Function at 0x435be0
Capabilities:
Contain obfuscated stackstrings
Encode data using base64
Parse pe header

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x524bd6
push eax
mov eax, dword [0x5b8ff0]
mov dword fs:[0], esp
sub esp, 0xe38
push ebx
push ebp
mov ebp, ecx
push esi
mov ecx, dword [eax + 0x1b3f4]
push edi
test ecx, ecx
je 0x435c24
mov ecx, dword [ebp + 0x19998]
mov dl, byte [ecx + 0x685]
test dl, dl
jne 0x4380cb
mov eax, dword [eax + 0x978]
mov ebx, dword [esp + 0xe58]
test eax, eax
mov edx, 0x1b
je 0x435c64
mov esi, dword [ebp + 0x90]
lea ecx, [ebx + ebx*4]
lea ecx, [ebx + ecx*2]
shl ecx, 4
add ecx, esi
cmp dword [ecx + 0x2c], edx
jne 0x435c55
mov byte [eax], 2
jmp 0x435c64
test ebx, ebx
je 0x435c61
cmp dword [ecx - 0x84], edx
je 0x435c64
mov byte [eax], 1
mov edx, dword [0x5b8ff0]
mov eax, dword [edx + 0x1b3f4]
test eax, eax
je 0x435c81
mov ecx, dword [ebp + 0x19998]
push 1
call fcn.004b5c20
mov ecx, dword [ebp + 0x90]
lea eax, [ebx + ebx*4]
lea edi, [ebx + eax*2]
shl edi, 4
mov dword [esp + 0x1dc], edi
lea eax, [edi + ecx]
mov ecx, dword [edi + ecx + 0x48]
cmp ecx, 1
mov dword [esp + 0x1c], ecx
jge 0x435caf
mov dword [esp + 0x1c], 5
mov edx, dword [eax]
mov esi, dword [0x534454]
push ebx
push edx
call esi
sub eax, dword [ebp + 0x194b0]
push eax
mov eax, dword [ebp + 0x194a0]
shl eax, 0xa
push str._4d_UN_d___d__n
lea ecx, [eax + ebp + 0xa0]
push ecx
call fcn.004f0f4c
add esp, 0x14
call esi
mov edx, dword [ebp + 0x194a0]
mov dword [ebp + 0x194b0], eax
inc edx
mov eax, edx
mov dword [ebp + 0x194a0], edx
cmp eax, 0x5a
jle 0x435d03
mov ecx, ebp
call fcn.0043b420
mov edx, dword [ebp + 0x90]
mov esi, dword [0x534444]
xor ecx, ecx
mov cl, byte [edi + edx + 8]
lea eax, [edi + edx]
dec ecx
cmp ecx, 9
ja case.0x435d22.2
jmp dword [ecx*4 + 0x43a688]
mov ecx, dword [eax + 0x38]
mov edx, dword [eax + 0x34]
push ecx
push edx
mov ecx, ebp
call fcn.0043b940
jmp case.0x435d22.2
mov cl, byte [eax + 0x91]
mov ebx, dword [0x534700]
test cl, cl
jne 0x435d79
push 0x12
call dword [0x5347f4]
movsx eax, ax
shr eax, 0x10
je 0x435d79
push 0x21
call esi
push 0
push 3
push 0
push 0x12
call ebx
push 0
push 2
push 0
push 0x12
call ebx
push 0x21
call esi
mov ecx, dword [ebp + 0x90]
mov al, byte [edi + ecx + 0x92]
test al, al
jne 0x435db6
push 0x11
call dword [0x5347f4]
movsx edx, ax
shr edx, 0x10
je 0x435db6
push 0x21
call esi
push 0
push 3
push 0
push 0x11
call ebx
push 0
push 2
push 0
push 0x11
call ebx
push 0x21
call esi
mov eax, dword [ebp + 0x90]
mov cl, byte [edi + eax + 0x90]
test cl, cl
jne 0x435df3
push 0x10
call dword [0x5347f4]
movsx ecx, ax
shr ecx, 0x10
je 0x435df3
push 0x21
call esi
push 0
push 3
push 0
push 0x10
call ebx
push 0
push 2
push 0
push 0x10
call ebx
push 0x21
call esi
mov ebx, dword [esp + 0xe58]
mov eax, dword [0x5b8ff0]
mov ecx, dword [eax + 0x1b3f4]
test ecx, ecx
je 0x435e25
push ecx
mov ecx, esp
mov dword [esp + 0x38], esp
push 0x56026c
call fcn.00509859
mov ecx, dword [ebp + 0x19998]
call fcn.004b59c0
cmp dword [0x560030], ebx
jge 0x438bf1
lea ecx, [ebp + 0x196c4]
push ebx
push ecx
lea ecx, [ebp + 0x19528]
call fcn.004438f0
test al, al
je 0x435ebc
mov edx, dword [ebp + 0x90]
lea ecx, [esp + 0x14]
lea eax, [edi + edx + 0x40]
push eax
call fcn.00509560
push 0x5c
lea ecx, [esp + 0x18]
mov dword [esp + 0xe54], 0x11e
call fcn.005029c6
lea ecx, [esp + 0x34]
push eax
push ecx
lea ecx, [esp + 0x1c]
call fcn.00502923
mov eax, dword [eax]
push eax
call dword [0x5343fc]
lea ecx, [esp + 0x34]
call fcn.005097eb
mov edx, dword [esp + 0x14]
push 1
push 0
push 0
push edx
push 0
push 0
call dword [0x5344b8]
lea ecx, [esp + 0x14]
mov dword [esp + 0xe50], 0xffffffff
call fcn.005097eb
test ebx, ebx
jle 0x438beb
mov eax, dword [0x5b8ff0]
mov dword [0x560030], ebx
push 0
push 0
mov eax, dword [eax + 0x39c]
push 0x400
add eax, 0x1fac
mov ecx, dword [eax + 0x1c]
push ecx
call dword [0x534668]
dec eax
je 0x438b97
dec eax
jne 0x438beb
mov edx, dword [ebp + 0x196b4]
mov eax, dword [esp + 0xe58]
mov ecx, dword [0x56fa80]
mov ebx, dword [edx + eax*4]
mov eax, dword [0x560034]
add ebx, ecx
cmp ebx, eax
jbe 0x438bd6
call dword [0x534454]
test ebx, ebx
mov dword [esp + 0x34], eax
jle 0x435f31
push ebx
call esi
call dword [0x534454]
mov ecx, dword [esp + 0x34]
sub ecx, eax
add ecx, ebx
mov dword [0x56fa80], ecx
jmp 0x438be4
mov ebx, dword [eax + 0x34]
mov ecx, dword [eax + 0x38]
cmp ebx, ecx
jge 0x436142
lea edx, [ebx + 1]
mov dword [esp + 0x14], edx
mov eax, dword [ebp + 0x19794]
test eax, eax
je 0x435fa9
mov eax, dword [ebp + 0x19818]
lea esi, [ebp + 0x19810]
push ebx
push eax
mov ecx, esi
call fcn.00504f58
mov ecx, dword [ebp + 0x196a0]
mov eax, dword [esi + 8]
mov edx, dword [ecx + ebx*4]
mov ecx, esi
push edx
push eax
call fcn.00504f58
mov ecx, dword [ebp + 0x196a0]
mov edx, dword [ebp + 0x19794]
lea eax, [ecx + ebx*4]
mov ecx, dword [ecx + ebx*4]
add ecx, edx
mov dword [eax], ecx
mov eax, dword [ebp + 0x19790]
test eax, eax
je 0x435ffa
mov eax, dword [esp + 0x14]
mov ecx, dword [ebp + 0x1982c]
lea esi, [ebp + 0x19824]
push eax
push ecx
mov ecx, esi
call fcn.00504f58
mov edx, dword [ebp + 0x196a0]
mov ecx, dword [esi + 8]
mov eax, dword [edx + ebx*4 + 4]
push eax
push ecx
mov ecx, esi
call fcn.00504f58
mov edx, dword [ebp + 0x196a0]
mov ecx, dword [ebp + 0x19790]
lea eax, [edx + ebx*4 + 4]
mov edx, dword [edx + ebx*4 + 4]
add edx, ecx
mov dword [eax], edx
mov eax, dword [ebp + 0x196a0]
lea ecx, [ebp + 0x7c]
mov edx, dword [eax + ebx*4 + 4]
mov eax, dword [eax + ebx*4]
push edx
push eax
call fcn.004d39e0
mov ecx, dword [0x5b8ff0]
push 0
push 0
push 0x400
mov eax, dword [ecx + 0x39c]
add eax, 0x1fac
mov edx, dword [eax + 0x1c]
push edx
call dword [0x534668]
dec eax
je 0x4360d0
dec eax
je 0x436084
dec eax
jne 0x436122
mov eax, dword [0x56fa80]
mov ecx, dword [0x560034]
inc eax
cmp eax, ecx
jbe 0x43607a
mov ecx, dword [0x5b8ff0]
push 1
mov edx, dword [ecx + 0x974]
push edx
call dword [0x534400]
mov dword [0x56fa80], 0
jmp 0x436122
mov dword [0x56fa80], eax
jmp 0x436122
mov ecx, dword [ebp + 0x1968c]
mov eax, ebx
cdq
sub eax, edx
sar eax, 1
mov esi, dword [ecx + eax*4]
mov ecx, dword [0x56fa80]
mov eax, dword [0x560034]
add esi, ecx
cmp esi, eax
jbe 0x43611c
call dword [0x534454]
test esi, esi
mov dword [esp + 0x28], eax
jle 0x4360ba
push esi
call dword [0x534444]
call dword [0x534454]
mov edx, dword [esp + 0x28]
add edx, esi
sub edx, eax
mov dword [0x56fa80], edx
jmp 0x436122
mov ecx, dword [ebp + 0x1968c]
mov eax, ebx
cdq
sub eax, edx
sar eax, 1
mov edx, dword [ecx + eax*4]
mov eax, dword [0x56fa80]
lea esi, [eax + edx*2]
mov eax, dword [0x560034]
cmp esi, eax
jbe 0x43611c
call dword [0x534454]
test esi, esi
mov dword [esp + 0x28], eax
jle 0x436106
push esi
call dword [0x534444]
call dword [0x534454]
mov ecx, dword [esp + 0x28]
add ecx, esi
sub ecx, eax
mov dword [0x56fa80], ecx
jmp 0x436122
mov dword [0x56fa80], esi
mov edx, dword [ebp + 0x90]
mov ecx, dword [esp + 0x14]
add ebx, 2
add ecx, 2
mov eax, dword [edi + edx + 0x38]
mov dword [esp + 0x14], ecx
cmp ebx, eax
jl 0x435f5f
mov eax, dword [esp + 0xe58]
xor ecx, ecx
push ecx
mov dword [ebp + 0x19794], ecx
mov dword [ebp + 0x19790], ecx
mov byte [ebp + 0x198dc], cl
mov dword [ebp + 0x198d8], eax
mov dword [ebp + 0x198e4], eax
mov dword [ebp + 0x198d0], ecx
call dword [0x534704]
mov al, 1
mov ecx, dword [esp + 0xe48]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0xe44
ret 4
xor esi, esi
push esi
call dword [0x534704]
lea ecx, [esp + 0x5c]
call fcn.0049e9a0
mov edx, dword [ebp + 0x90]
lea eax, [esp + 0x5c]
push eax
lea ecx, [ebp + 0x196d8]
lea eax, [edi + edx + 0x98]
mov dword [esp + 0xe54], esi
push eax
call fcn.004e0430
lea edx, [esp + 0x1c8]
lea eax, [ebp + 0x194fc]
push edx
lea edx, [ebp + 0x19510]
push edx
lea ecx, [ebp + 0x58]
push eax
call fcn.00421bf0
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x14], esi
cmp eax, esi
jle 0x43658d
mov eax, dword [esp + 0x88]
mov esi, dword [esp + 0x14]
lea ecx, [eax + esi*4]
push ecx
lea ecx, [esp + 0x14]
call fcn.00509560
mov edx, dword [0x565124]
mov dword [esp + 0x20], edx
mov eax, dword [esp + 0x9c]
mov byte [esp + 0xe50], 2
lea ecx, [eax + esi*4]
push ecx
lea ecx, [esp + 0x34]
call fcn.00509560
mov eax, dword [ebp + 0x19504]
xor ebx, ebx
test eax, eax
mov byte [esp + 0xe50], 3
jle 0x4362a1
xor esi, esi
lea eax, [ebp + 0x194fc]
push ebx
lea edx, [esp + 0x50]
push eax
push edx
lea ecx, [ebp + 0x58]
call fcn.00420ae0
mov ecx, dword [ebp + 0x19500]
mov eax, dword [eax]
push eax
mov byte [esp + 0xe54], 4
mov ecx, dword [esi + ecx]
push ecx
lea ecx, [esp + 0x38]
call fcn.0050263a
lea ecx, [esp + 0x4c]
mov byte [esp + 0xe50], 3
call fcn.005097eb
mov eax, dword [ebp + 0x19504]
inc ebx
add esi, 0x14
cmp ebx, eax
jl 0x43624f
mov edx, dword [esp + 0x74]
mov eax, dword [esp + 0x14]
mov esi, dword [esp + 0xe58]
mov eax, dword [edx + eax*4]
sub eax, 0
je 0x4364a3
dec eax
je 0x4363de
dec eax
jne 0x436542
push 0x5c
lea ecx, [esp + 0x14]
call fcn.005029c6
lea ecx, [esp + 0x2c]
push eax
push ecx
lea ecx, [esp + 0x18]
call fcn.00502923
mov eax, dword [eax]
push eax
call dword [0x5343fc]
lea ecx, [esp + 0x2c]
call fcn.005097eb
lea ebx, [ebp + 0x7c]
push 0x4eb
mov ecx, ebx
call fcn.004d5c30
push eax
lea ecx, [esp + 0x24]
call fcn.0050a989
mov eax, dword [ebp + 0x19998]
mov edx, dword [esp + 0x10]
push edx
mov edx, dword [esp + 0x24]
mov ecx, dword [eax + 0x680]
push esi
push ecx
lea eax, [esp + 0x654]
push edx
push eax
call fcn.004f0f4c
add esp, 0x10
lea edx, [esp + 0x64c]
mov ecx, esp
mov dword [esp + 0x2c], esp
push edx
call fcn.00509859
mov ecx, ebx
call fcn.004d83d0
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x10]
push 5
push 0
push eax
push ecx
push 0
push 0
call dword [0x5344b8]
push 0x12c
call dword [0x534444]
lea edx, [esp + 0x10]
lea eax, [esp + 0x50]
push edx
push eax
mov ecx, ebx
call fcn.004d7c00
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0xe54], 6
call fcn.00509924
lea ecx, [esp + 0x50]
mov byte [esp + 0xe50], 3
call fcn.005097eb
lea ecx, [esp + 0x10]
push ecx
mov ecx, ebx
call fcn.004d7a50
test al, al
je 0x436542
mov esi, dword [0x534444]
push 0xc8
call esi
lea edx, [esp + 0x10]
mov ecx, ebx
push edx
call fcn.004d7a50
test al, al
jne 0x4363c2
jmp 0x436542
lea ebx, [ebp + 0x7c]
push 0x4ed
mov ecx, ebx
call fcn.004d5c30
push eax
lea ecx, [esp + 0x24]
call fcn.0050a989
mov ecx, dword [ebp + 0x19998]
mov eax, dword [esp + 0x10]
push eax
mov eax, dword [esp + 0x24]
mov edx, dword [ecx + 0x680]
push esi
push edx
lea ecx, [esp + 0x654]
push eax
push ecx
call fcn.004f0f4c
add esp, 0x10
lea edx, [esp + 0x64c]
mov ecx, esp
mov dword [esp + 0x2c], esp
push edx
call fcn.00509859
mov ecx, ebx
call fcn.004d83d0
lea eax, [esp + 0x10]
lea ecx, [esp + 0x40]
push eax
push ecx
mov ecx, ebx
call fcn.004d7c00
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0xe54], 5
call fcn.00509924
lea ecx, [esp + 0x40]
mov byte [esp + 0xe50], 3
call fcn.005097eb
lea edx, [esp + 0x10]
mov ecx, ebx
push edx
call fcn.004d7a50
test al, al
je 0x436542
mov esi, dword [0x534444]
push 0xc8
call esi
lea eax, [esp + 0x10]
mov ecx, ebx
push eax
call fcn.004d7a50
test al, al
jne 0x436487
jmp 0x436542
push 0x5c
lea ecx, [esp + 0x14]
call fcn.005029c6
lea ecx, [esp + 0x58]
push eax
push ecx
lea ecx, [esp + 0x18]
call fcn.00502923
mov eax, dword [eax]
push eax
call dword [0x5343fc]
lea ecx, [esp + 0x58]
call fcn.005097eb
lea ebx, [ebp + 0x7c]
push 0x495
mov ecx, ebx
call fcn.004d5c30
push eax
lea ecx, [esp + 0x24]
call fcn.0050a989
mov eax, dword [ebp + 0x19998]
mov edx, dword [esp + 0x10]
push edx
mov edx, dword [esp + 0x24]
mov ecx, dword [eax + 0x680]
push esi
push ecx
lea eax, [esp + 0x654]
push edx
push eax
call fcn.004f0f4c
add esp, 0x10
lea edx, [esp + 0x64c]
mov ecx, esp
mov dword [esp + 0x2c], esp
push edx
call fcn.00509859
mov ecx, ebx
call fcn.004d83d0
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x10]
push 5
push 0
push eax
push ecx
push 0
push 0
call dword [0x5344b8]
lea ecx, [esp + 0x30]
mov byte [esp + 0xe50], 2
call fcn.005097eb
lea ecx, [esp + 0x20]
mov byte [esp + 0xe50], 1
call fcn.005097eb
lea ecx, [esp + 0x10]
mov byte [esp + 0xe50], 0
call fcn.005097eb
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x8c]
inc eax
cmp eax, ecx
mov dword [esp + 0x14], eax
jl 0x4361fb
mov dword [ebp + 0x1999c], 0
mov edx, dword [ebp + 0x90]
lea ecx, [ebp + 0x7c]
lea eax, [edi + edx + 0x98]
lea edx, [esp + 0x24]
push eax
push edx
mov dword [esp + 0x28], ecx
call fcn.004d4c30
mov eax, dword [esp + 0x24]
mov byte [esp + 0xe50], 7
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x436951
mov ecx, dword [ebp + 0x1999c]
mov edx, dword [esp + 0x194]
cmp dword [edx + ecx*4], 0
je 0x436951
mov al, byte [ebp + 0x198dc]
test al, al
je 0x4367a7
add edi, dword [ebp + 0x90]
call dword [0x534454]
mov dword [edi + 0x34], eax
mov eax, dword [esp + 0xe58]
lea ecx, [esp + 0x24]
mov byte [ebp + 0x198dc], 0
mov dword [ebp + 0x198d8], eax
mov byte [esp + 0xe50], 0
call fcn.005097eb
lea ecx, [esp + 0x1c8]
mov dword [esp + 0xe50], 0x19
call fcn.005049b2
lea ecx, [esp + 0x1a4]
mov byte [esp + 0xe50], 0x18
call fcn.00504dac
lea ecx, [esp + 0x190]
mov byte [esp + 0xe50], 0x17
call fcn.00504dac
lea ecx, [esp + 0x17c]
mov byte [esp + 0xe50], 0x16
call fcn.00504dac
lea ecx, [esp + 0x168]
mov byte [esp + 0xe50], 0x15
call fcn.00504dac
lea ecx, [esp + 0x154]
mov byte [esp + 0xe50], 0x14
call fcn.00504dac
lea ecx, [esp + 0x140]
mov byte [esp + 0xe50], 0x13
call fcn.00504dac
lea ecx, [esp + 0x12c]
mov byte [esp + 0xe50], 0x12
call fcn.00504dac
lea ecx, [esp + 0x118]
mov byte [esp + 0xe50], 0x11
call fcn.00504dac
lea ecx, [esp + 0x104]
mov byte [esp + 0xe50], 0x10
call fcn.00504dac
lea ecx, [esp + 0xf0]
mov byte [esp + 0xe50], 0xf
call fcn.00504dac
lea ecx, [esp + 0xdc]
mov byte [esp + 0xe50], 0xe
call fcn.00504dac
lea ecx, [esp + 0xd4]
mov byte [esp + 0xe50], 0xd
call fcn.005097eb
lea ecx, [esp + 0xc0]
mov byte [esp + 0xe50], 0xc
call fcn.005049b2
lea ecx, [esp + 0xac]
mov byte [esp + 0xe50], 0xb
call fcn.005049b2
lea ecx, [esp + 0x98]
mov byte [esp + 0xe50], 0xa
call fcn.005049b2
lea ecx, [esp + 0x84]
mov byte [esp + 0xe50], 9
call fcn.005049b2
mov byte [esp + 0xe50], 8
lea ecx, [esp + 0x70]
call fcn.00504dac
lea ecx, [esp + 0x5c]
mov dword [esp + 0xe50], 0xffffffff
call fcn.005049b2
jmp 0x436176
mov edx, dword [ebp + 0x90]
mov esi, edi
add esi, edx
call dword [0x534454]
mov dword [esi + 0x34], eax
mov eax, dword [esp + 0xe58]
mov ecx, dword [ebp + 0x198e4]
mov byte [ebp + 0x198dc], 1
cmp ecx, eax
mov dword [ebp + 0x198d8], eax
jne 0x436965
lea ecx, [esp + 0x24]
mov byte [esp + 0xe50], 0
call fcn.005097eb
lea ecx, [esp + 0x1c8]
mov dword [esp + 0xe50], 0x2b
call fcn.005049b2
lea ecx, [esp + 0x1a4]
mov byte [esp + 0xe50], 0x2a
call fcn.00504dac
lea ecx, [esp + 0x190]
mov byte [esp + 0xe50], 0x29
call fcn.00504dac
lea ecx, [esp + 0x17c]
mov byte [esp + 0xe50], 0x28
call fcn.00504dac
lea ecx, [esp + 0x168]
mov byte [esp + 0xe50], 0x27
call fcn.00504dac
lea ecx, [esp + 0x154]
mov byte [esp + 0xe50], 0x26
call fcn.00504dac
lea ecx, [esp + 0x140]
mov byte [esp + 0xe50], 0x25
call fcn.00504dac
lea ecx, [esp + 0x12c]
mov byte [esp + 0xe50], 0x24
call fcn.00504dac
lea ecx, [esp + 0x118]
mov byte [esp + 0xe50], 0x23
call fcn.00504dac
lea ecx, [esp + 0x104]
mov byte [esp + 0xe50], 0x22
call fcn.00504dac
lea ecx, [esp + 0xf0]
mov byte [esp + 0xe50], 0x21
call fcn.00504dac
lea ecx, [esp + 0xdc]
mov byte [esp + 0xe50], 0x20
call fcn.00504dac
lea ecx, [esp + 0xd4]
mov byte [esp + 0xe50], 0x1f
call fcn.005097eb
lea ecx, [esp + 0xc0]
mov byte [esp + 0xe50], 0x1e
call fcn.005049b2
lea ecx, [esp + 0xac]
mov byte [esp + 0xe50], 0x1d
call fcn.005049b2
lea ecx, [esp + 0x98]
mov byte [esp + 0xe50], 0x1c
call fcn.005049b2
lea ecx, [esp + 0x84]
mov byte [esp + 0xe50], 0x1b
call fcn.005049b2
mov byte [esp + 0xe50], 0x1a
jmp 0x436785
mov eax, dword [esp + 0xe58]
mov byte [ebp + 0x198dc], 0
mov dword [ebp + 0x198d8], eax
mov ecx, dword [esp + 0x24]
mov edx, dword [ecx - 8]
test edx, edx
je 0x437761
mov edx, dword [0x5b8ff0]
mov ecx, dword [edx + 0x1b3f4]
test ecx, ecx
je 0x436a2f
mov ecx, dword [ebp + 0x19998]
push eax
mov byte [ecx + 0x670], 1
mov edx, dword [ebp + 0x19998]
mov byte [edx + 0x67c], 0
mov eax, dword [0x5b8ff0]
mov ecx, dword [eax + 0x39c]
add ecx, 0x638
call fcn.0050330f
mov edx, dword [0x5b8ff0]
mov ecx, eax
and ecx, 0xffff
mov edx, dword [edx + 0x39c]
shl ecx, 4
shr eax, 0x10
lea ecx, [ecx + edx + 0x68c]
mov edx, dword [ebp + 0x19998]
mov dword [edx + 0x1bc], ecx
mov ecx, dword [ebp + 0x19998]
mov dword [ecx + 0x1b8], eax
mov edx, dword [ebp + 0x19998]
mov byte [edx + 0x1b4], 1
mov ecx, dword [ebp + 0x19998]
call fcn.004b5c40
mov al, byte [esp + 0x1bc]
test al, al
je 0x436a2f
mov eax, dword [ebp + 0x19998]
push 0
mov byte [eax + 0x67c], 1
mov ecx, dword [ebp + 0x19998]
call fcn.00508eec
mov ecx, dword [0x5b8ff0]
mov ebx, dword [0x534668]
push 0
push 0
mov eax, dword [ecx + 0x39c]
push pe_nt_image_headers32
add eax, 0x209c
or esi, 0xffffffff
mov edx, dword [eax + 0x1c]
push edx
call ebx
test eax, eax
je 0x436a7d
mov ecx, dword [0x5b8ff0]
mov eax, dword [ebp + 0x90]
add ecx, 0x998
mov esi, dword [edi + eax]
push ecx
lea ecx, [ebp + 0x19748]
call fcn.00509924
mov edx, dword [0x5b8ff0]
push 0
push 0
push 0x400
mov eax, dword [edx + 0x39c]
add eax, 0x1fac
mov eax, dword [eax + 0x1c]
push eax
call ebx
mov ecx, dword [ebp + 0x19998]
push esi
mov edx, dword [ecx + 0x1c]
push edx
push 1
push eax
mov eax, dword [ebp + 0x90]
lea ecx, [edi + eax + 0x98]
push ecx
lea ecx, [ebp + 0x196d8]
call fcn.004e1f90
test eax, eax
jne 0x4378e9
mov byte [ebp + 0x198dc], al
mov edx, dword [0x5b8ff0]
mov eax, dword [edx + 0x1b3f4]
test eax, eax
je 0x436b07
mov eax, dword [ebp + 0x19998]
mov byte [eax + 0x67c], 0
mov ecx, dword [ebp + 0x19998]
mov byte [ecx + 0x670], 0
mov ecx, dword [ebp + 0x19998]
call fcn.004b5c40
mov eax, dword [esp + 0x1b8]
test eax, eax
jne 0x436ca9
lea ecx, [esp + 0x24]
mov byte [esp + 0xe50], al
call fcn.005097eb
lea ecx, [esp + 0x1c8]
mov dword [esp + 0xe50], 0x3d
call fcn.005049b2
lea ecx, [esp + 0x1a4]
mov byte [esp + 0xe50], 0x3c
call fcn.00504dac
lea ecx, [esp + 0x190]
mov byte [esp + 0xe50], 0x3b
call fcn.00504dac
lea ecx, [esp + 0x17c]
mov byte [esp + 0xe50], 0x3a
call fcn.00504dac
lea ecx, [esp + 0x168]
mov byte [esp + 0xe50], 0x39
call fcn.00504dac
lea ecx, [esp + 0x154]
mov byte [esp + 0xe50], 0x38
call fcn.00504dac
lea ecx, [esp + 0x140]
mov byte [esp + 0xe50], 0x37
call fcn.00504dac
lea ecx, [esp + 0x12c]
mov byte [esp + 0xe50], 0x36
call fcn.00504dac
lea ecx, [esp + 0x118]
mov byte [esp + 0xe50], 0x35
call fcn.00504dac
lea ecx, [esp + 0x104]
mov byte [esp + 0xe50], 0x34
call fcn.00504dac
lea ecx, [esp + 0xf0]
mov byte [esp + 0xe50], 0x33
call fcn.00504dac
lea ecx, [esp + 0xdc]
mov byte [esp + 0xe50], 0x32
call fcn.00504dac
lea ecx, [esp + 0xd4]
mov byte [esp + 0xe50], 0x31
call fcn.005097eb
lea ecx, [esp + 0xc0]
mov byte [esp + 0xe50], 0x30
call fcn.005049b2
lea ecx, [esp + 0xac]
mov byte [esp + 0xe50], 0x2f
call fcn.005049b2
lea ecx, [esp + 0x98]
mov byte [esp + 0xe50], 0x2e
call fcn.005049b2
lea ecx, [esp + 0x84]
mov byte [esp + 0xe50], 0x2d
call fcn.005049b2
lea ecx, [esp + 0x70]
mov byte [esp + 0xe50], 0x2c
call fcn.00504dac
lea ecx, [esp + 0x5c]
mov dword [esp + 0xe50], 0xffffffff
call fcn.005049b2
mov al, 0x59
jmp 0x436178
cmp eax, 1
jle 0x43775a
cmp eax, 0x5d
jne 0x436ee5
mov edx, dword [ebp + 0x19784]
lea eax, [ebp + 0x1978c]
push eax
lea ecx, [ebp + 0x199a0]
mov dword [ebp + 0x199a4], edx
call fcn.00509924
mov ecx, dword [0x565124]
mov dword [esp + 0x14], ecx
mov esi, dword [esp + 0x20]
push 0x48f
mov ecx, esi
mov byte [esp + 0xe54], 0x3e
call fcn.004d5c30
push eax
lea ecx, [esp + 0x18]
call fcn.0050a989
mov edx, dword [ebp + 0x199a4]
mov ecx, dword [ebp + 0x19998]
mov eax, dword [esp + 0xe58]
push edx
mov edx, dword [ecx + 0x680]
push eax
mov eax, dword [esp + 0x1c]
push edx
lea ecx, [esp + 0x254]
push eax
push ecx
call fcn.004f0f4c
add esp, 0x10
lea edx, [esp + 0x24c]
mov ecx, esp
mov dword [esp + 0x2c], esp
push edx
call fcn.00509859
mov ecx, esi
call fcn.004d83d0
push 0xffffffffffffffff
push 0
lea ecx, [ebp + 0x194bc]
call fcn.00504dd9
lea ecx, [esp + 0x14]
mov byte [esp + 0xe50], 7
call fcn.005097eb
lea ecx, [esp + 0x24]
mov byte [esp + 0xe50], 0
call fcn.005097eb
lea ecx, [esp + 0x1c8]
mov dword [esp + 0xe50], 0x50
call fcn.005049b2
lea ecx, [esp + 0x1a4]
mov byte [esp + 0xe50], 0x4f
call fcn.00504dac
lea ecx, [esp + 0x190]
mov byte [esp + 0xe50], 0x4e
call fcn.00504dac
lea ecx, [esp + 0x17c]
mov byte [esp + 0xe50], 0x4d
call fcn.00504dac
lea ecx, [esp + 0x168]
mov byte [esp + 0xe50], 0x4c
call fcn.00504dac
mov byte [esp + 0xe50], 0x4b
lea ecx, [esp + 0x154]
call fcn.00504dac
lea ecx, [esp + 0x140]
mov byte [esp + 0xe50], 0x4a
call fcn.00504dac
lea ecx, [esp + 0x12c]
mov byte [esp + 0xe50], 0x49
call fcn.00504dac
lea ecx, [esp + 0x118]
mov byte [esp + 0xe50], 0x48
call fcn.00504dac
lea ecx, [esp + 0x104]
mov byte [esp + 0xe50], 0x47
call fcn.00504dac
lea ecx, [esp + 0xf0]
mov byte [esp + 0xe50], 0x46
call fcn.00504dac
lea ecx, [esp + 0xdc]
mov byte [esp + 0xe50], 0x45
call fcn.00504dac
lea ecx, [esp + 0xd4]
mov byte [esp + 0xe50], 0x44
call fcn.005097eb
lea ecx, [esp + 0xc0]
mov byte [esp + 0xe50], 0x43
call fcn.005049b2
lea ecx, [esp + 0xac]
mov byte [esp + 0xe50], 0x42
call fcn.005049b2
lea ecx, [esp + 0x98]
mov byte [esp + 0xe50], 0x41
call fcn.005049b2
lea ecx, [esp + 0x84]
mov byte [esp + 0xe50], 0x40
call fcn.005049b2
mov byte [esp + 0xe50], 0x3f
jmp 0x438516
cmp eax, 0xc1
jne 0x43751e
lea eax, [esp + 0xd4]
lea ecx, [esp + 0x10]
push eax
mov byte [ebp + 0x198dc], 0
call fcn.00509560
lea ecx, [esp + 0x54]
push 9
push ecx
lea ecx, [esp + 0x18]
mov byte [esp + 0xe58], 0x51
call fcn.00502923
mov eax, dword [eax]
push str.GOTO_ACT
push eax
call fcn.004f0fee
add esp, 8
lea ecx, [esp + 0x54]
test eax, eax
setne bl
call fcn.005097eb
test bl, bl
je 0x4370ef
lea ecx, [esp + 0x10]
mov byte [esp + 0xe50], 7
call fcn.005097eb
lea ecx, [esp + 0x24]
mov byte [esp + 0xe50], 0
call fcn.005097eb
lea ecx, [esp + 0x1c8]
mov dword [esp + 0xe50], 0x63
call fcn.005049b2
lea ecx, [esp + 0x1a4]
mov byte [esp + 0xe50], 0x62
call fcn.00504dac
lea ecx, [esp + 0x190]
mov byte [esp + 0xe50], 0x61
call fcn.00504dac
lea ecx, [esp + 0x17c]
mov byte [esp + 0xe50], 0x60
call fcn.00504dac
lea ecx, [esp + 0x168]
mov byte [esp + 0xe50], 0x5f
call fcn.00504dac
lea ecx, [esp + 0x154]
mov byte [esp + 0xe50], 0x5e
call fcn.00504dac
lea ecx, [esp + 0x140]
mov byte [esp + 0xe50], 0x5d
call fcn.00504dac
lea ecx, [esp + 0x12c]
mov byte [esp + 0xe50], 0x5c
call fcn.00504dac
lea ecx, [esp + 0x118]
mov byte [esp + 0xe50], 0x5b
call fcn.00504dac
lea ecx, [esp + 0x104]
mov byte [esp + 0xe50], 0x5a
call fcn.00504dac
lea ecx, [esp + 0xf0]
mov byte [esp + 0xe50], 0x59
call fcn.00504dac
lea ecx, [esp + 0xdc]
mov byte [esp + 0xe50], 0x58
call fcn.00504dac
lea ecx, [esp + 0xd4]
mov byte [esp + 0xe50], 0x57
call fcn.005097eb
lea ecx, [esp + 0xc0]
mov byte [esp + 0xe50], 0x56
call fcn.005049b2
lea ecx, [esp + 0xac]
mov byte [esp + 0xe50], 0x55
call fcn.005049b2
lea ecx, [esp + 0x98]
mov byte [esp + 0xe50], 0x54
call fcn.005049b2
lea ecx, [esp + 0x84]
mov byte [esp + 0xe50], 0x53
call fcn.005049b2
lea ecx, [esp + 0x70]
mov byte [esp + 0xe50], 0x52
call fcn.00504dac
lea ecx, [esp + 0x5c]
mov dword [esp + 0xe50], 0xffffffff
call fcn.005049b2
mov esi, dword [0x534444]
jmp 0x435df3
push 9
push 0
lea ecx, [esp + 0x18]
call fcn.0050246c
push str._UN
lea ecx, [esp + 0x14]
call fcn.005029e8
add eax, 4
lea ecx, [esp + 0x10]
push eax
push 0
call fcn.0050246c
mov edx, dword [esp + 0x10]
push edx
call fcn.004f0f41
mov esi, eax
mov eax, dword [ebp + 0x94]
add esp, 4
xor edi, edi
test eax, eax
jle 0x437154
mov ecx, dword [ebp + 0x90]
cmp dword [ecx], esi
je 0x43714b
inc edi
add ecx, 0xb0
cmp edi, eax
jl 0x43713a
jmp 0x437154
cmp edi, 0xffffffff
jne 0x437300
mov ecx, dword [esp + 0x20]
push 0x4f9
call fcn.004d5c30
push eax
lea ecx, [esp + 0x14]
call fcn.0050a989
mov eax, dword [esp + 0x10]
push 0
push 0
push eax
call fcn.0050ffbf
lea ecx, [esp + 0x10]
mov byte [esp + 0xe50], 7
call fcn.005097eb
lea ecx, [esp + 0x24]
mov byte [esp + 0xe50], 0
call fcn.005097eb
lea ecx, [esp + 0x1c8]
mov dword [esp + 0xe50], 0x75
call fcn.005049b2
lea ecx, [esp + 0x1a4]
mov byte [esp + 0xe50], 0x74
call fcn.00504dac
lea ecx, [esp + 0x190]
mov byte [esp + 0xe50], 0x73
call fcn.00504dac
lea ecx, [esp + 0x17c]
mov byte [esp + 0xe50], 0x72
call fcn.00504dac
lea ecx, [esp + 0x168]
mov byte [esp + 0xe50], 0x71
call fcn.00504dac
lea ecx, [esp + 0x154]
mov byte [esp + 0xe50], 0x70
call fcn.00504dac
lea ecx, [esp + 0x140]
mov byte [esp + 0xe50], 0x6f
call fcn.00504dac
lea ecx, [esp + 0x12c]
mov byte [esp + 0xe50], 0x6e
call fcn.00504dac
lea ecx, [esp + 0x118]
mov byte [esp + 0xe50], 0x6d
call fcn.00504dac
lea ecx, [esp + 0x104]
mov byte [esp + 0xe50], 0x6c
call fcn.00504dac
lea ecx, [esp + 0xf0]
mov byte [esp + 0xe50], 0x6b
call fcn.00504dac
lea ecx, [esp + 0xdc]
mov byte [esp + 0xe50], 0x6a
call fcn.00504dac
lea ecx, [esp + 0xd4]
mov byte [esp + 0xe50], 0x69
call fcn.005097eb
lea ecx, [esp + 0xc0]
mov byte [esp + 0xe50], 0x68
call fcn.005049b2
lea ecx, [esp + 0xac]
mov byte [esp + 0xe50], 0x67
call fcn.005049b2
mov byte [esp + 0xe50], 0x66
lea ecx, [esp + 0x98]
call fcn.005049b2
lea ecx, [esp + 0x84]
mov byte [esp + 0xe50], 0x65
call fcn.005049b2
mov byte [esp + 0xe50], 0x64
jmp 0x4380ae
push 0xffffffffffffffff
push 0
lea ecx, [ebp + 0x194bc]
call fcn.00504dd9
mov ebx, dword [esp + 0x20]
lea edx, [edi + edi*4]
lea ecx, [edi - 1]
push 0x4fd
lea eax, [edi + edx*2]
mov dword [ebp + 0x198e4], ecx
mov ecx, dword [ebp + 0x90]
shl eax, 4
mov edx, dword [eax + ecx + 4]
mov ecx, ebx
mov dword [ebp + 0x194b8], edx
call fcn.004d5c30
push eax
lea ecx, [esp + 0x14]
call fcn.0050a989
mov eax, dword [ebp + 0x199a4]
mov edx, dword [ebp + 0x19998]
mov ecx, dword [esp + 0xe58]
push esi
push edi
push eax
mov eax, dword [edx + 0x680]
push ecx
mov ecx, dword [esp + 0x20]
push eax
lea edx, [esp + 0x25c]
push ecx
push edx
call fcn.004f0f4c
add esp, 0x18
lea eax, [esp + 0x24c]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.00509859
mov ecx, ebx
call fcn.004d83d0
lea ecx, [esp + 0x10]
mov byte [esp + 0xe50], 7
call fcn.005097eb
lea ecx, [esp + 0x24]
mov byte [esp + 0xe50], 0
call fcn.005097eb
lea ecx, [esp + 0x1c8]
mov dword [esp + 0xe50], 0x87
call fcn.005049b2
lea ecx, [esp + 0x1a4]
mov byte [esp + 0xe50], 0x86
call fcn.00504dac
lea ecx, [esp + 0x190]
mov byte [esp + 0xe50], 0x85
call fcn.00504dac
lea ecx, [esp + 0x17c]
mov byte [esp + 0xe50], 0x84
call fcn.00504dac
lea ecx, [esp + 0x168]
mov byte [esp + 0xe50], 0x83
call fcn.00504dac
mov byte [esp + 0xe50], 0x82
lea ecx, [esp + 0x154]
call fcn.00504dac
lea ecx, [esp + 0x140]
mov byte [esp + 0xe50], 0x81
call fcn.00504dac
lea ecx, [esp + 0x12c]
mov byte [esp + 0xe50], 0x80
call fcn.00504dac
lea ecx, [esp + 0x118]
mov byte [esp + 0xe50], 0x7f
call fcn.00504dac
lea ecx, [esp + 0x104]
mov byte [esp + 0xe50], 0x7e
call fcn.00504dac
lea ecx, [esp + 0xf0]
mov byte [esp + 0xe50], 0x7d
call fcn.00504dac
lea ecx, [esp + 0xdc]
mov byte [esp + 0xe50], 0x7c
call fcn.00504dac
lea ecx, [esp + 0xd4]
mov byte [esp + 0xe50], 0x7b
call fcn.005097eb
lea ecx, [esp + 0xc0]
mov byte [esp + 0xe50], 0x7a
call fcn.005049b2
lea ecx, [esp + 0xac]
mov byte [esp + 0xe50], 0x79
call fcn.005049b2
lea ecx, [esp + 0x98]
mov byte [esp + 0xe50], 0x78
call fcn.005049b2
lea ecx, [esp + 0x84]
mov byte [esp + 0xe50], 0x77
call fcn.005049b2
mov byte [esp + 0xe50], 0x76
jmp 0x436785
mov ecx, dword [ebp + 0x94]
lea edx, [ecx - 1]
mov ecx, dword [esp + 0xe58]
cmp ecx, edx
jge 0x437582
push ecx
mov ecx, ebp
call fcn.0043b8e0
test eax, eax
jne 0x437568
mov eax, dword [ebp + 0x194b8]
test eax, eax
jne 0x43757b
mov eax, dword [ebp + 0x194d0]
mov ecx, dword [ebp + 0x199c8]
cmp eax, ecx
jge 0x43757b
inc eax
push 0xffffffffffffffff
mov ecx, ebp
mov dword [ebp + 0x194d0], eax
call fcn.0043b8e0
mov edx, dword [ebp + 0x194c4]
lea ecx, [ebp + 0x194bc]
push eax
push edx
call fcn.00504f58
mov eax, dword [esp + 0x1b8]
mov esi, dword [0x534454]
mov dword [ebp + 0x194b8], eax
push eax
mov eax, dword [ebp + 0x90]
mov ecx, dword [edi + eax]
push ecx
call esi
mov edx, dword [ebp + 0x194b0]
sub eax, edx
mov edx, dword [ebp + 0x194a0]
shl edx, 0xa
push eax
push str._4d_un_d_nofind_NumNod_d_n
lea eax, [edx + ebp + 0xa0]
push eax
call fcn.004f0f4c
add esp, 0x14
call esi
mov ecx, dword [ebp + 0x194a0]
mov dword [ebp + 0x194b0], eax
inc ecx
mov eax, ecx
mov dword [ebp + 0x194a0], ecx
cmp eax, 0x5a
jle 0x4375e5
mov ecx, ebp
call fcn.0043b420
lea ecx, [esp + 0x24]
mov byte [esp + 0xe50], 0
call fcn.005097eb
lea ecx, [esp + 0x1c8]
mov dword [esp + 0xe50], 0x99
call fcn.005049b2
lea ecx, [esp + 0x1a4]
mov byte [esp + 0xe50], 0x98
call fcn.00504dac
lea ecx, [esp + 0x190]
mov byte [esp + 0xe50], 0x97
call fcn.00504dac
lea ecx, [esp + 0x17c]
mov byte [esp + 0xe50], 0x96
call fcn.00504dac
lea ecx, [esp + 0x168]
mov byte [esp + 0xe50], 0x95
call fcn.00504dac
lea ecx, [esp + 0x154]
mov byte [esp + 0xe50], 0x94
call fcn.00504dac
lea ecx, [esp + 0x140]
mov byte [esp + 0xe50], 0x93
call fcn.00504dac
lea ecx, [esp + 0x12c]
mov byte [esp + 0xe50], 0x92
call fcn.00504dac
lea ecx, [esp + 0x118]
mov byte [esp + 0xe50], 0x91
call fcn.00504dac
lea ecx, [esp + 0x104]
mov byte [esp + 0xe50], 0x90
call fcn.00504dac
lea ecx, [esp + 0xf0]
mov byte [esp + 0xe50], 0x8f
call fcn.00504dac
lea ecx, [esp + 0xdc]
mov byte [esp + 0xe50], 0x8e
call fcn.00504dac
lea ecx, [esp + 0xd4]
mov byte [esp + 0xe50], 0x8d
call fcn.005097eb
lea ecx, [esp + 0xc0]
mov byte [esp + 0xe50], 0x8c
call fcn.005049b2
lea ecx, [esp + 0xac]
mov byte [esp + 0xe50], 0x8b
call fcn.005049b2
lea ecx, [esp + 0x98]
mov byte [esp + 0xe50], 0x8a
call fcn.005049b2
lea ecx, [esp + 0x84]
mov byte [esp + 0xe50], 0x89
call fcn.005049b2
mov byte [esp + 0xe50], 0x88
jmp 0x438a48
mov eax, dword [esp + 0xe58]
mov dword [ebp + 0x198d8], eax
mov dword [ebp + 0x198e4], eax
mov byte [ebp + 0x198dc], 0
lea ecx, [esp + 0x24]
mov byte [esp + 0xe50], 0
call fcn.005097eb
lea ecx, [esp + 0x1c8]
mov dword [esp + 0xe50], 0x11c
call fcn.005049b2
lea ecx, [esp + 0x1a4]
mov byte [esp + 0xe50], 0x1b
call fcn.00504dac
lea ecx, [esp + 0x190]
mov byte [esp + 0xe50], 0x1a
call fcn.00504dac
lea ecx, [esp + 0x17c]
mov byte [esp + 0xe50], 0x19
call fcn.00504dac
lea ecx, [esp + 0x168]
mov byte [esp + 0xe50], 0x18
call fcn.00504dac
lea ecx, [esp + 0x154]
mov byte [esp + 0xe50], 0x17
call fcn.00504dac
lea ecx, [esp + 0x140]
mov byte [esp + 0xe50], 0x16
call fcn.00504dac
lea ecx, [esp + 0x12c]
mov byte [esp + 0xe50], 0x15
call fcn.00504dac
lea ecx, [esp + 0x118]
mov byte [esp + 0xe50], 0x14
call fcn.00504dac
lea ecx, [esp + 0x104]
mov byte [esp + 0xe50], 0x13
call fcn.00504dac
lea ecx, [esp + 0xf0]
mov byte [esp + 0xe50], 0x12
call fcn.00504dac
lea ecx, [esp + 0xdc]
mov byte [esp + 0xe50], 0x11
call fcn.00504dac
lea ecx, [esp + 0xd4]
mov byte [esp + 0xe50], 0x10
call fcn.005097eb
lea ecx, [esp + 0xc0]
mov byte [esp + 0xe50], 0xf
call fcn.005049b2
lea ecx, [esp + 0xac]
mov byte [esp + 0xe50], 0xe
call fcn.005049b2
lea ecx, [esp + 0x98]
mov byte [esp + 0xe50], 0xd
call fcn.005049b2
lea ecx, [esp + 0x84]
mov byte [esp + 0xe50], 0xc
call fcn.005049b2
mov byte [esp + 0xe50], 0xb
jmp 0x436785
mov ecx, dword [esp + 0xe58]
mov edx, dword [ebp + 0x19784]
mov eax, dword [esp + 0x194]
mov dword [ebp + 0x198e4], ecx
mov ecx, dword [eax + edx*4]
mov dword [ebp + 0x198e0], ecx
mov edx, dword [0x5b8ff0]
mov eax, dword [edx + 0x1b3f4]
test eax, eax
je 0x437929
mov eax, dword [ebp + 0x19998]
mov byte [eax + 0x1b4], 0
mov ecx, dword [ebp + 0x19784]
mov edx, dword [esp + 0xb0]
push 0x5f
mov eax, dword [edx + ecx*4]
lea esi, [edx + ecx*4]
mov ecx, esi
mov ebx, dword [eax - 8]
call fcn.005029c6
sub ebx, eax
lea ecx, [esp + 0x44]
dec ebx
push ebx
push ecx
mov ecx, esi
call fcn.005028a7
mov eax, dword [eax]
push eax
call fcn.004f0f41
add esp, 4
lea ecx, [esp + 0x44]
mov esi, eax
call fcn.005097eb
mov edx, dword [ebp + 0x19768]
mov eax, dword [ebp + 0x19764]
mov ecx, dword [ebp + 0x19784]
push edx
mov edx, dword [ebp + 0x90]
push eax
push esi
mov esi, dword [0x534454]
mov eax, dword [edi + edx]
push ecx
push eax
call esi
mov ecx, dword [ebp + 0x194a0]
mov ebx, dword [ebp + 0x194b0]
shl ecx, 0xa
sub eax, ebx
push eax
lea edx, [ecx + ebp + 0xa0]
push str._4d_UN_d_find_d_pixnum_d_xy__d:_d__n
push edx
call fcn.004f0f4c
add esp, 0x20
call esi
mov ecx, dword [ebp + 0x194a0]
mov dword [ebp + 0x194b0], eax
inc ecx
mov eax, ecx
mov dword [ebp + 0x194a0], ecx
cmp eax, 0x5a
jle 0x4379e0
mov ecx, ebp
call fcn.0043b420
mov eax, dword [ebp + 0x19784]
mov ecx, dword [esp + 0x130]
lea eax, [ecx + eax*4]
cmp dword [eax], 2
jae 0x437b39
mov dword [eax], 1
mov edx, dword [ebp + 0x19784]
mov eax, dword [esp + 0x144]
mov eax, dword [eax + edx*4]
mov edx, dword [ebp + 0x19764]
lea ecx, [eax - 0xa]
cmp ecx, edx
ja 0x437a20
test eax, eax
jne 0x437a46
mov ecx, dword [0x5b8ff0]
push 1
call fcn.004898d0
mov edx, dword [ebp + 0x19764]
mov eax, dword [ebp + 0x19784]
mov ecx, dword [esp + 0x144]
sub edx, 0xa
mov dword [ecx + eax*4], edx
mov edx, dword [ebp + 0x19784]
mov eax, dword [esp + 0x158]
mov eax, dword [eax + edx*4]
mov edx, dword [ebp + 0x19764]
lea ecx, [eax + 0xa]
cmp ecx, edx
jb 0x437a67
test eax, eax
jne 0x437a8d
mov ecx, dword [0x5b8ff0]
push 1
call fcn.004898d0
mov edx, dword [ebp + 0x19764]
mov eax, dword [ebp + 0x19784]
mov ecx, dword [esp + 0x158]
add edx, 0xa
mov dword [ecx + eax*4], edx
mov edx, dword [ebp + 0x19784]
mov eax, dword [esp + 0x16c]
mov eax, dword [eax + edx*4]
mov edx, dword [ebp + 0x19768]
lea ecx, [eax - 0xa]
cmp ecx, edx
ja 0x437aae
test eax, eax
jne 0x437ad4
mov ecx, dword [0x5b8ff0]
push 1
call fcn.004898d0
mov edx, dword [ebp + 0x19768]
mov eax, dword [ebp + 0x19784]
mov ecx, dword [esp + 0x16c]
sub edx, 0xa
mov dword [ecx + eax*4], edx
mov edx, dword [ebp + 0x19784]
mov eax, dword [esp + 0x180]
mov eax, dword [eax + edx*4]
mov edx, dword [ebp + 0x19768]
lea ecx, [eax + 0xa]
cmp ecx, edx
jb 0x437af5
test eax, eax
jne 0x437b1b
mov ecx, dword [0x5b8ff0]
push 1
call fcn.004898d0
mov edx, dword [ebp + 0x19768]
mov eax, dword [ebp + 0x19784]
mov ecx, dword [esp + 0x180]
add edx, 0xa
mov dword [ecx + eax*4], edx
mov edx, dword [ebp + 0x90]
lea ecx, [esp + 0x5c]
lea eax, [edi + edx + 0x98]
push eax
push ecx
lea ecx, [ebp + 0x196d8]
call fcn.004e17a0
mov eax, dword [ebp + 0x19998]
mov cl, byte [eax + 0x67c]
test cl, cl
je 0x437ba1
mov eax, dword [eax + 0x1c]
lea edx, [esp + 0x1e4]
push edx
push eax
call dword [0x534794]
mov eax, dword [ebp + 0x19768]
mov ecx, dword [ebp + 0x19764]
push eax
push ecx
lea ecx, [esp + 0x1ec]
push ecx
call dword [0x534800]
test eax, eax
je 0x437ba1
mov edx, dword [ebp + 0x90]
lea ecx, [esp + 0x5c]
mov byte [esp + 0x1bc], 1
lea eax, [edi + edx + 0x98]
push eax
push ecx
lea ecx, [ebp + 0x196d8]
call fcn.004e17a0
mov edx, dword [0x5b8ff0]
mov eax, dword [edx + 0x1b3f4]
test eax, eax
je 0x437be3
mov eax, dword [ebp + 0x19998]
mov byte [eax + 0x67c], 0
mov ecx, dword [ebp + 0x19998]
mov byte [ecx + 0x670], 0
mov ecx, dword [ebp + 0x19998]
call fcn.004b5c40
mov ecx, dword [ebp + 0x19998]
push 5
call fcn.00508eec
mov eax, dword [ebp + 0x19784]
mov edx, dword [esp + 0x1a8]
mov ecx, dword [edx + eax*4]
cmp ecx, 0xc1
ja case.0x437c07.5
xor edx, edx
mov dl, byte [ecx + 0x43a6c8]
jmp dword [edx*4 + 0x43a6b0]
mov byte [ebp + 0x198dc], 1
mov dword [ebp + 0x199a4], eax
mov eax, dword [0x565124]
mov dword [esp + 0x14], eax
mov esi, dword [esp + 0x20]
push 0x48d
mov ecx, esi
mov byte [esp + 0xe54], 0x9a
call fcn.004d5c30
push eax
lea ecx, [esp + 0x18]
call fcn.0050a989
mov ecx, dword [ebp + 0x199a4]
mov eax, dword [ebp + 0x19998]
mov edx, dword [esp + 0xe58]
push ecx
mov ecx, dword [eax + 0x680]
push edx
mov edx, dword [esp + 0x1c]
push ecx
lea eax, [esp + 0x254]
push edx
push eax
call fcn.004f0f4c
add esp, 0x10
lea edx, [esp + 0x24c]
mov ecx, esp
mov dword [esp + 0x2c], esp
push edx
call fcn.00509859
mov ecx, esi
call fcn.004d83d0
lea ecx, [esp + 0x14]
mov byte [esp + 0xe50], 7
call fcn.005097eb
lea ecx, [esp + 0x24]
mov byte [esp + 0xe50], 0
call fcn.005097eb
lea ecx, [esp + 0x1c8]
mov dword [esp + 0xe50], 0xac
call fcn.005049b2
lea ecx, [esp + 0x1a4]
mov byte [esp + 0xe50], 0xab
call fcn.00504dac
lea ecx, [esp + 0x190]
mov byte [esp + 0xe50], 0xaa
call fcn.00504dac
lea ecx, [esp + 0x17c]
mov byte [esp + 0xe50], 0xa9
call fcn.00504dac
lea ecx, [esp + 0x168]
mov byte [esp + 0xe50], 0xa8
call fcn.00504dac
lea ecx, [esp + 0x154]
mov byte [esp + 0xe50], 0xa7
call fcn.00504dac
lea ecx, [esp + 0x140]
mov byte [esp + 0xe50], 0xa6
call fcn.00504dac
lea ecx, [esp + 0x12c]
mov byte [esp + 0xe50], 0xa5
call fcn.00504dac
lea ecx, [esp + 0x118]
mov byte [esp + 0xe50], 0xa4
call fcn.00504dac
lea ecx, [esp + 0x104]
mov byte [esp + 0xe50], 0xa3
call fcn.00504dac
lea ecx, [esp + 0xf0]
mov byte [esp + 0xe50], 0xa2
call fcn.00504dac
lea ecx, [esp + 0xdc]
mov byte [esp + 0xe50], 0xa1
call fcn.00504dac
lea ecx, [esp + 0xd4]
mov byte [esp + 0xe50], 0xa0
call fcn.005097eb
lea ecx, [esp + 0xc0]
mov byte [esp + 0xe50], 0x9f
call fcn.005049b2
lea ecx, [esp + 0xac]
mov byte [esp + 0xe50], 0x9e
call fcn.005049b2
lea ecx, [esp + 0x98]
mov byte [esp + 0xe50], 0x9d
call fcn.005049b2
lea ecx, [esp + 0x84]
mov byte [esp + 0xe50], 0x9c
call fcn.005049b2
lea ecx, [esp + 0x70]
mov byte [esp + 0xe50], 0x9b
call fcn.00504dac
lea ecx, [esp + 0x5c]
mov dword [esp + 0xe50], 0xffffffff
call fcn.005049b2
mov al, 0x5a
jmp 0x436178
mov ecx, dword [esp + 0xc4]
mov byte [ebp + 0x198dc], 0
lea edx, [ecx + eax*4 + 4]
lea ecx, [esp + 0x1c]
push edx
call fcn.00509560
lea eax, [esp + 0x48]
push 9
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0xe58], 0xad
call fcn.00502923
mov eax, dword [eax]
push str.GOTO_ACT
push eax
call fcn.004f0fee
add esp, 8
lea ecx, [esp + 0x48]
test eax, eax
setne bl
call fcn.005097eb
test bl, bl
je 0x437ea2
lea ecx, [esp + 0x1c]
mov byte [esp + 0xe50], 7
call fcn.005097eb
jmp case.0x437c07.0
push 9
push 0
lea ecx, [esp + 0x24]
call fcn.0050246c
push str._UN
lea ecx, [esp + 0x20]
call fcn.005029e8
add eax, 4
lea ecx, [esp + 0x1c]
push eax
push 0
call fcn.0050246c
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.004f0f41
mov esi, eax
mov eax, dword [ebp + 0x94]
add esp, 4
xor edi, edi
test eax, eax
jle 0x437f07
mov ecx, dword [ebp + 0x90]
cmp dword [ecx], esi
je 0x437efe
inc edi
add ecx, 0xb0
cmp edi, eax
jl 0x437eed
jmp 0x437f07
cmp edi, 0xffffffff
jne 0x4380d2
mov ecx, dword [esp + 0x20]
push 0x4f9
call fcn.004d5c30
push eax
lea ecx, [esp + 0x20]
call fcn.0050a989
mov edx, dword [esp + 0x1c]
push 0
push 0
push edx
call fcn.0050ffbf
lea ecx, [esp + 0x1c]
mov byte [esp + 0xe50], 7
call fcn.005097eb
lea ecx, [esp + 0x24]
mov byte [esp + 0xe50], 0
call fcn.005097eb
lea ecx, [esp + 0x1c8]
mov dword [esp + 0xe50], 0xbf
call fcn.005049b2
lea ecx, [esp + 0x1a4]
mov byte [esp + 0xe50], 0xbe
call fcn.00504dac
lea ecx, [esp + 0x190]
mov byte [esp + 0xe50], 0xbd
call fcn.00504dac
lea ecx, [esp + 0x17c]
mov byte [esp + 0xe50], 0xbc
call fcn.00504dac
lea ecx, [esp + 0x168]
mov byte [esp + 0xe50], 0xbb
call fcn.00504dac
lea ecx, [esp + 0x154]
mov byte [esp + 0xe50], 0xba
call fcn.00504dac
lea ecx, [esp + 0x140]
mov byte [esp + 0xe50], 0xb9
call fcn.00504dac
lea ecx, [esp + 0x12c]
mov byte [esp + 0xe50], 0xb8
call fcn.00504dac
lea ecx, [esp + 0x118]
mov byte [esp + 0xe50], 0xb7
call fcn.00504dac
lea ecx, [esp + 0x104]
mov byte [esp + 0xe50], 0xb6
call fcn.00504dac
lea ecx, [esp + 0xf0]
mov byte [esp + 0xe50], 0xb5
call fcn.00504dac
lea ecx, [esp + 0xdc]
mov byte [esp + 0xe50], 0xb4
call fcn.00504dac
lea ecx, [esp + 0xd4]
mov byte [esp + 0xe50], 0xb3
call fcn.005097eb
lea ecx, [esp + 0xc0]
mov byte [esp + 0xe50], 0xb2
call fcn.005049b2
lea ecx, [esp + 0xac]
mov byte [esp + 0xe50], 0xb1
call fcn.005049b2
mov byte [esp + 0xe50], 0xb0
lea ecx, [esp + 0x98]
call fcn.005049b2
lea ecx, [esp + 0x84]
mov byte [esp + 0xe50], 0xaf
call fcn.005049b2
mov byte [esp + 0xe50], 0xae
lea ecx, [esp + 0x70]
call fcn.00504dac
lea ecx, [esp + 0x5c]
mov dword [esp + 0xe50], 0xffffffff
call fcn.005049b2
mov al, 6
jmp 0x436178
push 0xffffffffffffffff
push 0
lea ecx, [ebp + 0x194bc]
call fcn.00504dd9
lea ecx, [edi + edi*4]
mov ebx, dword [esp + 0x20]
lea eax, [edi - 1]
push 0x4fb
lea edx, [edi + ecx*2]
mov dword [ebp + 0x198e4], eax
mov eax, dword [ebp + 0x90]
shl edx, 4
mov ecx, dword [edx + eax + 4]
mov dword [ebp + 0x194b8], ecx
mov ecx, ebx
call fcn.004d5c30
push eax
lea ecx, [esp + 0x20]
call fcn.0050a989
mov edx, dword [ebp + 0x199a4]
mov ecx, dword [ebp + 0x19998]
mov eax, dword [esp + 0xe58]
push esi
push edi
push edx
mov edx, dword [ecx + 0x680]
push eax
mov eax, dword [esp + 0x2c]
push edx
lea ecx, [esp + 0x25c]
push eax
push ecx
call fcn.004f0f4c
add esp, 0x18
lea edx, [esp + 0x24c]
mov ecx, esp
mov dword [esp + 0x2c], esp
push edx
call fcn.00509859
mov ecx, ebx
call fcn.004d83d0
lea ecx, [esp + 0x1c]
mov byte [esp + 0xe50], 7
call fcn.005097eb
lea ecx, [esp + 0x24]
mov byte [esp + 0xe50], 0
call fcn.005097eb
lea ecx, [esp + 0x1c8]
mov dword [esp + 0xe50], 0xd1
call fcn.005049b2
lea ecx, [esp + 0x1a4]
mov byte [esp + 0xe50], 0xd0
call fcn.00504dac
lea ecx, [esp + 0x190]
mov byte [esp + 0xe50], 0xcf
call fcn.00504dac
lea ecx, [esp + 0x17c]
mov byte [esp + 0xe50], 0xce
call fcn.00504dac
lea ecx, [esp + 0x168]
mov byte [esp + 0xe50], 0xcd
call fcn.00504dac
mov byte [esp + 0xe50], 0xcc
lea ecx, [esp + 0x154]
call fcn.00504dac
lea ecx, [esp + 0x140]
mov byte [esp + 0xe50], 0xcb
call fcn.00504dac
lea ecx, [esp + 0x12c]
mov byte [esp + 0xe50], 0xca
call fcn.00504dac
lea ecx, [esp + 0x118]
mov byte [esp + 0xe50], 0xc9
call fcn.00504dac
lea ecx, [esp + 0x104]
mov byte [esp + 0xe50], 0xc8
call fcn.00504dac
lea ecx, [esp + 0xf0]
mov byte [esp + 0xe50], 0xc7
call fcn.00504dac
lea ecx, [esp + 0xdc]
mov byte [esp + 0xe50], 0xc6
call fcn.00504dac
lea ecx, [esp + 0xd4]
mov byte [esp + 0xe50], 0xc5
call fcn.005097eb
lea ecx, [esp + 0xc0]
mov byte [esp + 0xe50], 0xc4
call fcn.005049b2
lea ecx, [esp + 0xac]
mov byte [esp + 0xe50], 0xc3
call fcn.005049b2
lea ecx, [esp + 0x98]
mov byte [esp + 0xe50], 0xc2
call fcn.005049b2
lea ecx, [esp + 0x84]
mov byte [esp + 0xe50], 0xc1
call fcn.005049b2
mov byte [esp + 0xe50], 0xc0
jmp 0x436785
mov dword [ebp + 0x199a4], eax
lea eax, [ebp + 0x19788]
push eax
lea ecx, [ebp + 0x199a0]
mov byte [ebp + 0x198dc], 0
call fcn.00509924
mov ecx, dword [0x565124]
mov dword [esp + 0x14], ecx
mov esi, dword [esp + 0x20]
push 0x48f
mov ecx, esi
mov byte [esp + 0xe54], 0xd2
call fcn.004d5c30
push eax
lea ecx, [esp + 0x18]
call fcn.0050a989
mov edx, dword [ebp + 0x199a4]
mov ecx, dword [ebp + 0x19998]
mov eax, dword [esp + 0xe58]
push edx
mov edx, dword [ecx + 0x680]
push eax
mov eax, dword [esp + 0x1c]
push edx
lea ecx, [esp + 0x254]
push eax
push ecx
call fcn.004f0f4c
add esp, 0x10
lea edx, [esp + 0x24c]
mov ecx, esp
mov dword [esp + 0x2c], esp
push edx
call fcn.00509859
mov ecx, esi
call fcn.004d83d0
push 0xffffffffffffffff
push 0
lea ecx, [ebp + 0x194bc]
call fcn.00504dd9
lea ecx, [esp + 0x14]
mov byte [esp + 0xe50], 7
call fcn.005097eb
lea ecx, [esp + 0x24]
mov byte [esp + 0xe50], 0
call fcn.005097eb
lea ecx, [esp + 0x1c8]
mov dword [esp + 0xe50], 0xe4
call fcn.005049b2
lea ecx, [esp + 0x1a4]
mov byte [esp + 0xe50], 0xe3
call fcn.00504dac
lea ecx, [esp + 0x190]
mov byte [esp + 0xe50], 0xe2
call fcn.00504dac
lea ecx, [esp + 0x17c]
mov byte [esp + 0xe50], 0xe1
call fcn.00504dac
lea ecx, [esp + 0x168]
mov byte [esp + 0xe50], 0xe0
call fcn.00504dac
mov byte [esp + 0xe50], 0xdf
lea ecx, [esp + 0x154]
call fcn.00504dac
lea ecx, [esp + 0x140]
mov byte [esp + 0xe50], 0xde
call fcn.00504dac
lea ecx, [esp + 0x12c]
mov byte [esp + 0xe50], 0xdd
call fcn.00504dac
lea ecx, [esp + 0x118]
mov byte [esp + 0xe50], 0xdc
call fcn.00504dac
lea ecx, [esp + 0x104]
mov byte [esp + 0xe50], 0xdb
call fcn.00504dac
lea ecx, [esp + 0xf0]
mov byte [esp + 0xe50], 0xda
call fcn.00504dac
lea ecx, [esp + 0xdc]
mov byte [esp + 0xe50], 0xd9
call fcn.00504dac
lea ecx, [esp + 0xd4]
mov byte [esp + 0xe50], 0xd8
call fcn.005097eb
lea ecx, [esp + 0xc0]
mov byte [esp + 0xe50], 0xd7
call fcn.005049b2
lea ecx, [esp + 0xac]
mov byte [esp + 0xe50], 0xd6
call fcn.005049b2
lea ecx, [esp + 0x98]
mov byte [esp + 0xe50], 0xd5
call fcn.005049b2
lea ecx, [esp + 0x84]
mov byte [esp + 0xe50], 0xd4
call fcn.005049b2
mov byte [esp + 0xe50], 0xd3
lea ecx, [esp + 0x70]
call fcn.00504dac
lea ecx, [esp + 0x5c]
mov dword [esp + 0xe50], 0xffffffff
call fcn.005049b2
mov al, 7
jmp 0x436178
push 0xffffffffffffffff
push 0
lea ecx, [ebp + 0x194bc]
mov byte [ebp + 0x198dc], 0
mov dword [ebp + 0x199a4], eax
call fcn.00504dd9
mov eax, dword [0x565124]
mov dword [esp + 0x14], eax
mov esi, dword [esp + 0x20]
push 0x491
mov ecx, esi
mov byte [esp + 0xe54], 0xe5
call fcn.004d5c30
push eax
lea ecx, [esp + 0x18]
call fcn.0050a989
mov ecx, dword [ebp + 0x199a4]
mov eax, dword [ebp + 0x19998]
mov edx, dword [esp + 0xe58]
push ecx
mov ecx, dword [eax + 0x680]
push edx
mov edx, dword [esp + 0x1c]
push ecx
lea eax, [esp + 0x254]
push edx
push eax
call fcn.004f0f4c
add esp, 0x10
lea edx, [esp + 0x24c]
mov ecx, esp
mov dword [esp + 0x2c], esp
push edx
call fcn.00509859
mov ecx, esi
call fcn.004d83d0
lea ecx, [esp + 0x14]
mov byte [esp + 0xe50], 7
call fcn.005097eb
lea ecx, [esp + 0x24]
mov byte [esp + 0xe50], 0
call fcn.005097eb
lea ecx, [esp + 0x1c8]
mov dword [esp + 0xe50], 0xf7
call fcn.005049b2
lea ecx, [esp + 0x1a4]
mov byte [esp + 0xe50], 0xf6
call fcn.00504dac
lea ecx, [esp + 0x190]
mov byte [esp + 0xe50], 0xf5
call fcn.00504dac
lea ecx, [esp + 0x17c]
mov byte [esp + 0xe50], 0xf4
call fcn.00504dac
lea ecx, [esp + 0x168]
mov byte [esp + 0xe50], 0xf3
call fcn.00504dac
lea ecx, [esp + 0x154]
mov byte [esp + 0xe50], 0xf2
call fcn.00504dac
mov byte [esp + 0xe50], 0xf1
lea ecx, [esp + 0x140]
call fcn.00504dac
lea ecx, [esp + 0x12c]
mov byte [esp + 0xe50], 0xf0
call fcn.00504dac
lea ecx, [esp + 0x118]
mov byte [esp + 0xe50], 0xef
call fcn.00504dac
lea ecx, [esp + 0x104]
mov byte [esp + 0xe50], 0xee
call fcn.00504dac
lea ecx, [esp + 0xf0]
mov byte [esp + 0xe50], 0xed
call fcn.00504dac
lea ecx, [esp + 0xdc]
mov byte [esp + 0xe50], 0xec
call fcn.00504dac
lea ecx, [esp + 0xd4]
mov byte [esp + 0xe50], 0xeb
call fcn.005097eb
lea ecx, [esp + 0xc0]
mov byte [esp + 0xe50], 0xea
call fcn.005049b2
lea ecx, [esp + 0xac]
mov byte [esp + 0xe50], 0xe9
call fcn.005049b2
lea ecx, [esp + 0x98]
mov byte [esp + 0xe50], 0xe8
call fcn.005049b2
lea ecx, [esp + 0x84]
mov byte [esp + 0xe50], 0xe7
call fcn.005049b2
lea ecx, [esp + 0x70]
mov byte [esp + 0xe50], 0xe6
call fcn.00504dac
lea ecx, [esp + 0x5c]
mov dword [esp + 0xe50], 0xffffffff
call fcn.005049b2
mov al, 8
jmp 0x436178
mov eax, dword [ebp + 0x94]
mov ebx, dword [esp + 0xe58]
dec eax
cmp ebx, eax
jge 0x4387cc
push ebx
mov ecx, ebp
call fcn.0043b8e0
test eax, eax
jne 0x4387b9
mov eax, dword [ebp + 0x194b8]
test eax, eax
jne 0x4387cc
mov eax, dword [ebp + 0x194d0]
mov ecx, dword [ebp + 0x199c8]
cmp eax, ecx
jge 0x4387cc
inc eax
push 0xffffffffffffffff
mov ecx, ebp
mov dword [ebp + 0x194d0], eax
call fcn.0043b8e0
mov edx, dword [ebp + 0x194c4]
lea ecx, [ebp + 0x194bc]
push eax
push edx
call fcn.00504f58
mov eax, dword [ebp + 0x19784]
mov ecx, dword [esp + 0x1a8]
mov edx, dword [ebp + 0x19768]
mov esi, dword [0x534454]
mov ecx, dword [ecx + eax*4]
mov dword [ebp + 0x194b8], ecx
push ecx
mov ecx, dword [ebp + 0x19764]
push edx
mov edx, dword [ebp + 0x90]
push ecx
push eax
mov eax, dword [edi + edx]
push eax
call esi
mov ecx, dword [ebp + 0x194a0]
mov edi, dword [ebp + 0x194b0]
shl ecx, 0xa
sub eax, edi
push eax
lea edx, [ecx + ebp + 0xa0]
push str._4d_un_d_find_d_xy__d:_d__goto_nod_d_n
push edx
call fcn.004f0f4c
add esp, 0x20
call esi
mov ecx, dword [ebp + 0x194a0]
mov dword [ebp + 0x194b0], eax
inc ecx
mov eax, ecx
mov dword [ebp + 0x194a0], ecx
cmp eax, 0x5a
jle 0x43884e
mov ecx, ebp
call fcn.0043b420
mov eax, dword [0x565124]
mov dword [esp + 0x30], eax
mov esi, dword [esp + 0x20]
push 0x493
mov ecx, esi
mov byte [esp + 0xe54], 0xf8
call fcn.004d5c30
push eax
lea ecx, [esp + 0x34]
call fcn.0050a989
mov ecx, dword [ebp + 0x194b8]
mov eax, dword [ebp + 0x19998]
mov edx, dword [ebp + 0x19784]
push ecx
mov ecx, dword [eax + 0x680]
push edx
mov edx, dword [esp + 0x38]
push ebx
push ecx
lea eax, [esp + 0x658]
push edx
push eax
call fcn.004f0f4c
add esp, 0x14
lea edx, [esp + 0x64c]
mov ecx, esp
mov dword [esp + 0x2c], esp
push edx
call fcn.00509859
mov ecx, esi
call fcn.004d83d0
lea ecx, [esp + 0x30]
mov byte [esp + 0xe50], 7
call fcn.005097eb
lea ecx, [esp + 0x24]
mov byte [esp + 0xe50], 0
call fcn.005097eb
lea ecx, [esp + 0x1c8]
mov dword [esp + 0xe50], 0x10a
call fcn.005049b2
lea ecx, [esp + 0x1a4]
mov byte [esp + 0xe50], 9
call fcn.00504dac
lea ecx, [esp + 0x190]
mov byte [esp + 0xe50], 8
call fcn.00504dac
lea ecx, [esp + 0x17c]
mov byte [esp + 0xe50], 7
call fcn.00504dac
lea ecx, [esp + 0x168]
mov byte [esp + 0xe50], 6
call fcn.00504dac
lea ecx, [esp + 0x154]
mov byte [esp + 0xe50], 5
call fcn.00504dac
lea ecx, [esp + 0x140]
mov byte [esp + 0xe50], 4
call fcn.00504dac
lea ecx, [esp + 0x12c]
mov byte [esp + 0xe50], 3
call fcn.00504dac
mov byte [esp + 0xe50], 2
lea ecx, [esp + 0x118]
call fcn.00504dac
lea ecx, [esp + 0x104]
mov byte [esp + 0xe50], 1
call fcn.00504dac
lea ecx, [esp + 0xf0]
mov byte [esp + 0xe50], 0
call fcn.00504dac
lea ecx, [esp + 0xdc]
mov dword [esp + 0xe50], 0xff
call fcn.00504dac
lea ecx, [esp + 0xd4]
mov byte [esp + 0xe50], 0xfe
call fcn.005097eb
lea ecx, [esp + 0xc0]
mov byte [esp + 0xe50], 0xfd
call fcn.005049b2
lea ecx, [esp + 0xac]
mov byte [esp + 0xe50], 0xfc
call fcn.005049b2
lea ecx, [esp + 0x98]
mov byte [esp + 0xe50], 0xfb
call fcn.005049b2
lea ecx, [esp + 0x84]
mov byte [esp + 0xe50], 0xfa
call fcn.005049b2
mov byte [esp + 0xe50], 0xf9
lea ecx, [esp + 0x70]
call fcn.00504dac
lea ecx, [esp + 0x5c]
mov dword [esp + 0xe50], 0xffffffff
call fcn.005049b2
mov al, 0x64
jmp 0x436178
push 0
call dword [0x534704]
mov eax, dword [ebp + 0x90]
mov ecx, dword [edi + eax + 0x48]
push ecx
call dword [0x534444]
mov byte [ebp + 0x198dc], 0
mov dword [ebp + 0x198d8], ebx
mov dword [ebp + 0x198e4], ebx
mov dword [ebp + 0x198d0], 0
jmp 0x436176
lea edx, [ebp + 0x196c4]
push ebx
push edx
lea ecx, [ebp + 0x19528]
call fcn.004438f0
test al, al
je 0x438a85
mov eax, dword [ebp + 0x90]
lea ecx, [edi + eax + 0x40]
push ecx
lea ecx, [esp + 0x24]
call fcn.00509560
push 0x5c
lea ecx, [esp + 0x24]
mov dword [esp + 0xe54], 0x11d
call fcn.005029c6
lea edx, [esp + 0x34]
push eax
push edx
lea ecx, [esp + 0x28]
call fcn.00502923
mov eax, dword [eax]
push eax
call dword [0x5343fc]
lea ecx, [esp + 0x34]
call fcn.005097eb
mov ecx, 0x11
xor eax, eax
lea edi, [esp + 0x204]
lea edx, [esp + 0x204]
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0x20]
lea ecx, [esp + 0x1e4]
push ecx
push edx
push 0
push 0
push 0
mov dword [esp + 0x218], 0x44
mov eax, dword [eax - 8]
push 0
push 0
push 0
push eax
lea ecx, [esp + 0x44]
call fcn.00509c1b
push eax
push 0
call dword [0x5343ec]
mov eax, dword [esp + 0x1ec]
lea edx, [esp + 0x20]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push edx
call fcn.00509560
lea ecx, [ebp + 0x196d8]
call fcn.004da3e0
lea ecx, [esp + 0x20]
mov dword [esp + 0xe50], 0xffffffff
call fcn.005097eb
jmp 0x438a85
mov ecx, dword [ebp + 0x196b4]
mov edx, dword [esp + 0xe58]
mov eax, dword [ecx + edx*4]
mov ecx, dword [0x56fa80]
lea esi, [ecx + eax*2]
mov eax, dword [0x560034]
cmp esi, eax
jbe 0x438bde
call dword [0x534454]
test esi, esi
mov ebx, eax
jle 0x438bcc
push esi
call dword [0x534444]
call dword [0x534454]
sub ebx, eax
add ebx, esi
mov dword [0x56fa80], ebx
jmp 0x438be4
mov dword [0x56fa80], esi
mov ebx, dword [esp + 0xe58]
mov dword [0x560030], ebx
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x10], 0
test eax, eax
jl 0x436176
jmp 0x438c0e
mov edi, dword [esp + 0x1dc]
mov edx, dword [ebp + 0x198e4]
mov eax, dword [esp + 0xe58]
cmp edx, eax
je 0x436176
push 0
call dword [0x534704]
lea eax, [esp + 0x200]
push eax
call fcn.00501956
mov ebx, dword [eax]
mov eax, dword [ebp + 0x199b4]
sub eax, 0
je 0x438cfa
dec eax
je 0x438ca8
dec eax
jne 0x438e77
lea ebx, [ebp + 0x19528]
mov ecx, ebx
call fcn.00443560
cmp eax, 0x1e
jl 0x438e77
mov esi, dword [0x534400]
mov ecx, dword [ebp + 0x19998]
mov al, byte [ecx + 0x7a3]
test al, al
jne 0x4380cb
mov edx, dword [0x5b8ff0]
push 0x14d
mov eax, dword [edx + 0x974]
push eax
call esi
mov ecx, ebx
call fcn.00443560
cmp eax, 0x1e
jge 0x438c6f
jmp 0x438e77
lea esi, [ebp + 0x19528]
mov ecx, esi
call fcn.00443560
cmp eax, 0x64
jl 0x438e77
mov ebx, dword [0x534400]
mov ecx, dword [0x5b8ff0]
push 0xa
mov edx, dword [ecx + 0x974]
push edx
call ebx
mov eax, dword [ebp + 0x19998]
mov cl, byte [eax + 0x7a3]
test cl, cl
jne 0x4380cb
mov ecx, esi
call fcn.00443560
cmp eax, 0x64
jge 0x438cc4
jmp 0x438e77
mov ecx, dword [ebp + 0x90]
mov eax, dword [edi + ecx + 0x4c]
lea esi, [edi + ecx]
cmp eax, 0x1e
jle 0x438dce
lea ecx, [ebp + 0x19528]
call fcn.00443560
cmp eax, dword [esi + 0x4c]
jle 0x438e77
mov edx, dword [ebp + 0x19998]
mov al, byte [edx + 0x7a3]
test al, al
jne 0x4380cb
push ecx
lea ecx, [esp + 0x1fc]
mov eax, esp
mov dword [esp + 0x30], esp
mov dword [eax], ebx
lea eax, [esp + 0x1f8]
push eax
push ecx
call fcn.00501956
mov ecx, eax
call fcn.00430df0
mov ecx, dword [eax]
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [edx + edx*2]
lea edx, [eax + eax*4]
mov eax, dword [ebp + 0x90]
shl edx, 2
mov eax, dword [edi + eax + 0x48]
sub ecx, edx
lea edx, [eax + eax*2]
shl edx, 1
cmp ecx, edx
jg 0x438e77
mov eax, dword [0x5b8ff0]
push 0x14d
mov ecx, dword [eax + 0x974]
push ecx
call dword [0x534400]
mov edx, dword [ebp + 0x90]
mov esi, edi
lea ecx, [ebp + 0x19528]
add esi, edx
call fcn.00443560
cmp eax, dword [esi + 0x4c]
jg 0x438d24
jmp 0x438e77
lea esi, [ebp + 0x19528]
mov ecx, esi
call fcn.00443560
cmp eax, 0x1e
jle 0x438e77
mov edx, dword [ebp + 0x19998]
mov al, byte [edx + 0x7a3]
test al, al
jne 0x4380cb
push ecx
lea ecx, [esp + 0x1e4]
mov eax, esp
mov dword [esp + 0x30], esp
mov dword [eax], ebx
lea eax, [esp + 0x200]
push eax
push ecx
call fcn.00501956
mov ecx, eax
call fcn.00430df0
mov ecx, dword [eax]
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [edx + edx*2]
lea edx, [eax + eax*4]
mov eax, dword [ebp + 0x90]
shl edx, 2
mov eax, dword [edi + eax + 0x48]
sub ecx, edx
lea edx, [eax + eax*2]
shl edx, 1
cmp ecx, edx
jg 0x438e77
mov eax, dword [0x5b8ff0]
push 0x14d
mov ecx, dword [eax + 0x974]
push ecx
call dword [0x534400]
mov ecx, esi
call fcn.00443560
cmp eax, 0x1e
jg 0x438de4
mov edx, dword [0x5b8ff0]
mov eax, dword [edx + 0x1b3f4]
test eax, eax
je 0x438ea3
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x5601e4
call fcn.00509859
mov ecx, dword [ebp + 0x19998]
call fcn.004b59c0
mov esi, dword [0x534454]
call esi
sub eax, dword [ebp + 0x194b0]
push eax
mov eax, dword [ebp + 0x194a0]
shl eax, 0xa
push str._4d_search_windows_n
lea ecx, [eax + ebp + 0xa0]
push ecx
call fcn.004f0f4c
add esp, 0xc
call esi
mov ecx, dword [ebp + 0x194a0]
mov dword [ebp + 0x194b0], eax
inc ecx
mov eax, ecx
mov dword [ebp + 0x194a0], ecx
cmp eax, 0x5a
jle 0x438ef3
mov ecx, ebp
call fcn.0043b420
mov edx, dword [ebp + 0x90]
mov cl, byte [edi + edx + 0x94]
lea eax, [edi + edx]
test cl, cl
je 0x438f0e
xor esi, esi
jmp 0x4390ca
mov eax, dword [eax + 0x80]
mov esi, dword [esp + 0xe58]
push eax
push esi
mov ecx, ebp
call fcn.004356f0
mov ecx, dword [ebp + 0x90]
mov ebx, eax
mov edx, dword [edi + ecx + 0x5c]
mov ecx, ebp
push edx
push esi
call fcn.00435690
test ebx, ebx
mov esi, eax
je 0x438f73
test esi, esi
je 0x438f73
cmp dword [esp + 0x10], 2
jg 0x438f73
push ebx
call dword [0x5347d0]
test eax, eax
je 0x438f73
mov eax, dword [ebp + 0x90]
mov dword [edi + eax + 0x80], ebx
mov ecx, dword [ebp + 0x90]
mov dword [edi + ecx + 0x5c], esi
xor esi, esi
jmp 0x4390ca
mov edx, dword [ebp + 0x90]
mov byte [esp + 0x1b], 1
test ebx, ebx
mov eax, dword [edi + edx + 0x80]
mov dword [esp + 0x14], eax
je 0x438faa
push ebx
call dword [0x5347d0]
test eax, eax
je 0x438faa
mov ecx, dword [ebp + 0x90]
mov byte [esp + 0x1b], 0
mov dword [edi + ecx + 0x80], ebx
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x1c]
cmp eax, ecx
je 0x439007
cmp eax, 4
jg 0x439007
test ebx, ebx
je 0x438fce
push ebx
call dword [0x5347d0]
test eax, eax
je 0x438fce
mov eax, ebx
jmp 0x438fd0
xor eax, eax
mov edx, dword [ebp + 0x90]
push 0
push eax
cmp byte [edi + edx + 0x84], 3
setne al
push eax
push 0xd
push 0x2d
mov ecx, dword [esp + 0xe6c]
lea edx, [ebp + 0x8c]
push ecx
push edx
lea ecx, [ebp + 0x196d8]
call fcn.004dace0
mov esi, eax
jmp 0x439072
mov eax, dword [ebp + 0x90]
mov al, byte [edi + eax + 0x84]
cmp al, 2
je 0x43902c
cmp al, 3
je 0x43902c
cmp al, 4
je 0x43902c
push 0
push 0
push 1
push 0xc
push 0x1d
jmp 0x438fe9
mov eax, dword [esp + 0xe58]
push 0
push 0
push 0
push 0xc
push 0x1d
lea ecx, [ebp + 0x8c]
push eax
push ecx
lea ecx, [ebp + 0x196d8]
call fcn.004dace0
mov edx, dword [ebp + 0x90]
mov esi, eax
mov cl, byte [edi + edx + 0x84]
lea eax, [edi + edx + 0x84]
cmp cl, 4
jne 0x439072
test esi, esi
jne 0x439072
mov byte [eax], 2
mov al, byte [esp + 0x1b]
test al, al
je 0x43909e
mov eax, dword [ebp + 0x90]
mov edx, dword [esp + 0x14]
mov ecx, dword [edi + eax + 0x80]
mov eax, dword [esp + 0xe58]
push ecx
push edx
push eax
mov ecx, ebp
call fcn.00435750
jmp 0x4390ab
mov ecx, dword [ebp + 0x90]
mov dword [edi + ecx + 0x80], ebx
mov edx, dword [ebp + 0x90]
mov ecx, dword [esp + 0x14]
mov eax, dword [edi + edx + 0x5c]
mov edx, dword [esp + 0xe58]
push eax
push ecx
push edx
mov ecx, ebp
call fcn.004359a0
mov ebx, dword [esp + 0xe58]
mov eax, dword [ebp + 0x198e4]
cmp eax, ebx
je 0x436176
test esi, esi
je 0x4391e7
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x1c]
cmp ecx, eax
jge 0x439123
cmp esi, 2
jne 0x43a20d
lea edx, [eax - 4]
cmp ecx, edx
jne 0x43910c
cmp eax, 8
jg 0x43a232
cmp ecx, 4
jne 0x43a20d
cmp eax, 8
jle 0x43a232
jmp 0x43a20d
cmp esi, 2
je 0x43a357
cmp esi, 1
je 0x43a357
cmp esi, 3
jne 0x4391e7
mov eax, dword [ebp + 0x90]
add eax, edi
cmp byte [eax + 0x88], 1
je 0x43a316
mov edx, dword [eax + 0x30]
lea ecx, [ebp + 0x19528]
push edx
call fcn.00445760
test al, al
je 0x438a85
mov eax, dword [ebp + 0x90]
lea esi, [edi + eax]
mov al, byte [edi + eax + 8]
cmp al, 3
jne 0x438a85
mov cl, byte [esi + 0x91]
mov dl, byte [esi + 0x92]
mov al, byte [esi + 0x90]
push ecx
mov ecx, dword [esi + 0x30]
push edx
push eax
push ecx
lea ecx, [ebp + 0x19528]
call fcn.00445760
mov edx, dword [esi + 0x30]
push eax
mov eax, dword [esi + 0x2c]
push 0
push edx
push 0
push 0
push eax
lea ecx, [ebp + 0x196d8]
call fcn.004d9ae0
mov dword [ebp + 0x198d8], ebx
mov byte [ebp + 0x198dc], 1
mov ecx, dword [ebp + 0x90]
mov edx, dword [edi + ecx + 0x2c]
push edx
call dword [0x5347f4]
movsx eax, ax
shr eax, 0x10
je 0x438a85
mov ecx, dword [ebp + 0x90]
lea esi, [ebp + 0x7c]
lea eax, [esp + 0x54]
mov edx, dword [edi + ecx + 0x5c]
mov ecx, esi
push edx
push eax
call fcn.004d3c00
mov eax, dword [eax]
push str.FolderView
push eax
mov dword [esp + 0xe58], 0x11f
call fcn.004f0fee
add esp, 8
test eax, eax
jne 0x4392ff
mov ecx, dword [ebp + 0x90]
lea eax, [esp + 0x34]
mov edx, dword [edi + ecx + 0x5c]
mov ecx, esi
push edx
push eax
call fcn.004d3c70
mov eax, dword [eax]
push 0x5601b4
push eax
call fcn.004f0fee
add esp, 8
lea ecx, [esp + 0x34]
test eax, eax
sete bl
call fcn.005097eb
test bl, bl
je 0x4392ff
mov ecx, dword [ebp + 0x90]
lea eax, [esp + 0x44]
mov edx, dword [edi + ecx + 0x80]
mov ecx, esi
push edx
push eax
call fcn.004d3c70
mov eax, dword [eax]
push str.Shell_TrayWnd
push eax
mov byte [esp + 0xe58], 0x20
call fcn.004f0fee
add esp, 8
test eax, eax
je 0x4392d3
mov ecx, dword [ebp + 0x90]
lea eax, [esp + 0x48]
mov edx, dword [edi + ecx + 0x80]
mov ecx, esi
push edx
push eax
call fcn.004d3c70
mov eax, dword [eax]
push str.WorkerW
push eax
call fcn.004f0fee
add esp, 8
lea ecx, [esp + 0x48]
test eax, eax
sete bl
call fcn.005097eb
test bl, bl
je 0x4392d5
mov bl, 1
lea ecx, [esp + 0x44]
mov byte [esp + 0xe50], 0x1f
call fcn.005097eb
test bl, bl
je 0x4392ff
mov ecx, dword [ebp + 0x90]
cmp byte [edi + ecx + 0x88], 1
sete al
test al, al
jne 0x439328
mov edx, dword [ebp + 0x90]
mov cl, byte [edi + edx + 8]
lea eax, [edi + edx]
cmp cl, 1
jne 0x439324
mov eax, dword [eax + 0x30]
lea ecx, [ebp + 0x19528]
push eax
call fcn.00445760
test al, al
jne 0x439328
xor bl, bl
jmp 0x43932a
mov bl, 1
lea ecx, [esp + 0x54]
mov dword [esp + 0xe50], 0xffffffff
call fcn.005097eb
test bl, bl
je 0x43934b
mov byte [ebp + 0x19894], 1
jmp 0x439352
mov byte [ebp + 0x19894], 0
mov ecx, dword [esp + 0xe58]
mov eax, dword [ebp + 0x198e4]
cmp eax, ecx
je 0x436176
cmp dword [esp + 0x10], 1
jle 0x43984f
mov edx, dword [ebp + 0x90]
lea ecx, [ebp + 0x19528]
mov eax, dword [edi + edx + 0x30]
push eax
call fcn.00445760
test al, al
jne 0x43984f
mov ecx, dword [ebp + 0x90]
lea eax, [edi + ecx]
mov cl, byte [edi + ecx + 0x94]
test cl, cl
jne 0x43984f
mov edx, dword [ebp + 0x19998]
mov cl, byte [edx + 0x7a3]
test cl, cl
jne 0x4380cb
mov edx, dword [eax + 0x5c]
lea ecx, [esp + 0x1e4]
push ecx
push edx
call dword [0x534794]
mov eax, dword [ebp + 0x90]
lea edx, [esp + 0x40]
mov ecx, dword [edi + eax + 0x5c]
push ecx
push edx
mov ecx, esi
call fcn.004d3c70
mov eax, dword [eax]
push 0x5601b4
push eax
mov dword [esp + 0xe58], 0x121
call fcn.004f0fee
add esp, 8
test eax, eax
je 0x43943d
mov eax, dword [ebp + 0x90]
lea edx, [esp + 0x58]
mov ecx, dword [edi + eax + 0x5c]
push ecx
push edx
mov ecx, esi
call fcn.004d3c70
mov eax, dword [eax]
push 0x5601b4
push eax
call fcn.004f0fee
add esp, 8
lea ecx, [esp + 0x58]
test eax, eax
sete bl
call fcn.005097eb
test bl, bl
je 0x439456
mov eax, dword [ebp + 0x90]
cmp byte [edi + eax + 0x88], 1
sete al
test al, al
je 0x439456
mov bl, 1
jmp 0x439458
xor bl, bl
lea ecx, [esp + 0x40]
mov dword [esp + 0xe50], 0xffffffff
call fcn.005097eb
test bl, bl
je 0x43984f
push 0
push 0x19f
push 0x111
push 0
push str.Shell_TrayWnd
call dword [0x534708]
push eax
call dword [0x534668]
mov ecx, dword [ebp + 0x19998]
mov al, byte [ecx + 0x7a3]
test al, al
jne 0x4380cb
mov dword [esp + 0x24], 0
mov edx, dword [ebp + 0x19998]
mov al, byte [edx + 0x7a3]
test al, al
jne 0x4380cb
mov eax, dword [ebp + 0x90]
lea edx, [esp + 0x3c]
lea esi, [ebp + 0x196d8]
mov ecx, dword [edi + eax + 0x5c]
mov eax, dword [esp + 0xe58]
push ecx
push 0
push edx
lea ecx, [ebp + 0x8c]
push eax
push ecx
mov ecx, esi
call fcn.004dbf20
mov eax, dword [esp + 0x3c]
test eax, eax
je 0x43983d
mov edx, dword [ebp + 0x90]
mov ecx, dword [edi + edx + 0x34]
lea eax, [edi + edx]
mov eax, dword [edi + edx + 0x38]
push eax
push ecx
call dword [0x534790]
push eax
mov ecx, esi
call fcn.004dcf30
mov ebx, eax
mov eax, dword [ebp + 0x90]
add eax, edi
mov dword [esp + 0x20], ebx
mov ecx, dword [eax + 0x5c]
mov edx, dword [eax + 0x38]
mov eax, dword [eax + 0x34]
push ecx
push 0
push edx
push eax
mov ecx, esi
call fcn.004dccb0
lea ecx, [esp + 0x50]
push eax
push ecx
lea ecx, [ebp + 0x7c]
call fcn.004d3c70
mov eax, dword [eax]
push 0x5601b4
push eax
call fcn.004f0fee
add esp, 8
lea ecx, [esp + 0x50]
test eax, eax
sete byte [esp + 0x1b]
call fcn.005097eb
mov al, byte [esp + 0x1b]
test al, al
jne 0x43984f
mov edx, dword [ebp + 0x19998]
mov al, byte [edx + 0x7a3]
test al, al
jne 0x4380cb
mov eax, dword [ebp + 0x90]
cmp ebx, dword [edi + eax + 0x80]
je 0x4397b1
lea eax, [ebp + 0x1984c]
mov dword [ebp + 0x19878], ebx
push eax
push ebx
call dword [0x53473c]
mov byte [ebp + 0x1987c], 0
mov ebx, dword [ebp + 0x19840]
inc ebx
jne 0x4395fd
mov eax, dword [ebp + 0x1983c]
xor esi, esi
cmp eax, esi
je 0x4395ec
mov ecx, dword [ebp + 0x19840]
push eax
mov dword [esp + 0x30], ecx
call fcn.00509e5a
add esp, 4
mov dword [ebp + 0x1983c], esi
mov dword [ebp + 0x19844], esi
mov dword [ebp + 0x19840], esi
jmp 0x43976c
mov edx, dword [ebp + 0x1983c]
test edx, edx
jne 0x439644
lea edx, [ebx + ebx*2]
lea esi, [ebx + edx*4]
shl esi, 2
push esi
call fcn.00509e31
mov ecx, esi
mov edi, eax
mov edx, ecx
xor eax, eax
shr ecx, 2
mov dword [ebp + 0x1983c], edi
add esp, 4
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov dword [ebp + 0x19844], ebx
mov dword [ebp + 0x19840], ebx
jmp 0x43976c
mov ecx, dword [ebp + 0x19844]
cmp ebx, ecx
jg 0x43969c
mov eax, dword [ebp + 0x19840]
cmp eax, ebx
jge 0x439689
mov ecx, ebx
lea esi, [eax + eax*2]
sub ecx, eax
lea eax, [eax + esi*4]
lea edi, [edx + eax*4]
lea edx, [ecx + ecx*2]
xor eax, eax
lea ecx, [ecx + edx*4]
shl ecx, 2
mov edx, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov dword [ebp + 0x19840], ebx
jmp 0x43976c
jle 0x439691
sub eax, ebx
mov dword [esp + 0x2c], eax
mov dword [ebp + 0x19840], ebx
jmp 0x43976c
mov eax, dword [ebp + 0x19848]
test eax, eax
jne 0x4396cd
mov eax, dword [ebp + 0x19840]
cdq
and edx, 7
add eax, edx
sar eax, 3
cmp eax, 4
jge 0x4396c1
mov eax, 4
jmp 0x4396cd
cmp eax, 0x400
jle 0x4396cd
mov eax, 0x400
add eax, ecx
cmp ebx, eax
mov dword [esp + 0x14], eax
jl 0x4396db
mov dword [esp + 0x14], ebx
mov eax, dword [esp + 0x14]
lea ecx, [eax + eax*2]
lea edx, [eax + ecx*4]
shl edx, 2
push edx
call fcn.00509e31
mov ecx, dword [ebp + 0x19840]
mov esi, dword [ebp + 0x1983c]
mov edi, eax
mov dword [esp + 0x30], eax
lea edx, [ecx + ecx*2]
lea ecx, [ecx + edx*4]
shl ecx, 2
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edx, dword [ebp + 0x19840]
mov ecx, ebx
sub ecx, edx
lea esi, [edx + edx*2]
lea edx, [edx + esi*4]
lea edi, [eax + edx*4]
lea eax, [ecx + ecx*2]
lea ecx, [ecx + eax*4]
xor eax, eax
shl ecx, 2
mov edx, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov eax, dword [ebp + 0x1983c]
push eax
call fcn.00509e5a
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x1c]
add esp, 8
mov dword [ebp + 0x1983c], ecx
mov dword [ebp + 0x19840], ebx
mov dword [ebp + 0x19844], edx
mov eax, dword [ebp + 0x19840]
lea esi, [ebp + 0x1984c]
push 0
push 0xf020
lea ecx, [eax + eax*2]
push 0x112
lea edx, [eax + ecx*4]
mov eax, dword [ebp + 0x1983c]
mov ecx, 0xd
lea edi, [eax + edx*4 - 0x34]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [esp + 0x2c]
push ecx
call dword [0x534668]
mov edi, dword [esp + 0x1dc]
mov ebx, dword [esp + 0x20]
mov edx, dword [ebp + 0x90]
mov ecx, dword [edi + edx + 0x34]
lea eax, [edi + edx]
mov eax, dword [edi + edx + 0x38]
push eax
push ecx
call dword [0x534790]
lea esi, [ebp + 0x196d8]
push eax
mov ecx, esi
call fcn.004dcf30
cmp ebx, eax
jne 0x4397e5
push 6
push ebx
call dword [0x534740]
mov eax, dword [ebp + 0x19998]
mov cl, byte [eax + 0x7a3]
test cl, cl
jne 0x4380cb
mov ecx, dword [ebp + 0x90]
lea eax, [edi + ecx]
mov ecx, dword [edi + ecx + 0x34]
mov eax, dword [eax + 0x38]
push eax
push ecx
call dword [0x534790]
push eax
mov ecx, esi
call fcn.004dcf30
cmp ebx, eax
jne 0x43983d
push 0
push ebx
call dword [0x534740]
mov eax, dword [ebp + 0x19840]
mov ecx, dword [ebp + 0x1983c]
lea edx, [eax + eax*2]
lea eax, [eax + edx*4]
mov byte [ecx + eax*4 - 4], 1
mov eax, dword [esp + 0x24]
inc eax
cmp eax, 0x1e
mov dword [esp + 0x24], eax
jl 0x4394b0
mov edx, dword [ebp + 0x19998]
mov al, byte [edx + 0x7a3]
test al, al
jne 0x4380cb
mov eax, dword [0x5b8ff0]
mov ecx, dword [eax + 0x1b3f4]
test ecx, ecx
je 0x43988e
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x560198
call fcn.00509859
mov ecx, dword [ebp + 0x19998]
call fcn.004b59c0
mov esi, dword [0x534454]
call esi
mov ecx, dword [ebp + 0x194a0]
mov ebx, dword [ebp + 0x194b0]
shl ecx, 0xa
sub eax, ebx
push eax
lea edx, [ecx + ebp + 0xa0]
push str._4d_set_focus_n
push edx
call fcn.004f0f4c
add esp, 0xc
call esi
mov ecx, dword [ebp + 0x194a0]
mov dword [ebp + 0x194b0], eax
inc ecx
mov eax, ecx
mov dword [ebp + 0x194a0], ecx
cmp eax, 0x5a
jle 0x4398e0
mov ecx, ebp
call fcn.0043b420
mov eax, dword [ebp + 0x90]
add eax, edi
mov cl, byte [eax + 0x94]
test cl, cl
jne 0x4399c0
mov ebx, dword [esp + 0xe58]
mov byte [esp + 0x1b], 0
test ebx, ebx
jle 0x43991f
mov ecx, dword [eax + 0x34]
mov edx, dword [eax - 0x7c]
cmp ecx, edx
jne 0x43991a
mov edx, dword [eax + 0x38]
mov ecx, dword [eax - 0x78]
cmp edx, ecx
je 0x43991f
mov byte [esp + 0x1b], 1
mov cl, byte [eax + 0x93]
test cl, cl
jne 0x4399c7
mov ecx, dword [0x5b8ff0]
mov edx, dword [ecx + 0x1b3f0]
test edx, edx
je 0x4399c7
mov edx, dword [eax + 0x30]
lea ecx, [ebp + 0x19528]
push edx
call fcn.00445760
test al, al
je 0x439969
mov eax, dword [ebp + 0x90]
cmp byte [edi + eax + 8], 1
jne 0x439969
mov al, byte [esp + 0x1b]
test al, al
jne 0x4399c7
mov ecx, dword [ebp + 0x90]
mov edx, dword [edi + ecx + 0x80]
mov ecx, ebp
push edx
call fcn.0043de00
test al, al
jne 0x43998d
cmp dword [esp + 0x10], 2
jl 0x43a218
mov eax, dword [ebp + 0x90]
push 4
mov ecx, dword [edi + eax + 0x80]
push ecx
call dword [0x53470c]
test eax, eax
je 0x4399c7
push eax
mov ecx, ebp
call fcn.0043de00
test al, al
jne 0x4399c7
cmp dword [esp + 0x10], 2
jl 0x43a218
jmp 0x4399c7
mov ebx, dword [esp + 0xe58]
cmp dword [ebp + 0x198e4], ebx
je 0x436176
mov edx, dword [ebp + 0x90]
mov cl, byte [edi + edx + 8]
lea eax, [edi + edx]
cmp cl, 3
jne 0x439a82
mov ecx, dword [eax + 0x8c]
mov edx, dword [ecx - 8]
test edx, edx
je 0x439a82
mov cl, byte [eax + 0x94]
test cl, cl
je 0x439a22
call dword [0x534710]
test eax, eax
jne 0x439a18
call dword [0x534714]
test eax, eax
je 0x439a22
mov edx, dword [ebp + 0x90]
mov dword [edi + edx + 0x5c], eax
mov eax, dword [ebp + 0x90]
mov ecx, dword [edi + eax + 0x2c]
push ecx
lea ecx, [ebp + 0x7c]
call fcn.004d4450
test al, al
je 0x439a82
mov edx, dword [ebp + 0x90]
add edi, edx
cmp dword [edi + 0x2c], 0x11
je 0x439a82
mov ecx, dword [edi + 0x8c]
lea eax, [esp + 0x4c]
push eax
push 0x560184
push ecx
call fcn.004f2067
mov edx, dword [esp + 0x58]
add esp, 0xc
lea ecx, [ebp + 0x8c]
push edx
push 0
push 0x4a0a
push ebx
call fcn.0043eac0
mov eax, dword [eax + 0x5c]
push eax
call dword [0x534770]
mov ecx, dword [0x5b8ff0]
mov eax, dword [ecx + 0x1b3f8]
test eax, eax
je 0x439b18
lea esi, [ebp + 0x8c]
push ebx
mov ecx, esi
call fcn.0043eac0
mov cl, byte [eax + 0x94]
test cl, cl
jne 0x439b18
push ebx
mov ecx, esi
call fcn.0043eac0
cmp byte [eax + 8], 3
jne 0x439b18
push ebx
mov ecx, esi
call fcn.0043eac0
mov edx, dword [eax + 0x30]
lea ecx, [ebp + 0x19528]
push edx
call fcn.00445760
test al, al
jne 0x439b18
push ebx
mov ecx, esi
call fcn.0043eac0
mov ecx, dword [0x56fa7c]
mov edx, dword [eax + 0x5c]
cmp ecx, edx
je 0x439b18
push ebx
mov ecx, esi
call fcn.0043eac0
mov edx, dword [eax + 0x5c]
push 0
push 1
push 0x4a0a
push ebx
mov ecx, esi
mov dword [0x56fa7c], edx
call fcn.0043eac0
mov eax, dword [eax + 0x5c]
push eax
call dword [0x534770]
mov edi, dword [esp + 0xe58]
lea esi, [ebp + 0x8c]
push edi
mov ecx, esi
call fcn.0043eac0
cmp byte [eax + 8], 3
jne 0x439c03
push edi
mov ecx, esi
lea ebx, [ebp + 0x19528]
call fcn.0043eac0
mov ecx, dword [eax + 0x30]
push ecx
mov ecx, ebx
call fcn.00445760
test al, al
je 0x439c03
push edi
mov ecx, esi
call fcn.0043eac0
mov cl, byte [eax + 0x88]
test cl, cl
jne 0x439c03
push edi
mov ecx, esi
call fcn.0043eac0
mov dl, byte [eax + 0x91]
mov ecx, esi
push edx
push edi
call fcn.0043eac0
mov al, byte [eax + 0x92]
mov ecx, esi
push eax
push edi
call fcn.0043eac0
mov cl, byte [eax + 0x90]
push ecx
push edi
mov ecx, esi
call fcn.0043eac0
mov edx, dword [eax + 0x30]
mov ecx, ebx
push edx
call fcn.00445760
push eax
push 0
push edi
mov ecx, esi
call fcn.0043eac0
mov eax, dword [eax + 0x30]
mov ecx, esi
push eax
push 0
push 0
push edi
call fcn.0043eac0
mov ecx, dword [eax + 0x2c]
push ecx
lea ecx, [ebp + 0x196d8]
call fcn.004d9ae0
push edi
mov ecx, esi
mov dword [ebp + 0x198d8], edi
mov byte [ebp + 0x198dc], 1
call fcn.0043eac0
mov edx, dword [eax + 0x2c]
push edx
call dword [0x5347f4]
movsx eax, ax
shr eax, 0x10
je 0x43a49e
mov ecx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x10]
add ecx, 0xfffffffe
mov byte [esp + 0x28], 0
cmp ebx, ecx
jl 0x439c2a
push edi
mov ecx, esi
call fcn.0043eac0
cmp byte [eax + 8], 1
jne 0x439c2a
mov byte [esp + 0x28], 1
cmp ebx, 2
jg 0x439c41
push edi
mov ecx, esi
call fcn.0043eac0
mov cl, byte [eax + 0xac]
test cl, cl
je 0x439c6c
push edi
mov ecx, esi
call fcn.0043eac0
push 0
push edi
mov ecx, esi
mov byte [eax + 0xac], 1
call fcn.0043eac0
mov edx, dword [eax + 0x80]
lea ecx, [ebp + 0x196d8]
push edx
call fcn.004da810
cmp dword [ebp + 0x198e4], edi
je 0x436176
push edi
mov ecx, esi
call fcn.0043eac0
cmp byte [eax + 8], 1
jne 0x439cfa
push edi
mov ecx, esi
call fcn.0043eac0
mov cl, byte [eax + 0x94]
test cl, cl
jne 0x439cfa
mov eax, dword [esp + 0x28]
lea ebx, [ebp + 0x196d8]
push eax
push edi
push esi
mov ecx, ebx
call fcn.004dc270
test eax, eax
jne 0x439cfa
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x1c]
cmp eax, ecx
jge 0x43a43e
dec ecx
cmp eax, ecx
jne 0x43a20d
push edi
push edi
mov ecx, esi
call fcn.0043eac0
mov ecx, dword [eax + 0x5c]
push ecx
push edi
mov ecx, esi
call fcn.0043eac0
mov edx, dword [eax + 0x80]
mov ecx, ebx
push edx
push esi
call fcn.004dcf90
cmp al, 2
je 0x43a218
jmp 0x43a20d
mov eax, dword [0x5b8ff0]
mov ecx, dword [eax + 0x1b3f4]
test ecx, ecx
je 0x439d25
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x56017c
call fcn.00509859
mov ecx, dword [ebp + 0x19998]
call fcn.004b59c0
mov ebx, dword [0x534454]
call ebx
mov ecx, dword [ebp + 0x194a0]
mov edx, dword [ebp + 0x194b0]
shl ecx, 0xa
sub eax, edx
push eax
lea edx, [ecx + ebp + 0xa0]
push str._4d_check_wins_n
push edx
call fcn.004f0f4c
add esp, 0xc
call ebx
mov ecx, dword [ebp + 0x194a0]
mov dword [ebp + 0x194b0], eax
inc ecx
mov eax, ecx
mov dword [ebp + 0x194a0], ecx
cmp eax, 0x5a
jle 0x439d77
mov ecx, ebp
call fcn.0043b420
push edi
mov ecx, esi
call fcn.0043eac0
mov cl, byte [eax + 0x94]
test cl, cl
jne 0x43a124
mov ebx, dword [esp + 0x10]
cmp ebx, 2
jge 0x439da8
push edi
mov ecx, esi
call fcn.0043eac0
mov cl, byte [eax + 0xac]
test cl, cl
je 0x439dc4
push 0
push edi
mov ecx, esi
call fcn.0043eac0
mov eax, dword [eax + 0x80]
lea ecx, [ebp + 0x196d8]
push eax
call fcn.004da810
push edi
mov ecx, esi
call fcn.0043eac0
cmp byte [eax + 8], 1
je 0x439e9a
cmp ebx, 2
jge 0x439e6b
push edi
mov ecx, esi
call fcn.0043eac0
mov cl, byte [eax + 0xac]
test cl, cl
jne 0x439e6b
call dword [0x534714]
push edi
mov ecx, esi
mov ebx, eax
call fcn.0043eac0
cmp ebx, dword [eax + 0x80]
je 0x439e96
push 4
push edi
mov ecx, esi
call fcn.0043eac0
mov ecx, dword [eax + 0x80]
push ecx
call dword [0x53470c]
cmp eax, ebx
je 0x439e96
push edi
mov ecx, esi
call fcn.0043eac0
mov edx, eax
push 4
push ebx
mov dword [esp + 0x34], edx
call dword [0x53470c]
mov edx, dword [esp + 0x2c]
cmp eax, dword [edx + 0x80]
je 0x439e96
push 0
push edi
mov ecx, esi
call fcn.0043eac0
mov eax, dword [eax + 0x80]
lea ecx, [ebp + 0x196d8]
push eax
call fcn.004da810
mov bl, 1
jmp 0x439ed6
push edi
mov ecx, esi
call fcn.0043eac0
push 0
push edi
mov ecx, esi
mov byte [eax + 0xac], 1
call fcn.0043eac0
mov ecx, dword [eax + 0x80]
push ecx
lea ecx, [ebp + 0x196d8]
call fcn.004da810
mov bl, 1
jmp 0x439ed6
mov eax, dword [esp + 0x1c]
push edi
cmp ebx, eax
mov ecx, esi
jne 0x439eb7
call fcn.0043eac0
mov edx, dword [eax + 0x5c]
lea eax, [esp + 0x3c]
push edx
push 1
push eax
jmp 0x439ec7
call fcn.0043eac0
mov ecx, dword [eax + 0x5c]
lea edx, [esp + 0x3c]
push ecx
push 0
push edx
push edi
push esi
lea ecx, [ebp + 0x196d8]
call fcn.004dbf20
mov bl, al
mov eax, dword [ebp + 0x198e4]
mov byte [esp + 0x30], bl
cmp eax, edi
je 0x436176
test bl, bl
jne 0x43a045
push edi
mov ecx, esi
call fcn.0043eac0
cmp byte [eax + 8], 1
jne 0x43a045
push edi
mov ecx, esi
call fcn.0043eac0
cmp byte [eax + 8], 1
jne 0x439f70
push edi
push edi
mov ecx, esi
call fcn.0043eac0
mov eax, dword [eax + 0x5c]
mov ecx, esi
push eax
push edi
call fcn.0043eac0
mov ecx, dword [eax + 0x80]
push ecx
push esi
lea ecx, [ebp + 0x196d8]
call fcn.004dcf90
cmp al, 2
jne 0x439f70
mov esi, dword [0x534454]
call esi
mov edx, dword [ebp + 0x194b0]
sub eax, edx
mov edx, dword [ebp + 0x194a0]
shl edx, 0xa
push eax
push str._4d_continue__CheckSizeWin2__n
lea eax, [edx + ebp + 0xa0]
push eax
call fcn.004f0f4c
add esp, 0xc
jmp 0x43a0ea
lea ecx, [esp + 0x3b]
push 1
push ecx
push edi
mov ecx, esi
xor bl, bl
call fcn.0043eac0
mov edx, dword [eax + 0x80]
push edx
call dword [0x534718]
cmp byte [esp + 0x3b], 0x23
je 0x439fbf
cmp dword [esp + 0x10], 2
je 0x439fae
push edi
mov ecx, esi
call fcn.0043eac0
mov cl, byte [eax + 0xac]
test cl, cl
je 0x439fbf
push edi
mov ecx, esi
call fcn.0043eac0
mov byte [eax + 0xac], 1
mov bl, 1
mov eax, dword [esp + 0x1c]
lea ecx, [eax + eax]
mov eax, 0x55555556
imul ecx
mov eax, dword [esp + 0x10]
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
cmp eax, edx
jge 0x439fe0
test bl, bl
je 0x439ffc
push 0
push edi
mov ecx, esi
call fcn.0043eac0
mov edx, dword [eax + 0x80]
lea ecx, [ebp + 0x196d8]
push edx
call fcn.004da810
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x10]
cmp ecx, eax
jge 0x43a4c0
push 0x3e8
call dword [0x534444]
mov esi, dword [0x534454]
push 0
call esi
mov edx, dword [ebp + 0x194b0]
mov ecx, dword [ebp + 0x194a0]
sub eax, edx
shl ecx, 0xa
push eax
push str._4d_continue__CheckChildWin_d__n
lea edx, [ecx + ebp + 0xa0]
push edx
jmp 0x43a0e2
cmp dword [ebp + 0x198e4], edi
je 0x436176
test bl, bl
je 0x43a072
push edi
mov ecx, esi
call fcn.0043eac0
cmp byte [eax + 8], 1
jne 0x43a072
push edi
mov ecx, esi
call fcn.0043eac0
mov ecx, dword [esp + 0x3c]
mov dword [eax + 0x5c], ecx
push edi
mov ecx, esi
call fcn.0043eac0
cmp byte [eax + 8], 1
jne 0x43a116
push edi
push edi
mov ecx, esi
call fcn.0043eac0
mov edx, dword [eax + 0x5c]
mov ecx, esi
push edx
push edi
call fcn.0043eac0
mov eax, dword [eax + 0x80]
lea ecx, [ebp + 0x196d8]
push eax
push esi
call fcn.004dcf90
cmp al, 2
jne 0x43a116
mov ecx, dword [esp + 0x30]
mov esi, dword [0x534454]
and ecx, 0xff
push ecx
call esi
mov edx, dword [ebp + 0x194b0]
sub eax, edx
mov edx, dword [ebp + 0x194a0]
shl edx, 0xa
push eax
push str._4d_continue__CheckSizeWin2_after_chiHW__n
lea eax, [edx + ebp + 0xa0]
push eax
call fcn.004f0f4c
add esp, 0x10
call esi
mov ecx, dword [ebp + 0x194a0]
mov dword [ebp + 0x194b0], eax
inc ecx
mov eax, ecx
mov dword [ebp + 0x194a0], ecx
cmp eax, 0x5a
jle 0x43a218
mov ecx, ebp
call fcn.0043b420
jmp 0x43a218
push edi
mov ecx, esi
call fcn.0043eac0
mov ebx, dword [0x534454]
mov ecx, dword [0x5b8ff0]
mov eax, dword [ecx + 0x1b3f4]
test eax, eax
je 0x43a150
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x5600f4
call fcn.00509859
mov ecx, dword [ebp + 0x19998]
call fcn.004b59c0
call ebx
mov ecx, dword [ebp + 0x194b0]
mov edx, dword [ebp + 0x194a0]
sub eax, ecx
shl edx, 0xa
push eax
push str._4d_check_size_n
lea eax, [edx + ebp + 0xa0]
push eax
call fcn.004f0f4c
add esp, 0xc
call ebx
mov ecx, dword [ebp + 0x194a0]
mov dword [ebp + 0x194b0], eax
inc ecx
mov eax, ecx
mov dword [ebp + 0x194a0], ecx
cmp eax, 0x5a
jle 0x43a19c
mov ecx, ebp
call fcn.0043b420
push edi
mov ecx, esi
call fcn.0043eac0
mov cl, byte [eax + 0x94]
test cl, cl
jne 0x43a549
push edi
mov ecx, esi
call fcn.0043eac0
cmp byte [eax + 0x88], 1
jne 0x43a549
push edi
mov ecx, esi
call fcn.0043eac0
mov ecx, dword [eax + 0x64]
test ecx, ecx
je 0x43a549
push edi
mov ecx, esi
call fcn.0043eac0
mov ecx, dword [eax + 0x5c]
mov esi, dword [0x53471c]
push ecx
call esi
test eax, eax
jne 0x43a549
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x10]
cmp eax, edx
jge 0x43a542
push 0x2c013a
call esi
push 0x3e8
call dword [0x534444]
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x1c]
inc eax
cmp eax, ecx
mov dword [esp + 0x10], eax
jle 0x438c07
jmp 0x436176
mov eax, dword [ebp + 0x90]
add eax, edi
cmp byte [eax + 0x88], 1
jne 0x43a27d
cmp byte [eax + 8], 1
jne 0x43a39e
mov ecx, dword [eax + 0x30]
push ecx
lea ecx, [ebp + 0x19528]
call fcn.00445760
test al, al
je 0x43a39e
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x10]
push 1
push edx
push eax
push ebx
mov ecx, ebp
call fcn.0043bd80
jmp 0x436178
mov edx, dword [eax + 0x30]
lea ecx, [ebp + 0x19528]
push edx
call fcn.00445760
test al, al
je 0x438a85
mov eax, dword [ebp + 0x90]
lea esi, [edi + eax]
mov al, byte [edi + eax + 8]
cmp al, 3
jne 0x438a85
mov cl, byte [esi + 0x91]
mov dl, byte [esi + 0x92]
mov al, byte [esi + 0x90]
push ecx
mov ecx, dword [esi + 0x30]
push edx
push eax
push ecx
lea ecx, [ebp + 0x19528]
call fcn.00445760
mov edx, dword [esi + 0x30]
push eax
mov eax, dword [esi + 0x2c]
push 0
push edx
push 0
push 0
push eax
lea ecx, [ebp + 0x196d8]
call fcn.004d9ae0
mov dword [ebp + 0x198d8], ebx
mov byte [ebp + 0x198dc], 1
mov ecx, dword [ebp + 0x90]
mov edx, dword [edi + ecx + 0x2c]
push edx
call dword [0x5347f4]
movsx eax, ax
shr eax, 0x10
jne 0x436176
jmp 0x438a85
mov ecx, dword [ebp + 0x90]
add edi, ecx
cmp byte [edi + 8], 1
jne 0x43a350
mov edx, dword [edi + 0x30]
lea ecx, [ebp + 0x19528]
push edx
call fcn.00445760
test al, al
je 0x43a350
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x10]
push 1
push eax
push ecx
push ebx
mov ecx, ebp
call fcn.0043bd80
jmp 0x436178
mov al, 0x53
jmp 0x436178
mov edx, dword [ebp + 0x90]
mov cl, byte [edi + edx + 0x88]
lea eax, [edi + edx]
cmp cl, 1
jne 0x43a3a5
cmp byte [eax + 8], 1
jne 0x43a39e
mov eax, dword [eax + 0x30]
lea ecx, [ebp + 0x19528]
push eax
call fcn.00445760
test al, al
je 0x43a39e
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x10]
push 1
push ecx
push edx
push ebx
mov ecx, ebp
call fcn.0043bd80
jmp 0x436178
mov al, 0x51
jmp 0x436178
mov eax, dword [eax + 0x30]
lea ecx, [ebp + 0x19528]
push eax
call fcn.00445760
test al, al
je 0x438a85
mov ecx, dword [ebp + 0x90]
mov al, byte [edi + ecx + 8]
lea esi, [edi + ecx]
cmp al, 3
jne 0x438a85
mov dl, byte [esi + 0x91]
mov al, byte [esi + 0x92]
mov cl, byte [esi + 0x90]
push edx
mov edx, dword [esi + 0x30]
push eax
push ecx
push edx
lea ecx, [ebp + 0x19528]
call fcn.00445760
mov ecx, dword [esi + 0x2c]
push eax
mov eax, dword [esi + 0x30]
push 0
push eax
push 0
push 0
push ecx
lea ecx, [ebp + 0x196d8]
call fcn.004d9ae0
mov dword [ebp + 0x198d8], ebx
mov byte [ebp + 0x198dc], 1
mov edx, dword [ebp + 0x90]
mov eax, dword [edi + edx + 0x2c]
push eax
call dword [0x5347f4]
movsx ecx, ax
shr ecx, 0x10
jne 0x436176
jmp 0x438a85
lea esi, [ebp + 0x8c]
push edi
mov ecx, esi
call fcn.0043eac0
cmp byte [eax + 8], 1
jne 0x43a486
push edi
mov ecx, esi
call fcn.0043eac0
mov edx, dword [eax + 0x30]
lea ecx, [ebp + 0x19528]
push edx
call fcn.00445760
test al, al
je 0x43a486
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x10]
push 1
push eax
push ecx
push edi
mov ecx, ebp
call fcn.0043bd80
jmp 0x436178
push edi
mov ecx, esi
call fcn.0043eac0
cmp byte [eax + 0x88], 1
jne 0x43a49e
mov al, 0x54
jmp 0x436178
mov byte [ebp + 0x198dc], 0
mov dword [ebp + 0x198d8], edi
mov dword [ebp + 0x198e4], edi
mov dword [ebp + 0x198d0], 0
jmp 0x436176
lea esi, [ebp + 0x8c]
push edi
mov ecx, esi
call fcn.0043eac0
cmp byte [eax + 8], 1
jne 0x43a508
push edi
mov ecx, esi
call fcn.0043eac0
mov edx, dword [eax + 0x30]
lea ecx, [ebp + 0x19528]
push edx
call fcn.00445760
test al, al
je 0x43a508
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x10]
push 1
push eax
push ecx
push edi
mov ecx, ebp
call fcn.0043bd80
jmp 0x436178
push edi
mov ecx, esi
call fcn.0043eac0
cmp byte [eax + 0x88], 1
jne 0x43a520
mov al, 0x55
jmp 0x436178
mov dword [ebp + 0x198d8], edi
mov byte [ebp + 0x198dc], 0
mov dword [ebp + 0x198e4], edi
mov dword [ebp + 0x198d0], 0
jmp 0x436176
mov al, 0x56
jmp 0x436178
mov edx, dword [0x5b8ff0]
mov eax, dword [edx + 0x1b3f4]
test eax, eax
je 0x43a578
push ecx
mov ecx, esp
mov dword [esp + 0x1e4], esp
push 0x5600dc
call fcn.00509859
mov ecx, dword [ebp + 0x19998]
call fcn.004b59c0
call ebx
sub eax, dword [ebp + 0x194b0]
push eax
mov eax, dword [ebp + 0x194a0]
shl eax, 0xa
push str._4d_press_n
lea ecx, [eax + ebp + 0xa0]
push ecx
call fcn.004f0f4c
add esp, 0xc
call ebx
mov ecx, dword [ebp + 0x194a0]
mov dword [ebp + 0x194b0], eax
inc ecx
mov eax, ecx
mov dword [ebp + 0x194a0], ecx
cmp eax, 0x5a
jle 0x43a5c2
mov ecx, ebp
call fcn.0043b420
cmp dword [ebp + 0x198e4], edi
je 0x436176
lea esi, [ebp + 0x8c]
push edi
mov ecx, esi
mov dword [ebp + 0x198d8], edi
call fcn.0043eac0
cmp byte [eax + 8], 0xb
jne 0x43a65b
mov ebx, dword [0x534444]
push 0xa
mov byte [ebp + 0x198dc], 0
mov dword [ebp + 0x198d8], edi
mov dword [ebp + 0x198e4], edi
call ebx
push edi
mov ecx, esi
call fcn.0043eac0
mov edx, dword [eax + 0x3c]
mov ecx, esi
push edx
push edi
call fcn.0043eac0
mov eax, dword [eax + 0x2c]
mov ecx, esi
push eax
push 0x111
push edi
call fcn.0043eac0
mov ecx, dword [eax + 0x80]
push ecx
call dword [0x534770]
mov ecx, dword [0x5b8ff0]
push 1
push 0
push 0
push 0
call fcn.00488480
push 0xa
call ebx
push edi
mov ecx, esi
call fcn.0043eac0
jmp 0x436176
cmp edi, dword [ebp + 0x198e4]
jle 0x436176
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x10]
push 0
push edx
push eax
push edi
mov ecx, ebp
mov byte [ebp + 0x198dc], 1
call fcn.0043bd80
jmp 0x436178