Function at 0x4c7f00
Capabilities:
Encode data using base64
Log keystrokes via polling
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5b55d8
mov eax, dword fs:[0]
push eax
sub esp, 0x198
mov eax, dword [0x5f8800]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x180], edi
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov ax, word [edi + 0x1459b2]
add esp, 0xc
movzx ecx, word [edi + 0x1459b0]
sub ax, 5
movzx esi, word [edi + 0x1459ae]
movzx eax, ax
push 0
push 0
push 0
mov dword [ebp - 0x19c], eax
movsx eax, cx
mov dword [ebp - 0x15c], ecx
movsx ecx, si
push eax
push ecx
mov dword [ebp - 0x184], ecx
mov ecx, edi
push 0x3d
mov dword [ebp - 0x16c], esi
mov dword [ebp - 0x174], eax
call fcn.0043d1d0
push 0
push 0
push 6
push dword [ebp - 0x174]
mov ecx, edi
push dword [ebp - 0x184]
push 0x46
call fcn.0043d1d0
movsx eax, word [edi + 0x145ab8]
mov dword [ebp - 0x18c], 0xffffffff
mov dword [ebp - 0x1a0], 0xffffffff
sub eax, 1
jne 0x4c81cd
mov ecx, dword [edi + 0x194b10]
mov edx, dword [edi + 0x145958]
mov dword [ebp - 0x160], ecx
mov dword [ebp - 0x170], edx
mov dword [ebp - 0x1a0], ecx
mov dword [ebp - 0x188], edx
cmp ecx, 0xffffffff
je 0x4c81d9
cmp ecx, edx
jle 0x4c808b
movsx eax, word [edi + 0x1459b6]
push 0
push 0
push 3
movd xmm1, eax
mov eax, ecx
cvtdq2pd xmm1, xmm1
sub eax, edx
mov ecx, edi
movd xmm0, eax
mulsd xmm1, qword [0x5cd590]
cvtdq2pd xmm0, xmm0
push dword [ebp - 0x174]
divsd xmm1, xmm0
push dword [ebp - 0x184]
cvttsd2si esi, xmm1
push 0x3d
call fcn.0043d1d0
mov eax, dword [ebp - 0x174]
mov ecx, edi
push 0
push 0
add eax, 0x23
push 7
add eax, esi
push eax
mov eax, dword [ebp - 0x184]
add eax, 0xf2
push eax
push 0x3d
call fcn.0043d1d0
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x160]
mov edx, dword [ebp - 0x170]
cmp byte [ebp + 0x14], 0
je 0x4c812c
cmp ecx, edx
jle 0x4c812c
mov ecx, edi
call fcn.004973c0
cmp eax, 0x40
jne 0x4c8133
mov ecx, dword [ebp - 0x184]
mov eax, dword [ebp + 8]
movsx edx, ax
lea eax, [ecx + 0xeb]
cmp edx, eax
jl 0x4c8133
lea eax, [ecx + 0x104]
cmp edx, eax
jg 0x4c8133
mov edx, dword [ebp - 0x174]
mov eax, dword [ebp + 0xc]
movsx ecx, ax
lea eax, [edx + 0xa]
cmp ecx, eax
jl 0x4c8133
lea eax, [edx + 0x14a]
cmp ecx, eax
jg 0x4c8133
mov eax, dword [ebp - 0x160]
sub ecx, edx
sub ecx, 0x23
sub eax, dword [ebp - 0x170]
movd xmm1, eax
movd xmm0, ecx
cvtdq2pd xmm1, xmm1
cvtdq2pd xmm0, xmm0
mulsd xmm1, xmm0
divsd xmm1, qword [0x5cd590]
addsd xmm1, qword [0x5c5598]
cvttsd2si eax, xmm1
mov word [edi + 0x1459b6], ax
jmp 0x4c8133
mov byte [edi + 0x145aba], 0
mov ecx, edi
call fcn.004973c0
cmp eax, 0x40
jne 0x4c816e
mov ax, word [ebp + 0x10]
test ax, ax
je 0x4c816e
movsx ecx, ax
mov eax, 0x77777777
imul ecx
sub edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
add word [edi + 0x1459b6], ax
xor eax, eax
mov word [edi + 0x14a904], ax
mov edx, dword [ebp - 0x160]
mov eax, dword [ebp - 0x170]
cmp edx, eax
jle 0x4c81a2
mov ecx, edx
sub ecx, eax
movsx eax, word [edi + 0x1459b6]
cmp eax, ecx
jle 0x4c819c
mov eax, edx
sub eax, dword [ebp - 0x170]
mov word [edi + 0x1459b6], ax
mov eax, dword [ebp - 0x170]
cmp word [edi + 0x1459b6], 0
jl 0x4c81bc
mov dword [ebp - 0x1a0], edx
mov dword [ebp - 0x188], eax
cmp edx, eax
jg 0x4c81d9
xor ecx, ecx
mov dword [ebp - 0x1a0], edx
mov word [edi + 0x1459b6], cx
jmp 0x4c81d3
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x188], eax
movsx eax, word [edi + 0x145ab8]
sub eax, 0
je 0x4c8338
sub eax, 1
je 0x4c81f7
sub eax, 1
jne 0x4c84e1
mov eax, dword [ebp + 8]
movsx ecx, si
add ecx, 0x19
movsx edx, ax
mov dword [ebp - 0x160], ecx
cmp edx, ecx
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x194], edx
jl 0x4c8261
movsx eax, si
add eax, 0x41
cmp edx, eax
jg 0x4c8261
mov eax, dword [ebp + 0xc]
movsx edx, cx
add edx, 0x12c
cwde
mov dword [ebp - 0x174], edx
mov dword [ebp - 0x184], eax
cmp eax, edx
jl 0x4c8261
movsx eax, cx
add eax, 0x140
cmp dword [ebp - 0x184], eax
jg 0x4c8261
mov ecx, 6
mov dword [ebp - 0x170], 0x14
jmp 0x4c8292
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x160], eax
mov eax, dword [ebp + 0xc]
movsx edx, cx
add edx, 0x12c
cwde
mov dword [ebp - 0x174], edx
xor ecx, ecx
mov dword [ebp - 0x170], 7
mov dword [ebp - 0x184], eax
push dword [ebp - 0x170]
mov eax, edi
push ecx
push ecx
push str.Back
push edx
push dword [ebp - 0x160]
mov ecx, eax
call fcn.0045dd00
cmp byte [edi + 0x145abb], 0
jne 0x4c84e1
movsx ecx, si
add ecx, 0xb4
mov dword [ebp - 0x160], ecx
cmp dword [ebp - 0x194], ecx
jl 0x4c831b
mov eax, dword [ebp + 8]
movsx ecx, si
add ecx, 0xe6
cwde
cmp eax, ecx
mov ecx, dword [ebp - 0x174]
jg 0x4c8321
mov edx, dword [ebp - 0x184]
cmp edx, ecx
jl 0x4c8321
mov eax, dword [ebp - 0x15c]
cwde
add eax, 0x140
cmp edx, eax
jg 0x4c8321
push 0x14
push 6
push 6
push str.Save
push ecx
push dword [ebp - 0x160]
jmp 0x4c84da
mov ecx, dword [ebp - 0x174]
push 7
push 0
push 0
push str.Save
push ecx
push dword [ebp - 0x160]
jmp 0x4c84da
mov eax, dword [ebp + 8]
movsx ecx, si
add ecx, 0x19
movsx edx, ax
mov dword [ebp - 0x160], ecx
mov dword [ebp - 0x194], edx
cmp edx, ecx
jl 0x4c83b0
movsx eax, si
add eax, 0x41
cmp edx, eax
jg 0x4c83b0
mov ecx, dword [ebp - 0x15c]
mov eax, dword [ebp + 0xc]
movsx edx, cx
add edx, 0x12c
cwde
mov dword [ebp - 0x174], edx
cmp eax, edx
jl 0x4c83aa
mov esi, dword [ebp + 0xc]
movsx eax, cx
movsx ecx, si
add eax, 0x140
mov esi, dword [ebp - 0x16c]
cmp ecx, eax
mov ecx, dword [ebp - 0x160]
jg 0x4c83b0
mov eax, 6
mov dword [ebp - 0x184], 0x14
jmp 0x4c83d1
mov ecx, dword [ebp - 0x160]
mov eax, dword [ebp - 0x15c]
movsx edx, ax
add edx, 0x12c
mov dword [ebp - 0x184], 7
mov dword [ebp - 0x174], edx
xor eax, eax
push dword [ebp - 0x184]
push eax
push eax
push str.Back
push edx
push ecx
mov ecx, edi
call fcn.0045dd00
cmp byte [edi + 0x1459ac], 0
je 0x4c845c
movsx ecx, si
add ecx, 0x64
mov dword [ebp - 0x160], ecx
cmp dword [ebp - 0x194], ecx
jl 0x4c843d
mov eax, dword [ebp + 8]
movsx ecx, si
add ecx, 0x91
cwde
cmp eax, ecx
mov ecx, dword [ebp - 0x174]
jg 0x4c8443
mov eax, dword [ebp + 0xc]
movsx edx, ax
cmp edx, ecx
jl 0x4c8443
mov eax, dword [ebp - 0x15c]
cwde
add eax, 0x140
cmp edx, eax
jg 0x4c8443
push 0x14
push 6
push 6
jmp 0x4c8449
mov ecx, dword [ebp - 0x174]
push 7
push 0
push 0
push str.Delete
push ecx
push dword [ebp - 0x160]
mov ecx, edi
call fcn.0045dd00
cmp byte [edi + 0x145abb], 0
jne 0x4c84e1
mov edx, dword [ebp + 8]
movsx ecx, si
add ecx, 0xb4
movsx eax, dx
mov dword [ebp - 0x160], ecx
cmp eax, ecx
jl 0x4c84ba
movsx ecx, si
add ecx, 0xe6
movsx eax, dx
cmp eax, ecx
mov ecx, dword [ebp - 0x15c]
jg 0x4c84c0
mov eax, dword [ebp + 0xc]
movsx edx, ax
movsx eax, cx
add eax, 0x12c
cmp edx, eax
jl 0x4c84c0
movsx eax, cx
add eax, 0x140
cmp edx, eax
jg 0x4c84c0
push 0x14
push 6
push 6
jmp 0x4c84c6
mov ecx, dword [ebp - 0x15c]
push 7
push 0
push 0
movsx eax, cx
push str.Save
add eax, 0x12c
push eax
push dword [ebp - 0x160]
mov ecx, edi
call fcn.0045dd00
movsx eax, word [edi + 0x145ab8]
add eax, 4
cmp eax, 6
ja case.default.0x4c84f4
jmp dword [eax*4 + 0x4cd208]
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push 0x20
movups xmmword [ebp - 0x128], xmm0
mov dword [ebp - 0x114], 0
call fcn.005aa520
movups xmm0, xmmword [str.DRAW_DIALOGBOX_CURRENCY_MENU120]
mov edx, eax
mov dword [ebp - 0x118], 0x1f
mov dword [ebp - 0x128], edx
add esp, 4
mov dword [ebp - 0x114], 0x1f
movups xmmword [edx], xmm0
movq xmm0, qword [0x5da070]
movq qword [edx + 0x10], xmm0
mov ecx, dword [0x5da078]
mov dword [edx + 0x18], ecx
mov ax, word [0x5da07c]
mov word [edx + 0x1c], ax
mov al, byte [0x5da07e]
mov byte [edx + 0x1e], al
mov byte [edx + 0x1f], 0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0
push eax
lea eax, [ebp - 0x17c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x4c85a1
mov eax, dword [eax]
push 0
push 0
push 0
push 0
push eax
mov eax, dword [ebp - 0x15c]
mov ecx, edi
cwde
add eax, 0x2d
push eax
movsx eax, si
add eax, 0xf0
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d060
mov ecx, dword [ebp - 0x114]
cmp ecx, 0xf
jbe case.default.0x4c84f4
mov edx, dword [ebp - 0x128]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4c8600
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4cd1f6
push ecx
push edx
call fcn.005aa4e8
add esp, 8
jmp case.default.0x4c84f4
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push 0x20
movups xmmword [ebp - 0x128], xmm0
mov dword [ebp - 0x114], 0
call fcn.005aa520
movups xmm0, xmmword [str.DRAW_DIALOGBOX_CURRENCY_MENU112]
mov edx, eax
mov dword [ebp - 0x118], 0x1f
mov dword [ebp - 0x128], edx
add esp, 4
mov dword [ebp - 0x114], 0x1f
movups xmmword [edx], xmm0
movq xmm0, qword [0x5da090]
movq qword [edx + 0x10], xmm0
mov ecx, dword [0x5da098]
mov dword [edx + 0x18], ecx
mov ax, word [0x5da09c]
mov word [edx + 0x1c], ax
mov al, byte [0x5da09e]
mov byte [edx + 0x1e], al
mov byte [edx + 0x1f], 0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 1
push eax
lea eax, [ebp - 0x17c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x4c86b5
mov eax, dword [eax]
push 0
push 0
push 0
push 0
push eax
mov eax, dword [ebp - 0x15c]
mov ecx, edi
cwde
add eax, 0x2d
push eax
movsx eax, si
add eax, 0xf0
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d060
mov ecx, dword [ebp - 0x114]
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0xf
jbe 0x4c8721
mov edx, dword [ebp - 0x128]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4c8717
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4cd1fb
push ecx
push edx
call fcn.005aa4e8
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push 0x20
movups xmmword [ebp - 0x128], xmm0
mov dword [ebp - 0x114], 0
call fcn.005aa520
movups xmm0, xmmword [str.DRAW_DIALOGBOX_CURRENCY_MENU113]
mov edx, eax
mov dword [ebp - 0x118], 0x1f
mov dword [ebp - 0x128], edx
add esp, 4
mov dword [ebp - 0x114], 0x1f
movups xmmword [edx], xmm0
movq xmm0, qword [0x5da0b0]
movq qword [edx + 0x10], xmm0
mov ecx, dword [0x5da0b8]
mov dword [edx + 0x18], ecx
mov ax, word [0x5da0bc]
mov word [edx + 0x1c], ax
mov al, byte [0x5da0be]
mov byte [edx + 0x1e], al
mov byte [edx + 0x1f], 0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 2
push eax
lea eax, [ebp - 0x17c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x4c87c7
mov eax, dword [eax]
push 0
push 0
push 0
push 0
push eax
mov eax, dword [ebp - 0x15c]
mov ecx, edi
cwde
add eax, 0x3c
push eax
movsx eax, si
add eax, 0xf0
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d060
mov ecx, dword [ebp - 0x114]
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0xf
jbe 0x4c8833
mov edx, dword [ebp - 0x128]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4c8829
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4cd200
push ecx
push edx
call fcn.005aa4e8
add esp, 8
mov eax, dword [ebp + 8]
movsx ecx, si
add ecx, 0x9a
movsx edx, ax
mov dword [ebp - 0x160], ecx
cmp edx, ecx
jle 0x4c8890
movsx eax, si
add eax, 0xe4
cmp edx, eax
jge 0x4c8890
mov ecx, dword [ebp - 0x15c]
mov eax, dword [ebp + 0xc]
movsx edx, cx
add edx, 0x124
movsx esi, ax
cmp esi, edx
jle 0x4c888a
movsx eax, cx
mov ecx, dword [ebp - 0x160]
add eax, 0x138
cmp esi, eax
jge 0x4c8890
mov eax, 0x11
jmp 0x4c88a4
mov ecx, dword [ebp - 0x160]
mov eax, dword [ebp - 0x15c]
movsx edx, ax
mov eax, 0x10
add edx, 0x124
push 0
push 0
push eax
push edx
push ecx
push 0x47
mov ecx, edi
call fcn.0043d1d0
jmp case.default.0x4c84f4
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push 0x20
movups xmmword [ebp - 0x128], xmm0
mov dword [ebp - 0x114], 0
call fcn.005aa520
movups xmm0, xmmword [str.DRAW_DIALOGBOX_CURRENCY_MENU117]
mov edx, eax
mov dword [ebp - 0x118], 0x1f
mov dword [ebp - 0x128], edx
add esp, 4
mov dword [ebp - 0x114], 0x1f
movups xmmword [edx], xmm0
movq xmm0, qword [0x5da0d0]
movq qword [edx + 0x10], xmm0
mov ecx, dword [0x5da0d8]
mov dword [edx + 0x18], ecx
mov ax, word [0x5da0dc]
mov word [edx + 0x1c], ax
mov al, byte [0x5da0de]
mov byte [edx + 0x1e], al
mov byte [edx + 0x1f], 0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 3
push eax
lea eax, [ebp - 0x17c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x4c85a1
jmp 0x4c859f
push 0x1e
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push str.DRAW_DIALOGBOX_CURRENCY_MENU53
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x114], 0
movups xmmword [ebp - 0x128], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 4
push eax
lea eax, [ebp - 0x17c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x4c85a1
jmp 0x4c859f
push 0x1d
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push str.DRAW_DIALOGBOX_CURRENCY_MENU1
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x114], 0
movups xmmword [ebp - 0x128], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 5
push eax
lea eax, [ebp - 0x17c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x4c8a25
mov eax, dword [eax]
push 0
push 0xc8
push 0xc8
push 0xdc
push eax
mov eax, dword [ebp - 0x15c]
mov ecx, edi
cwde
add eax, 0x2d
push eax
movsx eax, si
add eax, 0xf0
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d060
mov ecx, dword [ebp - 0x114]
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0xf
jbe 0x4c8a9a
mov edx, dword [ebp - 0x128]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4c8a90
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4cd1f6
push ecx
push edx
call fcn.005aa4e8
add esp, 8
push 0x1d
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push str.DRAW_DIALOGBOX_CURRENCY_MENU1
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x114], 0
movups xmmword [ebp - 0x128], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 6
push eax
lea eax, [ebp - 0x17c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x4c8af6
mov eax, dword [eax]
push 0
push 0xc8
push 0xc8
push 0xdc
push eax
mov eax, dword [ebp - 0x15c]
mov ecx, edi
cwde
add eax, 0x2d
push eax
movsx eax, si
add eax, 0xf1
push eax
movsx eax, si
add eax, 0x1a
push eax
call fcn.0045d060
mov ecx, dword [ebp - 0x114]
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0xf
jbe 0x4c8b6b
mov edx, dword [ebp - 0x128]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4c8b61
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4cd1f6
push ecx
push edx
call fcn.005aa4e8
add esp, 8
mov ecx, dword [edi + 0x13c690]
call fcn.00407180
cwde
cmp eax, 4
ja case.default.0x4c8b80
jmp dword [eax*4 + 0x4cd224]
push str.DRAW_DIALOGBOX_CURRENCY_MENU24
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov dword [ebp - 4], 7
jmp 0x4c8c02
push str.DRAW_DIALOGBOX_CURRENCY_MENU10
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov dword [ebp - 4], 8
jmp 0x4c8c02
push str.DRAW_DIALOGBOX_CURRENCY_MENU11
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov dword [ebp - 4], 9
jmp 0x4c8c02
push str.DRAW_DIALOGBOX_CURRENCY_MENU12
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov dword [ebp - 4], 0xa
jmp 0x4c8c02
push str.DRAW_DIALOGBOX_CURRENCY_MENU119
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov dword [ebp - 4], 0xb
lea eax, [ebp - 0x128]
mov ecx, 0x5fd3c4
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004994b0
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.00411640
mov eax, dword [ebp + 8]
movsx ecx, ax
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x4c8ced
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x4c8ced
mov ecx, dword [ebp - 0x15c]
mov edx, dword [ebp + 0xc]
movsx eax, cx
add eax, 0x41
movsx edx, dx
mov dword [ebp - 0x160], eax
cmp edx, eax
jl 0x4c8ced
movsx eax, cx
add eax, 0x4f
cmp edx, eax
jg 0x4c8ced
push str.DRAW_DIALOGBOX_CURRENCY_MENU9
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0xc
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x160]
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, 0xffffff
jmp 0x4c8d87
push 0x1d
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push str.DRAW_DIALOGBOX_CURRENCY_MENU9
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x114], 0
movups xmmword [ebp - 0x128], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0xd
push eax
lea eax, [ebp - 0x17c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x4c8d49
mov ecx, dword [ecx]
mov eax, dword [ebp - 0x15c]
push 0
cwde
push 0x320004
add eax, 0x41
push ecx
push eax
mov dword [ebp - 0x160], eax
mov ecx, edi
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, 0x320004
push 0
push eax
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
push dword [ebp - 0x160]
movsx eax, si
add eax, 0x78
push eax
call fcn.0045d450
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov ecx, dword [edi + 0x13c690]
add esp, 0xc
call fcn.00407160
cwde
cmp eax, 3
ja case.default.0x4c8dd0
jmp dword [eax*4 + 0x4cd238]
push str.DRAW_DIALOGBOX_CURRENCY_MENU24
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov dword [ebp - 4], 0xe
jmp 0x4c8e39
push str.DRAW_DIALOGBOX_CURRENCY_MENU21
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov dword [ebp - 4], 0xf
jmp 0x4c8e39
push str.DRAW_DIALOGBOX_CURRENCY_MENU22
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov dword [ebp - 4], 0x10
jmp 0x4c8e39
push str.DRAW_DIALOGBOX_CURRENCY_MENU23
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov dword [ebp - 4], 0x11
lea eax, [ebp - 0x128]
mov ecx, 0x5fd3c4
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004994b0
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.00411640
mov edx, dword [ebp + 8]
movsx ecx, si
add ecx, 0x1e
movsx eax, dx
cmp eax, ecx
jle 0x4c8f25
movsx ecx, si
add ecx, 0xf0
movsx eax, dx
cmp eax, ecx
jge 0x4c8f25
mov eax, dword [ebp - 0x15c]
mov ecx, dword [ebp + 0xc]
movsx edx, ax
movsx ecx, cx
lea eax, [edx + 0x50]
mov dword [ebp - 0x160], eax
cmp ecx, eax
jl 0x4c8f25
lea eax, [edx + 0x5e]
cmp ecx, eax
jg 0x4c8f25
push str.DRAW_DIALOGBOX_CURRENCY_MENU20
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x12
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x160]
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov edx, 0xffffff
jmp 0x4c8fbf
push 0x1e
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push str.DRAW_DIALOGBOX_CURRENCY_MENU20
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x114], 0
movups xmmword [ebp - 0x128], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x13
push eax
lea eax, [ebp - 0x17c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x4c8f81
mov ecx, dword [ecx]
mov eax, dword [ebp - 0x15c]
push 0
cwde
push 0x320004
add eax, 0x50
push ecx
push eax
mov dword [ebp - 0x160], eax
mov ecx, edi
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov edx, 0x320004
push 0
push edx
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
push dword [ebp - 0x160]
movsx eax, si
add eax, 0x78
push eax
call fcn.0045d450
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov ecx, dword [edi + 0x13c690]
add esp, 0xc
call fcn.00407170
cwde
sub eax, 0
je 0x4c9044
sub eax, 1
je 0x4c902b
sub eax, 1
jne 0x4c9095
push str.DRAW_DIALOGBOX_CURRENCY_MENU27
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov dword [ebp - 4], 0x16
jmp 0x4c905b
push str.DRAW_DIALOGBOX_CURRENCY_MENU26
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov dword [ebp - 4], 0x15
jmp 0x4c905b
push str.DRAW_DIALOGBOX_CURRENCY_MENU24
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov dword [ebp - 4], 0x14
lea eax, [ebp - 0x128]
mov ecx, 0x5fd3c4
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004994b0
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.00411640
mov edx, dword [ebp + 8]
movsx ecx, si
add ecx, 0x1e
movsx eax, dx
cmp eax, ecx
jle 0x4c914d
movsx ecx, si
add ecx, 0xf0
movsx eax, dx
cmp eax, ecx
jge 0x4c914d
mov eax, dword [ebp - 0x15c]
mov edi, dword [ebp + 0xc]
movsx edx, ax
movsx ecx, di
mov edi, dword [ebp - 0x180]
lea eax, [edx + 0x5f]
mov dword [ebp - 0x160], eax
cmp ecx, eax
jl 0x4c914d
lea eax, [edx + 0x6d]
cmp ecx, eax
jg 0x4c914d
push str.DRAW_DIALOGBOX_CURRENCY_MENU25
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x17
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x160]
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, 0xffffff
jmp 0x4c91e7
push 0x1e
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push str.DRAW_DIALOGBOX_CURRENCY_MENU25
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x114], 0
movups xmmword [ebp - 0x128], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x18
push eax
lea eax, [ebp - 0x17c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x4c91a9
mov ecx, dword [ecx]
mov eax, dword [ebp - 0x15c]
push 0
cwde
push 0x320004
add eax, 0x5f
push ecx
push eax
mov dword [ebp - 0x160], eax
mov ecx, edi
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, 0x320004
push 0
push eax
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
push dword [ebp - 0x160]
movsx eax, si
add eax, 0x78
push eax
call fcn.0045d450
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [edi + 0x13c690]
add esp, 0xc
movsx eax, byte [eax + 0x21]
inc eax
cmp eax, 3
ja case.default.0x4c922f
jmp dword [eax*4 + 0x4cd248]
push str.DRAW_DIALOGBOX_CURRENCY_MENU49
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov dword [ebp - 4], 0x19
jmp 0x4c9298
push str.DRAW_DIALOGBOX_CURRENCY_MENU50
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov dword [ebp - 4], 0x1a
jmp 0x4c9298
push str.DRAW_DIALOGBOX_CURRENCY_MENU51
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov dword [ebp - 4], 0x1b
jmp 0x4c9298
push str.DRAW_DIALOGBOX_CURRENCY_MENU52
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov dword [ebp - 4], 0x1c
lea eax, [ebp - 0x128]
mov ecx, 0x5fd3c4
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004994b0
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.00411640
mov edx, dword [ebp + 8]
movsx ecx, si
add ecx, 0x1e
movsx eax, dx
cmp eax, ecx
jle 0x4c9387
movsx ecx, si
add ecx, 0xf0
movsx eax, dx
cmp eax, ecx
jge 0x4c9387
mov ecx, dword [ebp - 0x15c]
mov edx, dword [ebp + 0xc]
movsx eax, cx
add eax, 0x6e
movsx edx, dx
mov dword [ebp - 0x160], eax
cmp edx, eax
jl 0x4c9387
movsx eax, cx
add eax, 0x7c
cmp edx, eax
jg 0x4c9387
push str.DRAW_DIALOGBOX_CURRENCY_MENU48
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x1d
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x160]
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov edx, 0xffffff
jmp 0x4c9421
push 0x1e
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push str.DRAW_DIALOGBOX_CURRENCY_MENU48
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x114], 0
movups xmmword [ebp - 0x128], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x1e
push eax
lea eax, [ebp - 0x17c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x4c93e3
mov ecx, dword [ecx]
mov eax, dword [ebp - 0x15c]
push 0
cwde
push 0x320004
add eax, 0x6e
push ecx
push eax
mov dword [ebp - 0x160], eax
mov ecx, edi
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov edx, 0x320004
push 0
push edx
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
push dword [ebp - 0x160]
movsx eax, si
add eax, 0x78
push eax
call fcn.0045d450
mov ecx, dword [edi + 0x13c690]
call fcn.00407180
cwde
sub eax, 1
je 0x4c9b0d
sub eax, 1
je 0x4c98fb
sub eax, 1
jne case.default.0x4c84f4
push 0x100
push eax
lea eax, [ebp - 0x110]
push eax
call sub.VCRUNTIME140.dll_memset
lea eax, [ebp - 0x110]
push eax
mov eax, dword [edi + 0x13c690]
add eax, 0xc
push eax
call fcn.005666c0
mov edx, dword [ebp + 8]
add esp, 0x14
movsx ecx, si
add ecx, 0x1e
movsx eax, dx
cmp eax, ecx
jle 0x4c9564
movsx ecx, si
add ecx, 0xf0
movsx eax, dx
cmp eax, ecx
jge 0x4c9564
mov eax, dword [ebp - 0x15c]
mov edi, dword [ebp + 0xc]
movsx edx, ax
movsx ecx, di
mov edi, dword [ebp - 0x180]
mov dword [ebp - 0x160], edx
lea eax, [edx + 0x7d]
cmp ecx, eax
jl 0x4c9564
lea eax, [edx + 0x8b]
cmp ecx, eax
jg 0x4c9564
push str.DRAW_DIALOGBOX_CURRENCY_MENU114
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x44
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x160]
mov ecx, edi
add eax, 0x7d
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0xffffff
lea eax, [ebp - 0x110]
push eax
mov eax, dword [ebp - 0x160]
add eax, 0x7d
push eax
jmp 0x4c95e1
push str.DRAW_DIALOGBOX_CURRENCY_MENU114
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov eax, dword [ebp - 0x15c]
mov ecx, 0x5fd3c4
cwde
push 0
push 0x320004
mov dword [ebp - 4], 0x45
lea esi, [eax + 0x7d]
lea eax, [ebp - 0x128]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
mov ecx, dword [ebp - 0x16c]
push eax
movsx eax, cx
mov ecx, edi
push esi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0x320004
lea eax, [ebp - 0x110]
push eax
push esi
mov esi, dword [ebp - 0x16c]
movsx eax, si
mov ecx, edi
add eax, 0x78
push eax
call fcn.0045d450
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [edi + 0x13c690]
push dword [eax + 0x2c]
lea eax, [ebp - 0x110]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
mov edx, dword [ebp + 8]
add esp, 0x18
movsx ecx, si
add ecx, 0x1e
movsx eax, dx
cmp eax, ecx
jle 0x4c96fb
movsx ecx, si
add ecx, 0xf0
movsx eax, dx
cmp eax, ecx
jge 0x4c96fb
mov eax, dword [ebp - 0x15c]
mov ecx, dword [ebp + 0xc]
movsx edx, ax
movsx ecx, cx
mov dword [ebp - 0x160], edx
lea eax, [edx + 0x8c]
cmp ecx, eax
jl 0x4c96fb
lea eax, [edx + 0x9a]
cmp ecx, eax
jg 0x4c96fb
push str.DRAW_DIALOGBOX_CURRENCY_MENU115
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x46
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x160]
mov ecx, edi
add eax, 0x8c
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0xffffff
lea eax, [ebp - 0x110]
push eax
mov eax, dword [ebp - 0x160]
add eax, 0x8c
push eax
jmp 0x4c977b
push str.DRAW_DIALOGBOX_CURRENCY_MENU115
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov eax, dword [ebp - 0x15c]
mov ecx, 0x5fd3c4
cwde
push 0
push 0x320004
mov dword [ebp - 4], 0x47
lea esi, [eax + 0x8c]
lea eax, [ebp - 0x128]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
mov ecx, dword [ebp - 0x16c]
push eax
movsx eax, cx
mov ecx, edi
push esi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0x320004
lea eax, [ebp - 0x110]
push eax
push esi
mov esi, dword [ebp - 0x16c]
movsx eax, si
mov ecx, edi
add eax, 0x78
push eax
call fcn.0045d450
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [edi + 0x13c690]
push dword [eax + 0x30]
lea eax, [ebp - 0x110]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
mov edx, dword [ebp + 8]
add esp, 0x18
movsx ecx, si
add ecx, 0x1e
movsx eax, dx
cmp eax, ecx
jle 0x4c98a9
movsx ecx, si
add ecx, 0xf0
movsx eax, dx
cmp eax, ecx
jge 0x4c98a9
mov eax, dword [ebp - 0x15c]
mov edi, dword [ebp + 0xc]
movsx edx, ax
movsx ecx, di
mov edi, dword [ebp - 0x180]
mov dword [ebp - 0x160], edx
lea eax, [edx + 0x9b]
cmp ecx, eax
jl 0x4c98a9
lea eax, [edx + 0xa9]
cmp ecx, eax
jg 0x4c98a9
push str.DRAW_DIALOGBOX_CURRENCY_MENU116
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x48
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x160]
mov ecx, edi
add eax, 0x9b
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0xffffff
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
mov eax, dword [ebp - 0x160]
add eax, 0x9b
push eax
movsx eax, si
add eax, 0x78
push eax
call fcn.0045d450
jmp case.default.0x4c84f4
push str.DRAW_DIALOGBOX_CURRENCY_MENU116
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov eax, dword [ebp - 0x15c]
mov ecx, 0x5fd3c4
cwde
push 0
push 0x320004
mov dword [ebp - 4], 0x49
lea esi, [eax + 0x9b]
lea eax, [ebp - 0x128]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
mov ecx, dword [ebp - 0x16c]
push eax
movsx eax, cx
jmp 0x4c9ac9
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [edi + 0x13c690]
add esp, 0xc
mov eax, dword [eax + 0x4c]
mov eax, dword [eax + 0x30]
test eax, eax
jne 0x4c9981
push str.DEF_DETAULTQUESTNAME
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov eax, dword [edi + 0x13c690]
mov ecx, 0x5fd3c4
mov dword [ebp - 4], 0x41
mov eax, dword [eax + 0x4c]
push dword [eax + 4]
lea eax, [ebp - 0x128]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.00411640
jmp 0x4c9999
push dword [eax + 8]
lea eax, [ebp - 0x110]
push 0x5c7a40
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov edx, dword [ebp + 8]
movsx ecx, si
add ecx, 0x1e
movsx eax, dx
cmp eax, ecx
jle 0x4c9a81
movsx ecx, si
add ecx, 0xf0
movsx eax, dx
cmp eax, ecx
jge 0x4c9a81
mov eax, dword [ebp - 0x15c]
mov edi, dword [ebp + 0xc]
movsx edx, ax
movsx ecx, di
mov edi, dword [ebp - 0x180]
mov dword [ebp - 0x160], edx
lea eax, [edx + 0x7d]
cmp ecx, eax
jl 0x4c9a81
lea eax, [edx + 0x8b]
cmp ecx, eax
jg 0x4c9a81
push str.DRAW_DIALOGBOX_CURRENCY_MENU118
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x42
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x160]
mov ecx, edi
add eax, 0x7d
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0xffffff
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
mov eax, dword [ebp - 0x160]
add eax, 0x7d
push eax
movsx eax, si
add eax, 0x78
push eax
call fcn.0045d450
jmp case.default.0x4c84f4
push str.DRAW_DIALOGBOX_CURRENCY_MENU118
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov eax, dword [ebp - 0x15c]
mov ecx, 0x5fd3c4
cwde
push 0
push 0x320004
mov dword [ebp - 4], 0x43
lea esi, [eax + 0x7d]
lea eax, [ebp - 0x128]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x16c]
cwde
push esi
add eax, 0x19
mov ecx, edi
push eax
call fcn.0045d450
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0x320004
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
mov eax, dword [ebp - 0x16c]
cwde
push esi
add eax, 0x78
push eax
call fcn.0045d450
jmp case.default.0x4c84f4
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [edi + 0x13c690]
add esp, 0xc
mov eax, dword [eax + 8]
add eax, 6
cmp eax, 5
ja case.default.0x4c9b38
jmp dword [eax*4 + 0x4cd258]
push str.DRAW_DIALOGBOX_CURRENCY_MENU13
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov dword [ebp - 4], 0x1f
jmp 0x4c9bef
push str.DRAW_DIALOGBOX_CURRENCY_MENU14
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov dword [ebp - 4], 0x20
jmp 0x4c9bef
push str.DRAW_DIALOGBOX_CURRENCY_MENU15
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov dword [ebp - 4], 0x21
jmp 0x4c9bef
push str.DRAW_DIALOGBOX_CURRENCY_MENU16
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov dword [ebp - 4], 0x22
jmp 0x4c9bef
push str.DRAW_DIALOGBOX_CURRENCY_MENU17
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov dword [ebp - 4], 0x23
jmp 0x4c9bef
push str.DRAW_DIALOGBOX_CURRENCY_MENU18
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov dword [ebp - 4], 0x24
jmp 0x4c9bef
push str.DRAW_DIALOGBOX_CURRENCY_MENU46
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov dword [ebp - 4], 0x25
lea eax, [ebp - 0x128]
mov ecx, 0x5fd3c4
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004994b0
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.00411640
mov edx, dword [ebp + 8]
movsx ecx, si
add ecx, 0x1e
movsx eax, dx
cmp eax, ecx
jle 0x4c9ce5
movsx ecx, si
add ecx, 0xf0
movsx eax, dx
cmp eax, ecx
jge 0x4c9ce5
mov eax, dword [ebp - 0x15c]
mov edi, dword [ebp + 0xc]
movsx edx, ax
movsx ecx, di
mov edi, dword [ebp - 0x180]
lea eax, [edx + 0x7d]
mov dword [ebp - 0x174], eax
cmp ecx, eax
jl 0x4c9ce5
mov eax, dword [ebp + 0xc]
lea ecx, [edx + 0x8b]
cwde
cmp eax, ecx
jg 0x4c9ce5
push str.DRAW_DIALOGBOX_CURRENCY_MENU47
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x26
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x174]
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, 0xffffff
jmp 0x4c9d57
push str.DRAW_DIALOGBOX_CURRENCY_MENU47
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov eax, dword [ebp - 0x15c]
mov ecx, 0x5fd3c4
cwde
add eax, 0x7d
mov dword [ebp - 4], 0x27
push 0
mov dword [ebp - 0x174], eax
lea eax, [ebp - 0x128]
push 0x320004
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x174]
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, 0x320004
push 0
push eax
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
push dword [ebp - 0x174]
movsx eax, si
add eax, 0x78
push eax
call fcn.0045d450
mov eax, dword [edi + 0x13c690]
mov dword [ebp - 0x170], 5
cmp dword [eax + 8], 0
jl 0x4c9e44
mov edx, dword [eax + 0x48]
lea ecx, [edx + 4]
lea eax, [ecx + 1]
mov dword [ebp - 0x194], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4c9da0
sub ecx, dword [ebp - 0x194]
je 0x4c9e3a
push 0
push edx
mov ecx, edi
call fcn.0052fab0
mov eax, dword [edi + 0x13c690]
mov ecx, edi
push 0
push dword [eax + 0x48]
mov eax, dword [ebp - 0x15c]
add eax, 0xb9
push eax
lea eax, [esi + 0x78]
push eax
call fcn.0052f730
mov edx, dword [ebp + 8]
movsx ecx, si
add ecx, 0x4b
movsx eax, dx
cmp eax, ecx
jl 0x4c9e3a
movsx ecx, si
add ecx, 0xaf
movsx eax, dx
cmp eax, ecx
jge 0x4c9e3a
mov eax, dword [ebp - 0x15c]
movsx ecx, ax
mov eax, dword [ebp + 0xc]
movsx edx, ax
lea eax, [ecx + 0x9b]
cmp edx, eax
jl 0x4c9e3a
lea eax, [ecx + 0xe5]
mov dword [ebp - 0x194], 0xfffffffe
or ecx, 0xffffffff
cmp edx, eax
cmovle ecx, dword [ebp - 0x194]
mov dword [ebp - 0x18c], ecx
mov dword [ebp - 0x170], 0xb
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov edx, dword [edi + 0x13c690]
add esp, 0xc
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
mov ecx, dword [edx + 0x24]
cmp ecx, 0xffffffff
je 0x4c9e9e
mov edx, dword [edx + 0x28]
cmp edx, 0xffffffff
je 0x4c9e8a
push edx
push ecx
lea ecx, [ebp - 0x110]
push str._d_d
push ecx
call eax
add esp, 0x10
jmp 0x4c9eb2
push ecx
lea ecx, [ebp - 0x110]
push 0x5c813c
push ecx
call eax
add esp, 0xc
jmp 0x4c9eb2
lea eax, [ebp - 0x110]
push 0x5d93c8
push eax
call fcn.004994b0
add esp, 8
mov edx, dword [ebp + 8]
movsx ecx, si
add ecx, 0x1e
movsx eax, dx
mov dword [ebp - 0x174], 1
mov dword [ebp - 0x184], 0xa
cmp eax, ecx
jle 0x4ca075
movsx ecx, si
add ecx, 0xf0
movsx eax, dx
cmp eax, ecx
jge 0x4ca075
mov eax, dword [ebp - 0x15c]
mov ecx, dword [ebp - 0x170]
mov edx, dword [ebp + 0xc]
cwde
shl ecx, 4
sub ecx, dword [ebp - 0x170]
mov dword [ebp - 0x194], eax
add eax, 0x41
add eax, ecx
movsx edx, dx
mov dword [ebp - 0x160], eax
cmp edx, eax
jl 0x4ca075
mov eax, dword [ebp - 0x194]
add eax, 0x4f
add eax, ecx
cmp edx, eax
jg 0x4ca075
push str.DRAW_DIALOGBOX_CURRENCY_MENU19
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x28
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x160]
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0xffffff
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
push dword [ebp - 0x160]
movsx eax, si
add eax, 0x78
push eax
call fcn.0045d450
cmp word [ebp + 0x10], 0
je 0x4ca10f
push 0x12
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
mov cl, byte [edi + 0x1895fb]
test ax, ax
movsx edx, word [ebp + 0x10]
mov eax, dword [ebp - 0x174]
mov byte [ebp - 0x165], cl
mov ecx, dword [edi + 0x13c690]
js 0x4ca02f
cmp byte [ebp - 0x165], 0
cmovne eax, dword [ebp - 0x184]
imul eax, edx
add dword [ecx + 0x24], eax
mov eax, dword [edi + 0x13c690]
mov ecx, dword [eax + 0x24]
cmp ecx, 0x77359400
jle 0x4ca01a
mov dword [eax + 0x24], 0x77359400
jmp 0x4ca10f
cmp ecx, 1
jge 0x4ca10f
mov dword [eax + 0x24], 1
jmp 0x4ca10f
cmp byte [ebp - 0x165], 0
cmovne eax, dword [ebp - 0x184]
imul eax, edx
add dword [ecx + 0x28], eax
mov eax, dword [edi + 0x13c690]
mov ecx, dword [eax + 0x28]
cmp ecx, 0x77359400
jle 0x4ca060
mov dword [eax + 0x28], 0x77359400
jmp 0x4ca10f
cmp ecx, 1
jge 0x4ca10f
mov dword [eax + 0x28], 0xffffffff
jmp 0x4ca10f
push str.DRAW_DIALOGBOX_CURRENCY_MENU19
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov eax, dword [ebp - 0x15c]
mov ecx, dword [ebp - 0x170]
cwde
shl ecx, 4
sub ecx, dword [ebp - 0x170]
push 0
lea esi, [eax + 0x41]
mov dword [ebp - 4], 0x29
push 0x320004
lea eax, [ebp - 0x128]
add esi, ecx
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x16c]
mov ecx, edi
cwde
push esi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0x320004
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
push esi
mov esi, dword [ebp - 0x16c]
movsx eax, si
add eax, 0x78
push eax
call fcn.0045d450
mov eax, dword [edi + 0x13c690]
cmp dword [eax + 8], 0
jl 0x4cad70
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [edi + 0x13c690]
add esp, 0xc
mov eax, dword [eax + 0x2c]
and eax, 0xf
dec eax
cmp eax, 3
ja case.default.0x4ca14b
jmp dword [eax*4 + 0x4cd270]
push str.DRAW_DIALOGBOX_CURRENCY_MENU29
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov dword [ebp - 4], 0x2a
jmp 0x4ca1b4
push str.DRAW_DIALOGBOX_CURRENCY_MENU30
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov dword [ebp - 4], 0x2b
jmp 0x4ca1b4
push str.DRAW_DIALOGBOX_CURRENCY_MENU31
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov dword [ebp - 4], 0x2c
jmp 0x4ca1b4
push str.DRAW_DIALOGBOX_CURRENCY_MENU121
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov dword [ebp - 4], 0x2d
lea eax, [ebp - 0x128]
mov ecx, 0x5fd3c4
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.00499470
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.00411640
mov eax, dword [edi + 0x13c690]
mov eax, dword [eax + 0x2c]
sar eax, 4
and eax, 0xf
sub eax, 1
je 0x4ca26a
sub eax, 1
je 0x4ca23d
sub eax, 1
jne 0x4ca2cf
lea eax, [ebp - 0x110]
push 0x5c4a20
push eax
call fcn.00499470
add esp, 8
lea ecx, [ebp - 0x128]
push str.DRAW_DIALOGBOX_CURRENCY_MENU38
call fcn.0040f9f0
mov dword [ebp - 4], 0x30
jmp 0x4ca295
lea eax, [ebp - 0x110]
push 0x5c4a20
push eax
call fcn.00499470
add esp, 8
lea ecx, [ebp - 0x128]
push str.DRAW_DIALOGBOX_CURRENCY_MENU35
call fcn.0040f9f0
mov dword [ebp - 4], 0x2f
jmp 0x4ca295
lea eax, [ebp - 0x110]
push 0x5c4a20
push eax
call fcn.00499470
add esp, 8
lea ecx, [ebp - 0x128]
push str.DRAW_DIALOGBOX_CURRENCY_MENU32
call fcn.0040f9f0
mov dword [ebp - 4], 0x2e
lea eax, [ebp - 0x128]
mov ecx, 0x5fd3c4
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.00499470
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.00411640
mov edx, dword [ebp + 8]
movsx ecx, si
add ecx, 0x1e
movsx eax, dx
cmp eax, ecx
jle 0x4ca3b4
movsx ecx, si
add ecx, 0xf0
movsx eax, dx
cmp eax, ecx
jge 0x4ca3b4
mov eax, dword [ebp - 0x15c]
mov ecx, dword [ebp - 0x170]
mov edx, dword [ebp + 0xc]
cwde
shl ecx, 4
sub ecx, dword [ebp - 0x170]
mov dword [ebp - 0x194], eax
add eax, 0x50
add eax, ecx
movsx edx, dx
mov dword [ebp - 0x160], eax
cmp edx, eax
jl 0x4ca3b4
mov eax, dword [ebp - 0x194]
add eax, 0x5e
add eax, ecx
cmp edx, eax
jg 0x4ca3b4
push str.DRAW_DIALOGBOX_CURRENCY_MENU28
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x31
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x160]
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0xffffff
lea eax, [ebp - 0x110]
push eax
push dword [ebp - 0x160]
movsx eax, si
jmp 0x4ca441
push str.DRAW_DIALOGBOX_CURRENCY_MENU28
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov eax, dword [ebp - 0x15c]
mov ecx, dword [ebp - 0x170]
cwde
shl ecx, 4
sub ecx, dword [ebp - 0x170]
push 0
lea esi, [eax + 0x50]
mov dword [ebp - 4], 0x32
push 0x320004
lea eax, [ebp - 0x128]
add esi, ecx
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x16c]
mov ecx, edi
cwde
push esi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0x320004
lea eax, [ebp - 0x110]
push eax
mov eax, dword [ebp - 0x16c]
push esi
cwde
add eax, 0x78
mov ecx, edi
push eax
call fcn.0045d450
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov ecx, dword [edi + 0x13c690]
add esp, 0xc
mov eax, dword [ecx + 0x2c]
sar eax, 4
and eax, 0xf
sub eax, 1
je 0x4ca5eb
sub eax, 1
je 0x4ca498
lea eax, [ebp - 0x110]
push 0x5d93c8
push eax
call fcn.004994b0
add esp, 8
jmp 0x4ca803
mov edi, dword [ecx + 0x34]
mov eax, edi
cdq
mov ecx, 0x5a0
idiv ecx
movzx esi, ax
mov ecx, edx
mov eax, esi
mov dword [ebp - 0x160], eax
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
movzx ecx, cx
mov eax, ecx
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x1a0], eax
mov eax, edi
mov edi, 0x3c
cdq
idiv edi
movzx edi, dx
test si, si
je 0x4ca53f
push str.DRAW_DIALOGBOX_CURRENCY_MENU42
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov eax, dword [ebp - 0x194]
mov ecx, 0x5fd3c4
movzx eax, ax
push edi
push eax
mov eax, esi
mov dword [ebp - 4], 0x36
movzx eax, ax
push eax
lea eax, [ebp - 0x128]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
call eax
add esp, 0x14
jmp 0x4ca5ce
test cx, cx
lea ecx, [ebp - 0x128]
je 0x4ca592
push str.DRAW_DIALOGBOX_CURRENCY_MENU43
call fcn.0040f9f0
mov eax, dword [ebp - 0x1a0]
mov ecx, 0x5fd3c4
push edi
movzx eax, ax
push eax
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x37
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
call eax
add esp, 0x10
jmp 0x4ca5ce
push str.DRAW_DIALOGBOX_CURRENCY_MENU44
call fcn.0040f9f0
push edi
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x38
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
call eax
add esp, 0xc
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov edi, dword [ebp - 0x180]
jmp 0x4ca803
cmp byte [ecx + 0x44], 0
mov eax, dword [ecx + 0x34]
mov dword [ebp - 0x160], eax
cdq
je 0x4ca69f
mov esi, 0x5f5e100
idiv esi
mov edi, eax
mov esi, edx
mov eax, dword [ecx + 0x34]
mov ecx, 0x64
cdq
idiv ecx
mov eax, dword [ebp - 0x160]
movzx ecx, dx
cdq
push ecx
mov ecx, 0x2710
idiv ecx
mov eax, 0x51eb851f
imul edx
mov eax, dword [ebp - 0x160]
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
cdq
movzx ecx, cx
push ecx
mov ecx, 0xf4240
idiv ecx
mov eax, 0x68db8bad
imul edx
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
movzx eax, ax
push eax
mov eax, 0x431bde83
imul esi
sar edx, 0x12
mov eax, edx
shr eax, 0x1f
add eax, edx
movzx eax, ax
push eax
lea eax, [edi + 0x7da]
movzx eax, ax
push eax
lea eax, [ebp - 0x110]
push str._04d__02d__02d__02d:_02d
push eax
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
call eax
mov edi, dword [ebp - 0x180]
add esp, 0x1c
jmp 0x4ca803
mov ecx, 0x5a0
mov dword [ebp - 0x194], 0x3c
idiv ecx
movzx esi, ax
mov ecx, edx
mov eax, esi
mov dword [ebp - 0x188], eax
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
movzx ecx, ax
mov eax, ecx
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x178], eax
mov eax, dword [ebp - 0x160]
cdq
idiv dword [ebp - 0x194]
movzx eax, dx
mov dword [ebp - 0x160], eax
test si, si
je 0x4ca758
push str.DRAW_DIALOGBOX_CURRENCY_MENU42
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
push dword [ebp - 0x160]
mov eax, dword [ebp - 0x1a0]
mov ecx, 0x5fd3c4
movzx eax, ax
push eax
mov eax, esi
mov dword [ebp - 4], 0x33
movzx eax, ax
push eax
lea eax, [ebp - 0x128]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
call eax
add esp, 0x14
jmp 0x4ca7f1
test cx, cx
lea ecx, [ebp - 0x128]
je 0x4ca7b0
push str.DRAW_DIALOGBOX_CURRENCY_MENU43
call fcn.0040f9f0
push dword [ebp - 0x160]
mov eax, dword [ebp - 0x178]
mov ecx, 0x5fd3c4
movzx eax, ax
push eax
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x34
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
call eax
add esp, 0x10
jmp 0x4ca7f1
push str.DRAW_DIALOGBOX_CURRENCY_MENU44
call fcn.0040f9f0
push dword [ebp - 0x160]
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x35
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
call eax
add esp, 0xc
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov esi, dword [ebp - 0x16c]
mov edx, dword [ebp + 8]
movsx ecx, si
add ecx, 0x1e
movsx eax, dx
cmp eax, ecx
jle 0x4cab32
movsx ecx, si
movsx eax, dx
add ecx, 0xf0
mov edx, dword [ebp - 0x170]
cmp eax, ecx
jge 0x4cab38
lea eax, [edx + 2]
mov ecx, eax
shl ecx, 4
sub ecx, eax
mov dword [ebp - 0x160], ecx
mov eax, ecx
mov ecx, dword [ebp - 0x15c]
movsx esi, cx
mov dword [ebp - 0x178], esi
lea edi, [eax + 0x41]
add edi, esi
mov esi, dword [ebp + 0xc]
movsx esi, si
cmp esi, edi
mov dword [ebp - 0x1a0], edi
mov edi, dword [ebp - 0x180]
mov dword [ebp - 0x194], esi
mov esi, dword [ebp - 0x16c]
jl 0x4cab3e
mov esi, dword [ebp - 0x178]
add esi, 0x4f
add eax, esi
mov esi, dword [ebp - 0x16c]
cmp dword [ebp - 0x194], eax
jg 0x4cab3e
mov edx, dword [edi + 0x13c690]
mov eax, dword [edx + 0x2c]
sar eax, 4
and eax, 0xf
sub eax, 1
je 0x4ca976
sub eax, 1
jne 0x4ca907
mov ax, word [ebp + 0x10]
test ax, ax
je 0x4ca907
cmp byte [edi + 0x1895fb], 0
mov ecx, dword [ebp - 0x174]
cmovne ecx, dword [ebp - 0x184]
cwde
imul ecx, eax
add dword [edx + 0x34], ecx
mov eax, dword [edi + 0x13c690]
mov ecx, dword [eax + 0x34]
cmp ecx, 0x77359400
jle 0x4ca8fb
mov dword [eax + 0x34], 0x77359400
jmp 0x4ca907
cmp ecx, 1
jge 0x4ca907
mov dword [eax + 0x34], 1
push str.DRAW_DIALOGBOX_CURRENCY_MENU41
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x3b
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
mov ecx, dword [ebp - 0x160]
push eax
mov eax, dword [ebp - 0x15c]
add ecx, 0x41
cwde
add eax, ecx
mov ecx, edi
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
jmp 0x4caaf5
movsx eax, si
lea ecx, [ebp - 0x128]
add eax, 0x19
cmp byte [edx + 0x44], 0
mov dword [ebp - 0x160], eax
je 0x4caa4f
push str.DRAW_DIALOGBOX_CURRENCY_MENU101
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x39
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x1a0]
mov ecx, edi
push dword [ebp - 0x160]
call fcn.0045d450
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
cmp word [ebp + 0x10], 0
je 0x4caaf5
cmp byte [edi + 0x1895fb], 0
je 0x4caa31
cmp byte [edi + 0x1895fd], 0
je 0x4caa25
push 0x12
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
mov ecx, 0xffffd8f0
sar eax, 0xf
and eax, 0xf1b30
sub ecx, eax
lea edx, [eax + 0x2710]
jmp 0x4caa39
mov edx, 0x64
mov ecx, 0xffffff9c
jmp 0x4caa39
mov edx, 1
or ecx, 0xffffffff
cmp word [ebp + 0x10], 0
mov eax, dword [edi + 0x13c690]
cmovg ecx, edx
add dword [eax + 0x34], ecx
jmp 0x4caacf
push str.DRAW_DIALOGBOX_CURRENCY_MENU41
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x3a
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x1a0]
mov ecx, edi
push dword [ebp - 0x160]
call fcn.0045d450
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov ax, word [ebp + 0x10]
test ax, ax
je 0x4caaf5
cmp byte [edi + 0x1895fb], 0
mov edx, dword [ebp - 0x174]
cmovne edx, dword [ebp - 0x184]
mov ecx, dword [edi + 0x13c690]
cwde
imul edx, eax
add dword [ecx + 0x34], edx
mov eax, dword [edi + 0x13c690]
mov ecx, dword [eax + 0x34]
cmp ecx, 0x77359400
jle 0x4caae9
mov dword [eax + 0x34], 0x77359400
jmp 0x4caaf5
cmp ecx, 1
jge 0x4caaf5
mov dword [eax + 0x34], 1
mov ecx, dword [ebp - 0x170]
lea eax, [ebp - 0x110]
push 0
push 0xffffff
push eax
mov eax, dword [ebp - 0x15c]
cwde
shl ecx, 4
add eax, 0x5f
sub ecx, dword [ebp - 0x170]
add eax, ecx
mov ecx, edi
push eax
movsx eax, si
add eax, 0x78
push eax
call fcn.0045d450
jmp 0x4cac75
mov edx, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x15c]
movsx eax, cx
mov dword [ebp - 0x1a0], eax
movsx eax, si
mov dword [ebp - 0x160], eax
lea eax, [edx + 2]
mov edx, dword [edi + 0x13c690]
mov ecx, eax
shl ecx, 4
sub ecx, eax
mov dword [ebp - 0x178], ecx
mov eax, dword [edx + 0x2c]
sar eax, 4
and eax, 0xf
sub eax, 1
je 0x4caba4
push str.DRAW_DIALOGBOX_CURRENCY_MENU41
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov ecx, dword [ebp - 0x1a0]
mov eax, dword [ebp - 0x178]
add ecx, 0x41
add eax, ecx
mov dword [ebp - 4], 0x3e
mov dword [ebp - 0x180], eax
jmp 0x4cabe5
mov eax, dword [ebp - 0x1a0]
add eax, 0x41
add eax, ecx
cmp byte [edx + 0x44], 0
mov dword [ebp - 0x180], eax
lea ecx, [ebp - 0x128]
je 0x4cabd4
push str.DRAW_DIALOGBOX_CURRENCY_MENU101
call fcn.0040f9f0
mov dword [ebp - 4], 0x3c
jmp 0x4cabe5
push str.DRAW_DIALOGBOX_CURRENCY_MENU41
call fcn.0040f9f0
mov dword [ebp - 4], 0x3d
push 0
push 0x320004
lea eax, [ebp - 0x128]
mov ecx, 0x5fd3c4
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x160]
mov ecx, edi
push dword [ebp - 0x180]
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, dword [ebp - 0x180]
lea ecx, [ebp - 0x110]
push 0
push 0x320004
push ecx
push eax
movsx eax, si
mov ecx, edi
add eax, 0x78
push eax
call fcn.0045d450
mov edx, dword [ebp + 8]
movsx ecx, si
add ecx, 0x1e
movsx eax, dx
cmp eax, ecx
jle 0x4cacf0
movsx ecx, si
add ecx, 0xf0
movsx eax, dx
cmp eax, ecx
jge 0x4cacf0
mov ecx, dword [ebp - 0x170]
mov eax, dword [ebp - 0x15c]
mov edx, dword [ebp + 0xc]
shl ecx, 4
sub ecx, dword [ebp - 0x170]
cwde
add ecx, eax
movsx edx, dx
lea eax, [ecx + 0x6e]
mov dword [ebp - 0x178], eax
cmp edx, eax
jl 0x4cacf0
lea eax, [ecx + 0x7c]
cmp edx, eax
jg 0x4cacf0
push str.DRAW_DIALOGBOX_CURRENCY_MENU7
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
push 0
push 0xff
push 0xff
push 0xff
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x3f
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x178]
jmp 0x4cad44
push str.DRAW_DIALOGBOX_CURRENCY_MENU7
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
push 0
push 0x32
push 0
push 4
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x40
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
mov ecx, dword [ebp - 0x170]
push eax
mov eax, dword [ebp - 0x15c]
shl ecx, 4
sub ecx, dword [ebp - 0x170]
cwde
add eax, 0x6e
add eax, ecx
push eax
mov eax, dword [ebp - 0x19c]
movsx ecx, ax
movsx eax, si
add ecx, eax
movsx eax, si
push ecx
push eax
mov ecx, edi
call fcn.0045d060
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
cmp dword [ebp - 0x18c], 0xfffffffe
jne case.default.0x4c84f4
mov eax, dword [edi + 0x13c690]
mov ecx, edi
push 0
push dword [eax + 0x48]
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.0047daf0
jmp case.default.0x4c84f4
push 0x1d
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push str.DRAW_DIALOGBOX_CURRENCY_MENU5
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x114], 0
movups xmmword [ebp - 0x128], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x4a
push eax
lea eax, [ebp - 0x164]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x4cadf6
mov ecx, dword [ecx]
mov eax, dword [ebp - 0x15c]
push 0
cwde
push 0xc8
push 0xc8
push 0xdc
lea edx, [eax + 0x2d]
movsx eax, si
push ecx
add eax, 0xf0
mov dword [ebp - 0x178], edx
mov dword [ebp - 0x18c], eax
mov ecx, edi
push edx
push dword [ebp - 0x18c]
movsx eax, si
add eax, 0x19
push eax
mov dword [ebp - 0x194], eax
call fcn.0045d060
mov eax, dword [ebp - 0x114]
mov dword [ebp - 4], 0xffffffff
cmp eax, 0xf
jbe 0x4cae69
push eax
push dword [ebp - 0x128]
lea eax, [ebp - 0x128]
push eax
call fcn.0047d060
add esp, 0xc
push 0x1d
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push str.DRAW_DIALOGBOX_CURRENCY_MENU5
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x114], 0
movups xmmword [ebp - 0x128], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x4b
push eax
lea eax, [ebp - 0x164]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x4caec5
mov eax, dword [eax]
push 0
push 0xc8
push 0xc8
push 0xdc
push eax
push dword [ebp - 0x178]
movsx eax, si
mov ecx, edi
add eax, 0xf1
push eax
movsx eax, si
add eax, 0x1a
push eax
call fcn.0045d060
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
xor ecx, ecx
mov dword [ebp - 0x180], ecx
cmp dword [ebp - 0x188], ecx
jle case.default.0x4c84f4
movsx eax, si
mov dword [ebp - 0x184], eax
mov eax, dword [ebp - 0x15c]
movsx esi, ax
add esi, 0x50
mov dword [ebp - 0x160], esi
nop word [eax + eax]
movsx eax, word [edi + 0x1459b6]
add eax, ecx
cmp eax, dword [ebp - 0x1a0]
jge case.default.0x4c84f4
mov eax, dword [edi + eax*4 + 0x1873a8]
mov dword [ebp - 0x170], eax
test eax, eax
je 0x4cb104
lea edx, [eax + 4]
mov ecx, str.10Arrows
mov dword [ebp - 0x174], edx
mov eax, edx
nop word [eax + eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
mov byte [ebp - 0x165], dl
mov edx, dword [ebp - 0x174]
jne 0x4cafc2
cmp byte [ebp - 0x165], 0
je 0x4cafbe
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
mov byte [ebp - 0x165], dl
mov edx, dword [ebp - 0x174]
jne 0x4cafc2
add eax, 2
add ecx, 2
cmp byte [ebp - 0x165], 0
jne 0x4caf80
xor eax, eax
jmp 0x4cafc7
sbb eax, eax
or eax, 1
test eax, eax
je 0x4cb104
mov ecx, str.100Arrows
mov eax, edx
mov dl, byte [eax]
cmp dl, byte [ecx]
mov byte [ebp - 0x165], dl
mov edx, dword [ebp - 0x174]
jne 0x4cb018
cmp byte [ebp - 0x165], 0
je 0x4cb014
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
mov byte [ebp - 0x165], dl
mov edx, dword [ebp - 0x174]
jne 0x4cb018
add eax, 2
add ecx, 2
cmp byte [ebp - 0x165], 0
jne 0x4cafd6
xor eax, eax
jmp 0x4cb01d
sbb eax, eax
or eax, 1
test eax, eax
je 0x4cb104
mov eax, dword [ebp + 8]
cwde
cmp eax, dword [ebp - 0x194]
jle 0x4cb07c
cmp eax, dword [ebp - 0x18c]
jge 0x4cb07c
mov eax, dword [ebp + 0xc]
movsx ecx, ax
cmp ecx, esi
jl 0x4cb07c
lea eax, [esi + 0xf]
cmp ecx, eax
jge 0x4cb07c
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x184]
add eax, 0x19
push 0
push 0xff
push 0xff
push 0xff
push eax
mov eax, dword [ebp - 0x19c]
cwde
push esi
add eax, ecx
push eax
push ecx
jmp 0x4cb0fd
lea ecx, [edi + 0x1459b8]
mov esi, 0x10
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x4cb09c
add ecx, 4
add edx, 4
sub esi, 4
jae 0x4cb087
xor ecx, ecx
jmp 0x4cb0c3
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x4cb0be
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x4cb0be
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x4cb0be
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
jne 0x4cb0be
xor ecx, ecx
jmp 0x4cb0c3
sbb ecx, ecx
or ecx, 1
mov eax, dword [ebp - 0x19c]
mov edx, dword [ebp - 0x170]
mov esi, dword [ebp - 0x160]
add edx, 0x19
cwde
add eax, dword [ebp - 0x184]
push 0
test ecx, ecx
jne 0x4cb0ee
push ecx
push 0xff
push ecx
jmp 0x4cb0f4
push 0x32
push 0
push 4
push edx
push esi
push eax
push dword [ebp - 0x184]
mov ecx, edi
call fcn.0045d060
mov eax, dword [ebp - 0x180]
add esi, 0xf
inc eax
mov dword [ebp - 0x160], esi
mov ecx, eax
mov dword [ebp - 0x180], eax
cmp eax, dword [ebp - 0x188]
jl 0x4caf40
jmp case.default.0x4c84f4
push 0x1d
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push str.DRAW_DIALOGBOX_CURRENCY_MENU7
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x114], 0
movups xmmword [ebp - 0x128], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x4c
push eax
lea eax, [ebp - 0x198]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x4cb189
mov ecx, dword [ecx]
mov eax, dword [ebp - 0x15c]
push 0
push 0xc8
push 0xc8
cwde
add eax, 0x2d
push 0xdc
push ecx
push eax
mov dword [ebp - 0x178], eax
mov ecx, edi
movsx eax, si
add eax, 0xf0
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d060
mov eax, dword [ebp - 0x114]
mov dword [ebp - 4], 0xffffffff
cmp eax, 0xf
jbe 0x4cb1eb
push eax
push dword [ebp - 0x128]
lea eax, [ebp - 0x128]
push eax
call fcn.0047d060
add esp, 0xc
push 0x1d
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push str.DRAW_DIALOGBOX_CURRENCY_MENU7
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x114], 0
movups xmmword [ebp - 0x128], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x4d
push eax
lea eax, [ebp - 0x198]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x4cb247
mov eax, dword [eax]
push 0
push 0xc8
push 0xc8
push 0xdc
push eax
push dword [ebp - 0x178]
movsx ecx, si
lea eax, [ecx + 0xf1]
push eax
lea eax, [ecx + 0x1a]
mov ecx, edi
push eax
call fcn.0045d060
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov ecx, edi
call fcn.0047cff0
mov edx, dword [edi + 0x14595c]
mov eax, edx
sar eax, 0x10
mov ecx, edx
and eax, 0xf
sar ecx, 0x14
mov dword [ebp - 0x170], eax
and ecx, 0xf
mov eax, edx
mov dword [ebp - 0x178], ecx
sar eax, 0xc
dec ecx
and eax, 0xf
mov dword [ebp - 0x160], eax
mov eax, edx
sar eax, 8
and eax, 0xf
shr edx, 0x1c
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x194], edx
cmp ecx, 0xb
ja case.0x4cb2de.4
jmp dword [ecx*4 + 0x4cd280]
push str.GET_ITEM_INFO3
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov dword [ebp - 4], 0x4e
lea eax, [ebp - 0x128]
mov ecx, 0x5fd3c4
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004994b0
add esp, 8
jmp 0x4cb47d
push str.GET_ITEM_INFO4
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov dword [ebp - 4], 0x4f
jmp 0x4cb2fc
push str.GET_ITEM_INFO5
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov dword [ebp - 4], 0x50
jmp 0x4cb2fc
push str.GET_ITEM_INFO6
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov dword [ebp - 4], 0x51
jmp 0x4cb2fc
push str.GET_ITEM_INFO7
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov dword [ebp - 4], 0x52
jmp 0x4cb2fc
push str.GET_ITEM_INFO8
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov dword [ebp - 4], 0x53
jmp 0x4cb2fc
push str.GET_ITEM_INFO9
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov dword [ebp - 4], 0x54
jmp 0x4cb2fc
push str.GET_ITEM_INFO10
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov dword [ebp - 4], 0x55
jmp 0x4cb2fc
push str.GET_ITEM_INFO11
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov dword [ebp - 4], 0x56
jmp 0x4cb2fc
push str.GET_ITEM_INFO12
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov dword [ebp - 4], 0x57
jmp 0x4cb2fc
push str.GET_ITEM_INFO13
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov dword [ebp - 4], 0x58
jmp 0x4cb2fc
push str.DRAW_DIALOGBOX_CURRENCY_MENU24
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x59
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
cmp dword [eax + 0x14], 0xf
jbe 0x4cb468
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x110]
push 0x100
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
add esp, 0xc
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, dword [ebp + 8]
movsx ecx, ax
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x4cb553
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x4cb553
mov ecx, dword [ebp - 0x15c]
mov edx, dword [ebp + 0xc]
movsx eax, cx
add eax, 0x41
movsx edx, dx
mov dword [ebp - 0x18c], eax
cmp edx, eax
jl 0x4cb553
movsx eax, cx
add eax, 0x4f
cmp edx, eax
jg 0x4cb553
push str.DRAW_DIALOGBOX_CURRENCY_MENU54
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x5a
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x18c]
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0xffffff
lea eax, [ebp - 0x110]
push eax
push dword [ebp - 0x18c]
jmp 0x4cb5fb
push 0x1e
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push str.DRAW_DIALOGBOX_CURRENCY_MENU54
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x114], 0
movups xmmword [ebp - 0x128], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x5b
push eax
lea eax, [ebp - 0x190]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x4cb5af
mov ecx, dword [ecx]
mov eax, dword [ebp - 0x15c]
cwde
push 0
push 0x320004
push ecx
lea esi, [eax + 0x41]
mov ecx, edi
mov eax, dword [ebp - 0x16c]
cwde
push esi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0x320004
lea eax, [ebp - 0x110]
push eax
push esi
mov esi, dword [ebp - 0x16c]
movsx eax, si
mov ecx, edi
add eax, 0x8c
push eax
call fcn.0045d450
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x178]
add esp, 0xc
mov edx, dword [sym.imp.USER32.dll_wsprintfA]
dec eax
cmp eax, 0xb
ja case.0x4cb637.3
jmp dword [eax*4 + 0x4cd2b0]
mov ecx, dword [ebp - 0x170]
lea eax, [ebp - 0x110]
push ecx
push ecx
push str._d___d_
push eax
call edx
add esp, 0x10
jmp 0x4cb730
mov ecx, dword [ebp - 0x170]
lea eax, [ecx + ecx*4]
push eax
push ecx
lea eax, [ebp - 0x110]
push str._d___d_
push eax
call edx
add esp, 0x10
jmp 0x4cb730
mov ecx, dword [ebp - 0x170]
lea eax, [ecx*4]
push eax
push ecx
lea eax, [ebp - 0x110]
push str._d___d___
push eax
call edx
add esp, 0x10
jmp 0x4cb730
mov ecx, dword [ebp - 0x170]
lea eax, [ecx*8]
sub eax, ecx
jmp 0x4cb68a
mov ecx, dword [ebp - 0x170]
lea eax, [ecx + ecx*2]
jmp 0x4cb68a
mov ecx, dword [ebp - 0x170]
lea eax, [ebp - 0x110]
push ecx
push ecx
push str._d___d___
push eax
call edx
add esp, 0x10
jmp 0x4cb730
push str.DRAW_DIALOGBOX_CURRENCY_MENU24
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x5c
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
cmp dword [eax + 0x14], 0xf
jbe 0x4cb709
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x110]
push 0x100
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.00411640
mov edx, dword [ebp + 8]
movsx ecx, si
add ecx, 0x1e
movsx eax, dx
cmp eax, ecx
jle 0x4cb7fd
movsx ecx, si
add ecx, 0xf0
movsx eax, dx
cmp eax, ecx
jge 0x4cb7fd
mov eax, dword [ebp - 0x15c]
mov edx, dword [ebp + 0xc]
movsx ecx, ax
movsx edx, dx
mov dword [ebp - 0x18c], ecx
lea eax, [ecx + 0x50]
cmp edx, eax
jl 0x4cb7fd
lea eax, [ecx + 0x5e]
cmp edx, eax
jg 0x4cb7fd
push str.DRAW_DIALOGBOX_CURRENCY_MENU55
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x5d
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x18c]
mov ecx, edi
add eax, 0x50
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0xffffff
lea eax, [ebp - 0x110]
push eax
mov eax, dword [ebp - 0x18c]
add eax, 0x50
push eax
jmp 0x4cb8a5
push 0x1e
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push str.DRAW_DIALOGBOX_CURRENCY_MENU55
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x114], 0
movups xmmword [ebp - 0x128], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x5e
push eax
lea eax, [ebp - 0x17c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x4cb859
mov ecx, dword [ecx]
mov eax, dword [ebp - 0x15c]
cwde
push 0
push 0x320004
push ecx
lea esi, [eax + 0x50]
mov ecx, edi
mov eax, dword [ebp - 0x16c]
cwde
push esi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0x320004
lea eax, [ebp - 0x110]
push eax
push esi
mov esi, dword [ebp - 0x16c]
movsx eax, si
mov ecx, edi
add eax, 0x8c
push eax
call fcn.0045d450
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x160]
add esp, 0xc
dec eax
cmp eax, 0xb
ja case.default.0x4cb8db
jmp dword [eax*4 + 0x4cd2e0]
push str.GET_ITEM_INFO24
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
lea eax, [ebp - 0x140]
mov dword [ebp - 4], 0x5f
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4cb914
sub eax, edx
lea ecx, [ebp - 0x128]
push str.GET_ITEM_INFO24
mov dword [ebp - 0x178], eax
call fcn.0040f9f0
mov eax, dword [ebp - 0x178]
mov ecx, 0x5fd3c4
add eax, 0xfffffffb
mov byte [ebp - 4], 0x60
push eax
lea eax, [ebp - 0x128]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
lea ecx, [ebp - 0x128]
call fcn.00411640
jmp 0x4cbe89
push str.GET_ITEM_INFO25
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x61
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
lea edx, [eax + 1]
nop dword [eax + eax]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4cb9b0
sub eax, edx
lea ecx, [ebp - 0x140]
push str.GET_ITEM_INFO25
mov dword [ebp - 0x178], eax
call fcn.0040f9f0
mov eax, dword [ebp - 0x178]
mov byte [ebp - 4], 0x62
add eax, 0xfffffffd
push eax
lea eax, [ebp - 0x140]
mov ecx, 0x5fd3c4
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
lea ecx, [ebp - 0x140]
call fcn.00411640
lea ecx, [ebp - 0x128]
jmp 0x4cbe8f
push str.GET_ITEM_INFO26
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x63
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
lea edx, [eax + 1]
nop dword [eax]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4cba50
sub eax, edx
lea ecx, [ebp - 0x140]
push str.GET_ITEM_INFO26
mov dword [ebp - 0x178], eax
call fcn.0040f9f0
mov eax, dword [ebp - 0x178]
mov ecx, 0x5fd3c4
add eax, 0xfffffffd
mov byte [ebp - 4], 0x64
push eax
lea eax, [ebp - 0x140]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
lea ecx, [ebp - 0x140]
call fcn.00411640
lea ecx, [ebp - 0x128]
jmp 0x4cbe8f
push str.GET_ITEM_INFO27
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x65
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
lea edx, [eax + 1]
nop dword [eax]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4cbaf0
sub eax, edx
lea ecx, [ebp - 0x140]
push str.GET_ITEM_INFO27
mov dword [ebp - 0x178], eax
call fcn.0040f9f0
mov eax, dword [ebp - 0x178]
mov byte [ebp - 4], 0x66
add eax, 0xfffffffb
jmp 0x4cb9dc
push str.GET_ITEM_INFO28
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x67
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4cbb53
sub eax, edx
lea ecx, [ebp - 0x140]
push str.GET_ITEM_INFO28
mov dword [ebp - 0x178], eax
call fcn.0040f9f0
mov eax, dword [ebp - 0x178]
mov byte [ebp - 4], 0x68
add eax, 0xfffffffb
jmp 0x4cb9dc
push str.GET_ITEM_INFO29
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x69
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4cbbb6
sub eax, edx
lea ecx, [ebp - 0x140]
push str.GET_ITEM_INFO29
mov dword [ebp - 0x178], eax
call fcn.0040f9f0
mov eax, dword [ebp - 0x178]
mov byte [ebp - 4], 0x6a
add eax, 0xfffffffb
jmp 0x4cb9dc
push str.GET_ITEM_INFO30
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x6b
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
lea edx, [eax + 1]
nop dword [eax]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4cbc20
sub eax, edx
lea ecx, [ebp - 0x140]
push str.GET_ITEM_INFO30
mov dword [ebp - 0x178], eax
call fcn.0040f9f0
mov eax, dword [ebp - 0x178]
mov byte [ebp - 4], 0x6c
add eax, 0xfffffffb
jmp 0x4cb9dc
push str.GET_ITEM_INFO31
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x6d
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4cbc83
sub eax, edx
lea ecx, [ebp - 0x140]
push str.GET_ITEM_INFO31
mov dword [ebp - 0x178], eax
call fcn.0040f9f0
mov eax, dword [ebp - 0x178]
mov byte [ebp - 4], 0x6e
add eax, 0xfffffffb
jmp 0x4cb9dc
push str.GET_ITEM_INFO32
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x6f
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4cbce6
sub eax, edx
lea ecx, [ebp - 0x140]
push str.GET_ITEM_INFO32
mov dword [ebp - 0x178], eax
call fcn.0040f9f0
mov eax, dword [ebp - 0x178]
mov byte [ebp - 4], 0x70
add eax, 0xfffffffb
jmp 0x4cb9dc
push str.GET_ITEM_INFO33
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x71
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
lea edx, [eax + 1]
nop dword [eax]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4cbd50
sub eax, edx
lea ecx, [ebp - 0x140]
push str.GET_ITEM_INFO33
mov dword [ebp - 0x178], eax
call fcn.0040f9f0
mov eax, dword [ebp - 0x178]
mov byte [ebp - 4], 0x72
jmp 0x4cb9d9
push str.GET_ITEM_INFO34
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x73
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4cbdb0
sub eax, edx
lea ecx, [ebp - 0x140]
push str.GET_ITEM_INFO34
mov dword [ebp - 0x178], eax
call fcn.0040f9f0
mov eax, dword [ebp - 0x178]
mov byte [ebp - 4], 0x74
add eax, 0xfffffffb
jmp 0x4cb9dc
push str.GET_ITEM_INFO35
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x75
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4cbe13
sub eax, edx
lea ecx, [ebp - 0x140]
push str.GET_ITEM_INFO35
mov dword [ebp - 0x178], eax
call fcn.0040f9f0
mov eax, dword [ebp - 0x178]
mov byte [ebp - 4], 0x76
add eax, 0xfffffffb
jmp 0x4cb9dc
push str.DRAW_DIALOGBOX_CURRENCY_MENU24
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
lea eax, [ebp - 0x140]
mov dword [ebp - 4], 0x77
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
cmp dword [eax + 0x14], 0xf
jbe 0x4cbe74
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x110]
push 0x100
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
add esp, 0xc
lea ecx, [ebp - 0x140]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov edx, dword [ebp + 8]
movsx ecx, si
add ecx, 0x1e
movsx eax, dx
cmp eax, ecx
jle 0x4cbf63
movsx ecx, si
add ecx, 0xf0
movsx eax, dx
cmp eax, ecx
jge 0x4cbf63
mov ecx, dword [ebp - 0x15c]
mov edx, dword [ebp + 0xc]
movsx eax, cx
add eax, 0x6e
movsx edx, dx
mov dword [ebp - 0x18c], eax
cmp edx, eax
jl 0x4cbf63
movsx eax, cx
add eax, 0x7c
cmp edx, eax
jg 0x4cbf63
push str.DRAW_DIALOGBOX_CURRENCY_MENU56
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x140]
mov dword [ebp - 4], 0x78
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x18c]
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x140]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0xffffff
lea eax, [ebp - 0x110]
push eax
push dword [ebp - 0x18c]
jmp 0x4cc00b
push 0x1e
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push str.DRAW_DIALOGBOX_CURRENCY_MENU56
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x114], 0
movups xmmword [ebp - 0x128], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x79
push eax
lea eax, [ebp - 0x17c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x4cbfbf
mov ecx, dword [ecx]
mov eax, dword [ebp - 0x15c]
cwde
push 0
push 0x320004
push ecx
lea esi, [eax + 0x6e]
mov ecx, edi
mov eax, dword [ebp - 0x16c]
cwde
push esi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0x320004
lea eax, [ebp - 0x110]
push eax
push esi
mov esi, dword [ebp - 0x16c]
movsx eax, si
mov ecx, edi
add eax, 0x8c
push eax
call fcn.0045d450
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x160]
add esp, 0xc
dec eax
cmp eax, 0xb
ja case.default.0x4cc048
movzx eax, byte [eax + 0x4cd324]
jmp dword [eax*4 + 0x4cd310]
mov ecx, dword [ebp - 0x188]
lea eax, [ecx*8]
sub eax, ecx
push eax
push ecx
lea eax, [ebp - 0x110]
push str._d___d_
push eax
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
call eax
add esp, 0x10
jmp 0x4cc136
mov ecx, dword [ebp - 0x188]
lea eax, [ecx*8]
sub eax, ecx
push eax
push ecx
lea eax, [ebp - 0x110]
push str._d___d___
push eax
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
call eax
add esp, 0x10
jmp 0x4cc136
mov ecx, dword [ebp - 0x188]
lea eax, [ecx + ecx*2]
jmp 0x4cc08a
mov ecx, dword [ebp - 0x188]
lea eax, [ebp - 0x110]
push ecx
push ecx
push str._d___d_
push eax
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
call eax
add esp, 0x10
jmp 0x4cc136
mov ecx, dword [ebp - 0x188]
lea eax, [ecx + ecx*4]
add eax, eax
jmp 0x4cc08a
push str.DRAW_DIALOGBOX_CURRENCY_MENU24
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
lea eax, [ebp - 0x140]
mov dword [ebp - 4], 0x7a
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
cmp dword [eax + 0x14], 0xf
jbe 0x4cc10f
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x110]
push 0x100
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x140]
call fcn.00411640
mov edx, dword [ebp + 8]
movsx ecx, si
add ecx, 0x1e
movsx eax, dx
cmp eax, ecx
jle 0x4cc220
movsx ecx, si
add ecx, 0xf0
movsx eax, dx
cmp eax, ecx
jge 0x4cc220
mov eax, dword [ebp - 0x15c]
mov ecx, dword [ebp + 0xc]
movsx edx, ax
movsx ecx, cx
mov dword [ebp - 0x18c], edx
lea eax, [edx + 0x7d]
cmp ecx, eax
jl 0x4cc220
lea eax, [edx + 0x8b]
cmp ecx, eax
jg 0x4cc220
push str.DRAW_DIALOGBOX_CURRENCY_MENU57
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x140]
mov dword [ebp - 4], 0x7b
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x18c]
mov ecx, edi
add eax, 0x7d
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x140]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0xffffff
lea ecx, [ebp - 0x110]
movsx eax, si
push ecx
mov ecx, dword [ebp - 0x18c]
add eax, 0x8c
add ecx, 0x7d
mov dword [ebp - 0x160], eax
push ecx
push eax
mov ecx, edi
call fcn.0045d450
jmp 0x4cc2e4
push 0x1e
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push str.DRAW_DIALOGBOX_CURRENCY_MENU57
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x114], 0
movups xmmword [ebp - 0x128], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x7c
push eax
lea eax, [ebp - 0x17c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x4cc27c
mov ecx, dword [ecx]
mov eax, dword [ebp - 0x15c]
cwde
push 0
push 0x320004
push ecx
lea esi, [eax + 0x7d]
mov ecx, edi
mov eax, dword [ebp - 0x16c]
cwde
push esi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov ecx, dword [ebp - 0x16c]
push 0
movsx eax, cx
lea ecx, [ebp - 0x110]
push 0x320004
push ecx
add eax, 0x8c
mov ecx, edi
push esi
push eax
mov dword [ebp - 0x160], eax
call fcn.0045d450
mov esi, dword [ebp - 0x16c]
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
push dword [ebp - 0x194]
lea eax, [ebp - 0x110]
push 0x5ce70c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
mov edx, dword [ebp + 8]
add esp, 0x18
movsx ecx, si
add ecx, 0x1e
movsx eax, dx
cmp eax, ecx
jle 0x4cc4a2
movsx ecx, si
add ecx, 0xf0
movsx eax, dx
cmp eax, ecx
jge 0x4cc4a2
mov eax, dword [ebp - 0x15c]
mov edi, dword [ebp + 0xc]
movsx edx, ax
movsx ecx, di
mov edi, dword [ebp - 0x180]
mov dword [ebp - 0x18c], edx
lea eax, [edx + 0x9b]
cmp ecx, eax
jl 0x4cc4a2
lea eax, [edx + 0xa9]
cmp ecx, eax
jg 0x4cc4a2
push str.DRAW_DIALOGBOX_CURRENCY_MENU58
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x140]
mov dword [ebp - 4], 0x7d
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x18c]
mov ecx, edi
add eax, 0x9b
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x140]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0xffffff
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
mov eax, dword [ebp - 0x18c]
add eax, 0x9b
push eax
push dword [ebp - 0x160]
call fcn.0045d450
push str.DRAW_DIALOGBOX_CURRENCY_MENU63
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
lea eax, [ebp - 0x140]
mov dword [ebp - 4], 0x7e
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [edi + 0x18a074]
push eax
call fcn.0040eac0
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x140]
call fcn.00411640
push str.DRAW_DIALOGBOX_CURRENCY_MENU64
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
lea eax, [ebp - 0x140]
mov dword [ebp - 4], 0x7f
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [edi + 0x18a200]
push eax
call fcn.0040eac0
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x140]
call fcn.00411640
jmp 0x4cc55a
push 0x1e
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push str.DRAW_DIALOGBOX_CURRENCY_MENU58
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x114], 0
movups xmmword [ebp - 0x128], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x80
push eax
lea eax, [ebp - 0x17c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x4cc4fe
mov ecx, dword [ecx]
mov eax, dword [ebp - 0x15c]
cwde
push 0
push 0x320004
push ecx
lea esi, [eax + 0x9b]
mov ecx, edi
mov eax, dword [ebp - 0x16c]
cwde
push esi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0x320004
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
push esi
push dword [ebp - 0x160]
call fcn.0045d450
mov esi, dword [ebp - 0x16c]
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x140]
test byte [edi + 0x14595c], 1
je 0x4cc592
push str.DRAW_DIALOGBOX_CURRENCY_MENU61
call fcn.0040f9f0
mov dword [ebp - 4], 0x81
jmp 0x4cc5a3
push str.DRAW_DIALOGBOX_CURRENCY_MENU62
call fcn.0040f9f0
mov dword [ebp - 4], 0x82
lea eax, [ebp - 0x140]
mov ecx, 0x5fd3c4
push eax
call fcn.00411e80
cmp dword [eax + 0x14], 0xf
jbe 0x4cc5bc
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x110]
push 0x100
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x140]
call fcn.00411640
mov edx, dword [ebp + 8]
movsx ecx, si
add ecx, 0x1e
movsx eax, dx
cmp eax, ecx
jle 0x4cc6d5
movsx ecx, si
add ecx, 0xf0
movsx eax, dx
cmp eax, ecx
jge 0x4cc6d5
mov eax, dword [ebp - 0x15c]
mov ecx, dword [ebp + 0xc]
movsx edx, ax
movsx ecx, cx
mov dword [ebp - 0x18c], edx
lea eax, [edx + 0xb9]
cmp ecx, eax
jl 0x4cc6d5
lea eax, [edx + 0xc7]
cmp ecx, eax
jg 0x4cc6d5
push str.DRAW_DIALOGBOX_CURRENCY_MENU59
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x140]
mov dword [ebp - 4], 0x83
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x18c]
mov ecx, edi
add eax, 0xb9
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x140]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0xffffff
lea ecx, [ebp - 0x110]
movsx eax, si
push ecx
mov ecx, dword [ebp - 0x18c]
add eax, 0x8c
add ecx, 0xb9
mov dword [ebp - 0x19c], eax
push ecx
push eax
mov ecx, edi
call fcn.0045d450
jmp 0x4cc79c
push 0x1e
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push str.DRAW_DIALOGBOX_CURRENCY_MENU59
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x114], 0
movups xmmword [ebp - 0x128], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x84
push eax
lea eax, [ebp - 0x17c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x4cc731
mov ecx, dword [ecx]
mov eax, dword [ebp - 0x15c]
cwde
push 0
push 0x320004
push ecx
lea esi, [eax + 0xb9]
mov ecx, edi
mov eax, dword [ebp - 0x16c]
cwde
push esi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov ecx, dword [ebp - 0x16c]
push 0
movsx eax, cx
lea ecx, [ebp - 0x110]
push 0x320004
push ecx
add eax, 0x8c
mov ecx, edi
push esi
push eax
mov dword [ebp - 0x19c], eax
call fcn.0045d450
mov esi, dword [ebp - 0x16c]
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
push dword [edi + 0x145960]
lea eax, [ebp - 0x110]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
mov edx, dword [ebp + 8]
add esp, 0x18
movsx ecx, si
add ecx, 0x1e
movsx eax, dx
cmp eax, ecx
jle 0x4cc9eb
movsx ecx, si
add ecx, 0xf0
movsx eax, dx
cmp eax, ecx
jge 0x4cc9eb
mov eax, dword [ebp - 0x15c]
mov edx, dword [ebp + 0xc]
cwde
lea ecx, [eax + 0xd7]
mov dword [ebp - 0x160], ecx
movsx ecx, dx
cmp ecx, dword [ebp - 0x160]
jl 0x4cc9eb
add eax, 0xe5
cmp ecx, eax
jg 0x4cc9eb
push str.DRAW_DIALOGBOX_CURRENCY_MENU60
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x140]
mov dword [ebp - 4], 0x85
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x160]
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x140]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0xffffff
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
push dword [ebp - 0x160]
push dword [ebp - 0x19c]
call fcn.0045d450
push str.DRAW_DIALOGBOX_CURRENCY_MENU65
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
lea eax, [ebp - 0x140]
mov dword [ebp - 4], 0x86
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [edi + 0x18a074]
push eax
call fcn.0040eac0
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x140]
call fcn.00411640
push str.DRAW_DIALOGBOX_CURRENCY_MENU66
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
lea eax, [ebp - 0x140]
mov dword [ebp - 4], 0x87
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [edi + 0x18a200]
push eax
call fcn.0040eac0
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x140]
call fcn.00411640
push str.DRAW_DIALOGBOX_CURRENCY_MENU67
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
lea eax, [ebp - 0x140]
mov dword [ebp - 4], 0x88
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [edi + 0x18a38c]
push eax
call fcn.0040eac0
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x140]
call fcn.00411640
push str.DRAW_DIALOGBOX_CURRENCY_MENU68
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
lea eax, [ebp - 0x140]
mov dword [ebp - 4], 0x89
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [edi + 0x18a518]
push eax
call fcn.0040eac0
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x140]
call fcn.00411640
jmp 0x4ccaa3
push 0x1e
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push str.DRAW_DIALOGBOX_CURRENCY_MENU60
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x114], 0
movups xmmword [ebp - 0x128], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x8a
push eax
lea eax, [ebp - 0x17c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x4cca47
mov ecx, dword [ecx]
mov eax, dword [ebp - 0x15c]
cwde
push 0
push 0x320004
push ecx
lea esi, [eax + 0xd7]
mov ecx, edi
mov eax, dword [ebp - 0x16c]
cwde
push esi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0x320004
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
push esi
push dword [ebp - 0x19c]
call fcn.0045d450
mov esi, dword [ebp - 0x16c]
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [edi + 0x13c690]
add esp, 0xc
mov eax, dword [eax + 0x48]
movsx eax, byte [eax + 0x1a]
sub eax, 7
je 0x4cce6e
sub eax, 1
je 0x4cce6e
sub eax, 1
je 0x4cce6e
mov ecx, dword [edi + 0x145964]
lea eax, [ecx + 1]
cmp eax, 0x24
ja case.default.0x4cce80
jmp dword [eax*4 + 0x4cd330]
push str.DRAW_DIALOGBOX_CURRENCY_MENU100
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
mov dword [ebp - 4], 0x97
jmp 0x4cce9e
push str.DRAW_DIALOGBOX_CURRENCY_MENU24
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
mov dword [ebp - 4], 0x98
jmp 0x4cce9e
push str.DRAW_DIALOGBOX_CURRENCY_MENU70
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
mov dword [ebp - 4], 0x99
jmp 0x4cce9e
push str.DRAW_DIALOGBOX_CURRENCY_MENU71
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
mov dword [ebp - 4], 0x9a
jmp 0x4cce9e
push str.DRAW_DIALOGBOX_CURRENCY_MENU72
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
mov dword [ebp - 4], 0x9b
jmp 0x4cce9e
push str.DRAW_DIALOGBOX_CURRENCY_MENU73
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
mov dword [ebp - 4], 0x9c
jmp 0x4cce9e
push str.DRAW_DIALOGBOX_CURRENCY_MENU74
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
mov dword [ebp - 4], 0x9d
jmp 0x4cce9e
push str.DRAW_DIALOGBOX_CURRENCY_MENU75
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
mov dword [ebp - 4], 0x9e
jmp 0x4cce9e
push str.DRAW_DIALOGBOX_CURRENCY_MENU76
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
mov dword [ebp - 4], 0x9f
jmp 0x4cce9e
push str.DRAW_DIALOGBOX_CURRENCY_MENU77
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
mov dword [ebp - 4], 0xa0
jmp 0x4cce9e
push str.DRAW_DIALOGBOX_CURRENCY_MENU78
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
mov dword [ebp - 4], 0xa1
jmp 0x4cce9e
push str.DRAW_DIALOGBOX_CURRENCY_MENU79
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
mov dword [ebp - 4], 0xa2
jmp 0x4cce9e
push str.DRAW_DIALOGBOX_CURRENCY_MENU80
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
mov dword [ebp - 4], 0xa3
jmp 0x4cce9e
push str.DRAW_DIALOGBOX_CURRENCY_MENU81
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
mov dword [ebp - 4], 0xa4
jmp 0x4cce9e
push str.DRAW_DIALOGBOX_CURRENCY_MENU82
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
mov dword [ebp - 4], 0xa5
jmp 0x4cce9e
push str.DRAW_DIALOGBOX_CURRENCY_MENU83
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
mov dword [ebp - 4], 0xa6
jmp 0x4cce9e
push str.DRAW_DIALOGBOX_CURRENCY_MENU84
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
mov dword [ebp - 4], 0xa7
jmp 0x4cce9e
push str.DRAW_DIALOGBOX_CURRENCY_MENU85
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
mov dword [ebp - 4], 0xa8
jmp 0x4cce9e
push str.DRAW_DIALOGBOX_CURRENCY_MENU86
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
mov dword [ebp - 4], 0xa9
jmp 0x4cce9e
push str.DRAW_DIALOGBOX_CURRENCY_MENU87
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
mov dword [ebp - 4], 0xaa
jmp 0x4cce9e
push str.DRAW_DIALOGBOX_CURRENCY_MENU88
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
mov dword [ebp - 4], 0xab
jmp 0x4cce9e
push str.DRAW_DIALOGBOX_CURRENCY_MENU89
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
mov dword [ebp - 4], 0xac
jmp 0x4cce9e
push str.DRAW_DIALOGBOX_CURRENCY_MENU90
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
mov dword [ebp - 4], 0xad
jmp 0x4cce9e
push str.DRAW_DIALOGBOX_CURRENCY_MENU91
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
mov dword [ebp - 4], 0xae
jmp 0x4cce9e
push str.DRAW_DIALOGBOX_CURRENCY_MENU92
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
mov dword [ebp - 4], 0xaf
jmp 0x4cce9e
push str.DRAW_DIALOGBOX_CURRENCY_MENU93
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
mov dword [ebp - 4], 0xb0
jmp 0x4cce9e
push str.DRAW_DIALOGBOX_CURRENCY_MENU94
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
mov dword [ebp - 4], 0xb1
jmp 0x4cce9e
push str.DRAW_DIALOGBOX_CURRENCY_MENU95
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
mov dword [ebp - 4], 0xb2
jmp 0x4cce9e
push str.DRAW_DIALOGBOX_CURRENCY_MENU96
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
mov dword [ebp - 4], 0xb3
jmp 0x4cce9e
push str.DRAW_DIALOGBOX_CURRENCY_MENU97
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
mov dword [ebp - 4], 0xb4
jmp 0x4cce9e
push str.DRAW_DIALOGBOX_CURRENCY_MENU98
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
mov dword [ebp - 4], 0xb5
jmp 0x4cce9e
push str.DRAW_DIALOGBOX_CURRENCY_MENU99
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
mov dword [ebp - 4], 0xb6
jmp 0x4cce9e
mov ecx, dword [edi + 0x145964]
lea eax, [ecx + 1]
cmp eax, 0xb
ja case.default.0x4cce80
jmp dword [eax*4 + 0x4cd3c4]
push str.DRAW_DIALOGBOX_CURRENCY_MENU100
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
mov dword [ebp - 4], 0x8b
lea eax, [ebp - 0x140]
mov ecx, 0x5fd3c4
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004994b0
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x140]
call fcn.00411640
jmp 0x4cd021
push str.DRAW_DIALOGBOX_CURRENCY_MENU24
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
mov dword [ebp - 4], 0x8c
jmp 0x4cce9e
push str.DRAW_DIALOGBOX_CURRENCY_MENU102
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
mov dword [ebp - 4], 0x8d
jmp 0x4cce9e
push str.DRAW_DIALOGBOX_CURRENCY_MENU103
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
mov dword [ebp - 4], 0x8e
jmp 0x4cce9e
push str.DRAW_DIALOGBOX_CURRENCY_MENU104
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
mov dword [ebp - 4], 0x8f
jmp 0x4cce9e
push str.DRAW_DIALOGBOX_CURRENCY_MENU105
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
mov dword [ebp - 4], 0x90
jmp 0x4cce9e
push str.DRAW_DIALOGBOX_CURRENCY_MENU106
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
mov dword [ebp - 4], 0x91
jmp 0x4cce9e
push str.DRAW_DIALOGBOX_CURRENCY_MENU107
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
mov dword [ebp - 4], 0x92
jmp 0x4cce9e
push str.DRAW_DIALOGBOX_CURRENCY_MENU108
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
mov dword [ebp - 4], 0x93
jmp 0x4cce9e
push str.DRAW_DIALOGBOX_CURRENCY_MENU109
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
mov dword [ebp - 4], 0x94
jmp 0x4cce9e
push str.DRAW_DIALOGBOX_CURRENCY_MENU110
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
mov dword [ebp - 4], 0x95
jmp 0x4cce9e
push str.DRAW_DIALOGBOX_CURRENCY_MENU111
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
mov dword [ebp - 4], 0x96
jmp 0x4cce9e
push ecx
lea eax, [ebp - 0x110]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov edx, dword [ebp + 8]
movsx ecx, si
add ecx, 0x1e
movsx eax, dx
cmp eax, ecx
jle 0x4cd0ff
movsx ecx, si
add ecx, 0xf0
movsx eax, dx
cmp eax, ecx
jge 0x4cd0ff
mov eax, dword [ebp - 0x15c]
mov edx, dword [ebp + 0xc]
movsx ecx, ax
movsx edx, dx
mov dword [ebp - 0x18c], ecx
lea eax, [ecx + 0xf5]
cmp edx, eax
jl 0x4cd0ff
lea eax, [ecx + 0x103]
cmp edx, eax
jg 0x4cd0ff
push str.DRAW_DIALOGBOX_CURRENCY_MENU69
lea ecx, [ebp - 0x140]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x140]
mov dword [ebp - 4], 0xb7
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x18c]
mov ecx, edi
add eax, 0xf5
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x140]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0xffffff
lea eax, [ebp - 0x110]
push eax
mov eax, dword [ebp - 0x18c]
add eax, 0xf5
push eax
movsx eax, si
jmp 0x4cd1ab
push 0x1e
xorps xmm0, xmm0
mov dword [ebp - 0x148], 0
push str.DRAW_DIALOGBOX_CURRENCY_MENU69
lea ecx, [ebp - 0x158]
mov dword [ebp - 0x144], 0
movups xmmword [ebp - 0x158], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x158]
mov dword [ebp - 4], 0xb8
push eax
lea eax, [ebp - 0x1a4]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x4cd15b
mov ecx, dword [ecx]
mov eax, dword [ebp - 0x15c]
cwde
push 0
push 0x320004
push ecx
lea esi, [eax + 0xf5]
mov ecx, edi
mov eax, dword [ebp - 0x16c]
cwde
push esi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x158]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0x320004
lea eax, [ebp - 0x110]
push eax
mov eax, dword [ebp - 0x16c]
push esi
cwde
add eax, 0x8c
mov ecx, edi
push eax
call fcn.0045d450
lea ecx, [edi + 0x18a074]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4cd1c1
sub ecx, edx
je case.default.0x4c84f4
push dword [ebp + 0xc]
mov ecx, edi
push dword [ebp + 8]
call fcn.0047f3e0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005aa550
mov esp, ebp
pop ebp
ret 0x10
call fcn.005ac169
call fcn.005ac169
call fcn.005ac169
nop dword [eax]
sti
test byte [eax + eax + 15], cl
xchg byte [eax + eax - 0x47], cl
mov byte [eax + eax + 0x66], cl
mov dword [eax + eax - 0x37], ecx
mov dword [eax + eax - 0x66], ecx
lodsd eax, dword [esi]
dec esp
add byte [0x87004cb1], ch
mov ecx, dword [eax + eax - 0x60]
mov ecx, dword [eax + eax - 0x47]
mov ecx, dword [eax + eax - 0x2e]
mov ecx, dword [eax + eax - 0x15]
mov ecx, dword [eax + eax - 0x29]
lea ecx, [eax + eax - 0x10]
lea ecx, [eax + eax + 9]
mov cs, word [eax + eax + 0x22]
mov cs, word [eax + eax + 0x36]
xchg edx, eax
dec esp
add byte [edi - 0x6e], cl
dec esp
add byte [eax - 0x6e], ch
dec esp
add byte [ecx - 0x40ffb36e], al
wait
dec esp
add byte [esi - 0x72ffb365], ah
wait
dec esp
add byte [ebx + ebx*4 + 0x4c], dh
add byte [ebx - 0x65], bl
dec esp
add byte [edi], bh
wait
dec esp
add byte [edx - 0x5f], dl
dec esp
add byte [ebx - 0x5f], ch
dec esp
add byte [ecx - 0x5e62ffb4], al
dec esp
add ch, ah
mov dl, 0x4c
add byte [ecx], ch
mov bl, 0x4c
add byte [edx - 0x4d], al
dec esp
add byte [eax], bh
mov ah, 0x4c
add byte [ebx - 0x4d], bl
dec esp
add byte [ebx + esi*4 + 0x4c], dh
add byte [eax - 0x53ffb34d], dl
mov bl, 0x4c
add al, cl
mov bl, 0x4c
add ah, ah
mov bl, 0x4c
add byte [eax], al
mov ah, 0x4c
add byte [esp + esi*4], bl
dec esp
add byte [esi], bh
mov dh, 0x4c
add byte [esi + esi*4 + 0x4c], bl
add cl, bl
mov dh, 0x4c
add cl, bl
mov dh, 0x4c
add cl, bl
mov dh, 0x4c
add byte [ebp - 0x4a], bh
dec esp
add cl, bl
mov dh, 0x4c
add byte [edx - 0x5dffb34a], ah
mov dh, 0x4c
add byte [ebx - 0x41ffb34a], dh
mov dh, 0x4c
add byte [esi - 0x1dffb34a], bh
mov eax, 0xb979004c
dec esp
add byte [ebx], bl
mov edx, 0xbabb004c
dec esp
add byte [ecx], ah
mov ebx, 0xbb84004c
dec esp
add bh, ah
mov ebx, 0xbc51004c
dec esp
add byte [esp + edi*4 - 0x42e8ffb4], dh
dec esp
add byte [esi - 0x43], bh
dec esp
add cl, ah
mov ebp, 0xc07b004c
dec esp
add byte [edi - 0x40], cl
dec esp
add byte [edi - 0x4dffb340], ah
ror byte [eax + eax - 0x2e], 0xc0
dec esp
add byte [eax], al
add dword [eax], eax
add byte [eax], al
add byte [eax], al
add al, byte [edx]
add eax, dword [esp + eax]
cli
retf 76