Function at 0x4858d0
Capabilities:
Parse pe header
Read .ini file

Disassembly:
sub esp, 0x4c
mov eax, dword [0x4c4004]
xor eax, esp
mov dword [esp + 0x44], eax
push ebx
push ebp
push esi
mov esi, dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [esp + 0x24]
push edi
push eax
push dword [0x4def88]
call esi
mov eax, dword [esp + 0x30]
sub eax, dword [0x4c51a4]
sub eax, dword [esp + 0x28]
mov dword [0x4def8c], eax
mov eax, dword [esp + 0x34]
sub eax, dword [0x4c51a0]
sub eax, dword [esp + 0x2c]
mov dword [0x4df1b4], eax
lea eax, [esp + 0x38]
push eax
push dword [0x4deb68]
call esi
lea ecx, [esp + 0x48]
call fcn.00475c60
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
push 1
push dword [esp + 0x50]
push 0x132
push dword [esp + 0x54]
push 2
push 0x27a7
push dword [0x4def88]
call edi
mov ebx, dword [sym.imp.USER32.dll_MoveWindow]
push eax
call ebx
push 1
push dword [esp + 0x50]
push 0x132
push dword [esp + 0x54]
push 2
push 0x27ae
push dword [0x4def88]
call edi
push eax
call ebx
push 1
push dword [esp + 0x50]
push 0x132
push dword [esp + 0x54]
push 2
push 0x29c7
push dword [0x4def88]
call edi
push eax
call ebx
push 1
push dword [esp + 0x50]
push 0x132
push dword [esp + 0x54]
push 2
push 0x29c8
push dword [0x4def88]
call edi
push eax
call ebx
push 1
push dword [esp + 0x50]
push 0x132
push dword [esp + 0x54]
push 2
push 0x29c9
push dword [0x4def88]
call edi
push eax
call ebx
push 1
push dword [esp + 0x50]
push 0x132
push dword [esp + 0x54]
push 2
push 0x29ca
push dword [0x4def88]
call edi
push eax
call ebx
push 1
push dword [esp + 0x50]
push 0x132
push dword [esp + 0x54]
push 2
push 0x29cb
push dword [0x4def88]
call edi
push eax
call ebx
mov ecx, dword [0x4def8c]
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
mov dword [esp + 0x14], eax
mov eax, 0x55555556
imul ecx
push 1
mov eax, edx
add ecx, 0x122
shr eax, 0x1f
push 0x64
add eax, edx
push ecx
mov dword [esp + 0x2c], eax
mov eax, dword [0x4df1b4]
push 7
cdq
push 0x12c
sub eax, edx
push 0x4e35
push dword [0x4def88]
sar eax, 1
mov dword [esp + 0x34], eax
call edi
push eax
call ebx
push 1
push 0x64
push 0xc8
push 7
push 0x6c
push 0x4e34
push dword [0x4def88]
call edi
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x64
push 0x190
push 7
add eax, 0x218
push eax
push 0x4e36
push dword [0x4def88]
call edi
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x61
push 0x64
add eax, 0x1cb
push eax
mov eax, dword [0x4def8c]
add eax, 0x344
push eax
push 0x7540
push dword [0x4def88]
call edi
push eax
call ebx
push 1
push 0x61
push 0x64
mov eax, dword [0x4df1b4]
add eax, 0x1cb
push eax
mov eax, dword [0x4def8c]
add eax, 0x344
push eax
push 0x2997
push dword [0x4def88]
call edi
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x2a
push 0x2a
add eax, 0x1d0
push eax
mov eax, dword [0x4def8c]
add eax, 0x30c
push eax
push 0x29ae
push dword [0x4def88]
call edi
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x2a
push 0x2a
add eax, 0x1d0
push eax
mov eax, dword [0x4def8c]
add eax, 0x30c
push eax
push 0x29cd
push dword [0x4def88]
call edi
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x2a
push 0x2a
add eax, 0x1fc
push eax
mov eax, dword [0x4def8c]
add eax, 0x30c
push eax
push 0x29af
push dword [0x4def88]
call edi
push eax
call ebx
mov ebp, dword [sym.imp.USER32.dll_SendMessageW]
mov eax, 0x92492493
imul dword [0x4df1b4]
add edx, dword [0x4df1b4]
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [0x4deb74], 0
mov dword [esp + 0x10], eax
jne 0x486a4f
mov esi, dword [0x4c5180]
push 0x7566
push dword [0x4def88]
cmp eax, 0x15
jl 0x485dcf
or esi, 0x48
call edi
mov edx, esi
mov ecx, eax
call fcn.0045f210
mov esi, dword [0x4c5180]
push 0x7567
push dword [0x4def88]
or esi, 0x48
call edi
mov edx, esi
mov ecx, eax
call fcn.0045f210
mov esi, dword [0x4c5180]
push 0x7568
push dword [0x4def88]
or esi, 0x48
call edi
mov edx, esi
mov ecx, eax
call fcn.0045f210
mov esi, dword [0x4c5180]
push 0x7569
push dword [0x4def88]
or esi, 0x48
call edi
mov edx, esi
mov ecx, eax
call fcn.0045f210
mov esi, dword [0x4c5180]
push 0x756a
push dword [0x4def88]
or esi, 0x48
call edi
mov edx, esi
mov ecx, eax
call fcn.0045f210
mov esi, dword [0x4c5180]
push 0x756b
push dword [0x4def88]
or esi, 0x48
call edi
mov edx, esi
mov ecx, eax
call fcn.0045f210
mov esi, dword [0x4c5180]
push 0x756c
push dword [0x4def88]
or esi, 0x48
call edi
mov edx, esi
mov ecx, eax
call fcn.0045f210
mov esi, dword [0x4c5180]
push 0x7565
push dword [0x4def88]
or esi, 0x48
call edi
mov edx, esi
mov ecx, eax
call fcn.0045f210
mov esi, dword [0x4c5180]
push 0x7541
push dword [0x4def88]
or esi, 0x48
call edi
mov edx, esi
mov ecx, eax
call fcn.0045f210
mov esi, dword [0x4c5180]
push 0x7542
push dword [0x4def88]
or esi, 0x48
call edi
mov edx, esi
mov ecx, eax
call fcn.0045f210
mov esi, dword [0x4c5180]
push 0x7543
push dword [0x4def88]
or esi, 0x48
call edi
mov edx, esi
mov ecx, eax
call fcn.0045f210
mov esi, dword [0x4c5180]
push 0x7544
push dword [0x4def88]
or esi, 0x48
call edi
mov edx, esi
mov ecx, eax
call fcn.0045f210
mov esi, dword [0x4c5180]
push 0x7545
push dword [0x4def88]
or esi, 0x48
call edi
mov edx, esi
mov ecx, eax
call fcn.0045f210
mov esi, dword [0x4c5180]
push 0x7546
push dword [0x4def88]
or esi, 0x48
call edi
mov edx, esi
mov ecx, eax
call fcn.0045f210
mov esi, dword [0x4c5180]
push 0x7547
push dword [0x4def88]
or esi, 0x48
call edi
mov edx, esi
mov ecx, eax
call fcn.0045f210
mov esi, dword [0x4c5180]
push 0x7549
push dword [0x4def88]
or esi, 0x48
call edi
mov edx, esi
mov ecx, eax
call fcn.0045f210
mov esi, dword [0x4c5180]
or esi, 0x48
jmp 0x485fb7
or esi, 0x42
call edi
mov edx, esi
mov ecx, eax
call fcn.0045f210
mov esi, dword [0x4c5180]
push 0x7567
push dword [0x4def88]
or esi, 0x42
call edi
mov edx, esi
mov ecx, eax
call fcn.0045f210
mov esi, dword [0x4c5180]
push 0x7568
push dword [0x4def88]
or esi, 0x42
call edi
mov edx, esi
mov ecx, eax
call fcn.0045f210
mov esi, dword [0x4c5180]
push 0x7569
push dword [0x4def88]
or esi, 0x42
call edi
mov edx, esi
mov ecx, eax
call fcn.0045f210
mov esi, dword [0x4c5180]
push 0x756a
push dword [0x4def88]
or esi, 0x42
call edi
mov edx, esi
mov ecx, eax
call fcn.0045f210
mov esi, dword [0x4c5180]
push 0x756b
push dword [0x4def88]
or esi, 0x42
call edi
mov edx, esi
mov ecx, eax
call fcn.0045f210
mov esi, dword [0x4c5180]
push 0x756c
push dword [0x4def88]
or esi, 0x42
call edi
mov edx, esi
mov ecx, eax
call fcn.0045f210
mov esi, dword [0x4c5180]
push 0x7565
push dword [0x4def88]
or esi, 0x42
call edi
mov edx, esi
mov ecx, eax
call fcn.0045f210
mov esi, dword [0x4c5180]
push 0x7541
push dword [0x4def88]
or esi, 0x42
call edi
mov edx, esi
mov ecx, eax
call fcn.0045f210
mov esi, dword [0x4c5180]
push 0x7542
push dword [0x4def88]
or esi, 0x42
call edi
mov edx, esi
mov ecx, eax
call fcn.0045f210
mov esi, dword [0x4c5180]
push 0x7543
push dword [0x4def88]
or esi, 0x42
call edi
mov edx, esi
mov ecx, eax
call fcn.0045f210
mov esi, dword [0x4c5180]
push 0x7544
push dword [0x4def88]
or esi, 0x42
call edi
mov edx, esi
mov ecx, eax
call fcn.0045f210
mov esi, dword [0x4c5180]
push 0x7545
push dword [0x4def88]
or esi, 0x42
call edi
mov edx, esi
mov ecx, eax
call fcn.0045f210
mov esi, dword [0x4c5180]
push 0x7546
push dword [0x4def88]
or esi, 0x42
call edi
mov edx, esi
mov ecx, eax
call fcn.0045f210
mov esi, dword [0x4c5180]
push 0x7547
push dword [0x4def88]
or esi, 0x42
call edi
mov edx, esi
mov ecx, eax
call fcn.0045f210
mov esi, dword [0x4c5180]
push 0x7549
push dword [0x4def88]
or esi, 0x42
call edi
mov edx, esi
mov ecx, eax
call fcn.0045f210
mov esi, dword [0x4c5180]
or esi, 0x42
push 0x754a
push dword [0x4def88]
call edi
mov edx, esi
mov ecx, eax
call fcn.0045f210
push 0
push 1
push 0xf8
push 0x7566
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 1
push 0xf8
push 0x7567
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 1
push 0xf8
push 0x7568
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 1
push 0xf8
push 0x7569
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 1
push 0xf8
push 0x756a
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 1
push 0xf8
push 0x756b
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 1
push 0xf8
push 0x756c
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 1
push 0xf8
push 0x7565
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 1
push 0xf8
push 0x7541
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 1
push 0xf8
push 0x7542
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 1
push 0xf8
push 0x7543
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 1
push 0xf8
push 0x7544
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 1
push 0xf8
push 0x7545
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 1
push 0xf8
push 0x7546
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 1
push 0xf8
push 0x7547
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 1
push 0xf8
push 0x7549
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 1
push 0xf8
push 0x754a
push dword [0x4def88]
call edi
push eax
call ebp
mov eax, dword [esp + 0x10]
test eax, eax
js 0x486a4f
mov esi, dword [sym.imp.USER32.dll_LoadImageW]
push 0
push 0
push 0
push 1
cmp eax, 0x1a
jge 0x486473
push 0x4f50
push dword [0x4deb64]
call esi
push eax
push 1
push 0xf7
push 0x7566
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 0
push 0
push 1
push 0x4e29
push dword [0x4deb64]
call esi
push eax
push 1
push 0xf7
push 0x7567
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 0
push 0
push 1
push 0x7568
push dword [0x4deb64]
call esi
push eax
push 1
push 0xf7
push 0x7568
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 0
push 0
push 1
push 0x4e2e
push dword [0x4deb64]
call esi
push eax
push 1
push 0xf7
push 0x7569
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 0
push 0
push 1
push 0x4e2b
push dword [0x4deb64]
call esi
push eax
push 1
push 0xf7
push 0x756a
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 0
push 0
push 1
push 0x4e2d
push dword [0x4deb64]
call esi
push eax
push 1
push 0xf7
push 0x756b
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 0
push 0
push 1
push 0x756c
push dword [0x4deb64]
call esi
push eax
push 1
push 0xf7
push 0x756c
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 0
push 0
push 1
push 0x4f50
push dword [0x4deb64]
call esi
push eax
push 1
push 0xf7
push 0x7565
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 0
push 0
push 1
push 0x4e29
push dword [0x4deb64]
call esi
push eax
push 1
push 0xf7
push 0x7541
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 0
push 0
push 1
push 0x4e2a
push dword [0x4deb64]
call esi
push eax
push 1
push 0xf7
push 0x7542
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 0
push 0
push 1
push 0x4e2b
push dword [0x4deb64]
call esi
push eax
push 1
push 0xf7
push 0x7543
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 0
push 0
push 1
push 0x4e2c
push dword [0x4deb64]
call esi
push eax
push 1
push 0xf7
push 0x7544
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 0
push 0
push 1
push 0x4e2d
push dword [0x4deb64]
call esi
push eax
push 1
push 0xf7
push 0x7545
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 0
push 0
push 1
push 0x4e2e
push dword [0x4deb64]
call esi
push eax
push 1
push 0xf7
push 0x7546
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 0
push 0
push 1
push 0x4e2f
push dword [0x4deb64]
call esi
push eax
push 1
push 0xf7
push 0x7547
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 0
push 0
push 1
push 0x4e72
push dword [0x4deb64]
call esi
push eax
push 1
push 0xf7
push 0x7549
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 0
push 0
push 1
push 0x4f16
jmp 0x486a2b
cmp eax, 0x28
jge 0x486756
push 0x4f51
push dword [0x4deb64]
call esi
push eax
push 1
push 0xf7
push 0x7566
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 0
push 0
push 1
push 0x4f24
push dword [0x4deb64]
call esi
push eax
push 1
push 0xf7
push 0x7567
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 0
push 0
push 1
push 0x756d
push dword [0x4deb64]
call esi
push eax
push 1
push 0xf7
push 0x7568
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 0
push 0
push 1
push 0x4f29
push dword [0x4deb64]
call esi
push eax
push 1
push 0xf7
push 0x7569
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 0
push 0
push 1
push 0x4f26
push dword [0x4deb64]
call esi
push eax
push 1
push 0xf7
push 0x756a
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 0
push 0
push 1
push 0x4f28
push dword [0x4deb64]
call esi
push eax
push 1
push 0xf7
push 0x756b
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 0
push 0
push 1
push 0x756e
push dword [0x4deb64]
call esi
push eax
push 1
push 0xf7
push 0x756c
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 0
push 0
push 1
push 0x4f51
push dword [0x4deb64]
call esi
push eax
push 1
push 0xf7
push 0x7565
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 0
push 0
push 1
push 0x4f24
push dword [0x4deb64]
call esi
push eax
push 1
push 0xf7
push 0x7541
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 0
push 0
push 1
push 0x4f25
push dword [0x4deb64]
call esi
push eax
push 1
push 0xf7
push 0x7542
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 0
push 0
push 1
push 0x4f26
push dword [0x4deb64]
call esi
push eax
push 1
push 0xf7
push 0x7543
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 0
push 0
push 1
push 0x4f27
push dword [0x4deb64]
call esi
push eax
push 1
push 0xf7
push 0x7544
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 0
push 0
push 1
push 0x4f28
push dword [0x4deb64]
call esi
push eax
push 1
push 0xf7
push 0x7545
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 0
push 0
push 1
push 0x4f29
push dword [0x4deb64]
call esi
push eax
push 1
push 0xf7
push 0x7546
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 0
push 0
push 1
push 0x4f2a
push dword [0x4deb64]
call esi
push eax
push 1
push 0xf7
push 0x7547
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 0
push 0
push 1
push 0x4f2b
push dword [0x4deb64]
call esi
push eax
push 1
push 0xf7
push 0x7549
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 0
push 0
push 1
push 0x4f2c
jmp 0x486a2b
push 0x4f52
push dword [0x4deb64]
call esi
push eax
push 1
push 0xf7
push 0x7566
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 0
push 0
push 1
push 0x4f2d
push dword [0x4deb64]
call esi
push eax
push 1
push 0xf7
push 0x7567
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 0
push 0
push 1
push 0x756f
push dword [0x4deb64]
call esi
push eax
push 1
push 0xf7
push 0x7568
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 0
push 0
push 1
push 0x4f32
push dword [0x4deb64]
call esi
push eax
push 1
push 0xf7
push 0x7569
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 0
push 0
push 1
push 0x4f2f
push dword [0x4deb64]
call esi
push eax
push 1
push 0xf7
push 0x756a
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 0
push 0
push 1
push 0x4f31
push dword [0x4deb64]
call esi
push eax
push 1
push 0xf7
push 0x756b
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 0
push 0
push 1
push 0x7570
push dword [0x4deb64]
call esi
push eax
push 1
push 0xf7
push 0x756c
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 0
push 0
push 1
push 0x4f52
push dword [0x4deb64]
call esi
push eax
push 1
push 0xf7
push 0x7565
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 0
push 0
push 1
push 0x4f2d
push dword [0x4deb64]
call esi
push eax
push 1
push 0xf7
push 0x7541
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 0
push 0
push 1
push 0x4f2e
push dword [0x4deb64]
call esi
push eax
push 1
push 0xf7
push 0x7542
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 0
push 0
push 1
push 0x4f2f
push dword [0x4deb64]
call esi
push eax
push 1
push 0xf7
push 0x7543
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 0
push 0
push 1
push 0x4f30
push dword [0x4deb64]
call esi
push eax
push 1
push 0xf7
push 0x7544
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 0
push 0
push 1
push 0x4f31
push dword [0x4deb64]
call esi
push eax
push 1
push 0xf7
push 0x7545
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 0
push 0
push 1
push 0x4f32
push dword [0x4deb64]
call esi
push eax
push 1
push 0xf7
push 0x7546
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 0
push 0
push 1
push 0x4f33
push dword [0x4deb64]
call esi
push eax
push 1
push 0xf7
push 0x7547
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 0
push 0
push 1
push 0x4f34
push dword [0x4deb64]
call esi
push eax
push 1
push 0xf7
push 0x7549
push dword [0x4def88]
call edi
push eax
call ebp
push 0
push 0
push 0
push 1
push 0x4f35
push dword [0x4deb64]
call esi
push eax
push 1
push 0xf7
push 0x754a
push dword [0x4def88]
call edi
push eax
call ebp
mov eax, dword [esp + 0x10]
push 1
lea esi, [eax + 0x28]
mov eax, dword [0x4def8c]
push esi
push 0x64
push 0x77
add eax, 0x344
push eax
push 0x7566
push dword [0x4def88]
call edi
push eax
call ebx
mov ebp, dword [esp + 0x10]
mov eax, dword [0x4def8c]
add ebp, 0xa7
push 1
push esi
push 0x64
push ebp
add eax, 0x344
push eax
push 0x7567
push dword [0x4def88]
call edi
push eax
call ebx
mov eax, dword [esp + 0x10]
push 1
push esi
push 0x64
lea ebx, [eax*2 + 0xd7]
mov eax, dword [0x4def8c]
push ebx
add eax, 0x344
push eax
push 0x7568
push dword [0x4def88]
call edi
push eax
call dword [sym.imp.USER32.dll_MoveWindow]
mov eax, dword [esp + 0x10]
push 1
push esi
push 0x64
lea edi, [eax*2 + 0x107]
add edi, eax
mov eax, dword [0x4def8c]
push edi
add eax, 0x344
push eax
push 0x7569
push dword [0x4def88]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_MoveWindow]
mov ecx, dword [esp + 0x10]
push 1
push esi
push 0x64
lea eax, [ecx*4 + 0x137]
push eax
mov eax, dword [0x4def8c]
add eax, 0x344
push eax
push 0x756a
push dword [0x4def88]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_MoveWindow]
mov ecx, dword [esp + 0x10]
push 1
lea eax, [ecx + 0x28]
push eax
mov eax, dword [0x4def8c]
lea esi, [ecx*4 + 0x167]
add esi, ecx
add eax, 0x344
push 0x64
push esi
push eax
push 0x756b
push dword [0x4def88]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_MoveWindow]
mov edx, dword [esp + 0x10]
push 1
lea ecx, [edx + 0x28]
push ecx
push 0x64
lea eax, [edx + edx*2]
lea eax, [eax*2 + 0x197]
push eax
mov dword [esp + 0x2c], eax
mov eax, dword [0x4def8c]
add eax, 0x344
push eax
push 0x756c
push dword [0x4def88]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_MoveWindow]
mov eax, dword [esp + 0x10]
push 1
add eax, 0x28
push eax
mov eax, dword [0x4def8c]
push 0x64
push 0x77
add eax, 0x344
push eax
push 0x7565
push dword [0x4def88]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_MoveWindow]
mov eax, dword [esp + 0x10]
push 1
add eax, 0x28
push eax
mov eax, dword [0x4def8c]
push 0x64
push 0x77
add eax, 0x344
push eax
push 0x7541
push dword [0x4def88]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_MoveWindow]
mov eax, dword [esp + 0x10]
push 1
add eax, 0x28
push eax
mov eax, dword [0x4def8c]
push 0x64
push ebp
add eax, 0x344
push eax
push 0x7542
push dword [0x4def88]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_MoveWindow]
mov ebp, dword [esp + 0x10]
mov eax, dword [0x4def8c]
add ebp, 0x28
push 1
push ebp
push 0x64
push ebx
mov ebx, dword [sym.imp.USER32.dll_GetDlgItem]
add eax, 0x344
push eax
push 0x7543
push dword [0x4def88]
call ebx
push eax
call dword [sym.imp.USER32.dll_MoveWindow]
push 1
push ebp
mov eax, dword [0x4def8c]
push 0x64
push edi
add eax, 0x344
push eax
push 0x7544
push dword [0x4def88]
call ebx
push eax
call dword [sym.imp.USER32.dll_MoveWindow]
mov eax, dword [esp + 0x10]
push 1
push ebp
push 0x64
lea edi, [eax*4 + 0x137]
mov eax, dword [0x4def8c]
push edi
add eax, 0x344
push eax
push 0x7545
push dword [0x4def88]
call ebx
push eax
call dword [sym.imp.USER32.dll_MoveWindow]
mov eax, dword [0x4def8c]
push 1
push ebp
push 0x64
push esi
add eax, 0x344
push eax
push 0x7546
push dword [0x4def88]
call ebx
push eax
call dword [sym.imp.USER32.dll_MoveWindow]
mov eax, dword [0x4def8c]
mov esi, dword [esp + 0x1c]
add eax, 0x344
push 1
push ebp
push 0x64
push esi
push eax
push 0x7547
push dword [0x4def88]
call ebx
push eax
call dword [sym.imp.USER32.dll_MoveWindow]
mov eax, dword [0x4def8c]
push 1
push ebp
push 0x64
push edi
add eax, 0x344
push eax
push 0x7549
push dword [0x4def88]
call ebx
mov edi, dword [sym.imp.USER32.dll_MoveWindow]
push eax
call edi
mov eax, dword [0x4def8c]
push 1
push ebp
push 0x64
push esi
add eax, 0x344
mov ebp, ebx
push eax
push 0x754a
push dword [0x4def88]
call ebp
push eax
call edi
mov eax, dword [0x4def8c]
push 1
add eax, 0x2cf
push 0x69
push eax
mov eax, dword [0x4df1b4]
add eax, 0x1c3
push eax
push 0x6c
push 0x271b
push dword [0x4def88]
call ebp
push eax
call edi
push 0x4ded80
push 0
push str.ShowSysStat
push str.OPTIONS
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
push 1
test eax, eax
mov eax, dword [0x4df1b4]
push 0x5a
jne 0x486db5
push 0x5a
jmp 0x486dba
push 0x8c
add eax, 0x1ce
push eax
push 0x6f
push 0x4f42
push dword [0x4def88]
call ebp
push eax
call edi
mov ebx, dword [esp + 0x14]
mov eax, dword [0x4df1b4]
push 1
push 0x1e
push 0x1cc
add eax, 0x1e2
lea esi, [ebx + 0xfe]
push eax
push esi
push 0x2723
push dword [0x4def88]
call ebp
push eax
call edi
mov eax, dword [0x4df1b4]
push 1
push 0x32
push 0x1cc
add eax, 0x1f8
push eax
push esi
push 0x2724
push dword [0x4def88]
call ebp
push eax
call edi
mov eax, dword [0x4df1b4]
push 1
add eax, 0x148
push eax
mov eax, dword [0x4def8c]
add eax, 0x2cf
push eax
push 0x77
push 0x6c
push 0x2722
push dword [0x4def88]
call ebp
push eax
call edi
movzx eax, bx
add eax, 0xe6
movzx eax, ax
push eax
push 0
push 0x101e
push 0x2722
push dword [0x4def88]
call ebp
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
push eax
call ebx
call fcn.00485310
mov eax, dword [0x4df1b4]
push 1
add eax, 0x1d0
push eax
mov eax, dword [0x4def8c]
add eax, 0x290
push eax
push 0x40
push 0x88
push 0x27c9
push dword [0x4def88]
call ebp
push eax
call edi
push 0
push 0
push 0x130b
push 0x271c
push dword [0x4def88]
call ebp
push eax
call ebx
cmp eax, 3
ja case.default.0x486ecd
jmp dword [eax*4 + 0x48d820]
mov eax, dword [0x4df1b4]
add eax, 0x224
push 1
push eax
mov eax, dword [0x4def8c]
add eax, 0x2cf
jmp 0x486f0d
push 1
push 0xe8
jmp 0x486f03
mov eax, dword [0x4df1b4]
push 1
add eax, 0x224
push eax
mov eax, dword [0x4def8c]
add eax, 0x33e
push eax
push 8
push 0x6c
push 0x271c
push dword [0x4def88]
call ebp
push eax
call edi
mov eax, dword [0x4def8c]
push 1
push 0xf0
push 0x40
push 0x9a
add eax, 0x354
push eax
push 0x4f17
push dword [0x4def88]
call ebp
push eax
call edi
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x64
push 0x1e
add eax, 0x344
push eax
push 0x271d
push dword [0x4def88]
call ebp
push eax
call edi
mov eax, dword [0x4df1b4]
push 1
add eax, 0x171
push eax
mov eax, dword [0x4def8c]
push 0x64
push 0x50
add eax, 0x344
push eax
push 0x4e4b
push dword [0x4def88]
call ebp
push eax
call edi
mov eax, dword [0x4def8c]
push 1
push 0x16
add eax, 0x226
push eax
push 0x44
push 0xf8
push 0x2726
push dword [0x4def88]
call ebp
push eax
call edi
mov ebx, dword [esp + 0x18]
mov eax, dword [0x4def8c]
push 1
add eax, 0x226
lea esi, [ebx + 0x44]
push esi
push eax
push 0x64
push 0xf8
push 0x2727
push dword [0x4def88]
call ebp
push eax
call edi
mov eax, dword [0x4def8c]
push 1
push 0x18
add eax, 0x296
push eax
lea eax, [ebx + 0xba]
push eax
push 0x88
push 0x272a
push dword [0x4def88]
call ebp
push eax
call edi
mov eax, dword [0x4def8c]
add ebx, 0x17e
push 1
push 0x16
add eax, 0x226
push eax
push ebx
push 0xf8
push 0x2728
push dword [0x4def88]
call ebp
push eax
call edi
mov eax, dword [0x4def8c]
push 1
push esi
mov esi, dword [esp + 0x20]
add eax, 0x226
push eax
lea eax, [esi + 0x19e]
push eax
push 0xf8
push 0x2729
push dword [0x4def88]
call ebp
push eax
call edi
mov eax, dword [0x4def8c]
push 1
push 0x18
add eax, 0x296
push eax
mov eax, dword [0x4df1b4]
add eax, 0x1f2
push eax
push 0x88
push 0x272b
push dword [0x4def88]
call ebp
push eax
call edi
push 1
add esi, 0x64
push esi
push 0x64
push 0x44
push 0x88
push 0x272c
push dword [0x4def88]
call ebp
push eax
call edi
push 1
push esi
push 0x64
push 0x44
push 0x88
push 0x297f
push dword [0x4def88]
call ebp
push eax
call edi
mov edi, dword [esp + 0x18]
push 1
push 0x32
push 0x64
add edi, 0x10e
push edi
push 0x88
push 0x272d
push dword [0x4def88]
call ebp
push eax
call dword [sym.imp.USER32.dll_MoveWindow]
push 1
push esi
push 0x64
push ebx
push 0x88
push 0x272e
push dword [0x4def88]
call ebp
push eax
call dword [sym.imp.USER32.dll_MoveWindow]
push 1
push esi
push 0x64
push ebx
push 0x88
push 0x2980
push dword [0x4def88]
call ebp
mov ebx, dword [sym.imp.USER32.dll_MoveWindow]
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x32
add eax, 0x1f2
push eax
push edi
push 0xf8
push 0x272f
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x32
push 0x28
push edi
add eax, 0x2f6
push eax
push 0x2730
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x61
push 0x64
add eax, 0x1cb
push eax
mov eax, dword [0x4def8c]
add eax, 0x344
push eax
push 0x2731
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x6e
push 0x2c
add eax, 0x32e
push eax
push 0x2739
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x6e
push 0x5e
add eax, 0x32e
push eax
push 0x273a
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x6e
push 0xb8
add eax, 0x32e
push eax
push 0x273b
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0xb4
add eax, 0x2aa
push eax
push 0x2c
push 0x7a
push 0x2738
push dword [0x4def88]
call ebp
push eax
call ebx
mov ecx, dword [esp + 0x14]
movzx edi, cx
lea eax, [edi + 0x1f4]
movzx eax, ax
push eax
push 0
push 0x101e
push 0x2738
push dword [0x4def88]
call ebp
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push eax
call esi
lea eax, [edi + 0x91]
movzx eax, ax
push eax
push 1
push 0x101e
push 0x2738
push dword [0x4def88]
call ebp
push eax
call esi
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x28
push 0x11e
add eax, 0x374
push eax
push 0x2746
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x28
push 0x150
add eax, 0x374
push eax
push 0x2747
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x28
push 0x182
add eax, 0x374
push eax
push 0x2748
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x28
push 0x11e
add eax, 0x374
push eax
push 0x273d
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x28
push 0x150
add eax, 0x374
push eax
push 0x273e
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x28
push 0x182
add eax, 0x374
push eax
push 0x273f
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0xfe
push eax
mov eax, dword [0x4def8c]
add eax, 0x2f0
push eax
push 0x11e
push 0x7a
push 0x2745
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
add eax, 0x2c6
movzx eax, ax
push eax
push 0
push 0x101e
push 0x2745
push dword [0x4def88]
call ebp
push eax
call esi
mov eax, dword [0x4df1b4]
push 1
add eax, 0xfe
push eax
mov eax, dword [0x4def8c]
add eax, 0x2f0
push eax
push 0x11e
push 0x7a
push 0x2740
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
add eax, 0x2c6
movzx eax, ax
push eax
push 0
push 0x101e
push 0x2740
push dword [0x4def88]
call ebp
push eax
call esi
mov eax, dword [0x4df1b4]
push 1
add eax, 0xfe
push eax
mov eax, dword [0x4def8c]
add eax, 0x322
push eax
push 0x11e
push 0x7a
push 0x2741
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
add eax, 0x2f8
movzx eax, ax
push eax
push 0
push 0x101e
push 0x2741
push dword [0x4def88]
call ebp
push eax
call esi
mov eax, dword [0x4df1b4]
push 1
add eax, 0xfe
push eax
mov eax, dword [0x4def8c]
add eax, 0x322
push eax
push 0x11e
push 0x7a
push 0x2742
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
add eax, 0x2f8
movzx eax, ax
push eax
push 0
push 0x101e
push 0x2742
push dword [0x4def88]
call ebp
push eax
call esi
mov eax, dword [0x4df1b4]
push 1
add eax, 0xfe
push eax
mov eax, dword [0x4def8c]
add eax, 0x322
push eax
push 0x11e
push 0x7a
push 0x2743
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
add eax, 0x2f8
movzx eax, ax
push eax
push 0
push 0x101e
push 0x2743
push dword [0x4def88]
call ebp
push eax
call esi
mov eax, dword [0x4df1b4]
push 1
add eax, 0xfe
push eax
mov eax, dword [0x4def8c]
add eax, 0x322
push eax
push 0x11e
push 0x7a
push 0x2744
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
add eax, 0x2f8
movzx eax, ax
push eax
push 0
push 0x101e
push 0x2744
push dword [0x4def88]
call ebp
push eax
call esi
mov eax, dword [0x4df1b4]
push 1
add eax, 0x132
push eax
mov eax, dword [0x4def8c]
add eax, 0x33e
push eax
push 0xfa
push 0x6c
push 0x273c
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x6e
push 0x40
add eax, 0x322
push eax
push 0x274d
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x6e
push 0x72
add eax, 0x322
push eax
push 0x274e
push dword [0x4def88]
call ebp
push eax
call ebx
mov esi, dword [esp + 0x18]
push 1
push 0x28
push 0x6e
lea eax, [esi + 0x126]
push eax
mov dword [esp + 0x2c], eax
mov eax, dword [0x4def8c]
add eax, 0x322
push eax
push 0x274f
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
lea edi, [esi + 0x158]
push 1
push 0x28
push 0x6e
push edi
add eax, 0x322
push eax
push 0x2750
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
add esi, 0xb4
push 1
push esi
add eax, 0x290
push eax
push dword [esp + 0x28]
push 0x88
push 0x2751
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
add eax, 0x290
push eax
mov eax, dword [0x4df1b4]
add eax, 0x1f6
push eax
push 0x88
push 0x2754
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x16
add eax, 0x258
push eax
mov eax, dword [0x4df1b4]
add eax, 0x200
push eax
push 0x94
push 0x2753
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x28
push 0x6e
add eax, 0x1f6
push eax
mov eax, dword [0x4def8c]
add eax, 0x322
push eax
push 0x2752
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push esi
push 0x78
push 0x40
push 0x88
push 0x274b
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push esi
add eax, 0x20c
push eax
push 0x40
push 0x10c
push 0x274c
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
add eax, 0x1f4
movzx eax, ax
push eax
push 0
push 0x101e
push 0x274c
push dword [0x4def88]
call ebp
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push eax
call esi
mov eax, dword [0x4def8c]
add eax, 0x258
movzx eax, ax
push eax
push 0
push 0x101e
push 0x2751
push dword [0x4def88]
call ebp
push eax
call esi
mov esi, dword [esp + 0x18]
mov eax, dword [0x4def8c]
add esi, 0xbe
push 1
push esi
add eax, 0x2b2
push eax
push 0x20
push 0xe
push 0x271e
push 0x271c
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x66
add eax, 0x2b2
push eax
mov eax, dword [esp + 0x24]
add eax, 0xe8
push eax
push 0xe
push 0x271f
push 0x271c
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push esi
add eax, 0x2b2
push eax
push edi
push 0xe
push 0x2720
push 0x271c
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov esi, dword [esp + 0x18]
mov eax, dword [0x4def8c]
push 1
add eax, 0x322
lea edi, [esi + 0xdc]
push edi
push eax
push 0x20
push 0xe
mov dword [esp + 0x38], edi
push 0x2749
push 0x271c
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
lea ecx, [esi + 0x106]
push 1
push edi
add eax, 0x322
push eax
push ecx
push 0xe
push 0x274a
push 0x271c
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x1f6
push eax
mov eax, dword [0x4def8c]
add eax, 0x322
push eax
push 0x20
push 0xe
push 0x29ad
push 0x271c
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
push 0
push 0
push 0x130b
push 0x29da
push dword [0x4def88]
call ebp
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
push eax
call edi
sub eax, 0
je 0x4878f1
sub eax, 1
je 0x4878e2
sub eax, 1
jne 0x487917
mov eax, dword [0x4df1b4]
push 1
add eax, 0x224
push eax
jmp 0x4878f8
push 1
push 0x108
mov eax, dword [0x4def8c]
add eax, 0x2cf
push eax
push 8
push 0x6c
push 0x29da
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x9c
push 0x40
push 0x123
add eax, 0x357
push eax
push 0x4f7c
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x61
push 0x64
push 0x1e
add eax, 0x344
push eax
push 0x29d4
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x61
push 0x64
push 0x1e
add eax, 0x344
push eax
push 0x29d5
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x64
push 0x87
add eax, 0x344
push eax
push 0x29d6
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x64
push 0xb7
add eax, 0x344
push eax
push 0x29d7
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x64
push 0xe7
add eax, 0x344
push eax
push 0x29d8
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x61
add eax, 0x1cb
push 0x64
push eax
mov eax, dword [0x4def8c]
add eax, 0x344
push eax
push 0x29d9
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x26
push 0x64
push 0x40
push 0x88
push 0x29dc
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x27
push 0x64
push 0x6f
push 0x88
push 0x29dd
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x27
push 0x64
push 0x9e
push 0x88
push 0x29de
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x27
push 0x64
push 0xcd
push 0x88
push 0x29df
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x1c
push 0x12c
add eax, 0x1cc
push eax
push 0x88
push 0x29e7
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x1c
push 0x12c
add eax, 0x1ea
push eax
push 0x88
push 0x29e8
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
mov esi, dword [esp + 0x14]
add eax, 0x1cc
push 1
push 0x1c
push 0x12c
push eax
add esi, 0x20d
push esi
push 0x29e9
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x1c
push 0x12c
add eax, 0x1ea
push eax
push esi
push 0x29ea
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x110
push eax
mov eax, dword [0x4def8c]
add eax, 0x2cf
push eax
push 0x11c
push 0x6c
push 0x29e3
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0xe
add eax, 0x2b2
push eax
mov eax, dword [0x4df1b4]
add eax, 0x206
push eax
push 0x7a
push 0x29e6
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0xa
add eax, 0x2b2
push eax
mov eax, dword [0x4df1b4]
add eax, 0x216
push eax
push 0x7a
push 0x2a40
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0xda
add eax, 0x2b2
push eax
push 0x20
push 0xe
push 0x29db
push 0x29da
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0xb4
add eax, 0x226
push eax
push 0x40
push 0xf8
push 0x29e0
push dword [0x4def88]
call ebp
push eax
call ebx
push 0x17c
push 0
push 0x101e
push 0x29e0
push dword [0x4def88]
call ebp
push eax
call edi
mov eax, dword [0x4def8c]
add eax, 0x84
movzx eax, ax
push eax
push 1
push 0x101e
push 0x29e0
push dword [0x4def88]
call ebp
push eax
call edi
mov eax, dword [0x4df1b4]
push 1
add eax, 0x88
push eax
mov eax, dword [0x4def8c]
add eax, 0x2b2
push eax
push 0x134
push 0x7a
push 0x29e1
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
add eax, 0xf0
movzx eax, ax
push eax
push 2
push 0x101e
push 0x29e1
push dword [0x4def88]
call ebp
push eax
call edi
mov eax, dword [0x4df1b4]
push 1
add eax, 0x1d0
push eax
mov eax, dword [0x4def8c]
add eax, 0x296
push eax
push 0x40
push 0x88
push 0x29e2
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x1f6
push eax
mov eax, dword [0x4def8c]
add eax, 0x2b2
push eax
push 0x20
push 0xe
push 0x29e4
push 0x29da
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x1f6
push eax
mov eax, dword [0x4def8c]
add eax, 0x2b2
push eax
push 0x20
push 0xe
push 0x29e5
push 0x29da
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x1ae
push eax
mov eax, dword [0x4def8c]
add eax, 0x296
push eax
push 0x50
push 0x88
push 0x29eb
push dword [0x4def88]
call ebp
push eax
call ebx
push 0
push 0
push 0x130b
push 0x2763
push dword [0x4def88]
call ebp
push eax
call edi
mov esi, eax
cmp esi, 5
ja case.default.0x487da1
jmp dword [esi*4 + 0x48d830]
mov ecx, dword [0x4def8c]
push 1
push 0x108
add ecx, 0x2cf
push ecx
push 8
push 0x6c
push 0x2763
push dword [0x4def88]
call ebp
push eax
call ebx
jmp dword [esi*4 + 0x48d848]
mov eax, dword [0x4df1b4]
push 1
add eax, 0x224
push eax
mov eax, dword [0x4def8c]
add eax, 0x2cf
push eax
push 8
push 0x6c
push 0x2763
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0xb4
jmp 0x487e39
mov eax, dword [0x4def8c]
push 1
push 0x108
add eax, 0x2cf
push eax
push 8
push 0x6c
push 0x2763
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x8e
mov eax, dword [0x4def8c]
add eax, 0x296
push eax
push 0x40
push 0x88
push 0x2776
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
add eax, 0xc8
movzx eax, ax
push eax
push 2
push 0x101e
push 0x2776
push dword [0x4def88]
call ebp
push eax
call edi
mov eax, dword [0x4def8c]
push 1
push 0x9c
push 0x40
push 0x123
add eax, 0x357
push eax
push 0x4f13
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x9c
push 0x40
push 0x123
add eax, 0x357
push eax
push 0x4f15
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x61
push 0x64
push 0x1e
add eax, 0x344
push eax
push 0x2769
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x61
push 0x64
push 0x1e
add eax, 0x344
push eax
push 0x276a
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x64
push 0x87
add eax, 0x344
push eax
push 0x276b
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x64
push 0xb7
add eax, 0x344
push eax
push 0x276c
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x64
push 0xe7
add eax, 0x344
push eax
push 0x276d
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x61
push 0x64
add eax, 0x1cb
push eax
mov eax, dword [0x4def8c]
add eax, 0x344
push eax
push 0x276e
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x110
push eax
mov eax, dword [0x4def8c]
add eax, 0x2cf
push eax
push 0x11c
push 0x6c
push 0x276f
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
add eax, 0x154
movzx eax, ax
push eax
push 0
push 0x101e
push 0x276f
push dword [0x4def88]
call ebp
push eax
call edi
mov eax, dword [0x4def8c]
push 1
push 0x26
push 0x64
push 0x40
add eax, 0x2ba
push eax
push 0x2777
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x27
push 0x64
push 0x6f
add eax, 0x2ba
push eax
push 0x2778
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x27
push 0x64
push 0x9e
add eax, 0x2ba
push eax
push 0x2779
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x27
push 0x64
mov eax, dword [0x4def8c]
push 0xcd
add eax, 0x2ba
push eax
push 0x277a
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0xb4
add eax, 0x226
push eax
push 0x40
push 0x88
push 0x277b
push dword [0x4def88]
call ebp
push eax
call ebx
mov ecx, dword [esp + 0x14]
movzx esi, cx
lea eax, [esi + 0xc8]
movzx eax, ax
push eax
push 0
push 0x101e
push 0x277b
push dword [0x4def88]
mov dword [esp + 0x24], eax
call ebp
push eax
call edi
lea eax, [esi + 0x136]
movzx esi, ax
push esi
push 1
push 0x101e
push 0x277b
push dword [0x4def88]
call ebp
push eax
call edi
mov eax, dword [0x4def8c]
push 1
push 0x26
push 0x64
push 0x40
add eax, 0x2ba
push eax
push 0x277c
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x27
push 0x64
push 0x6f
add eax, 0x2ba
push eax
push 0x277d
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x27
push 0x64
push 0x9e
add eax, 0x2ba
push eax
push 0x277e
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
mov eax, dword [0x4def8c]
push 0x27
push 0x64
push 0xcd
add eax, 0x2ba
push eax
push 0x277f
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0xb4
add eax, 0x226
push eax
push 0x40
push 0x88
push 0x2780
push dword [0x4def88]
call ebp
push eax
call ebx
push esi
push 0
push 0x101e
push 0x2780
push dword [0x4def88]
call ebp
push eax
call edi
push dword [esp + 0x10]
push 1
push 0x101e
push 0x2780
push dword [0x4def88]
call ebp
push eax
call edi
mov eax, dword [0x4def8c]
push 1
push 0x26
push 0x64
push 0x40
add eax, 0x2ba
push eax
push 0x2781
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x27
push 0x64
push 0x6f
add eax, 0x2ba
push eax
push 0x2782
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x27
push 0x64
push 0x9e
add eax, 0x2ba
push eax
push 0x2783
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x27
push 0x64
push 0xcd
add eax, 0x2ba
push eax
push 0x2784
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0xb4
add eax, 0x226
push eax
push 0x40
push 0x88
push 0x2785
push dword [0x4def88]
call ebp
push eax
call ebx
push dword [esp + 0x10]
push 0
push 0x101e
push 0x2785
push dword [0x4def88]
call ebp
push eax
call edi
push esi
push 1
push 0x101e
push 0x2785
push dword [0x4def88]
call ebp
push eax
call edi
mov eax, dword [0x4df1b4]
push 1
add eax, 0x1ae
push eax
mov eax, dword [0x4def8c]
add eax, 0x296
push eax
push 0x50
push 0x88
push 0x2786
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x1f
add eax, 0x296
push eax
push 0xd7
push 0x88
push 0x27a4
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x110
push eax
mov eax, dword [0x4def8c]
add eax, 0x2cf
push eax
push 0x11c
push 0x6c
push 0x27a3
push dword [0x4def88]
call ebp
push eax
call ebx
mov ecx, dword [esp + 0x14]
movzx esi, cx
lea eax, [esi + 0x18b]
movzx eax, ax
push eax
push 0
push 0x101e
push 0x27a3
push dword [0x4def88]
call ebp
push eax
call edi
lea eax, [esi + 0xb4]
movzx eax, ax
push eax
push 1
push 0x101e
push 0x27a3
push dword [0x4def88]
call ebp
push eax
call edi
mov eax, dword [0x4def8c]
push 1
push 0x61
push 0x64
push 0x1e
add eax, 0x344
push eax
push 0x279d
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x61
push 0x64
push 0x1e
add eax, 0x344
push eax
push 0x279e
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x64
push 0x87
add eax, 0x344
push eax
push 0x279f
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x64
push 0xb7
add eax, 0x344
push eax
push 0x27a0
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x64
push 0xe7
add eax, 0x344
push eax
push 0x27a1
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0xda
add eax, 0x2b2
push eax
push 0x20
push 0xe
push 0x2770
push 0x2763
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0xda
add eax, 0x2b2
push eax
push 0x20
push 0xe
push 0x2771
push 0x2763
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0xda
add eax, 0x2b2
push eax
push 0x20
push 0xe
push 0x2772
push 0x2763
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0xda
add eax, 0x2b2
push eax
push 0x20
push 0xe
push 0x2773
push 0x2763
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x1f6
push eax
mov eax, dword [0x4def8c]
add eax, 0x2b2
push eax
push 0x20
push 0xe
push 0x2774
push 0x2763
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0xda
add eax, 0x2b2
push eax
push 0x20
push 0xe
push 0x2775
push 0x2763
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
push 0
push 0
push 0x130b
push 0x27ad
push dword [0x4def88]
call ebp
push eax
call edi
cmp eax, 5
ja case.default.0x4885ae
jmp dword [eax*4 + 0x48d860]
mov eax, dword [0x4def8c]
push 1
push 0x108
add eax, 0x2cf
jmp 0x4885df
mov eax, dword [0x4df1b4]
add eax, 0x224
push 1
push eax
mov eax, dword [0x4def8c]
add eax, 0x33e
push eax
push 8
push 0x6c
push 0x27ad
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x9c
push 0x40
push 0x123
add eax, 0x357
push eax
push 0x4f14
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x29
push 0x38
push 0x12c
add eax, 0x33e
push eax
push 0x4f19
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x29
push 0x38
push 0x18e
add eax, 0x33e
push eax
push 0x4f18
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x29
push 0x38
push 0x164
add eax, 0x33e
push eax
push 0x4f85
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0xb4
add eax, 0x296
push eax
push 0x40
push 0x88
push 0x27af
push dword [0x4def88]
call ebp
push eax
call ebx
lea eax, [esi + 0x10e]
movzx eax, ax
push eax
push 0
push 0x101e
push 0x27af
push dword [0x4def88]
call ebp
push eax
call edi
lea eax, [esi + 0x162]
movzx eax, ax
push eax
push 1
push 0x101e
push 0x27af
push dword [0x4def88]
call ebp
push eax
call edi
push 1
mov eax, dword [0x4def8c]
push 0x61
push 0x64
push 0x1e
add eax, 0x344
push eax
push 0x4f61
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x61
push 0x64
push 0x1e
add eax, 0x344
push eax
push 0x27b7
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x64
push 0x87
add eax, 0x344
push eax
push 0x27b8
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x64
push 0xb7
add eax, 0x344
push eax
push 0x27b9
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x64
push 0xe7
add eax, 0x344
push eax
push 0x27ba
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x61
push 0x64
add eax, 0x1cb
push eax
mov eax, dword [0x4def8c]
add eax, 0x344
push eax
push 0x27bb
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x110
push eax
mov eax, dword [0x4def8c]
add eax, 0x2cf
push eax
push 0x11c
push 0x6c
push 0x27c0
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [esp + 0x20]
movzx esi, ax
mov dword [esp + 0x1c], esi
lea eax, [esi + 0x17c]
movzx eax, ax
push eax
push 0
push 0x101e
push 0x27c0
push dword [0x4def88]
call ebp
push eax
call edi
lea eax, [esi + 0x91]
movzx esi, ax
push esi
push 1
push 0x101e
push 0x27c0
push dword [0x4def88]
call ebp
push eax
call edi
push esi
push 2
push 0x101e
push 0x27c0
push dword [0x4def88]
call ebp
push eax
call edi
mov eax, dword [0x4df1b4]
push 1
add eax, 0x1d0
push eax
mov eax, dword [0x4def8c]
add eax, 0x290
push eax
push 0x40
push 0x88
push 0x27c4
push dword [0x4def88]
call ebp
push eax
call ebx
mov edx, dword [esp + 0x14]
movzx eax, dx
add eax, 0xf5
movzx esi, ax
push esi
push 0
push 0x101e
push 0x27c4
push dword [0x4def88]
call ebp
push eax
call edi
push esi
push 1
push 0x101e
push 0x27c4
push dword [0x4def88]
call ebp
push eax
call edi
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x6e
push 0x40
add eax, 0x322
push eax
push 0x27c5
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x6e
push 0x72
add eax, 0x322
push eax
push 0x27c6
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x6e
push 0xa4
add eax, 0x322
push eax
push 0x27c7
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x6e
push 0xd6
add eax, 0x322
push eax
push 0x27c8
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x28
push 0x6e
add eax, 0x1e8
push eax
mov eax, dword [0x4def8c]
add eax, 0x322
push eax
push 0x27bc
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x6e
push 0x40
add eax, 0x322
push eax
push 0x27ca
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x6e
push 0x72
add eax, 0x322
push eax
push 0x27cb
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x6e
push 0xa4
add eax, 0x322
push eax
push 0x27cc
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x6e
push 0xd6
add eax, 0x322
push eax
push 0x27cd
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x6e
push 0x108
add eax, 0x322
push eax
push 0x27ce
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x6e
push 0x13a
add eax, 0x322
push eax
push 0x27cf
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x28
push 0x6e
add eax, 0x1e8
push eax
mov eax, dword [0x4def8c]
add eax, 0x322
push eax
push 0x27bd
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x61
add eax, 0x290
push eax
push 0x40
push 0x88
push 0x27d0
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
add eax, 0x290
push eax
mov eax, dword [0x4df1b4]
add eax, 0x1e8
push eax
push 0x88
push 0x27d1
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x61
push 0x6e
push 0x40
add eax, 0x322
push eax
push 0x27b1
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x61
push 0x6e
push 0x40
add eax, 0x322
push eax
push 0x27b2
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x6e
push 0xab
add eax, 0x322
push eax
push 0x27b4
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x6e
push 0xdd
add eax, 0x322
push eax
push 0x27b3
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x6e
push 0x10f
add eax, 0x322
push eax
push 0x27b5
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x28
push 0x6e
add eax, 0x1e8
push eax
mov eax, dword [0x4def8c]
add eax, 0x322
push eax
push 0x27b6
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
add eax, 0x134
push 1
push eax
mov eax, dword [0x4def8c]
add eax, 0x290
push eax
push 0xab
push 0x88
push 0x27d2
push dword [0x4def88]
call ebp
push eax
call ebx
mov esi, dword [esp + 0x1c]
lea eax, [esi + 0x136]
movzx eax, ax
push eax
push 1
push 0x101e
push 0x27d2
push dword [0x4def88]
call ebp
push eax
call edi
lea eax, [esi + 0x78]
movzx esi, ax
push esi
push 2
push 0x101e
push 0x27d2
push dword [0x4def88]
call ebp
push eax
call edi
push esi
push 3
push 0x101e
push 0x27d2
push dword [0x4def88]
call ebp
push eax
call edi
mov eax, dword [0x4def8c]
push 1
push 0x17
add eax, 0x250
push eax
push 0x4d
push 0xb8
push 0x27d3
push dword [0x4def88]
call ebp
push eax
call ebx
mov esi, dword [esp + 0x14]
push 1
push 0x19
push 0xc8
push 0x68
add esi, 0x1f8
push esi
push 0x27d7
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x19
push 0xc8
push 0x81
push esi
push 0x27d8
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x10
push 0x10
add eax, 0x1f3
push eax
push 0x94
push 0x27dc
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
mov esi, dword [esp + 0x14]
add eax, 0x1f3
push 1
push 0x10
push 0x10
push eax
lea eax, [esi + 0x170]
push eax
push 0x27dd
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x10
push 0x10
add eax, 0x1f3
push eax
mov eax, dword [0x4def8c]
add eax, 0x24c
push eax
push 0x27de
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x19
push 0x96
add eax, 0x1ef
push eax
push 0xae
push 0x27d9
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x19
push 0x96
add eax, 0x1ef
push eax
lea eax, [esi + 0x18a]
push eax
push 0x27da
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x19
push 0x96
add eax, 0x1ef
push eax
mov eax, dword [0x4def8c]
add eax, 0x266
push eax
push 0x27db
push dword [0x4def88]
call ebp
push eax
call ebx
mov esi, dword [esp + 0x18]
push 1
lea eax, [esi + 0xb6]
push eax
mov eax, dword [0x4def8c]
add eax, 0x290
push eax
push 0x40
push 0x88
push 0x27e1
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
add eax, 0x19a
movzx eax, ax
push eax
push 0
push 0x101e
push 0x27e1
push dword [0x4def88]
call ebp
push eax
call edi
push 1
lea eax, [esi + 0xea]
push eax
mov eax, dword [0x4def8c]
add eax, 0x290
push eax
lea eax, [esi + 0x126]
push eax
push 0x88
push 0x27e2
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
add eax, 0x19a
movzx eax, ax
push eax
push 0
push 0x101e
push 0x27e2
push dword [0x4def88]
call ebp
push eax
call edi
mov eax, dword [0x4def8c]
push 1
push 0x26
push 0x6e
push 0x40
add eax, 0x322
push eax
push 0x27e3
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x26
push 0x6e
push 0x70
add eax, 0x322
push eax
push 0x27e4
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x26
push 0x6e
push 0xa0
add eax, 0x322
push eax
push 0x27e5
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x26
push 0x6e
push 0xd0
add eax, 0x322
push eax
push 0x27e6
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x26
push 0x6e
lea eax, [esi + 0x126]
push eax
mov eax, dword [0x4def8c]
add eax, 0x322
push eax
push 0x27e7
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x26
push 0x6e
lea eax, [esi + 0x156]
push eax
mov eax, dword [0x4def8c]
add eax, 0x322
push eax
push 0x27e8
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x26
push 0x6e
lea eax, [esi + 0x186]
push eax
mov eax, dword [0x4def8c]
add eax, 0x322
push eax
push 0x27e9
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x26
push 0x6e
lea eax, [esi + 0x1b6]
push eax
mov eax, dword [0x4def8c]
add eax, 0x322
push eax
push 0x27ea
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x28
push 0x6e
add eax, 0x1e8
push eax
mov eax, dword [0x4def8c]
add eax, 0x322
push eax
push 0x27be
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x6e
push 0x40
add eax, 0x322
push eax
push 0x27ee
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x6e
push 0x72
add eax, 0x322
push eax
push 0x27ef
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
lea edi, [esi + 0xe9]
push 1
push 0x28
push 0x6e
push edi
add eax, 0x322
push eax
push 0x27f0
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x28
push 0x6e
lea eax, [esi + 0x11b]
push eax
mov eax, dword [0x4def8c]
add eax, 0x322
push eax
push 0x27f1
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x28
push 0x6e
add eax, 0x1e8
push eax
mov eax, dword [0x4def8c]
add eax, 0x322
push eax
push 0x27bf
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
add esi, 0x7b
push 1
push esi
add eax, 0x290
push eax
push 0x40
push 0x88
push 0x27f2
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
add eax, 0x264
movzx eax, ax
push eax
push 0
push 0x101e
push 0x27f2
push dword [0x4def88]
call ebp
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 1
push esi
mov eax, dword [0x4def8c]
add eax, 0x290
push eax
push edi
push 0x88
push 0x27f3
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
add eax, 0x264
movzx eax, ax
push eax
push 0
push 0x101e
push 0x27f3
push dword [0x4def88]
call ebp
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [0x4def8c]
push 1
push 0x7e
add eax, 0x290
push eax
mov eax, dword [0x4df1b4]
add eax, 0x192
push eax
push 0x88
push 0x27f4
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x1e
push 0x190
add eax, 0x1a2
push eax
push 0xc2
push 0x27f5
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x1e
push 0x190
add eax, 0x1c2
push eax
push 0xc2
push 0x27f6
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x1e
push 0x190
add eax, 0x1e2
push eax
push 0xc2
push 0x27f7
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x10
push 0x10
add eax, 0x1a8
push eax
push 0xa4
push 0x27f8
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x10
push 0x10
add eax, 0x1c8
push eax
push 0xa4
push 0x27f9
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x10
push 0x10
add eax, 0x1e8
push eax
push 0xa4
push 0x27fa
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0xda
add eax, 0x2b2
push eax
push 0x20
push 0xe
push 0x27c1
push 0x27ad
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x1f6
push eax
mov eax, dword [0x4def8c]
add eax, 0x322
push eax
push 0x20
push 0xe
push 0x27c2
push 0x27ad
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x1f6
push eax
mov eax, dword [0x4def8c]
add eax, 0x322
push eax
push 0x20
push 0xe
push 0x27c3
push 0x27ad
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
add eax, 0x1f6
push 1
push eax
mov eax, dword [0x4def8c]
add eax, 0x322
push eax
push 0x20
push 0xe
push 0x27b0
push 0x27ad
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push dword [esp + 0x28]
add eax, 0x322
push eax
push 0x20
push 0xe
push 0x27df
push 0x27ad
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov edi, dword [esp + 0x18]
push 1
lea eax, [edi + 0x110]
push eax
mov eax, dword [0x4def8c]
add eax, 0x322
push eax
lea eax, [edi + 0x106]
push eax
push 0xe
push 0x27e0
push 0x27ad
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
lea esi, [edi + 0xa4]
push 1
push esi
add eax, 0x322
push eax
push 0x1f
push 0xe
push 0x27eb
push 0x27ad
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push esi
add eax, 0x322
push eax
lea eax, [edi + 0xc9]
push eax
push 0xe
push 0x27ec
push 0x27ad
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0xa3
add eax, 0x322
push eax
mov eax, dword [0x4df1b4]
add eax, 0x173
push eax
push 0xe
push 0x27ed
push 0x27ad
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
push 0
push 0
push 0x130b
push 0x27fc
push dword [0x4def88]
call ebp
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push eax
call esi
cmp eax, 4
ja case.default.0x489447
jmp dword [eax*4 + 0x48d878]
mov eax, dword [0x4df1b4]
add eax, 0x224
push 1
push eax
mov eax, dword [0x4def8c]
add eax, 0x2cf
jmp 0x48947e
mov eax, dword [0x4df1b4]
add eax, 0x224
push 1
push eax
mov eax, dword [0x4def8c]
add eax, 0x33e
push eax
push 8
push 0x6c
push 0x27fc
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x6e
push 0x46
push 0x14c
add eax, 0x353
push eax
push 0x4ea2
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x30
push 0x30
push 0x188
add eax, 0x35e
push eax
push 0x4f1a
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x2a
push 0x38
push 0x16c
add eax, 0x358
push eax
push 0x4f1b
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x2a
push 0x38
add eax, 0x198
push eax
mov eax, dword [0x4def8c]
add eax, 0x33e
push eax
push 0x297b
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x64
push 0x1e
add eax, 0x344
push eax
push 0x2802
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x61
push 0x64
push 0x4e
add eax, 0x344
push eax
push 0x2803
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x64
push 0xb7
add eax, 0x344
push eax
push 0x2804
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x64
push 0xe7
add eax, 0x344
push eax
push 0x2805
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x64
push 0x117
add eax, 0x344
push eax
push 0x2806
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x61
push 0x64
add eax, 0x1cb
push eax
mov eax, dword [0x4def8c]
add eax, 0x344
push eax
push 0x2807
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x1d0
push eax
mov eax, dword [0x4def8c]
add eax, 0x296
push eax
push 0x40
push 0x88
push 0x2808
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x1d0
push eax
mov eax, dword [0x4def8c]
add eax, 0x296
push eax
push 0x40
push 0x88
push 0x29c5
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x64
push 0x1e
add eax, 0x344
push eax
push 0x29c0
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x61
push 0x64
push 0x4e
add eax, 0x344
push eax
push 0x29c1
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x64
push 0xb7
add eax, 0x344
push eax
push 0x29c2
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x64
push 0xe7
add eax, 0x344
push eax
push 0x29c3
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x64
push 0x117
add eax, 0x344
push eax
push 0x29c4
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x64
push 0x1e
add eax, 0x344
push eax
push 0x2809
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x61
push 0x64
push 0x4e
add eax, 0x344
push eax
push 0x280a
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x64
push 0xb7
add eax, 0x344
push eax
push 0x280b
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x64
push 0xe7
add eax, 0x344
push eax
push 0x280c
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x64
push 0x117
add eax, 0x344
push eax
push 0x29ac
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x61
push 0x64
add eax, 0x1cb
push eax
mov eax, dword [0x4def8c]
add eax, 0x344
push eax
push 0x280d
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x1d0
push eax
mov eax, dword [0x4def8c]
add eax, 0x296
push eax
push 0x40
push 0x88
push 0x2762
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x64
push 0x1e
add eax, 0x344
push eax
push 0x280e
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x2e
push 0x4e
add eax, 0x344
push eax
push 0x280f
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x2e
push 0x4e
add eax, 0x37a
push eax
push 0x2810
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x64
push 0x7e
add eax, 0x344
push eax
push 0x2811
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x64
push 0xae
add eax, 0x344
push eax
push 0x2812
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 2
push 0x64
push 0xde
add eax, 0x344
push eax
push 0x2813
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x64
push 0xe6
add eax, 0x344
push eax
push 0x2814
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x64
push 0x116
add eax, 0x344
push eax
push 0x2815
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x64
push 0x146
add eax, 0x344
push eax
push 0x2816
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 2
push 0x64
push 0x176
add eax, 0x344
push eax
push 0x2817
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x61
push 0x64
add eax, 0x1cb
push eax
mov eax, dword [0x4def8c]
add eax, 0x344
push eax
push 0x2818
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x176
push eax
mov eax, dword [0x4def8c]
add eax, 0x296
push eax
push 0x40
push 0x88
push 0x2819
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
add eax, 0x190
movzx eax, ax
push eax
push 6
push 0x101e
push 0x2819
push dword [0x4def88]
call ebp
push eax
call esi
mov eax, dword [0x4def8c]
push 1
push 0x16
add eax, 0x296
push eax
mov eax, dword [0x4df1b4]
add eax, 0x1c1
push eax
push 0x88
push 0x281a
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x16
add eax, 0x296
push eax
mov eax, dword [0x4df1b4]
add eax, 0x1dd
push eax
push 0x88
push 0x281b
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x16
add eax, 0x296
push eax
mov eax, dword [0x4df1b4]
add eax, 0x1f9
push eax
push 0x88
push 0x281c
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x28
push 0x6e
add eax, 0x1e8
push eax
mov eax, dword [0x4def8c]
add eax, 0x322
push eax
push 0x281d
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x6e
push 0x40
add eax, 0x322
push eax
push 0x7532
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x6e
push 0x72
add eax, 0x322
push eax
push 0x7533
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x6e
push 0xa4
add eax, 0x322
push eax
push 0x7535
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x6e
push 0xd6
add eax, 0x322
push eax
push 0x7534
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x28
push 0x6e
push 0x108
mov eax, dword [0x4def8c]
add eax, 0x322
push eax
push 0x7537
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x6e
push 0x13a
add eax, 0x322
push eax
push 0x7536
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x122
push eax
mov eax, dword [0x4def8c]
add eax, 0x290
push eax
push 0x40
push 0x88
push 0x281e
push dword [0x4def88]
call ebp
push eax
call ebx
mov edx, dword [esp + 0x14]
movzx eax, dx
add eax, 0x140
movzx eax, ax
push eax
push 0
push 0x101e
push 0x281e
push dword [0x4def88]
call ebp
push eax
call esi
mov edx, dword [esp + 0x14]
movzx eax, dx
add eax, 0x12c
movzx eax, ax
push eax
push 1
push 0x101e
push 0x281e
push dword [0x4def88]
call ebp
push eax
call esi
mov eax, dword [0x4def8c]
push 1
push 0x80
add eax, 0x290
push eax
mov eax, dword [0x4df1b4]
add eax, 0x190
push eax
push 0x88
push 0x281f
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x16
add eax, 0x15e
push eax
mov eax, dword [0x4df1b4]
add eax, 0x199
push eax
push 0x96
push 0x2820
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x16
add eax, 0x15e
push eax
mov eax, dword [0x4df1b4]
add eax, 0x1af
push eax
push 0x96
push 0x2821
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x16
add eax, 0x15e
push eax
mov eax, dword [0x4df1b4]
add eax, 0x1c5
push eax
push 0x96
push 0x2822
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x16
add eax, 0x15e
push eax
mov eax, dword [0x4df1b4]
add eax, 0x1db
push eax
push 0x96
push 0x2823
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x16
add eax, 0x15e
push eax
mov eax, dword [0x4df1b4]
add eax, 0x1f1
push eax
push 0x96
push 0x2824
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x1f6
push eax
mov eax, dword [0x4def8c]
add eax, 0x2b2
push eax
push 0x20
push 0xe
push 0x27fd
push 0x27fc
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x1f6
push eax
mov eax, dword [0x4def8c]
add eax, 0x2b2
push eax
push 0x20
push 0xe
push 0x29bf
push 0x27fc
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x1f6
push eax
mov eax, dword [0x4def8c]
add eax, 0x2b2
push eax
push 0x20
push 0xe
push 0x27ff
push 0x27fc
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x1f6
push eax
mov eax, dword [0x4def8c]
add eax, 0x2b2
push eax
push 0x20
push 0xe
push 0x2800
push 0x27fc
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x148
push eax
mov eax, dword [0x4def8c]
add eax, 0x322
push eax
push 0x20
push 0xe
push 0x27fe
push 0x27fc
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0xa6
add eax, 0x322
push eax
mov eax, dword [0x4df1b4]
add eax, 0x170
push eax
push 0xe
push 0x2801
push 0x27fc
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
add eax, 0x64
push eax
push 6
push 0x2a8
push 0x4e95
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x32
push 6
add eax, 0x2fe
push eax
push 0x4e96
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x40
push 0x40
push 0x177
add eax, 0x351
push eax
push 0x4e80
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x30
push 0x76
push dword [0x4c4964]
add eax, 0x336
push eax
push 0x4e7e
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x30
push 0x76
add eax, 0x1ce
push eax
mov eax, dword [0x4def8c]
add eax, 0x336
push eax
push 0x4e7f
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x6e
push 6
add eax, 0x33a
push eax
push 0x29fa
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x6e
push 0x38
add eax, 0x33a
push eax
push 0x2828
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x6e
push 0x6a
add eax, 0x33a
push eax
push 0x2829
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x6e
push 0x9c
add eax, 0x33a
push eax
push 0x282a
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x6e
push 0xce
add eax, 0x33a
push eax
push 0x282b
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x6e
push 0x100
add eax, 0x33a
push eax
push 0x282c
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x6e
push 0x132
add eax, 0x33a
push eax
push 0x282d
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x28
push 0x6e
add eax, 0x1d2
push eax
mov eax, dword [0x4def8c]
add eax, 0x33a
push eax
push 0x282e
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
mov eax, dword [0x4df1b4]
push 0x28
push 0x6e
add eax, 0x204
push eax
mov eax, dword [0x4def8c]
add eax, 0x33a
push eax
push 0x282f
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
add eax, 0x2a8
push eax
mov eax, dword [0x4df1b4]
add eax, 0x1f4
push eax
push 0x7a
push 0x28aa
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x1f4
push eax
mov eax, dword [0x4def8c]
add eax, 0x2c6
push eax
push 0x38
push 0x6c
push 0x29f9
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x1c6
push eax
mov eax, dword [0x4def8c]
add eax, 0x2a8
push eax
push 0x20
push 0xe
push 0x4f7e
push 0x29f9
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x1c6
push eax
mov eax, dword [0x4def8c]
add eax, 0x2a8
push eax
push 0x20
push 0xe
push 0x4f7f
push 0x29f9
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
add eax, 0x1c6
push 1
push eax
mov eax, dword [0x4def8c]
add eax, 0x2a8
push eax
push 0x20
push 0xe
push 0x4f80
push 0x29f9
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x1c6
push eax
mov eax, dword [0x4def8c]
add eax, 0x2a8
push eax
push 0x20
push 0xe
push 0x2a41
push 0x29f9
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x64
add eax, 0x1cc
push eax
push 0x8f
push 0x122
push 0x2a08
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x30
push 0x30
add eax, 0x1c2
push eax
mov eax, dword [0x4def8c]
add eax, 0x2cc
push eax
push 0x2a09
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
add eax, 0x21c
push eax
push 0x1e0
push 0xa0
push 0x2a22
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x24
push 0x64
push 0x8c
add eax, 0x2a2
push eax
push 0x1b6
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x24
push 0x64
mov eax, dword [0x4def8c]
push 0xb8
add eax, 0x2a2
push eax
push 0x1b7
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x24
push 0x64
push 0xe4
add eax, 0x2a2
push eax
push 0x1b8
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x1a
push 0x46
push 0x9c
add eax, 0x258
push eax
push 0x1aa
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x1a
push 0x46
push 0xd9
add eax, 0x258
push eax
push 0x1ab
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x1a
push 0x46
push 0x116
add eax, 0x258
push eax
push 0x1ac
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x1a
push 0x46
push 0x153
add eax, 0x258
push eax
push 0x1ad
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x1a
push 0x46
push 0x190
add eax, 0x258
push eax
push 0x1ae
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x1a
push 0x46
push 0x1cd
add eax, 0x258
push eax
push 0x1af
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x14
push 0xc8
push 0x8c
add eax, 0x17c
push eax
push 0x1b0
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x14
push 0xc8
push 0xc9
add eax, 0x17c
push eax
push 0x1b1
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x14
push 0xc8
push 0x106
add eax, 0x17c
push eax
push 0x1b2
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x14
push 0xc8
push 0x143
add eax, 0x17c
push eax
push 0x1b3
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x14
push 0xc8
push 0x180
add eax, 0x17c
push eax
push 0x1b4
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x14
push 0xc8
push 0x1bd
add eax, 0x17c
push eax
push 0x1b5
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x1e
add eax, 0x186
push eax
push 0x9e
push 0xc8
push 0x19e
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x1e
add eax, 0x186
push eax
push 0xdb
push 0xc8
push 0x19f
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x1e
add eax, 0x186
push eax
push pe_nt_image_headers32
push 0xc8
push 0x1a0
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x1e
add eax, 0x186
push eax
push 0x155
push 0xc8
push 0x1a1
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x1e
add eax, 0x186
push eax
push 0x192
push 0xc8
push 0x1a2
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x1e
add eax, 0x186
push eax
push 0x1cf
push 0xc8
push 0x1a3
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
add eax, 0x1f4
push 1
push eax
mov eax, dword [0x4def8c]
add eax, 0x2c6
push eax
push 0x38
push 0x6c
push 0x2830
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
lea eax, [edi + 0x6e]
push eax
mov eax, dword [0x4def8c]
add eax, 0x28c
push eax
push 0x74
push 0x88
push 0x2841
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
lea eax, [edi + 0xec]
push eax
mov eax, dword [0x4def8c]
add eax, 0x28c
push eax
lea eax, [edi + 0x11e]
push eax
push 0x88
push 0x2842
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x196
push eax
mov eax, dword [0x4def8c]
add eax, 0x28c
push eax
push 0x74
push 0x88
push 0x2851
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x14
push 0x186
lea eax, [edi + 0x13e]
push eax
push 0x96
push 0x2835
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x14
push 0x186
lea eax, [edi + 0x166]
push eax
push 0x96
push 0x2836
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x14
push 0x186
lea eax, [edi + 0x18e]
push eax
push 0x96
push 0x2838
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x14
push 0x186
lea eax, [edi + 0x1b6]
push eax
push 0x96
push 0x2839
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x14
push 0x186
lea eax, [edi + 0x1de]
push eax
push 0x96
push 0x2837
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x16
add eax, 0x21c
push eax
push 0x8d
push 0xe6
push 0x283a
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x16
add eax, 0x21c
push eax
push 0xb5
push 0xe6
push 0x283b
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x16
add eax, 0x21c
push eax
lea eax, [edi + 0x13a]
push eax
push 0xe6
push 0x283c
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x16
add eax, 0x21c
push eax
lea eax, [edi + 0x162]
push eax
push 0xe6
push 0x283d
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x16
add eax, 0x21c
push eax
lea eax, [edi + 0x18a]
push eax
push 0xe6
push 0x283f
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x16
add eax, 0x21c
push eax
lea eax, [edi + 0x1b2]
push eax
push 0xe6
push 0x2840
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x16
add eax, 0x21c
push eax
lea eax, [edi + 0x1d8]
push eax
push 0xe6
push 0x283e
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x15
add eax, 0x1ea
push eax
push 0x8f
push 0xfa
push 0x285e
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x15
add eax, 0x1ea
push eax
push 0xad
push 0xfa
push 0x285f
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x15
add eax, 0x1ea
push eax
push 0xcb
push 0xfa
push 0x2860
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x15
add eax, 0x1ea
push eax
push 0xe9
push 0xfa
push 0x2861
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x15
mov eax, dword [0x4def8c]
add eax, 0x1ea
push eax
push 0x107
push 0xfa
push 0x2862
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x15
add eax, 0x1ea
push eax
push 0x125
push 0xfa
push 0x2863
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x15
add eax, 0x1ea
push eax
push 0x143
push 0xfa
push 0x2864
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x15
add eax, 0x1ea
push eax
push 0x161
push 0xfa
push 0x2865
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x15
add eax, 0x1ea
push eax
push 0x17f
push 0xfa
push 0x2866
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x15
add eax, 0x1ea
push eax
push 0x19d
push 0xfa
push 0x2867
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x15
add eax, 0x1ea
push eax
push 0x1bb
push 0xfa
push 0x2868
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x15
add eax, 0x1ea
push eax
push 0x1d9
push 0xfa
push 0x2869
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x15
push 0x18
push 0x8f
add eax, 0x2ee
push eax
push 0x286a
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x15
push 0x18
push 0xad
add eax, 0x2ee
push eax
push 0x286b
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x15
push 0x18
push 0xcb
add eax, 0x2ee
push eax
push 0x286c
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x15
push 0x18
push 0xe9
add eax, 0x2ee
push eax
push 0x286d
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x15
push 0x18
push 0x107
add eax, 0x2ee
push eax
push 0x286e
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x15
push 0x18
push 0x125
add eax, 0x2ee
push eax
push 0x286f
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x15
push 0x18
push 0x143
add eax, 0x2ee
push eax
push 0x2870
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x15
push 0x18
push 0x161
add eax, 0x2ee
push eax
push 0x2871
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x15
push 0x18
push 0x17f
add eax, 0x2ee
push eax
push 0x2872
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x15
push 0x18
push 0x19d
add eax, 0x2ee
push eax
push 0x2873
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x15
push 0x18
push 0x1bb
add eax, 0x2ee
push eax
push 0x2874
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x15
push 0x18
push 0x1d9
add eax, 0x2ee
push eax
push 0x2875
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x16
add eax, 0x1fe
push eax
push 0x8d
push 0x104
push 0x29a0
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x16
add eax, 0x1fe
push eax
push 0xb5
push 0x104
push 0x29a1
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x16
add eax, 0x1fe
push eax
push 0xdd
push 0x104
push 0x29a2
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x16
add eax, 0x1fe
push eax
push 0x105
push 0x104
push 0x29a3
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x16
add eax, 0x1fe
push eax
push 0x12d
push 0x104
push 0x29a4
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x16
add eax, 0x1db
push eax
push 0x155
push 0x104
push 0x29a6
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x15
push 0x18
push 0x155
add eax, 0x2ea
push eax
push 0x29a7
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
lea eax, [edi + 0xa0]
push eax
mov eax, dword [0x4def8c]
add eax, 0x2a8
push eax
push 0x20
push 0xe
push 0x2831
push 0x2830
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
push 1
lea eax, [edi + 0x11c]
push eax
mov eax, dword [0x4def8c]
add eax, 0x2a8
push eax
lea eax, [edi + 0xca]
push eax
push 0xe
push 0x2834
push 0x2830
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x1c6
push eax
mov eax, dword [0x4def8c]
add eax, 0x2a8
push eax
push 0x20
push 0xe
push 0x2850
push 0x2830
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x1c6
push eax
mov eax, dword [0x4def8c]
add eax, 0x2a8
push eax
push 0x20
push 0xe
push 0x299a
push 0x2830
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x1f4
push eax
mov eax, dword [0x4def8c]
add eax, 0x2c6
push eax
push 0x38
push 0x6c
push 0x2876
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x30
mov eax, dword [0x4df1b4]
push 0x30
add eax, 0x1c2
push eax
mov eax, dword [0x4def8c]
add eax, 0x2cc
push eax
push 0x2891
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x15c
push eax
mov eax, dword [0x4def8c]
add eax, 0x2a8
push eax
push 0x5c
push 0x7a
push 0x288c
push dword [0x4def88]
call ebp
push eax
call ebx
push dword [esp + 0x10]
push 0
push 0x101e
push 0x288c
push dword [0x4def88]
call ebp
push eax
call esi
mov ecx, dword [esp + 0x14]
movzx edi, cx
lea eax, [edi + 0x15e]
movzx eax, ax
push eax
push 2
push 0x101e
push 0x288c
push dword [0x4def88]
call ebp
push eax
call esi
mov eax, dword [0x4def8c]
push 1
push 0x24
add eax, 0x2a4
push eax
mov eax, dword [0x4df1b4]
add eax, 0x1f6
push eax
push 0x7c
push 0x288d
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x28
push 0x6e
add eax, 0x1c2
push eax
push 0x7a
push 0x288f
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x28
push 0x6e
add eax, 0x1c2
push eax
push 0xf2
push 0x288e
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x28
push 0x6e
add eax, 0x1c2
push eax
push 0x16a
push 0x2890
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x30
push 0x30
add eax, 0x1be
push eax
mov eax, dword [0x4def8c]
add eax, 0x2ed
push eax
push 0x4e89
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x15c
push eax
mov eax, dword [0x4def8c]
add eax, 0x2a8
push eax
push 0x5c
push 0x7a
push 0x2896
push dword [0x4def88]
call ebp
push eax
call ebx
lea eax, [edi + 0xdc]
movzx edi, ax
push edi
push 0
push 0x101e
push 0x2896
push dword [0x4def88]
call ebp
push eax
call esi
mov edx, dword [esp + 0x14]
movzx eax, dx
add eax, 0x1a4
movzx esi, ax
push esi
push 1
push 0x101e
push 0x2896
push dword [0x4def88]
call ebp
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [0x4def8c]
push 1
push 0x24
add eax, 0x2a4
push eax
mov eax, dword [0x4df1b4]
add eax, 0x1f6
push eax
push 0x7c
push 0x2897
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x28
mov eax, dword [0x4df1b4]
push 0x6e
add eax, 0x1c2
push eax
push 0x7a
push 0x2898
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x28
push 0x6e
add eax, 0x1c2
push eax
push 0xf2
push 0x2899
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x15c
push eax
mov eax, dword [0x4def8c]
add eax, 0x2a8
push eax
push 0x5c
push 0x7a
push 0x2892
push dword [0x4def88]
call ebp
push eax
call ebx
push edi
push 0
push 0x101e
push 0x2892
push dword [0x4def88]
call ebp
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
push eax
call edi
push esi
push 1
push 0x101e
push 0x2892
push dword [0x4def88]
call ebp
push eax
call edi
mov eax, dword [0x4def8c]
push 1
push 0x24
add eax, 0x2a4
push eax
mov eax, dword [0x4df1b4]
add eax, 0x1f6
push eax
push 0x7c
push 0x2893
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x28
push 0x6e
add eax, 0x1c2
push eax
push 0x7a
push 0x2894
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x28
mov eax, dword [0x4df1b4]
push 0x6e
add eax, 0x1c2
push eax
push 0xf2
push 0x2895
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x1c6
push eax
mov eax, dword [0x4def8c]
add eax, 0x2a8
push eax
push 0x20
push 0xe
push 0x2877
push 0x2876
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x1c6
push eax
mov eax, dword [0x4def8c]
add eax, 0x2a8
push eax
push 0x20
push 0xe
push 0x2878
push 0x2876
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x1c6
push eax
mov eax, dword [0x4def8c]
add eax, 0x2a8
push eax
push 0x20
push 0xe
push 0x29cf
push 0x2876
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x1f4
push eax
mov eax, dword [0x4def8c]
add eax, 0x2c6
push eax
push 0x38
push 0x6c
push 0x289a
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x30
push 0x30
add eax, 0x1c2
push eax
mov eax, dword [0x4def8c]
add eax, 0x2cc
push eax
push 0x4e8c
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x30
push 0x30
add eax, 0x1be
push eax
mov eax, dword [0x4def8c]
add eax, 0x2ed
push eax
push 0x28a0
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x15c
push eax
mov eax, dword [0x4def8c]
add eax, 0x2a8
push eax
push 0x5c
push 0x7a
push 0x28c8
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
add eax, 0xb4
movzx eax, ax
push eax
push 5
push 0x101e
push 0x28c8
push dword [0x4def88]
call ebp
push eax
call edi
mov eax, dword [0x4def8c]
push 1
push 0x24
add eax, 0x2a4
push eax
mov eax, dword [0x4df1b4]
add eax, 0x1f6
push eax
push 0x7c
push 0x28c9
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x28
push 0x6e
add eax, 0x1c2
push eax
push 0x7a
push 0x28ca
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x28
push 0x6e
add eax, 0x1c2
push eax
push 0xf2
push 0x2a41
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x28
push 0x6e
add eax, 0x1c2
push eax
push 0x16a
push 0x28cb
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x1c6
push eax
mov eax, dword [0x4def8c]
add eax, 0x2a8
push eax
push 0x20
push 0xe
push 0x289c
push 0x289a
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x1c6
push eax
mov eax, dword [0x4def8c]
add eax, 0x2a8
push eax
push 0x20
push 0xe
push 0x289d
push 0x289a
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x1c6
push eax
mov eax, dword [0x4def8c]
add eax, 0x2a8
push eax
push 0x20
push 0xe
push 0x289e
push 0x289a
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x1c6
push eax
mov eax, dword [0x4def8c]
add eax, 0x2a8
push eax
push 0x20
push 0xe
push 0x289f
push 0x289a
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x1f4
push eax
mov eax, dword [0x4def8c]
add eax, 0x2c6
push eax
push 0x38
push 0x6c
push 0x28cc
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x30
push 0x30
add eax, 0x1c2
push eax
mov eax, dword [0x4def8c]
add eax, 0x2cc
push eax
push 0x4e8f
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x1c6
push eax
mov eax, dword [0x4def8c]
add eax, 0x2a8
push eax
push 0x20
push 0xe
push 0x28cd
push 0x28cc
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x1f4
push eax
mov eax, dword [0x4def8c]
add eax, 0x2c6
push eax
push 0x38
push 0x6c
push 0x289b
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x30
push 0x30
add eax, 0x1c2
push eax
mov eax, dword [0x4def8c]
add eax, 0x2cc
push eax
push 0x4e90
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
add eax, 0x1c6
push 1
push eax
mov eax, dword [0x4def8c]
add eax, 0x2a8
push eax
push 0x20
push 0xe
push 0x28d8
push 0x289b
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x1c6
push eax
mov eax, dword [0x4def8c]
add eax, 0x2a8
push eax
push 0x20
push 0xe
push 0x28d9
push 0x289b
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x1c6
push eax
mov eax, dword [0x4def8c]
add eax, 0x2a8
push eax
push 0x20
push 0xe
push 0x28da
push 0x289b
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x1c6
push eax
mov eax, dword [0x4def8c]
add eax, 0x2a8
push eax
push 0x20
push 0xe
push 0x28db
push 0x289b
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x1c6
push eax
mov eax, dword [0x4def8c]
add eax, 0x2a8
push eax
push 0x20
push 0xe
push 0x28dc
push 0x289b
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
push 1
mov eax, dword [0x4df1b4]
add eax, 0x1f4
push eax
mov eax, dword [0x4def8c]
add eax, 0x2c6
push eax
push 0x38
push 0x6c
push 0x28d7
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x30
push 0x30
add eax, 0x1be
push eax
mov eax, dword [0x4def8c]
add eax, 0x2ed
push eax
push 0x4e92
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x15c
push eax
mov eax, dword [0x4def8c]
add eax, 0x2a8
push eax
push 0x5c
push 0x7a
push 0x290a
push dword [0x4def88]
call ebp
push eax
call ebx
mov esi, dword [esp + 0x1c]
lea eax, [esi + 0xa0]
movzx eax, ax
push eax
push 0
push 0x101e
push 0x290a
push dword [0x4def88]
call ebp
push eax
call edi
lea eax, [esi + 0xdc]
movzx eax, ax
push eax
push 1
push 0x101e
push 0x290a
push dword [0x4def88]
call ebp
push eax
call edi
lea eax, [esi + 0x104]
movzx eax, ax
push eax
push 2
push 0x101e
push 0x290a
push dword [0x4def88]
call ebp
push eax
call edi
mov eax, dword [0x4def8c]
push 1
push 0x24
add eax, 0x2a4
push eax
mov eax, dword [0x4df1b4]
add eax, 0x1f6
push eax
push 0x7c
push 0x290b
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x28
push 0x6e
add eax, 0x1c2
push eax
push 0x7a
push 0x290c
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x28
push 0x6e
add eax, 0x1c2
push eax
push 0xf2
push 0x290d
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x28
push 0x6e
add eax, 0x1c2
push eax
push 0x16a
push 0x290e
push dword [0x4def88]
call ebp
push eax
call ebx
cmp dword [0x4c5198], 0x12c
mov eax, dword [0x4def8c]
push 1
jne 0x48c356
push 0xcf
add eax, 0x2a8
push eax
push 0x20
push 0xe
push 0x2a2d
push 0x29d1
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0xed
push eax
mov eax, dword [0x4def8c]
add eax, 0x2a8
push eax
push 0xf9
push 0xe
push 0x2a2e
push 0x29d1
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0xa1
add eax, 0x28c
push eax
push 0x74
push 0x88
push 0x2a35
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0xbd
push eax
mov eax, dword [0x4def8c]
add eax, 0x28c
push eax
push 0x14d
push 0x88
push 0x2a36
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x3e
push 0xc8
push 0x83
add eax, 0x23e
push eax
push 0x2a24
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x3e
push 0xc8
push 0xc8
add eax, 0x23e
push eax
push 0x2a25
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
mov eax, dword [0x4def8c]
push 0x17
add eax, 0x182
push eax
push 0x83
push 0xb0
push 0x2a23
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x64
add eax, 0x64
push eax
push 0xa1
push 0x1ce
push 0x4f82
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x64
push 0x168
push 0xa1
push 0x96
push 0x4f81
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x10
push 0x10
push 0x87
push 0x98
push 0x4f83
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, 0x2aaaaaab
imul dword [0x4df1b4]
push 1
mov eax, edx
add edx, 0x1c
shr eax, 0x1f
add eax, edx
push eax
push 0xdc
push 0x15c
push 0x96
push 0x2a26
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, 0x2aaaaaab
imul dword [0x4df1b4]
push 1
mov eax, edx
add edx, 0x1c
shr eax, 0x1f
add eax, edx
push eax
mov eax, 0x66666667
imul dword [0x4df1b4]
push 0xdc
sar edx, 1
mov eax, edx
add edx, 0x17d
shr eax, 0x1f
add eax, edx
push eax
push 0x96
push 0x2a27
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, 0x2aaaaaab
imul dword [0x4df1b4]
push 1
mov eax, edx
add edx, 0x1c
shr eax, 0x1f
add eax, edx
push eax
mov eax, 0x66666667
imul dword [0x4df1b4]
push 0xdc
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax*2 + 0x19e]
push eax
push 0x96
push 0x2a28
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, 0x2aaaaaab
imul dword [0x4df1b4]
push 1
mov eax, edx
add edx, 0x1c
shr eax, 0x1f
add eax, edx
push eax
mov eax, 0x66666667
imul dword [0x4df1b4]
push 0xdc
sar edx, 1
mov eax, edx
add edx, 0x95
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*2]
push eax
push 0x96
push 0x2a29
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, 0x2aaaaaab
imul dword [0x4df1b4]
push 1
mov eax, edx
add edx, 0x1c
shr eax, 0x1f
add eax, edx
push eax
mov eax, 0x66666667
imul dword [0x4df1b4]
push 0xdc
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax*4 + 0x1e0]
push eax
push 0x96
push 0x2a2a
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x1e
add eax, 0x190
push eax
push 0x15c
push 0x17c
push 0x2a2f
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
add eax, 0x190
push 0x1e
push eax
mov eax, 0x66666667
imul dword [0x4df1b4]
sar edx, 1
mov eax, edx
add edx, 0x17d
shr eax, 0x1f
add eax, edx
push eax
push 0x17c
push 0x2a30
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
add eax, 0x190
push 0x1e
push eax
mov eax, 0x66666667
imul dword [0x4df1b4]
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax*2 + 0x19e]
push eax
push 0x17c
push 0x2a31
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
add eax, 0x190
push 0x1e
push eax
mov eax, 0x66666667
imul dword [0x4df1b4]
sar edx, 1
mov eax, edx
add edx, 0x95
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*2]
push eax
push 0x17c
push 0x2a32
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
add eax, 0x190
push 0x1e
push eax
mov eax, 0x66666667
imul dword [0x4df1b4]
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax*4 + 0x1e0]
push eax
push 0x17c
push 0x2a33
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x14c
push eax
mov eax, dword [0x4def8c]
add eax, 0x244
push eax
push 0xb6
push 0xc8
push 0x291b
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x14
push 0x15e
push 0xbd
push 0xdf
push 0x291c
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x14
push 0xe6
push 0xd5
push 0xdf
push 0x291d
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x15e
push 0x8c
push 0xd3
push 0x1e0
push 0x291e
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x15
push 0x15e
push 0xed
push 0xdf
push 0x291f
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x15
push 0x15e
push 0x139
push 0xdf
push 0x2920
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x15
push 0x1d6
push 0x187
push 0xdf
push 0x2921
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x15
push 0x1d6
push 0x19f
push 0xdf
push 0x2922
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x15
push 0x1d6
push 0x1b7
push 0xdf
push 0x2923
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x15
push 0x1d6
push 0x1cf
push 0xdf
push 0x2924
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x15
push 0x1d6
push 0x1e7
push 0xdf
push 0x2925
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x1e
add eax, 0x1cc
push eax
push 0x103
push 0x108
push 0x2926
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x1e
add eax, 0x1cc
push eax
push 0x14d
push 0x108
push 0x2927
push dword [0x4def88]
call ebp
push eax
call ebx
mov esi, dword [esp + 0x14]
push 1
push 0x14
push 0x1d4
push 0x126
add esi, 0x102
push esi
push 0x2928
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x14
push 0x1d4
push 0x170
push esi
push 0x2929
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x14
push 0x14
push 0x10a
push 0xef
push 0x292a
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x14
push 0x1e
push 0x10a
add eax, 0x2da
push eax
push 0x292b
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x14
push 0x14
push 0x154
push 0xef
push 0x292c
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x14
push 0x1e
push 0x154
add eax, 0x2da
push eax
push 0x292d
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x15
push 0x17c
push 0x7e
push 0xa0
push 0x2918
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x15
push pe_nt_image_headers32
push 0x98
push 0xa0
push 0x2919
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x12c
add eax, 0x12c
push eax
push 0x96
push 0x1e0
push 0x291a
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x14a
push 0x26
add eax, 0xb6
push eax
push 0x96
push 0x4e99
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x12c
push 0x28
add eax, 0xdd
push eax
push 0x9d
push 0x2a3f
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x32
push 0x26
push 0xb6
push 0x96
push 0x4e9c
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0xa
push eax
push 0x26
push 0xd4
push 0x96
push 0x4e9d
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x30
push 0x30
push 0xc8
add eax, 0x2c6
push eax
push 0x4e9a
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x30
push 0x30
add eax, 0x1c2
push eax
mov eax, dword [0x4def8c]
add eax, 0x2cc
push eax
push 0x292e
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x45
add eax, 0x26a
push eax
push 0xa0
push 0x9e
push 0x292f
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x73
add eax, 0x26a
push eax
push 0x125
push 0x9e
push 0x2930
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x15
push 0x10e
push 0x7e
push 0xaa
push 0x2931
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x15
push 0x17c
push 0xa8
push 0xaa
push 0x2932
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x15
push 0x17c
push 0xed
push 0xaa
push 0x2937
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x15
push 0x17c
push 0x106
push 0xaa
push 0x2938
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x15
push 0x17c
push 0x130
push 0xaa
push 0x2939
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x1e
add eax, 0x190
push eax
push 0xbd
push 0x13e
push 0x293a
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x1e
add eax, 0x190
push eax
push 0x14c
push 0x13e
push 0x293b
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
mov eax, dword [0x4def8c]
push 0x1e
add eax, 0x190
push eax
push 0x16f
push 0x13e
push 0x293c
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x15e
add eax, 0x12c
push eax
push 0x7d
push 0x1b8
push 0x293d
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x14
push 0x78
push 0xc5
push 0xc5
push 0x293e
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x14
push 0x78
push 0x154
push 0xc5
push 0x293f
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x14
push 0x78
push 0x177
push 0xc5
push 0x2940
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x14
push 0x32
push 0xc3
add eax, 0x2cd
push eax
push 0x2941
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x14
push 0x32
push 0x153
add eax, 0x2cd
push eax
push 0x2942
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x14
push 0x32
push 0x176
mov eax, dword [0x4def8c]
add eax, 0x2cd
push eax
push 0x2943
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x15
push 0x17c
push 0x1a2
push 0xaa
push 0x2933
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x15
push 0x17c
push 0x1bb
push 0xaa
push 0x2934
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x15
push 0x17c
push 0x1d4
push 0xaa
push 0x2935
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x15
push 0x17c
push 0x1ed
push 0xaa
push 0x2936
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x1f4
push eax
mov eax, dword [0x4def8c]
add eax, 0x2c6
push eax
push 0x38
push 0x6c
push 0x29d1
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x1c6
push eax
mov eax, dword [0x4def8c]
add eax, 0x2a8
push eax
push 0x20
push 0xe
push 0x2915
push 0x29d1
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x1c6
push eax
mov eax, dword [0x4def8c]
add eax, 0x2a8
push eax
push 0x20
push 0xe
push 0x2917
push 0x29d1
jmp 0x48c966
push 0xae
add eax, 0x296
push eax
push 0x44
push 0x88
push 0x2a2b
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0xe0
push eax
mov eax, dword [0x4def8c]
add eax, 0x296
push eax
push 0x12a
push 0x88
push 0x2a2c
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x3e
push 0xc8
push 0x59
add eax, 0x248
push eax
push 0x2a24
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x3e
push 0xc8
push 0xa3
add eax, 0x248
push eax
push 0x2a25
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0xdc
add eax, 0x2b2
push eax
push 0x20
push 0xe
push 0x2a2d
push 0x290f
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x10e
push eax
mov eax, dword [0x4def8c]
add eax, 0x2b2
push eax
push 0x106
push 0xe
push 0x2a2e
push 0x290f
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
push 1
mov eax, dword [0x4def8c]
push 0x17
add eax, 0x18c
push eax
push 0x59
push 0xb0
push 0x2a23
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x64
add eax, 0x64
push eax
push 0x7c
push 0x1d8
push 0x4f82
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x1c6
push eax
mov eax, dword [0x4def8c]
add eax, 0x296
push eax
push 0x44
push 0x88
push 0x2916
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x160
push eax
mov eax, dword [0x4def8c]
add eax, 0x244
push eax
push 0x96
push 0xc8
push 0x291b
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0xa1
push 0x61
push 0x11c
add eax, 0x346
push eax
push 0x4e9b
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x160
push 0x26
add eax, 0x96
push eax
push 0x96
push 0x4e99
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x12c
push 0x28
add eax, 0xd1
push eax
push 0x9d
push 0x2a3f
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0xa
push eax
push 0x26
push 0xb4
push 0x96
push 0x4e9d
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x30
push 0x30
push 0xaa
add eax, 0x2c6
push eax
push 0x4e9a
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x30
push 0x30
add eax, 0x1c2
push eax
mov eax, dword [0x4def8c]
add eax, 0x2d4
push eax
push 0x292e
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x61
push 0x64
push 0x1e
add eax, 0x344
push eax
push 0x2911
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x64
push 0x87
add eax, 0x344
push eax
push 0x2910
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x64
push 0xb7
add eax, 0x344
push eax
push 0x2912
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
mov eax, dword [0x4def8c]
push 0x28
push 0x64
push 0xe7
add eax, 0x344
push eax
push 0x2914
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x61
push 0x64
add eax, 0x1cb
push eax
mov eax, dword [0x4def8c]
add eax, 0x344
push eax
push 0x2913
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x14
push 0x1e
push 0xf4
add eax, 0x2da
push eax
push 0x292b
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x14
push 0x1e
push 0x13e
add eax, 0x2da
push eax
push 0x292d
push dword [0x4def88]
call ebp
push eax
call ebx
mov esi, dword [esp + 0x14]
push 1
push 0x14
push 0x1d4
push 0x110
add esi, 0x102
push esi
push 0x2928
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x14
push 0x1d4
push 0x15a
push esi
push 0x2929
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x1e
add eax, 0x1cc
push eax
push 0xed
push 0x108
push 0x2926
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x1e
add eax, 0x1cc
push eax
push 0x137
push 0x108
push 0x2927
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x45
add eax, 0x26a
push eax
push 0x7c
push 0x9e
push 0x292f
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x73
add eax, 0x26a
push eax
push 0x10f
push 0x9e
push 0x2930
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x14
push 0x32
push 0x9f
add eax, 0x2cd
push eax
push 0x2941
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x14
push 0x32
push 0x13d
add eax, 0x2cd
push eax
push 0x2942
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x14
push 0x32
push 0x160
add eax, 0x2cd
push eax
push 0x2943
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x1e
add eax, 0x190
push eax
push 0x99
push 0x13e
push 0x293a
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x1e
add eax, 0x190
push eax
push 0x136
push 0x13e
push 0x293b
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x1e
add eax, 0x190
push eax
push 0x159
push 0x13e
push 0x293c
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x224
push eax
mov eax, dword [0x4def8c]
add eax, 0x2cf
push eax
push 8
push 0x6c
push 0x290f
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x1f6
push eax
mov eax, dword [0x4def8c]
add eax, 0x2b2
push eax
push 0x20
push 0xe
push 0x2915
push 0x290f
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x1f6
push eax
mov eax, dword [0x4def8c]
add eax, 0x2b2
push eax
push 0x20
push 0xe
push 0x2917
push 0x290f
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
push 1
push dword [esp + 0x50]
push 0x132
push dword [esp + 0x54]
push 2
push 0x2970
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push dword [esp + 0x50]
push 0x132
push dword [esp + 0x54]
push 2
push 0x2971
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push dword [esp + 0x50]
push 0x132
push dword [esp + 0x54]
push 2
push 0x2973
push dword [0x4def88]
call ebp
push eax
call ebx
push 0
push 0
push 0x130b
push 0x2944
push dword [0x4def88]
call ebp
push eax
call edi
cmp eax, 3
ja case.default.0x48c9f5
jmp dword [eax*4 + 0x48d88c]
mov eax, dword [0x4df1b4]
add eax, 0x224
push 1
push eax
mov eax, dword [0x4def8c]
add eax, 0x2cf
jmp 0x48ca2c
mov eax, dword [0x4df1b4]
add eax, 0x224
push 1
push eax
mov eax, dword [0x4def8c]
add eax, 0x33e
push eax
push 8
push 0x6c
push 0x2944
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x58
add eax, 0x2b2
push eax
mov eax, dword [0x4df1b4]
add eax, 0x1c6
push eax
push 0x7a
push 0x294c
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x30
push 0x30
add eax, 0x1dc
push eax
mov eax, dword [0x4def8c]
add eax, 0x2e4
push eax
push 0x4ea5
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x61
push 0x64
push 0x1e
add eax, 0x344
push eax
push 0x2945
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x2e
push 0x87
add eax, 0x344
push eax
push 0x2946
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x2e
push 0x87
add eax, 0x37a
push eax
push 0x2947
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x64
push 0xb7
add eax, 0x344
push eax
push 0x2948
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x64
push 0xe7
add eax, 0x344
push eax
push 0x2949
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x61
push 0x64
add eax, 0x1cb
push eax
mov eax, dword [0x4def8c]
add eax, 0x344
push eax
push 0x294a
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x82
push 0x50
push 0x132
add eax, 0x350
push eax
push 0x4ea1
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x16c
push eax
mov eax, dword [0x4def8c]
add eax, 0x296
push eax
push 0x40
push 0x88
push 0x294d
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x14
push 0x190
add eax, 0x1db
push eax
push 0x88
push 0x294e
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x14
push 0x190
add eax, 0x1f9
push eax
push 0x88
push 0x294f
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x6e
add eax, 0x296
push eax
mov eax, dword [0x4df1b4]
add eax, 0x19e
push eax
push 0x88
push 0x295c
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x30
push 0x30
add eax, 0x1be
push eax
mov eax, dword [0x4def8c]
add eax, 0x2d0
push eax
push 0x4ea8
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x61
push 0x64
push 0x1e
add eax, 0x344
push eax
push 0x2952
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x64
push 0x87
add eax, 0x344
push eax
push 0x2953
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x64
push 0xb7
add eax, 0x344
push eax
push 0x2954
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x14
push 0xfa
add eax, 0x1ac
push eax
push 0xa0
push 0x2955
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x14
push 0xfa
add eax, 0x1ca
push eax
push 0xa0
push 0x2956
push dword [0x4def88]
call ebp
push eax
call ebx
push 1
push 0x14
push 0xfa
mov eax, dword [0x4df1b4]
add eax, 0x1e8
push eax
push 0xa0
push 0x2957
push dword [0x4def88]
call ebp
push eax
call ebx
mov edi, dword [esp + 0x14]
mov eax, dword [0x4df1b4]
push 1
push 0x14
push 0xfa
add eax, 0x1ac
lea esi, [edi + 0x1c2]
push eax
push esi
push 0x2958
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x14
push 0xfa
add eax, 0x1ca
push eax
push esi
push 0x2959
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x14
push 0xfa
add eax, 0x1e8
push eax
push esi
push 0x295a
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x128
push eax
mov eax, dword [0x4def8c]
add eax, 0x296
push eax
push 0x40
push 0x88
push 0x295b
push dword [0x4def88]
call ebp
push eax
call ebx
movzx esi, di
lea eax, [esi + 0x1ea]
movzx edi, ax
push edi
push 0
push 0x101e
push 0x295b
push dword [0x4def88]
call ebp
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esi + 0x87]
movzx esi, ax
push esi
push 1
push 0x101e
push 0x295b
push dword [0x4def88]
call ebp
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [0x4def8c]
push 1
push 0x30
add eax, 0x296
push eax
mov eax, dword [0x4df1b4]
add eax, 0x178
push eax
push 0x88
push 0x2967
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x18
push 0x18
add eax, 0x184
push eax
mov eax, dword [0x4def8c]
add eax, 0x2f7
push eax
push 0x2972
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x61
push 0x64
push 0x1e
add eax, 0x344
push eax
push 0x295f
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x64
push 0x87
add eax, 0x344
push eax
push 0x2960
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x64
push 0xb7
add eax, 0x344
push eax
push 0x2961
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x64
push 0xe9
add eax, 0x344
push eax
push 0x2962
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x14
push 0x190
add eax, 0x186
push eax
push 0x96
push 0x2968
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x128
push eax
mov eax, dword [0x4def8c]
add eax, 0x296
push eax
push 0x40
push 0x88
push 0x2966
push dword [0x4def88]
call ebp
push eax
call ebx
push edi
push 0
push 0x101e
push 0x2966
push dword [0x4def88]
call ebp
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
push eax
call edi
push esi
push 1
push 0x101e
push 0x2966
push dword [0x4def88]
call ebp
push eax
call edi
mov eax, dword [0x4df1b4]
push 1
push 0x31
push 0x78
add eax, 0x1de
push eax
mov eax, dword [0x4def8c]
add eax, 0x2a6
push eax
push 0x2963
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x31
push 0x78
add eax, 0x1de
push eax
mov eax, dword [0x4def8c]
add eax, 0x2a6
push eax
push 0x4f7d
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x12c
add eax, 0x210
push eax
mov eax, dword [0x4df1b4]
add eax, 0x1de
push eax
push 0x88
push 0x2964
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x13
add eax, 0x210
push eax
mov eax, dword [0x4df1b4]
add eax, 0x1fc
push eax
push 0x88
push 0x2965
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x29
push 0x38
push 0x127
add eax, 0x33d
push eax
push 0x4f11
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x6e
push 0x40
add eax, 0x322
push eax
push 0x2969
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x6e
push 0x72
add eax, 0x322
push eax
push 0x296a
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x6e
push 0xa4
add eax, 0x322
push eax
push 0x296b
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x28
push 0x6e
push 0xd6
add eax, 0x322
push eax
push 0x296c
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x28
add eax, 0x184
push 0x6e
push eax
mov eax, dword [0x4def8c]
add eax, 0x322
push eax
push 0x297d
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x28
push 0x6e
add eax, 0x1b6
push eax
mov eax, dword [0x4def8c]
add eax, 0x322
push eax
push 0x297e
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
push 0x28
push 0x6e
add eax, 0x1e8
push eax
mov eax, dword [0x4def8c]
add eax, 0x322
push eax
push 0x296d
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x1d0
push eax
mov eax, dword [0x4def8c]
add eax, 0x290
push eax
push 0x40
push 0x88
push 0x296e
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x192
push eax
mov eax, dword [0x4def8c]
add eax, 0x2b2
push eax
push 0x20
push 0xe
push 0x294b
push 0x2944
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x152
push eax
mov eax, dword [0x4def8c]
add eax, 0x2b2
push eax
push 0x1f
push 0xe
push 0x2950
push 0x2944
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x9a
add eax, 0x2b2
push eax
mov eax, dword [0x4df1b4]
add eax, 0x17c
push eax
push 0xe
push 0x2951
push 0x2944
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x192
push eax
mov eax, dword [0x4def8c]
add eax, 0x2b2
push eax
push 0x1f
push 0xe
push 0x295d
push 0x2944
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x5a
add eax, 0x2b2
push eax
mov eax, dword [0x4df1b4]
add eax, 0x1bc
push eax
push 0xe
push 0x295e
push 0x2944
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, dword [0x4df1b4]
push 1
add eax, 0x1f6
push eax
mov eax, dword [0x4def8c]
add eax, 0x322
push eax
push 0x20
push 0xe
push 0x296f
push 0x2944
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call ebx
mov eax, 0x55555556
imul dword [0x4df1b4]
push 1
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
mov dword [esp + 0x1c], ebx
lea eax, [ebx + 0x54]
push eax
mov eax, dword [0x4def8c]
add eax, 0x2a8
push eax
push 0x20
push 0xe
push 0x4f8b
push 0x29f9
push dword [0x4def88]
call ebp
push eax
call ebp
mov esi, dword [sym.imp.USER32.dll_MoveWindow]
push eax
call esi
push 1
lea eax, [ebx + 0xda]
push eax
mov eax, dword [0x4def8c]
add eax, 0x2a8
push eax
lea eax, [ebx + 0x7c]
push eax
push 0xe
push 0x4f8c
push 0x29f9
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call esi
push 1
lea eax, [ebx + 0x53]
push eax
mov eax, dword [0x4def8c]
add eax, 0x2a8
push eax
lea eax, [ebx*2 + 0x15e]
push eax
push 0xe
push 0x4f8d
push 0x29f9
push dword [0x4def88]
call ebp
push eax
call ebp
push eax
call esi
mov eax, 0x66666667
imul dword [0x4def8c]
mov eax, dword [0x4df1b4]
sar edx, 1
add eax, 0x1f5
mov edi, edx
push 1
shr edi, 0x1f
add edi, edx
push 0x28
lea esi, [edi + 0x80]
push esi
push eax
push 0x7a
push 0x4f9c
push dword [0x4def88]
call ebp
push eax
call dword [sym.imp.USER32.dll_MoveWindow]
mov eax, dword [0x4df1b4]
push 1
push 0x28
push esi
add eax, 0x1f5
push eax
lea eax, [edi + 0x104]
push eax
push 0x4f9d
push dword [0x4def88]
call ebp
push eax
call dword [sym.imp.USER32.dll_MoveWindow]
push 1
push 0x28
push esi
mov eax, dword [0x4df1b4]
add eax, 0x1f5
push eax
lea eax, [edi*2 + 0x18e]
push eax
push 0x4f9e
push dword [0x4def88]
call ebp
push eax
call dword [sym.imp.USER32.dll_MoveWindow]
mov eax, dword [0x4df1b4]
push 1
push 0x28
push esi
add eax, 0x1f5
push eax
lea eax, [edi + 0x10c]
lea eax, [edi + eax*2]
push eax
push 0x4f9f
push dword [0x4def88]
call ebp
push eax
call dword [sym.imp.USER32.dll_MoveWindow]
mov eax, dword [0x4df1b4]
push 1
push 0x28
push esi
add eax, 0x1f5
push eax
lea eax, [edi*4 + 0x2a2]
push eax
push 0x4fa0
push dword [0x4def88]
call ebp
mov edi, dword [sym.imp.USER32.dll_MoveWindow]
push eax
call edi
mov eax, dword [0x4def8c]
lea ebp, [ebx + 0x2e]
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
add eax, 0x28c
push 1
push ebp
push eax
push 0x6e
push 0x88
push 0x4f95
push dword [0x4def88]
call esi
push eax
call edi
push 1
lea eax, [ebx + 0x24]
push eax
mov eax, dword [0x4def8c]
add eax, 0x16c
push eax
push 0x76
push 0x128
push 0x4f99
push dword [0x4def88]
call esi
push eax
call edi
mov ecx, dword [0x4def8c]
mov eax, ebx
cdq
add ecx, 0x28c
sub eax, edx
mov edi, eax
sar edi, 1
push 1
lea ebx, [edi + 0x54]
push ebx
push ecx
mov ecx, dword [esp + 0x24]
add ecx, 0xca
push ecx
push 0x88
push 0x4f96
push dword [0x4def88]
call esi
push eax
call dword [sym.imp.USER32.dll_MoveWindow]
mov eax, dword [0x4def8c]
lea esi, [edi + 0x46]
push 1
push esi
add eax, 0x16c
push eax
mov eax, dword [esp + 0x24]
add eax, 0xd4
push eax
push 0x128
push 0x4f9a
push dword [0x4def88]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_MoveWindow]
mov eax, dword [0x4def8c]
push 1
push ebx
mov ebx, dword [esp + 0x20]
add eax, 0x28c
push eax
lea eax, [ebx + 0x12c]
add eax, edi
push eax
push 0x88
push 0x4f97
push dword [0x4def88]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_MoveWindow]
mov eax, dword [0x4def8c]
push 1
push esi
add eax, 0x16c
push eax
lea eax, [ebx + 0x136]
add eax, edi
push eax
push 0x128
push 0x4f9b
push dword [0x4def88]
call dword [sym.imp.USER32.dll_GetDlgItem]
mov esi, dword [sym.imp.USER32.dll_MoveWindow]
push eax
call esi
mov eax, dword [0x4def8c]
push 1
push ebp
mov ebp, dword [sym.imp.USER32.dll_GetDlgItem]
add eax, 0x28c
push eax
lea eax, [ebx*2 + 0x1ac]
push eax
push 0x88
push 0x4f98
push dword [0x4def88]
call ebp
push eax
call esi
push 1
push 0x1e
push 0x8c
lea esi, [ebx*2 + 0x1b4]
push esi
push 0x90
push 0x4f8e
push dword [0x4def88]
call ebp
push eax
call dword [sym.imp.USER32.dll_MoveWindow]
push 1
push 0x1e
push 0x8c
push esi
push 0x126
push 0x4f8f
push dword [0x4def88]
call ebp
push eax
call dword [sym.imp.USER32.dll_MoveWindow]
mov eax, dword [0x4def8c]
push 1
push 0x1e
push 0xb4
push esi
add eax, 0x258
push eax
push 0x4fa5
push dword [0x4def88]
call ebp
mov esi, dword [sym.imp.USER32.dll_MoveWindow]
push eax
call esi
mov eax, dword [0x4def8c]
push 1
push 0x1e
push 0x6e
push 0x76
add eax, 0x29f
push eax
push 0x4fa1
push dword [0x4def88]
call ebp
push eax
call esi
mov eax, dword [0x4def8c]
lea esi, [ebx + 0xd2]
push 1
push 0x1e
push 0x6e
push esi
add eax, 0x29f
push eax
push 0x4fa2
push dword [0x4def88]
call ebp
push eax
call dword [sym.imp.USER32.dll_MoveWindow]
push 1
push 0x1e
push 0x8c
push esi
push 0x90
push 0x4f92
push dword [0x4def88]
call ebp
mov esi, dword [sym.imp.USER32.dll_MoveWindow]
push eax
call esi
push 1
push 0x1e
push 0x8c
lea eax, [ebx + 0xf8]
push eax
push 0x90
push 0x4f93
push dword [0x4def88]
call ebp
push eax
call esi
push 1
push 0x1e
push 0x8c
lea esi, [ebx + 0x134]
add esi, edi
push esi
push 0x90
push 0x4f91
push dword [0x4def88]
call ebp
push eax
call dword [sym.imp.USER32.dll_MoveWindow]
push 1
push 0x1e
add ebx, 0x15a
add edi, ebx
push 0x8c
push edi
push 0x90
push 0x4f90
push dword [0x4def88]
call ebp
mov ebx, dword [sym.imp.USER32.dll_MoveWindow]
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x1e
push 0x6e
push esi
add eax, 0x29e
push eax
push 0x4fa3
push dword [0x4def88]
call ebp
push eax
call ebx
mov eax, dword [0x4def8c]
push 1
push 0x1e
push 0x6e
push edi
add eax, 0x29e
push eax
push 0x4fa4
push dword [0x4def88]
call ebp
push eax
call ebx
mov ecx, dword [0x4def88]
mov edx, 4
call fcn.0048d8a0
mov ecx, dword [esp + 0x54]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.0048d925
add esp, 0x4c
ret