Function at 0x4184a0
Capabilities:
Get graphical window text
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x43dece
push eax
mov eax, 0x103c
mov dword fs:[0], esp
call fcn.00430620
mov edx, dword [ebp + 0x10]
push ebx
push esi
push edi
mov eax, dword [edx]
mov dword [esp + 0x90], eax
mov ecx, dword [edx + 4]
mov dword [esp + 0x94], ecx
mov ebx, dword [edx + 8]
mov dword [esp + 0x98], ebx
sub ebx, eax
mov esi, dword [edx + 0xc]
mov dword [esp + 0x20], ebx
mov dword [esp + 0x9c], esi
sub esi, ecx
cmp ebx, 1
mov dword [esp + 0xc4], esi
jl 0x41a318
cmp esi, 1
jl 0x41a318
mov edi, dword [sym.imp.SpVZImage.dll_public:_void___thiscall_CSpVZImage::constructor_void_]
lea ecx, [esp + 0x1b0]
call edi
lea ecx, [esp + 0x71c]
mov dword [esp + 0x1050], 0
call edi
push 0x452670
lea ecx, [esp + 0xac]
mov byte [esp + 0x1054], 1
call sub.MFC42.DLL_CString::CString_1
mov eax, dword [ebp + 8]
push 0
push eax
mov byte [esp + 0x1058], 2
mov dword [esp + 0xc4], 0
call dword [sym.imp.MSVCRT.dll__access]
add esp, 8
cmp eax, 0xffffffff
je 0x41a2d9
mov ecx, dword [ebp + 8]
mov edi, dword [sym.imp.SpVZImage.dll_public_virtual:_int___thiscall_CSpVZImage::Open_char_const___unsigned_int__int__class_CSpVZImage__]
push 0
push 0xffffffffffffffff
push 0
push ecx
lea ecx, [esp + 0x1c0]
call edi
test eax, eax
je 0x41a2d9
mov edx, dword [ebp + 0xc]
push 0
push 0xffffffffffffffff
push 0x1000
push edx
lea ecx, [esp + 0x72c]
call edi
test eax, eax
je 0x41a2d9
mov eax, dword [esp + 0x1b8]
mov ecx, dword [esp + 0x1b4]
mov dword [esp + 0x10c], eax
mov eax, dword [esp + 0x1bc]
cmp eax, 3
mov dword [esp + 0xc8], ecx
jle 0x4185ec
mov edi, 3
mov dword [esp + 0x68], edi
jmp 0x4185f2
mov dword [esp + 0x68], eax
mov edi, eax
mov ecx, dword [esp + 0xb38]
mov dword [esp + 0x724], ebx
test ecx, ecx
je 0x41860b
push ebx
call dword [sym.imp.SpVZImage.dll_public:_void___thiscall_CSpVZImage::SetCols_int_]
mov edx, dword [esp + 0x71c]
lea ecx, [esp + 0x71c]
call dword [edx + 0x28]
mov ecx, dword [esp + 0xb38]
mov dword [esp + 0x720], esi
test ecx, ecx
je 0x418635
push esi
call dword [sym.imp.SpVZImage.dll_public:_void___thiscall_CSpVZImage::SetRows_int_]
mov eax, dword [esp + 0x71c]
lea ecx, [esp + 0x71c]
call dword [eax + 0x28]
mov ecx, dword [esp + 0xb38]
mov dword [esp + 0x728], edi
test ecx, ecx
je 0x41865f
push edi
call dword [sym.imp.SpVZImage.dll_public:_void___thiscall_CSpVZImage::SetPixelBytes_int_]
mov edx, dword [esp + 0x71c]
lea ecx, [esp + 0x71c]
call dword [edx + 0x28]
mov eax, dword [esp + 0x68]
mov dword [esp + 0x24], 0
imul eax, ebx
mov dword [esp + 0x38], eax
add eax, 8
push eax
mov dword [esp + 0xa8], eax
call sub.MFC42.DLL_operatornew
mov edi, dword [ebp + 0x1c]
add esp, 4
test edi, edi
mov dword [esp + 0xb8], eax
je 0x4186b3
push esi
push 0xb
push 0xc16
push edi
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [ebp + 0x14]
test eax, eax
je 0x419542
fild dword [esp + 0x90]
mov eax, esi
mov dword [esp + 0xd4], 0
cdq
fstp qword [esp + 0xcc]
fild dword [esp + 0x94]
and edx, 0xff
mov dword [esp + 0xd8], 0x3ff00000
add eax, edx
mov dword [esp + 0xdc], 0
fstp qword [esp + 0xe4]
sar eax, 8
and esi, 0x800000ff
mov dword [esp + 0xe0], 0
mov dword [esp + 0xec], 0
mov dword [esp + 0xf0], 0
mov dword [esp + 0xf4], 0
mov dword [esp + 0xf8], 0x3ff00000
mov dword [esp + 0x3c], eax
jns 0x418754
dec esi
or esi, 0xffffff00
inc esi
mov eax, dword [esp + 0x38]
mov dword [esp + 0x34], esi
shl eax, 8
add eax, 8
push eax
call sub.MFC42.DLL_operatornew
add esp, 4
mov dword [esp + 0x24], eax
test eax, eax
je 0x41a2d9
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x84], 0
test eax, eax
jle 0x418e70
mov ecx, dword [esp + 0x94]
mov dword [esp + 0x5c], eax
mov dword [esp + 0x1c], ecx
mov ecx, dword [esp + 0x5cc]
mov esi, dword [esp + 0x24]
test ecx, ecx
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], 0x100
mov dword [esp + 0x50], esi
je 0x418df1
mov eax, dword [esp + 0x5c4]
test eax, eax
jne 0x418df1
mov bl, byte [esp + 0x6ce]
xor eax, eax
cmp bl, 0xb4
sete al
test eax, eax
jne 0x41880e
mov eax, dword [esp + 0x20]
mov edx, dword [ecx]
push eax
mov eax, dword [esp + 0x94]
push 0x100
push eax
mov eax, dword [esp + 0x28]
push eax
mov eax, dword [esp + 0x78]
push eax
mov eax, esi
push eax
call dword [edx + 0x1c]
test eax, eax
jne 0x418df1
mov edi, dword [esp + 0x68]
mov ebx, edi
shr edi, 0x10
and ebx, 0xffff
test di, di
je 0x418a3c
cmp di, 0x2710
je 0x418a3c
mov ecx, dword [esp + 0x1bc]
imul ecx, dword [esp + 0x1b8]
push ecx
call sub.MFC42.DLL_operatornew
add esp, 4
and edi, 0xffff
mov dword [esp + 0x64], edi
mov edx, dword [esp + 0x1b8]
fild dword [esp + 0x64]
mov ecx, dword [esp + 0x1bc]
mov esi, dword [esp + 0x24]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x1b4]
fmul dword [0x442698]
mov dword [esp + 0x6c], edx
mov dword [esp + 0xa4], eax
mov dword [esp + 0x30], ecx
mov dword [esp + 0x4c], esi
fstp dword [esp + 0x54]
fild dword [esp + 0x90]
mov dword [esp + 0x18], 0
fadd dword [0x442554]
fstp dword [esp + 0xa0]
fild dword [esp + 0x1c]
fadd dword [0x442554]
fstp dword [esp + 0x64]
fild dword [esp + 0x18]
fadd dword [esp + 0x64]
fdiv dword [esp + 0x54]
fcom qword [0x442548]
fnstsw ax
test ah, 1
jne 0x4188dc
fadd qword [0x442540]
jmp 0x4188e4
fstp st(0)
fld qword [0x442538]
call sub.MSVCRT.dll__ftol
test eax, eax
jl 0x4189f3
cmp eax, dword [esp + 0xa4]
jge 0x4189f3
mov edx, dword [esp + 0x48]
push eax
mov eax, dword [esp + 0x1b4]
push edx
lea ecx, [esp + 0x1b8]
call dword [eax + 0x20]
mov eax, dword [esp + 0x20]
mov dword [esp + 0xc], 0
test eax, eax
jle 0x418a0e
fild dword [esp + 0xc]
fadd dword [esp + 0xa0]
fdiv dword [esp + 0x54]
fcom qword [0x442548]
fnstsw ax
test ah, 1
jne 0x41894d
fadd qword [0x442540]
jmp 0x418955
fstp st(0)
fld qword [0x442538]
call sub.MSVCRT.dll__ftol
test eax, eax
jl 0x4189d4
cmp eax, dword [esp + 0x6c]
jge 0x4189d4
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x48]
imul eax, ecx
add eax, edx
cmp ecx, 1
mov edi, eax
jne 0x418993
cmp ebx, ecx
jne 0x418982
mov cl, byte [edi]
mov byte [esi], cl
jmp 0x4189da
cmp ebx, 3
jne 0x4189da
mov al, byte [edi]
mov byte [esi + 2], al
mov byte [esi + 1], al
mov byte [esi], al
jmp 0x4189da
cmp ecx, 3
jne 0x4189da
cmp ebx, 1
jne 0x4189c1
xor ecx, ecx
xor edx, edx
mov cl, byte [edi + 2]
mov dl, byte [edi + 1]
xor eax, eax
add ecx, edx
mov al, byte [edi]
add ecx, eax
mov eax, 0x55555556
imul ecx
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
mov byte [esi], dl
jmp 0x4189da
cmp ebx, 3
jne 0x4189da
mov dl, byte [edi]
mov byte [esi], dl
mov ax, word [edi + 1]
mov word [esi + 1], ax
jmp 0x4189da
mov dword [esi], 0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x20]
inc eax
add esi, ebx
cmp eax, ecx
mov dword [esp + 0xc], eax
jl 0x418929
jmp 0x418a0e
mov ecx, ebx
mov edi, dword [esp + 0x4c]
imul ecx, dword [esp + 0x20]
mov edx, ecx
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov eax, ebx
mov esi, dword [esp + 0x4c]
imul eax, dword [esp + 0x20]
add esi, eax
mov eax, dword [esp + 0x18]
inc eax
mov dword [esp + 0x4c], esi
cmp eax, 0x100
mov dword [esp + 0x18], eax
jl 0x4188bb
mov ecx, dword [esp + 0x48]
jmp 0x418de5
mov edx, dword [esp + 0x1c]
mov ecx, ebx
mov dword [esp + 0x30], edx
mov edx, dword [esp + 0x20]
imul ecx, edx
mov eax, dword [esp + 0x90]
mov edi, dword [esp + 0x24]
mov dword [esp + 0x54], eax
add eax, edx
shl ecx, 8
mov edx, ecx
mov dword [esp + 0x2c], eax
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1b4]
cmp eax, ecx
jg 0x418dee
mov ecx, dword [esp + 0x1b8]
mov edx, dword [esp + 0x90]
cmp edx, ecx
jg 0x418dee
lea edi, [eax + 0x100]
test edi, edi
jl 0x418dee
mov eax, dword [esp + 0x2c]
test eax, eax
jl 0x418dee
mov eax, dword [esp + 0x1bc]
imul eax, ecx
add eax, 8
push eax
call sub.MFC42.DLL_operatornew
mov edx, dword [esp + 0x1bc]
mov ecx, dword [esp + 0x1b8]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x20]
add esp, 4
test eax, eax
jl 0x418b0d
mov eax, dword [esp + 0x90]
test eax, eax
jl 0x418b36
cmp edi, ecx
jg 0x418b32
mov edx, dword [esp + 0x2c]
cmp edx, dword [esp + 0x1b8]
jle 0x418b72
mov edx, dword [esp + 0x1b8]
jmp 0x418b32
imul eax, ebx
imul eax, dword [esp + 0x20]
mov esi, dword [esp + 0x24]
mov dword [esp + 0x14], edi
sub esi, eax
mov eax, dword [esp + 0x90]
mov dword [esp + 0x50], esi
mov dword [esp + 0x30], 0
test eax, eax
jge 0x418b58
mov edx, ebx
mov dword [esp + 0x54], 0
imul edx, eax
mov eax, dword [esp + 0x2c]
sub esi, edx
mov edx, dword [esp + 0x1b8]
mov dword [esp + 0x50], esi
mov dword [esp + 0x10], eax
cmp edi, ecx
jle 0x418b64
sub ecx, dword [esp + 0x30]
mov dword [esp + 0x14], ecx
cmp dword [esp + 0x2c], edx
jle 0x418b72
sub edx, dword [esp + 0x54]
mov dword [esp + 0x10], edx
mov eax, dword [esp + 0x1bc]
cmp ebx, eax
je 0x418d19
cmp ebx, 1
jle 0x418b91
cmp ebx, eax
jl 0x418d19
cmp ebx, 1
jne 0x418c3a
cmp eax, 3
jl 0x418c3a
mov eax, dword [esp + 0x14]
mov dword [esp + 0xc], 0
test eax, eax
jle 0x418de1
mov ebx, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x30]
mov edi, dword [esp + 0x28]
mov eax, dword [esp + 0x1b0]
add ecx, edx
push ecx
push edi
lea ecx, [esp + 0x1b8]
call dword [eax + 0x20]
mov ecx, dword [esp + 0x1bc]
imul ecx, dword [esp + 0x54]
add ecx, edi
xor edi, edi
test ebx, ebx
jle 0x418c1e
xor edx, edx
xor eax, eax
mov dl, byte [ecx + 2]
mov al, byte [ecx + 1]
add edx, eax
xor eax, eax
mov al, byte [ecx]
add edx, eax
mov eax, 0x55555556
imul edx
mov eax, edx
shr eax, 0x1f
add edx, eax
mov byte [edi + esi], dl
mov edx, dword [esp + 0x1bc]
inc edi
add ecx, edx
cmp edi, ebx
jl 0x418bed
mov edi, dword [esp + 0x20]
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x14]
add esi, edi
inc eax
cmp eax, ecx
mov dword [esp + 0xc], eax
jl 0x418bb8
jmp 0x418de1
cmp ebx, eax
jle 0x418de1
mov ecx, dword [esp + 0x14]
xor eax, eax
test ecx, ecx
mov dword [esp + 0x18], eax
jle 0x418de1
mov ecx, dword [esp + 0x30]
mov edi, dword [esp + 0x28]
mov edx, dword [esp + 0x1b0]
add eax, ecx
push eax
push edi
lea ecx, [esp + 0x1b8]
call dword [edx + 0x20]
mov ecx, dword [esp + 0x1bc]
mov eax, ecx
imul eax, dword [esp + 0x54]
add eax, edi
mov edi, esi
cmp ebx, 3
mov dword [esp + 0xc], edi
jne 0x418cb4
mov ecx, dword [esp + 0x10]
test ecx, ecx
jle 0x418cee
lea edi, [esi + 1]
mov edx, ecx
mov cl, byte [eax]
mov byte [edi + 1], cl
mov byte [edi], cl
mov byte [edi - 1], cl
mov esi, dword [esp + 0x1bc]
add edi, 3
add eax, esi
dec edx
jne 0x418c99
jmp 0x418cee
mov edx, dword [esp + 0x10]
test edx, edx
jle 0x418cee
mov dword [esp + 0x4c], edx
mov edx, ecx
mov esi, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov edx, dword [esp + 0x4c]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [esp + 0xc]
mov ecx, dword [esp + 0x1bc]
add edi, ebx
add eax, ecx
dec edx
mov dword [esp + 0xc], edi
mov dword [esp + 0x4c], edx
jne 0x418cc0
mov eax, ebx
mov esi, dword [esp + 0x50]
imul eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x14]
add esi, eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x50], esi
inc eax
cmp eax, ecx
mov dword [esp + 0x18], eax
jl 0x418c54
jmp 0x418de1
mov ecx, dword [esp + 0x14]
xor eax, eax
test ecx, ecx
mov dword [esp + 0x18], eax
jle 0x418de1
mov ecx, dword [esp + 0x30]
mov edi, dword [esp + 0x28]
mov edx, dword [esp + 0x1b0]
add eax, ecx
push eax
push edi
lea ecx, [esp + 0x1b8]
call dword [edx + 0x20]
mov ecx, dword [esp + 0x1bc]
mov eax, ecx
imul eax, dword [esp + 0x54]
add eax, edi
mov edi, esi
cmp ebx, ecx
mov dword [esp + 0xc], edi
jne 0x418d7f
mov ecx, ebx
mov edi, dword [esp + 0x50]
imul ecx, dword [esp + 0x10]
mov esi, eax
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x418dbb
mov ecx, dword [esp + 0x10]
test ecx, ecx
jle 0x418dbb
mov dword [esp + 0x4c], ecx
mov ecx, ebx
mov esi, eax
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [esp + 0xc]
mov edx, dword [esp + 0x1bc]
mov ecx, dword [esp + 0x4c]
add edi, ebx
add eax, edx
dec ecx
mov dword [esp + 0xc], edi
mov dword [esp + 0x4c], ecx
jne 0x418d8b
mov eax, ebx
mov esi, dword [esp + 0x50]
imul eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x14]
add esi, eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x50], esi
inc eax
cmp eax, ecx
mov dword [esp + 0x18], eax
jl 0x418d2b
mov ecx, dword [esp + 0x28]
push ecx
call sub.MFC42.DLL_operatordelete
add esp, 4
mov edi, dword [ebp + 0x1c]
mov ebx, dword [esp + 0x24]
xor esi, esi
mov ecx, dword [esp + 0xb38]
test ecx, ecx
je 0x418e12
mov eax, dword [esp + 0x84]
mov edx, dword [ecx]
add eax, esi
push eax
push ebx
call dword [edx + 0x24]
test edi, edi
je 0x418e2c
lea ecx, [esp + 0xbc]
push ecx
push 0xc
push 0xc16
push edi
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [esp + 0x38]
inc esi
add ebx, ecx
cmp esi, 0x100
jl 0x418df7
mov edx, dword [esp + 0x84]
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x5c]
mov ebx, dword [esp + 0x20]
add edx, 0x100
add ecx, 0x100
dec eax
mov dword [esp + 0x84], edx
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x5c], eax
jne 0x41879d
mov eax, dword [esp + 0x34]
test eax, eax
jle 0x41a21c
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0x34]
mov dword [esp + 0x1c], ebx
shl eax, 8
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0x24]
lea esi, [eax + ecx]
mov ecx, dword [esp + 0x5cc]
test ecx, ecx
mov dword [esp + 0x84], eax
mov dword [esp + 0xa4], esi
mov dword [esp + 0x10], edx
je 0x4194e7
mov eax, dword [esp + 0x5c4]
test eax, eax
jne 0x4194e7
mov bl, byte [esp + 0x6ce]
xor eax, eax
cmp bl, 0xb4
sete al
test eax, eax
jne 0x418f0a
mov edx, dword [esp + 0x20]
mov eax, dword [ecx]
push edx
mov edx, dword [esp + 0x38]
push edx
mov edx, dword [esp + 0x98]
push edx
mov edx, dword [esp + 0x74]
push esi
push edx
mov edx, dword [esp + 0x38]
push edx
call dword [eax + 0x1c]
test eax, eax
jne 0x4194e4
mov edi, dword [esp + 0x68]
mov ebx, edi
shr edi, 0x10
and ebx, 0xffff
test di, di
je 0x419142
cmp di, 0x2710
je 0x419142
mov eax, dword [esp + 0x1bc]
imul eax, dword [esp + 0x1b8]
push eax
call sub.MFC42.DLL_operatornew
and edi, 0xffff
mov ecx, dword [esp + 0x1bc]
mov dword [esp + 0x68], edi
mov edx, dword [esp + 0x1b8]
fild dword [esp + 0x68]
mov esi, dword [esp + 0x28]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x1c0]
add esp, 4
fmul dword [0x442698]
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x34]
test eax, eax
fstp dword [esp + 0x3c]
fild dword [esp + 0x90]
mov dword [esp + 0x5c], ecx
mov dword [esp + 0xa0], edx
mov dword [esp + 0x4c], esi
mov dword [esp + 0x18], 0
fadd dword [0x442554]
fstp dword [esp + 0x6c]
fild dword [esp + 0xa4]
fadd dword [0x442554]
fstp dword [esp + 0x64]
jle 0x419139
fild dword [esp + 0x18]
fadd dword [esp + 0x64]
fdiv dword [esp + 0x3c]
fcom qword [0x442548]
fnstsw ax
test ah, 1
jne 0x418fe4
fadd qword [0x442540]
jmp 0x418fec
fstp st(0)
fld qword [0x442538]
call sub.MSVCRT.dll__ftol
test eax, eax
jl 0x4190f8
cmp eax, dword [esp + 0xa0]
jge 0x4190f8
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x1b0]
push eax
push ecx
lea ecx, [esp + 0x1b8]
call dword [edx + 0x20]
mov eax, dword [esp + 0x20]
mov dword [esp + 0xc], 0
test eax, eax
jle 0x419113
fild dword [esp + 0xc]
fadd dword [esp + 0x6c]
fdiv dword [esp + 0x3c]
fcom qword [0x442548]
fnstsw ax
test ah, 1
jne 0x419052
fadd qword [0x442540]
jmp 0x41905a
fstp st(0)
fld qword [0x442538]
call sub.MSVCRT.dll__ftol
test eax, eax
jl 0x4190d9
cmp eax, dword [esp + 0x5c]
jge 0x4190d9
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x48]
imul eax, ecx
add eax, edx
cmp ecx, 1
mov edi, eax
jne 0x419098
cmp ebx, ecx
jne 0x419087
mov al, byte [edi]
mov byte [esi], al
jmp 0x4190df
cmp ebx, 3
jne 0x4190df
mov al, byte [edi]
mov byte [esi + 2], al
mov byte [esi + 1], al
mov byte [esi], al
jmp 0x4190df
cmp ecx, 3
jne 0x4190df
cmp ebx, 1
jne 0x4190c6
xor ecx, ecx
xor edx, edx
mov cl, byte [edi + 2]
mov dl, byte [edi + 1]
xor eax, eax
add ecx, edx
mov al, byte [edi]
add ecx, eax
mov eax, 0x55555556
imul ecx
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
mov byte [esi], dl
jmp 0x4190df
cmp ebx, 3
jne 0x4190df
mov dl, byte [edi]
mov byte [esi], dl
mov ax, word [edi + 1]
mov word [esi + 1], ax
jmp 0x4190df
mov dword [esi], 0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x20]
inc eax
add esi, ebx
cmp eax, ecx
mov dword [esp + 0xc], eax
jl 0x419031
jmp 0x419113
mov ecx, ebx
mov edi, dword [esp + 0x4c]
imul ecx, dword [esp + 0x20]
mov edx, ecx
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov eax, ebx
mov esi, dword [esp + 0x4c]
imul eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x34]
add esi, eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x4c], esi
inc eax
cmp eax, ecx
mov dword [esp + 0x18], eax
jl 0x418fc3
mov ecx, dword [esp + 0x48]
jmp 0x4194db
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x90]
mov dword [esp + 0x30], ecx
mov edi, dword [esp + 0x24]
lea edx, [esi + eax]
mov dword [esp + 0x54], esi
mov dword [esp + 0x28], edx
mov edx, dword [esp + 0x20]
add ecx, edx
mov dword [esp + 0x2c], ecx
mov ecx, ebx
imul ecx, eax
imul ecx, edx
mov edx, ecx
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
cmp esi, dword [esp + 0x1b4]
jg 0x4194e4
mov eax, dword [esp + 0x1b8]
mov ecx, dword [esp + 0x90]
cmp ecx, eax
jg 0x4194e4
mov ecx, dword [esp + 0x28]
test ecx, ecx
jl 0x4194e4
mov ecx, dword [esp + 0x2c]
test ecx, ecx
jl 0x4194e4
mov ecx, dword [esp + 0x1bc]
imul ecx, eax
add ecx, 8
push ecx
call sub.MFC42.DLL_operatornew
mov edx, dword [esp + 0x1bc]
mov ecx, dword [esp + 0x1b8]
xor edi, edi
add esp, 4
cmp esi, edi
mov dword [esp + 0x50], eax
jl 0x419204
mov eax, dword [esp + 0x90]
cmp eax, edi
jl 0x419231
cmp dword [esp + 0x28], ecx
jg 0x41922d
cmp dword [esp + 0x2c], edx
jle 0x419268
jmp 0x41922d
mov eax, ebx
mov dword [esp + 0x54], edi
imul eax, esi
imul eax, dword [esp + 0x20]
mov esi, eax
mov eax, dword [esp + 0x24]
sub eax, esi
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x90]
cmp eax, edi
jge 0x41924c
mov esi, ebx
mov dword [esp + 0x30], edi
imul esi, eax
mov eax, dword [esp + 0x10]
sub eax, esi
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x1c], eax
cmp dword [esp + 0x28], ecx
jle 0x41925a
sub ecx, dword [esp + 0x54]
mov dword [esp + 0x14], ecx
cmp dword [esp + 0x2c], edx
jle 0x419268
sub edx, dword [esp + 0x30]
mov dword [esp + 0x1c], edx
mov eax, dword [esp + 0x1bc]
cmp ebx, eax
je 0x419411
cmp ebx, 1
jle 0x419287
cmp ebx, eax
jl 0x419411
cmp ebx, 1
jne 0x419330
cmp eax, 3
jl 0x419330
mov eax, dword [esp + 0x14]
mov dword [esp + 0xc], edi
cmp eax, edi
jle 0x4194d7
mov edi, dword [esp + 0x1c]
mov ebx, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x54]
mov esi, dword [esp + 0x50]
mov eax, dword [esp + 0x1b0]
add ecx, edx
push ecx
push esi
lea ecx, [esp + 0x1b8]
call dword [eax + 0x20]
mov ecx, dword [esp + 0x1bc]
imul ecx, dword [esp + 0x30]
add ecx, esi
xor esi, esi
test edi, edi
jle 0x419314
xor edx, edx
xor eax, eax
mov dl, byte [ecx + 2]
mov al, byte [ecx + 1]
add edx, eax
xor eax, eax
mov al, byte [ecx]
add edx, eax
mov eax, 0x55555556
imul edx
mov eax, edx
shr eax, 0x1f
add edx, eax
mov byte [esi + ebx], dl
mov edx, dword [esp + 0x1bc]
inc esi
add ecx, edx
cmp esi, edi
jl 0x4192e3
mov esi, dword [esp + 0x20]
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x14]
add ebx, esi
inc eax
cmp eax, ecx
mov dword [esp + 0xc], eax
jl 0x4192ae
jmp 0x4194d7
cmp ebx, eax
jle 0x4194d7
mov eax, dword [esp + 0x14]
mov dword [esp + 0xc], 0
test eax, eax
jle 0x4194d7
mov edi, dword [esp + 0x10]
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x54]
mov esi, dword [esp + 0x50]
mov edx, dword [esp + 0x1b0]
add eax, ecx
push eax
push esi
lea ecx, [esp + 0x1b8]
call dword [edx + 0x20]
mov ecx, dword [esp + 0x1bc]
mov edx, dword [esp + 0x1c]
mov eax, ecx
mov dword [esp + 0x3c], edi
imul eax, dword [esp + 0x30]
add eax, esi
cmp ebx, 3
jne 0x4193b0
test edx, edx
jle 0x4193e6
lea esi, [edi + 1]
mov cl, byte [eax]
mov byte [esi + 1], cl
mov byte [esi], cl
mov byte [esi - 1], cl
mov edi, dword [esp + 0x1bc]
add esi, 3
add eax, edi
dec edx
jne 0x419395
jmp 0x4193e6
test edx, edx
jle 0x4193e6
mov dword [esp + 0x5c], edx
mov edx, ecx
mov esi, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov edx, dword [esp + 0x5c]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [esp + 0x3c]
mov ecx, dword [esp + 0x1bc]
add edi, ebx
add eax, ecx
dec edx
mov dword [esp + 0x3c], edi
mov dword [esp + 0x5c], edx
jne 0x4193b8
mov eax, ebx
mov edi, dword [esp + 0x10]
imul eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x14]
add edi, eax
mov eax, dword [esp + 0xc]
mov dword [esp + 0x10], edi
inc eax
cmp eax, ecx
mov dword [esp + 0xc], eax
jl 0x419354
jmp 0x4194d7
mov eax, dword [esp + 0x14]
mov dword [esp + 0xc], edi
cmp eax, edi
jle 0x4194d7
mov eax, edi
mov ecx, dword [esp + 0x54]
mov esi, dword [esp + 0x50]
mov edx, dword [esp + 0x1b0]
add eax, ecx
push eax
push esi
lea ecx, [esp + 0x1b8]
call dword [edx + 0x20]
mov ecx, dword [esp + 0x1bc]
mov edi, dword [esp + 0x10]
mov eax, ecx
mov dword [esp + 0x3c], edi
imul eax, dword [esp + 0x30]
add eax, esi
cmp ebx, ecx
jne 0x419475
mov ecx, ebx
mov esi, eax
imul ecx, dword [esp + 0x1c]
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x4194b1
mov ecx, dword [esp + 0x1c]
test ecx, ecx
jle 0x4194b1
mov dword [esp + 0x5c], ecx
mov ecx, ebx
mov esi, eax
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [esp + 0x3c]
mov edx, dword [esp + 0x1bc]
mov ecx, dword [esp + 0x5c]
add edi, ebx
add eax, edx
dec ecx
mov dword [esp + 0x3c], edi
mov dword [esp + 0x5c], ecx
jne 0x419481
mov eax, ebx
mov esi, dword [esp + 0x10]
imul eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x14]
add esi, eax
mov eax, dword [esp + 0xc]
mov dword [esp + 0x10], esi
inc eax
cmp eax, ecx
mov dword [esp + 0xc], eax
jl 0x419423
mov ecx, dword [esp + 0x50]
push ecx
call sub.MFC42.DLL_operatordelete
add esp, 4
mov edi, dword [ebp + 0x1c]
mov eax, dword [esp + 0x34]
mov ebx, dword [esp + 0x24]
xor esi, esi
test eax, eax
jle 0x41a21c
mov ecx, dword [esp + 0xb38]
test ecx, ecx
je 0x419514
mov eax, dword [esp + 0x84]
mov edx, dword [ecx]
add eax, esi
push eax
push ebx
call dword [edx + 0x24]
test edi, edi
je 0x41952e
lea ecx, [esp + 0xbc]
push ecx
push 0xc
push 0xc16
push edi
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [esp + 0x38]
mov eax, dword [esp + 0x34]
inc esi
add ebx, ecx
cmp esi, eax
jl 0x4194f9
jmp 0x41a21c
mov eax, dword [ebp + 0x18]
test eax, eax
je 0x41a21c
mov ecx, 6
mov esi, eax
lea edi, [esp + 0xcc]
rep movsd dword es:[edi], dword [esi]
lea esi, [eax + 0x18]
mov eax, dword [esp + 0x90]
mov ecx, 6
lea edi, [esp + 0xe4]
mov dword [esp + 0x130], eax
mov dword [esp + 0x124], eax
mov eax, dword [esp + 0x98]
rep movsd dword es:[edi], dword [esi]
mov esi, dword [esp + 0x94]
mov dword [esp + 0x12c], eax
mov dword [esp + 0x128], eax
xor eax, eax
mov dword [esp + 0x4c], esi
mov ecx, 0x100
mov dword [esp + 0x50], eax
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x9c]
add ecx, esi
cmp ecx, eax
jle 0x4195c3
sub eax, esi
jmp 0x4195c8
mov eax, 0x100
lea ebx, [eax + esi]
mov dword [esp + 0x64], eax
mov dword [esp + 0xa0], ebx
mov dword [esp + 0x120], esi
lea eax, [ebx - 1]
mov dword [esp + 0x11c], esi
mov dword [esp + 0x118], eax
mov dword [esp + 0x114], eax
mov dword [esp + 0x7c], 0xffffffff
mov dword [esp + 0x80], 0x7fefffff
mov dword [esp + 0xac], 0xffffffff
mov dword [esp + 0xb0], 0x7fefffff
mov dword [esp + 0xfc], 0xffffffff
mov dword [esp + 0x100], 0xffefffff
mov dword [esp + 0x74], 0xffffffff
mov dword [esp + 0x78], 0xffefffff
xor ecx, ecx
fild dword [esp + ecx + 0x114]
fild dword [esp + ecx + 0x124]
fld st(0)
fmul qword [esp + 0xd4]
fld st(2)
fmul qword [esp + 0xdc]
faddp st(1)
fadd qword [esp + 0xcc]
fstp qword [esp + 0x6c]
fmul qword [esp + 0xec]
fxch st(1)
fmul qword [esp + 0xf4]
faddp st(1)
fadd qword [esp + 0xe4]
fld qword [esp + 0xac]
fcomp qword [esp + 0x6c]
fnstsw ax
test ah, 1
jne 0x4196b4
mov edx, dword [esp + 0x6c]
mov eax, dword [esp + 0x70]
mov dword [esp + 0xac], edx
mov dword [esp + 0xb0], eax
fld qword [esp + 0x74]
fcomp qword [esp + 0x6c]
fnstsw ax
test ah, 0x41
je 0x4196d3
mov edx, dword [esp + 0x6c]
mov eax, dword [esp + 0x70]
mov dword [esp + 0x74], edx
mov dword [esp + 0x78], eax
fld qword [esp + 0x7c]
fcomp st(1)
fnstsw ax
test ah, 1
jne 0x4196e4
fst qword [esp + 0x7c]
fld qword [esp + 0xfc]
fcomp st(1)
fnstsw ax
test ah, 0x41
je 0x4196fd
fstp qword [esp + 0xfc]
jmp 0x4196ff
fstp st(0)
add ecx, 4
cmp ecx, 0x10
jl 0x419646
mov ecx, dword [esp + 0x10c]
dec ecx
mov dword [esp + 0x6c], ecx
fild dword [esp + 0x6c]
fstp qword [esp + 0x3c]
fld qword [esp + 0xac]
fcomp qword [esp + 0x3c]
fnstsw ax
test ah, 0x41
je 0x41a129
fld qword [esp + 0x74]
fcomp qword [0x442618]
fnstsw ax
test ah, 1
jne 0x41a129
mov edx, dword [esp + 0xc8]
dec edx
mov dword [esp + 0x6c], edx
fild dword [esp + 0x6c]
fstp qword [esp + 0x6c]
fld qword [esp + 0x7c]
fcomp qword [esp + 0x6c]
fnstsw ax
test ah, 0x41
je 0x41a129
fld qword [esp + 0xfc]
fcomp qword [0x442618]
fnstsw ax
test ah, 1
jne 0x41a129
fld qword [esp + 0xac]
fsub qword [0x4425f8]
fstp qword [esp + 0x5c]
mov esi, dword [esp + 0x60]
mov edi, dword [esp + 0x5c]
push esi
push edi
call dword [sym.imp.MSVCRT.dll_floor]
fcomp qword [0x442618]
add esp, 8
fnstsw ax
test ah, 0x41
jne 0x4197ce
push esi
push edi
call dword [sym.imp.MSVCRT.dll_floor]
fstp qword [esp + 0xb4]
add esp, 8
jmp 0x4197e4
mov dword [esp + 0xac], 0
mov dword [esp + 0xb0], 0
fld qword [esp + 0x74]
fadd qword [0x4425f8]
fstp qword [esp + 0x5c]
mov esi, dword [esp + 0x60]
mov edi, dword [esp + 0x5c]
push esi
push edi
call dword [sym.imp.MSVCRT.dll_ceil]
fcomp qword [esp + 0x44]
add esp, 8
fnstsw ax
test ah, 1
je 0x419821
push esi
push edi
call dword [sym.imp.MSVCRT.dll_ceil]
fstp qword [esp + 0x7c]
add esp, 8
jmp 0x419831
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], ecx
fld qword [esp + 0x7c]
fsub qword [0x4425f8]
fstp qword [esp + 0x3c]
mov esi, dword [esp + 0x40]
mov edi, dword [esp + 0x3c]
push esi
push edi
call dword [sym.imp.MSVCRT.dll_floor]
fcomp qword [0x442618]
add esp, 8
fnstsw ax
test ah, 0x41
jne 0x419873
push esi
push edi
call dword [sym.imp.MSVCRT.dll_floor]
fstp qword [esp + 0x84]
add esp, 8
jmp 0x419886
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
fld qword [esp + 0xfc]
fadd qword [0x4425f8]
fstp qword [esp + 0x3c]
mov esi, dword [esp + 0x40]
mov edi, dword [esp + 0x3c]
push esi
push edi
call dword [sym.imp.MSVCRT.dll_ceil]
fcomp qword [esp + 0x74]
add esp, 8
fnstsw ax
test ah, 1
je 0x4198c2
push esi
push edi
call dword [sym.imp.MSVCRT.dll_ceil]
add esp, 8
jmp 0x4198c6
fld qword [esp + 0x6c]
fld qword [esp + 0xac]
call sub.MSVCRT.dll__ftol
fld qword [esp + 0x74]
fsub qword [esp + 0xac]
mov dword [esp + 0x1c], eax
fadd qword [0x4425f8]
call sub.MSVCRT.dll__ftol
fld qword [esp + 0x7c]
mov ebx, eax
mov dword [esp + 0x10], ebx
call sub.MSVCRT.dll__ftol
fsub qword [esp + 0x7c]
mov esi, eax
mov dword [esp + 0x6c], esi
fadd qword [0x4425f8]
call sub.MSVCRT.dll__ftol
mov edi, eax
mov edx, dword [esp + 0x24]
imul edi, ebx
imul edi, dword [esp + 0x68]
add edi, 0x40
mov dword [esp + 0x30], eax
test edx, edx
jne 0x419934
push edi
call sub.MFC42.DLL_operatornew
add esp, 4
jmp 0x419949
cmp edi, dword [esp + 0x50]
jle 0x419953
push edx
call sub.MFC42.DLL_operatordelete
push edi
call sub.MFC42.DLL_operatornew
add esp, 8
mov edx, eax
mov dword [esp + 0x50], edi
mov dword [esp + 0x24], edx
test edx, edx
je 0x41a2d9
mov ecx, dword [esp + 0x50]
xor eax, eax
mov ebx, ecx
mov edi, edx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, ebx
mov dword [esp + 0x2c], edx
and ecx, 3
rep stosb byte es:[edi], al
mov ecx, dword [esp + 0x5cc]
mov edi, dword [esp + 0x10]
mov eax, dword [esp + 0x30]
mov dword [esp + 0x34], edi
test ecx, ecx
mov dword [esp + 0x14], eax
je 0x419fb7
mov ebx, dword [esp + 0x5c4]
test ebx, ebx
jne 0x419fb7
xor ebx, ebx
cmp byte [esp + 0x6ce], 0xb4
sete bl
test ebx, ebx
jne 0x4199cf
mov ebx, dword [ecx]
push edi
push eax
mov eax, dword [esp + 0x24]
push eax
mov eax, dword [esp + 0x74]
push esi
push eax
push edx
call dword [ebx + 0x1c]
test eax, eax
jne 0x419fb7
mov edi, dword [esp + 0x68]
mov ebx, edi
shr edi, 0x10
and ebx, 0xffff
test di, di
je 0x419c07
cmp di, 0x2710
je 0x419c07
mov ecx, dword [esp + 0x1bc]
imul ecx, dword [esp + 0x1b8]
push ecx
call sub.MFC42.DLL_operatornew
and edi, 0xffff
mov edx, dword [esp + 0x1bc]
mov dword [esp + 0x40], edi
mov ecx, dword [esp + 0x1c0]
fild dword [esp + 0x40]
mov esi, dword [esp + 0x28]
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0x1b8]
add esp, 4
fmul dword [0x442698]
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x30]
test eax, eax
fstp dword [esp + 0x3c]
fild dword [esp + 0x1c]
mov dword [esp + 0x34], edx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], esi
mov dword [esp + 0x48], 0
fadd dword [0x442554]
fstp dword [esp + 0x28]
fild dword [esp + 0x6c]
fadd dword [0x442554]
fstp dword [esp + 0x5c]
jle 0x419bfb
fild dword [esp + 0x48]
fadd dword [esp + 0x5c]
fdiv dword [esp + 0x3c]
fcom qword [0x442548]
fnstsw ax
test ah, 1
jne 0x419aa3
fadd qword [0x442540]
jmp 0x419aab
fstp st(0)
fld qword [0x442538]
call sub.MSVCRT.dll__ftol
test eax, eax
jl 0x419bba
cmp eax, dword [esp + 0x54]
jge 0x419bba
mov edx, dword [esp + 0x84]
push eax
mov eax, dword [esp + 0x1b4]
push edx
lea ecx, [esp + 0x1b8]
call dword [eax + 0x20]
mov eax, dword [esp + 0x10]
mov dword [esp + 0x38], 0
test eax, eax
jle 0x419bd5
fild dword [esp + 0x38]
fadd dword [esp + 0x28]
fdiv dword [esp + 0x3c]
fcom qword [0x442548]
fnstsw ax
test ah, 1
jne 0x419b11
fadd qword [0x442540]
jmp 0x419b19
fstp st(0)
fld qword [0x442538]
call sub.MSVCRT.dll__ftol
test eax, eax
jl 0x419b9b
cmp eax, dword [esp + 0x34]
jge 0x419b9b
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x84]
imul eax, ecx
add eax, edx
cmp ecx, 1
mov edi, eax
jne 0x419b5a
cmp ebx, ecx
jne 0x419b49
mov cl, byte [edi]
mov byte [esi], cl
jmp 0x419ba1
cmp ebx, 3
jne 0x419ba1
mov al, byte [edi]
mov byte [esi + 2], al
mov byte [esi + 1], al
mov byte [esi], al
jmp 0x419ba1
cmp ecx, 3
jne 0x419ba1
cmp ebx, 1
jne 0x419b88
xor ecx, ecx
xor edx, edx
mov cl, byte [edi + 2]
mov dl, byte [edi + 1]
xor eax, eax
add ecx, edx
mov al, byte [edi]
add ecx, eax
mov eax, 0x55555556
imul ecx
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
mov byte [esi], dl
jmp 0x419ba1
cmp ebx, 3
jne 0x419ba1
mov dl, byte [edi]
mov byte [esi], dl
mov ax, word [edi + 1]
mov word [esi + 1], ax
jmp 0x419ba1
mov dword [esi], 0
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x10]
inc eax
add esi, ebx
cmp eax, ecx
mov dword [esp + 0x38], eax
jl 0x419af0
jmp 0x419bd5
mov ecx, ebx
mov edi, dword [esp + 0x18]
imul ecx, dword [esp + 0x10]
mov edx, ecx
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov eax, ebx
mov esi, dword [esp + 0x18]
imul eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x30]
add esi, eax
mov eax, dword [esp + 0x48]
mov dword [esp + 0x18], esi
inc eax
cmp eax, ecx
mov dword [esp + 0x48], eax
jl 0x419a82
mov ecx, dword [esp + 0x84]
jmp 0x419fae
mov edx, dword [esp + 0x30]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x54], ecx
mov edi, dword [esp + 0x24]
lea eax, [edx + esi]
mov dword [esp + 0x84], esi
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x10]
add ecx, eax
mov dword [esp + 0x18], ecx
mov ecx, ebx
imul ecx, edx
imul ecx, eax
mov edx, ecx
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
cmp esi, dword [esp + 0x1b4]
jg 0x419fb7
mov eax, dword [esp + 0x1b8]
mov ecx, dword [esp + 0x1c]
cmp ecx, eax
jg 0x419fb7
mov ecx, dword [esp + 0x48]
test ecx, ecx
jl 0x419fb7
mov ecx, dword [esp + 0x18]
test ecx, ecx
jl 0x419fb7
mov ecx, dword [esp + 0x1bc]
imul ecx, eax
add ecx, 8
push ecx
call sub.MFC42.DLL_operatornew
mov edx, dword [esp + 0x1bc]
mov ecx, dword [esp + 0x1b8]
add esp, 4
mov dword [esp + 0x28], eax
test esi, esi
jl 0x419cc7
mov eax, dword [esp + 0x1c]
test eax, eax
jl 0x419cf0
cmp dword [esp + 0x48], ecx
jg 0x419cf0
mov eax, dword [esp + 0x18]
mov edi, dword [esp + 0x2c]
cmp eax, edx
jle 0x419d36
jmp 0x419cf4
mov eax, ebx
mov edi, dword [esp + 0x24]
imul eax, esi
imul eax, dword [esp + 0x10]
sub edi, eax
mov eax, dword [esp + 0x48]
mov dword [esp + 0x2c], edi
mov dword [esp + 0x14], eax
mov dword [esp + 0x84], 0
jmp 0x419cf4
mov edi, dword [esp + 0x2c]
mov eax, dword [esp + 0x1c]
test eax, eax
jge 0x419d17
mov esi, ebx
mov dword [esp + 0x54], 0
imul esi, eax
mov eax, dword [esp + 0x18]
sub edi, esi
mov dword [esp + 0x2c], edi
mov dword [esp + 0x34], eax
cmp dword [esp + 0x48], ecx
jle 0x419d28
sub ecx, dword [esp + 0x84]
mov dword [esp + 0x14], ecx
cmp dword [esp + 0x18], edx
jle 0x419d36
sub edx, dword [esp + 0x54]
mov dword [esp + 0x34], edx
mov eax, dword [esp + 0x1bc]
cmp ebx, eax
je 0x419ee1
cmp ebx, 1
jle 0x419d55
cmp ebx, eax
jl 0x419ee1
cmp ebx, 1
jne 0x419e01
cmp eax, 3
jl 0x419e01
mov eax, dword [esp + 0x14]
mov dword [esp + 0x38], 0
test eax, eax
jle 0x419faa
mov ebx, dword [esp + 0x34]
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x84]
mov esi, dword [esp + 0x28]
mov eax, dword [esp + 0x1b0]
add ecx, edx
push ecx
push esi
lea ecx, [esp + 0x1b8]
call dword [eax + 0x20]
mov ecx, dword [esp + 0x1bc]
imul ecx, dword [esp + 0x54]
add ecx, esi
xor esi, esi
test ebx, ebx
jle 0x419de5
xor edx, edx
xor eax, eax
mov dl, byte [ecx + 2]
mov al, byte [ecx + 1]
add edx, eax
xor eax, eax
mov al, byte [ecx]
add edx, eax
mov eax, 0x55555556
imul edx
mov eax, edx
shr eax, 0x1f
add edx, eax
mov byte [esi + edi], dl
mov edx, dword [esp + 0x1bc]
inc esi
add ecx, edx
cmp esi, ebx
jl 0x419db4
mov esi, dword [esp + 0x10]
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x14]
add edi, esi
inc eax
cmp eax, ecx
mov dword [esp + 0x38], eax
jl 0x419d7c
jmp 0x419faa
cmp ebx, eax
jle 0x419faa
mov ecx, dword [esp + 0x14]
xor eax, eax
test ecx, ecx
mov dword [esp + 0x38], eax
jle 0x419faa
mov ecx, dword [esp + 0x84]
mov esi, dword [esp + 0x28]
mov edx, dword [esp + 0x1b0]
add eax, ecx
push eax
push esi
lea ecx, [esp + 0x1b8]
call dword [edx + 0x20]
mov ecx, dword [esp + 0x1bc]
mov dword [esp + 0x3c], edi
mov eax, ecx
imul eax, dword [esp + 0x54]
add eax, esi
cmp ebx, 3
jne 0x419e7c
mov ecx, dword [esp + 0x34]
test ecx, ecx
jle 0x419eb6
lea esi, [edi + 1]
mov edx, ecx
mov cl, byte [eax]
mov byte [esi + 1], cl
mov byte [esi], cl
mov byte [esi - 1], cl
mov edi, dword [esp + 0x1bc]
add esi, 3
add eax, edi
dec edx
jne 0x419e61
jmp 0x419eb6
mov edx, dword [esp + 0x34]
test edx, edx
jle 0x419eb6
mov dword [esp + 0x5c], edx
mov edx, ecx
mov esi, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov edx, dword [esp + 0x5c]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [esp + 0x3c]
mov ecx, dword [esp + 0x1bc]
add edi, ebx
add eax, ecx
dec edx
mov dword [esp + 0x3c], edi
mov dword [esp + 0x5c], edx
jne 0x419e88
mov eax, ebx
mov edi, dword [esp + 0x2c]
imul eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
add edi, eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x2c], edi
inc eax
cmp eax, ecx
mov dword [esp + 0x38], eax
jl 0x419e1b
jmp 0x419faa
mov ecx, dword [esp + 0x14]
xor eax, eax
test ecx, ecx
mov dword [esp + 0x38], eax
jle 0x419faa
mov ecx, dword [esp + 0x84]
mov esi, dword [esp + 0x28]
mov edx, dword [esp + 0x1b0]
add eax, ecx
push eax
push esi
lea ecx, [esp + 0x1b8]
call dword [edx + 0x20]
mov ecx, dword [esp + 0x1bc]
mov dword [esp + 0x3c], edi
mov eax, ecx
imul eax, dword [esp + 0x54]
add eax, esi
cmp ebx, ecx
jne 0x419f48
mov ecx, ebx
mov edi, dword [esp + 0x2c]
imul ecx, dword [esp + 0x34]
mov esi, eax
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x419f84
mov ecx, dword [esp + 0x34]
test ecx, ecx
jle 0x419f84
mov dword [esp + 0x5c], ecx
mov ecx, ebx
mov esi, eax
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [esp + 0x3c]
mov edx, dword [esp + 0x1bc]
mov ecx, dword [esp + 0x5c]
add edi, ebx
add eax, edx
dec ecx
mov dword [esp + 0x3c], edi
mov dword [esp + 0x5c], ecx
jne 0x419f54
mov eax, ebx
mov edi, dword [esp + 0x2c]
imul eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
add edi, eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x2c], edi
inc eax
cmp eax, ecx
mov dword [esp + 0x38], eax
jl 0x419ef3
mov ecx, dword [esp + 0x28]
push ecx
call sub.MFC42.DLL_operatordelete
add esp, 4
mov esi, dword [esp + 0x4c]
mov eax, dword [esp + 0xa0]
cmp esi, eax
mov dword [esp + 0x18], esi
jge 0x41a19e
mov ecx, dword [esp + 0xa4]
mov edx, dword [esp + 0xb8]
mov esi, ecx
xor eax, eax
mov edi, edx
mov ebx, dword [esp + 0x90]
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, esi
mov dword [esp + 0x3c], ebx
and ecx, 3
rep stosb byte es:[edi], al
mov eax, dword [esp + 0x98]
mov edi, edx
cmp ebx, eax
jge 0x41a0c5
fild dword [esp + 0x18]
mov esi, dword [esp + 0x68]
fld st(0)
fmul qword [esp + 0xdc]
fstp qword [esp + 0x84]
fild dword [esp + 0x1c]
fstp dword [esp + 0x5c]
fmul qword [esp + 0xf4]
fstp qword [esp + 0x54]
fild dword [esp + 0x6c]
fstp dword [esp + 0x38]
fild dword [esp + 0x3c]
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x10]
push 0xffffffffffffffff
fld st(0)
fmul qword [esp + 0xd8]
push edx
push esi
push eax
push ecx
fadd qword [esp + 0x98]
fadd qword [esp + 0xe0]
fsub dword [esp + 0x70]
fstp dword [esp + 0x5c]
mov eax, dword [esp + 0x5c]
fmul qword [esp + 0x100]
fadd qword [esp + 0x68]
fadd qword [esp + 0xf8]
fsub dword [esp + 0x4c]
fstp dword [esp + 0x50]
mov edx, dword [esp + 0x50]
push edx
push eax
call fcn.0041a6e0
mov cl, byte [eax]
add esp, 0x1c
cmp esi, 3
mov byte [edi], cl
jne 0x41a0af
mov dx, word [eax + 1]
mov word [edi + 1], dx
mov eax, dword [esp + 0x98]
inc ebx
add edi, esi
cmp ebx, eax
mov dword [esp + 0x3c], ebx
jl 0x41a03d
mov ecx, dword [esp + 0xb38]
test ecx, ecx
je 0x41a0ee
mov edx, dword [esp + 0xc]
mov esi, dword [esp + 0x4c]
mov ebx, dword [esp + 0x18]
mov eax, dword [ecx]
sub edx, esi
add edx, ebx
push edx
mov edx, dword [esp + 0xbc]
push edx
call dword [eax + 0x24]
mov eax, dword [ebp + 0x1c]
test eax, eax
je 0x41a10b
lea ecx, [esp + 0xbc]
push ecx
push 0xc
push 0xc16
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0xa0]
inc eax
cmp eax, ecx
mov dword [esp + 0x18], eax
jl 0x419fce
mov esi, dword [esp + 0x4c]
jmp 0x41a19e
mov ecx, dword [esp + 0xa4]
mov edi, dword [esp + 0xb8]
mov edx, ecx
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
cmp esi, ebx
rep stosb byte es:[edi], al
mov edi, esi
jge 0x41a19e
mov ecx, dword [esp + 0xb38]
test ecx, ecx
je 0x41a175
mov edx, dword [esp + 0xc]
mov eax, dword [ecx]
sub edx, esi
add edx, edi
push edx
mov edx, dword [esp + 0xbc]
push edx
call dword [eax + 0x24]
mov ecx, dword [esp + 0xb38]
mov eax, dword [ebp + 0x1c]
test eax, eax
je 0x41a199
lea ecx, [esp + 0xbc]
push ecx
push 0xc
push 0xc16
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [esp + 0xb38]
inc edi
cmp edi, ebx
jl 0x41a154
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x9c]
add esi, 0x100
add ecx, 0x100
cmp esi, eax
mov dword [esp + 0x4c], esi
mov dword [esp + 0xc], ecx
jge 0x41a1ca
mov ecx, dword [esp + 0x64]
jmp 0x4195b2
fild dword [esp + 0x94]
fild dword [esp + 0x90]
fld st(1)
fmul qword [esp + 0xdc]
fld st(1)
fmul qword [esp + 0xd4]
faddp st(1)
fadd qword [esp + 0xcc]
fstp qword [esp + 0xcc]
fxch st(1)
fmul qword [esp + 0xf4]
fxch st(1)
fmul qword [esp + 0xec]
faddp st(1)
fadd qword [esp + 0xe4]
fstp qword [esp + 0xe4]
mov edx, dword [esp + 0x24]
push edx
call sub.MFC42.DLL_operatordelete
mov eax, dword [esp + 0xbc]
push eax
call sub.MFC42.DLL_operatordelete
mov esi, dword [sym.imp.SpVZImage.dll_public_virtual:_void___thiscall_CSpVZImage::Close_void_]
add esp, 8
lea ecx, [esp + 0x1b0]
call esi
lea ecx, [esp + 0x71c]
call esi
mov ecx, dword [ebp + 8]
lea edx, [esp + 0xc48]
push ecx
push str._s.spt
push edx
call dword [sym.imp.MSVCRT.dll_sprintf]
lea eax, [esp + 0xc54]
push 0x44ccec
push eax
call dword [sym.imp.MSVCRT.dll_fopen]
mov esi, eax
add esp, 0x14
test esi, esi
je 0x41a2d9
lea ecx, [esp + 0xe48]
lea edx, [esp + 0x8c]
push ecx
lea eax, [esp + 0x90]
mov edi, dword [sym.imp.MSVCRT.dll_fscanf]
push edx
lea ecx, [esp + 0xe50]
push eax
lea edx, [esp + 0x1b0]
push ecx
lea eax, [esp + 0x120]
push edx
lea ecx, [esp + 0x11c]
push eax
push ecx
push str._d_d_lf_s_d_d_s
push esi
call edi
add esp, 0x24
cmp eax, 7
je 0x41a32f
push esi
call dword [sym.imp.MSVCRT.dll_fclose]
add esp, 4
lea ecx, [esp + 0xa8]
mov byte [esp + 0x1050], 1
call fcn.0042fd2e
mov esi, dword [sym.imp.SpVZImage.dll_public_virtual:_void___thiscall_CSpVZImage::destructor_void_]
lea ecx, [esp + 0x71c]
mov byte [esp + 0x1050], 0
call esi
lea ecx, [esp + 0x1b0]
mov dword [esp + 0x1050], 0xffffffff
call esi
xor eax, eax
mov ecx, dword [esp + 0x1048]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea edx, [esp + 0x8c]
push edx
push 0x44c0c4
push esi
call edi
mov ebx, eax
mov eax, dword [esp + 0x98]
dec ebx
neg ebx
sbb ebx, ebx
not ebx
and ebx, eax
lea eax, [esp + 0x98]
push eax
push 0x44c0c4
push esi
call edi
add esp, 0x18
cmp eax, 1
jne 0x41a376
fild dword [esp + 0x8c]
fstp qword [esp + 0x74]
jmp 0x41a386
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0x40590000
lea ecx, [esp + 0x8c]
push ecx
push 0x44c0c4
push esi
call edi
add esp, 0xc
cmp eax, 1
jne 0x41a3ab
fild dword [esp + 0x8c]
fstp qword [esp + 0x7c]
jmp 0x41a3be
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0x40590000
push esi
call dword [sym.imp.MSVCRT.dll_fclose]
fld qword [esp + 0x78]
fmul qword [0x442690]
add esp, 4
fst qword [esp + 0x74]
fcomp qword [0x442618]
fnstsw ax
test ah, 0x40
je 0x41a3f3
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0x3ff00000
fld qword [esp + 0x7c]
fmul qword [0x442690]
fst qword [esp + 0x7c]
fcomp qword [0x442618]
fnstsw ax
test ah, 0x40
je 0x41a421
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0x3ff00000
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0xc4]
dec edx
dec eax
mov dword [esp + 0xc8], edx
mov edi, dword [esp + 0x78]
fild dword [esp + 0xc8]
mov dword [esp + 0xc4], eax
mov dword [esp + 0x16c], 0
mov dword [esp + 0x170], 0
mov dword [esp + 0x154], 0
fst qword [esp + 0x164]
fstp qword [esp + 0x15c]
fild dword [esp + 0xc4]
mov dword [esp + 0x158], 0
mov dword [esp + 0x13c], 0
mov dword [esp + 0x140], 0
mov dword [esp + 0x134], 0
fst qword [esp + 0x14c]
fstp qword [esp + 0x144]
mov dword [esp + 0x138], 0
xor esi, esi
fld qword [esp + 0xdc]
fmul qword [esp + esi + 0x134]
fld qword [esp + 0xd4]
fmul qword [esp + esi + 0x154]
mov edx, dword [esp + 0x80]
lea eax, [esp + esi + 0x6dc]
push edx
mov edx, dword [esp + 0x80]
faddp st(1)
push edx
mov edx, dword [esp + 0x7c]
push edi
push edx
fadd qword [esp + 0xdc]
mov edx, dword [esp + 0x118]
push ebx
push edx
mov edx, dword [esp + 0x128]
lea ecx, [esp + esi + 0x714]
push edx
fstp qword [eax]
fld qword [esp + 0x110]
fmul qword [esp + esi + 0x150]
fld qword [esp + 0x108]
fmul qword [esp + esi + 0x170]
push ecx
push eax
faddp st(1)
fadd qword [esp + 0x108]
fstp qword [ecx]
call fcn.0041ad00
add esi, 8
add esp, 0x24
cmp esi, 0x20
jl 0x41a4c4
lea eax, [esp + 0x6fc]
push 4
lea ecx, [esp + 0x6e0]
push eax
lea edx, [esp + 0x13c]
push ecx
lea eax, [esp + 0x160]
push edx
lea ecx, [esp + 0x184]
push eax
push ecx
call fcn.0041a910
mov edx, dword [ebp + 0xc]
add esp, 0x18
lea ecx, [esp + 0xc0]
push edx
call sub.MFC42.DLL_CString::CString_1
push str..ref
lea ecx, [esp + 0xc4]
mov byte [esp + 0x1054], 3
call sub.MFC42.DLL_CString::operator
mov eax, dword [esp + 0xc0]
push 0x44cc1c
push eax
call dword [sym.imp.MSVCRT.dll_fopen]
mov esi, eax
add esp, 8
test esi, esi
je 0x41a65b
mov ecx, dword [esp + 0x188]
mov edx, dword [esp + 0x184]
mov eax, dword [esp + 0x180]
mov edi, dword [sym.imp.MSVCRT.dll_fprintf]
push ecx
mov ecx, dword [esp + 0x180]
push edx
mov edx, dword [esp + 0x180]
push eax
mov eax, dword [esp + 0x180]
push ecx
push edx
push eax
push str._15.6lf_t_15.6lf_t_15.6lf_n
push esi
call edi
mov ecx, dword [esp + 0x1c0]
mov edx, dword [esp + 0x1bc]
mov eax, dword [esp + 0x1b8]
push ecx
mov ecx, dword [esp + 0x1b8]
push edx
mov edx, dword [esp + 0x1b8]
push eax
mov eax, dword [esp + 0x1b8]
push ecx
push edx
push eax
push str._15.6lf_t_15.6lf_t_15.6lf_n
push esi
call edi
add esp, 0x40
push esi
call dword [sym.imp.MSVCRT.dll_fclose]
add esp, 4
mov eax, dword [ebp + 0x1c]
test eax, eax
je 0x41a672
push 0
push 0xd
push 0xc16
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
lea ecx, [esp + 0xc0]
mov byte [esp + 0x1050], 2
call fcn.0042fd2e
lea ecx, [esp + 0xa8]
mov byte [esp + 0x1050], 1
call fcn.0042fd2e
mov esi, dword [sym.imp.SpVZImage.dll_public_virtual:_void___thiscall_CSpVZImage::destructor_void_]
lea ecx, [esp + 0x71c]
mov byte [esp + 0x1050], 0
call esi
lea ecx, [esp + 0x1b0]
mov dword [esp + 0x1050], 0xffffffff
call esi
mov ecx, dword [esp + 0x1048]
pop edi
pop esi
mov eax, 1
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret