Function at 0x40ebd0
Capabilities:
Check for time delay via gettickcount
Encrypt data using speck

Disassembly:
sub esp, 0x110
push ebx
push ebp
push esi
mov esi, dword [esp + 0x134]
mov dword [esp + 0x28], edx
mov dword [esp + 0x10], ecx
push edi
mov di, word [esp + 0x130]
movzx ebp, di
cmp esi, 0xffc3d44f
je 0x40ec11
cmp esi, 0xffc3d44e
je 0x40ec11
mov byte [esp + 0x1b], 0
cmp esi, 0xffc3d44d
jne 0x40ec16
mov byte [esp + 0x1b], 1
mov ecx, dword [0x4e7cd8]
mov ebx, dword [esp + 0x12c]
test ecx, ecx
jne 0x40ec34
lea edx, [esp + 0x4c]
mov dword [esp + 0x24], edx
jmp 0x40ecfb
mov eax, dword [0x4e7cf4]
imul esi, eax, 0xd4
inc eax
mov dword [0x4e7cf4], eax
add esi, ecx
mov dword [esp + 0x24], esi
cmp eax, dword [0x4e37fc]
jl 0x40ec5d
mov dword [0x4e7cf4], 0
mov eax, dword [esp + 0x134]
mov byte [esi], bl
mov byte [esi + 6], al
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov ecx, eax
mov dword [0x4e7cf0], eax
sub ecx, dword [0x4e97e8]
mov dword [0x4e97e8], eax
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
shr ecx, 0x1f
addsd xmm0, qword [ecx*8 + 0x4dbac0]
cvtpd2ps xmm0, xmm0
divss xmm0, dword [0x4db9cc]
movss dword [esi + 8], xmm0
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov edx, dword [esp + 0x24]
mov esi, eax
lea ecx, [edx + 0xc]
test esi, esi
je 0x40ece1
cmp esi, dword [0x4e7cec]
je 0x40ecda
push esi
push ecx
push 0x418
push dword [0x4e7ccc]
call dword [sym.imp.USER32.dll_PostMessageW]
mov edx, dword [esp + 0x24]
jmp 0x40ecee
xor eax, eax
mov word [ecx], ax
jmp 0x40ecee
mov dword [ecx], 0x2f004e
mov dword [ecx + 4], 0x41
mov dword [0x4e7cec], esi
mov esi, dword [esp + 0x138]
cmp bl, 0xe7
jne 0x40ed50
mov ecx, dword [esp + 0x128]
push 0x7fff
push edx
push esi
push dword [esp + 0x140]
mov ax, word [ecx + 4]
push 0
mov word [edx + 2], ax
mov eax, 0x55
push 0xe7
push ecx
push dword [esp + 0x140]
mov ecx, dword [esp + 0x34]
mov word [edx + 4], ax
mov edx, dword [esp + 0x4c]
call fcn.00410760
add esp, 0x20
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x110
ret
mov esi, dword [0x4e9818]
mov al, bl
add al, 0x64
mov word [edx + 2], di
mov cl, 3
mov edi, 0x20
cmp cl, al
sbb eax, eax
and eax, ebp
movzx eax, ax
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x14]
cmp eax, dword [0x4e7ef0]
jne 0x40eda9
mov cl, byte [esp + 0x13c]
and cl, 1
mov dword [esp + 0x3c], ecx
jne 0x40ee2c
mov al, byte [esp + 0x134]
movzx ecx, bl
xor al, 1
shl al, 7
mov byte [ecx + 0x4e7f00], al
jmp 0x40ee28
mov edx, dword [esp + 0x13c]
mov ecx, edx
movzx ebp, bl
shr ecx, 4
and ecx, 0xffffff01
mov dword [esp + 0x3c], ecx
lea eax, [ebp*4]
add eax, ebp
cmp byte [esi + eax*4 + 8], 0
jne 0x40ee2c
test dl, 0x10
jne 0x40ee2c
cmp bl, 0xa0
je 0x40ede1
cmp bl, 0xa1
jne 0x40ee00
cmp byte [esp + 0x134], 0
jne 0x40ee00
cmp bl, 0xa0
mov eax, edi
mov edx, 0x10
cmove eax, edx
test byte [0x4e7efe], al
jne 0x40ee2c
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov esi, dword [0x4e9818]
mov dword [0x4e97f0], eax
mov dword [0x4e97ec], eax
mov al, byte [esp + 0x134]
xor al, 1
shl al, 7
mov byte [ebp + 0x4e7f00], al
mov ecx, dword [esp + 0x3c]
mov dl, byte [esp + 0x1b]
test dl, dl
je 0x40ee3b
mov eax, 0x69
jmp 0x40ee48
mov eax, 0x61
test cl, cl
cmovne edi, eax
movzx eax, di
cmp byte [0x4e7eef], 0
mov ebp, dword [esp + 0x24]
mov word [ebp + 4], ax
je 0x40ee8a
cmp bl, 0x5b
je 0x40ee63
cmp bl, 0x5c
jne 0x40ee8a
mov eax, dword [esp + 0x134]
test al, al
jne 0x40ee91
mov ecx, dword [esp + 0x138]
push 0
push SysReAllocString
push 0x7fff
push ebp
push ecx
push 0
jmp 0x4105ac
mov eax, dword [esp + 0x134]
cmp byte [0x4e967e], 0
mov edi, dword [sym.imp.USER32.dll_FindWindowW]
je 0x40ef3b
cmp bl, 0x1b
jne 0x40ef3b
test al, al
jne 0x40ef3b
push 0
push 0x4d24f4
call edi
test eax, eax
je 0x40ef31
push 0
push eax
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov esi, eax
call dword [sym.imp.KERNEL32.DLL_GetCurrentThreadId]
cmp esi, eax
jne 0x40ef31
push 0xffc3d44d
push 0
push 0
push 0
mov dl, bl
xor ecx, ecx
call fcn.00419a70
mov dl, byte [0x4e8005]
mov ecx, 1
push 0xffc3d44d
shr dl, 3
push 0
and dl, 1
push 0
push 0
or dl, 0xa4
call fcn.00419a70
mov ecx, dword [esp + 0x158]
add esp, 0x20
push 0
push SysReAllocString
push 0x7fff
push ebp
push ecx
push 0
push ecx
push 0x1b
jmp 0x4105ae
mov esi, dword [0x4e9818]
mov dl, byte [esp + 0x1b]
mov eax, dword [esp + 0x1c]
movzx eax, ax
mov dword [esp + 0x30], eax
lea ecx, [eax + eax*4]
mov eax, dword [0x4e981c]
lea ebp, [eax + ecx*4]
mov eax, dword [esp + 0x14]
mov cl, byte [ebp + 0x13]
mov byte [esp + 0x23], cl
cmp eax, dword [0x4e7ef4]
jne 0x40ef68
test cl, cl
jne 0x40ef75
movzx eax, bl
lea eax, [eax + eax*4]
lea ebp, [esi + eax*4]
mov eax, dword [esp + 0x14]
test dl, dl
je 0x40efe7
mov ecx, dword [esp + 0x138]
mov eax, dword [esp + 0x134]
cmp ecx, 0xffc3d44e
jne 0x40efad
test al, al
je 0x40efad
cmp dword [0x4e802c], ebp
jne 0x40efad
mov byte [ebp + 0xd], 0
mov byte [ebp + 0x10], 0
mov dword [0x4e802c], 0
mov edi, dword [esp + 0x24]
push 0x7fff
push edi
push ecx
push eax
mov ecx, dword [esp + 0x24]
push dword [esp + 0x2c]
mov edx, dword [esp + 0x40]
push ebx
push dword [esp + 0x140]
push dword [esp + 0x140]
call fcn.00410760
add esp, 0x20
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x110
ret
mov edx, dword [esp + 0x134]
test dl, dl
jne 0x40eff5
mov byte [ebp + 0x11], dl
cmp eax, dword [0x4e7ef0]
jne 0x40f087
test bl, bl
jne 0x40f045
mov edi, dword [esp + 0x24]
mov ecx, dword [esp + 0x138]
push 0x7fff
push edi
push ecx
push edx
push dword [esp + 0x2c]
mov edx, dword [esp + 0x40]
mov ecx, eax
push 0
push dword [esp + 0x140]
push dword [esp + 0x140]
call fcn.00410760
add esp, 0x20
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x110
ret
cmp bl, 1
je 0x40f04f
cmp bl, 2
jne 0x40f087
cmp dword [0x4e7ca4], 0
jne 0x40f0b8
push 0
push 0x4d2504
call edi
test eax, eax
je 0x40f076
push 0
push eax
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
cmp eax, dword [0x4e8f18]
je 0x40f0b1
mov esi, dword [0x4e9818]
mov edx, dword [esp + 0x134]
mov eax, dword [esp + 0x14]
mov ecx, dword [0x4e802c]
test ecx, ecx
je 0x40f0ec
cmp ecx, ebp
je 0x40f0ec
test dl, dl
jne 0x40f0ec
cmp byte [ecx + 0x12], 0xff
je 0x40f0ec
cmp eax, dword [0x4e7ef4]
jne 0x40f0db
xor eax, eax
cmp byte [ebp + 8], al
sete al
jmp 0x40f0e4
mov edx, dword [esp + 0x134]
mov byte [ebp + 0x10], 0
mov edi, dword [esp + 0x24]
mov al, dl
mov ecx, dword [esp + 0x138]
xor al, 1
push 0x7fff
push edi
push ecx
mov byte [ebp + 0xd], al
push edx
jmp 0x40efb9
mov eax, dword [0x4e802c]
movzx eax, byte [eax + 8]
test eax, eax
je 0x40f0ec
mov byte [ecx + 0x12], 1
cmp byte [ebp + 9], 0
jne 0x40f0f8
cmp byte [ebp + 0xa], 0
je 0x40f0bc
mov dword [esp + 0x3c], 0
mov edi, 0x7fff
mov dword [esp + 0x34], edi
mov dword [esp + 0x38], edi
mov byte [esp + 0x11], 0
test dl, dl
je 0x40f154
mov ch, byte [ebp + 0x10]
mov al, byte [ebp + 0xd]
mov byte [esp + 0x13], al
movzx eax, word [ebp + 4]
mov byte [esp + 0x2b], ch
mov ecx, edi
mov byte [ebp + 0x10], 0
cmp ax, cx
je 0x40f141
mov edi, eax
mov word [ebp + 4], cx
mov dword [esp + 0x34], edi
mov dword [esp + 0x38], edi
mov al, byte [ebp + 0xc]
test al, 8
je 0x40f164
and al, 0xf7
mov byte [esp + 0x11], 1
mov byte [ebp + 0xc], al
jmp 0x40f164
mov al, byte [esp + 0x13]
mov byte [esp + 0x13], al
mov al, byte [esp + 0x13]
mov byte [esp + 0x2b], al
mov al, dl
xor cl, cl
xor al, 1
mov byte [ebp + 0xd], al
mov eax, dword [esp + 0x14]
cmp eax, dword [0x4e7ef4]
jne 0x40f1e2
cmp byte [ebp + 8], cl
je 0x40f208
cmp byte [esi + 0xcb5], cl
jne 0x40f196
cmp byte [esi + 0xcc9], cl
jne 0x40f196
xor al, al
jmp 0x40f198
mov al, 1
cmp byte [esi + 0xcdd], 0
mov byte [esi + 0x161], al
jne 0x40f1b4
cmp byte [esi + 0xcf1], 0
jne 0x40f1b4
xor al, al
jmp 0x40f1b6
mov al, 1
cmp byte [esi + 0xc8d], 0
mov byte [esi + 0x175], al
jne 0x40f1d8
cmp byte [esi + 0xca1], 0
jne 0x40f1d8
xor al, al
mov byte [esi + 0x14d], al
jmp 0x40f208
mov al, 1
mov byte [esi + 0x14d], al
jmp 0x40f208
cmp dword [0x4e7ef4], 0
jne 0x40f208
mov cl, 1
call fcn.0041c1c0
mov esi, dword [0x4e9818]
mov ah, al
mov byte [0x4e8004], ah
mov cl, 1
mov byte [0x4e8005], ah
mov eax, dword [ebp]
test eax, eax
je 0x40f219
cmp dword [eax], 6
mov byte [esp + 0x1b], 1
je 0x40f21e
mov byte [esp + 0x1b], 0
test cl, cl
jne 0x40f22f
mov cl, 1
call fcn.0041c1c0
mov esi, dword [0x4e9818]
mov al, byte [ebp + 9]
mov ecx, dword [esp + 0x134]
test al, al
je 0x40f628
test cl, cl
jne 0x40f628
mov ecx, dword [0x4e802c]
test ecx, ecx
je 0x40f261
cmp byte [ebp + 0xa], 0
je 0x40f261
cmp ebp, ecx
jne 0x40f61b
mov dh, byte [ebp + 0xc]
shr dh, 4
not dh
and dh, 1
mov byte [esp + 0x1a], dh
cmp al, 1
jne 0x40f3e7
cmp byte [esp + 0x23], 0
je 0x40f285
mov ecx, dword [esp + 0x30]
jmp 0x40f28c
movzx ecx, bl
mov dword [esp + 0x30], ecx
xor edx, edx
movzx eax, cx
cmp byte [esp + 0x23], dl
movzx ecx, cl
cmovne edx, eax
xor eax, eax
cmp byte [esp + 0x23], al
push 0
cmovne ecx, eax
call fcn.0041c400
mov dh, al
xor dl, dl
xor edi, edi
mov byte [esp + 0x16], dh
xor eax, eax
mov byte [esp + 0x47], dl
add esp, 4
mov dword [esp + 0x44], edi
cmp ax, word [0x4e805c]
jae 0x40f3d0
nop
cmp byte [esp + 0x23], 0
mov ecx, dword [0x4e804c]
mov edi, dword [ecx + edi*4]
je 0x40f2e6
movzx eax, word [edi + 0xa]
jmp 0x40f2ea
movzx eax, byte [edi + 0x11]
cmp dword [esp + 0x30], eax
je 0x40f2f9
test byte [edi + 0xe], dh
je 0x40f3b2
cmp word [edi + 6], 0
je 0x40f335
cmp byte [edi + 0x19], 0
je 0x40f3b2
cmp byte [0x4e7e7d], 0
jne 0x40f3b2
test byte [edi + 0x13], 1
mov dh, byte [esp + 0x1a]
jne 0x40f3e1
test dh, dh
jne 0x40f3e1
mov dl, 1
mov byte [esp + 0x43], dl
jmp 0x40f3ae
mov eax, dword [edi + 0x20]
test eax, eax
je 0x40f3b2
nop dword [eax]
cmp byte [eax + 0x20], 0
jne 0x40f34f
mov eax, dword [eax + 0xc]
test eax, eax
jne 0x40f340
jmp 0x40f3b2
test dl, dl
je 0x40f359
test byte [edi + 0x13], 1
je 0x40f3b2
mov esi, dword [edi + 0x20]
nop dword [eax]
cmp byte [esi + 0x20], 0
je 0x40f3a7
cmp byte [0x4e7e7d], 0
je 0x40f375
cmp byte [esi + 0x21], 0
je 0x40f3a7
mov ecx, dword [esi + 8]
test ecx, ecx
je 0x40f388
mov edx, dword [edi + 0x1c]
call fcn.00413970
test eax, eax
je 0x40f3a3
test byte [esi + 0x1d], 1
mov dh, byte [esp + 0x1a]
jne 0x40f3e1
test dh, dh
jne 0x40f3e1
mov dl, 1
mov byte [esp + 0x43], dl
test byte [edi + 0x13], dl
je 0x40f3ae
jmp 0x40f3a7
mov dl, byte [esp + 0x43]
mov esi, dword [esi + 0xc]
test esi, esi
jne 0x40f360
mov dh, byte [esp + 0x12]
mov edi, dword [esp + 0x44]
movzx eax, word [0x4e805c]
inc edi
mov dword [esp + 0x44], edi
cmp edi, eax
jl 0x40f2d0
mov esi, dword [0x4e9818]
mov dh, dl
mov byte [esp + 0x1a], dh
test dl, dl
jne 0x40f3e7
mov byte [esp + 0x12], 1
jmp 0x40f3fe
mov esi, dword [0x4e9818]
mov byte [esp + 0x12], 0
cmp ebp, dword [0x4e802c]
je 0x40f3fe
mov dword [0x4e802c], ebp
mov byte [ebp + 0x12], 0
cmp byte [ebp + 0xa], 0
je 0x40f5a9
mov al, byte [ebp + 8]
mov dl, byte [0x4e8004]
test al, al
je 0x40f419
not al
and dl, al
mov eax, dword [esp + 0x14]
cmp eax, dword [0x4e7ef4]
jne 0x40f442
cmp byte [esp + 0x23], 0
je 0x40f442
mov eax, dword [esp + 0x1c]
movzx ecx, dl
movzx eax, ax
shl ecx, 9
add ecx, eax
mov eax, dword [0x4e9810]
jmp 0x40f452
movzx ecx, dl
movzx eax, bl
shl ecx, 8
add ecx, eax
mov eax, dword [0x4e980c]
movzx ecx, word [eax + ecx*2]
mov eax, ecx
movzx edi, cx
and eax, 0x7fff
mov dword [esp + 0x34], edi
add eax, 0xffff8006
mov dword [esp + 0x38], edi
cmp ax, 4
jbe 0x40f5bb
mov eax, 0x7fff
cmp cx, ax
je 0x40f5bb
test dh, dh
jne 0x40f4a6
mov byte [ebp + 0x12], 0xff
mov dl, byte [esp + 0x11]
test edi, 0x8000
je 0x40f58e
mov word [ebp + 4], di
jmp 0x40f5bb
test dl, dl
jne 0x40f48d
push 0
lea eax, [esp + 0x15]
push eax
push dword [esp + 0x140]
lea ecx, [esp + 0x44]
call fcn.00414280
mov dl, byte [esp + 0x1d]
add esp, 0xc
mov dword [esp + 0x3c], eax
test eax, eax
je 0x40f4e8
test dl, dl
je 0x40f4e8
mov edi, dword [esp + 0x38]
mov esi, dword [0x4e9818]
mov dh, byte [esp + 0x1a]
mov dword [esp + 0x34], edi
jmp 0x40f491
mov edi, dword [esp + 0x38]
mov dword [esp + 0x34], edi
cmp di, word [0x4e805c]
jae 0x40f572
mov ecx, dword [0x4e9814]
mov eax, 0x7fff
movzx esi, di
add esi, esi
add ecx, esi
cmp word [ecx], ax
je 0x40f572
push 0
lea eax, [esp + 0x15]
mov byte [esp + 0x15], 0
push eax
push dword [esp + 0x140]
call fcn.00414280
mov dl, byte [esp + 0x1d]
add esp, 0xc
test eax, eax
je 0x40f572
test dl, dl
je 0x40f572
cmp dword [esp + 0x3c], 0
mov dh, byte [esp + 0x1a]
je 0x40f552
mov esi, dword [0x4e9818]
mov byte [esp + 0x11], 0
jmp 0x40f48d
mov dword [esp + 0x3c], eax
mov eax, dword [0x4e9814]
movzx edi, word [esi + eax]
mov esi, dword [0x4e9818]
mov dword [esp + 0x34], edi
mov dword [esp + 0x38], edi
jmp 0x40f491
mov esi, dword [0x4e9818]
mov edi, 0x7fff
mov dh, byte [esp + 0x1a]
mov dword [esp + 0x34], edi
mov dword [esp + 0x38], edi
jmp 0x40f491
cmp di, word [0x4e805c]
jae 0x40f5b1
mov eax, dword [0x4e9814]
movzx ecx, di
mov ax, word [eax + ecx*2]
mov word [ebp + 4], ax
jmp 0x40f5b1
mov edi, dword [esp + 0x34]
mov dl, byte [esp + 0x11]
mov eax, 0x7fff
cmp di, ax
jne 0x40f61f
cmp byte [esp + 0x12], 0
mov ecx, dword [esp + 0x24]
je 0x40f5cf
mov eax, 0x23
mov word [ecx + 4], ax
test dh, dh
jne 0x40f5d7
or byte [ebp + 0xc], 8
cmp byte [ebp + 8], 0
jne 0x40f607
test dh, dh
je 0x40f607
cmp byte [esp + 0x1b], 0
jne 0x40f607
push 0
push SysReAllocString
push 0x7fff
push ecx
push dword [esp + 0x148]
mov byte [ebp + 0x11], 1
push 0
jmp 0x4105ac
push 0x7fff
push ecx
push dword [esp + 0x140]
push 0
jmp 0x40efb9
mov dl, byte [esp + 0x11]
mov ecx, dword [esp + 0x134]
jmp 0x40f62c
mov dl, byte [esp + 0x11]
cmp byte [ebp + 0xa], 0
mov byte [esp + 0x12], 0
je 0x40f695
test cl, cl
je 0x40f695
mov al, byte [esp + 0x2b]
cmp dword [0x4e802c], ebp
jne 0x40f655
test al, al
je 0x40f695
mov dword [0x4e802c], 0
cmp byte [ebp + 0xb], 0
jne 0x40f690
test al, al
je 0x40f679
test dl, dl
jne 0x40f679
mov edi, dword [esp + 0x24]
push 0
push SysReAllocString
push 0x7fff
push edi
jmp 0x4105a4
mov edi, dword [esp + 0x24]
push 0x7fff
push edi
push dword [esp + 0x140]
push ecx
jmp 0x40efb9
mov byte [esp + 0x12], 1
cmp byte [ebp + 9], 0
mov eax, 1
je 0x40f7db
test cl, cl
je 0x40f7db
cmp dword [0x4e802c], ebp
jne 0x40f6be
mov dword [0x4e802c], 0
cmp byte [ebp + 0xe], 0
je 0x40f6ea
push 0xffc3d44d
push 0
push 0
push 0
mov dl, 0x12
mov byte [ebp + 0xe], 0
mov ecx, eax
call fcn.00419a70
mov esi, dword [0x4e9818]
add esp, 0x10
mov eax, 1
cmp byte [ebp + 0xf], 0
je 0x40f711
push 0xffc3d44d
push 0
push 0
push 0
mov dl, 0x10
mov byte [ebp + 0xf], 0
mov ecx, eax
call fcn.00419a70
mov esi, dword [0x4e9818]
add esp, 0x10
mov cl, byte [esp + 0x1b]
mov al, byte [ebp + 0x12]
test cl, cl
je 0x40f798
cmp al, 2
jne 0x40f777
mov ebp, dword [esp + 0x1c]
mov dl, bl
push 0xffc3d44e
push 0
push 0
push ebp
mov ecx, 1
call fcn.00419a70
push 0xffc3d44d
push 0
push 0
push ebp
mov dl, bl
mov ecx, 2
call fcn.00419a70
add esp, 0x20
mov edi, dword [esp + 0x24]
push 0
push SysReAllocString
push 0x7fff
push edi
push dword [esp + 0x148]
push dword [esp + 0x148]
jmp 0x4105ac
cmp al, 1
jne 0x40f7b5
mov edi, dword [esp + 0x24]
push 0x7fff
push edi
push dword [esp + 0x140]
push dword [esp + 0x140]
jmp 0x40efb9
test al, al
jle 0x40f7b5
mov eax, 0x7fff
cmp di, ax
jne 0x40f7b5
cmp byte [ebp + 8], 0
jne 0x40f77b
cmp byte [esp + 0x11], 0
jne 0x40f77b
jmp 0x40f753
cmp byte [ebp + 0xa], 0
jne 0x40f7ce
cmp byte [ebp + 8], 0
jne 0x40f77b
cmp byte [esp + 0x11], 0
jne 0x40f77b
test cl, cl
jne 0x40f77b
jmp 0x40f753
cmp byte [esp + 0x13], 0
jne 0x40f7db
cmp byte [ebp + 0xb], 0
je 0x40f77b
cmp dword [0x4e802c], 0
mov edx, 0x7ffd
mov dword [esp + 0x30], 0
je 0x40fb90
mov ecx, dword [esp + 0x134]
test cl, cl
je 0x40f80a
cmp byte [ebp + 0xb], 0
je 0x40fb90
mov eax, 0x7fff
cmp di, ax
jne 0x40ff48
movzx edi, word [ebp + 6]
cmp di, ax
je 0x40f96f
mov eax, dword [0x4e804c]
movzx ecx, di
mov edx, dword [eax + ecx*4]
mov al, byte [edx + 0x11]
test al, al
jne 0x40f84f
cmp word [edx + 0xa], 0
je 0x40f8b9
movzx eax, word [edx + 0xa]
lea ecx, [eax + eax*4]
mov eax, dword [0x4e981c]
lea eax, [eax + ecx*4]
jmp 0x40f858
movzx eax, al
lea eax, [eax + eax*4]
lea eax, [esi + eax*4]
cmp byte [eax + 0xd], 0
movzx edi, word [edx + 0xc]
je 0x40f89d
cmp byte [edx + 0x16], 0
je 0x40f884
cmp byte [esp + 0x134], 0
jne 0x40f8b1
mov ax, word [edx + 4]
mov ecx, dword [esp + 0x30]
mov word [ebp + 4], ax
test ecx, ecx
jne 0x40f8c5
jmp 0x40f8a1
cmp byte [esp + 0x134], 0
mov ecx, dword [esp + 0x30]
jne 0x40f8a1
test ecx, ecx
cmove ecx, edx
mov dword [esp + 0x30], ecx
jmp 0x40f8a1
mov ecx, dword [esp + 0x30]
mov eax, 0x7fff
cmp di, ax
jne 0x40f825
jmp 0x40f8bd
mov ecx, edx
mov dword [esp + 0x30], ecx
jmp 0x40f8bd
mov ecx, dword [esp + 0x30]
test ecx, ecx
je 0x40f963
movzx ecx, byte [ecx + 0x11]
cmp ecx, 0x12
ja case.0x40f8d5.1
movzx eax, byte [ecx + 0x4105e0]
jmp dword [eax*4 + 0x4105cc]
cmp byte [esi + 0xca1], 0
mov eax, 0xc80
mov ecx, 0xc94
cmovne eax, ecx
add eax, esi
jmp 0x40f93f
cmp byte [esi + 0xcc9], 0
mov eax, 0xca8
mov ecx, 0xcbc
cmovne eax, ecx
add eax, esi
jmp 0x40f93f
cmp byte [esi + 0xcf1], 0
mov eax, 0xcd0
mov ecx, 0xce4
cmovne eax, ecx
add eax, esi
jmp 0x40f93f
mov eax, dword [esp + 0x30]
movzx eax, word [eax + 0xa]
lea ecx, [eax + eax*4]
mov eax, dword [0x4e981c]
lea eax, [eax + ecx*4]
jmp 0x40f93f
lea eax, [ecx + ecx*4]
lea eax, [esi + eax*4]
mov ecx, dword [esp + 0x30]
mov dword [0x4e802c], eax
movzx eax, word [ecx + 6]
test ax, ax
jne 0x40f955
movzx eax, word [ecx + 4]
movzx ecx, ax
mov dword [esp + 0x34], ecx
mov dword [esp + 0x38], ecx
movzx edi, ax
mov ecx, dword [esp + 0x134]
mov edx, 0x7ffd
mov eax, 0x7ffe
cmp di, ax
je 0x40f982
cmp di, dx
jne 0x40fb8c
mov eax, dword [0x4e802c]
cmp byte [eax + 0x12], 0xff
je 0x40f991
mov byte [eax + 0x12], 2
test cl, cl
jne 0x40f999
mov byte [ebp + 0x10], 1
test byte [0x4e8005], 0xc
jne 0x40f9c0
push 0xffc3d44d
push 0
push 0
push 0
mov dl, 0x12
xor ecx, ecx
call fcn.00419a70
mov ecx, dword [esp + 0x144]
add esp, 0x10
cmp bl, 0xa2
je 0x40f9ca
cmp bl, 0xa3
jne 0x40f9ed
mov esi, dword [esp + 0x1c]
test cl, cl
jne 0x40f9f1
push 0xffc3d44d
push 0
push 0
push esi
mov dl, bl
mov ecx, 1
call fcn.00419a70
add esp, 0x10
jmp 0x40f9f1
mov esi, dword [esp + 0x1c]
mov eax, dword [0x4e802c]
mov byte [eax + 0xe], 1
mov eax, 0x7ffd
cmp di, ax
jne 0x40fa32
test byte [0x4e8005], 0x30
jne 0x40fa24
push 0xffc3d44d
push 0
push 0
push 0
mov dl, 0x10
xor ecx, ecx
call fcn.00419a70
add esp, 0x10
mov eax, dword [0x4e802c]
mov byte [eax + 0xf], 1
jmp 0x40fab2
mov eax, 0x7ffe
cmp di, ax
jne 0x40fab2
cmp bl, 0xa0
je 0x40fa46
cmp bl, 0xa1
jne 0x40fa6d
cmp byte [esp + 0x134], 0
jne 0x40fa6d
push 0xffc3d44d
push 0
push 0
push esi
mov esi, 1
mov dl, bl
mov ecx, esi
call fcn.00419a70
add esp, 0x10
jmp 0x40fa72
mov esi, 1
test byte [0x4e8005], 0x10
je 0x40fa92
push 0xffc3d44d
push 0
push 0
push 0
mov dl, 0xa0
mov ecx, esi
call fcn.00419a70
add esp, 0x10
test byte [0x4e8005], 0x20
je 0x40fab2
push 0xffc3d44d
push 0
push 0
push 0
mov dl, 0xa1
mov ecx, esi
call fcn.00419a70
add esp, 0x10
test byte [0x4e8005], 1
mov esi, 1
je 0x40fad7
push 0xffc3d44d
push 0
push 0
push 0
mov dl, 0xa2
mov ecx, esi
call fcn.00419a70
add esp, 0x10
test byte [0x4e8005], 2
je 0x40faf7
push 0xffc3d44d
push 0
push 0
push 0
mov dl, 0xa3
mov ecx, esi
call fcn.00419a70
add esp, 0x10
push 0xffc3d44d
push 0
push 0
push 0
mov dl, 9
mov ecx, 2
call fcn.00419a70
mov eax, 0x7ffd
add esp, 0x10
cmp di, ax
jne 0x40fb55
mov eax, dword [0x4e802c]
cmp byte [eax + 0xf], 0
je 0x40fb55
cmp bl, 0x60
jb 0x40fb30
cmp bl, 0x69
jbe 0x40fb35
cmp bl, 0x6e
jne 0x40fb55
push 0xffc3d44d
push 0
push 0
push 0
mov dl, 0x10
mov ecx, esi
call fcn.00419a70
mov eax, dword [0x4e802c]
add esp, 0x10
mov byte [eax + 0xf], 0
mov ecx, dword [esp + 0x24]
mov eax, 0x68
mov word [ecx + 4], ax
mov eax, dword [esp + 0x134]
test al, al
jne 0x40fb71
mov byte [ebp + 0x11], 1
push 0
push SysReAllocString
push 0x7fff
push ecx
mov ecx, dword [esp + 0x148]
push ecx
push eax
jmp 0x4105ac
mov edi, dword [esp + 0x34]
mov esi, 0x7fff
cmp di, si
jne 0x40ff48
mov al, byte [ebp + 8]
mov dl, byte [0x4e8004]
test al, al
je 0x40fbaf
not al
and dl, al
mov eax, dword [esp + 0x14]
mov dh, byte [esp + 0x23]
cmp eax, dword [0x4e7ef4]
jne 0x40fbe4
test dh, dh
je 0x40fbe4
mov eax, dword [esp + 0x1c]
movzx ecx, dl
movzx eax, ax
shl ecx, 9
add ecx, eax
mov eax, dword [0x4e9810]
movzx ecx, word [eax + ecx*2]
movzx eax, bl
mov dword [esp + 0x48], eax
jmp 0x40fbfc
movzx eax, bl
movzx ecx, dl
shl ecx, 8
add ecx, eax
mov dword [esp + 0x48], eax
mov eax, dword [0x4e980c]
movzx ecx, word [eax + ecx*2]
movzx eax, cx
mov ebx, 0x7fff
mov dword [esp + 0x44], ecx
mov esi, eax
cmp word [esp + 0x44], bx
mov edi, eax
mov ebx, dword [esp + 0x12c]
movzx ecx, cx
mov dword [esp + 0x34], ecx
mov dword [esp + 0x38], ecx
mov ecx, eax
jne 0x40fca6
cmp byte [0x4e967e], 0
je 0x40fca6
cmp bl, 9
je 0x40fca6
mov edi, dword [esp + 0x14]
and dl, 0xf3
cmp edi, dword [0x4e7ef4]
jne 0x40fc5e
test dh, dh
je 0x40fc5e
mov eax, dword [esp + 0x1c]
movzx ecx, dl
movzx eax, ax
shl ecx, 9
add ecx, eax
mov eax, dword [0x4e9810]
jmp 0x40fc6d
mov eax, dword [0x4e980c]
movzx ecx, dl
shl ecx, 8
add ecx, dword [esp + 0x48]
movzx eax, word [eax + ecx*2]
movzx ecx, ax
movzx edx, ax
and eax, 0x7fff
mov dword [esp + 0x34], ecx
mov dword [esp + 0x38], ecx
mov ecx, 0x7ff9
cmp ax, cx
jbe 0x40fea1
mov ecx, edx
mov esi, edx
mov edi, edx
mov edx, 0x7fff
cmp ax, dx
jae 0x40fe96
test cx, cx
movzx eax, di
mov ecx, dword [esp + 0x134]
movzx edx, si
jns 0x40fd99
test cl, cl
jne 0x40fe4d
mov edi, 0x7fff
cmp word [ebp + 4], di
jne 0x40fcd7
mov ecx, dword [esp + 0x34]
mov word [ebp + 4], cx
mov ah, byte [0x4e8004]
mov al, ah
and al, 0xc0
movzx ecx, al
neg ecx
sbb ecx, ecx
and ecx, 8
mov edx, ecx
or edx, 1
test ah, 0xc
cmove edx, ecx
mov ecx, edx
or ecx, 4
test ah, 0x30
cmove ecx, edx
movzx edx, word [ebp + 6]
mov esi, ecx
or esi, 2
test ah, 3
cmove esi, ecx
cmp dx, di
je 0x40fd6d
mov eax, dword [0x4e804c]
movzx ecx, dx
mov ecx, dword [eax + ecx*4]
cmp byte [ecx + 0x15], 0
movzx edx, word [ecx + 0xc]
jne 0x40fd38
movzx eax, byte [ecx + 0xf]
not eax
test byte [0x4e8004], al
jne 0x40fd68
cmp byte [ecx + 0x16], 0
jne 0x40fd68
cmp byte [ecx + 0x11], 0
jne 0x40fd68
cmp word [ecx + 0xa], 0
jne 0x40fd68
cmp word [ecx + 6], 0
jne 0x40fd68
mov eax, esi
not eax
test dword [ecx], eax
jne 0x40fd68
movzx eax, byte [0x4e8004]
not eax
test byte [ecx + 0xe], al
je 0x40fd82
cmp dx, di
jne 0x40fd15
mov ecx, dword [esp + 0x134]
mov eax, edi
movzx edi, ax
mov dword [esp + 0x38], edi
jmp 0x40fe51
movzx eax, word [ecx + 4]
mov ecx, dword [esp + 0x134]
movzx edi, ax
mov dword [esp + 0x38], edi
jmp 0x40fe51
mov esi, 0x7fff
cmp dx, si
je 0x40fe5f
and eax, esi
test cl, cl
je 0x40fe22
cmp ax, word [0x4e805c]
jae 0x40fe15
mov esi, eax
mov edx, 0x7fff
mov eax, dword [0x4e9814]
cmp word [eax + esi*2], dx
je 0x40fe13
cmp byte [esp + 0x12], 0
jne 0x40fe04
mov eax, dword [esp + 0x24]
lea ecx, [esp + 0x38]
add eax, 4
push eax
lea eax, [esp + 0x15]
push eax
push dword [esp + 0x140]
call fcn.00414280
mov ecx, dword [esp + 0x140]
add esp, 0xc
mov dword [esp + 0x3c], eax
test eax, eax
je 0x40fe04
mov edi, dword [esp + 0x38]
jmp 0x40fe51
mov eax, dword [0x4e9814]
movzx edi, word [eax + esi*2]
mov dword [esp + 0x38], edi
jmp 0x40fe51
mov esi, edx
cmp byte [esp + 0x12], 0
jne 0x40fe67
mov edi, dword [esp + 0x34]
jmp 0x40fe56
mov edi, dword [esp + 0x34]
cmp ax, word [0x4e805c]
jae 0x40fe56
cmp word [ebp + 4], si
jne 0x40fe56
mov ecx, eax
mov eax, dword [0x4e9814]
mov ax, word [eax + ecx*2]
mov ecx, dword [esp + 0x134]
mov word [ebp + 4], ax
jmp 0x40fe56
mov edi, dword [esp + 0x34]
mov esi, 0x7fff
cmp di, si
jne 0x40ff48
mov edi, dword [esp + 0x14]
test cl, cl
je 0x40fec5
cmp byte [ebp + 8], 0
jne 0x40feaf
cmp byte [ebp + 9], 0
je 0x40feaf
cmp byte [esp + 0x11], 0
jne 0x40feaf
cmp byte [esp + 0x1b], 0
jne 0x40feaf
push 0
push SysReAllocString
push 0x7fff
push dword [esp + 0x30]
jmp 0x4105a4
mov ecx, dword [esp + 0x134]
mov esi, edx
jmp 0x40fe5f
mov ecx, dword [esp + 0x134]
mov esi, 0x7fff
jmp 0x40fe63
push 0x7fff
push dword [esp + 0x28]
push dword [esp + 0x140]
push ecx
jmp 0x40efb9
cmp word [ebp + 4], si
lea ecx, [ebp + 4]
jne 0x40fee7
push 0x7fff
push dword [esp + 0x28]
mov ecx, edi
push dword [esp + 0x140]
push 0
jmp 0x40efbd
mov esi, dword [esp + 0x138]
lea eax, [esp + 0x11]
push 0
push eax
push esi
call fcn.00414280
movzx ecx, byte [esp + 0x1d]
add esp, 0xc
test eax, eax
mov eax, 1
cmove ecx, eax
test cl, cl
sete al
mov byte [ebp + 0x11], al
test cl, cl
je 0x40ff2c
push 0x7fff
push dword [esp + 0x28]
mov ecx, edi
push esi
push 0
jmp 0x40efbd
push 0
push SysReAllocString
push 0x7fff
push dword [esp + 0x30]
push esi
push 0
push ecx
push ebx
mov ecx, edi
jmp 0x4105b2
mov esi, dword [esp + 0x24]
mov eax, edi
and eax, 0x7fff
cmp ax, word [0x4e805c]
jae 0x41003b
cmp dword [esp + 0x3c], 0
jne 0x41003b
mov edi, dword [esp + 0x138]
lea eax, [esi + 4]
push eax
lea eax, [esp + 0x15]
push eax
push edi
lea ecx, [esp + 0x44]
call fcn.00414280
add esp, 0xc
mov dword [esp + 0x3c], eax
test eax, eax
jne 0x410037
cmp word [esi + 4], 0x69
jne 0x40ffae
push 0x7fff
push esi
push edi
push dword [esp + 0x140]
jmp 0x40efb9
mov eax, dword [esp + 0x134]
test al, al
je 0x40ffdf
cmp byte [ebp + 0x11], 0
je 0x40ffd3
push 0
push SysReAllocString
push 0x7fff
push esi
push edi
push eax
jmp 0x4105ac
push 0x7fff
push esi
push edi
jmp 0x40efb8
lea ecx, [ebp + 4]
mov eax, 0x7fff
cmp word [ecx], ax
je 0x410029
push 0
lea eax, [esp + 0x15]
mov byte [esp + 0x15], 0
push eax
push edi
call fcn.00414280
add esp, 0xc
test eax, eax
je 0x410025
cmp byte [esp + 0x11], 0
jne 0x410025
push 0
push SysReAllocString
push 0x7fff
push esi
push edi
mov byte [ebp + 0x11], 1
push 0
jmp 0x4105ac
or byte [ebp + 0xc], 8
push 0x7fff
push esi
push edi
push 0
jmp 0x40efb9
mov edi, dword [esp + 0x38]
mov ecx, dword [0x4e802c]
and edi, 0x7fff
test ecx, ecx
je 0x410071
cmp dword [esp + 0x30], 0
jne 0x410062
cmp byte [ecx + 8], 0
je 0x410071
cmp byte [esp + 0x134], 0
jne 0x410071
mov eax, dword [0x4e802c]
cmp byte [eax + 0x12], 0xff
je 0x410071
mov byte [eax + 0x12], 2
test byte [0x4e8005], 0xcc
je 0x410134
cmp byte [esp + 0x11], 0
jne 0x410134
cmp byte [0x4e967d], 0
jne 0x4100a2
mov eax, dword [esp + 0x14]
cmp eax, dword [0x4e7ef0]
jne 0x410134
test byte [0x4e8005], 0xc0
je 0x4100ce
cmp di, word [0x4e805c]
jae 0x4100ce
mov eax, dword [0x4e804c]
movzx ecx, di
mov eax, dword [eax + ecx*4]
test byte [eax + 0xf], 0xc0
je 0x4100ce
mov byte [0x4e967c], 1
jmp 0x410134
cmp byte [0x4e967c], 0
jne 0x410134
mov al, byte [0x4e8005]
test al, 0xc
je 0x410134
test al, 3
jne 0x410134
cmp di, word [0x4e805c]
jae 0x410134
mov eax, dword [0x4e804c]
movzx ecx, di
mov eax, dword [eax + ecx*4]
test byte [eax + 0xf], 0xc
je 0x410134
cmp dword [0x4e7ef4], 0
je 0x410110
mov byte [0x4e967c], 1
jmp 0x410134
movzx eax, word [0x4e3d74]
mov ecx, 2
mov dl, byte [0x4e38be]
push 0xffc3d44d
push 0
push 0
push eax
call fcn.00419a70
add esp, 0x10
movzx ecx, di
lea eax, [ecx - 0x7ffa]
cmp eax, 4
ja case.default.0x410146
jmp dword [eax*4 + 0x4105f4]
cmp byte [0x4e967e], 0
jne case.0x410146.32763
push 0x7fff
push esi
push dword [esp + 0x140]
push dword [esp + 0x140]
jmp 0x40efb9
xor al, al
test byte [0x4e8005], 4
je 0x410181
mov ecx, 0xa4
jmp 0x410193
test byte [0x4e8005], 8
movzx ecx, al
mov eax, 0xa5
cmovne ecx, eax
cmp byte [0x4e967e], 0
mov dword [esp + 0x48], ecx
je 0x410217
mov eax, 0x7ffb
cmp di, ax
je case.0x410146.32765
push 0xffc3d44d
test cl, cl
movzx eax, cl
push 0
mov edx, 0x12
mov edi, 1
push 0
cmovne edx, eax
mov ecx, edi
push 0
call fcn.00419a70
add esp, 0x10
cmp byte [ebp + 8], 0
je 0x410206
cmp bl, 0x5b
je 0x410206
cmp bl, 0x5c
je 0x410206
cmp byte [esp + 0x134], 0
jne 0x410206
push 0xffc3d44d
push 0
push 0
push 0
mov dl, bl
mov ecx, edi
call fcn.00419a70
add esp, 0x10
mov byte [0x4e967e], 0
mov edi, 0x7fff
jmp 0x4104b6
cmp bl, 0xa4
je 0x410226
mov byte [esp + 0x2b], 0
cmp bl, 0xa5
jne 0x41022b
mov byte [esp + 0x2b], 1
cmp bl, 0xa0
je 0x410239
cmp bl, 0xa1
je 0x410239
xor cl, cl
jmp 0x41023b
mov cl, 1
mov byte [esp + 0x12], cl
cmp bl, 0xa2
je 0x41024e
mov byte [esp + 0x13], 0
cmp bl, 0xa3
jne 0x410253
mov byte [esp + 0x13], 1
xor dl, dl
test byte [0x4e8005], 0x10
mov dword [esp + 0x30], edx
je 0x410269
mov edx, 0xa0
jmp 0x41028c
test byte [0x4e8005], 0x20
mov eax, dword [esp + 0x134]
je 0x41027d
mov dl, 0xa1
jmp 0x410293
test al, al
jne 0x410297
test cl, cl
movzx edx, dl
movzx eax, bl
cmovne edx, eax
mov eax, dword [esp + 0x134]
mov dword [esp + 0x30], edx
xor cl, cl
test byte [0x4e8005], 1
mov dword [esp + 0x3c], ecx
je 0x4102ad
mov byte [esp + 0x3c], 0xa2
jmp 0x4102d3
test byte [0x4e8005], 2
je 0x4102bd
mov byte [esp + 0x3c], 0xa3
jmp 0x4102d3
test al, al
jne 0x4102d3
cmp byte [esp + 0x13], 0
movzx ecx, cl
movzx eax, bl
cmovne ecx, eax
mov dword [esp + 0x3c], ecx
mov byte [esp + 0x13], 0
mov edi, 1
test dl, dl
je 0x4102fb
push 0xffc3d44d
push 0
push 0
push 0
mov ecx, edi
call fcn.00419a70
add esp, 0x10
mov byte [esp + 0x13], 1
mov eax, dword [esp + 0x3c]
test al, al
je 0x41031a
push 0xffc3d44d
push 0
push 0
push 0
mov dl, al
mov ecx, edi
call fcn.00419a70
add esp, 0x10
cmp byte [esp + 0x2b], 0
je 0x41032f
cmp byte [esp + 0x134], 0
jne 0x410337
mov al, bl
jmp 0x410333
mov eax, dword [esp + 0x48]
test al, al
jne 0x41034e
push 0xffc3d44d
push 0
push 0
push 0
mov dl, 0x12
xor ecx, ecx
call fcn.00419a70
add esp, 0x10
push 0xffc3d44d
push 0
push 0
push 0
mov dl, 9
mov ecx, 2
call fcn.00419a70
add esp, 0x10
cmp byte [esp + 0x13], 0
je 0x41038f
cmp byte [esp + 0x12], 0
jne 0x41038f
mov dl, byte [esp + 0x30]
xor ecx, ecx
push 0xffc3d44d
push 0
push 0
push 0
call fcn.00419a70
add esp, 0x10
mov byte [0x4e967e], 1
mov edi, 0x7fff
jmp 0x4104b6
cmp byte [0x4e967e], 0
je 0x410156
mov eax, dword [esp + 0x134]
test al, al
jne 0x4103ed
cmp bl, 0xa2
je 0x4103cc
cmp bl, 0xa3
je 0x4103cc
cmp bl, 0xa0
je 0x4103cc
cmp bl, 0xa1
jne 0x4103ed
push 0xffc3d44d
push 0
push 0
push 0
mov dl, bl
mov ecx, 1
call fcn.00419a70
mov eax, dword [esp + 0x144]
add esp, 0x10
test byte [0x4e8005], 0xc
je 0x410404
test al, al
je 0x41041b
cmp bl, 0xa4
je 0x410404
cmp bl, 0xa5
jne 0x41041b
push 0xffc3d44d
push 0
push 0
push 0
mov dl, 0x12
xor ecx, ecx
call fcn.00419a70
add esp, 0x10
mov eax, 0x7ffd
cmp di, ax
jne 0x41047a
test byte [0x4e8005], 0x30
jne 0x41047a
push 0xffc3d44d
push 0
push 0
push 0
mov dl, 0x10
xor ecx, ecx
call fcn.00419a70
push 0xffc3d44d
push 0
push 0
push 0
mov dl, 9
mov ecx, 2
call fcn.00419a70
push 0xffc3d44d
push 0
push 0
push 0
mov dl, 0x10
mov ecx, 1
call fcn.00419a70
add esp, 0x30
mov edi, 0x7fff
jmp 0x4104b6
push 0xffc3d44d
push 0
push 0
push 0
mov dl, 9
mov ecx, 2
call fcn.00419a70
add esp, 0x10
mov edi, 0x7fff
jmp 0x4104b6
mov edi, ecx
mov ecx, dword [esp + 0x3c]
mov eax, dword [ecx + 8]
test eax, eax
je 0x4104b6
cmp byte [eax], 5
jne 0x4104b6
movzx eax, word [ecx + 0x18]
shl eax, 0x10
or edi, eax
mov ecx, dword [esp + 0x134]
mov eax, 0x68
mov word [esi + 4], ax
test cl, cl
je 0x410548
cmp byte [esp + 0x1b], 0
je 0x410524
cmp byte [ebp + 9], 0
je 0x410524
mov ebp, dword [esp + 0x1c]
lea ecx, [eax - 0x67]
push 0xffc3d44e
push 0
push 0
push ebp
mov dl, bl
call fcn.00419a70
push 0xffc3d44d
push 0
push 0
push ebp
mov dl, bl
mov ecx, 2
call fcn.00419a70
add esp, 0x20
push 0
push SysReAllocString
push edi
push esi
push dword [esp + 0x148]
push dword [esp + 0x148]
jmp 0x4105ac
cmp byte [ebp + 8], 0
je 0x410532
cmp byte [ebp + 0x11], 0
je 0x410539
jmp 0x41059b
cmp byte [esp + 0x11], 0
je 0x41059b
push edi
push esi
push dword [esp + 0x140]
push ecx
jmp 0x40efb9
cmp byte [esp + 0x11], 0
mov byte [ebp + 0x10], 1
je 0x410566
or byte [ebp + 0xc], 8
push edi
push esi
push dword [esp + 0x140]
push ecx
jmp 0x40efb9
movzx eax, byte [0x4e8005]
not eax
test byte [ebp + 8], al
je 0x410597
push 0xffc3d450
push 0
push 0
push dword [esp + 0x28]
mov dl, bl
mov ecx, 1
call fcn.00419a70
mov ecx, dword [esp + 0x144]
add esp, 0x10
mov byte [ebp + 0x11], 1
push 0
push SysReAllocString
push edi
push esi
push dword [esp + 0x148]
push ecx
push ecx
push ebx
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x148]
call fcn.00410610
add esp, 0x20
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x110
ret