Function at 0x4129d8
Capabilities:
Enumerate gui resources

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x6c
push 0
push 0
dec ecx
jne 0x4129e0
push ecx
push ebx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call fcn.0040418c
xor eax, eax
push ebp
push 0x413f92
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0xc]
push eax
mov ecx, 1
mov edx, 0x413fa8
mov eax, dword [ebp - 4]
call fcn.004099a0
lea eax, [ebp - 0x10]
push eax
mov ecx, 2
mov edx, 0x413fa8
mov eax, dword [ebp - 4]
call fcn.004099a0
lea eax, [ebp - 0x14]
push eax
mov ecx, 3
mov edx, 0x413fa8
mov eax, dword [ebp - 4]
call fcn.004099a0
lea eax, [ebp - 0x18]
push eax
mov ecx, 4
mov edx, 0x413fa8
mov eax, dword [ebp - 4]
call fcn.004099a0
mov edx, 0x413fa8
mov eax, dword [ebp - 4]
call fcn.00408be8
cmp eax, 5
jne 0x412a8c
mov eax, dword [ebp - 0x18]
mov edx, dword [0x41a2f0]
call fcn.004040e8
je 0x412a8c
mov edx, 0x413fb4
mov eax, dword [ebp - 8]
call fcn.00412970
mov edx, 0x413fa8
mov eax, dword [ebp - 4]
call fcn.00408be8
cmp eax, 5
jne case.0x412ac7.45
mov eax, dword [ebp - 0x18]
mov edx, dword [0x41a2f0]
call fcn.004040e8
jne case.0x412ac7.45
mov eax, dword [ebp - 0xc]
call fcn.00408420
cmp eax, 0x64
ja case.0x412ac7.45
jmp dword [eax*4 + 0x412ace]
call fcn.00403cac
jmp case.0x412ac7.45
push 0x413fc8
push dword [ebp - 0xc]
lea edx, [ebp - 0x174]
mov eax, dword [0x419a50]
call fcn.0040574c
push dword [ebp - 0x174]
lea eax, [ebp - 0x170]
mov edx, 3
call fcn.0040405c
mov edx, dword [ebp - 0x170]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
push 0x413fc8
push dword [ebp - 0xc]
lea eax, [ebp - 0x17c]
call fcn.00407a0c
push dword [ebp - 0x17c]
lea eax, [ebp - 0x178]
mov edx, 3
call fcn.0040405c
mov edx, dword [ebp - 0x178]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
push 0x413fc8
push dword [ebp - 0xc]
lea edx, [ebp - 0x184]
mov eax, dword [ebp - 0x10]
call fcn.00407a94
push dword [ebp - 0x184]
lea eax, [ebp - 0x180]
mov edx, 3
call fcn.0040405c
mov edx, dword [ebp - 0x180]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
push 0x413fc8
push dword [ebp - 0xc]
lea edx, [ebp - 0x18c]
mov eax, dword [ebp - 0x10]
call fcn.00407b48
push dword [ebp - 0x18c]
lea eax, [ebp - 0x188]
mov edx, 3
call fcn.0040405c
mov edx, dword [ebp - 0x188]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
push 0x413fc8
push dword [ebp - 0xc]
lea edx, [ebp - 0x194]
mov eax, dword [ebp - 0x10]
call fcn.00407c6c
push dword [ebp - 0x194]
lea eax, [ebp - 0x190]
mov edx, 3
call fcn.0040405c
mov edx, dword [ebp - 0x190]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
push 0x413fc8
push dword [ebp - 0xc]
lea edx, [ebp - 0x19c]
mov eax, dword [ebp - 0x10]
call fcn.00407d38
push dword [ebp - 0x19c]
lea eax, [ebp - 0x198]
mov edx, 3
call fcn.0040405c
mov edx, dword [ebp - 0x198]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
push 0x413fc8
push dword [ebp - 0xc]
lea eax, [ebp - 0x1a4]
call fcn.00407e24
push dword [ebp - 0x1a4]
lea eax, [ebp - 0x1a0]
mov edx, 3
call fcn.0040405c
mov edx, dword [ebp - 0x1a0]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
push 0x413fc8
push dword [ebp - 0xc]
lea eax, [ebp - 0x1ac]
call fcn.00407eec
push dword [ebp - 0x1ac]
lea eax, [ebp - 0x1a8]
mov edx, 3
call fcn.0040405c
mov edx, dword [ebp - 0x1a8]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
mov eax, dword [ebp - 0x10]
call fcn.0040876c
lea edx, [ebp - 0x1b0]
call fcn.00408404
mov edx, dword [ebp - 0x1b0]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
lea eax, [ebp - 0x1b8]
call fcn.00408ac8
mov ecx, dword [ebp - 0x1b8]
lea eax, [ebp - 0x1b4]
mov edx, 0x413fa8
call fcn.00403fe8
mov edx, dword [ebp - 0x1b4]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
push 0x413fc8
push dword [ebp - 0xc]
lea eax, [ebp - 0x1c0]
call fcn.00405938
push dword [ebp - 0x1c0]
lea eax, [ebp - 0x1bc]
mov edx, 3
call fcn.0040405c
mov edx, dword [ebp - 0x1bc]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
push 0x413fc8
push dword [ebp - 0xc]
lea eax, [ebp - 0x1c8]
call fcn.004059e4
push dword [ebp - 0x1c8]
lea eax, [ebp - 0x1c4]
mov edx, 3
call fcn.0040405c
mov edx, dword [ebp - 0x1c4]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
push 0x413fc8
push dword [ebp - 0xc]
lea eax, [ebp - 0x1d0]
call fcn.00405a60
push dword [ebp - 0x1d0]
lea eax, [ebp - 0x1cc]
mov edx, 3
call fcn.0040405c
mov edx, dword [ebp - 0x1cc]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
push 0x413fc8
push dword [ebp - 0xc]
lea eax, [ebp - 0x1d8]
call fcn.00405afc
push dword [ebp - 0x1d8]
lea eax, [ebp - 0x1d4]
mov edx, 3
call fcn.0040405c
mov edx, dword [ebp - 0x1d4]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
push 0x413fc8
push dword [ebp - 0xc]
lea eax, [ebp - 0x1e0]
call fcn.00405b94
push dword [ebp - 0x1e0]
lea eax, [ebp - 0x1dc]
mov edx, 3
call fcn.0040405c
mov edx, dword [ebp - 0x1dc]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
push 0x413fc8
push dword [ebp - 0xc]
lea edx, [ebp - 0x1e8]
mov eax, dword [ebp - 0x10]
call fcn.00405be4
push dword [ebp - 0x1e8]
lea eax, [ebp - 0x1e4]
mov edx, 3
call fcn.0040405c
mov edx, dword [ebp - 0x1e4]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
push 0x413fc8
push dword [ebp - 0xc]
lea eax, [ebp - 0x1f0]
call fcn.00405cc8
push dword [ebp - 0x1f0]
lea eax, [ebp - 0x1ec]
mov edx, 3
call fcn.0040405c
mov edx, dword [ebp - 0x1ec]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
push 0x413fc8
push dword [ebp - 0xc]
lea edx, [ebp - 0x1f8]
mov eax, dword [ebp - 0x10]
call fcn.00405d30
push dword [ebp - 0x1f8]
lea eax, [ebp - 0x1f4]
mov edx, 3
call fcn.0040405c
mov edx, dword [ebp - 0x1f4]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
lea eax, [ebp - 0x200]
call fcn.00405e68
mov ecx, dword [ebp - 0x200]
lea eax, [ebp - 0x1fc]
mov edx, 0x413fa8
call fcn.00403fe8
mov edx, dword [ebp - 0x1fc]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
push 0x413fc8
push dword [ebp - 0xc]
lea eax, [ebp - 0x208]
call fcn.00405f3c
push dword [ebp - 0x208]
lea eax, [ebp - 0x204]
mov edx, 3
call fcn.0040405c
mov edx, dword [ebp - 0x204]
mov eax, dword [ebp - 8]
call fcn.0040910c
jmp case.0x412ac7.45
push 0x413fc8
push dword [ebp - 0xc]
lea eax, [ebp - 0x210]
call fcn.00405fec
push dword [ebp - 0x210]
lea eax, [ebp - 0x20c]
mov edx, 3
call fcn.0040405c
mov edx, dword [ebp - 0x20c]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
lea edx, [ebp - 0x218]
xor eax, eax
call fcn.004060bc
mov ecx, dword [ebp - 0x218]
lea eax, [ebp - 0x214]
mov edx, 0x413fa8
call fcn.00403fe8
mov edx, dword [ebp - 0x214]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
lea edx, [ebp - 0x220]
mov eax, dword [ebp - 0x10]
call fcn.0040612c
mov ecx, dword [ebp - 0x220]
lea eax, [ebp - 0x21c]
mov edx, 0x413fa8
call fcn.00403fe8
mov edx, dword [ebp - 0x21c]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
push 0x413fc8
push dword [ebp - 0xc]
lea edx, [ebp - 0x228]
mov eax, dword [0x419a50]
call fcn.004061d0
push dword [ebp - 0x228]
lea eax, [ebp - 0x224]
mov edx, 3
call fcn.0040405c
mov edx, dword [ebp - 0x224]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
push 0x413fc8
push dword [ebp - 0xc]
lea eax, [ebp - 0x230]
call fcn.00406220
push dword [ebp - 0x230]
lea eax, [ebp - 0x22c]
mov edx, 3
call fcn.0040405c
mov edx, dword [ebp - 0x22c]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
lea edx, [ebp - 0x238]
mov eax, dword [ebp - 0x10]
call fcn.004062a0
mov ecx, dword [ebp - 0x238]
lea eax, [ebp - 0x234]
mov edx, 0x413fa8
call fcn.00403fe8
mov edx, dword [ebp - 0x234]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
lea eax, [ebp - 0x240]
call fcn.004064f0
mov ecx, dword [ebp - 0x240]
lea eax, [ebp - 0x23c]
mov edx, 0x413fd4
call fcn.00403fe8
mov edx, dword [ebp - 0x23c]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
lea edx, [ebp - 0x248]
mov eax, dword [ebp - 0x10]
call fcn.00408f48
mov ecx, dword [ebp - 0x248]
lea eax, [ebp - 0x244]
mov edx, 0x413fa8
call fcn.00403fe8
mov edx, dword [ebp - 0x244]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
push 0x413fc8
push dword [ebp - 0xc]
lea eax, [ebp - 0x250]
call fcn.00408144
push dword [ebp - 0x250]
lea eax, [ebp - 0x24c]
mov edx, 3
call fcn.0040405c
mov edx, dword [ebp - 0x24c]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
lea eax, [ebp - 0x254]
call fcn.00406cb0
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
mov dword [0x41a374], 1
mov eax, dword [0x418288]
cmp dword [eax], 0
jne 0x413360
mov eax, 0x419994
mov ecx, 0x406
mov edx, dword [0x419a50]
call fcn.004117f0
mov eax, dword [ebp - 0x10]
call fcn.004127e8
mov eax, dword [0x418288]
cmp dword [eax], 1
jne case.0x412ac7.45
mov eax, 0x419990
mov ecx, 0x402
mov edx, dword [0x419a50]
call fcn.004117f0
mov eax, dword [ebp - 0x10]
call fcn.00408420
mov edx, eax
mov eax, dword [ebp - 0x14]
call fcn.00412708
jmp case.0x412ac7.45
lea eax, [ebp - 0x258]
call fcn.00409a94
lea eax, [ebp - 0x258]
mov edx, 0x413fe0
call fcn.00403fa4
mov eax, dword [ebp - 0x258]
call fcn.00408654
test al, al
jne 0x4133f4
push 0x413fc8
push dword [ebp - 0xc]
push 0x413ff4
lea eax, [ebp - 0x25c]
mov edx, 3
call fcn.0040405c
mov edx, dword [ebp - 0x25c]
mov eax, dword [ebp - 8]
call fcn.0040910c
jmp 0x413f39
push 0x413fc8
push dword [ebp - 0xc]
mov eax, dword [ebp - 0x10]
call fcn.00408420
lea edx, [ebp - 0x264]
call fcn.00405620
push dword [ebp - 0x264]
lea eax, [ebp - 0x260]
mov edx, 3
call fcn.0040405c
mov edx, dword [ebp - 0x260]
mov eax, dword [ebp - 8]
call fcn.0040910c
lea eax, [ebp - 0x268]
call fcn.00409a94
mov edx, dword [ebp - 0x268]
mov eax, dword [0x4182b8]
mov ecx, 0x414000
call fcn.00403fe8
lea eax, [ebp - 0x26c]
call fcn.00409a94
lea eax, [ebp - 0x26c]
mov edx, 0x414000
call fcn.00403fa4
mov edx, dword [ebp - 0x26c]
lea eax, [ebp - 0x16c]
call fcn.00402b54
mov edx, 0x80
lea eax, [ebp - 0x16c]
call fcn.00403204
call fcn.004025b8
xor eax, eax
push ebp
push 0x4134d3
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x16c]
call fcn.00402dfc
call fcn.004025b8
mov dword [ebp - 0x20], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4134da
lea eax, [ebp - 0x16c]
call fcn.00402cc4
call fcn.004025b8
ret
push 0x414018
mov eax, dword [0x419a68]
push eax
call fcn.00404f08
jmp case.0x412ac7.45
mov ecx, dword [ebp - 8]
xor edx, edx
mov eax, dword [ebp - 0x10]
call fcn.00409f24
jmp case.0x412ac7.45
call fcn.00403cac
jmp case.0x412ac7.45
push dword [0x419a94]
push 0x414024
push dword [ebp - 0x10]
mov eax, 0x419a94
mov edx, 3
call fcn.0040405c
mov eax, dword [0x419a94]
call fcn.0040419c
push eax
mov eax, dword [0x419a68]
push eax
call fcn.00404f08
push 1
mov eax, dword [0x419a50]
push eax
call fcn.00404f10
jmp case.0x412ac7.45
lea ecx, [ebp - 0x27c]
mov edx, dword [ebp - 0x10]
xor eax, eax
call fcn.004057f4
mov ecx, dword [ebp - 0x27c]
lea eax, [ebp - 0x278]
mov edx, 0x413fa8
call fcn.00403fe8
mov edx, dword [ebp - 0x278]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
lea ecx, [ebp - 0x284]
mov edx, dword [ebp - 0x10]
mov al, 1
call fcn.004057f4
mov ecx, dword [ebp - 0x284]
lea eax, [ebp - 0x280]
mov edx, 0x413fa8
call fcn.00403fe8
mov edx, dword [ebp - 0x280]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
lea ecx, [ebp - 0x28c]
mov edx, dword [ebp - 0x10]
mov al, 2
call fcn.004057f4
mov ecx, dword [ebp - 0x28c]
lea eax, [ebp - 0x288]
mov edx, 0x413fa8
call fcn.00403fe8
mov edx, dword [ebp - 0x288]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
lea ecx, [ebp - 0x294]
mov edx, dword [ebp - 0x10]
mov al, 3
call fcn.004057f4
mov ecx, dword [ebp - 0x294]
lea eax, [ebp - 0x290]
mov edx, 0x413fa8
call fcn.00403fe8
mov edx, dword [ebp - 0x290]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
lea ecx, [ebp - 0x29c]
mov edx, dword [ebp - 0x10]
mov al, 4
call fcn.004057f4
mov ecx, dword [ebp - 0x29c]
lea eax, [ebp - 0x298]
mov edx, 0x413fa8
call fcn.00403fe8
mov edx, dword [ebp - 0x298]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
call fcn.00403cac
jmp case.0x412ac7.45
lea eax, [ebp - 0x2a0]
call fcn.004064b4
mov edx, dword [ebp - 0x2a0]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
mov eax, dword [ebp - 0x10]
call fcn.0040419c
push eax
push 0
call fcn.00404e50
mov ebx, eax
test ebx, ebx
je case.0x412ac7.45
push 0
push 0
push 0x10
push ebx
call fcn.00404ed8
jmp case.0x412ac7.45
mov eax, dword [ebp - 0x10]
call fcn.0040419c
push eax
push 0
call fcn.00404e50
mov ebx, eax
mov eax, dword [ebp - 0x14]
call fcn.00408420
push eax
push ebx
call fcn.00404f10
jmp case.0x412ac7.45
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
call fcn.00408814
jmp case.0x412ac7.45
mov eax, 0x419a94
call fcn.00403e18
push 0x414018
mov eax, dword [0x419a68]
push eax
call fcn.00404f08
jmp case.0x412ac7.45
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 8]
call fcn.0040ebd4
jmp case.0x412ac7.45
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 8]
call fcn.0040e518
jmp case.0x412ac7.45
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 8]
call fcn.0040e264
jmp case.0x412ac7.45
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 8]
call fcn.0040e3b8
jmp case.0x412ac7.45
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 8]
call fcn.0040df58
jmp case.0x412ac7.45
mov eax, dword [ebp - 8]
call fcn.00411114
jmp case.0x412ac7.45
lea eax, [ebp - 0x2a4]
call fcn.00409a94
lea eax, [ebp - 0x2a4]
mov edx, 0x414030
call fcn.00403fa4
mov eax, dword [ebp - 0x2a4]
call fcn.00408654
test al, al
jne 0x413860
push 0x413fc8
push dword [ebp - 0xc]
push 0x413ff4
lea eax, [ebp - 0x2a8]
mov edx, 3
call fcn.0040405c
mov edx, dword [ebp - 0x2a8]
mov eax, dword [ebp - 8]
call fcn.00412970
push 0x64
call sub.user32.dll_EnumWindows
jmp 0x413f39
call fcn.00410f68
test al, al
jne 0x41387d
mov edx, 0x414040
mov eax, dword [0x41998c]
call fcn.0040910c
jmp 0x413f39
mov eax, 0x41a35c
mov edx, dword [ebp - 0x14]
call fcn.00403e6c
mov eax, dword [ebp - 8]
mov dword [0x41a364], eax
push 0
push 0
push 0x4197f4
mov ecx, 0x410ff0
xor edx, edx
xor eax, eax
call fcn.00403dd4
push 0x413fc8
push dword [ebp - 0xc]
push 0x41406c
lea eax, [ebp - 0x2ac]
mov edx, 3
call fcn.0040405c
mov edx, dword [ebp - 0x2ac]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
push 0x413fc8
push dword [ebp - 0xc]
push 0x41406c
lea eax, [ebp - 0x2b4]
call fcn.00409a94
push dword [ebp - 0x2b4]
push 0x414014
lea eax, [ebp - 0x2b0]
mov edx, 5
call fcn.0040405c
mov edx, dword [ebp - 0x2b0]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
push 0x413fc8
push dword [ebp - 0xc]
lea edx, [ebp - 0x2bc]
mov eax, 1
call fcn.0040a5e0
push dword [ebp - 0x2bc]
lea eax, [ebp - 0x2b8]
mov edx, 3
call fcn.0040405c
mov edx, dword [ebp - 0x2b8]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
push 0x413fc8
push dword [ebp - 0xc]
lea edx, [ebp - 0x2c4]
mov eax, 1
call fcn.0040a6bc
push dword [ebp - 0x2c4]
lea eax, [ebp - 0x2c0]
mov edx, 3
call fcn.0040405c
mov edx, dword [ebp - 0x2c0]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
push 0x413fc8
push dword [ebp - 0xc]
lea edx, [ebp - 0x2cc]
mov eax, 1
call fcn.0040a798
push dword [ebp - 0x2cc]
lea eax, [ebp - 0x2c8]
mov edx, 3
call fcn.0040405c
mov edx, dword [ebp - 0x2c8]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
push 0x413fc8
push dword [ebp - 0xc]
lea edx, [ebp - 0x2d4]
mov eax, 1
call fcn.0040a878
push dword [ebp - 0x2d4]
lea eax, [ebp - 0x2d0]
mov edx, 3
call fcn.0040405c
mov edx, dword [ebp - 0x2d0]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
push 0x413fc8
push dword [ebp - 0xc]
lea edx, [ebp - 0x2dc]
mov eax, 1
call fcn.0040a958
push dword [ebp - 0x2dc]
lea eax, [ebp - 0x2d8]
mov edx, 3
call fcn.0040405c
mov edx, dword [ebp - 0x2d8]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
push 0x413fc8
push dword [ebp - 0xc]
lea edx, [ebp - 0x2e4]
mov eax, 1
call fcn.0040aa34
push dword [ebp - 0x2e4]
lea eax, [ebp - 0x2e0]
mov edx, 3
call fcn.0040405c
mov edx, dword [ebp - 0x2e0]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
push 0x413fc8
push dword [ebp - 0xc]
lea edx, [ebp - 0x2ec]
mov eax, 1
call fcn.0040ab38
push dword [ebp - 0x2ec]
lea eax, [ebp - 0x2e8]
mov edx, 3
call fcn.0040405c
mov edx, dword [ebp - 0x2e8]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
push 0x413fc8
push dword [ebp - 0xc]
lea edx, [ebp - 0x2f4]
mov eax, 1
call fcn.0040ac1c
push dword [ebp - 0x2f4]
lea eax, [ebp - 0x2f0]
mov edx, 3
call fcn.0040405c
mov edx, dword [ebp - 0x2f0]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
push 0x413fc8
push dword [ebp - 0xc]
lea edx, [ebp - 0x2fc]
mov eax, 1
call fcn.0040ad00
push dword [ebp - 0x2fc]
lea eax, [ebp - 0x2f8]
mov edx, 3
call fcn.0040405c
mov edx, dword [ebp - 0x2f8]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
push 0x413fc8
push dword [ebp - 0xc]
lea edx, [ebp - 0x304]
mov eax, 1
call fcn.0040ade0
push dword [ebp - 0x304]
lea eax, [ebp - 0x300]
mov edx, 3
call fcn.0040405c
mov edx, dword [ebp - 0x300]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
push 0x413fc8
push dword [ebp - 0xc]
lea edx, [ebp - 0x30c]
mov eax, 1
call fcn.0040aec0
push dword [ebp - 0x30c]
lea eax, [ebp - 0x308]
mov edx, 3
call fcn.0040405c
mov edx, dword [ebp - 0x308]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
push 0x413fc8
push dword [ebp - 0xc]
lea edx, [ebp - 0x314]
mov eax, 1
call fcn.0040afa4
push dword [ebp - 0x314]
lea eax, [ebp - 0x310]
mov edx, 3
call fcn.0040405c
mov edx, dword [ebp - 0x310]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
push 0x413fc8
push dword [ebp - 0xc]
lea edx, [ebp - 0x31c]
mov eax, 1
call fcn.0040b084
push dword [ebp - 0x31c]
lea eax, [ebp - 0x318]
mov edx, 3
call fcn.0040405c
mov edx, dword [ebp - 0x318]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
push 0x413fc8
push dword [ebp - 0xc]
lea edx, [ebp - 0x324]
mov eax, 1
call fcn.0040b170
push dword [ebp - 0x324]
lea eax, [ebp - 0x320]
mov edx, 3
call fcn.0040405c
mov edx, dword [ebp - 0x320]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
push 0x413fc8
push dword [ebp - 0xc]
lea edx, [ebp - 0x32c]
mov eax, 1
call fcn.0040b258
push dword [ebp - 0x32c]
lea eax, [ebp - 0x328]
mov edx, 3
call fcn.0040405c
mov edx, dword [ebp - 0x328]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
push 0x413fc8
push dword [ebp - 0xc]
lea edx, [ebp - 0x334]
mov eax, 1
call fcn.0040b33c
push dword [ebp - 0x334]
lea eax, [ebp - 0x330]
mov edx, 3
call fcn.0040405c
mov edx, dword [ebp - 0x330]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
push 0x413fc8
push dword [ebp - 0xc]
lea edx, [ebp - 0x33c]
mov eax, 1
call fcn.0040b428
push dword [ebp - 0x33c]
lea eax, [ebp - 0x338]
mov edx, 3
call fcn.0040405c
mov edx, dword [ebp - 0x338]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
mov eax, dword [ebp - 0x14]
call fcn.00408420
push eax
mov eax, dword [ebp - 0x10]
call fcn.00408420
pop edx
call fcn.0040b54c
jmp case.0x412ac7.45
push 0
push 0
push 0
push 0
push 2
call fcn.00404f40
push 0
push 0
push 0
push 0
push 4
call fcn.00404f40
jmp case.0x412ac7.45
lea eax, [ebp - 0x348]
call fcn.00408c84
mov eax, dword [ebp - 0x348]
lea edx, [ebp - 0x344]
call fcn.0040b8a4
mov ecx, dword [ebp - 0x344]
lea eax, [ebp - 0x340]
mov edx, 0x414078
call fcn.00403fe8
mov edx, dword [ebp - 0x340]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
lea eax, [ebp - 0x34c]
call fcn.00408c84
mov eax, dword [ebp - 0x34c]
mov edx, dword [ebp - 0x10]
call fcn.0040b7d8
jmp case.0x412ac7.45
lea eax, [ebp - 0x350]
call fcn.00408c84
mov eax, dword [ebp - 0x350]
mov edx, dword [ebp - 0x10]
call fcn.0040b710
jmp case.0x412ac7.45
lea eax, [ebp - 0x354]
call fcn.00408c84
mov eax, dword [ebp - 0x354]
mov edx, dword [ebp - 0x10]
call fcn.0040b64c
jmp case.0x412ac7.45
lea eax, [ebp - 0x358]
push eax
mov ecx, 1
mov edx, 0x413fa8
mov eax, dword [ebp - 0x14]
call fcn.004099a0
mov eax, dword [ebp - 0x358]
push eax
lea eax, [ebp - 0x35c]
push eax
xor ecx, ecx
mov edx, 0x413fa8
mov eax, dword [ebp - 0x14]
call fcn.004099a0
mov eax, dword [ebp - 0x35c]
push eax
lea eax, [ebp - 0x360]
call fcn.00408c84
mov eax, dword [ebp - 0x360]
mov edx, dword [ebp - 0x10]
pop ecx
call fcn.0040b554
jmp case.0x412ac7.45
mov eax, 0x41a36c
mov edx, dword [ebp - 0x10]
call fcn.00403e6c
mov eax, 0x41a368
mov edx, dword [ebp - 0x14]
call fcn.00403e6c
mov eax, dword [ebp - 8]
mov dword [0x41a370], eax
push 0
push 0
push 0x4197f4
mov ecx, 0x411184
xor edx, edx
xor eax, eax
call fcn.00403dd4
jmp case.0x412ac7.45
mov eax, dword [ebp - 0x10]
call fcn.00408420
call fcn.0040bca0
jmp case.0x412ac7.45
push 0x414090
push dword [0x41a2f0]
push 0x413fa8
lea eax, [ebp - 0x364]
mov edx, 3
call fcn.0040405c
mov edx, dword [ebp - 0x364]
mov eax, dword [ebp - 8]
call fcn.00412970
jmp case.0x412ac7.45
mov eax, 0x41a35c
mov edx, dword [ebp - 0x10]
call fcn.00403e6c
lea eax, [ebp - 0xc]
call fcn.00403e18
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x413f99
lea eax, [ebp - 0x364]
mov edx, 0x63
call fcn.00403e3c
lea eax, [ebp - 0x1d4]
call fcn.00403e18
lea eax, [ebp - 0x1d8]
call fcn.00403e18
lea eax, [ebp - 0x1d0]
mov edx, 0x19
call fcn.00403e3c
lea eax, [ebp - 0x18]
mov edx, 4
call fcn.00403e3c
lea eax, [ebp - 4]
call fcn.00403e18
ret