Function at 0x4ceba6
Capabilities:
Create process on windows
Parse pe header
Read .ini file

Disassembly:
mov eax, 0x5fb6ca
call fcn.0059d590
sub esp, 0x954
push ebx
push esi
mov esi, ecx
push edi
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x10], esp
cmp ecx, 0x85
mov dword [ebp - 0x14], esi
je 0x4cebf1
cmp ecx, 0xf
jne 0x4cebf8
lea eax, [ebp - 0x234]
push eax
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_BeginPaint]
lea eax, [ebp - 0x234]
push eax
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_EndPaint]
xor eax, eax
jmp 0x4d4992
cmp ecx, 0x14
jne 0x4cec05
push 1
pop eax
jmp 0x4d4992
cmp ecx, 0x111
jne 0x4cecc6
push 1
pop edi
cmp dword [ebp + 0xc], edi
jne 0x4cec36
cmp dword [esi + 0xac958], 0
je 0x4cecbf
lea ecx, [esi + 0x4c8]
call fcn.00457833
jmp 0x4cecbf
cmp dword [ebp + 0xc], 2
jne 0x4cecb2
xor ebx, ebx
cmp dword [esi + 0x1c1cc], ebx
je 0x4cec5a
push ebx
lea ecx, [esi + 0x1c164]
call sub.MFC42.DLL_CWnd::ShowWindow
lea ecx, [esi + 0x4c8]
jmp 0x4ceca0
cmp dword [esi + 0x52be8], ebx
je 0x4cec70
push ebx
lea ecx, [esi + 0x52b88]
call sub.MFC42.DLL_CWnd::ShowWindow
jmp 0x4cecbf
cmp dword [esi + 0x578d8], ebx
je 0x4cec8d
push edi
call fcn.0051bd44
mov ecx, eax
add ecx, 0x2d78
call fcn.00549ef4
jmp 0x4cecbf
lea ebx, [esi + 0x4c8]
mov ecx, ebx
call fcn.00456fc0
test eax, eax
je 0x4ceca7
mov ecx, ebx
call fcn.00456dd0
jmp 0x4cecbf
push 2
mov ecx, esi
call fcn.004d7714
jmp 0x4cecbf
cmp dword [ebp + 0xc], 0xe146
jne case.0x4d2ab4.3015
mov eax, edi
jmp 0x4d4992
cmp ecx, 0x115
jne 0x4ced16
call fcn.0040311a
mov dword [ebp - 0x1c], eax
lea edi, [esi + 0xacc54]
call fcn.004a71f6
mov ecx, eax
call fcn.0053e92a
mov ebx, eax
mov ecx, edi
inc ebx
inc ebx
call fcn.004df06d
mov dword [ebp - 0x14], ebx
mov ecx, edi
mov ebx, eax
call fcn.004df088
mov ecx, dword [ebp - 0x14]
sub eax, ebx
cdq
idiv ecx
mov ecx, dword [ebp - 0x1c]
inc eax
mov dword [ecx + 0x404], eax
jmp case.0x4d2ab4.3015
mov eax, dword [ebp + 0xc]
cmp ecx, 0x1c
jne 0x4ced27
cmp eax, 1
je case.0x4d2ab4.3015
mov edi, 0x464
cmp ecx, edi
jne case.0x4d2ab4.3015
mov ecx, 0x4ae
cmp eax, ecx
ja 0x4d143c
je 0x4d13fa
add ecx, 0xffffff97
cmp eax, ecx
ja 0x4d005e
je 0x4d003f
mov ecx, 0x411
cmp eax, ecx
ja 0x4cf8de
je 0x4cf865
add ecx, 0xffffffec
cmp eax, ecx
ja 0x4cf11c
je 0x4cf0c3
mov ecx, 0x3f2
cmp eax, ecx
ja 0x4cef6b
je 0x4cef5b
add ecx, 0xfffffffb
cmp eax, ecx
ja 0x4ceeb1
je 0x4cedf1
sub eax, 0x9a
je 0x4cede6
dec eax
dec eax
je 0x4cedc9
sub eax, 0x34f
jne 0x4ceec2
lea ecx, [esi + 0x1c164]
call fcn.00468263
mov ecx, esi
call fcn.004d9219
jmp case.0x4d2ab4.3015
cmp dword [esi + 0x5f4], 0x4c
jne case.0x4d2ab4.3015
lea ecx, [esi + 0x4c8]
call fcn.00456dd0
jmp case.0x4d2ab4.3015
xor ebx, ebx
push ebx
push ebx
push 0x3f
jmp 0x4cf922
lea ecx, [esi + 0x4c8]
call fcn.00456dd0
xor ebx, ebx
mov dword [esi + 0x5f4], 0xe
cmp dword [esi + 0x2f000], ebx
je 0x4cee1c
push ebx
lea ecx, [esi + 0x2efa0]
call sub.MFC42.DLL_CWnd::ShowWindow
cmp dword [esi + 0x660f8], ebx
je 0x4cee61
push ebx
lea ecx, [esi + 0x66090]
call sub.MFC42.DLL_CWnd::ShowWindow
call dword [sym.imp.GraphicData.dll_GameDataSetQuery]
mov edi, eax
call fcn.0040311a
push ebx
push ebx
mov dword [ebp - 0x14], eax
mov eax, dword [edi]
push 0xff0000
push 0x7d5
push 0x2afb
mov ecx, edi
call dword [eax + 0x3c]
mov ecx, dword [ebp - 0x14]
push eax
call fcn.004d9a57
cmp dword [esi + 0x75fd8], ebx
je 0x4cee75
push ebx
lea ecx, [esi + 0x74638]
call sub.MFC42.DLL_CWnd::ShowWindow
push 5
lea ecx, [esi + 0x1e780]
call sub.MFC42.DLL_CWnd::ShowWindow
cmp dword [esi + 0x1c1cc], ebx
jne 0x4cee97
push 5
lea ecx, [esi + 0x1c164]
call sub.MFC42.DLL_CWnd::ShowWindow
cmp dword [esi + 0xacaf8], 0x10
lea eax, [esi + 0xacaf8]
jne case.0x4d2ab4.3015
mov dword [eax], ebx
jmp case.0x4d2ab4.3015
sub eax, 0x3ee
je 0x4cef4e
dec eax
je 0x4ceee2
dec eax
je 0x4ceec9
dec eax
jne case.0x4d2ab4.3015
lea edi, [esi + 0x1e780]
mov ecx, edi
call fcn.0049b3f0
mov ecx, edi
call fcn.0049b47a
jmp case.0x4d2ab4.3015
call fcn.0051bd44
mov ecx, eax
call fcn.00548f76
test eax, eax
je 0x4cef27
call dword [sym.imp.GraphicData.dll_GameDataSetQuery]
mov edi, eax
call fcn.0040311a
xor ebx, ebx
mov dword [ebp - 0x14], eax
mov eax, dword [edi]
push ebx
push ebx
push 0xff0000
push 0x7d5
push 0x277d
mov ecx, edi
call dword [eax + 0x3c]
mov ecx, dword [ebp - 0x14]
push eax
call fcn.004d9a57
jmp 0x4cef29
xor ebx, ebx
push 0x4e
mov ecx, esi
call fcn.004cc2ba
push ebx
lea ecx, [esi + 0x1e780]
call sub.MFC42.DLL_CWnd::ShowWindow
lea ecx, [esi + 0x1c164]
call fcn.00468263
jmp case.0x4d2ab4.3015
push 0
lea ecx, [esi + 0x1e780]
jmp 0x4d213e
lea ecx, [esi + 0x1e780]
call fcn.0049b11b
jmp case.0x4d2ab4.3015
add eax, 0xfffffc0c
cmp eax, 8
ja case.0x4d2ab4.3015
jmp dword [eax*4 + 0x4d49a3]
lea ecx, [esi + 0x14d50]
call fcn.00482f88
lea ecx, [esi + 0x14db8]
call fcn.0049e443
lea ecx, [esi + 0x12350]
call fcn.00484757
jmp case.0x4d2ab4.3015
xor ebx, ebx
cmp dword [esi + 0x1e7e0], ebx
jne case.0x4d2ab4.3015
xor eax, eax
lea edi, [ebp - 0x3b]
mov byte [ebp - 0x3c], bl
push 0xf
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
call fcn.0051bd44
mov ecx, eax
call fcn.005495fb
push eax
lea eax, [ebp - 0x3c]
push eax
call dword [sym.imp.MSVCRT.dll_strncpy]
add esp, 0xc
lea eax, [ebp - 0x3c]
lea ecx, [esi + 0x8ceb0]
push ebx
push eax
push ebx
call fcn.0041bcf4
push ebx
push 0x51c
jmp 0x4d1736
lea ecx, [esi + 0x1e780]
call fcn.0049af1b
jmp case.0x4d2ab4.3015
call dword [sym.imp.GraphicData.dll_GameDataSetQuery]
mov edi, eax
call fcn.0040311a
xor ebx, ebx
mov dword [ebp - 0x14], eax
mov eax, dword [edi]
push ebx
push ebx
push 0xff0000
push 0x7d5
push 0x277c
mov ecx, edi
call dword [eax + 0x3c]
mov ecx, dword [ebp - 0x14]
push eax
call fcn.004d9a57
push 1
lea ecx, [esi + 0x23a20]
call fcn.004e03a9
jmp case.0x4d2ab4.3015
lea ecx, [esi + 0x34740]
call fcn.0042491d
lea ecx, [esi + 0x82e70]
call fcn.004a16b6
jmp case.0x4d2ab4.3015
cmp dword [esi + 0x2f000], 0
je 0x4cf07e
lea ecx, [esi + 0x2efa0]
call fcn.0040ed8e
lea ecx, [esi + 0x34740]
call fcn.00424b27
lea ecx, [esi + 0x82e70]
call fcn.004a173c
jmp case.0x4d2ab4.3015
lea ecx, [esi + 0x1a840]
call fcn.0043c973
jmp case.0x4d2ab4.3015
cmp dword [esi + 0xaa988], 0
jne case.0x4d2ab4.3015
push 5
lea ecx, [esi + 0xaa928]
jmp 0x4d213e
call fcn.0051bd44
mov ecx, eax
call fcn.005556d2
test al, al
je 0x4cf0e4
call fcn.0051bd44
mov ecx, eax
call fcn.00554ea4
jmp case.0x4d2ab4.3015
xor ebx, ebx
xor eax, eax
lea edi, [ebp - 0x3b]
mov byte [ebp - 0x3c], bl
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
push 0xf
stosb byte es:[edi], al
call fcn.0051bd44
mov ecx, eax
call fcn.005555d0
push eax
lea eax, [ebp - 0x3c]
push eax
call dword [sym.imp.MSVCRT.dll_strncpy]
add esp, 0xc
lea eax, [ebp - 0x3c]
push ebx
push eax
push 2
jmp 0x4cf922
add eax, 0xfffffc02
cmp eax, 0x12
ja case.0x4d2ab4.3015
jmp dword [eax*4 + 0x4d49c7]
lea ecx, [esi + 0x1a840]
call fcn.0043cac0
jmp case.0x4d2ab4.3015
call fcn.0051bd44
mov ecx, eax
call fcn.005556e6
test al, al
je 0x4cf162
call fcn.0051bd44
mov ecx, eax
call fcn.005553a0
jmp case.0x4d2ab4.3015
xor ebx, ebx
xor eax, eax
lea edi, [ebp - 0x3b]
mov byte [ebp - 0x3c], bl
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
push 0xf
stosb byte es:[edi], al
call fcn.0051bd44
mov ecx, eax
call fcn.005555d0
push eax
lea eax, [ebp - 0x3c]
push eax
call dword [sym.imp.MSVCRT.dll_strncpy]
add esp, 0xc
lea eax, [ebp - 0x3c]
push ebx
push eax
push 1
jmp 0x4cf922
lea ecx, [esi + 0x140f4]
call fcn.004870eb
jmp case.0x4d2ab4.3015
call fcn.0051bd44
mov eax, dword [eax + 0xca0]
xor ebx, ebx
sub eax, ebx
je 0x4cf1d9
dec eax
je 0x4cf1d2
dec eax
je 0x4cf1cb
dec eax
jne 0x4cf1f3
push str.Button412
jmp 0x4cf1e8
push str.Button48
jmp 0x4cf1e8
push str.Button49
jmp 0x4cf1e8
mov dword [esi + 0x534], 1
push str.Button47
lea ecx, [esi + 0x8c874]
call fcn.004a8b7d
call fcn.0051bd44
push dword [eax + 0x10c]
lea eax, [ebp - 0x94]
push str._sRecord
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
mov edi, dword [sym.imp.MSVCRT.dll_strchr]
lea eax, [ebp - 0x94]
push 0x5b
push eax
call edi
add esp, 0x14
cmp eax, ebx
je 0x4cf239
push 1
push 0x67a54c
push eax
call dword [sym.imp.MSVCRT.dll_strncpy]
add esp, 0xc
lea eax, [ebp - 0x94]
push 0x5d
push eax
call edi
pop ecx
cmp eax, ebx
pop ecx
je 0x4cf25b
push 1
push 0x67a548
push eax
call dword [sym.imp.MSVCRT.dll_strncpy]
add esp, 0xc
call fcn.0051bd44
mov eax, dword [eax + 0xca0]
lea ecx, [ebp - 0x3c]
push 0xa
push ecx
push eax
call dword [sym.imp.MSVCRT.dll__itoa]
add esp, 0xc
lea eax, [ebp - 0x3c]
push dword [esi + 0xacabc]
push eax
lea eax, [ebp - 0x94]
push str.PkModeRecord
push eax
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
jmp case.0x4d2ab4.3015
call fcn.0051bd44
mov eax, dword [eax + 0x10c]
lea ecx, [ebp - 0x234]
push 0xa
push ecx
push eax
call fcn.00559faf
pop ecx
xor ebx, ebx
push ebx
push eax
call dword [sym.imp.MSVCRT.dll__i64toa]
add esp, 0x10
xor eax, eax
lea edi, [ebp - 0x157]
mov byte [ebp - 0x158], bl
push 0x1f
pop ecx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov edi, dword [sym.imp.MSVCRT.dll__snprintf]
lea eax, [ebp - 0x234]
push eax
push 0x691ed0
push str.Log__s__s_Setup.ini
lea eax, [ebp - 0x158]
push 0x7f
push eax
call edi
lea eax, [ebp - 0x158]
mov byte [ebp - 0xd9], bl
push eax
call sub.MSVCRT.dll_strlen
add esp, 0x18
lea eax, [ebp + eax - 0x158]
lea ecx, [esi + 0xacabc]
push eax
lea eax, [ebp - 0x158]
push eax
call fcn.004029af
call fcn.0051bd44
push dword [eax + 0x10c]
lea eax, [ebp - 0x4c]
push str._sRecord
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
lea eax, [ebp - 0x4c]
push 0x5b
push eax
call dword [sym.imp.MSVCRT.dll_strchr]
add esp, 0x14
cmp eax, ebx
je 0x4cf364
push 1
push 0x67a54c
push eax
call dword [sym.imp.MSVCRT.dll_strncpy]
add esp, 0xc
lea eax, [ebp - 0x4c]
push 0x5d
push eax
call dword [sym.imp.MSVCRT.dll_strchr]
pop ecx
cmp eax, ebx
pop ecx
je 0x4cf387
push 1
push 0x67a548
push eax
call dword [sym.imp.MSVCRT.dll_strncpy]
add esp, 0xc
push dword [esi + 0xacabc]
lea eax, [ebp - 0x4c]
push 0xffffffffffffffff
push str.RecordAmount
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
cmp eax, 0xffffffff
jne 0x4cf468
call fcn.0051bd44
lea ecx, [eax + 0x10c]
call fcn.005251a8
push eax
push 0x691ed0
push str.Log__s__s_Setup.ini
lea eax, [ebp - 0x158]
push 0x7f
push eax
call edi
add esp, 0x14
lea eax, [ebp - 0x158]
lea ecx, [esi + 0xacabc]
mov byte [ebp - 0xd9], bl
push eax
call fcn.004dd2ae
lea ecx, [esi + 0xacabc]
call fcn.005251a8
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x4c]
push str.RecordAmount
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
cmp eax, 0xffffffff
jne 0x4cf468
lea eax, [ebp - 0x234]
push 0xa
push eax
call fcn.0051bd44
mov ecx, eax
call fcn.004d50f9
push eax
call fcn.00559faf
pop ecx
push ebx
push eax
call dword [sym.imp.MSVCRT.dll__i64toa]
add esp, 0x10
lea eax, [ebp - 0x234]
push eax
push 0x691ed0
push str.Log__s__s_Setup.ini
lea eax, [ebp - 0x158]
push 0x7f
push eax
call edi
add esp, 0x14
lea eax, [ebp - 0x158]
lea ecx, [esi + 0xacabc]
mov byte [ebp - 0xd9], bl
push eax
call fcn.004dd2ae
lea ecx, [esi + 0xacabc]
call fcn.005251a8
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x4c]
push str.LineRecord
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
cmp eax, 0xffffffff
mov dword [ebp - 0x14], eax
lea edi, [esi + 0xacc54]
je 0x4cf4c2
push eax
mov ecx, edi
call fcn.004df1ac
call fcn.004a71f6
mov ecx, eax
call fcn.0053e92a
mov edx, eax
mov ecx, edi
inc edx
inc edx
mov dword [ebp - 0x1c], edx
call fcn.004df088
sub eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x1c]
cdq
idiv ecx
inc eax
push eax
jmp 0x4cf4f2
call fcn.004a71f6
mov ecx, eax
call fcn.0053e92a
inc eax
mov ecx, edi
inc eax
lea eax, [eax + eax*4]
mov edx, eax
mov dword [ebp - 0x14], edx
call fcn.004df088
mov ecx, dword [ebp - 0x14]
sub eax, ecx
lea ecx, [esi + 0xacc54]
push eax
call fcn.004df1ac
push 6
call fcn.00449993
mov ecx, eax
call fcn.004d5020
lea ecx, [esi + 0xacabc]
call fcn.005251a8
mov edi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x4c]
push str.LogRecord
push eax
call edi
cmp eax, ebx
jne 0x4cf535
call fcn.00449993
mov ecx, eax
add ecx, 0x494
call fcn.004d500b
jmp 0x4cf559
cmp eax, 1
jne 0x4cf559
call fcn.00449993
mov ecx, eax
add ecx, 0x494
call fcn.004d5000
push 1
lea ecx, [esi + 0xac0a8]
call fcn.004a8f44
mov dword [ebp - 0x14], ebx
mov eax, 0x6901b8
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x1c], eax
push dword [ebp - 0x24]
lea eax, [ebp - 0x94]
push dword [ebp - 0x14]
push str.HotKey_d_d
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
lea ecx, [esi + 0xacabc]
call fcn.005251a8
push eax
lea eax, [ebp - 0x94]
push 0xffffffffffffffff
push eax
lea eax, [ebp - 0x4c]
push eax
call edi
mov ecx, dword [ebp - 0x1c]
inc dword [ebp - 0x24]
add dword [ebp - 0x1c], 4
cmp dword [ebp - 0x24], 0xa
mov dword [ecx], eax
jl 0x4cf567
mov eax, dword [ebp - 0x1c]
inc dword [ebp - 0x14]
cmp eax, 0x6902d0
jl 0x4cf561
lea ebx, [esi + 0xacabc]
mov ecx, ebx
call fcn.005251a8
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x4c]
push str.FacWordRecord
push eax
call edi
mov ecx, ebx
mov dword [esi + 0xacacc], eax
call fcn.005251a8
push eax
lea ecx, [esi + 0x4c8]
call fcn.004581ea
mov ecx, esi
call fcn.004d9219
lea ecx, [esi + 0x12350]
call fcn.00484757
mov ecx, esi
call fcn.004db78e
jmp case.0x4d2ab4.3015
lea ecx, [esi + 0x15a40]
call fcn.00485c7b
jmp case.0x4d2ab4.3015
lea ecx, [esi + 0x15a40]
call fcn.00485e19
jmp case.0x4d2ab4.3015
lea ecx, [esi + 0x42e40]
call fcn.004810b7
jmp case.0x4d2ab4.3015
push 0x40
xor ebx, ebx
pop ecx
xor eax, eax
lea edi, [ebp - 0x1db]
mov byte [ebp - 0x1dc], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push 0x103
stosb byte es:[edi], al
call fcn.0051bd44
mov ecx, eax
call fcn.00561489
push eax
mov ecx, 0x692048
call fcn.0053cd63
push eax
lea eax, [ebp - 0x1dc]
push eax
call dword [sym.imp.MSVCRT.dll_strncpy]
add esp, 0xc
lea eax, [ebp - 0x1dc]
push ebx
push eax
push 4
jmp 0x4cf922
xor ebx, ebx
xor eax, eax
lea edi, [ebp - 0x3b]
mov byte [ebp - 0x3c], bl
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
push ebx
stosb byte es:[edi], al
call fcn.0051bd44
mov ecx, eax
call fcn.004d5152
push eax
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x692048
call fcn.0053c058
lea ecx, [ebp - 0x18]
mov dword [ebp - 4], 0x4a
call fcn.004dd353
cmp eax, 0xffffffff
je 0x4cf703
push 0xf
lea ecx, [ebp - 0x18]
call fcn.005251a8
mov ecx, eax
call fcn.004d50f9
push eax
lea eax, [ebp - 0x3c]
push eax
call dword [sym.imp.MSVCRT.dll_strncpy]
add esp, 0xc
lea eax, [ebp - 0x3c]
lea ecx, [esi + 0x8ceb0]
push ebx
push eax
push 3
call fcn.0041bcf4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
jmp 0x4d44c2
push 1
jmp 0x4cf715
push 0
lea ecx, [esi + 0x8c520]
call fcn.004b8d65
jmp case.0x4d2ab4.3015
call fcn.0051bd44
mov ecx, eax
call fcn.0052bf64
test eax, eax
jne case.0x4d2ab4.3015
lea ecx, [esi + 0x4c8]
call fcn.00458a9c
jmp case.0x4d2ab4.3015
xor ebx, ebx
lea ecx, [esi + 0x8c498]
push ebx
call fcn.004b8d65
push ebx
lea ecx, [esi + 0x37ad0]
call sub.MFC42.DLL_CWnd::ShowWindow
mov eax, dword [esi + 0xacaa8]
mov dword [esi + 0xacab4], 1
cmp eax, ebx
je 0x4cf7ab
push eax
lea eax, [ebp - 0x94]
push str.MagicSkillType_d
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
lea eax, [ebp - 0x94]
push ebx
push dword [esi + 0xacaa8]
push eax
lea ecx, [esi + 0x8cdf0]
call fcn.004b2a66
jmp case.0x4d2ab4.3015
push ebx
lea eax, [ebp - 0x94]
push str.Magic_d
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
lea eax, [ebp - 0x94]
push ebx
push ebx
jmp 0x4cf79a
call fcn.0051bd44
mov ecx, eax
call fcn.004d512d
cmp eax, 0x64
jae case.0x4d2ab4.3015
lea ecx, [esi + 0x4c8]
call fcn.00458b4c
jmp case.0x4d2ab4.3015
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.00449993
mov ecx, eax
mov edi, 0x494
add ecx, edi
call fcn.0055a888
lea ecx, [ebp - 0x18]
mov dword [ebp - 4], 0x4b
call fcn.004dd353
cmp eax, 0xffffffff
je 0x4cf837
lea ecx, [ebp - 0x18]
call fcn.005251a8
add eax, 0xc
push eax
call fcn.00449993
mov ecx, eax
add ecx, edi
call fcn.0055a8d7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.0043a033
jmp case.0x4d2ab4.3015
cmp dword [esi + 0xab3cc], 0
je case.0x4d2ab4.3015
lea ecx, [esi + 0xab358]
call fcn.00447bc6
jmp case.0x4d2ab4.3015
mov edi, dword [sym.imp.GraphicData.dll_GameDataSetQuery]
call edi
mov ebx, eax
call edi
mov edx, dword [eax]
push 0x277e
mov ecx, eax
call dword [edx + 0x3c]
push eax
lea eax, [ebp - 0x1f4]
push eax
call fcn.00595ffb
push dword [0x691ccc]
mov edi, dword [eax]
mov dword [ebp - 4], 0x46
push 0x10
call fcn.00595f58
add esp, 0x10
mov ecx, ebx
push eax
mov eax, dword [ebx]
push 0x2785
call dword [eax + 0x3c]
push eax
push edi
mov ecx, esi
call sub.MFC42.DLL_CWnd::MessageBoxA
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 4], 0x47
sub eax, dword [ebp - 0x1f4]
lea ecx, [ebp - 0x1ec]
push eax
push dword [ebp - 0x1f4]
jmp 0x4d2d7d
add eax, 0xfffffbee
cmp eax, 0x32
ja case.0x4d2ab4.3015
jmp dword [eax*4 + 0x4d4a13]
mov eax, dword [ebp + 0x10]
xor ebx, ebx
sub eax, ebx
je 0x4cf98c
sub eax, 3
je 0x4cf97c
dec eax
je 0x4cf950
dec eax
je 0x4cf932
dec eax
jne case.0x4d2ab4.3015
call fcn.0051bd44
mov ecx, eax
call fcn.0051badb
push eax
push ebx
push 0x1b
lea ecx, [esi + 0x8ceb0]
call fcn.0041bcf4
jmp case.0x4d2ab4.3015
call fcn.0051bd44
mov ecx, eax
call fcn.0051badb
push eax
push 0x79
push edi
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_PostMessageA]
jmp case.0x4d2ab4.3015
call dword [sym.imp.GraphicData.dll_GameDataSetQuery]
mov edx, dword [eax]
push ebx
push 0x2af9
mov ecx, eax
call dword [edx + 0x3c]
push eax
push 0x1c
lea ecx, [esi + 0x8ceb0]
call fcn.0041bcf4
mov dword [esi + 0xacae4], ebx
jmp case.0x4d2ab4.3015
lea ecx, [esi + 0x66090]
call fcn.00474235
jmp case.0x4d2ab4.3015
call fcn.0051bd44
mov ecx, eax
call fcn.0051baef
push eax
lea ecx, [esi + 0x65b94]
call fcn.0041dde1
jmp case.0x4d2ab4.3015
xor ebx, ebx
push ebx
push ebx
push 0x17
jmp 0x4cf922
lea ecx, [esi + 0x2e418]
call fcn.0044001d
jmp case.0x4d2ab4.3015
lea ecx, [esi + 0x42e40]
call fcn.00481a19
xor ebx, ebx
cmp dword [esi + 0x530], ebx
jne case.0x4d2ab4.3015
cmp dword [esi + 0x42ea0], ebx
jne case.0x4d2ab4.3015
cmp byte [0x67d8b4], bl
je 0x4cfa9a
push 0x3f
xor eax, eax
pop ecx
lea edi, [ebp - 0x1d7]
mov byte [ebp - 0x1d8], bl
push 0xff
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov byte [0x67d8b4], bl
stosb byte es:[edi], al
call fcn.0051bd44
mov ecx, eax
call fcn.0056160a
push eax
lea eax, [ebp - 0x1d8]
push eax
call dword [sym.imp.MSVCRT.dll_strncpy]
lea eax, [ebp - 0x1d8]
push str.NULL
push eax
call sub.MSVCRT.dll_strcmp
add esp, 0x14
test eax, eax
je case.0x4d2ab4.3015
cmp byte [ebp - 0x1d8], bl
je case.0x4d2ab4.3015
lea eax, [ebp - 0x1d8]
xor edi, edi
push eax
call sub.MSVCRT.dll_strlen
test eax, eax
pop ecx
jle 0x4cfa8e
movsx eax, byte [ebp + edi - 0x1d8]
push eax
call sub.MSVCRT.dll_abs
add ebx, eax
lea eax, [ebp - 0x1d8]
push eax
inc edi
call sub.MSVCRT.dll_strlen
pop ecx
cmp edi, eax
pop ecx
jl 0x4cfa6b
cmp ebx, dword [esi + 0xacacc]
je case.0x4d2ab4.3015
mov dword [esi + 0x530], 1
jmp case.0x4d2ab4.3015
lea ecx, [esi + 0x4c8]
call fcn.00458b5e
jmp case.0x4d2ab4.3015
lea ecx, [esi + 0x4c8]
call fcn.00458bd2
jmp case.0x4d2ab4.3015
lea ecx, [esi + 0x4a430]
call fcn.00468a00
jmp case.0x4d2ab4.3015
cmp dword [esi + 0x52c], 0
lea eax, [esi + 0x52c]
jne case.0x4d2ab4.3015
mov dword [eax], 1
jmp case.0x4d2ab4.3015
lea ecx, [esi + 0x4cb50]
call fcn.00469f5a
jmp case.0x4d2ab4.3015
lea ecx, [esi + 0x4ab38]
call fcn.00466fcc
jmp case.0x4d2ab4.3015
cmp dword [esi + 0x50908], 0
je case.0x4d2ab4.3015
lea ecx, [esi + 0x508a8]
call fcn.0044665b
jmp case.0x4d2ab4.3015
cmp dword [esi + 0x50908], 0
je case.0x4d2ab4.3015
lea ecx, [esi + 0x508a8]
call fcn.004466f5
jmp case.0x4d2ab4.3015
cmp dword [esi + 0x519ec], 0
jne case.0x4d2ab4.3015
lea ecx, [esi + 0x4c8]
call fcn.00459439
jmp case.0x4d2ab4.3015
mov dword [esi + 0xacaf8], 0x11
jmp case.0x4d2ab4.3015
cmp dword [esi + 0x523a4], 0
jne case.0x4d2ab4.3015
lea ecx, [esi + 0x4c8]
call fcn.0045945a
jmp case.0x4d2ab4.3015
mov dword [esi + 0xacaf8], 0x12
jmp case.0x4d2ab4.3015
push 0
lea eax, [ebp - 0x18]
push dword [ebp + 0x10]
mov ecx, 0x692048
push eax
call fcn.0053c058
lea ecx, [ebp - 0x18]
mov dword [ebp - 4], 0x4e
call fcn.004dd353
cmp eax, 0xffffffff
je 0x4cfbf0
push dword [ebp + 0x10]
lea ecx, [ebp - 0x18]
call fcn.005251a8
mov ecx, eax
call fcn.004d50f9
push eax
push 0xe
lea ecx, [esi + 0x8ceb0]
call fcn.0041bcf4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
jmp 0x4d44c2
lea ecx, [esi + 0x42e40]
call fcn.00481a67
jmp case.0x4d2ab4.3015
lea ecx, [esi + 0x42e40]
call fcn.00481db2
jmp case.0x4d2ab4.3015
push dword [esi + 0xacaa8]
lea eax, [ebp - 0x20]
push eax
call fcn.0051bd44
mov ecx, eax
call fcn.00558deb
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0x4f
call fcn.004dd353
cmp eax, 0xffffffff
je 0x4cfcb2
lea ecx, [ebp - 0x20]
call fcn.005251a8
mov ecx, eax
call fcn.0053e92d
test eax, eax
je 0x4cfc91
push dword [esi + 0xacaa8]
lea eax, [ebp - 0x94]
push str.MagicSkillType_d
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
xor ebx, ebx
lea eax, [ebp - 0x94]
lea ecx, [esi + 0x8cdf0]
push ebx
push dword [esi + 0xacaa8]
push eax
call fcn.004b2a66
jmp 0x4cfcb4
lea ecx, [esi + 0x8cdf0]
call fcn.004b2b55
mov eax, dword [esi + 0xacaa8]
xor ebx, ebx
mov dword [esi + 0xacaac], eax
mov dword [esi + 0xacaa8], ebx
jmp 0x4cfcb4
xor ebx, ebx
mov eax, dword [esi + 0xacaac]
cmp eax, ebx
je 0x4cfd49
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.0051bd44
mov ecx, eax
call fcn.00558deb
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x50
call fcn.004dd353
cmp eax, 0xffffffff
je 0x4cfd3d
lea ecx, [ebp - 0x18]
call fcn.005251a8
mov ecx, eax
call fcn.0053e92d
test eax, eax
je 0x4cfd3d
push dword [esi + 0xacaac]
lea eax, [ebp - 0x94]
push str.MagicSkillType_d
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
lea eax, [ebp - 0x94]
lea ecx, [esi + 0x8cdf0]
push ebx
push dword [esi + 0xacaac]
push eax
call fcn.004b2a66
mov eax, dword [esi + 0xacaac]
mov dword [esi + 0xacaac], ebx
mov dword [esi + 0xacaa8], eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x4f
call fcn.0043a033
cmp dword [esi + 0x3713c], ebx
je 0x4cfd5c
lea ecx, [esi + 0x370dc]
call fcn.0044eb7d
cmp dword [esi + 0x3854c], ebx
je 0x4cfd6f
lea ecx, [esi + 0x384ec]
call fcn.004449ea
cmp dword [esi + 0x37b30], ebx
je 0x4cfd9b
cmp byte [esi + 0x37b34], 2
je 0x4cfd9b
cmp dword [esi + 0x37b3c], ebx
jne 0x4cfd9b
cmp dword [esi + 0x37b40], ebx
jne 0x4cfd9b
lea ecx, [esi + 0x37ad0]
call fcn.004a5cc5
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.0043a033
jmp case.0x4d2ab4.3015
call fcn.0051bd44
mov ecx, eax
mov edi, 0x2300
add ecx, edi
call fcn.00522d81
lea ebx, [esi + 0x52b88]
mov ecx, ebx
call fcn.0046c3a7
mov ecx, ebx
call fcn.0046cf0e
push 5
lea ecx, [esi + 0x5695c]
call sub.MFC42.DLL_CWnd::ShowWindow
cmp dword [esi + 0x52c84], 0
je case.0x4d2ab4.3015
call fcn.0051bd44
add eax, edi
lea ecx, [esi + 0x52c08]
push eax
jmp 0x4d0054
call fcn.0051bd44
mov ecx, eax
call fcn.004d514b
test al, al
je case.0x4d2ab4.3015
push 1
jmp 0x4cfe2e
call fcn.0051bd44
mov ecx, eax
call fcn.004d514b
test al, al
je case.0x4d2ab4.3015
push 0
lea ecx, [esi + 0x37ad0]
call fcn.004a6cd1
jmp case.0x4d2ab4.3015
push 1
jmp 0x4cfe44
push 0
lea ecx, [esi + 0x4c8]
call fcn.00459525
jmp case.0x4d2ab4.3015
lea ecx, [esi + 0x5919c]
call fcn.00426b66
jmp case.0x4d2ab4.3015
lea ecx, [esi + 0x57878]
call fcn.004267c4
jmp case.0x4d2ab4.3015
lea ecx, [esi + 0x597c0]
call fcn.0042a0e9
jmp case.0x4d2ab4.3015
lea ecx, [esi + 0x597c0]
call fcn.0042a236
jmp case.0x4d2ab4.3015
mov edi, dword [sym.imp.GraphicData.dll_GameDataSetQuery]
call edi
mov ebx, eax
call edi
mov edx, dword [eax]
push 0x289f
mov ecx, eax
call dword [edx + 0x3c]
push eax
lea eax, [ebp - 0x398]
push eax
call fcn.00595ffb
mov edi, eax
push dword [0x691ccc]
mov dword [ebp - 4], 0x51
push 0x10
call fcn.00595f58
add esp, 0x10
mov ecx, ebx
push eax
mov eax, dword [ebx]
push 0x2785
call dword [eax + 0x3c]
push eax
mov ecx, edi
call fcn.005251a8
push eax
mov ecx, esi
call sub.MFC42.DLL_CWnd::MessageBoxA
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x398]
jmp 0x4d1326
lea ecx, [esi + 0x4c8]
call fcn.00456dd0
xor ebx, ebx
cmp dword [esi + 0x1c1cc], ebx
je 0x4cff1f
push ebx
lea ecx, [esi + 0x1c164]
call sub.MFC42.DLL_CWnd::ShowWindow
lea ecx, [esi + 0x15a40]
call fcn.004865ea
jmp case.0x4d2ab4.3015
lea ecx, [esi + 0x23de8]
call fcn.0049292f
xor ebx, ebx
push ebx
push ebx
push 0x15
jmp 0x4cf922
push 0
lea ecx, [esi + 0x4c8]
call fcn.00458d23
jmp case.0x4d2ab4.3015
xor ebx, ebx
cmp dword [ebp + 0x10], ebx
je case.0x4d2ab4.3015
push 5
push ebx
push ebx
push dword [ebp + 0x10]
push ebx
push dword [esi + 0x20]
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp 0x4d08c1
lea ecx, [esi + 0x4c8]
call fcn.00456dd0
cmp dword [esi + 0x1c1cc], 0
jne 0x4cff99
push 5
lea ecx, [esi + 0x1c164]
call sub.MFC42.DLL_CWnd::ShowWindow
push dword [esi + 0xacaec]
mov dword [esi + 0x5f4], 0x2b
push 1
jmp 0x4cffe0
lea ecx, [esi + 0x4c8]
call fcn.00456dd0
cmp dword [esi + 0x1c1cc], 0
jne 0x4cffce
push 5
lea ecx, [esi + 0x1c164]
call sub.MFC42.DLL_CWnd::ShowWindow
push dword [esi + 0xacaec]
mov dword [esi + 0x5f4], 0x2b
push 2
lea ecx, [esi + 0x635b0]
call fcn.0043d8f7
jmp case.0x4d2ab4.3015
xor ebx, ebx
cmp dword [esi + 0x32448], ebx
jne case.0x4d2ab4.3015
cmp dword [esi + 0x347a4], ebx
jne case.0x4d2ab4.3015
push dword [esi + 0xacaec]
lea ecx, [esi + 0x4c8]
push 3
call fcn.0045773d
jmp case.0x4d2ab4.3015
cmp dword [esi + 0x42218], 0
jne case.0x4d2ab4.3015
lea ecx, [esi + 0x4c8]
call fcn.00458c36
jmp case.0x4d2ab4.3015
xor ebx, ebx
cmp dword [esi + 0x16718], ebx
je case.0x4d2ab4.3015
push ebx
lea ecx, [esi + 0x1669c]
call fcn.00411a15
jmp case.0x4d2ab4.3015
add eax, 0xfffffbba
cmp eax, 0x67
ja case.0x4d2ab4.3015
jmp dword [eax*4 + 0x4d4adf]
xor ebx, ebx
cmp dword [ebp + 0x10], ebx
je case.0x4d2ab4.3015
push ebx
push dword [ebp + 0x10]
push 0x29
jmp 0x4d2e64
xor ebx, ebx
push ebx
push ebx
push 0x21
jmp 0x4cf922
push dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
call fcn.0051bd44
mov ecx, eax
add ecx, 0x2cb8
call fcn.0054897a
mov ecx, dword [ebp - 0x20]
xor ebx, ebx
cmp ecx, ebx
mov dword [ebp - 4], 2
je 0x4d014d
push ecx
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
mov dword [eax], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [eax + 4], ecx
mov eax, dword [ebp - 0x1c]
cmp eax, ebx
je 0x4d00e1
push 1
add eax, 4
pop ecx
lock xadd dword [eax], ecx
mov byte [ebp - 4], 2
call fcn.0057003c
mov ecx, eax
call fcn.005700e1
mov edi, eax
cmp edi, 0x564
jl 0x4d0159
mov ecx, dword [ebp - 0x20]
call fcn.005307ed
mov ecx, eax
mov eax, edi
cdq
idiv ecx
cmp eax, 5
jl 0x4d0159
call fcn.0051bd44
push dword [eax + 0x2cbc]
call fcn.0051bd44
mov ecx, eax
call fcn.0054d265
test eax, eax
jne 0x4d0159
call dword [sym.imp.GraphicData.dll_GameDataSetQuery]
push dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, eax
push 0x2b9c
call dword [edx + 0x3c]
push eax
push 0x27
lea ecx, [esi + 0x8ceb0]
call fcn.0041bcf4
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1c]
jmp 0x4d2018
push dword [ebp + 0x10]
push ebx
push 0x20
jmp 0x4d0142
call fcn.0051bd44
mov ecx, eax
call fcn.005266a1
jmp case.0x4d2ab4.3015
cmp dword [ebp + 0x10], 0
je case.0x4d2ab4.3015
push dword [ebp + 0x10]
call fcn.0051bd44
mov ecx, eax
call fcn.00524191
jmp case.0x4d2ab4.3015
xor ebx, ebx
cmp dword [ebp + 0x10], ebx
jl case.0x4d2ab4.3015
cmp dword [ebp + 0x10], 1
jle 0x4d01f7
cmp dword [ebp + 0x10], 2
jne case.0x4d2ab4.3015
cmp dword [esi + 0x3b50], ebx
je 0x4d01c3
lea ecx, [esi + 0x3ad8]
call fcn.00406f60
jmp case.0x4d2ab4.3015
cmp dword [esi + 0x2ad4], ebx
je 0x4d01db
lea ecx, [esi + 0x2a68]
call fcn.004079f3
jmp case.0x4d2ab4.3015
cmp dword [esi + 0x4eec], ebx
je case.0x4d2ab4.3015
lea ecx, [esi + 0x4e80]
call fcn.0040af07
jmp case.0x4d2ab4.3015
lea ecx, [esi + 0x29ec]
call fcn.00408dca
jmp case.0x4d2ab4.3015
lea eax, [esi + 0xacae4]
xor ebx, ebx
cmp dword [eax], ebx
je 0x4d0215
mov dword [eax], ebx
push ebx
push ebx
push 0x1e
jmp 0x4cf922
xor ebx, ebx
cmp dword [ebp + 0x10], ebx
je case.0x4d2ab4.3015
push ebx
push dword [ebp + 0x10]
push 0x22
jmp 0x4d2e64
xor ebx, ebx
cmp dword [ebp + 0x10], ebx
je case.0x4d2ab4.3015
push dword [ebp + 0x10]
lea edi, [esi + 0xa8760]
mov ecx, edi
call fcn.0049ebf4
cmp dword [esi + 0xa87d8], ebx
jne 0x4d08c1
mov ecx, edi
call fcn.0049ec56
jmp 0x4d042c
lea ecx, [esi + 0x6739c]
call fcn.00414466
jmp case.0x4d2ab4.3015
push dword [ebp + 0x10]
push 0x68f370
push 0x31
jmp 0x4cf922
push 5
lea ecx, [esi + 0x69a20]
jmp 0x4d213e
xor ebx, ebx
cmp dword [ebp + 0x10], ebx
je case.0x4d2ab4.3015
mov al, byte [0x68f370]
push 0x3f
mov byte [ebp - 0x1d8], al
pop ecx
xor eax, eax
lea edi, [ebp - 0x1d7]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], ebx
push eax
lea eax, [ebp - 0x1d8]
push eax
push str._s_u
push dword [ebp + 0x10]
mov byte [ebp - 0xd9], bl
call dword [sym.imp.MSVCRT.dll_sscanf]
add esp, 0x10
lea eax, [ebp - 0x1d8]
lea edi, [esi + 0xa89d0]
push dword [ebp - 0x14]
push eax
push ebx
jmp 0x4d0412
xor ebx, ebx
cmp dword [ebp + 0x10], ebx
je case.0x4d2ab4.3015
mov al, byte [0x68f370]
push 0x3f
mov byte [ebp - 0x1d8], al
pop ecx
xor eax, eax
lea edi, [ebp - 0x1d7]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], ebx
push eax
lea eax, [ebp - 0x1d8]
push eax
push str._s_u
push dword [ebp + 0x10]
mov byte [ebp - 0xd9], bl
call dword [sym.imp.MSVCRT.dll_sscanf]
add esp, 0x10
lea eax, [ebp - 0x1d8]
lea edi, [esi + 0xa89d0]
push dword [ebp - 0x14]
push eax
push 1
jmp 0x4d0412
xor ebx, ebx
cmp dword [ebp + 0x10], ebx
je case.0x4d2ab4.3015
mov al, byte [0x68f370]
push 0x3f
mov byte [ebp - 0x1d8], al
pop ecx
xor eax, eax
lea edi, [ebp - 0x1d7]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], ebx
push eax
lea eax, [ebp - 0x1d8]
push eax
push str._s_u
push dword [ebp + 0x10]
mov byte [ebp - 0xd9], bl
call dword [sym.imp.MSVCRT.dll_sscanf]
add esp, 0x10
lea eax, [ebp - 0x1d8]
lea edi, [esi + 0xa89d0]
push dword [ebp - 0x14]
push eax
push 2
jmp 0x4d0412
xor ebx, ebx
cmp dword [ebp + 0x10], ebx
je case.0x4d2ab4.3015
mov al, byte [0x68f370]
push 0x3f
mov byte [ebp - 0x1d8], al
pop ecx
xor eax, eax
lea edi, [ebp - 0x1d7]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], ebx
push eax
lea eax, [ebp - 0x1d8]
push eax
push str._s_u
push dword [ebp + 0x10]
mov byte [ebp - 0xd9], bl
call dword [sym.imp.MSVCRT.dll_sscanf]
add esp, 0x10
lea eax, [ebp - 0x1d8]
lea edi, [esi + 0xa89d0]
push dword [ebp - 0x14]
push eax
push 3
mov ecx, edi
call fcn.0049f2b3
cmp dword [esi + 0xa8a60], ebx
jne 0x4d08c1
mov ecx, edi
call fcn.0049f44f
push 5
mov ecx, edi
call sub.MFC42.DLL_CWnd::ShowWindow
jmp 0x4d08c1
mov eax, dword [ebp + 0x10]
xor ebx, ebx
sub eax, ebx
je 0x4d048a
dec eax
je 0x4d045e
dec eax
dec eax
jne case.0x4d2ab4.3015
lea ecx, [esi + 0x4c8]
call fcn.00458ed1
jmp case.0x4d2ab4.3015
cmp dword [esi + 0x79c4], ebx
je 0x4d0472
push ebx
lea ecx, [esi + 0x7958]
call sub.MFC42.DLL_CWnd::ShowWindow
lea edi, [esi + 0xe714]
mov ecx, edi
call fcn.004722fd
cmp dword [esi + 0xe780], ebx
jmp 0x4d1b44
cmp dword [esi + 0xe780], ebx
je 0x4d049e
push ebx
lea ecx, [esi + 0xe714]
call sub.MFC42.DLL_CWnd::ShowWindow
lea edi, [esi + 0x7958]
mov ecx, edi
call fcn.0047044c
cmp dword [esi + 0x79c4], ebx
jmp 0x4d1b44
mov eax, dword [ebp + 0x10]
sub eax, 0
je 0x4d04d5
dec eax
jne case.0x4d2ab4.3015
lea ecx, [esi + 0xe714]
call fcn.004722fd
jmp case.0x4d2ab4.3015
lea ecx, [esi + 0x7958]
call fcn.0047044c
jmp case.0x4d2ab4.3015
cmp dword [esi + 0x16780], 0
je case.0x4d2ab4.3015
lea ecx, [esi + 0x1671c]
call fcn.00410093
jmp case.0x4d2ab4.3015
xor ebx, ebx
cmp dword [esi + 0x16718], ebx
je case.0x4d2ab4.3015
push ebx
lea ecx, [esi + 0x1669c]
jmp 0x4d213e
xor ebx, ebx
cmp dword [esi + 0x52c84], ebx
je case.0x4d2ab4.3015
push ebx
lea ecx, [esi + 0x52c08]
jmp 0x4d213e
xor ebx, ebx
cmp dword [esi + 0x52be8], ebx
je 0x4d054c
push ebx
lea ecx, [esi + 0x52b88]
call sub.MFC42.DLL_CWnd::ShowWindow
cmp dword [esi + 0x1c1cc], ebx
je case.0x4d2ab4.3015
push ebx
lea ecx, [esi + 0x1c164]
jmp 0x4d213e
xor ebx, ebx
cmp dword [esi + 0x16780], ebx
je case.0x4d2ab4.3015
push ebx
lea ecx, [esi + 0x1671c]
jmp 0x4d213e
xor ebx, ebx
cmp dword [esi + 0x32448], ebx
je 0x4d059c
push ebx
lea ecx, [esi + 0x323e4]
call sub.MFC42.DLL_CWnd::ShowWindow
push ebx
push 0x16
jmp 0x4d1736
cmp dword [esi + 0x347a4], ebx
jne case.0x4d2ab4.3015
cmp dword [esi + 0x82ed0], ebx
jne case.0x4d2ab4.3015
push 0xb48
push 1
lea ecx, [esi + 0x4c8]
call fcn.00457680
jmp case.0x4d2ab4.3015
call fcn.004e3fdd
mov ecx, eax
call fcn.00551869
cmp eax, 1
jne 0x4d0608
xor ebx, ebx
push 0x121
push ebx
mov ecx, 0x68f8c0
call fcn.004ac34c
cmp eax, ebx
je case.0x4d2ab4.3015
push eax
call fcn.004e3fdd
mov ecx, eax
call fcn.004e4061
jmp case.0x4d2ab4.3015
cmp dword [esi + 0x69980], 0
jne case.0x4d2ab4.3015
push 5
lea ecx, [esi + 0x69914]
jmp 0x4d213e
xor ebx, ebx
cmp dword [esi + 0x69980], ebx
je case.0x4d2ab4.3015
push ebx
jmp 0x4d0617
push dword [ebp + 0x10]
lea edi, [esi + 0x6df08]
mov ecx, edi
call fcn.004dc28b
mov ecx, edi
call fcn.0047905d
jmp case.0x4d2ab4.3015
mov ecx, esi
call fcn.004dbb00
jmp case.0x4d2ab4.3015
lea ecx, [esi + 0x6df08]
call fcn.00479e46
jmp case.0x4d2ab4.3015
lea ecx, [esi + 0x6df08]
call fcn.00479f0c
jmp case.0x4d2ab4.3015
lea edi, [esi + 0x6df08]
mov ecx, edi
call fcn.004c3ca4
test eax, eax
je 0x4d16bb
push 0
jmp 0x4d16bd
lea ecx, [esi + 0x4c8]
call fcn.004d4fe8
test eax, eax
je case.0x4d2ab4.3015
push 0
lea ecx, [esi + 0x6df08]
jmp 0x4d213e
lea ecx, [esi + 0xa8750]
call fcn.005251a8
push eax
lea ecx, [esi + 0x31e8c]
call sub.MFC42.DLL_CWnd::SetWindowTextA
jmp case.0x4d2ab4.3015
lea ecx, [esi + 0x6e1b8]
call fcn.005251a8
push eax
lea ecx, [esi + 0x31e8c]
call sub.MFC42.DLL_CWnd::SetWindowTextA
push 0x138a
lea ecx, [esi + 0x31078]
call fcn.00495671
jmp case.0x4d2ab4.3015
push 0
call fcn.0051bd44
mov ecx, eax
call fcn.0051c4cb
push eax
push 0x3a
jmp 0x4d139b
xor ebx, ebx
cmp dword [esi + 0x6b824], ebx
jne case.0x4d2ab4.3015
push dword [ebp + 0x10]
lea eax, [ebp - 0x20]
mov ecx, 0x691fc0
push eax
call fcn.00538570
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0x54
call fcn.004dd353
cmp eax, 0xffffffff
je 0x4d0860
mov al, byte [0x68f370]
push 0x3f
mov byte [ebp - 0x960], al
pop ecx
xor eax, eax
lea edi, [ebp - 0x95f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov edi, dword [sym.imp.GraphicData.dll_GameDataSetQuery]
call edi
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x14], eax
call fcn.005251a8
mov ecx, eax
call fcn.004d5031
push eax
lea ecx, [ebp - 0x20]
call fcn.005251a8
mov ecx, eax
call fcn.004d5070
mov ecx, dword [ebp - 0x14]
push eax
push 0x28f2
mov eax, dword [ecx]
call dword [eax + 0x3c]
push eax
lea eax, [ebp - 0x960]
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
call fcn.0051bd44
mov ecx, eax
call fcn.004d5134
push 0x28
pop ecx
sub ecx, eax
mov dword [ebp - 0x14], ecx
jne 0x4d07ef
call edi
mov edx, dword [eax]
push ebx
push ebx
push 0xff0000
push 0x7d5
push 0x2909
mov ecx, eax
call dword [edx + 0x3c]
push eax
call fcn.00449993
mov ecx, eax
call fcn.004d9a57
jmp 0x4d0860
lea ecx, [ebp - 0x20]
call fcn.005251a8
mov ecx, eax
call fcn.004d5070
mov edi, eax
call fcn.0051bd44
mov ecx, eax
call fcn.004d5144
xor edx, edx
div edi
cmp eax, ebx
jne 0x4d082f
call dword [sym.imp.GraphicData.dll_GameDataSetQuery]
mov edx, dword [eax]
push ebx
push ebx
push 0xff0000
push 0x7d5
push 0x290a
jmp 0x4d07db
cmp dword [ebp - 0x14], eax
push ebx
jge 0x4d0842
push ebx
push dword [ebp - 0x14]
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
jmp 0x4d084c
push 1
push eax
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
lea eax, [ebp - 0x20]
push eax
call fcn.0050df0f
lea ecx, [esi + 0x6b798]
call fcn.0041670f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
jmp 0x4d3512
mov al, byte [0x68f370]
lea edi, [ebp - 0x3b]
mov byte [ebp - 0x3c], al
xor eax, eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
cmp dword [ebp + 0x10], 0
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
je case.0x4d2ab4.3015
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x3c]
push eax
push str._s__u__d
push dword [ebp + 0x10]
call dword [sym.imp.MSVCRT.dll_sscanf]
add esp, 0x14
cmp eax, 3
jne 0x4d08c1
push dword [ebp - 0x14]
lea eax, [ebp - 0x3c]
push dword [ebp - 0x1c]
push eax
call fcn.004026a2
mov ecx, eax
call fcn.00401a87
push dword [ebp + 0x10]
call sub.MFC42.DLL_operatordelete
pop ecx
or dword [ebp - 4], 0xffffffff
jmp case.0x4d2ab4.3015
call fcn.004026a2
mov ecx, eax
call fcn.00401fbc
call dword [sym.imp.GraphicData.dll_GameDataSetQuery]
mov edi, eax
call fcn.0051bd44
mov ebx, eax
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x34]
push eax
call fcn.0051bd44
mov ecx, eax
call fcn.004d5100
push eax
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x114]
push eax
call fcn.0051bd44
mov ecx, eax
call fcn.004d50f1
movzx eax, ax
push eax
call fcn.0051bd44
mov ecx, eax
call fcn.004d50f9
push eax
call fcn.0050ed28
mov ecx, eax
call fcn.0050eeec
jmp case.0x4d2ab4.3015
push dword [ebp + 0x10]
call fcn.00449993
mov ecx, eax
add ecx, 0x38
call fcn.0056c028
mov cl, byte [0x68f370]
mov edx, eax
xor eax, eax
lea edi, [ebp - 0x3b]
mov byte [ebp - 0x3c], cl
push 0x3f
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 0x1d8], cl
pop ecx
xor eax, eax
lea edi, [ebp - 0x1d7]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x3c]
push eax
push 0x677684
push edx
call dword [sym.imp.MSVCRT.dll_sscanf]
add esp, 0xc
call dword [sym.imp.GraphicData.dll_GameDataSetQuery]
mov edx, dword [eax]
lea ecx, [ebp - 0x3c]
push ecx
push 0x2b0e
mov ecx, eax
call dword [edx + 0x3c]
push eax
lea eax, [ebp - 0x1d8]
push 0x100
push eax
call dword [sym.imp.MSVCRT.dll__snprintf]
add esp, 0x10
lea eax, [ebp - 0x1d8]
lea ecx, [esi + 0xa91b8]
push dword [ebp + 0x10]
push eax
call fcn.0044e36c
jmp case.0x4d2ab4.3015
lea ecx, [esi + 0xa84d4]
call fcn.004934bb
jmp case.0x4d2ab4.3015
xor ebx, ebx
lea edi, [esi + 0x741f8]
cmp dword [esi + 0x74258], ebx
je 0x4d0a08
push ebx
mov ecx, edi
call sub.MFC42.DLL_CWnd::ShowWindow
push ebx
mov ecx, edi
call sub.MFC42.DLL_CWnd::EnableWindow
jmp case.0x4d2ab4.3015
push 5
mov ecx, edi
call sub.MFC42.DLL_CWnd::ShowWindow
push 1
jmp 0x4d09fc
lea edi, [esi + 0x741f8]
xor ebx, ebx
push ebx
mov ecx, edi
call sub.MFC42.DLL_CWnd::ShowWindow
push ebx
mov ecx, edi
call sub.MFC42.DLL_CWnd::EnableWindow
call fcn.0051bd44
mov ecx, eax
call fcn.0051f718
test al, al
je 0x4d0a5e
call fcn.0051bd44
mov ecx, eax
call fcn.0051f71f
test al, al
je 0x4d0a5e
call fcn.0051bd44
mov ecx, eax
call fcn.0051f5a3
jmp case.0x4d2ab4.3015
call fcn.0051bd44
mov ecx, eax
call fcn.0051bdf9
test al, al
je case.0x4d2ab4.3015
call fcn.0051bd44
mov ecx, eax
call fcn.0051beb7
jmp case.0x4d2ab4.3015
call fcn.0051bd44
mov ecx, eax
call fcn.0051be69
xor ebx, ebx
mov ecx, 0x692048
push ebx
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0053c058
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0x5b
call fcn.004dd668
test al, al
jne 0x4d0e86
lea ecx, [ebp - 0x20]
call fcn.005251a8
mov ecx, eax
call fcn.004d50db
test eax, eax
je 0x4d0e86
lea ecx, [ebp - 0x20]
call fcn.005251a8
mov ecx, eax
call fcn.004d5107
cmp eax, 0xf
jg 0x4d0ca0
je 0x4d0e56
cmp eax, 5
jg 0x4d0b7c
je 0x4d0b60
cmp eax, 1
je 0x4d0b1a
cmp eax, 2
je 0x4d0ddc
jle 0x4d0e7a
cmp eax, 4
jle 0x4d0dfd
jmp 0x4d0e7a
cmp dword [esi + 0x32448], ebx
jne 0x4d0e7a
cmp dword [esi + 0x347a4], ebx
jne 0x4d0e7a
cmp dword [esi + 0x82ed0], ebx
jne 0x4d0e7a
lea ecx, [ebp - 0x20]
call fcn.005251a8
mov ecx, eax
call fcn.004d50ea
push eax
push 1
lea ecx, [esi + 0x4c8]
call fcn.00457680
jmp 0x4d0e7a
cmp dword [esi + 0x4269c], ebx
jne 0x4d0e7a
lea ecx, [esi + 0x4c8]
call fcn.00458c8c
jmp 0x4d0e7a
sub eax, 6
je 0x4d0c84
dec eax
je 0x4d0c68
sub eax, 7
jne 0x4d0e7a
lea ecx, [ebp - 0x20]
call fcn.005251a8
mov ecx, eax
call fcn.004d50ea
mov edi, eax
call fcn.0051bd44
mov ecx, eax
add ecx, 0x2cf4
call fcn.004dd344
cmp edi, eax
jne 0x4d0bce
push 1
lea ecx, [esi + 0x4c8]
call fcn.0045939b
jmp 0x4d0e7a
cmp dword [esi + 0x1e7e0], ebx
jne 0x4d0c2a
cmp dword [esi + 0x4cbb4], ebx
je 0x4d0c05
lea ecx, [ebp - 0x20]
call fcn.005251a8
mov ecx, eax
call fcn.004d50ea
mov edi, eax
call fcn.0051bd44
mov ecx, eax
add ecx, 0x2cb8
call fcn.004dd344
cmp edi, eax
je 0x4d0c2a
lea ecx, [ebp - 0x20]
call fcn.005251a8
mov ecx, eax
call fcn.004d50ea
push eax
call fcn.0051bd44
mov ecx, eax
add ecx, 0x2cb8
call fcn.005489dd
push ebx
jmp 0x4d0bbe
call dword [sym.imp.GraphicData.dll_GameDataSetQuery]
mov edx, dword [eax]
push ebx
push ebx
push 0xff0000
push 0x7d5
push 0x289e
mov ecx, eax
call dword [edx + 0x3c]
push eax
call fcn.00449993
mov ecx, eax
call fcn.004d9a57
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.0043a033
mov eax, ebx
jmp 0x4d4992
cmp dword [esi + 0x48648], ebx
jne 0x4d0e7a
lea ecx, [esi + 0x4c8]
call fcn.00458ccd
jmp 0x4d0e7a
cmp dword [esi + 0x41d90], ebx
jne 0x4d0e7a
lea ecx, [esi + 0x4c8]
call fcn.00458be0
jmp 0x4d0e7a
cmp eax, 0x18
jg 0x4d0dbc
je 0x4d0d93
sub eax, 0x10
je 0x4d0d09
sub eax, 5
je 0x4d0cf0
dec eax
jne 0x4d0e7a
call dword [sym.imp.GraphicData.dll_GameDataSetQuery]
mov edx, dword [eax]
push ebx
push ebx
push 0xff0000
push 0x7d5
push 0x2872
mov ecx, eax
call dword [edx + 0x3c]
push eax
call fcn.00449993
mov ecx, eax
call fcn.004d9a57
jmp 0x4d0e7a
push 1
push 1
push ecx
push ecx
lea eax, [ebp - 0x20]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.0050df0f
jmp 0x4d0da7
call fcn.0051bd44
mov ecx, eax
call fcn.0051c7bd
test eax, eax
je 0x4d0d75
call fcn.0051bd44
mov ecx, eax
call fcn.0051c7bd
cmp eax, 0x32
je 0x4d0d75
push ecx
push ecx
lea eax, [ebp - 0x20]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.0050df0f
mov byte [ebp - 4], 0x5b
call fcn.0051bd44
mov ecx, eax
call fcn.00516f16
cmp eax, ebx
je 0x4d0e7a
lea ecx, [ebp - 0x20]
call fcn.005251a8
mov ecx, eax
call fcn.004d50ea
push eax
push ebx
push 0xd
lea ecx, [esi + 0x8ceb0]
call fcn.0041bcf4
jmp 0x4d0e7a
call dword [sym.imp.GraphicData.dll_GameDataSetQuery]
mov edx, dword [eax]
push ebx
push ebx
push 0xff0000
push 0x7d5
push 0x2bae
jmp 0x4d0cd9
push 1
push 1
push ecx
push ecx
lea eax, [ebp - 0x20]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.0050df0f
mov byte [ebp - 4], 0x5b
call fcn.0051bd44
mov ecx, eax
call fcn.00516a46
jmp 0x4d0e7a
cmp eax, 0x1b
je 0x4d0e56
cmp eax, 0x1d
je 0x4d0dfd
cmp eax, 0x1f
jle 0x4d0e7a
cmp eax, 0x22
jg 0x4d0e7a
call fcn.0051bd44
mov ecx, eax
call fcn.0051c7bd
test eax, eax
je 0x4d0e38
call fcn.0051bd44
mov ecx, eax
call fcn.0051c7bd
cmp eax, 0x32
je 0x4d0e38
cmp dword [esi + 0xaa988], ebx
jne 0x4d0e7a
lea ecx, [ebp - 0x20]
call fcn.005251a8
mov ecx, eax
call fcn.004d50ea
push eax
call fcn.0051bd44
mov ecx, eax
call fcn.0056ba71
lea ecx, [ebp - 0x20]
call fcn.005251a8
mov ecx, eax
call fcn.004d50ea
mov dword [esi + 0xacaec], eax
jmp 0x4d0e7a
call dword [sym.imp.GraphicData.dll_GameDataSetQuery]
mov edx, dword [eax]
push ebx
push ebx
push 0xff0000
push 0x7d5
push 0x2bad
jmp 0x4d0cd9
cmp dword [esi + 0xaa988], ebx
jne 0x4d0e7a
lea ecx, [ebp - 0x20]
call fcn.005251a8
mov ecx, eax
call fcn.004d50ea
push eax
call fcn.0051bd44
mov ecx, eax
call fcn.0056ba71
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
jmp 0x4d44c2
or ebx, 0xffffffff
jmp 0x4d0c55
call dword [sym.imp.GraphicData.dll_GameDataSetQuery]
mov edx, dword [eax]
push 0
push 0x2b72
mov ecx, eax
call dword [edx + 0x3c]
push eax
push 0x1f
jmp 0x4cf922
lea edi, [esi + 0x8ceb0]
mov ecx, edi
call fcn.0041d1fa
cmp eax, 0x1f
jne case.0x4d2ab4.3015
push 0
mov ecx, edi
call sub.MFC42.DLL_CWnd::ShowWindow
cmp dword [esi + 0xacaa0], 0xd
jne case.0x4d2ab4.3015
cmp dword [0x67d8b0], 0xffffffff
je case.0x4d2ab4.3015
mov dword [esi + 0xaca7c], 1
jmp case.0x4d2ab4.3015
call dword [sym.imp.GraphicData.dll_GameDataSetQuery]
mov edx, dword [eax]
push 0x2b36
jmp 0x4d0f2c
call dword [sym.imp.GraphicData.dll_GameDataSetQuery]
mov edx, dword [eax]
push 0x2b37
jmp 0x4d0f2c
call dword [sym.imp.GraphicData.dll_GameDataSetQuery]
mov edx, dword [eax]
push 0x2b38
jmp 0x4d0f2c
call dword [sym.imp.GraphicData.dll_GameDataSetQuery]
mov edx, dword [eax]
push 0x2b39
mov ecx, eax
call dword [edx + 0x3c]
push eax
lea ecx, [esi + 0xa9b7c]
call fcn.0042b044
jmp case.0x4d2ab4.3015
call dword [sym.imp.GraphicData.dll_GameDataSetQuery]
mov edx, dword [eax]
push 0x2b34
jmp 0x4d0f5e
call dword [sym.imp.GraphicData.dll_GameDataSetQuery]
mov edx, dword [eax]
push 0x2b35
mov ecx, eax
call dword [edx + 0x3c]
push eax
lea ecx, [esi + 0xa9b7c]
call fcn.0042b044
call sub.WINMM.dll_timeGetTime
push eax
call fcn.0051bd44
mov ecx, eax
call fcn.0051c6f3
jmp case.0x4d2ab4.3015
mov byte [esi + 0xacce8], 1
jmp case.0x4d2ab4.3015
mov dword [esi + 0xaccdc], 1
jmp case.0x4d2ab4.3015
xor ebx, ebx
mov dword [esi + 0xaccdc], ebx
mov byte [esi + 0xacce8], bl
jmp case.0x4d2ab4.3015
mov ecx, 0x691f98
call fcn.005353c9
call fcn.00449993
mov ecx, eax
call fcn.004da6ee
lea ecx, [esi + 0x3e4]
call fcn.00491542
lea edi, [esi + 0x74]
push 5
mov ecx, edi
call sub.MFC42.DLL_CWnd::ShowWindow
mov ecx, edi
call fcn.0044b25d
test al, al
je 0x4d0ff7
push 1
mov ecx, edi
call fcn.0044b068
jmp 0x4d0ffe
mov ecx, edi
call fcn.0044d293
push 0x676ad8
push str.GOLOGIN
mov ecx, edi
call fcn.0044b3be
jmp case.0x4d2ab4.3015
xor ebx, ebx
cmp dword [esi + 0xacce0], ebx
jle case.0x4d2ab4.3015
cmp dword [esi + 0xacce4], ebx
jle case.0x4d2ab4.3015
push 1
call dword [sym.imp.graphic.dll_public:_static_int___cdecl_CMyBitmap::GetScreenHeight_void_]
mov edi, dword [sym.imp.graphic.dll_public:_static_int___cdecl_CMyBitmap::GetScreenWidth_void_]
push eax
call edi
mov ecx, dword [0x68fb6c]
push eax
push ebx
push ebx
call sub.MFC42.DLL_CWnd::MoveWindow
push 1
call dword [sym.imp.graphic.dll_public:_static_int___cdecl_CMyBitmap::GetScreenHeight_void_]
push eax
call edi
push eax
push ebx
push ebx
mov ecx, esi
call sub.MFC42.DLL_CWnd::MoveWindow
push ebx
mov ecx, esi
call fcn.004c3cae
mov ecx, eax
call sub.MFC42.DLL_CWnd::CenterWindow
lea ecx, [ebp - 0x3c]
call fcn.004c3c91
lea ecx, [ebp - 0x3c]
call fcn.004c3c91
push eax
mov ecx, esi
call fcn.004c3c94
push 1
push 0x14
call edi
push eax
mov eax, dword [ebp - 0x38]
add eax, 0xffffffec
lea edi, [esi + 0xab0b0]
push eax
mov ecx, edi
push dword [ebp - 0x3c]
call sub.MFC42.DLL_CWnd::MoveWindow
push ebx
mov ecx, edi
call fcn.004996b4
lea ecx, [esi + 0x74]
call fcn.0044cab5
lea ecx, [esi + 0x3e4]
call fcn.004916e9
mov byte [esi + 0xacce9], 1
jmp case.0x4d2ab4.3015
lea ecx, [esi + 0x76d28]
call fcn.0042136d
lea ecx, [esi + 0x7b8b0]
call fcn.0041f374
jmp case.0x4d2ab4.3015
xor ebx, ebx
push ebx
push ebx
push ebx
jmp 0x4d2997
xor ebx, ebx
push ebx
push ebx
push 1
jmp 0x4d2997
call fcn.0051bd44
mov ecx, eax
call fcn.0051c700
sub eax, 0x35
je 0x4d1126
dec eax
jne case.0x4d2ab4.3015
lea ecx, [esi + 0x7d5a8]
call fcn.00423032
jmp case.0x4d2ab4.3015
lea ecx, [esi + 0x76d28]
call fcn.00421b0c
jmp case.0x4d2ab4.3015
xor ebx, ebx
cmp dword [ebp + 0x10], ebx
jne case.0x4d2ab4.3015
call fcn.0051bd44
mov ecx, eax
call fcn.004d5126
cmp eax, 0x46
jb 0x4d1173
call fcn.0051bd44
mov edx, dword [eax]
push ebx
mov ecx, eax
call dword [edx + 0xd8]
push 5
lea ecx, [esi + 0x7d5a8]
call sub.MFC42.DLL_CWnd::ShowWindow
push 5
jmp 0x4d11a1
call fcn.0051bd44
mov edx, dword [eax]
push ebx
mov ecx, eax
call dword [edx + 0xd8]
push 5
lea ecx, [esi + 0x76d28]
jmp 0x4d213e
push 0
lea ecx, [esi + 0x7d5a8]
call sub.MFC42.DLL_CWnd::ShowWindow
jmp 0x4d1183
push 0
lea ecx, [esi + 0x7b8b0]
jmp 0x4d213e
xor ebx, ebx
cmp dword [esi + 0x7d5a0], ebx
je 0x4d11c2
push ebx
lea ecx, [esi + 0x7b8b0]
call sub.MFC42.DLL_CWnd::ShowWindow
cmp dword [esi + 0x7e13c], ebx
je 0x4d11d6
push ebx
lea ecx, [esi + 0x7d5a8]
call sub.MFC42.DLL_CWnd::ShowWindow
cmp dword [esi + 0x7b8ac], ebx
je case.0x4d2ab4.3015
push ebx
jmp 0x4d1185
mov eax, dword [ebp + 0x10]
sub eax, 0xc
je 0x4d1206
dec eax
jne case.0x4d2ab4.3015
push 0
lea ecx, [esi + 0x1a8c8]
call fcn.0043bf61
jmp case.0x4d2ab4.3015
push 1
jmp 0x4d11f6
mov eax, dword [ebp + 0x10]
sub eax, 0x10
je 0x4d122b
dec eax
jne case.0x4d2ab4.3015
push 0
lea ecx, [esi + 0x59844]
call fcn.0042ad29
jmp case.0x4d2ab4.3015
push 1
jmp 0x4d121b
call dword [sym.imp.GraphicData.dll_GameDataSetQuery]
mov edx, dword [eax]
push 0
push 0x2b9e
mov ecx, eax
call dword [edx + 0x3c]
push eax
push 0x28
jmp 0x4cf922
lea ecx, [esi + 0x2e418]
call fcn.004404c1
jmp case.0x4d2ab4.3015
call fcn.0051bd44
mov ecx, eax
call fcn.0054d40e
push eax
call sub.MSVCRT.dll_strlen
test eax, eax
pop ecx
jbe case.0x4d2ab4.3015
push 0
call fcn.0051bd44
mov ecx, eax
call fcn.0054d40e
push eax
push 0x25
jmp 0x4cf922
lea ecx, [esi + 0x74638]
call fcn.0049cd4d
xor ebx, ebx
cmp dword [esi + 0x91b44], ebx
je case.0x4d2ab4.3015
cmp dword [ebp + 0x10], ebx
je case.0x4d2ab4.3015
push dword [ebp + 0x10]
lea ecx, [esi + 0x91ac0]
call fcn.0048e9de
jmp case.0x4d2ab4.3015
mov edi, dword [sym.imp.GraphicData.dll_GameDataSetQuery]
call edi
mov ebx, eax
call edi
mov edx, dword [eax]
push 0x277e
mov ecx, eax
call dword [edx + 0x3c]
push eax
lea eax, [ebp - 0x404]
push eax
call fcn.00595ffb
mov edi, eax
push dword [0x691ccc]
mov dword [ebp - 4], 0x61
push 0x10
call fcn.00595f58
add esp, 0x10
mov ecx, ebx
push eax
mov eax, dword [ebx]
push 0x2785
call dword [eax + 0x3c]
push eax
mov ecx, edi
call fcn.005251a8
push eax
mov ecx, esi
call sub.MFC42.DLL_CWnd::MessageBoxA
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x404]
call fcn.00402855
jmp case.0x4d2ab4.3015
xor ebx, ebx
cmp dword [esi + 0x76d24], ebx
je case.0x4d2ab4.3015
lea edi, [esi + 0x75fdc]
mov ecx, edi
call fcn.0049d8ea
cmp eax, dword [ebp + 0x10]
jmp 0x4d48c2
xor ebx, ebx
cmp dword [esi + 0x75fd8], ebx
je case.0x4d2ab4.3015
push ebx
lea ecx, [esi + 0x74638]
jmp 0x4d213e
lea ecx, [esi + 0x74638]
call fcn.0049cc22
jmp case.0x4d2ab4.3015
call dword [sym.imp.GraphicData.dll_GameDataSetQuery]
mov edx, dword [eax]
push dword [ebp + 0x10]
mov ecx, eax
call dword [edx + 0x3c]
xor ebx, ebx
cmp eax, ebx
je case.0x4d2ab4.3015
push ebx
push eax
push 0x3b
lea ecx, [esi + 0x91468]
call fcn.00476d84
jmp case.0x4d2ab4.3015
lea ecx, [ebp - 0x854]
call fcn.00572d9d
push 0xe
mov dword [ebp - 4], 0x62
call fcn.0051bd44
mov ecx, eax
call fcn.00555798
push eax
lea ecx, [ebp - 0x854]
call fcn.00572e4c
test eax, eax
je 0x4d13e6
lea ecx, [ebp - 0x854]
call fcn.005356b9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x854]
call fcn.00572df8
jmp case.0x4d2ab4.3015
call dword [sym.imp.GraphicData.dll_GameDataSetQuery]
push dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, eax
push 0x2bc0
call dword [edx + 0x3c]
push eax
lea eax, [ebp - 0x1d8]
push 0x100
push eax
call dword [sym.imp.MSVCRT.dll__snprintf]
add esp, 0x10
xor ebx, ebx
lea eax, [ebp - 0x1d8]
mov byte [ebp - 0xd9], bl
push ebx
push eax
push 0x34
jmp 0x4cf922
mov ecx, 0xbbb
cmp eax, ecx
ja 0x4d2a9d
je 0x4d29fb
lea ecx, [eax - 0x4af]
cmp ecx, 0x6d
ja case.0x4d2ab4.3015
jmp dword [ecx*4 + 0x4d4c7f]
push dword [ebp + 0x10]
mov ecx, 0x6903d0
call fcn.004e81bb
test byte [0x68fd94], 1
jne 0x4d14a1
or byte [0x68fd94], 1
push str.ini_Info.ini
push 0x8c
push str.AutoRunBtnY
push str.Quiz
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [0x68fd90], eax
test byte [0x68fd94], 2
jne 0x4d14d0
or byte [0x68fd94], 2
push str.ini_Info.ini
push 0xb3
push str.AutoRunDlgY
push str.Quiz
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [0x6902d4], eax
mov ecx, 0x6903d0
call fcn.004e82df
mov ebx, dword [sym.imp.graphic.dll_public:_static_int___cdecl_CMyBitmap::GetScreenWidth_void_]
mov edi, eax
push 1
lea eax, [edi + 0x10]
lea ecx, [edi + 4]
push eax
push 0x10
push ecx
call ebx
sub eax, 0x28
lea ecx, [esi + 0xacb1c]
push eax
call sub.MFC42.DLL_CWnd::MoveWindow
lea eax, [edi + 0x10]
push 1
push eax
lea eax, [edi + 4]
push 0x10
push eax
call ebx
sub eax, 0x14
lea ecx, [esi + 0xacbb8]
push eax
call sub.MFC42.DLL_CWnd::MoveWindow
xor ebx, ebx
cmp dword [esi + 0x74598], ebx
je 0x4d1576
lea eax, [esi + 0x7452c]
cmp eax, ebx
je 0x4d1576
cmp dword [eax + 0x20], ebx
je 0x4d1576
lea eax, [ebp - 0x3c]
push eax
push dword [esi + 0x7454c]
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [ebp - 0x3c]
mov ecx, esi
push eax
call sub.MFC42.DLL_CWnd::ScreenToClient
mov eax, dword [ebp - 0x30]
push 1
sub eax, dword [ebp - 0x38]
lea ecx, [esi + 0x7452c]
push eax
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x3c]
push eax
mov eax, dword [0x68fd90]
add eax, edi
push eax
push dword [ebp - 0x3c]
call sub.MFC42.DLL_CWnd::MoveWindow
cmp dword [esi + 0x74258], ebx
je 0x4d15d1
lea eax, [esi + 0x741f8]
cmp eax, ebx
je 0x4d15d1
cmp dword [esi + 0x74218], ebx
je 0x4d15d1
lea eax, [ebp - 0x3c]
push eax
push dword [esi + 0x74218]
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [ebp - 0x3c]
mov ecx, esi
push eax
call sub.MFC42.DLL_CWnd::ScreenToClient
mov eax, dword [ebp - 0x30]
push 1
sub eax, dword [ebp - 0x38]
lea ecx, [esi + 0x741f8]
push eax
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x3c]
push eax
mov eax, dword [0x6902d4]
add eax, edi
push eax
push dword [ebp - 0x3c]
call sub.MFC42.DLL_CWnd::MoveWindow
mov eax, dword [0x6902d4]
lea ecx, [esi + 0x741f8]
add eax, edi
push eax
call fcn.0040dc54
mov ecx, 0x6903d0
call fcn.004e82d8
mov edi, eax
call fcn.00417f4d
test eax, eax
je 0x4d1606
push edi
call fcn.00417f4d
mov ecx, eax
call fcn.004e4057
push edi
call fcn.00541619
mov ecx, eax
call fcn.0051191d
push edi
call fcn.0040311a
mov ecx, eax
call fcn.004d6e7f
jmp case.0x4d2ab4.3015
call dword [sym.imp.GraphicData.dll_GameDataSetQuery]
mov edx, dword [eax]
push 0xc349
mov ecx, eax
call dword [edx + 0x3c]
push eax
push str.BANNED
lea ecx, [esi + 0x74]
jmp 0x4d100a
lea ecx, [esi + 0x14db8]
call fcn.0049e443
jmp case.0x4d2ab4.3015
push dword [ebp + 0x10]
lea ecx, [esi + 0x859c4]
call fcn.00476174
jmp case.0x4d2ab4.3015
lea ecx, [esi + 0x859c4]
call fcn.004760a4
jmp case.0x4d2ab4.3015
xor ebx, ebx
push ebx
push ebx
push 0x43
jmp 0x4cf922
xor ebx, ebx
lea ecx, [esi + 0x859c4]
push ebx
push ebx
call fcn.004759b6
mov dword [esi + 0xaca7c], ebx
or dword [0x67d8b0], 0xffffffff
push ebx
lea ecx, [esi + 0x1c3f4]
jmp 0x4d2c41
push dword [ebp + 0x10]
lea edi, [esi + 0x859c4]
mov ecx, edi
call fcn.00475083
push 5
mov ecx, edi
jmp 0x4d213e
xor ebx, ebx
cmp dword [esi + 0x85a48], ebx
je case.0x4d2ab4.3015
push ebx
lea ecx, [esi + 0x859c4]
jmp 0x4d213e
lea edi, [esi + 0x5f8]
mov ecx, edi
call fcn.004a2ed2
mov ecx, edi
call fcn.004a4062
jmp case.0x4d2ab4.3015
xor ebx, ebx
push ebx
push ebx
push 0x45
jmp 0x4cf922
push dword [ebp + 0x10]
lea ecx, [esi + 0x8ceb0]
call fcn.0041d485
jmp case.0x4d2ab4.3015
push dword [ebp + 0x10]
lea ecx, [esi + 0x7e140]
jmp 0x4d213e
call fcn.004e3fdd
mov ecx, eax
call fcn.004e4052
push 5
push 0x51a
call fcn.0050ef78
pop ecx
jmp 0x4d4858
call dword [sym.imp.GraphicData.dll_GameDataSetQuery]
mov edx, dword [eax]
push 0
push dword [ebp + 0x10]
mov ecx, eax
call dword [edx + 0x3c]
push eax
push 0x42
jmp 0x4cf922
push dword [ebp + 0x10]
lea ecx, [esi + 0x7e6b4]
push eax
call fcn.004e45a5
jmp case.0x4d2ab4.3015
call dword [sym.imp.GraphicData.dll_GameDataSetQuery]
mov edx, dword [eax]
push 0
push 0x2d01
mov ecx, eax
call dword [edx + 0x3c]
push eax
push 0x41
jmp 0x4cf922
call dword [sym.imp.GraphicData.dll_GameDataSetQuery]
mov edx, dword [eax]
push 0
push 0x2d02
jmp 0x4d177e
call dword [sym.imp.GraphicData.dll_GameDataSetQuery]
mov edx, dword [eax]
push 0
push 0x2d03
jmp 0x4d177e
call dword [sym.imp.GraphicData.dll_GameDataSetQuery]
mov edx, dword [eax]
push 0
push 0x2d3e
jmp 0x4d177e
call dword [sym.imp.GraphicData.dll_GameDataSetQuery]
mov edx, dword [eax]
push 0
push 0x2d3f
jmp 0x4d177e
xor ebx, ebx
push ebx
push ebx
push 0x44
jmp 0x4cf922
mov edi, dword [ebp + 0x10]
xor ebx, ebx
cmp edi, ebx
je 0x4d23fd
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 4], 8
call fcn.0051bd44
mov eax, dword [eax + 0x88]
mov ecx, dword [edi]
cmp ecx, eax
jne 0x4d18fb
lea eax, [ebp - 0x374]
push eax
call fcn.0051bdbd
pop ecx
mov ecx, dword [eax]
mov dword [ebp - 0x74], ecx
mov eax, dword [eax + 4]
cmp eax, ebx
mov dword [ebp - 0x70], eax
je 0x4d182f
push 1
add eax, 4
pop ecx
lock xadd dword [eax], ecx
mov eax, dword [ebp - 0x74]
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0xa
call fcn.00403a5b
mov ecx, dword [ebp - 0x70]
mov byte [ebp - 4], 9
cmp ecx, ebx
je 0x4d1855
call fcn.004039fd
mov ecx, dword [ebp - 0x370]
mov byte [ebp - 4], 8
cmp ecx, ebx
je 0x4d1868
call fcn.004039fd
mov ecx, dword [ebp - 0x28]
call fcn.00527540
push dword [edi + 4]
call fcn.00572546
mov ecx, eax
call fcn.00572812
cmp eax, ebx
mov dword [ebp - 0x14], eax
je 0x4d193f
mov ecx, dword [ebp - 0x28]
push eax
call fcn.00527420
call fcn.0043a13b
mov edi, dword [ebp + 0x10]
lea ecx, [ebp - 0x34]
push dword [edi]
push ecx
mov ecx, eax
call fcn.0055333c
mov eax, dword [edi + 4]
xor edx, edx
mov ecx, 0x2710
push 0x64
div ecx
pop ecx
mov byte [ebp - 4], 0x10
push str.null
mov eax, edx
xor edx, edx
div ecx
add eax, 0x3e8
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x14]
lea edi, [eax + 0x1c]
push edi
call fcn.004304f6
pop ecx
test al, al
pop ecx
jne 0x4d19c3
mov ecx, dword [ebp - 0x28]
mov eax, dword [edi]
mov ecx, dword [ecx + 0x378]
cmp ecx, ebx
je 0x4d195f
mov edx, dword [ecx]
push eax
call dword [edx + 0x60]
jmp 0x4d1961
push ebx
lea eax, [ebp - 0x300]
push ecx
push eax
mov ecx, 0x692048
call fcn.0053c058
mov ecx, dword [eax]
add eax, 4
mov dword [ebp - 0x28], ecx
push eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0xb
call fcn.00403a5b
mov ecx, dword [ebp - 0x2fc]
mov byte [ebp - 4], 8
cmp ecx, ebx
je 0x4d1936
call fcn.004039fd
cmp dword [ebp - 0x28], ebx
jne 0x4d1868
push edi
call sub.MFC42.DLL_operatordelete
or dword [ebp - 4], 0xffffffff
pop ecx
mov ecx, dword [ebp - 0x24]
cmp ecx, ebx
je 0x4d23fd
call fcn.004039fd
jmp 0x4d23fd
xor eax, eax
cmp eax, ebx
je 0x4d198f
mov ecx, dword [ebp - 0x34]
cmp ecx, ebx
je 0x4d198f
push dword [ebp - 0x1c]
call fcn.005518c1
test al, al
je 0x4d198f
mov eax, dword [ebp - 0x28]
mov edi, dword [edi]
mov ecx, dword [eax + 0x378]
cmp ecx, ebx
je 0x4d19c3
mov eax, dword [ecx]
push edi
call dword [eax + 0x18]
jmp 0x4d19c3
mov ecx, dword [ebp - 0x28]
mov eax, dword [edi]
mov ecx, dword [ecx + 0x378]
cmp ecx, ebx
je 0x4d19a6
mov edx, dword [ecx]
push eax
call dword [edx + 0x60]
jmp 0x4d19a8
xor eax, eax
cmp eax, ebx
jne 0x4d19c3
mov eax, dword [ebp - 0x28]
mov edi, dword [edi]
mov ecx, dword [eax + 0x378]
cmp ecx, ebx
je 0x4d19c3
mov eax, dword [ecx]
push 1
push edi
call dword [eax + 0x10]
mov eax, dword [ebp - 0x14]
push str.null
lea edi, [eax + 0x34]
push edi
call fcn.004304f6
pop ecx
test al, al
pop ecx
jne 0x4d19e7
mov edi, dword [edi]
mov ecx, dword [ebp - 0x28]
push 0x28
push edi
call fcn.00527712
push dword [ebp + 0x10]
call sub.MFC42.DLL_operatordelete
pop ecx
mov dword [ebp - 4], 8
mov ecx, dword [ebp - 0x30]
cmp ecx, ebx
je 0x4d1a03
call fcn.004039fd
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x24]
jmp 0x4d2018
call fcn.0051bd44
mov ecx, eax
call fcn.00527540
jmp case.0x4d2ab4.3015
cmp dword [esi + 0x24e74], 1
jne case.0x4d2ab4.3015
lea ecx, [esi + 0x24dd0]
call fcn.00439b8a
jmp case.0x4d2ab4.3015
cmp dword [ebp + 0x10], 0x2e
jne case.0x4d2ab4.3015
call fcn.0051bd44
mov eax, dword [eax + 0x120]
cmp eax, 2
jne case.0x4d2ab4.3015
lea ecx, [ebp - 0x860]
call fcn.0054fdfc
mov dword [ebp - 4], 0x13
call fcn.0051bd44
mov ecx, eax
call fcn.005141ed
push 0
push 2
lea ecx, [ebp - 0x860]
call fcn.0054fec8
lea ecx, [ebp - 0x860]
call fcn.005356b9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x860]
jmp 0x4d24b8
xor ebx, ebx
push ebx
push ebx
jmp 0x4d1ab7
push 1
call fcn.0051bd44
mov ecx, eax
call fcn.00548fe6
push eax
push dword [ebp + 0x10]
lea ecx, [esi + 0xa9864]
call fcn.0043b0fc
jmp case.0x4d2ab4.3015
push dword [ebp + 0x10]
push 0
jmp 0x4d29b9
push dword [ebp + 0x10]
push 0
jmp 0x4d29ce
mov eax, dword [ebp + 0x10]
sub eax, 0
je 0x4d1aff
dec eax
jne case.0x4d2ab4.3015
push 2
lea ecx, [esi + 0x91ac0]
call fcn.0048e938
jmp case.0x4d2ab4.3015
push 1
lea ecx, [esi + 0x91ac0]
call fcn.0048e938
push 1
lea ecx, [esi + 0x8dd38]
call fcn.00412dfe
jmp case.0x4d2ab4.3015
lea edi, [esi + 0x8dd38]
mov ecx, edi
call fcn.00412dbc
test al, al
je case.0x4d2ab4.3015
push dword [ebp + 0x10]
mov ecx, edi
call fcn.004133e9
cmp dword [esi + 0x8ddb0], 0
jne case.0x4d2ab4.3015
jmp 0x4d16bb
lea edi, [esi + 0x8dd38]
mov ecx, edi
call fcn.00412dbc
test al, al
je case.0x4d2ab4.3015
push dword [ebp + 0x10]
mov ecx, edi
call fcn.00412fb2
jmp case.0x4d2ab4.3015
cmp dword [esi + 0x658], 0
jne case.0x4d2ab4.3015
lea ecx, [esi + 0x4c8]
call fcn.00456dd0
mov dword [esi + 0x5f4], 0x3f
push 5
lea ecx, [esi + 0x5f8]
jmp 0x4d213e
lea ecx, [esi + 0x4c8]
call fcn.00459265
jmp case.0x4d2ab4.3015
mov ecx, dword [esi + 0xacb10]
push 1
push dword [ebp + 0x10]
mov eax, dword [ecx]
call dword [eax + 0x10]
jmp case.0x4d2ab4.3015
cmp dword [esi + 0x1d5c], 0
je case.0x4d2ab4.3015
lea ecx, [esi + 0x1ce4]
call fcn.004a0367
jmp case.0x4d2ab4.3015
xor ebx, ebx
cmp dword [ebp + 0x10], ebx
je 0x4d1bfb
cmp dword [esi + 0x294c], ebx
jne case.0x4d2ab4.3015
push 5
jmp 0x4d1c08
cmp dword [esi + 0x294c], ebx
je case.0x4d2ab4.3015
push ebx
lea ecx, [esi + 0x28e0]
jmp 0x4d213e
cmp dword [esi + 0x87678], 0
jne case.0x4d2ab4.3015
push 5
lea ecx, [esi + 0x875e8]
jmp 0x4d213e
lea ecx, [esi + 0x5d60c]
call fcn.004b2b55
jmp case.0x4d2ab4.3015
push 1
lea ecx, [esi + 0x5d488]
pop ebx
cmp dword [ebp + 0x10], ebx
sete al
push eax
call fcn.0042d5c9
sub ebx, dword [ebp + 0x10]
lea edi, [esi + 0x1c3f4]
mov ecx, edi
push ebx
call fcn.004b24fa
push ebx
mov ecx, edi
call fcn.004b2507
jmp case.0x4d2ab4.3015
lea ecx, [esi + 0x5d488]
call fcn.0042d37c
jmp 0x4d1ea9
lea ecx, [esi + 0x1c164]
call fcn.00468253
jmp case.0x4d2ab4.3015
lea eax, [ebp - 0x34]
lea ecx, [esi + 0x1c3f4]
push eax
call fcn.004b23c1
push 0xc
call sub.MFC42.DLL_operatornew
xor ebx, ebx
pop ecx
cmp eax, ebx
je 0x4d1cb7
mov dword [eax], ebx
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
jmp 0x4d1cb9
xor eax, eax
mov ecx, dword [ebp - 0x34]
push eax
mov dword [eax], ecx
mov ecx, dword [ebp - 0x30]
mov dword [eax + 4], ecx
mov ecx, dword [ebp + 0x10]
mov dword [eax + 8], ecx
push 0x4c3
jmp 0x4d1736
cmp dword [esi + 0xacaa0], 0xd
jne case.0x4d2ab4.3015
lea edi, [esi + 0xaca7c]
xor ebx, ebx
cmp dword [edi], ebx
je case.0x4d2ab4.3015
push ebx
lea ecx, [esi + 0x1c3f4]
call fcn.004b23b7
mov dword [edi], ebx
mov dword [esi + 0xacaa0], 0x4e
mov dword [esi + 0xacaf8], ebx
jmp case.0x4d2ab4.3015
mov eax, dword [ebp + 0x10]
lea ecx, [esi + 0x1c1d0]
mov dword [ebp - 0xcc], eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.004ddf1f
jmp case.0x4d2ab4.3015
mov eax, dword [ebp + 0x10]
test eax, eax
je 0x4d1d5d
mov dword [ebp - 0xb0], eax
lea eax, [ebp - 0xb0]
push eax
lea ecx, [esi + 0x1c1d0]
call fcn.004dd7ce
jmp case.0x4d2ab4.3015
lea ecx, [esi + 0x1c1d0]
call fcn.00459891
jmp case.0x4d2ab4.3015
call fcn.0051bd44
mov ecx, eax
call fcn.0052a442
cmp eax, 3
jl case.0x4d2ab4.3015
push 1
jmp 0x4cff47
mov edi, dword [ebp + 0x10]
xor ebx, ebx
cmp edi, ebx
je 0x4d1e3d
push 1
lea eax, [ebp - 0x28]
push dword [edi + 8]
push eax
call fcn.0051bd44
mov ecx, eax
call fcn.0052d5a5
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 4], 0x20
cmp ecx, ebx
jne 0x4d1dc5
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x24]
jmp 0x4d2018
call fcn.00549b24
push eax
call fcn.0051bd44
mov ecx, eax
call fcn.0052d49a
cmp eax, 0xffffffff
mov dword [ebp - 0x14], eax
je 0x4d1db9
mov ecx, dword [ebp - 0x28]
push 1
push ebx
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x1c], eax
call fcn.00530893
push eax
push ebx
push dword [ebp - 0x14]
lea ecx, [esi + 0x1c3f4]
push dword [ebp - 0x1c]
push dword [edi]
push dword [edi + 4]
call fcn.004b1e59
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x14], eax
call fcn.00549b24
push eax
lea ecx, [esi + 0x1c3f4]
push dword [ebp - 0x14]
call fcn.004b25e0
mov ecx, dword [ebp - 0x24]
or dword [ebp - 4], 0xffffffff
cmp ecx, ebx
je 0x4d1e32
call fcn.004039fd
push edi
call sub.MFC42.DLL_operatordelete
or dword [ebp - 4], 0xffffffff
pop ecx
push ebx
push 0x3eb
jmp 0x4d1736
xor ebx, ebx
cmp dword [ebp + 0x10], ebx
je 0x4d1e60
push ebx
lea ecx, [esi + 0x8ceb0]
push dword [ebp + 0x10]
push 0x39
call fcn.0041bcf4
push 1
lea ecx, [esi + 0x5d488]
call fcn.0042d5c9
lea edi, [esi + 0x1c3f4]
push ebx
mov ecx, edi
call fcn.004b24fa
push ebx
mov ecx, edi
call fcn.004b2507
jmp 0x4d326b
lea ecx, [esi + 0x5d488]
call fcn.0042d37c
xor ebx, ebx
cmp dword [esi + 0x5d4ec], ebx
je case.0x4d2ab4.3015
cmp eax, ebx
je case.0x4d2ab4.3015
push eax
lea ecx, [esi + 0x1c164]
call fcn.004681d1
jmp case.0x4d2ab4.3015
lea ebx, [esi + 0x5d488]
mov ecx, ebx
call fcn.0042e6d6
test al, al
je 0x4d2030
push 1
lea ecx, [esi + 0x5d488]
call fcn.005319ab
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0051bd44
mov ecx, eax
call fcn.0052d5a5
mov al, byte [0x68f370]
push 7
mov byte [ebp - 0x4c], al
pop ecx
xor eax, eax
lea edi, [ebp - 0x4b]
rep stosd dword es:[edi], eax
mov ecx, dword [ebp - 0x20]
xor ebx, ebx
stosw word es:[edi], ax
cmp ecx, ebx
mov dword [ebp - 4], 0x25
stosb byte es:[edi], al
jne 0x4d1f1e
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1c]
jmp 0x4d194d
push 0x20
call fcn.005301e6
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.00595f89
mov edi, dword [sym.imp.GraphicData.dll_GameDataSetQuery]
add esp, 0xc
call edi
mov edx, dword [eax]
lea ecx, [ebp - 0x4c]
push ecx
push 0x275c
mov ecx, eax
call dword [edx + 0x3c]
push eax
call sub.MSVCRT.dll_strcmp
pop ecx
test eax, eax
pop ecx
je 0x4d1f97
mov eax, dword [ebp - 0x20]
push 0xa
xor edx, edx
pop ecx
mov eax, dword [eax + 0xc]
div ecx
cmp eax, 0x11d28
je 0x4d1f97
call edi
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x14], eax
call fcn.005301e6
mov ecx, dword [ebp - 0x14]
push eax
push 0x2bdf
mov eax, dword [ecx]
call dword [eax + 0x3c]
push eax
lea eax, [ebp - 0x4c]
push 0x20
push eax
call dword [sym.imp.MSVCRT.dll__snprintf]
add esp, 0x10
jmp 0x4d1f9a
mov byte [ebp - 0x4c], bl
mov eax, dword [ebp - 0x20]
mov cl, byte [eax + 0x4b]
mov eax, dword [eax + 0x10]
mov byte [ebp - 0x29], cl
mov dword [ebp - 0x14], eax
call edi
movzx ecx, byte [ebp - 0x29]
mov edx, dword [eax]
push ecx
lea ecx, [ebp - 0x4c]
push ecx
mov ecx, eax
push dword [ebp - 0x14]
push 0x2bcd
call dword [edx + 0x3c]
push eax
lea eax, [ebp - 0x1d8]
push 0x100
push eax
call dword [sym.imp.MSVCRT.dll__snprintf]
add esp, 0x18
lea eax, [ebp - 0x1d8]
lea ecx, [esi + 0x8ceb0]
push ebx
push eax
push 0x3a
call fcn.0041bcf4
push 1
lea ecx, [esi + 0x5d488]
call fcn.0042d5c9
lea edi, [esi + 0x1c3f4]
push ebx
mov ecx, edi
call fcn.004b24fa
push ebx
mov ecx, edi
call fcn.004b2507
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1c]
cmp ecx, ebx
je case.0x4d2ab4.3015
call fcn.004039fd
jmp case.0x4d2ab4.3015
lea ebx, [esi + 0x5d488]
push 0
mov ecx, ebx
call fcn.0042d5c9
lea edi, [esi + 0x1c3f4]
push 1
mov ecx, edi
call fcn.004b24fa
push 1
mov ecx, edi
call fcn.004b2507
mov ecx, ebx
call fcn.005319ab
push eax
mov ecx, ebx
call fcn.0042dbb5
jmp case.0x4d2ab4.3015
xor ebx, ebx
push ebx
push ebx
push 0x3b
jmp 0x4cf922
xor ebx, ebx
push ebx
push ebx
push 0x3c
jmp 0x4cf922
push dword [ebp + 0x10]
call fcn.0051bd44
mov ecx, eax
call fcn.0052fc7c
xor ebx, ebx
mov dword [ebp - 0x14], eax
cmp eax, ebx
je case.0x4d2ab4.3015
mov al, byte [0x68f370]
push 0x3f
mov byte [ebp - 0x1d8], al
pop ecx
xor eax, eax
lea edi, [ebp - 0x1d7]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0xc]
cmp eax, ebx
je case.0x4d2ab4.3015
mov edi, dword [eax + 0x10]
call dword [sym.imp.GraphicData.dll_GameDataSetQuery]
mov ecx, dword [ebp - 0x14]
mov edx, dword [eax]
push edi
push dword [ecx + 8]
mov ecx, eax
push 0x334c9
call dword [edx + 0x3c]
push eax
lea eax, [ebp - 0x1d8]
push 0x100
push eax
call dword [sym.imp.MSVCRT.dll__snprintf]
add esp, 0x14
lea eax, [ebp - 0x1d8]
mov byte [ebp - 0xd9], bl
push dword [ebp + 0x10]
push eax
push 0x3d
jmp 0x4cf922
push dword [ebp + 0x10]
lea ecx, [esi + 0x3ec0c]
call fcn.0047c231
jmp case.0x4d2ab4.3015
xor ebx, ebx
cmp dword [esi + 0x3ecec], ebx
je 0x4d212f
push ebx
lea ecx, [esi + 0x3ec0c]
jmp 0x4d213e
cmp dword [esi + 0x40f78], ebx
je 0x4d2148
push ebx
lea ecx, [esi + 0x40ee4]
call sub.MFC42.DLL_CWnd::ShowWindow
jmp case.0x4d2ab4.3015
call fcn.0051bd44
mov ecx, eax
call fcn.0052fca0
test eax, eax
jle 0x4d216a
push 1
lea ecx, [esi + 0x3ec0c]
call fcn.0047c8be
jmp case.0x4d2ab4.3015
call fcn.0051bd44
mov ecx, eax
call fcn.0052fce1
test eax, eax
jle case.0x4d2ab4.3015
push 1
lea ecx, [esi + 0x40ee4]
call fcn.0047e7b0
jmp case.0x4d2ab4.3015
xor ebx, ebx
cmp dword [esi + 0x3e0], ebx
je case.0x4d2ab4.3015
lea eax, [ebp - 0x67]
lea ecx, [ebp - 0xa0]
push eax
push str.STR_LOGIN_GAME_SERVER
mov dword [ebp - 4], 0x2a
call fcn.00402bfa
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x2b
push eax
push ebx
call fcn.005963e9
pop ecx
mov ecx, eax
call fcn.0059665c
push eax
push str.LOADING_TRACE
lea ecx, [esi + 0x74]
call fcn.0044b3be
mov eax, dword [ebp - 0x98]
mov byte [ebp - 4], 0x2c
sub eax, dword [ebp - 0xa0]
lea ecx, [ebp - 0x98]
push eax
push dword [ebp - 0xa0]
jmp 0x4d2d7d
xor ebx, ebx
cmp dword [esi + 0x3ecec], ebx
jne 0x4d25f6
push 1
jmp 0x4d25eb
xor ebx, ebx
cmp dword [esi + 0x40f78], ebx
jne 0x4d2620
push 1
jmp 0x4d2615
xor ebx, ebx
cmp dword [esi + 0x3ecec], ebx
je 0x4d25f6
lea ecx, [esi + 0x3ec0c]
call fcn.0047c96d
jmp 0x4d25f6
push 0x138a
lea ecx, [esi + 0x31078]
call fcn.00495671
call fcn.0051bd44
mov ecx, eax
call fcn.00550356
push dword [eax + 0x2c]
add eax, 0x2c
lea ecx, [esi + 0x31e8c]
call sub.MFC42.DLL_CWnd::SetWindowTextA
lea ecx, [esi + 0x31dcc]
call sub.MFC42.DLL_CWnd::SetFocus
push 0
lea ecx, [esi + 0x6cfa0]
jmp 0x4d213e
lea edi, [esi + 0x6cfa0]
push 5
mov ecx, edi
call sub.MFC42.DLL_CWnd::ShowWindow
mov ecx, edi
call fcn.0043f061
jmp case.0x4d2ab4.3015
xor ebx, ebx
push ebx
push ebx
push ebx
push ebx
push 0x2d
call fcn.00541619
mov ecx, eax
call fcn.005404df
push 0x4e3
push 0x2d
call fcn.00541619
mov ecx, eax
call fcn.005404b1
jmp case.0x4d2ab4.3015
xor ebx, ebx
push 1
mov dword [ebp - 0x24], ebx
call fcn.0051bd44
mov ecx, eax
call fcn.0052df52
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0051bd44
mov ecx, eax
call fcn.0052d5a5
mov eax, dword [ebp - 0x20]
mov dword [ebp - 4], 0x37
cmp eax, ebx
je 0x4d236a
mov eax, dword [eax + 0xc]
mov edi, 0x3e8
xor edx, edx
mov ecx, edi
mov dword [ebp - 0x14], eax
div ecx
sub eax, 0x2ef
je 0x4d2344
dec eax
je 0x4d233b
dec eax
je 0x4d2332
dec eax
jne 0x4d2347
mov dword [ebp - 0x24], 3
jmp 0x4d2347
mov dword [ebp - 0x24], 2
jmp 0x4d2347
mov dword [ebp - 0x24], 1
jmp 0x4d2347
mov dword [ebp - 0x24], ebx
mov ecx, dword [ebp - 0x20]
call fcn.00549b24
push eax
mov eax, dword [ebp - 0x14]
xor edx, edx
push dword [ebp - 0x24]
div edi
push edx
push dword [ebp + 0x10]
call fcn.0051bd44
mov ecx, eax
call fcn.0055041f
push ebx
call fcn.0051bd44
mov ecx, eax
call fcn.0052df45
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1c]
jmp 0x4d2018
push dword [ebp + 0x10]
lea ecx, [esi + 0x24dd0]
call fcn.004392ad
cmp dword [ebp + 0x10], 0
jmp 0x4d326e
xor ebx, ebx
cmp byte [0x6902e9], bl
je case.0x4d2ab4.3015
mov dword [ebp - 0x24], ebx
push dword [ebp - 0x24]
call fcn.0051bd44
mov ecx, eax
call fcn.00514175
test al, al
jne 0x4d23c9
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 4
jl 0x4d23ab
jmp 0x4d23e2
push dword [ebp - 0x24]
lea edi, [esi + 0x24dd0]
mov ecx, edi
call fcn.00438df2
push 5
mov ecx, edi
call sub.MFC42.DLL_CWnd::ShowWindow
mov byte [0x6902e9], bl
jmp case.0x4d2ab4.3015
call fcn.0051bd44
mov eax, dword [eax + 0x120]
cmp eax, 2
je 0x4d2405
or eax, 0xffffffff
jmp 0x4d4992
lea ecx, [ebp - 0x860]
call fcn.0054fdfc
mov dword [ebp - 4], 0x3c
call fcn.0051bd44
mov ecx, eax
call fcn.005141ed
xor ebx, ebx
lea ecx, [ebp - 0x860]
push ebx
push 2
call fcn.0054fec8
lea ecx, [ebp - 0x860]
call fcn.005356b9
mov byte [0x6902e9], 1
call fcn.0051bd44
mov ecx, eax
call fcn.00550356
mov ecx, dword [eax + 0x10]
mov edx, dword [eax + 0x20]
add ecx, dword [eax + 0xc]
add edx, dword [eax + 0x1c]
add ecx, dword [eax + 8]
add edx, dword [eax + 0x18]
add ecx, dword [eax + 4]
add edx, dword [eax + 0x14]
cmp ecx, ebx
jne 0x4d2471
cmp edx, ebx
je 0x4d24ae
push 0x64
push ebx
push ebx
push ebx
push ebx
push str.sound_flower2.wav
call dword [sym.imp.NDSound.dll__DXPlaySound_24]
mov eax, dword [esi + 0xac9e4]
cmp eax, ebx
jl 0x4d24ae
cmp eax, 1
jle 0x4d249d
cmp eax, 3
jg 0x4d24ae
push str.red_flower_full
jmp 0x4d24a2
push str.red_flower_small
push 0x4f7
call fcn.0050ef78
pop ecx
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x860]
call fcn.0054fe7a
jmp case.0x4d2ab4.3015
call fcn.0051bd44
mov ecx, eax
call fcn.00550356
mov ecx, dword [eax + 0x1c]
mov edx, dword [eax + 0x10]
add ecx, dword [eax + 0x20]
add edx, dword [eax + 8]
push 0x3f
mov dword [ebp - 0x1c], eax
add ecx, dword [eax + 0x18]
add edx, dword [eax + 4]
xor ebx, ebx
lea edi, [ebp - 0x1d7]
add ecx, dword [eax + 0x14]
add edx, dword [eax + 0xc]
xor eax, eax
mov byte [ebp - 0x1d8], bl
mov dword [ebp - 0x14], ecx
pop ecx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
cmp edx, ebx
stosb byte es:[edi], al
jne 0x4d251a
xor eax, eax
cmp dword [ebp - 0x14], ebx
setne al
add eax, 0x280b
mov dword [ebp - 0x14], eax
jmp 0x4d2521
mov dword [ebp - 0x14], 0x280d
mov edi, dword [sym.imp.GraphicData.dll_GameDataSetQuery]
call edi
mov ebx, eax
call edi
push dword [ebp - 0x14]
mov edi, eax
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x3c]
push eax
mov eax, dword [ebp - 0x1c]
mov ecx, edi
push dword [eax + 0x20]
push dword [eax + 0x10]
push dword [eax + 0x1c]
push dword [eax + 0xc]
push dword [eax + 0x18]
push dword [eax + 8]
push dword [eax + 0x14]
push dword [eax + 4]
mov eax, dword [edi]
push 0x280a
call dword [eax + 0x3c]
push eax
lea eax, [ebp - 0x1d8]
push 0xff
push eax
call dword [sym.imp.MSVCRT.dll__snprintf]
lea eax, [ebp - 0x1d8]
push eax
lea eax, [ebp - 0x1e8]
push eax
call fcn.00595ffb
add esp, 0x38
push dword [eax]
mov dword [ebp - 4], 0x3d
push 0x2e
call fcn.00541619
mov ecx, eax
call fcn.005412c1
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 4], 0x3e
sub eax, dword [ebp - 0x1e8]
lea ecx, [ebp - 0x1e0]
push eax
push dword [ebp - 0x1e8]
jmp 0x4d2d7d
push 0x2d
call fcn.00541619
mov ecx, eax
call fcn.005406ec
jmp case.0x4d2ab4.3015
mov dword [esi + 0xacaf8], 0x16
jmp case.0x4d2ab4.3015
xor ebx, ebx
push ebx
lea ecx, [esi + 0x3ec0c]
call fcn.0047c8be
cmp dword [esi + 0x40f78], ebx
je case.0x4d2ab4.3015
lea ecx, [esi + 0x40ee4]
call fcn.0047c96d
jmp case.0x4d2ab4.3015
xor ebx, ebx
push ebx
lea ecx, [esi + 0x40ee4]
call fcn.0047e7b0
cmp dword [esi + 0x3ecec], ebx
je case.0x4d2ab4.3015
lea ecx, [esi + 0x3ec0c]
call fcn.0047c96d
jmp case.0x4d2ab4.3015
xor ebx, ebx
cmp dword [esi + 0x3ecec], ebx
je 0x4d2652
push ebx
lea ecx, [esi + 0x3ec0c]
call sub.MFC42.DLL_CWnd::ShowWindow
cmp dword [esi + 0x40f78], ebx
je case.0x4d2ab4.3015
jmp 0x4d2137
push 1
lea ecx, [esi + 0x4c8]
call fcn.00456aad
jmp case.0x4d2ab4.3015
xor ebx, ebx
push ebx
push ebx
push 0x3e
jmp 0x4cf922
cmp dword [esi + 0x3ecec], 0
je case.0x4d2ab4.3015
lea ecx, [esi + 0x3ec0c]
call fcn.0047c2c0
jmp case.0x4d2ab4.3015
cmp dword [esi + 0x40f78], 0
je case.0x4d2ab4.3015
lea ecx, [esi + 0x40ee4]
call fcn.0047e367
jmp case.0x4d2ab4.3015
xor ebx, ebx
cmp dword [ebp + 0x10], ebx
je 0x4d26e8
cmp dword [ebp + 0x10], 0xff
je 0x4d26d3
push dword [ebp + 0x10]
push 1
push 2
jmp 0x4d26d8
push ebx
push 2
push 3
lea ecx, [esi + 0xa7ff0]
call fcn.0049de5b
jmp case.0x4d2ab4.3015
push ebx
push ebx
push 1
jmp 0x4d26d8
xor ebx, ebx
push ebx
push ebx
push 0x35
jmp 0x4cf922
lea edi, [esi + 0xa7ff0]
mov ecx, edi
call fcn.0045f585
cmp eax, 2
jl case.0x4d2ab4.3015
cmp eax, 3
jg case.0x4d2ab4.3015
mov ecx, edi
call fcn.0049dfb4
xor ebx, ebx
push ebx
push ebx
push 0x36
jmp 0x4cf922
lea ecx, [esi + 0x82e70]
call fcn.004a1aa6
push 0x2c
push 3
lea ecx, [esi + 0x4c8]
call fcn.004577b8
jmp case.0x4d2ab4.3015
cmp dword [esi + 0xaa988], 0
jne case.0x4d2ab4.3015
call fcn.0051bd44
mov ecx, eax
call fcn.0052a442
cmp eax, 1
jl case.0x4d2ab4.3015
push 1
lea ecx, [esi + 0x834c8]
call fcn.004a8b08
push 0xc
pop edi
push edi
call fcn.0051bd44
mov ecx, eax
call fcn.0056ba71
mov dword [esi + 0xacaec], edi
jmp case.0x4d2ab4.3015
push 1
call fcn.0051bd44
mov ecx, eax
call fcn.0051cdea
mov ecx, 0x6903d0
call fcn.004e8400
cmp eax, 0x40c
jne case.0x4d2ab4.3015
push 7
xor ebx, ebx
pop ecx
xor eax, eax
lea edi, [ebp - 0x93]
mov byte [ebp - 0x94], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x4b]
mov byte [ebp - 0x4c], bl
push 0xf
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
pop ecx
xor eax, eax
lea edi, [ebp - 0x233]
mov byte [ebp - 0x234], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
push 0x1f
xor eax, eax
pop ecx
lea edi, [ebp - 0x157]
mov byte [ebp - 0x158], bl
push 0xa
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x234]
push eax
call fcn.0051bd44
mov ecx, eax
call fcn.004d50f9
push eax
call fcn.005952ff
pop ecx
push ebx
push eax
call dword [sym.imp.MSVCRT.dll__i64toa]
mov edi, dword [sym.imp.MSVCRT.dll__snprintf]
add esp, 0x10
lea eax, [ebp - 0x234]
push eax
push 0x691ed0
push str.Log__s__s_Setup.ini
lea eax, [ebp - 0x158]
push 0x7f
push eax
call edi
add esp, 0x14
lea eax, [ebp - 0x158]
lea ecx, [esi + 0xacabc]
mov byte [ebp - 0xd9], bl
push eax
call fcn.004dd2ae
lea ecx, [esi + 0xacabc]
call fcn.005251a8
push eax
lea eax, [ebp - 0x94]
push 0x20
push eax
push 0x68f370
push str.ShowEffect
push str.HidePerson
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x14]
mov byte [ebp - 0x75], bl
push eax
call dword [sym.imp.MSVCRT.dll_time]
lea eax, [ebp - 0x14]
push eax
call dword [sym.imp.MSVCRT.dll_localtime]
pop ecx
pop ecx
push dword [eax + 0xc]
mov ecx, dword [eax + 0x10]
mov eax, dword [eax + 0x14]
inc ecx
add eax, 0x76c
push ecx
push eax
push str._d__d__d
lea eax, [ebp - 0x4c]
push 0x1f
push eax
call edi
lea eax, [ebp - 0x4c]
mov byte [ebp - 0x2d], bl
push eax
lea eax, [ebp - 0x94]
push eax
call sub.MSVCRT.dll_strcmp
add esp, 0x20
test eax, eax
je case.0x4d2ab4.3015
push 2
call fcn.0051bd44
mov ecx, eax
call fcn.0051cf87
lea ecx, [ebp - 0x60]
call fcn.004c3c91
push eax
push str.STR_TAB_DOWN_TIP
lea ecx, [ebp - 0x38c]
mov dword [ebp - 4], 0x5f
call fcn.00402bfa
push ebx
push ebx
push 0xff0000
lea eax, [ebp - 0x38c]
push 0x7d5
push eax
push ebx
mov byte [ebp - 4], 0x60
call fcn.005963e9
pop ecx
mov ecx, eax
call fcn.0059665c
push eax
call fcn.00449993
mov ecx, eax
call fcn.004d9a57
lea ecx, [ebp - 0x38c]
mov byte [ebp - 4], 0x5f
call fcn.00402855
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x60]
call fcn.00564a31
call fcn.0051bd44
mov ecx, eax
call fcn.0051cdf9
jmp case.0x4d2ab4.3015
xor ebx, ebx
push ebx
push ebx
push 2
jmp 0x4d2997
xor ebx, ebx
push ebx
push ebx
push 3
jmp 0x4d2997
xor ebx, ebx
push ebx
push ebx
push 4
jmp 0x4d2997
xor ebx, ebx
push ebx
push ebx
push 5
lea ecx, [esi + 0xa9de8]
call fcn.0041e345
jmp case.0x4d2ab4.3015
lea ecx, [esi + 0x74]
call fcn.0044ca45
jmp case.0x4d2ab4.3015
push dword [ebp + 0x10]
push 1
lea ecx, [esi + 0x91ac0]
call fcn.0048f5eb
jmp case.0x4d2ab4.3015
push dword [ebp + 0x10]
push 1
lea ecx, [esi + 0x91ac0]
call fcn.0048ebe9
jmp case.0x4d2ab4.3015
call fcn.004d4ff3
test eax, eax
jne case.0x4d2ab4.3015
mov ecx, dword [0x68fb6c]
call fcn.004011ff
jmp case.0x4d2ab4.3015
push dword [ebp + 0x10]
call fcn.0040311a
mov ecx, eax
call fcn.004db556
test eax, eax
je case.0x4d2ab4.3015
push dword [ebp + 0x10]
call fcn.0040311a
mov ecx, eax
call fcn.004db556
push eax
lea ecx, [esi + 0x31e8c]
call sub.MFC42.DLL_CWnd::SetWindowTextA
push dword [ebp + 0x10]
xor ebx, ebx
call fcn.0040311a
mov ecx, eax
call fcn.004db86a
cmp eax, ebx
je case.0x4d2ab4.3015
mov eax, dword [eax + 8]
add eax, 0xfffff830
cmp eax, 0x15
ja case.0x4d2a5a.2002
movzx eax, byte [eax + 0x4d4e5b]
jmp dword [eax*4 + 0x4d4e37]
mov ebx, 0x138a
jmp case.0x4d2a5a.2002
mov ebx, 0x138b
jmp case.0x4d2a5a.2002
mov ebx, 0x138c
jmp case.0x4d2a5a.2002
mov ebx, 0x138d
jmp case.0x4d2a5a.2002
mov ebx, 0x138e
jmp case.0x4d2a5a.2002
mov ebx, 0x1389
jmp case.0x4d2a5a.2002
mov ebx, 0x1390
jmp case.0x4d2a5a.2002
mov ebx, 0x1391
push ebx
jmp 0x4d06ef
push 0x7a
add eax, 0xfffff443
pop edi
cmp eax, edi
ja case.0x4d2ab4.3015
movzx eax, byte [eax + 0x4d4f6d]
jmp dword [eax*4 + 0x4d4e71]
xor ebx, ebx
push ebx
push ebx
push 0x46
jmp 0x4cf922
lea ecx, [esi + 0xab358]
call fcn.00447f54
jmp case.0x4d2ab4.3015
mov edi, dword [ebp + 0x10]
xor ebx, ebx
cmp edi, ebx
je case.0x4d2ab4.3015
cmp dword [esi + 0x3e0], ebx
je 0x4d2afc
lea eax, [edi + 0x40]
cmp eax, ebx
je 0x4d2afc
push eax
push edi
lea ecx, [esi + 0x74]
call fcn.0044b3be
push edi
jmp 0x4d08c4
xor ebx, ebx
cmp dword [ebp + 0x10], ebx
je case.0x4d2ab4.3015
cmp dword [esi + 0x3e0], ebx
je 0x4d08c1
push dword [ebp + 0x10]
lea ecx, [esi + 0x74]
call fcn.0044d583
jmp 0x4d08c1
mov edi, 0x691f98
mov ecx, edi
call fcn.00551871
cmp eax, 3
jne case.0x4d2ab4.3015
mov ecx, edi
call fcn.005353c9
push 0
mov ecx, edi
call fcn.00535568
mov dword [0x681578], 0x3e8
jmp case.0x4d2ab4.3015
cmp dword [esi + 0x3e0], 0
je case.0x4d2ab4.3015
push dword [ebp + 0x10]
push 1
jmp 0x4d2b82
xor ebx, ebx
cmp dword [esi + 0x3e0], ebx
je case.0x4d2ab4.3015
push 0xffffffffffffffff
push ebx
lea ecx, [esi + 0x74]
call fcn.0044d3d8
jmp case.0x4d2ab4.3015
cmp dword [esi + 0x3e0], 0
je case.0x4d2ab4.3015
lea ecx, [esi + 0x74]
call fcn.0044cca3
jmp case.0x4d2ab4.3015
cmp dword [esi + 0x3e0], 0
je case.0x4d2ab4.3015
lea ecx, [esi + 0x74]
call fcn.0044b060
jmp case.0x4d2ab4.3015
cmp dword [esi + 0x86418], 0
jne case.0x4d2ab4.3015
push 5
lea ecx, [esi + 0x86394]
jmp 0x4d213e
xor ebx, ebx
push ebx
push 0x4c7
mov dword [esi + 0xaca7c], ebx
call fcn.0050ef78
push ebx
push 0x3eb
call fcn.0050ef78
add esp, 0x10
lea ecx, [esi + 0x8a44c]
push ebx
call fcn.004b23b7
push ebx
lea ecx, [esi + 0x1c3f4]
call fcn.004b23b7
push ebx
lea ecx, [esi + 0x21408]
call fcn.004b23b7
push ebx
lea ecx, [esi + 0x35118]
call fcn.004b23b7
push ebx
lea ecx, [esi + 0x83a00]
call fcn.004b23b7
push ebx
lea ecx, [esi + 0x2f018]
call fcn.004b23b7
jmp case.0x4d2ab4.3015
lea edi, [esi + 0x86394]
mov ecx, edi
call fcn.00417d94
push eax
mov ecx, edi
call fcn.00417d98
jmp case.0x4d2ab4.3015
cmp dword [esi + 0x24e74], 0
je case.0x4d2ab4.3015
push dword [ebp + 0x10]
lea ecx, [esi + 0x24dd0]
call fcn.00439f57
jmp case.0x4d2ab4.3015
cmp dword [esi + 0x24e74], 0
je case.0x4d2ab4.3015
lea ecx, [esi + 0x24dd0]
call fcn.00439f40
jmp case.0x4d2ab4.3015
xor ebx, ebx
cmp dword [esi + 0x393c4], ebx
jne 0x4d2cfb
call fcn.0051bd44
mov ecx, eax
call fcn.00517f24
test al, al
je 0x4d2cfb
lea ecx, [ebp - 0x860]
call fcn.00541f6c
push ebx
push 0x1d
lea ecx, [ebp - 0x860]
mov dword [ebp - 4], 0x26
call fcn.00542417
lea ecx, [ebp - 0x860]
call fcn.005356b9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x860]
call fcn.00542dee
jmp case.0x4d2ab4.3015
lea ecx, [esi + 0x4c8]
call fcn.00457a6b
jmp case.0x4d2ab4.3015
lea ecx, [esi + 0x4c8]
call fcn.00457b0b
jmp case.0x4d2ab4.3015
lea eax, [ebp - 0x6b]
lea ecx, [ebp - 0xd8]
push eax
push str.STR_NOT_IN_CERTAIN_MAP
mov dword [ebp - 4], 0x27
call fcn.00402bfa
xor ebx, ebx
lea eax, [ebp - 0xd8]
push ebx
push eax
push ebx
mov byte [ebp - 4], 0x28
call fcn.005963e9
pop ecx
mov ecx, eax
call fcn.0059665c
push eax
push 0x4d
lea ecx, [esi + 0x8ceb0]
call fcn.0041bcf4
mov eax, dword [ebp - 0xd0]
mov byte [ebp - 4], 0x29
sub eax, dword [ebp - 0xd8]
lea ecx, [ebp - 0xd0]
push eax
push dword [ebp - 0xd8]
call fcn.00402ba8
jmp 0x4d08ca
push 1
jmp 0x4d2ece
xor ebx, ebx
cmp dword [ebp + 0x10], ebx
je case.0x4d2ab4.3015
call fcn.0051bd44
cmp dword [eax + 0x734], 0x32
jae 0x4d2e32
lea eax, [ebp - 0x69]
lea ecx, [ebp - 0xc8]
push eax
push str.STR_LEAVEWORD_FAILED
mov dword [ebp - 4], 0x2d
call fcn.00402bfa
mov byte [ebp - 4], 0x2e
call fcn.0040311a
push ebx
mov edi, eax
push ebx
push 0xff0000
lea eax, [ebp - 0xc8]
push 0x7d5
push eax
push ebx
call fcn.005963e9
pop ecx
mov ecx, eax
call fcn.0059665c
push eax
mov ecx, edi
call fcn.004d9a57
mov eax, dword [ebp - 0xc0]
lea ecx, [ebp - 0xc0]
sub eax, dword [ebp - 0xc8]
mov byte [ebp - 4], 0x2f
push eax
push dword [ebp - 0xc8]
call fcn.00402ba8
or dword [ebp - 4], 0xffffffff
push ebx
call fcn.0051bd44
mov ecx, eax
call fcn.0051e0f9
jmp 0x4d08c1
call fcn.0051bd44
mov ecx, eax
call fcn.0051e331
push eax
push dword [ebp + 0x10]
call fcn.0051bd44
mov ecx, eax
call fcn.005548ef
jmp 0x4d08c1
xor ebx, ebx
cmp dword [ebp + 0x10], ebx
je case.0x4d2ab4.3015
push ebx
push dword [ebp + 0x10]
push 0x48
lea ecx, [esi + 0x8ceb0]
call fcn.0041bcf4
jmp 0x4d08c1
cmp dword [ebp + 0x10], 0
je case.0x4d2ab4.3015
lea ecx, [ebp - 0x860]
call fcn.00572201
push dword [ebp + 0x10]
lea ecx, [ebp - 0x860]
mov dword [ebp - 4], 0x34
push 4
call fcn.005722e8
test al, al
je 0x4d2eaf
lea ecx, [ebp - 0x860]
call fcn.005356b9
push dword [ebp + 0x10]
call sub.MFC42.DLL_operatordelete
or dword [ebp - 4], 0xffffffff
pop ecx
lea ecx, [ebp - 0x860]
call fcn.0057227f
jmp case.0x4d2ab4.3015
push 0
call fcn.0051bd44
mov ecx, eax
call fcn.0051e0f9
jmp case.0x4d2ab4.3015
call fcn.0051bd44
mov ecx, eax
call fcn.0051e2f6
test al, al
je case.0x4d2ab4.3015
push dword [ebp + 0x10]
call fcn.0051bd44
mov ecx, eax
call fcn.0051e2e9
cmp dword [ebp + 0x10], 1
jne 0x4d2f16
push 1
call fcn.0051bd44
mov ecx, eax
call fcn.0051e0f9
push 0
call fcn.0051bd44
mov ecx, eax
call fcn.0051e2fd
jmp case.0x4d2ab4.3015
mov edi, dword [ebp + 0x10]
xor ebx, ebx
cmp edi, ebx
je case.0x4d2ab4.3015
mov eax, dword [edi]
sub eax, 0x20
je 0x4d2f7f
dec eax
je 0x4d2f63
dec eax
jne 0x4d2afc
cmp dword [esi + 0x48648], ebx
jne 0x4d2afc
lea ecx, [esi + 0x4c8]
call fcn.00458ccd
jmp 0x4d2afc
cmp dword [esi + 0x41d90], ebx
jne 0x4d2afc
lea ecx, [esi + 0x4c8]
call fcn.00458be0
jmp 0x4d2afc
cmp dword [esi + 0x32448], ebx
jne 0x4d2afc
cmp dword [esi + 0x347a4], ebx
jne 0x4d2afc
push dword [edi + 4]
lea ecx, [esi + 0x4c8]
push 1
call fcn.00457680
jmp 0x4d2afc
call fcn.0051bd44
mov ecx, eax
call fcn.0053d9ae
jmp case.0x4d2ab4.3015
call fcn.0051bd44
mov ecx, eax
call fcn.0051d803
test al, al
je 0x4d3040
lea eax, [ebp - 0x68]
lea ecx, [ebp - 0xac]
push eax
push str.STR_COACH_INTERACT_ACT
mov dword [ebp - 4], 0x3f
call fcn.00402bfa
mov byte [ebp - 4], 0x40
call fcn.0040311a
xor ebx, ebx
mov edi, eax
push ebx
push ebx
push 0xff0000
lea eax, [ebp - 0xac]
push 0x7d5
push eax
push ebx
call fcn.005963e9
pop ecx
mov ecx, eax
call fcn.0059665c
push eax
mov ecx, edi
call fcn.004d9a57
mov eax, dword [ebp - 0xa4]
mov byte [ebp - 4], 0x41
sub eax, dword [ebp - 0xac]
lea ecx, [ebp - 0xa4]
push eax
push dword [ebp - 0xac]
jmp 0x4d2d7d
mov dword [esi + 0xacaf8], 0x1f
call fcn.0051bd44
mov ecx, eax
call fcn.0053ddd2
test al, al
jne case.0x4d2ab4.3015
push 1
call fcn.0051bd44
mov ecx, eax
call fcn.0053ddb8
jmp 0x4d3120
call fcn.0051bd44
mov ecx, eax
call fcn.0051d803
test al, al
je 0x4d30f4
lea eax, [ebp - 0x6a]
lea ecx, [ebp - 0xbc]
push eax
push str.STR_COACH_INTERACT_ACT
mov dword [ebp - 4], 0x42
call fcn.00402bfa
mov byte [ebp - 4], 0x43
call fcn.0040311a
xor ebx, ebx
mov edi, eax
push ebx
push ebx
push 0xff0000
lea eax, [ebp - 0xbc]
push 0x7d5
push eax
push ebx
call fcn.005963e9
pop ecx
mov ecx, eax
call fcn.0059665c
push eax
mov ecx, edi
call fcn.004d9a57
mov eax, dword [ebp - 0xb4]
mov byte [ebp - 4], 0x44
sub eax, dword [ebp - 0xbc]
lea ecx, [ebp - 0xb4]
push eax
push dword [ebp - 0xbc]
jmp 0x4d2d7d
mov dword [esi + 0xacaf8], 0x1f
call fcn.0051bd44
mov ecx, eax
call fcn.0053ddd9
test al, al
jne case.0x4d2ab4.3015
push 1
call fcn.0051bd44
mov ecx, eax
call fcn.0053ddc5
push 1
mov ecx, esi
call fcn.004db9e0
jmp case.0x4d2ab4.3015
xor ebx, ebx
cmp dword [esi + 0x6d3b8], ebx
je 0x4d3144
push ebx
lea ecx, [esi + 0x6d348]
call sub.MFC42.DLL_CWnd::ShowWindow
push dword [ebp + 0x10]
lea ecx, [esi + 0x6d348]
call fcn.00419efb
push 5
lea ecx, [esi + 0x6d950]
jmp 0x4d213e
call fcn.0051bd44
mov ecx, eax
call fcn.0053dde0
mov ecx, esi
call fcn.004dba8b
jmp case.0x4d2ab4.3015
xor ebx, ebx
cmp dword [esi + 0x79c4], ebx
je 0x4d31c2
lea ecx, [ebp - 0x854]
call fcn.00562bb8
push ebx
lea ecx, [ebp - 0x854]
mov dword [ebp - 4], 0x45
call fcn.00562c1e
test al, al
je 0x4d31ae
lea ecx, [ebp - 0x854]
call fcn.005356b9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x854]
call fcn.00562c13
jmp case.0x4d2ab4.3015
push 3
push 0x49a
jmp 0x4d1736
mov edi, dword [ebp + 0x10]
test edi, edi
je case.0x4d2ab4.3015
push dword [edi]
lea ecx, [edi + 4]
call fcn.005251a8
push eax
push 0x49
lea ecx, [esi + 0x8ceb0]
call fcn.0041bcf4
push 1
mov ecx, edi
mov dword [ebp - 4], 0x48
call fcn.004d6cec
jmp 0x4d08ca
xor ebx, ebx
push 6
push ebx
push ebx
push dword [ebp + 0x10]
call fcn.0051bd44
mov ecx, eax
call fcn.0056ba04
jmp case.0x4d2ab4.3015
xor ebx, ebx
cmp dword [esi + 0xab3cc], ebx
je 0x4d326b
cmp dword [ebp + 0x10], ebx
je case.0x4d2ab4.3015
push dword [ebp + 0x10]
lea ecx, [esi + 0xab358]
call fcn.004494f2
cmp dword [ebp + 0x10], ebx
je case.0x4d2ab4.3015
jmp 0x4d08c1
cmp dword [esi + 0x5effc], 0
jne case.0x4d2ab4.3015
lea ecx, [esi + 0x4c8]
call fcn.00456dd0
push 5
lea ecx, [esi + 0x5ef30]
call sub.MFC42.DLL_CWnd::ShowWindow
mov dword [esi + 0x5f4], 0x4c
jmp case.0x4d2ab4.3015
push dword [ebp + 0x10]
lea ecx, [esi + 0x5ef30]
call fcn.0046347d
jmp case.0x4d2ab4.3015
cmp dword [esi + 0x6b770], 0
jne case.0x4d2ab4.3015
push 5
lea ecx, [esi + 0x6ac2c]
jmp 0x4d213e
push 0x3f
xor ebx, ebx
pop ecx
xor eax, eax
lea edi, [ebp - 0x1d7]
mov byte [ebp - 0x1d8], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea ecx, [ebp - 0x62]
stosb byte es:[edi], al
call fcn.004c3c91
push eax
push str.STR_CONFIRM_BUY_BLESS
lea ecx, [ebp - 0x298]
mov dword [ebp - 4], 0x55
call fcn.00402bfa
lea eax, [ebp - 0x298]
push 0xff
push eax
push ebx
mov byte [ebp - 4], 0x56
call fcn.005963e9
pop ecx
mov ecx, eax
call fcn.0059665c
push eax
lea eax, [ebp - 0x1d8]
push eax
call dword [sym.imp.MSVCRT.dll_strncpy]
add esp, 0xc
lea ecx, [ebp - 0x298]
mov byte [ebp - 4], 0x55
call fcn.00402855
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x62]
call fcn.00564a31
lea eax, [ebp - 0x1d8]
push ebx
push eax
push 0x47
jmp 0x4cf922
xor ebx, ebx
cmp dword [esi + 0x6b824], ebx
jne case.0x4d2ab4.3015
cmp dword [esi + 0x1c1cc], ebx
jne 0x4d338e
push 5
lea ecx, [esi + 0x1c164]
call sub.MFC42.DLL_CWnd::ShowWindow
push 0xec
call sub.MFC42.DLL_operatornew
pop ecx
mov dword [ebp - 0x14], eax
cmp eax, ebx
mov dword [ebp - 4], 0x57
je 0x4d33b0
mov ecx, eax
call fcn.0053006f
jmp 0x4d33b2
xor eax, eax
or dword [ebp - 4], 0xffffffff
push eax
lea ecx, [ebp - 0x20]
call fcn.004ddfbd
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0x58
call fcn.004dd353
cmp eax, 0xffffffff
je 0x4d350b
push dword [ebp + 0x10]
lea ecx, [ebp - 0x20]
push 0x5baacfb
call fcn.005251a8
mov ecx, eax
call fcn.0053033a
test eax, eax
je 0x4d350b
mov al, byte [0x68f370]
push 0x3f
mov byte [ebp - 0x960], al
pop ecx
xor eax, eax
lea edi, [ebp - 0x95f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov edi, dword [sym.imp.GraphicData.dll_GameDataSetQuery]
call edi
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x14], eax
call fcn.005251a8
mov ecx, eax
call fcn.004d5031
push eax
lea ecx, [ebp - 0x20]
call fcn.005251a8
mov ecx, eax
call fcn.004d5070
mov ecx, dword [ebp - 0x14]
push eax
push 0x28f2
mov eax, dword [ecx]
call dword [eax + 0x3c]
push eax
lea eax, [ebp - 0x960]
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
call fcn.0051bd44
mov ecx, eax
call fcn.004d5134
push 0x28
pop ecx
sub ecx, eax
mov dword [ebp - 0x14], ecx
jne 0x4d3499
call edi
mov edx, dword [eax]
push ebx
push ebx
push 0xff0000
push 0x7d5
push 0x2909
mov ecx, eax
call dword [edx + 0x3c]
push eax
call fcn.00449993
mov ecx, eax
call fcn.004d9a57
jmp 0x4d350b
lea ecx, [ebp - 0x20]
call fcn.005251a8
mov ecx, eax
call fcn.004d5070
mov edi, eax
call fcn.0051bd44
mov ecx, eax
call fcn.004d5144
xor edx, edx
div edi
cmp eax, ebx
jne 0x4d34d9
call dword [sym.imp.GraphicData.dll_GameDataSetQuery]
mov edx, dword [eax]
push ebx
push ebx
push 0xff0000
push 0x7d5
push 0x290a
jmp 0x4d3485
cmp dword [ebp - 0x14], eax
push 1
jge 0x4d34ed
push ebx
push dword [ebp - 0x14]
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
jmp 0x4d34f7
push 1
push eax
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
lea eax, [ebp - 0x20]
push eax
call fcn.0050df0f
lea ecx, [esi + 0x6b798]
call fcn.0041670f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.0043a033
jmp case.0x4d2ab4.3015
xor ebx, ebx
cmp dword [esi + 0x5b76c], ebx
jne 0x4d353e
lea ecx, [esi + 0x4c8]
call fcn.00456dd0
push 5
lea ecx, [esi + 0x5b70c]
call sub.MFC42.DLL_CWnd::ShowWindow
lea ecx, [esi + 0x5b70c]
call fcn.00436a3e
push 0x3f
xor eax, eax
pop ecx
lea edi, [ebp - 0x1d7]
mov byte [ebp - 0x1d8], bl
mov dword [esi + 0x5f4], 0x4d
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x244]
push eax
call fcn.0051bd44
mov ecx, eax
call fcn.00543790
mov eax, dword [ebp - 0x21c]
mov dword [ebp - 4], 0x63
cmp eax, ebx
jl 0x4d36fe
cmp dword [ebp - 0x23c], 1
je 0x4d35a7
cmp dword [ebp - 0x23c], 2
jne 0x4d36fe
cmp byte [ebp - 0x1fb], bl
je 0x4d36f1
cmp eax, ebx
je 0x4d3667
push 7
cdq
pop ecx
idiv ecx
test edx, edx
jne 0x4d3667
lea ecx, [ebp - 0x64]
call fcn.004c3c91
push eax
push str.STR_FAMILY_OCCUPY_TEXT20
lea ecx, [ebp - 0x268]
mov byte [ebp - 4], 0x64
call fcn.00402bfa
lea ecx, [ebp - 0x238]
mov byte [ebp - 4], 0x65
call fcn.005251a8
push eax
lea ecx, [ebp - 0x244]
call fcn.0054374c
mov dword [ebp - 0x14], eax
push ecx
fild dword [ebp - 0x14]
push ecx
lea ecx, [ebp - 0x238]
fmul qword [0x620ab0]
fstp qword [esp]
push dword [ebp - 0x21c]
call fcn.005251a8
push eax
lea eax, [ebp - 0x268]
push eax
push ebx
call fcn.005963e9
pop ecx
mov ecx, eax
call fcn.0059665c
push eax
lea eax, [ebp - 0x1d8]
push 0xff
push eax
call dword [sym.imp.MSVCRT.dll__snprintf]
add esp, 0x20
lea ecx, [ebp - 0x268]
mov byte [ebp - 4], 0x64
call fcn.00402855
mov byte [ebp - 4], 0x63
lea ecx, [ebp - 0x64]
jmp 0x4d36d5
lea ecx, [ebp - 0x66]
call fcn.004c3c91
push eax
push str.STR_FAMILY_OCCUPY_TEXT21
lea ecx, [ebp - 0x330]
mov byte [ebp - 4], 0x66
call fcn.00402bfa
lea ecx, [ebp - 0x238]
mov byte [ebp - 4], 0x67
call fcn.005251a8
push eax
lea eax, [ebp - 0x330]
push eax
push ebx
call fcn.005963e9
pop ecx
mov ecx, eax
call fcn.0059665c
push eax
lea eax, [ebp - 0x1d8]
push 0xff
push eax
call dword [sym.imp.MSVCRT.dll__snprintf]
add esp, 0x10
lea ecx, [ebp - 0x330]
mov byte [ebp - 4], 0x66
call fcn.00402855
mov byte [ebp - 4], 0x63
lea ecx, [ebp - 0x66]
call fcn.00564a31
lea eax, [ebp - 0x1d8]
push ebx
push eax
push 0x5c
lea ecx, [esi + 0x8ceb0]
call fcn.0041bcf4
jmp 0x4d36fe
push ebx
push 0xbd7
call fcn.0050ef78
pop ecx
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x244]
call fcn.00436540
jmp case.0x4d2ab4.3015
lea ecx, [ebp - 0x854]
call fcn.0054faf5
lea ecx, [esi + 0x5b70c]
mov dword [ebp - 4], 0x68
call fcn.00437362
push eax
push 0xa
lea ecx, [ebp - 0x854]
call fcn.0054fb7e
lea ecx, [ebp - 0x854]
call fcn.005356b9
push 0
push 0xbd7
call fcn.0050ef78
or dword [ebp - 4], 0xffffffff
pop ecx
pop ecx
lea ecx, [ebp - 0x854]
jmp 0x4d3da7
call fcn.0051bd44
mov ecx, eax
call fcn.00517f24
test al, al
je 0x4d38ed
call fcn.0051bd44
mov ecx, eax
call fcn.0054353c
inc eax
push 7
cdq
pop ecx
idiv ecx
test edx, edx
jne 0x4d38ed
call fcn.0051bd44
mov ecx, eax
call fcn.0054353c
test eax, eax
jle 0x4d38ed
call fcn.0051bd44
mov ecx, eax
call fcn.0054364c
test al, al
jne 0x4d38ed
push 0x3f
xor ebx, ebx
pop ecx
xor eax, eax
lea edi, [ebp - 0x1d7]
mov byte [ebp - 0x1d8], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea ecx, [ebp - 0x61]
stosb byte es:[edi], al
call fcn.004c3c91
push eax
push str.STR_FAMILY_OCCUPY_TEXT22
lea ecx, [ebp - 0x280]
mov dword [ebp - 4], 0x69
call fcn.00402bfa
lea eax, [ebp - 0x434]
mov byte [ebp - 4], 0x6a
push eax
call fcn.0051bd44
mov ecx, eax
call fcn.00543551
mov edi, eax
lea eax, [ebp - 0x41c]
mov byte [ebp - 4], 0x6b
push eax
call fcn.0051bd44
mov ecx, eax
call fcn.00543500
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 0x6c
call fcn.0051bd44
mov ecx, eax
call fcn.005435fd
mov dword [ebp - 0x14], eax
push ecx
fild dword [ebp - 0x14]
push ecx
mov ecx, edi
fmul qword [0x620ab0]
fstp qword [esp]
call fcn.005251a8
push eax
call fcn.0051bd44
mov ecx, eax
call fcn.0054353c
mov ecx, dword [ebp - 0x1c]
push eax
call fcn.005251a8
push eax
lea eax, [ebp - 0x280]
push eax
push ebx
call fcn.005963e9
pop ecx
mov ecx, eax
call fcn.0059665c
push eax
lea eax, [ebp - 0x1d8]
push 0xff
push eax
call dword [sym.imp.MSVCRT.dll__snprintf]
add esp, 0x20
lea ecx, [ebp - 0x41c]
mov byte [ebp - 4], 0x6b
call fcn.00402855
lea ecx, [ebp - 0x434]
mov byte [ebp - 4], 0x6a
call fcn.00402855
lea ecx, [ebp - 0x280]
mov byte [ebp - 4], 0x69
call fcn.00402855
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x61]
call fcn.00564a31
lea eax, [ebp - 0x1d8]
push eax
push ebx
lea ecx, [esi + 0xaa198]
call fcn.0046e683
push 1
call fcn.0051bd44
mov ecx, eax
call fcn.0054363f
jmp 0x4d38ef
xor ebx, ebx
call fcn.0051bd44
mov ecx, eax
call fcn.00517f24
test al, al
je case.0x4d2ab4.3015
call fcn.0051bd44
mov ecx, eax
call fcn.0054353c
inc eax
push 7
cdq
pop ecx
idiv ecx
test edx, edx
je case.0x4d2ab4.3015
call fcn.0051bd44
mov ecx, eax
call fcn.0054364c
test al, al
je case.0x4d2ab4.3015
push ebx
call fcn.0051bd44
mov ecx, eax
call fcn.0054363f
jmp case.0x4d2ab4.3015
lea ecx, [ebp - 0x5a]
call fcn.004c3c91
push eax
push str.STR_FAMILY_OCCUPY_TEXT46
lea ecx, [ebp - 0x348]
mov dword [ebp - 4], 0x6d
call fcn.00402bfa
xor ebx, ebx
lea eax, [ebp - 0x348]
push ebx
push eax
push ebx
mov byte [ebp - 4], 0x6e
call fcn.005963e9
pop ecx
mov ecx, eax
call fcn.0059665c
push eax
push 0x67
lea ecx, [esi + 0x8ceb0]
call fcn.0041bcf4
lea ecx, [ebp - 0x348]
mov byte [ebp - 4], 0x6d
call fcn.00402855
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5a]
jmp 0x4d4621
lea ecx, [esi + 0x5b70c]
call fcn.00437291
or eax, edx
jne 0x4d39c4
push 0
push 0xbca
jmp 0x4d1736
push 0x3f
xor ebx, ebx
pop ecx
xor eax, eax
lea edi, [ebp - 0x1d7]
mov byte [ebp - 0x1d8], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea ecx, [ebp - 0x50]
stosb byte es:[edi], al
call fcn.004c3c91
push eax
push str.STR_FAMILY_OCCUPY_TEXT9
lea ecx, [ebp - 0x360]
mov dword [ebp - 4], 0x6f
call fcn.00402bfa
lea eax, [ebp - 0x3b0]
lea edi, [esi + 0x5b70c]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x70
call fcn.004372bf
mov ecx, eax
mov byte [ebp - 4], 0x71
call fcn.005251a8
push eax
mov ecx, edi
call fcn.00437291
push edx
push eax
lea eax, [ebp - 0x360]
push eax
push ebx
call fcn.005963e9
pop ecx
mov ecx, eax
call fcn.0059665c
push eax
lea eax, [ebp - 0x1d8]
push 0xff
push eax
call dword [sym.imp.MSVCRT.dll__snprintf]
add esp, 0x18
lea ecx, [ebp - 0x3b0]
mov byte [ebp - 4], 0x70
call fcn.00402855
lea ecx, [ebp - 0x360]
mov byte [ebp - 4], 0x6f
call fcn.00402855
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x50]
call fcn.00564a31
lea eax, [ebp - 0x1d8]
push ebx
push eax
push 0x56
jmp 0x4cf922
lea edi, [esi + 0x5b70c]
mov ecx, edi
call fcn.0043733b
cmp eax, 5
jne 0x4d3ae9
lea ecx, [ebp - 0x854]
call fcn.0054faf5
mov ecx, edi
mov dword [ebp - 4], 0x72
call fcn.00437362
push eax
push 0
lea ecx, [ebp - 0x854]
call fcn.0054fb7e
lea ecx, [ebp - 0x854]
call fcn.005356b9
push 1
mov ecx, edi
call fcn.00437401
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x854]
jmp 0x4d3da7
lea ecx, [ebp - 0x5c]
call fcn.004c3c91
push eax
push str.STR_FAMILY_OCCUPY_TEXT10
lea ecx, [ebp - 0x354]
mov dword [ebp - 4], 0x73
call fcn.00402bfa
xor ebx, ebx
lea eax, [ebp - 0x354]
push ebx
push ebx
push 0xff0000
push 0x7d5
push eax
push ebx
mov byte [ebp - 4], 0x74
call fcn.005963e9
pop ecx
mov ecx, eax
call fcn.0059665c
push eax
call fcn.00449993
mov ecx, eax
call fcn.004d9a57
lea ecx, [ebp - 0x354]
mov byte [ebp - 4], 0x73
call fcn.00402855
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5c]
jmp 0x4d4621
push 0x3f
xor ebx, ebx
pop ecx
xor eax, eax
lea edi, [ebp - 0x1d7]
mov byte [ebp - 0x1d8], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea ecx, [ebp - 0x5e]
stosb byte es:[edi], al
call fcn.004c3c91
push eax
push str.STR_FAMILY_OCCUPY_TEXT11
lea ecx, [ebp - 0x2b0]
mov dword [ebp - 4], 0x75
call fcn.00402bfa
lea eax, [ebp - 0x410]
mov byte [ebp - 4], 0x76
push eax
call fcn.0051bd44
mov ecx, eax
call fcn.0054351e
mov ecx, eax
mov byte [ebp - 4], 0x77
call fcn.005251a8
push eax
lea eax, [ebp - 0x2b0]
push eax
push ebx
call fcn.005963e9
pop ecx
mov ecx, eax
call fcn.0059665c
push eax
lea eax, [ebp - 0x1d8]
push 0xff
push eax
call dword [sym.imp.MSVCRT.dll__snprintf]
add esp, 0x10
lea ecx, [ebp - 0x410]
mov byte [ebp - 4], 0x76
call fcn.00402855
lea ecx, [ebp - 0x2b0]
mov byte [ebp - 4], 0x75
call fcn.00402855
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5e]
call fcn.00564a31
lea eax, [ebp - 0x1d8]
push ebx
push eax
push 0x58
jmp 0x4cf922
xor ebx, ebx
push ebx
push ebx
push 0x59
jmp 0x4cf922
xor ebx, ebx
cmp dword [esi + 0x39744], ebx
je 0x4d3d45
call fcn.0051bd44
mov ecx, eax
call fcn.00529cd2
test al, al
je 0x4d3cc8
lea eax, [ebp - 0x3c8]
push eax
call fcn.0051bd44
mov ecx, eax
call fcn.0054351e
push 0x68f370
push eax
mov dword [ebp - 4], 0x78
call fcn.004ddfa8
or dword [ebp - 4], 0xffffffff
pop ecx
pop ecx
mov byte [ebp - 0x29], al
lea ecx, [ebp - 0x3c8]
call fcn.00402855
cmp byte [ebp - 0x29], bl
je 0x4d3cc8
lea ecx, [ebp - 0x854]
call fcn.0054faf5
mov dword [ebp - 4], 0x79
call fcn.0051bd44
mov ecx, eax
call fcn.005435e9
push eax
push 1
lea ecx, [ebp - 0x854]
call fcn.0054fb7e
lea ecx, [ebp - 0x854]
call fcn.005356b9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x854]
jmp 0x4d3da7
call fcn.0051bd44
mov ecx, eax
call fcn.00529cd2
test al, al
jne case.0x4d2ab4.3015
lea ecx, [ebp - 0x53]
call fcn.004c3c91
push eax
push str.STR_FAMILY_OCCUPY_TEXT13
lea ecx, [ebp - 0x324]
mov dword [ebp - 4], edi
call fcn.00402bfa
push ebx
push ebx
push 0xff0000
lea eax, [ebp - 0x324]
push 0x7d5
push eax
push ebx
mov byte [ebp - 4], 0x7b
call fcn.005963e9
pop ecx
mov ecx, eax
call fcn.0059665c
push eax
call fcn.00449993
mov ecx, eax
call fcn.004d9a57
lea ecx, [ebp - 0x324]
mov byte [ebp - 4], 0x7a
call fcn.00402855
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x53]
jmp 0x4d4621
cmp dword [esi + 0x5b76c], ebx
je case.0x4d2ab4.3015
lea edi, [esi + 0x5b70c]
mov ecx, edi
call fcn.0043733b
cmp eax, 3
jne 0x4d3db1
lea ecx, [ebp - 0x854]
call fcn.0054faf5
mov ecx, edi
mov dword [ebp - 4], 0x7c
call fcn.00437362
push eax
push 1
lea ecx, [ebp - 0x854]
call fcn.0054fb7e
lea ecx, [ebp - 0x854]
call fcn.005356b9
push ebx
mov ecx, edi
call fcn.00437401
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x854]
call fcn.0054fb50
jmp case.0x4d2ab4.3015
mov ecx, edi
call fcn.0043733b
cmp eax, 4
jne 0x4d3e2a
lea ecx, [ebp - 0x5d]
call fcn.004c3c91
push eax
push str.STR_FAMILY_OCCUPY_TEXT13
lea ecx, [ebp - 0x2c8]
mov dword [ebp - 4], 0x7d
call fcn.00402bfa
push ebx
push ebx
push 0xff0000
lea eax, [ebp - 0x2c8]
push 0x7d5
push eax
push ebx
mov byte [ebp - 4], 0x7e
call fcn.005963e9
pop ecx
mov ecx, eax
call fcn.0059665c
push eax
call fcn.00449993
mov ecx, eax
call fcn.004d9a57
lea ecx, [ebp - 0x2c8]
mov byte [ebp - 4], 0x7d
call fcn.00402855
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5d]
jmp 0x4d4621
push 0x3f
xor eax, eax
pop ecx
lea edi, [ebp - 0x1d7]
mov byte [ebp - 0x1d8], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea ecx, [ebp - 0x55]
stosb byte es:[edi], al
call fcn.004c3c91
push eax
push str.STR_FAMILY_OCCUPY_TEXT14
lea ecx, [ebp - 0x380]
mov dword [ebp - 4], 0x7f
call fcn.00402bfa
lea eax, [ebp - 0x440]
lea edi, [esi + 0x5b70c]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x80
call fcn.004372bf
mov ecx, eax
mov byte [ebp - 4], 0x81
call fcn.005251a8
push eax
lea eax, [ebp - 0x380]
push eax
push ebx
call fcn.005963e9
pop ecx
mov ecx, eax
call fcn.0059665c
push eax
lea eax, [ebp - 0x1d8]
push 0xff
push eax
call dword [sym.imp.MSVCRT.dll__snprintf]
add esp, 0x10
lea ecx, [ebp - 0x440]
mov byte [ebp - 4], 0x80
call fcn.00402855
lea ecx, [ebp - 0x380]
mov byte [ebp - 4], 0x7f
call fcn.00402855
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x55]
call fcn.00564a31
push ebx
push ebx
push 0xff0000
lea eax, [ebp - 0x1d8]
push 0x7d5
push eax
call fcn.00449993
mov ecx, eax
call fcn.004d9a57
push ebx
mov ecx, edi
call fcn.00437401
jmp case.0x4d2ab4.3015
push 0x3f
xor ebx, ebx
pop ecx
xor eax, eax
lea edi, [ebp - 0x1d7]
mov byte [ebp - 0x1d8], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea edi, [esi + 0x5b70c]
mov ecx, edi
call fcn.00437388
test al, al
je 0x4d3ff4
lea ecx, [ebp - 0x65]
call fcn.004c3c91
push eax
push str.STR_FAMILY_OCCUPY_TEXT15
lea ecx, [ebp - 0x2e0]
mov dword [ebp - 4], 0x82
call fcn.00402bfa
lea eax, [ebp - 0x428]
mov ecx, edi
push eax
mov byte [ebp - 4], 0x83
call fcn.004372bf
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x3e0]
mov ecx, edi
push eax
mov byte [ebp - 4], 0x84
call fcn.004372bf
mov edi, eax
mov ecx, dword [ebp - 0x14]
mov byte [ebp - 4], 0x85
call fcn.005251a8
push eax
mov ecx, edi
call fcn.005251a8
push eax
lea eax, [ebp - 0x2e0]
push eax
push ebx
call fcn.005963e9
pop ecx
mov ecx, eax
call fcn.0059665c
push eax
lea eax, [ebp - 0x1d8]
push 0xff
push eax
call dword [sym.imp.MSVCRT.dll__snprintf]
add esp, 0x14
lea ecx, [ebp - 0x3e0]
mov byte [ebp - 4], 0x84
call fcn.00402855
lea ecx, [ebp - 0x428]
mov byte [ebp - 4], 0x83
call fcn.00402855
lea ecx, [ebp - 0x2e0]
mov byte [ebp - 4], 0x82
call fcn.00402855
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x65]
jmp 0x4d40b1
lea ecx, [ebp - 0x57]
call fcn.004c3c91
push eax
push str.STR_FAMILY_OCCUPY_TEXT16
lea ecx, [ebp - 0x33c]
mov dword [ebp - 4], 0x86
call fcn.00402bfa
lea eax, [ebp - 0x44c]
mov ecx, edi
push eax
mov byte [ebp - 4], 0x87
call fcn.004372bf
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x3f8]
mov ecx, edi
push eax
mov byte [ebp - 4], 0x88
call fcn.004372bf
mov edi, eax
mov ecx, dword [ebp - 0x14]
mov byte [ebp - 4], 0x89
call fcn.005251a8
push eax
mov ecx, edi
call fcn.005251a8
push eax
lea eax, [ebp - 0x33c]
push eax
push ebx
call fcn.005963e9
pop ecx
mov ecx, eax
call fcn.0059665c
push eax
lea eax, [ebp - 0x1d8]
push 0xff
push eax
call dword [sym.imp.MSVCRT.dll__snprintf]
add esp, 0x14
lea ecx, [ebp - 0x3f8]
mov byte [ebp - 4], 0x88
call fcn.00402855
lea ecx, [ebp - 0x44c]
mov byte [ebp - 4], 0x87
call fcn.00402855
lea ecx, [ebp - 0x33c]
mov byte [ebp - 4], 0x86
call fcn.00402855
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x57]
call fcn.00564a31
lea eax, [ebp - 0x1d8]
push ebx
push eax
push 0x5a
jmp 0x4cf922
lea ecx, [ebp - 0x854]
call fcn.0054faf5
lea edi, [esi + 0x5b70c]
mov dword [ebp - 4], 0x8a
mov ecx, edi
call fcn.00437362
push eax
push 2
lea ecx, [ebp - 0x854]
call fcn.0054fb7e
lea ecx, [ebp - 0x854]
call fcn.005356b9
push 0
mov ecx, edi
call sub.MFC42.DLL_CWnd::ShowWindow
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x854]
jmp 0x4d3da7
push 0x3f
xor ebx, ebx
pop ecx
xor eax, eax
lea edi, [ebp - 0x1d7]
mov byte [ebp - 0x1d8], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea ecx, [ebp - 0x5f]
stosb byte es:[edi], al
call fcn.004c3c91
push eax
push str.STR_FAMILY_OCCUPY_TEXT17
lea ecx, [ebp - 0x2f8]
mov dword [ebp - 4], 0x8b
call fcn.00402bfa
lea edi, [esi + 0x5b70c]
lea eax, [ebp - 0x3bc]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x8c
call fcn.004372bf
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x3a4]
mov ecx, edi
push eax
mov byte [ebp - 4], 0x8d
call fcn.004372bf
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x14]
mov byte [ebp - 4], 0x8e
call fcn.005251a8
push eax
mov ecx, edi
call fcn.00437314
mov ecx, dword [ebp - 0x1c]
push eax
call fcn.005251a8
push eax
lea eax, [ebp - 0x2f8]
push eax
push ebx
call fcn.005963e9
pop ecx
mov ecx, eax
call fcn.0059665c
push eax
lea eax, [ebp - 0x1d8]
push 0xff
push eax
call dword [sym.imp.MSVCRT.dll__snprintf]
add esp, 0x18
lea ecx, [ebp - 0x3a4]
mov byte [ebp - 4], 0x8d
call fcn.00402855
lea ecx, [ebp - 0x3bc]
mov byte [ebp - 4], 0x8c
call fcn.00402855
lea ecx, [ebp - 0x2f8]
mov byte [ebp - 4], 0x8b
call fcn.00402855
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5f]
call fcn.00564a31
lea eax, [ebp - 0x1d8]
push ebx
push eax
push 0x5b
jmp 0x4cf922
push 0x3f
xor ebx, ebx
pop ecx
xor eax, eax
lea edi, [ebp - 0x1d7]
mov byte [ebp - 0x1d8], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea ecx, [ebp - 0x59]
stosb byte es:[edi], al
call fcn.004c3c91
push eax
push str.STR_FAMILY_OCCUPY_TEXT23
lea ecx, [ebp - 0x36c]
mov dword [ebp - 4], 0x8f
call fcn.00402bfa
lea eax, [ebp - 0x3d4]
lea ecx, [esi + 0x5b70c]
push eax
mov byte [ebp - 4], 0x90
call fcn.004372bf
mov ecx, eax
mov byte [ebp - 4], 0x91
call fcn.005251a8
push eax
lea eax, [ebp - 0x36c]
push eax
push ebx
call fcn.005963e9
pop ecx
mov ecx, eax
call fcn.0059665c
push eax
lea eax, [ebp - 0x1d8]
push 0xff
push eax
call dword [sym.imp.MSVCRT.dll__snprintf]
add esp, 0x10
lea ecx, [ebp - 0x3d4]
mov byte [ebp - 4], 0x90
call fcn.00402855
lea ecx, [ebp - 0x36c]
mov byte [ebp - 4], 0x8f
call fcn.00402855
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x59]
call fcn.00564a31
lea eax, [ebp - 0x1d8]
push ebx
push eax
push 0x54
jmp 0x4cf922
push 0x3f
xor ebx, ebx
pop ecx
xor eax, eax
lea edi, [ebp - 0x1d7]
mov byte [ebp - 0x1d8], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea ecx, [ebp - 0x63]
stosb byte es:[edi], al
call fcn.004c3c91
push eax
push str.STR_FAMILY_OCCUPY_TEXT24
lea ecx, [ebp - 0x30c]
mov dword [ebp - 4], 0x92
call fcn.00402bfa
lea eax, [ebp - 0x3ec]
lea ecx, [esi + 0x5b70c]
push eax
mov byte [ebp - 4], 0x93
call fcn.004372bf
mov ecx, eax
mov byte [ebp - 4], 0x94
call fcn.005251a8
push eax
lea eax, [ebp - 0x30c]
push eax
push ebx
call fcn.005963e9
pop ecx
mov ecx, eax
call fcn.0059665c
push eax
lea eax, [ebp - 0x1d8]
push 0xff
push eax
call dword [sym.imp.MSVCRT.dll__snprintf]
add esp, 0x10
lea ecx, [ebp - 0x3ec]
mov byte [ebp - 4], 0x93
call fcn.00402855
lea ecx, [ebp - 0x30c]
mov byte [ebp - 4], 0x92
call fcn.00402855
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x63]
call fcn.00564a31
lea eax, [ebp - 0x1d8]
push ebx
push eax
push 0x5e
jmp 0x4cf922
lea ecx, [ebp - 0x854]
call fcn.0054faf5
lea ecx, [esi + 0x5b70c]
mov dword [ebp - 4], 0x95
call fcn.00437362
push eax
push 5
lea ecx, [ebp - 0x854]
call fcn.0054fb7e
lea ecx, [ebp - 0x854]
call fcn.005356b9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x854]
jmp 0x4d3da7
push 1
lea eax, [ebp - 0x18]
push dword [ebp + 0x10]
mov ecx, 0x692048
push eax
call fcn.0053c058
lea ecx, [ebp - 0x18]
mov dword [ebp - 4], 0x96
call fcn.004dd668
test al, al
je 0x4d4401
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
jmp 0x4d44c2
lea ecx, [esi + 0x5b70c]
call fcn.00437314
mov ecx, eax
push 7
cdq
pop edi
idiv edi
test edx, edx
jne 0x4d4423
test ecx, ecx
jle 0x4d4423
push str.fam_exp_special
jmp 0x4d4428
push str.fam_exp
lea ecx, [ebp - 0x18]
call fcn.005251a8
mov ecx, eax
call fcn.004d510e
jmp 0x4d43f5
xor ebx, ebx
cmp dword [esi + 0x5b76c], ebx
je 0x4d445f
call fcn.0051bd44
mov ecx, eax
call fcn.004d50ea
cmp eax, dword [ebp + 0x10]
jne 0x4d445f
lea ecx, [esi + 0x5b70c]
call fcn.004375fd
push 1
lea eax, [ebp - 0x18]
push dword [ebp + 0x10]
mov ecx, 0x692048
push eax
call fcn.0053c058
lea ecx, [ebp - 0x18]
mov dword [ebp - 4], 0x97
call fcn.004dd668
test al, al
jne 0x4d44bb
lea ecx, [esi + 0x5b70c]
call fcn.00437314
mov ecx, eax
push 7
cdq
pop edi
idiv edi
test edx, edx
jne 0x4d44a7
cmp ecx, ebx
jle 0x4d44a7
push str.fam_gain_special
jmp 0x4d44ac
push str.fam_gain
lea ecx, [ebp - 0x18]
call fcn.005251a8
mov ecx, eax
call fcn.004d510e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.0043a033
jmp case.0x4d2ab4.3015
mov eax, dword [ebp + 0x10]
cmp eax, 0xf
jg 0x4d46f2
je 0x4d468d
sub eax, 9
je 0x4d462b
sub eax, 3
je 0x4d45c1
dec eax
je 0x4d455f
dec eax
jne case.0x4d2ab4.3015
lea ecx, [ebp - 0x5b]
call fcn.004c3c91
push eax
push str.STR_FAMILY_OCCUPY_TEXT26
lea ecx, [ebp - 0x28c]
mov dword [ebp - 4], 0x9c
call fcn.00402bfa
xor ebx, ebx
lea eax, [ebp - 0x28c]
push ebx
push eax
push ebx
mov byte [ebp - 4], 0x9d
call fcn.005963e9
pop ecx
mov ecx, eax
call fcn.0059665c
push eax
push 0x55
lea ecx, [esi + 0x8ceb0]
call fcn.0041bcf4
lea ecx, [ebp - 0x28c]
mov byte [ebp - 4], 0x9c
call fcn.00402855
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5b]
jmp 0x4d4621
lea ecx, [ebp - 0x51]
call fcn.004c3c91
push eax
push str.STR_FAMILY_OCCUPY_TEXT25
lea ecx, [ebp - 0x2a4]
mov dword [ebp - 4], 0x9a
call fcn.00402bfa
xor ebx, ebx
lea eax, [ebp - 0x2a4]
push ebx
push eax
push ebx
mov byte [ebp - 4], 0x9b
call fcn.005963e9
pop ecx
mov ecx, eax
call fcn.0059665c
push eax
push 0x55
lea ecx, [esi + 0x8ceb0]
call fcn.0041bcf4
lea ecx, [ebp - 0x2a4]
mov byte [ebp - 4], 0x9a
call fcn.00402855
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x51]
jmp 0x4d4621
lea ecx, [ebp - 0x52]
call fcn.004c3c91
push eax
push str.STR_FAMILY_OCCUPY_TEXT29
lea ecx, [ebp - 0x2bc]
mov dword [ebp - 4], 0x98
call fcn.00402bfa
xor ebx, ebx
lea eax, [ebp - 0x2bc]
push ebx
push eax
push ebx
mov byte [ebp - 4], 0x99
call fcn.005963e9
pop ecx
mov ecx, eax
call fcn.0059665c
push eax
push 0x55
lea ecx, [esi + 0x8ceb0]
call fcn.0041bcf4
lea ecx, [ebp - 0x2bc]
mov byte [ebp - 4], 0x98
call fcn.00402855
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x52]
call fcn.00564a31
jmp case.0x4d2ab4.3015
lea ecx, [ebp - 0x54]
call fcn.004c3c91
push eax
push str.STR_FAMILY_OCCUPY_TEXT41
lea ecx, [ebp - 0x2d4]
mov dword [ebp - 4], 0xa4
call fcn.00402bfa
xor ebx, ebx
lea eax, [ebp - 0x2d4]
push ebx
push eax
push ebx
mov byte [ebp - 4], 0xa5
call fcn.005963e9
pop ecx
mov ecx, eax
call fcn.0059665c
push eax
push 0x55
lea ecx, [esi + 0x8ceb0]
call fcn.0041bcf4
lea ecx, [ebp - 0x2d4]
mov byte [ebp - 4], 0xa4
call fcn.00402855
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x54]
jmp 0x4d4621
lea ecx, [ebp - 0x4d]
call fcn.004c3c91
push eax
push str.STR_FAMILY_OCCUPY_TEXT27
lea ecx, [ebp - 0x2ec]
mov dword [ebp - 4], 0x9e
call fcn.00402bfa
xor ebx, ebx
lea eax, [ebp - 0x2ec]
push ebx
push eax
push ebx
mov byte [ebp - 4], 0x9f
call fcn.005963e9
pop ecx
mov ecx, eax
call fcn.0059665c
push eax
push 0x55
lea ecx, [esi + 0x8ceb0]
call fcn.0041bcf4
lea ecx, [ebp - 0x2ec]
mov byte [ebp - 4], 0x9e
call fcn.00402855
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4d]
jmp 0x4d4621
sub eax, 0x10
je 0x4d47d1
dec eax
je 0x4d476c
sub eax, 3
jne case.0x4d2ab4.3015
lea ecx, [ebp - 0x56]
call fcn.004c3c91
push eax
push str.STR_FAMILY_OCCUPY_TEXT42
lea ecx, [ebp - 0x250]
mov dword [ebp - 4], 0xa6
call fcn.00402bfa
xor ebx, ebx
lea eax, [ebp - 0x250]
push ebx
push eax
push ebx
mov byte [ebp - 4], 0xa7
call fcn.005963e9
pop ecx
mov ecx, eax
call fcn.0059665c
push eax
push 0x55
lea ecx, [esi + 0x8ceb0]
call fcn.0041bcf4
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 0xa6
call fcn.00402855
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x56]
jmp 0x4d4621
lea ecx, [ebp - 0x58]
call fcn.004c3c91
push eax
push str.STR_FAMILY_OCCUPY_TEXT39
lea ecx, [ebp - 0x318]
mov dword [ebp - 4], 0xa2
call fcn.00402bfa
xor ebx, ebx
lea eax, [ebp - 0x318]
push ebx
push eax
push ebx
mov byte [ebp - 4], 0xa3
call fcn.005963e9
pop ecx
mov ecx, eax
call fcn.0059665c
push eax
push 0x55
lea ecx, [esi + 0x8ceb0]
call fcn.0041bcf4
lea ecx, [ebp - 0x318]
mov byte [ebp - 4], 0xa2
call fcn.00402855
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x58]
jmp 0x4d4621
lea ecx, [ebp - 0x4e]
call fcn.004c3c91
push eax
push str.STR_FAMILY_OCCUPY_TEXT28
lea ecx, [ebp - 0x25c]
mov dword [ebp - 4], 0xa0
call fcn.00402bfa
xor ebx, ebx
lea eax, [ebp - 0x25c]
push ebx
push eax
push ebx
mov byte [ebp - 4], 0xa1
call fcn.005963e9
pop ecx
mov ecx, eax
call fcn.0059665c
push eax
push 0x55
lea ecx, [esi + 0x8ceb0]
call fcn.0041bcf4
lea ecx, [ebp - 0x25c]
mov byte [ebp - 4], 0xa0
call fcn.00402855
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4e]
jmp 0x4d4621
cmp dword [ebp + 0x10], 0
je case.0x4d2ab4.3015
push dword [ebp + 0x10]
lea ecx, [esi + 0xaa198]
push 1
call fcn.0046e683
push dword [ebp + 0x10]
call sub.MFC42.DLL_operatordelete
pop ecx
jmp case.0x4d2ab4.3015
lea ecx, [ebp - 0x854]
call fcn.0054faf5
mov dword [ebp - 4], 0xa8
call fcn.0051bd44
mov ecx, eax
call fcn.005436b7
push eax
push 8
lea ecx, [ebp - 0x854]
call fcn.0054fb7e
lea ecx, [ebp - 0x854]
call fcn.005356b9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x854]
jmp 0x4d3da7
xor ebx, ebx
cmp dword [esi + 0xaa618], ebx
je case.0x4d2ab4.3015
lea edi, [esi + 0xaa198]
mov ecx, edi
call fcn.0046e9b6
cmp eax, 1
jne case.0x4d2ab4.3015
push ebx
jmp 0x4d16bd
push 0x3f
xor ebx, ebx
pop ecx
xor eax, eax
lea edi, [ebp - 0x95f]
mov byte [ebp - 0x960], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea ecx, [ebp - 0x4f]
stosb byte es:[edi], al
call fcn.004c3c91
push eax
push str.STR_FAMILY_OCCUPY_TEXT43
lea ecx, [ebp - 0x274]
mov dword [ebp - 4], 0xa9
call fcn.00402bfa
lea eax, [ebp - 0x274]
mov byte [ebp - 4], 0xaa
push eax
push ebx
call fcn.005963e9
pop ecx
mov ecx, eax
call fcn.0059665c
push eax
lea eax, [ebp - 0x960]
push 0xff
push eax
call dword [sym.imp.MSVCRT.dll__snprintf]
add esp, 0xc
lea ecx, [ebp - 0x274]
mov byte [ebp - 4], 0xa9
call fcn.00402855
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4f]
call fcn.00564a31
lea eax, [ebp - 0x960]
lea ecx, [esi + 0xaa198]
push eax
push 2
call fcn.0046e683
jmp case.0x4d2ab4.3015
xor ebx, ebx
cmp dword [esi + 0x37b30], ebx
je 0x4d497c
push ebx
lea ecx, [esi + 0x37ad0]
call sub.MFC42.DLL_CWnd::ShowWindow
mov dword [esi + 0x37b38], ebx
push dword [ebp + 0x10]
mov ecx, esi
push dword [ebp + 0xc]
push dword [ebp + 8]
call sub.MFC42.DLL_CWnd::WindowProc
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret 0xc