Function at 0x424760
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x462f29
push eax
mov dword fs:[0], esp
sub esp, 0x644
push ebx
push ebp
mov ebp, ecx
push esi
push edi
xor edi, edi
cmp dword [ebp + 0x1460], edi
je 0x4247b4
mov eax, dword [ebp + 4]
mov esi, dword [sym.imp.USER32.dll_SetTimer]
push edi
push 0x1388
push 8
push eax
call esi
mov ecx, dword [ebp + 4]
push edi
push 0x64
push 3
push ecx
call esi
mov eax, 1
jmp 0x425abf
mov edx, dword [ebp + 0x144c]
mov eax, dword [edx - 8]
cmp eax, edi
je 0x425a26
mov eax, dword [0x46f42c]
mov dword [esp + 0x60], edi
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], eax
xor eax, eax
lea ecx, [esp + 0x58]
mov dword [esp + 0x66], eax
lea esi, [ebp + 0x20]
mov dword [esp + 0x6a], eax
push ecx
mov dword [esp + 0x72], eax
mov ecx, esi
mov dword [esp + 0x76], eax
mov dword [esp + 0x660], edi
mov word [esp + 0x68], di
mov word [esp + 0x7a], ax
call fcn.004423c0
mov eax, dword [0x46f42c]
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov ecx, esi
mov byte [esp + 0x65c], 1
call fcn.00442b90
mov ebx, eax
mov ecx, esi
mov dword [esp + 0x40], ebx
call fcn.00442150
mov esi, eax
mov eax, dword [esp + 0x60]
cmp eax, 6
jl 0x42582d
cmp esi, edi
jne 0x42582d
mov edx, dword [0x46f42c]
mov dword [esp + 0x44], edx
push ebx
lea eax, [esp + 0x48]
push 0x473778
push eax
mov byte [esp + 0x668], 2
call fcn.004076f0
mov dword [ebp + 0x1460], 1
mov eax, dword [0x46f42c]
add esp, 0xc
mov dword [esp + 0x48], eax
mov dword [esp + 0x3c], eax
lea ecx, [esp + 0x78]
push 0x100
push ecx
push 0x100
mov byte [esp + 0x668], 4
call fcn.00408450
mov edx, 0x100
sub edx, eax
cmp edx, 1
jle 0x4248e4
lea eax, [esp + 0x78]
test eax, eax
je 0x4248d3
lea ecx, [esp + 0x78]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea edx, [esp + 0x78]
lea ecx, [esp + 0x3c]
push edx
push eax
call fcn.004080a0
jmp 0x424932
push 0x1ff
lea ecx, [esp + 0x40]
mov esi, 0x200
call fcn.00407e80
cmp eax, edi
je 0x424927
push esi
push eax
push 0x100
call fcn.00408450
mov ecx, esi
sub ecx, eax
cmp ecx, 1
jg 0x424927
add esi, 0x100
lea ecx, [esp + 0x3c]
lea edx, [esi - 1]
push edx
call fcn.00407e80
cmp eax, edi
jne 0x4248fb
push 0xffffffffffffffff
lea ecx, [esp + 0x40]
call fcn.00407f40
mov ecx, dword [esp + 0x58]
mov eax, dword [ebp + 0x144c]
mov esi, dword [esp + 0x3c]
lea ebx, [ebp + 0x144c]
push ecx
push eax
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
push eax
lea edx, [esp + 0x50]
push esi
push edx
call fcn.004076f0
mov eax, dword [esp + 0x50]
add esp, 0x10
cmp eax, 7
ja case.0x42496a.3
jmp dword [eax*4 + 0x425ad8]
lea ecx, [esp + 0x78]
push 0x100
push ecx
push 0xfc
mov dword [ebp + 0x145c], 1
mov dword [esp + 0x3c], 0
call fcn.00408450
mov edx, 0x100
sub edx, eax
cmp edx, 1
jle 0x4249c7
lea eax, [esp + 0x78]
test eax, eax
je 0x4249b6
lea ecx, [esp + 0x78]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea edx, [esp + 0x78]
lea ecx, [esp + 0x14]
push edx
push eax
call fcn.004080a0
jmp 0x424a15
push 0x1ff
lea ecx, [esp + 0x18]
mov esi, 0x200
call fcn.00407e80
test eax, eax
je 0x424a0a
push esi
push eax
push 0xfc
call fcn.00408450
mov ecx, esi
sub ecx, eax
cmp ecx, 1
jg 0x424a0a
add esi, 0x100
lea ecx, [esp + 0x14]
lea edx, [esi - 1]
push edx
call fcn.00407e80
test eax, eax
jne 0x4249de
push 0xffffffffffffffff
lea ecx, [esp + 0x18]
call fcn.00407f40
mov eax, 0x4737d4
test eax, eax
je 0x424a29
push 0x4737d4
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push 0x4737d4
push eax
lea ecx, [esp + 0x20]
call fcn.004080a0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x48]
cmp eax, ecx
je 0x424a8a
mov edx, dword [eax - 0xc]
test edx, edx
jge 0x424a58
mov edx, dword [0x46f430]
add eax, 0xfffffff4
cmp eax, edx
jne 0x424a5f
mov eax, dword [ecx - 0xc]
test eax, eax
jge 0x424a6f
push ecx
mov ecx, dword [ecx - 8]
push ecx
lea ecx, [esp + 0x24]
call fcn.004080a0
jmp 0x424a8a
lea ecx, [esp + 0x1c]
call fcn.004083e0
mov eax, dword [esp + 0x48]
mov dword [esp + 0x1c], eax
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
lea edx, [esp + 0x78]
push 0x100
push edx
push 0xfe
call fcn.00408450
mov ecx, 0x100
sub ecx, eax
cmp ecx, 1
jle 0x424ad2
lea edx, [esp + 0x78]
test edx, edx
jne 0x424ab6
xor eax, eax
jmp 0x424ac1
lea eax, [esp + 0x78]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea ecx, [esp + 0x78]
push ecx
push eax
lea ecx, [esp + 0x30]
call fcn.004080a0
jmp 0x424b20
push 0x1ff
lea ecx, [esp + 0x2c]
mov esi, 0x200
call fcn.00407e80
test eax, eax
je 0x424b15
push esi
push eax
push 0xfe
call fcn.00408450
mov edx, esi
sub edx, eax
cmp edx, 1
jg 0x424b15
add esi, 0x100
lea ecx, [esp + 0x28]
lea eax, [esi - 1]
push eax
call fcn.00407e80
test eax, eax
jne 0x424ae9
push 0xffffffffffffffff
lea ecx, [esp + 0x2c]
call fcn.00407f40
lea ecx, [esp + 0x78]
push 0x100
push ecx
push 0xfa
call fcn.00408450
mov edx, 0x100
sub edx, eax
cmp edx, 1
jle 0x424b64
lea eax, [esp + 0x78]
test eax, eax
je 0x424b53
lea ecx, [esp + 0x78]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea edx, [esp + 0x78]
lea ecx, [esp + 0x20]
push edx
push eax
call fcn.004080a0
jmp 0x424bb2
push 0x1ff
lea ecx, [esp + 0x24]
mov esi, 0x200
call fcn.00407e80
test eax, eax
je 0x424ba7
push esi
push eax
push 0xfa
call fcn.00408450
mov ecx, esi
sub ecx, eax
cmp ecx, 1
jg 0x424ba7
add esi, 0x100
lea ecx, [esp + 0x20]
lea edx, [esi - 1]
push edx
call fcn.00407e80
test eax, eax
jne 0x424b7b
push 0xffffffffffffffff
lea ecx, [esp + 0x24]
call fcn.00407f40
lea eax, [esp + 0x78]
push 0x100
push eax
push 0xfb
call fcn.00408450
mov ecx, 0x100
sub ecx, eax
cmp ecx, 1
jle 0x424bfa
lea edx, [esp + 0x78]
test edx, edx
jne 0x424bde
xor eax, eax
jmp 0x424be9
lea eax, [esp + 0x78]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea ecx, [esp + 0x78]
push ecx
push eax
lea ecx, [esp + 0x2c]
call fcn.004080a0
jmp 0x424c48
push 0x1ff
lea ecx, [esp + 0x28]
mov esi, 0x200
call fcn.00407e80
test eax, eax
je 0x424c3d
push esi
push eax
push 0xfb
call fcn.00408450
mov edx, esi
sub edx, eax
cmp edx, 1
jg 0x424c3d
add esi, 0x100
lea ecx, [esp + 0x24]
lea eax, [esi - 1]
push eax
call fcn.00407e80
test eax, eax
jne 0x424c11
push 0xffffffffffffffff
lea ecx, [esp + 0x28]
call fcn.00407f40
mov eax, 1
mov dword [esp + 0x2c], 2
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
jmp 0x42557d
lea ecx, [esp + 0x64]
push 0xa
push ecx
push 1
call fcn.004560cb
mov eax, dword [ebp + 0xa70]
add esp, 8
mov dword [esp + 0x44], esp
mov edi, esp
mov ecx, dword [eax - 0xc]
test ecx, ecx
jl 0x424c94
mov dword [edi], eax
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
jmp 0x424cba
mov edx, dword [0x46f42c]
mov dword [edi], edx
mov esi, dword [ebp + 0xa70]
test esi, esi
jne 0x424caa
xor eax, eax
jmp 0x424cb1
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push esi
push eax
mov ecx, edi
call fcn.004080a0
push ecx
lea eax, [esp + 0x6c]
mov ecx, esp
mov dword [esp + 0x5c], esp
push eax
mov byte [esp + 0x668], 5
call fcn.00407200
push ecx
mov byte [esp + 0x668], 6
mov ecx, esp
mov dword [esp + 0x5c], esp
push ebx
call fcn.00407110
push ecx
lea edx, [ebp + 0xa74]
mov ecx, esp
mov dword [esp + 0x5c], esp
push edx
mov byte [esp + 0x670], 7
call fcn.00407110
mov ecx, 0x47b738
mov byte [esp + 0x66c], 4
call fcn.00447360
mov dword [ebp + 0xa44], 0
mov dword [ebp + 0x1454], 1
mov eax, dword [ebp + 4]
push 0
push 0x64
push 3
push eax
call dword [sym.imp.USER32.dll_SetTimer]
mov eax, dword [esp + 0x3c]
mov edx, dword [0x46f430]
mov esi, dword [ebp + 0x1460]
mov edi, dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x424d70
add eax, 0xfffffff4
push eax
call edi
test eax, eax
jg 0x424d70
mov edx, dword [esp + 0x3c]
lea eax, [edx - 0xc]
push eax
call fcn.004535f0
add esp, 4
mov eax, dword [esp + 0x48]
mov edx, dword [0x46f430]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x424d9b
add eax, 0xfffffff4
push eax
call edi
test eax, eax
jg 0x424d9b
mov edx, dword [esp + 0x48]
lea eax, [edx - 0xc]
push eax
call fcn.004535f0
add esp, 4
mov eax, dword [esp + 0x44]
mov edx, dword [0x46f430]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x424dc6
add eax, 0xfffffff4
push eax
call edi
test eax, eax
jg 0x424dc6
mov edx, dword [esp + 0x44]
lea eax, [edx - 0xc]
push eax
call fcn.004535f0
add esp, 4
lea ecx, [esp + 0x28]
mov byte [esp + 0x65c], 0xd
call fcn.00408010
lea ecx, [esp + 0x24]
mov byte [esp + 0x65c], 0xc
call fcn.00408010
lea ecx, [esp + 0x20]
mov byte [esp + 0x65c], 0xb
call fcn.00408010
lea ecx, [esp + 0x1c]
mov byte [esp + 0x65c], 0xa
call fcn.00408010
lea ecx, [esp + 0x18]
mov byte [esp + 0x65c], 9
call fcn.00408010
lea ecx, [esp + 0x14]
mov byte [esp + 0x65c], 8
call fcn.00408010
lea ecx, [esp + 0x10]
mov byte [esp + 0x65c], 0
call fcn.00408010
lea ecx, [esp + 0x5c]
mov dword [esp + 0x65c], 0xffffffff
call fcn.00408010
lea ecx, [esp + 0x58]
call fcn.00408010
mov eax, esi
jmp 0x425abf
lea eax, [esp + 0x78]
push 0x100
push eax
push 0xfc
mov dword [esp + 0x3c], 0
call fcn.00408450
mov ecx, 0x100
sub ecx, eax
cmp ecx, 1
jle 0x424e99
lea edx, [esp + 0x78]
lea ecx, [esp + 0x14]
push edx
call fcn.00407430
jmp 0x424ee7
push 0x1ff
lea ecx, [esp + 0x18]
mov esi, 0x200
call fcn.00407e80
test eax, eax
je 0x424edc
push esi
push eax
push 0xfc
call fcn.00408450
mov ecx, esi
sub ecx, eax
cmp ecx, 1
jg 0x424edc
add esi, 0x100
lea ecx, [esp + 0x14]
lea edx, [esi - 1]
push edx
call fcn.00407e80
test eax, eax
jne 0x424eb0
push 0xffffffffffffffff
lea ecx, [esp + 0x18]
call fcn.00407f40
mov eax, 0x4737c4
test eax, eax
je 0x424efb
push 0x4737c4
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push 0x4737c4
push eax
lea ecx, [esp + 0x20]
call fcn.004080a0
lea ecx, [esp + 0x78]
push 0x100
push ecx
push 0xff
call fcn.00408450
mov edx, 0x100
sub edx, eax
cmp edx, 1
jle 0x424f3a
lea eax, [esp + 0x78]
lea ecx, [esp + 0x1c]
push eax
call fcn.00407430
jmp 0x424f88
push 0x1ff
lea ecx, [esp + 0x20]
mov esi, 0x200
call fcn.00407e80
test eax, eax
je 0x424f7d
push esi
push eax
push 0xff
call fcn.00408450
mov ecx, esi
sub ecx, eax
cmp ecx, 1
jg 0x424f7d
add esi, 0x100
lea ecx, [esp + 0x1c]
lea edx, [esi - 1]
push edx
call fcn.00407e80
test eax, eax
jne 0x424f51
push 0xffffffffffffffff
lea ecx, [esp + 0x20]
call fcn.00407f40
lea eax, [esp + 0x78]
push 0x100
push eax
push 0xfa
call fcn.00408450
mov ecx, 0x100
sub ecx, eax
cmp ecx, 1
jle 0x424fb8
lea edx, [esp + 0x78]
lea ecx, [esp + 0x20]
push edx
call fcn.00407430
jmp 0x425006
push 0x1ff
lea ecx, [esp + 0x24]
mov esi, 0x200
call fcn.00407e80
test eax, eax
je 0x424ffb
push esi
push eax
push 0xfa
call fcn.00408450
mov ecx, esi
sub ecx, eax
cmp ecx, 1
jg 0x424ffb
add esi, 0x100
lea ecx, [esp + 0x20]
lea edx, [esi - 1]
push edx
call fcn.00407e80
test eax, eax
jne 0x424fcf
push 0xffffffffffffffff
lea ecx, [esp + 0x24]
call fcn.00407f40
lea eax, [esp + 0x78]
push 0x100
push eax
push 0xfb
call fcn.00408450
mov ecx, 0x100
sub ecx, eax
cmp ecx, 1
jle 0x425039
lea edx, [esp + 0x78]
lea ecx, [esp + 0x24]
push edx
call fcn.00407430
jmp 0x4252b7
push 0x1ff
lea ecx, [esp + 0x28]
mov esi, 0x200
call fcn.00407e80
test eax, eax
je 0x42507c
push esi
push eax
push 0xfb
call fcn.00408450
mov ecx, esi
sub ecx, eax
cmp ecx, 1
jg 0x42507c
add esi, 0x100
lea ecx, [esp + 0x24]
lea edx, [esi - 1]
push edx
call fcn.00407e80
test eax, eax
jne 0x425050
push 0xffffffffffffffff
lea ecx, [esp + 0x28]
call fcn.00407f40
jmp 0x4252b7
lea eax, [esp + 0x78]
push 0x100
push eax
push 0xfc
mov dword [esp + 0x3c], 0
call fcn.00408450
mov ecx, 0x100
sub ecx, eax
cmp ecx, 1
jle 0x4250c4
lea edx, [esp + 0x78]
lea ecx, [esp + 0x14]
push edx
call fcn.00407430
jmp 0x425112
push 0x1ff
lea ecx, [esp + 0x18]
mov esi, 0x200
call fcn.00407e80
test eax, eax
je 0x425107
push esi
push eax
push 0xfc
call fcn.00408450
mov ecx, esi
sub ecx, eax
cmp ecx, 1
jg 0x425107
add esi, 0x100
lea ecx, [esp + 0x14]
lea edx, [esi - 1]
push edx
call fcn.00407e80
test eax, eax
jne 0x4250db
push 0xffffffffffffffff
lea ecx, [esp + 0x18]
call fcn.00407f40
mov eax, 0x4737bc
test eax, eax
je 0x425126
push 0x4737bc
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push 0x4737bc
push eax
lea ecx, [esp + 0x20]
call fcn.004080a0
lea ecx, [esp + 0x78]
push 0x100
push ecx
push 0xfd
call fcn.00408450
mov edx, 0x100
sub edx, eax
cmp edx, 1
jle 0x425165
lea eax, [esp + 0x78]
lea ecx, [esp + 0x1c]
push eax
call fcn.00407430
jmp 0x4251b3
push 0x1ff
lea ecx, [esp + 0x20]
mov esi, 0x200
call fcn.00407e80
test eax, eax
je 0x4251a8
push esi
push eax
push 0xfd
call fcn.00408450
mov ecx, esi
sub ecx, eax
cmp ecx, 1
jg 0x4251a8
add esi, 0x100
lea ecx, [esp + 0x1c]
lea edx, [esi - 1]
push edx
call fcn.00407e80
test eax, eax
jne 0x42517c
push 0xffffffffffffffff
lea ecx, [esp + 0x20]
call fcn.00407f40
lea eax, [esp + 0x78]
push 0x100
push eax
push 0xfa
call fcn.00408450
mov ecx, 0x100
sub ecx, eax
cmp ecx, 1
jle 0x4251e3
lea edx, [esp + 0x78]
lea ecx, [esp + 0x20]
push edx
call fcn.00407430
jmp 0x425231
push 0x1ff
lea ecx, [esp + 0x24]
mov esi, 0x200
call fcn.00407e80
test eax, eax
je 0x425226
push esi
push eax
push 0xfa
call fcn.00408450
mov ecx, esi
sub ecx, eax
cmp ecx, 1
jg 0x425226
add esi, 0x100
lea ecx, [esp + 0x20]
lea edx, [esi - 1]
push edx
call fcn.00407e80
test eax, eax
jne 0x4251fa
push 0xffffffffffffffff
lea ecx, [esp + 0x24]
call fcn.00407f40
lea eax, [esp + 0x78]
push 0x100
push eax
push 0xfb
call fcn.00408450
mov ecx, 0x100
sub ecx, eax
cmp ecx, 1
jle 0x425261
lea edx, [esp + 0x78]
lea ecx, [esp + 0x24]
push edx
call fcn.00407430
jmp 0x4252af
push 0x1ff
lea ecx, [esp + 0x28]
mov esi, 0x200
call fcn.00407e80
test eax, eax
je 0x4252a4
push esi
push eax
push 0xfb
call fcn.00408450
mov ecx, esi
sub ecx, eax
cmp ecx, 1
jg 0x4252a4
add esi, 0x100
lea ecx, [esp + 0x24]
lea edx, [esi - 1]
push edx
call fcn.00407e80
test eax, eax
jne 0x425278
push 0xffffffffffffffff
lea ecx, [esp + 0x28]
call fcn.00407f40
mov dword [esp + 0x2c], 2
mov edi, 1
mov dword [esp + 0x34], 0
mov dword [esp + 0x38], edi
jmp 0x42557d
lea eax, [esp + 0x78]
push 0x100
push eax
push 0x109
mov dword [esp + 0x3c], 2
call fcn.00408450
mov ecx, 0x100
sub ecx, eax
cmp ecx, 1
jle 0x425305
lea edx, [esp + 0x78]
lea ecx, [esp + 0x14]
push edx
call fcn.00407430
jmp 0x425353
push 0x1ff
lea ecx, [esp + 0x18]
mov esi, 0x200
call fcn.00407e80
test eax, eax
je 0x425348
push esi
push eax
push 0x109
call fcn.00408450
mov ecx, esi
sub ecx, eax
cmp ecx, 1
jg 0x425348
add esi, 0x100
lea ecx, [esp + 0x14]
lea edx, [esi - 1]
push edx
call fcn.00407e80
test eax, eax
jne 0x42531c
push 0xffffffffffffffff
lea ecx, [esp + 0x18]
call fcn.00407f40
mov eax, 0x47a15c
test eax, eax
je 0x425367
push 0x47a15c
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push 0x47a15c
push eax
lea ecx, [esp + 0x20]
call fcn.004080a0
lea ecx, [esp + 0x78]
push 0x100
push ecx
push 0x10b
call fcn.00408450
mov edx, 0x100
sub edx, eax
cmp edx, 1
jle 0x4253a6
lea eax, [esp + 0x78]
lea ecx, [esp + 0x1c]
push eax
call fcn.00407430
jmp 0x4253f4
push 0x1ff
lea ecx, [esp + 0x20]
mov esi, 0x200
call fcn.00407e80
test eax, eax
je 0x4253e9
push esi
push eax
push 0x10b
call fcn.00408450
mov ecx, esi
sub ecx, eax
cmp ecx, 1
jg 0x4253e9
add esi, 0x100
lea ecx, [esp + 0x1c]
lea edx, [esi - 1]
push edx
call fcn.00407e80
test eax, eax
jne 0x4253bd
push 0xffffffffffffffff
lea ecx, [esp + 0x20]
call fcn.00407f40
lea eax, [esp + 0x78]
push 0x100
push eax
push 0xfa
call fcn.00408450
mov ecx, 0x100
sub ecx, eax
cmp ecx, 1
jle 0x425424
lea edx, [esp + 0x78]
lea ecx, [esp + 0x20]
push edx
call fcn.00407430
jmp 0x425472
push 0x1ff
lea ecx, [esp + 0x24]
mov esi, 0x200
call fcn.00407e80
test eax, eax
je 0x425467
push esi
push eax
push 0xfa
call fcn.00408450
mov ecx, esi
sub ecx, eax
cmp ecx, 1
jg 0x425467
add esi, 0x100
lea ecx, [esp + 0x20]
lea edx, [esi - 1]
push edx
call fcn.00407e80
test eax, eax
jne 0x42543b
push 0xffffffffffffffff
lea ecx, [esp + 0x24]
call fcn.00407f40
lea eax, [esp + 0x78]
push 0x100
push eax
push 0xfb
call fcn.00408450
mov ecx, 0x100
sub ecx, eax
cmp ecx, 1
jle 0x4254a2
lea edx, [esp + 0x78]
lea ecx, [esp + 0x24]
push edx
call fcn.00407430
jmp 0x4254f0
push 0x1ff
lea ecx, [esp + 0x28]
mov esi, 0x200
call fcn.00407e80
test eax, eax
je 0x4254e5
push esi
push eax
push 0xfb
call fcn.00408450
mov ecx, esi
sub ecx, eax
cmp ecx, 1
jg 0x4254e5
add esi, 0x100
lea ecx, [esp + 0x24]
lea edx, [esi - 1]
push edx
call fcn.00407e80
test eax, eax
jne 0x4254b9
push 0xffffffffffffffff
lea ecx, [esp + 0x28]
call fcn.00407f40
lea eax, [esp + 0x78]
push 0x100
push eax
push 0x108
call fcn.00408450
mov ecx, 0x100
sub ecx, eax
cmp ecx, 1
jle 0x425520
lea edx, [esp + 0x78]
lea ecx, [esp + 0x28]
push edx
call fcn.00407430
jmp 0x42556e
push 0x1ff
lea ecx, [esp + 0x2c]
mov esi, 0x200
call fcn.00407e80
test eax, eax
je 0x425563
push esi
push eax
push 0x108
call fcn.00408450
mov ecx, esi
sub ecx, eax
cmp ecx, 1
jg 0x425563
add esi, 0x100
lea ecx, [esp + 0x28]
lea edx, [esi - 1]
push edx
call fcn.00407e80
test eax, eax
jne 0x425537
push 0xffffffffffffffff
lea ecx, [esp + 0x2c]
call fcn.00407f40
mov eax, 1
xor edi, edi
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
lea ecx, [esp + 0x278]
call fcn.0040f3b0
lea eax, [esp + 0x10]
mov bl, 0xe
push eax
lea ecx, [esp + 0x27c]
mov byte [esp + 0x660], bl
call fcn.0040f980
mov ecx, dword [ebp + 0x145c]
mov esi, dword [ebp + 4]
lea edx, [esp + 0x278]
lea eax, [esp + 0x280]
push edx
push eax
push 0x47b7a0
mov dword [esp + 0x45c], ecx
call fcn.00408f60
mov eax, dword [0x47b7a8]
push 0
push 0x4096e0
push esi
push 0xf8
push eax
call dword [sym.imp.USER32.dll_DialogBoxParamW]
cmp eax, 1
jne 0x42573f
xor esi, esi
cmp edi, esi
je 0x425749
lea ecx, [esp + 0x454]
push 0x100
push ecx
push 0x101
mov dword [esp + 0x3c], esi
call fcn.00408450
mov edx, 0x100
sub edx, eax
cmp edx, 1
jle 0x425633
lea eax, [esp + 0x454]
lea ecx, [esp + 0x14]
push eax
call fcn.00407430
jmp 0x425683
push 0x1ff
lea ecx, [esp + 0x18]
mov esi, 0x200
call fcn.00407e80
test eax, eax
je 0x425676
push esi
push eax
push 0x101
call fcn.00408450
mov ecx, esi
sub ecx, eax
cmp ecx, 1
jg 0x425676
add esi, 0x100
lea ecx, [esp + 0x14]
lea edx, [esi - 1]
push edx
call fcn.00407e80
test eax, eax
jne 0x42564a
push 0xffffffffffffffff
lea ecx, [esp + 0x18]
call fcn.00407f40
xor esi, esi
mov eax, 0x47a15c
test eax, eax
je 0x425697
push 0x47a15c
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push 0x47a15c
push eax
lea ecx, [esp + 0x20]
call fcn.004080a0
push 0x102
lea ecx, [esp + 0x20]
call fcn.00407c70
push 0xfe
lea ecx, [esp + 0x2c]
call fcn.00407c70
push 0x106
lea ecx, [esp + 0x24]
call fcn.00407c70
push 0x107
lea ecx, [esp + 0x28]
call fcn.00407c70
mov edi, 1
lea ecx, [esp + 0x78]
mov dword [esp + 0x34], esi
mov dword [esp + 0x38], edi
call fcn.0040f3b0
lea ecx, [esp + 0x10]
mov byte [esp + 0x65c], 0xf
push ecx
lea ecx, [esp + 0x7c]
call fcn.0040f980
mov edx, dword [ebp + 4]
push esi
push edx
lea ecx, [esp + 0x80]
call fcn.00421700
cmp eax, edi
jne 0x425727
mov dword [ebp + 0xa44], esi
jmp 0x42572d
mov dword [ebp + 0xa44], edi
lea ecx, [esp + 0x78]
mov byte [esp + 0x65c], bl
call fcn.0041bdb0
jmp 0x425749
mov dword [ebp + 0xa44], 1
mov ecx, dword [esp + 0x40]
lea eax, [esp + 0x64]
push 0xa
push eax
push ecx
call fcn.004560cb
add esp, 8
lea edx, [ebp + 0xa70]
mov ecx, esp
mov dword [esp + 0x50], esp
push edx
call fcn.00407110
push ecx
lea eax, [esp + 0x6c]
mov ecx, esp
mov dword [esp + 0x58], esp
push eax
mov byte [esp + 0x668], 0x10
call fcn.00407200
push ecx
lea eax, [ebp + 0x144c]
mov ecx, esp
mov dword [esp + 0x60], esp
push eax
mov byte [esp + 0x66c], 0x11
call fcn.00407110
push ecx
lea edx, [ebp + 0xa74]
mov ecx, esp
mov dword [esp + 0x50], esp
push edx
mov byte [esp + 0x670], 0x12
call fcn.00407110
mov ecx, 0x47b738
mov byte [esp + 0x66c], bl
call fcn.00447360
mov eax, dword [esp + 0x450]
mov dword [ebp + 0x145c], eax
mov dword [ebp + 0x1454], 1
lea ecx, [esp + 0x278]
mov byte [esp + 0x65c], 4
call fcn.0041bdb0
lea ecx, [esp + 0x3c]
mov byte [esp + 0x65c], 3
call fcn.00408010
lea ecx, [esp + 0x48]
mov byte [esp + 0x65c], 2
call fcn.00408010
mov byte [esp + 0x65c], 1
lea ecx, [esp + 0x44]
jmp 0x425a00
cmp eax, 5
jne 0x425a05
mov ecx, dword [0x46f42c]
mov dword [esp + 0x40], ecx
push esi
lea edx, [esp + 0x44]
push 0x473734
push edx
mov byte [esp + 0x668], 0x13
call fcn.004076f0
add esp, 0xc
mov edi, 1
cmp esi, 0xffffffa5
mov dword [ebp + 0x1460], edi
mov dword [esp + 0x30], 2
je 0x425896
push 0x109
lea ecx, [esp + 0x18]
call fcn.00407c70
push 0x47a15c
lea ecx, [esp + 0x1c]
call fcn.00407430
push 0x10b
jmp 0x4258b7
push 0x10a
lea ecx, [esp + 0x18]
call fcn.00407c70
push 0x47a15c
lea ecx, [esp + 0x1c]
call fcn.00407430
push 0x10c
lea ecx, [esp + 0x20]
call fcn.00407c70
push 0xfa
lea ecx, [esp + 0x24]
call fcn.00407c70
push 0xfb
lea ecx, [esp + 0x28]
call fcn.00407c70
push 0x108
lea ecx, [esp + 0x2c]
call fcn.00407c70
lea ecx, [esp + 0x78]
mov dword [esp + 0x34], edi
mov dword [esp + 0x38], edi
call fcn.0040f3b0
lea eax, [esp + 0x10]
mov bl, 0x14
push eax
lea ecx, [esp + 0x7c]
mov byte [esp + 0x660], bl
call fcn.0040f980
mov ecx, dword [ebp + 4]
xor edi, edi
push edi
push ecx
lea ecx, [esp + 0x80]
mov dword [esp + 0x258], edi
call fcn.00421700
cmp eax, 1
jne 0x425939
mov dword [ebp + 0xa44], edi
jmp 0x425943
mov dword [ebp + 0xa44], 1
cmp dword [esp + 0x250], edi
je 0x4259d2
lea edx, [esp + 0x64]
push 0xa
push edx
push esi
call fcn.004560cb
add esp, 8
lea eax, [ebp + 0xa70]
mov ecx, esp
mov dword [esp + 0x50], esp
push eax
call fcn.00407110
push ecx
lea edx, [esp + 0x6c]
mov ecx, esp
mov dword [esp + 0x58], esp
push edx
mov byte [esp + 0x668], 0x15
call fcn.00407200
push ecx
lea eax, [ebp + 0x144c]
mov ecx, esp
mov dword [esp + 0x60], esp
push eax
mov byte [esp + 0x66c], 0x16
call fcn.00407110
push ecx
lea eax, [ebp + 0xa74]
mov ecx, esp
mov dword [esp + 0x54], esp
push eax
mov byte [esp + 0x670], 0x17
call fcn.00407110
mov ecx, 0x47b738
mov byte [esp + 0x66c], bl
call fcn.00447360
mov dword [esp + 0x250], edi
mov dword [ebp + 0x1454], 1
lea ecx, [esp + 0x78]
mov byte [esp + 0x65c], 0x13
call fcn.0041bdb0
mov byte [esp + 0x65c], 1
lea ecx, [esp + 0x40]
call fcn.00408010
lea ecx, [esp + 0x10]
mov byte [esp + 0x65c], 0
call fcn.0040f850
lea ecx, [esp + 0x58]
call fcn.0041bd50
xor edi, edi
jmp 0x425aaa
push ecx
lea edx, [ebp + 0xa70]
mov ecx, esp
mov dword [esp + 0x50], esp
push edx
call fcn.00407110
push ecx
mov dword [esp + 0x664], 0x18
mov ecx, esp
mov dword [esp + 0x58], esp
push 0x47a15c
call fcn.00407200
push ecx
lea eax, [ebp + 0x1450]
mov ecx, esp
mov dword [esp + 0x60], esp
push eax
mov byte [esp + 0x66c], 0x19
call fcn.00407110
push ecx
lea edx, [ebp + 0xa74]
mov ecx, esp
mov dword [esp + 0x54], esp
push edx
mov byte [esp + 0x670], 0x1a
call fcn.00407110
mov ecx, 0x47b738
mov dword [esp + 0x66c], 0xffffffff
call fcn.00447360
mov dword [ebp + 0x1454], 1
mov eax, dword [ebp + 4]
push edi
push 0x64
push 3
push eax
call dword [sym.imp.USER32.dll_SetTimer]
mov eax, dword [ebp + 0x1460]
mov ecx, dword [esp + 0x654]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x650
ret