ec5a4
push 0x574a9b
mov edx, dword [ebp - 0x7b8]
mov eax, dword [edx + 0x1e00]
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
push 0x574a9b
mov ecx, dword [ebp - 0x7b8]
mov edx, dword [ecx + 0x1e04]
push edx
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov byte [ebp - 0x7ab], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd]
call fcn.00402620
mov al, byte [ebp - 0x7ab]
jmp 0x4ecd6f
mov eax, dword [ebp - 0x7b8]
mov ecx, dword [ebp - 0x7b8]
mov edx, dword [eax + 0x920]
cmp edx, dword [ecx + 0x924]
jne 0x4ecac4
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0x7b8]
add ecx, 0x1528
mov edx, dword [ebp - 0x7b8]
mov eax, dword [edx + 0x1528]
mov edx, dword [eax + 0xc]
call edx
movzx eax, al
test eax, eax
je 0x4ec857
mov ecx, dword [ebp - 0x7b8]
movzx edx, byte [ecx + 0x1c64]
test edx, edx
je 0x4ec836
push str.GOLD
mov eax, dword [ebp - 0x7b8]
add eax, 0x20e4
push eax
call fcn.00548180
add esp, 8
test eax, eax
jne 0x4ec6e7
lea ecx, [ebp - 0x4ec]
call fcn.004edfd0
push 0x1c
lea ecx, [ebp - 0x4ec]
push ecx
mov edx, dword [ebp - 0x7b8]
mov eax, dword [edx + 0x1e00]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextA]
push 0x1f
lea ecx, [ebp - 0x4ac]
push ecx
mov edx, dword [ebp - 0x7b8]
mov eax, dword [edx + 0x1e04]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea ecx, [ebp - 0x48d]
push ecx
call fcn.00545a90
add esp, 4
cmp eax, 0x1f
jbe 0x4ec6a7
push 0x1c
lea edx, [ebp - 0x48d]
push edx
lea eax, [ebp - 0x4ac]
push eax
call fcn.00545160
add esp, 0xc
mov byte [ebp - 0x48f], 0x2e
mov byte [ebp - 0x48e], 0x2e
jmp 0x4ec6bf
lea ecx, [ebp - 0x48d]
push ecx
push 0x1f
lea edx, [ebp - 0x4ac]
push edx
call fcn.005477d6
add esp, 0xc
mov eax, dword [ebp - 0x7b8]
mov ecx, dword [eax + 0x2122]
mov dword [ebp - 0x4d0], ecx
lea edx, [ebp - 0x4ec]
push edx
mov ecx, 0x7c46b0
call fcn.00507470
jmp 0x4ec836
lea ecx, [ebp - 0x744]
call fcn.004edfd0
push 0x253
push 0
lea eax, [ebp - 0x744]
push eax
call fcn.005454d0
add esp, 0xc
push 0x1c
lea ecx, [ebp - 0x744]
push ecx
mov edx, dword [ebp - 0x7b8]
mov eax, dword [edx + 0x1e00]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextA]
push 0x1f4
lea ecx, [ebp - 0x6e5]
push ecx
mov edx, dword [ebp - 0x7b8]
mov eax, dword [edx + 0x1e04]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea ecx, [ebp - 0x6e5]
push ecx
call fcn.00545a90
add esp, 4
cmp eax, 0x1f
jbe 0x4ec77f
push 0x1c
lea edx, [ebp - 0x6e5]
push edx
lea eax, [ebp - 0x704]
push eax
call fcn.00545160
add esp, 0xc
mov byte [ebp - 0x6e7], 0x2e
mov byte [ebp - 0x6e6], 0x2e
jmp 0x4ec797
lea ecx, [ebp - 0x6e5]
push ecx
push 0x1f
lea edx, [ebp - 0x704]
push edx
call fcn.005477d6
add esp, 0xc
mov eax, dword [ebp - 0x7b8]
add eax, 0x20e4
push eax
lea ecx, [ebp - 0x724]
push ecx
call fcn.005456a9
add esp, 8
mov edx, dword [ebp - 0x7b8]
mov eax, dword [edx + 0x2126]
mov dword [ebp - 0x708], eax
lea ecx, [ebp - 0x744]
push ecx
mov ecx, 0x7c46b0
call fcn.00507470
lea ecx, [ebp - 0x794]
call fcn.0043b2c0
mov ecx, dword [ebp - 0x7b8]
add ecx, 0x1e20
call fcn.00515120
add eax, 1
mov dword [ebp - 0x794], eax
mov edx, 1
mov word [ebp - 0x790], dx
lea eax, [ebp - 0x744]
push eax
push 0x19
lea ecx, [ebp - 0x78c]
push ecx
call fcn.005477d6
add esp, 0xc
lea edx, [ebp - 0x704]
push edx
push 0x1f
lea eax, [ebp - 0x773]
push eax
call fcn.005477d6
add esp, 0xc
mov byte [ebp - 0x7ac], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd]
call fcn.00402620
mov al, byte [ebp - 0x7ac]
jmp 0x4ecd6f
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ebp - 0x7b8]
add ecx, 0x1658
mov eax, dword [ebp - 0x7b8]
mov edx, dword [eax + 0x1658]
mov eax, dword [edx + 0xc]
call eax
movzx ecx, al
test ecx, ecx
je 0x4ec94b
push 0x574a9b
mov edx, dword [ebp - 0x7b8]
mov eax, dword [edx + 0x1e00]
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
push 0x574a9b
mov ecx, dword [ebp - 0x7b8]
mov edx, dword [ecx + 0x1e04]
push edx
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov eax, dword [ebp - 0x7b8]
movzx ecx, byte [eax + 0x1c64]
test ecx, ecx
je 0x4ec92a
push str.GOLD
mov edx, dword [ebp - 0x7b8]
add edx, 0x20e4
push edx
call fcn.00548180
add esp, 8
test eax, eax
jne 0x4ec8e8
jmp 0x4ec91d
push 1
mov eax, dword [ebp - 0x7b8]
movsx ecx, word [eax + 0x23f2]
push ecx
mov esi, dword [ebp - 0x7b8]
add esi, 0x20e4
sub esp, 0x338
mov ecx, 0xce
mov edi, esp
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x6f322c
call fcn.004a2ba0
mov edx, dword [ebp - 0x7b8]
mov byte [edx + 0x1c64], 0
mov byte [ebp - 0x7ad], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd]
call fcn.00402620
mov al, byte [ebp - 0x7ad]
jmp 0x4ecd6f
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 0x7b8]
add edx, 0x1c54
push edx
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
je 0x4ecac4
mov eax, dword [ebp - 0x7b8]
movzx ecx, byte [eax + 0x1c64]
test ecx, ecx
jne 0x4eca16
movzx edx, byte [0x6eef44]
test edx, edx
je 0x4eca16
push str.GOLD
push 0x6eef52
call fcn.00548180
add esp, 8
test eax, eax
jne 0x4ec9c7
push 0x12
push 0x2d
push 0x582844
mov ecx, 0x6eeef8
call fcn.0049e060
mov dword [0x6ef668], 0x16
jmp 0x4eca11
push 0x338
push 0x6eef52
mov eax, dword [ebp - 0x7b8]
add eax, 0x20e4
push eax
call fcn.00545160
add esp, 0xc
push 0x67e
push 0
push 0x6eef44
call fcn.005454d0
add esp, 0xc
mov ecx, dword [ebp - 0x7b8]
mov byte [ecx + 0x1c64], 1
mov ecx, dword [ebp - 0x7b8]
call fcn.004ed480
jmp 0x4ecac4
mov edx, dword [ebp - 0x7b8]
movzx eax, byte [edx + 0x1c64]
test eax, eax
je 0x4ecac4
movzx ecx, byte [0x6eef44]
test ecx, ecx
jne 0x4ecac4
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x7b8]
add ecx, 0x1c68
push ecx
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
je 0x4ecac4
mov byte [0x6eef44], 1
mov edx, dword [ebp - 0x7b8]
add edx, 0x20e4
push edx
mov ecx, 0x6eef52
call fcn.0043b8e0
mov byte [0x6eef45], 0
mov byte [0x6eef46], 0
mov byte [0x6eef48], 0
mov byte [0x6eef47], 0
xor eax, eax
mov word [0x6ef260], ax
mov ecx, dword [ebp - 0x7b8]
mov byte [ecx + 0x1c64], 0
push 0x338
push 0
mov edx, dword [ebp - 0x7b8]
add edx, 0x20e4
push edx
call fcn.005454d0
add esp, 0xc
mov eax, dword [ebp - 0x7b8]
mov ecx, dword [ebp - 0x7b8]
mov edx, dword [eax + 0x920]
cmp edx, dword [ecx + 0x928]
jne 0x4ecd3c
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0x7b8]
add ecx, 0x1800
mov edx, dword [ebp - 0x7b8]
mov eax, dword [edx + 0x1800]
mov edx, dword [eax + 0xc]
call edx
movzx eax, al
test eax, eax
je 0x4ecb84
call fcn.0040ada0
sub eax, dword [0x66ab68]
cmp eax, 0x1388
jbe 0x4ecb63
call fcn.0040ada0
sub eax, dword [0x66ab68]
cmp eax, 0x1388
jbe 0x4ecb59
mov ecx, dword [ebp - 0x7b8]
add ecx, 0x1e08
call fcn.0043c1c0
push 2
mov ecx, 0x7c46b0
call fcn.005073d0
call fcn.0040ada0
mov dword [0x66ab68], eax
call fcn.0040ada0
mov dword [0x66ab68], eax
mov byte [ebp - 0x7ae], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd]
call fcn.00402620
mov al, byte [ebp - 0x7ae]
jmp 0x4ecd6f
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ebp - 0x7b8]
add ecx, 0x1930
mov eax, dword [ebp - 0x7b8]
mov edx, dword [eax + 0x1930]
mov eax, dword [edx + 0xc]
call eax
movzx ecx, al
test ecx, ecx
je 0x4ecbe8
mov edx, dword [ebp - 0x7b8]
mov eax, dword [edx + 0xc0]
push eax
mov ecx, 0x7c46b0
call fcn.00507740
mov byte [ebp - 0x7af], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd]
call fcn.00402620
mov al, byte [ebp - 0x7af]
jmp 0x4ecd6f
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ebp - 0x7b8]
add ecx, 0x1a60
mov eax, dword [ebp - 0x7b8]
mov edx, dword [eax + 0x1a60]
mov eax, dword [edx + 0xc]
call eax
movzx ecx, al
test ecx, ecx
je 0x4ecd3c
push 2
mov edx, dword [ebp - 0x7b8]
mov eax, dword [edx + 0xbc]
push eax
mov ecx, 0x7c46b0
call fcn.005076a0
mov ecx, dword [ebp - 0x7b8]
add ecx, 0x1e20
call fcn.00515120
mov dword [ebp - 0x798], eax
cmp dword [ebp - 0x798], 0
jle 0x4ecd1e
mov ecx, dword [ebp - 0x7b8]
add ecx, 0x1e20
call fcn.0049ebd0
mov dword [ebp - 0x79c], 0
jmp 0x4ecc81
mov ecx, dword [ebp - 0x79c]
add ecx, 1
mov dword [ebp - 0x79c], ecx
mov edx, dword [ebp - 0x79c]
cmp edx, dword [ebp - 0x798]
jge 0x4ecd1e
mov ecx, dword [ebp - 0x7b8]
add ecx, 0x1e20
call fcn.004edfb0
mov dword [ebp - 0x7a0], eax
cmp dword [ebp - 0x7a0], 0
je 0x4ecd08
mov eax, dword [ebp - 0x7a0]
mov ecx, dword [ebp - 0x7b8]
mov edx, dword [eax]
cmp edx, dword [ecx + 0xc0]
jne 0x4ecd08
mov ecx, dword [ebp - 0x7b8]
add ecx, 0x1e20
call fcn.004eddd0
mov eax, dword [ebp - 0x7b8]
mov dword [eax + 0xc0], 0xffffffff
mov byte [ebp - 0x7b0], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd]
call fcn.00402620
mov al, byte [ebp - 0x7b0]
jmp 0x4ecd6f
mov ecx, dword [ebp - 0x7b8]
add ecx, 0x1e08
call fcn.004edf40
jmp 0x4ecc72
mov byte [ebp - 0x7b1], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd]
call fcn.00402620
mov al, byte [ebp - 0x7b1]
jmp 0x4ecd6f
mov ecx, dword [ebp - 0x7b8]
mov byte [ecx + 0x37], 0
mov edx, dword [ebp - 0x7b8]
mov byte [edx + 0x1dfc], 0
mov byte [ebp - 0x7b2], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd]
call fcn.00402620
mov al, byte [ebp - 0x7b2]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x3c]
xor ecx, ebp
call fcn.0054514c
mov esp, ebp
pop ebp
ret 8