Function at 0x41b270
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x487f2d
mov eax, dword fs:[0]
push eax
sub esp, 0x268
mov eax, dword [0x504a70]
xor eax, esp
mov dword [esp + 0x260], eax
push ebx
push esi
push edi
mov eax, dword [0x504a70]
xor eax, esp
push eax
lea eax, [esp + 0x278]
mov dword fs:[0], eax
mov edi, ecx
lea ecx, [esp + 0x44]
mov dword [esp + 0x1c], edi
mov esi, edx
call fcn.0045df88
push esi
lea ecx, [esp + 0x48]
mov dword [esp + 0x284], 0
call fcn.0045e37c
mov ecx, dword [edi + 0x20]
lea eax, [esp + 0x28]
push eax
push ecx
call dword [sym.imp.USER32.dll_GetClientRect]
mov edi, dword [edi + 0x168]
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
xor esi, esi
test edi, edi
jle 0x41b361
test esi, esi
jl 0x41b4e2
mov eax, dword [esp + 0x1c]
cmp esi, dword [eax + 0x168]
jge 0x41b4e2
mov edx, dword [eax + 0x164]
lea eax, [edx + esi*4]
mov eax, dword [eax]
test eax, eax
je 0x41b327
push eax
call fcn.00456d4d
add esp, 4
mov eax, dword [esp + 0x1c]
cmp dword [eax + 0x128], 0
je 0x41b35a
push 0
push 0
mov ecx, eax
mov edx, dword [ecx + 0x74]
push 0x40d
push edx
call ebx
test eax, eax
je 0x41b35a
lea eax, [esi + 1]
push eax
mov eax, dword [esp + 0x20]
push eax
lea ecx, [eax + 0x54]
call fcn.0045f9ff
add esi, 1
cmp esi, edi
jl 0x41b2f7
mov edi, dword [esp + 0x1c]
push 0xffffffffffffffff
lea ecx, [edi + 0x160]
push 0
call fcn.00468351
push 0xffffffffffffffff
lea ecx, [edi + 0x174]
push 0
call fcn.00463c01
mov esi, 1
push 0x4f1164
lea ecx, [esp + 0x14]
mov dword [esp + 0x6c], esi
call fcn.00403e00
lea ecx, [esp + 0x10]
push ecx
mov ecx, edi
mov byte [esp + 0x284], 1
call fcn.0045a5cb
mov ecx, dword [str.amp_]
mov word [esp + 0x268], si
xor esi, esi
test ecx, ecx
mov dword [esp + 0x26a], 0
je 0x41b405
xor eax, eax
nop
mov dx, word [eax + 0x5066bc]
lea eax, [esp + 0x268]
push eax
push ecx
lea ecx, [esp + 0x18]
mov word [esp + 0x272], dx
call fcn.00410f70
add esi, 1
lea eax, [esi*8]
mov ecx, dword [eax + 0x5066b8]
test ecx, ecx
jne 0x41b3d0
push 0x4f1164
lea ecx, [esp + 0x24]
call fcn.00403e00
mov byte [esp + 0x280], 2
mov eax, dword [edi + 0xc8]
mov dword [esp + 0x54], eax
mov dword [esp + 0x74], eax
mov eax, dword [edi + 0xc4]
mov ecx, edi
mov dword [esp + 0x58], eax
mov dword [esp + 0x78], eax
call fcn.0045c382
test al, 0x20
jne 0x41b457
mov ecx, dword [edi + 0xc4]
push ecx
lea edx, [esp + 0x2c]
push edx
lea ecx, [esp + 0x4c]
call fcn.0045f54f
mov eax, dword [esp + 0x10]
cmp dword [eax - 0xc], 0
je 0x41d325
mov ecx, dword [edi + 0x20]
push ecx
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x41d325
lea eax, [edi + 0x154]
push eax
lea ecx, [esp + 0x48]
call fcn.0045e68c
mov edx, dword [esp + 0x10]
mov ecx, dword [edi + 0x198]
mov dword [esp + 0xe8], eax
mov eax, dword [edx - 0xc]
mov edx, dword [edi + 0x19c]
add dword [esp + 0x28], ecx
sub dword [esp + 0x30], edx
cmp dword [edi + 0x12c], 0
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x38], 0
mov dword [edi + 0x1a0], eax
je 0x41b4e7
mov esi, dword [esp + 0x1c]
add esi, 0xcc
mov ecx, 0x17
lea edi, [esp + 0x1a4]
rep movsd dword es:[edi], dword [esi]
jmp 0x41b525
jmp fcn.0045d951
mov ecx, dword [edi + 0x20]
push 0
push 0
push 0x31
push ecx
call ebx
push eax
call fcn.0045e5a6
test eax, eax
je 0x41b50c
mov eax, dword [eax + 4]
lea edx, [esp + 0x1a4]
push edx
push 0x5c
jmp 0x41b51e
lea ecx, [esp + 0x1a4]
push ecx
push 0x5c
push 0xd
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
call dword [sym.imp.GDI32.dll_GetObjectW]
mov ebx, dword [esp + 0x1c]
mov ecx, 0x17
lea esi, [esp + 0x1a4]
lea edi, [esp + 0x204]
rep movsd dword es:[edi], dword [esi]
push 0x4f1164
lea ecx, [esp + 0x40]
call fcn.00403e00
lea edx, [esp + 0x168]
mov byte [esp + 0x280], 3
mov eax, dword [esp + 0x4c]
push edx
push eax
mov dword [esp + 0x64], 0
call dword [sym.imp.GDI32.dll_GetTextMetricsW]
cmp dword [esp + 0x14], 0
jle 0x41d2ec
lea ebx, [ebx]
mov ecx, dword [esp + 0x10]
mov edi, 3
push edi
push 0x4f520c
push ecx
call fcn.0046a217
add esp, 0xc
test eax, eax
jne 0x41b683
mov eax, dword [esp + 0x10]
sub dword [esp + 0x14], edi
cmp dword [eax - 0xc], 0
jle 0x41b677
push 0x3e
push eax
call fcn.00469c09
add esp, 8
test eax, eax
je 0x41b677
sub eax, dword [esp + 0x10]
sar eax, 1
cmp eax, 0xffffffff
je 0x41b677
add eax, 1
push eax
lea edx, [esp + 0x114]
push edx
lea ecx, [esp + 0x18]
call fcn.00416120
mov byte [esp + 0x280], 4
mov ecx, dword [eax]
mov esi, dword [esp + 0x10]
lea eax, [ecx - 0x10]
add esi, 0xfffffff0
cmp eax, esi
je 0x41b64c
cmp dword [esi + 0xc], 0
lea edi, [esi + 0xc]
jl 0x41b63e
mov edx, dword [eax]
cmp edx, dword [esi]
jne 0x41b63e
push eax
call fcn.00404c60
mov ebx, eax
add esp, 4
or eax, 0xffffffff
lock xadd dword [edi], eax
dec eax
test eax, eax
jg 0x41b631
mov ecx, dword [esi]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
push esi
call eax
add ebx, 0x10
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x1c]
jmp 0x41b64c
mov eax, dword [ecx - 0xc]
push eax
push ecx
lea ecx, [esp + 0x18]
call fcn.00404b60
mov byte [esp + 0x280], 3
mov eax, dword [esp + 0x110]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41b677
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
add dword [ebx + 0x134], 1
jmp 0x41d2e1
mov ecx, dword [esp + 0x10]
mov esi, 4
push esi
push str.__B_
push ecx
call fcn.0046a217
add esp, 0xc
test eax, eax
jne 0x41b796
mov eax, dword [esp + 0x10]
sub dword [esp + 0x14], esi
cmp dword [eax - 0xc], 0
jle 0x41b77a
push 0x3e
push eax
call fcn.00469c09
add esp, 8
test eax, eax
je 0x41b77a
sub eax, dword [esp + 0x10]
sar eax, 1
cmp eax, 0xffffffff
je 0x41b77a
add eax, 1
push eax
lea edx, [esp + 0x140]
push edx
lea ecx, [esp + 0x18]
call fcn.00416120
mov byte [esp + 0x280], 5
mov ecx, dword [eax]
mov esi, dword [esp + 0x10]
lea eax, [ecx - 0x10]
add esi, 0xfffffff0
cmp eax, esi
je 0x41b74f
cmp dword [esi + 0xc], 0
lea edi, [esi + 0xc]
jl 0x41b741
mov edx, dword [eax]
cmp edx, dword [esi]
jne 0x41b741
push eax
call fcn.00404c60
mov ebx, eax
add esp, 4
or eax, 0xffffffff
lock xadd dword [edi], eax
dec eax
test eax, eax
jg 0x41b734
mov ecx, dword [esi]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
push esi
call eax
add ebx, 0x10
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x1c]
jmp 0x41b74f
mov eax, dword [ecx - 0xc]
push eax
push ecx
lea ecx, [esp + 0x18]
call fcn.00404b60
mov byte [esp + 0x280], 3
mov eax, dword [esp + 0x13c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41b77a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebx + 0x134]
test eax, eax
je 0x41d2e1
add eax, 0xffffffff
mov dword [ebx + 0x134], eax
jmp 0x41d2e1
mov ecx, dword [esp + 0x10]
push edi
push 0x4f5220
push ecx
call fcn.0046a217
add esp, 0xc
test eax, eax
jne 0x41b837
mov eax, dword [esp + 0x10]
sub dword [esp + 0x14], edi
cmp dword [eax - 0xc], 0
jle 0x41b82b
push 0x3e
push eax
call fcn.00469c09
add esp, 8
test eax, eax
je 0x41b82b
sub eax, dword [esp + 0x10]
sar eax, 1
cmp eax, 0xffffffff
je 0x41b82b
add eax, 1
push eax
lea edx, [esp + 0x134]
push edx
lea ecx, [esp + 0x18]
call fcn.00416120
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x284], 6
call fcn.00404670
mov byte [esp + 0x280], 3
mov eax, dword [esp + 0x130]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41b82b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
add dword [ebx + 0x138], 1
jmp 0x41d2e1
mov ecx, dword [esp + 0x10]
push esi
push str.__I_
push ecx
call fcn.0046a217
add esp, 0xc
test eax, eax
jne 0x41b8e8
mov eax, dword [esp + 0x10]
sub dword [esp + 0x14], esi
cmp dword [eax - 0xc], 0
jle 0x41b8cc
push 0x3e
push eax
call fcn.00469c09
add esp, 8
test eax, eax
je 0x41b8cc
sub eax, dword [esp + 0x10]
sar eax, 1
cmp eax, 0xffffffff
je 0x41b8cc
add eax, 1
push eax
lea edx, [esp + 0xe8]
push edx
lea ecx, [esp + 0x18]
call fcn.00416120
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x284], 7
call fcn.00404670
mov byte [esp + 0x280], 3
mov eax, dword [esp + 0xe4]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41b8cc
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebx + 0x138]
test eax, eax
je 0x41d2e1
add eax, 0xffffffff
mov dword [ebx + 0x138], eax
jmp 0x41d2e1
mov ecx, dword [esp + 0x10]
push edi
push 0x4f5234
push ecx
call fcn.0046a217
add esp, 0xc
test eax, eax
jne 0x41b986
mov eax, dword [esp + 0x10]
sub dword [esp + 0x14], edi
cmp dword [eax - 0xc], 0
jle 0x41b97a
push 0x3e
push eax
call fcn.00469c09
add esp, 8
test eax, eax
je 0x41b97a
sub eax, dword [esp + 0x10]
sar eax, 1
cmp eax, 0xffffffff
je 0x41b97a
add eax, 1
push eax
lea edx, [esp + 0x80]
push edx
lea ecx, [esp + 0x18]
call fcn.00416120
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x284], 8
call fcn.00404670
mov byte [esp + 0x280], 3
mov eax, dword [esp + 0x7c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41b97a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
add dword [ebx + 0x130], 1
jmp 0x41d2e1
mov ecx, dword [esp + 0x10]
push esi
push str.__U_
push ecx
call fcn.0046a217
add esp, 0xc
test eax, eax
jne 0x41ba37
mov eax, dword [esp + 0x10]
sub dword [esp + 0x14], esi
cmp dword [eax - 0xc], 0
jle 0x41ba1b
push 0x3e
push eax
call fcn.00469c09
add esp, 8
test eax, eax
je 0x41ba1b
sub eax, dword [esp + 0x10]
sar eax, 1
cmp eax, 0xffffffff
je 0x41ba1b
add eax, 1
push eax
lea edx, [esp + 0x12c]
push edx
lea ecx, [esp + 0x18]
call fcn.00416120
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x284], 9
call fcn.00404670
mov byte [esp + 0x280], 3
mov eax, dword [esp + 0x128]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41ba1b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebx + 0x130]
test eax, eax
je 0x41d2e1
add eax, 0xffffffff
mov dword [ebx + 0x130], eax
jmp 0x41d2e1
mov ecx, dword [esp + 0x10]
mov edi, 8
push edi
push str._CENTER_
push ecx
call fcn.0046a217
add esp, 0xc
test eax, eax
jne 0x41badd
mov eax, dword [esp + 0x10]
sub dword [esp + 0x14], edi
cmp dword [eax - 0xc], 0
jle 0x41bad1
push 0x3e
push eax
call fcn.00469c09
add esp, 8
test eax, eax
je 0x41bad1
sub eax, dword [esp + 0x10]
sar eax, 1
cmp eax, 0xffffffff
je 0x41bad1
add eax, 1
push eax
lea edx, [esp + 0x88]
push edx
lea ecx, [esp + 0x18]
call fcn.00416120
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x284], 0xa
call fcn.00404670
mov byte [esp + 0x280], 3
mov eax, dword [esp + 0x84]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41bad1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
add dword [ebx + 0x13c], 1
jmp 0x41d2e1
mov ecx, dword [esp + 0x10]
mov esi, 9
push esi
push str.__CENTER_
push ecx
call fcn.0046a217
add esp, 0xc
test eax, eax
jne 0x41bb93
mov eax, dword [esp + 0x10]
sub dword [esp + 0x14], esi
cmp dword [eax - 0xc], 0
jle 0x41bb77
push 0x3e
push eax
call fcn.00469c09
add esp, 8
test eax, eax
je 0x41bb77
sub eax, dword [esp + 0x10]
sar eax, 1
cmp eax, 0xffffffff
je 0x41bb77
add eax, 1
push eax
lea edx, [esp + 0xf0]
push edx
lea ecx, [esp + 0x18]
call fcn.00416120
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x284], 0xb
call fcn.00404670
mov byte [esp + 0x280], 3
mov eax, dword [esp + 0xec]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41bb77
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebx + 0x13c]
test eax, eax
je 0x41d2e1
add eax, 0xffffffff
mov dword [ebx + 0x13c], eax
jmp 0x41d2e1
mov ecx, dword [esp + 0x10]
push edi
push str._STRIKE_
push ecx
call fcn.0046a217
add esp, 0xc
test eax, eax
mov eax, dword [esp + 0x10]
jne 0x41bc19
sub dword [esp + 0x14], edi
cmp dword [eax - 0xc], 0
jle 0x41bc0d
push 0x3e
push eax
call fcn.00469c09
add esp, 8
test eax, eax
je 0x41bc0d
sub eax, dword [esp + 0x10]
sar eax, 1
cmp eax, 0xffffffff
je 0x41bc0d
add eax, 1
push eax
lea edx, [esp + 0x90]
push edx
lea ecx, [esp + 0x18]
call fcn.00416120
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x284], 0xc
call fcn.00404670
lea ecx, [esp + 0x8c]
mov byte [esp + 0x280], 3
call fcn.00419210
add dword [ebx + 0x140], 1
jmp 0x41d2e1
push esi
push str.__STRIKE_
push eax
call fcn.0046a217
add esp, 0xc
test eax, eax
jne 0x41bcab
mov eax, dword [esp + 0x10]
sub dword [esp + 0x14], esi
cmp dword [eax - 0xc], 0
jle 0x41bc8f
push 0x3e
push eax
call fcn.00469c09
add esp, 8
test eax, eax
je 0x41bc8f
sub eax, dword [esp + 0x10]
sar eax, 1
cmp eax, 0xffffffff
je 0x41bc8f
add eax, 1
push eax
lea ecx, [esp + 0xf4]
push ecx
lea ecx, [esp + 0x18]
call fcn.00416120
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x284], 0xd
call fcn.00404670
lea ecx, [esp + 0xf0]
mov byte [esp + 0x280], 3
call fcn.00419210
mov eax, dword [ebx + 0x140]
test eax, eax
je 0x41d2e1
add eax, 0xffffffff
mov dword [ebx + 0x140], eax
jmp 0x41d2e1
mov edx, dword [esp + 0x10]
mov esi, 5
push esi
push str._BIG_
push edx
call fcn.0046a217
add esp, 0xc
test eax, eax
jne 0x41bd45
mov eax, dword [esp + 0x10]
sub dword [esp + 0x14], esi
cmp dword [eax - 0xc], 0
jle 0x41bd2a
push 0x3e
push eax
call fcn.00469c09
add esp, 8
test eax, eax
je 0x41bd2a
sub eax, dword [esp + 0x10]
sar eax, 1
cmp eax, 0xffffffff
je 0x41bd2a
add eax, 1
push eax
lea eax, [esp + 0x98]
push eax
lea ecx, [esp + 0x18]
call fcn.00416120
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x284], 0xe
call fcn.00404670
lea ecx, [esp + 0x94]
mov byte [esp + 0x280], 3
call fcn.00419210
cmp dword [esp + 0x1a4], 0
jle 0x41bdd2
add dword [esp + 0x1a4], 1
jmp 0x41d2e1
mov ecx, dword [esp + 0x10]
mov edi, 6
push edi
push str.__BIG_
push ecx
call fcn.0046a217
add esp, 0xc
test eax, eax
mov eax, dword [esp + 0x10]
jne 0x41bddf
sub dword [esp + 0x14], edi
cmp dword [eax - 0xc], 0
jle 0x41bdc4
push 0x3e
push eax
call fcn.00469c09
add esp, 8
test eax, eax
je 0x41bdc4
sub eax, dword [esp + 0x10]
sar eax, 1
cmp eax, 0xffffffff
je 0x41bdc4
add eax, 1
push eax
lea edx, [esp + 0xf8]
push edx
lea ecx, [esp + 0x18]
call fcn.00416120
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x284], 0xf
call fcn.00404670
lea ecx, [esp + 0xf4]
mov byte [esp + 0x280], 3
call fcn.00419210
cmp dword [esp + 0x1a4], 0
jle 0x41bd38
sub dword [esp + 0x1a4], 1
jmp 0x41d2e1
push 7
push str._SMALL_
push eax
call fcn.0046a217
add esp, 0xc
test eax, eax
jne 0x41be4f
mov eax, dword [esp + 0x10]
sub dword [esp + 0x14], 7
cmp dword [eax - 0xc], 0
jle 0x41bdc4
push 0x3e
push eax
call fcn.00469c09
add esp, 8
test eax, eax
je 0x41bdc4
sub eax, dword [esp + 0x10]
sar eax, 1
cmp eax, 0xffffffff
je 0x41bdc4
add eax, 1
push eax
lea ecx, [esp + 0xa0]
push ecx
lea ecx, [esp + 0x18]
call fcn.00416120
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x284], 0x10
call fcn.00404670
lea ecx, [esp + 0x9c]
jmp 0x41bdb7
mov edx, dword [esp + 0x10]
push 8
push str.__SMALL_
push edx
call fcn.0046a217
add esp, 0xc
test eax, eax
jne 0x41becf
mov eax, dword [esp + 0x10]
sub dword [esp + 0x14], 8
cmp dword [eax - 0xc], 0
jle 0x41bd2a
push 0x3e
push eax
call fcn.00469c09
add esp, 8
test eax, eax
je 0x41bd2a
sub eax, dword [esp + 0x10]
sar eax, 1
cmp eax, 0xffffffff
je 0x41bd2a
add eax, 1
push eax
lea eax, [esp + 0xfc]
push eax
lea ecx, [esp + 0x18]
call fcn.00416120
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x284], 0x11
call fcn.00404670
lea ecx, [esp + 0xf8]
jmp 0x41bd1d
mov ecx, dword [esp + 0x10]
push esi
push str._SUB_
push ecx
call fcn.0046a217
add esp, 0xc
test eax, eax
mov eax, dword [esp + 0x10]
jne 0x41bf55
sub dword [esp + 0x14], esi
cmp dword [eax - 0xc], 0
jle 0x41bf49
push 0x3e
push eax
call fcn.00469c09
add esp, 8
test eax, eax
je 0x41bf49
sub eax, dword [esp + 0x10]
sar eax, 1
cmp eax, 0xffffffff
je 0x41bf49
add eax, 1
push eax
lea edx, [esp + 0xa8]
push edx
lea ecx, [esp + 0x18]
call fcn.00416120
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x284], 0x12
call fcn.00404670
lea ecx, [esp + 0xa4]
mov byte [esp + 0x280], 3
call fcn.00419210
add dword [ebx + 0x144], 1
jmp 0x41d2e1
push edi
push str.__SUB_
push eax
call fcn.0046a217
add esp, 0xc
test eax, eax
jne 0x41bfe7
mov eax, dword [esp + 0x10]
sub dword [esp + 0x14], edi
cmp dword [eax - 0xc], 0
jle 0x41bfcb
push 0x3e
push eax
call fcn.00469c09
add esp, 8
test eax, eax
je 0x41bfcb
sub eax, dword [esp + 0x10]
sar eax, 1
cmp eax, 0xffffffff
je 0x41bfcb
add eax, 1
push eax
lea ecx, [esp + 0x13c]
push ecx
lea ecx, [esp + 0x18]
call fcn.00416120
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x284], 0x13
call fcn.00404670
lea ecx, [esp + 0x138]
mov byte [esp + 0x280], 3
call fcn.00419210
mov eax, dword [ebx + 0x144]
test eax, eax
je 0x41d2e1
add eax, 0xffffffff
mov dword [ebx + 0x144], eax
jmp 0x41d2e1
mov edx, dword [esp + 0x10]
push esi
push str._SUP_
push edx
call fcn.0046a217
add esp, 0xc
test eax, eax
jne 0x41c06d
mov eax, dword [esp + 0x10]
sub dword [esp + 0x14], esi
cmp dword [eax - 0xc], 0
jle 0x41c061
push 0x3e
push eax
call fcn.00469c09
add esp, 8
test eax, eax
je 0x41c061
sub eax, dword [esp + 0x10]
sar eax, 1
cmp eax, 0xffffffff
je 0x41c061
add eax, 1
push eax
lea eax, [esp + 0xb0]
push eax
lea ecx, [esp + 0x18]
call fcn.00416120
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x284], 0x14
call fcn.00404670
lea ecx, [esp + 0xac]
mov byte [esp + 0x280], 3
call fcn.00419210
add dword [ebx + 0x148], 1
jmp 0x41d2e1
mov ecx, dword [esp + 0x10]
push edi
push str.__SUP_
push ecx
call fcn.0046a217
add esp, 0xc
test eax, eax
mov eax, dword [esp + 0x10]
jne 0x41c103
sub dword [esp + 0x14], edi
cmp dword [eax - 0xc], 0
jle 0x41c0e7
push 0x3e
push eax
call fcn.00469c09
add esp, 8
test eax, eax
je 0x41c0e7
sub eax, dword [esp + 0x10]
sar eax, 1
cmp eax, 0xffffffff
je 0x41c0e7
add eax, 1
push eax
lea edx, [esp + 0x108]
push edx
lea ecx, [esp + 0x18]
call fcn.00416120
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x284], 0x15
call fcn.00404670
lea ecx, [esp + 0x104]
mov byte [esp + 0x280], 3
call fcn.00419210
mov eax, dword [ebx + 0x148]
test eax, eax
je 0x41d2e1
add eax, 0xffffffff
mov dword [ebx + 0x148], eax
jmp 0x41d2e1
push esi
push str._FONT
push eax
call fcn.0046a217
add esp, 0xc
test eax, eax
jne 0x41c791
mov eax, dword [esp + 0x10]
cmp dword [eax - 0xc], 0
jle 0x41d2e1
push 0x3e
push eax
call fcn.00469c09
add esp, 8
test eax, eax
je 0x41d2e1
sub eax, dword [esp + 0x10]
sar eax, 1
mov ebx, eax
cmp ebx, 0xffffffff
mov dword [esp + 0x40], ebx
je 0x41d2dd
lea ecx, [ebx - 5]
push ecx
push 5
lea edx, [esp + 0x20]
push edx
lea ecx, [esp + 0x1c]
call fcn.00414d20
lea eax, [ebx + 1]
mov byte [esp + 0x280], 0x16
mov esi, dword [esp + 0x18]
mov edi, dword [esi - 0xc]
push eax
lea ecx, [esp + 0xb8]
push ecx
lea ecx, [esp + 0x18]
call fcn.00416120
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x284], 0x17
call fcn.00404670
lea ecx, [esp + 0xb4]
mov byte [esp + 0x280], 0x16
call fcn.00419210
test edi, edi
jle 0x41c772
mov eax, dword [esi - 0xc]
test eax, eax
jle 0x41c20b
movzx eax, word [esi]
cmp ax, 0x20
jne 0x41c20b
push 1
lea edx, [esp + 0x124]
push edx
lea ecx, [esp + 0x20]
sub edi, 1
call fcn.00416120
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x284], 0x18
call fcn.00404670
lea ecx, [esp + 0x120]
mov byte [esp + 0x280], 0x16
call fcn.00419210
mov esi, dword [esp + 0x18]
jmp 0x41c766
push 5
push str.COLOR
push esi
call fcn.0046a217
add esp, 0xc
test eax, eax
jne 0x41c351
cmp dword [esi - 0xc], eax
jle 0x41c772
push 0x22
push esi
call fcn.00469c09
add esp, 8
test eax, eax
je 0x41c772
sub eax, esi
sar eax, 1
cmp eax, 0xffffffff
je 0x41c772
or ecx, 0xffffffff
sub ecx, eax
add eax, 1
push eax
lea edx, [esp + 0xc0]
add edi, ecx
push edx
lea ecx, [esp + 0x20]
call fcn.00416120
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x284], 0x19
call fcn.00404670
lea ecx, [esp + 0xbc]
mov byte [esp + 0x280], 0x16
call fcn.00419210
mov esi, dword [esp + 0x18]
cmp dword [esi - 0xc], 0
jle 0x41c766
push 0x22
push esi
call fcn.00469c09
add esp, 8
test eax, eax
je 0x41c766
sub eax, esi
sar eax, 1
mov ebx, eax
cmp ebx, 0xffffffff
je 0x41c766
push ebx
lea eax, [esp + 0x68]
push eax
lea ecx, [esp + 0x20]
call fcn.00414dd0
mov edi, dword [esp + 0x64]
lea ecx, [esp + 0xfc]
push ecx
mov dword [esp + method.CXNamedColors.virtual_0], vtable.CXNamedColors.0
call fcn.0041e460
add ebx, 1
mov byte [esp + 0x280], 0x1b
mov edx, dword [esp + 0x100]
push ebx
lea eax, [esp + 0x74]
push eax
lea ecx, [esp + 0x20]
mov dword [esp + 0x5c], edx
call fcn.00416120
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x284], 0x1c
call fcn.00404670
lea ecx, [esp + 0x70]
call fcn.00419210
mov esi, dword [esp + 0x18]
mov edi, dword [esi - 0xc]
lea ecx, [esp + 0x64]
mov dword [esp + 0xfc], vtable.CXNamedColors.0
mov byte [esp + 0x280], 0x16
call fcn.00419210
jmp 0x41c766
push 7
push str.BGCOLOR
push esi
call fcn.0046a217
add esp, 0xc
test eax, eax
jne 0x41c49d
cmp dword [esi - 0xc], eax
jle 0x41c772
push 0x22
push esi
call fcn.00469c09
add esp, 8
test eax, eax
je 0x41c772
sub eax, esi
sar eax, 1
cmp eax, 0xffffffff
je 0x41c772
or ecx, 0xffffffff
sub ecx, eax
add eax, 1
push eax
lea edx, [esp + 0xc8]
add edi, ecx
push edx
lea ecx, [esp + 0x20]
call fcn.00416120
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x284], 0x1d
call fcn.00404670
lea ecx, [esp + 0xc4]
mov byte [esp + 0x280], 0x16
call fcn.00419210
mov esi, dword [esp + 0x18]
cmp dword [esi - 0xc], 0
jle 0x41c766
push 0x22
push esi
call fcn.00469c09
add esp, 8
test eax, eax
je 0x41c766
sub eax, esi
sar eax, 1
mov ebx, eax
cmp ebx, 0xffffffff
je 0x41c766
push ebx
lea eax, [esp + 0x64]
push eax
lea ecx, [esp + 0x20]
call fcn.00414dd0
mov edi, dword [esp + 0x60]
lea ecx, [esp + 0x108]
push ecx
mov dword [esp + method.CXNamedColors.virtual_0], vtable.CXNamedColors.0
call fcn.0041e460
add ebx, 1
mov byte [esp + 0x280], 0x1f
mov edx, dword [esp + 0x10c]
push ebx
lea eax, [esp + 0x128]
push eax
lea ecx, [esp + 0x20]
mov dword [esp + 0x60], edx
call fcn.00416120
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x284], 0x20
call fcn.00404670
lea ecx, [esp + 0x124]
call fcn.00419210
mov esi, dword [esp + 0x18]
mov edi, dword [esi - 0xc]
lea ecx, [esp + 0x60]
mov dword [esp + method.CXNamedColors.virtual_0], vtable.CXNamedColors.0
mov byte [esp + 0x280], 0x16
call fcn.00419210
jmp 0x41c766
push 4
push str.FACE
push esi
call fcn.0046a217
add esp, 0xc
test eax, eax
jne 0x41c5de
cmp dword [esi - 0xc], eax
jle 0x41c772
push 0x22
push esi
call fcn.00469c09
add esp, 8
test eax, eax
je 0x41c772
sub eax, esi
sar eax, 1
cmp eax, 0xffffffff
je 0x41c772
or ecx, 0xffffffff
sub ecx, eax
add eax, 1
push eax
lea edx, [esp + 0xd0]
add edi, ecx
push edx
lea ecx, [esp + 0x20]
call fcn.00416120
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x284], 0x21
call fcn.00404670
lea ecx, [esp + 0xcc]
mov byte [esp + 0x280], 0x16
call fcn.00419210
mov esi, dword [esp + 0x18]
cmp dword [esi - 0xc], 0
jle 0x41c766
push 0x22
push esi
call fcn.00469c09
add esp, 8
test eax, eax
je 0x41c766
sub eax, esi
sar eax, 1
mov ebx, eax
cmp ebx, 0xffffffff
je 0x41c766
push 0x40
lea eax, [esp + 0x1c4]
push 0
push eax
call fcn.0046ac40
add esp, 0xc
push ebx
lea ecx, [esp + 0x1c4]
push esi
push ecx
call fcn.00469652
or edx, 0xffffffff
sub edx, ebx
add edi, edx
add esp, 0xc
test edi, edi
lea ecx, [esp + 0x18]
jle 0x41c5c8
add ebx, 1
push ebx
lea eax, [esp + 0x120]
push eax
call fcn.00416120
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x284], 0x22
call fcn.00404670
lea ecx, [esp + 0x11c]
mov byte [esp + 0x280], 0x16
call fcn.00419210
mov esi, dword [esp + 0x18]
mov edi, dword [esi - 0xc]
jmp 0x41c766
push 0x4f1164
call fcn.00403ee0
mov esi, dword [esp + 0x18]
mov edi, dword [esi - 0xc]
jmp 0x41c766
push 4
push str.SIZE
push esi
call fcn.0046a217
add esp, 0xc
test eax, eax
jne 0x41c70f
cmp dword [esi - 0xc], eax
jle 0x41c772
push 0x22
push esi
call fcn.00469c09
add esp, 8
test eax, eax
je 0x41c772
sub eax, esi
sar eax, 1
cmp eax, 0xffffffff
je 0x41c772
or ecx, 0xffffffff
sub ecx, eax
add eax, 1
push eax
lea edx, [esp + 0xd8]
add edi, ecx
push edx
lea ecx, [esp + 0x20]
call fcn.00416120
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x284], 0x23
call fcn.00404670
lea ecx, [esp + 0xd4]
mov byte [esp + 0x280], 0x16
call fcn.00419210
mov esi, dword [esp + 0x18]
cmp dword [esi - 0xc], 0
jle 0x41c766
push 0x22
push esi
call fcn.00469c09
add esp, 8
test eax, eax
je 0x41c766
sub eax, esi
sar eax, 1
mov ebx, eax
cmp ebx, 0xffffffff
je 0x41c766
push esi
call fcn.004699f1
sub dword [esp + 0x1a8], eax
or eax, 0xffffffff
sub eax, ebx
add edi, eax
add esp, 4
test edi, edi
mov dword [esp + 0x5c], 1
jle 0x41c6f8
add ebx, 1
push ebx
lea ecx, [esp + 0x130]
push ecx
lea ecx, [esp + 0x20]
call fcn.00416120
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x284], 0x24
call fcn.00404670
lea ecx, [esp + 0x12c]
mov byte [esp + 0x280], 0x16
call fcn.00419210
mov esi, dword [esp + 0x18]
mov edi, dword [esi - 0xc]
jmp 0x41c766
push 0x4f1164
lea ecx, [esp + 0x1c]
call fcn.00403ee0
mov esi, dword [esp + 0x18]
mov edi, dword [esi - 0xc]
jmp 0x41c766
mov eax, dword [esi - 0xc]
test eax, eax
jle 0x41c766
movzx eax, word [esi]
cmp ax, 0x20
je 0x41c766
push 1
lea edx, [esp + 0xe0]
push edx
lea ecx, [esp + 0x20]
sub edi, 1
call fcn.00416120
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x284], 0x25
call fcn.00404670
lea ecx, [esp + 0xdc]
mov byte [esp + 0x280], 0x16
call fcn.00419210
mov esi, dword [esp + 0x18]
mov eax, dword [esi - 0xc]
test eax, eax
jg 0x41c716
test edi, edi
mov ebx, dword [esp + 0x40]
jg 0x41c1b6
or eax, 0xffffffff
sub eax, ebx
add dword [esp + 0x14], eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x280], 3
call fcn.00419210
jmp 0x41d2dd
mov ecx, dword [esp + 0x10]
mov esi, 7
push esi
push str.__FONT_
push ecx
call fcn.0046a217
add esp, 0xc
test eax, eax
mov eax, dword [esp + 0x10]
jne 0x41c85a
sub dword [esp + 0x14], esi
cmp dword [eax - 0xc], 0
jle 0x41c814
push 0x3e
push eax
call fcn.00469c09
add esp, 8
test eax, eax
je 0x41c814
sub eax, dword [esp + 0x10]
sar eax, 1
cmp eax, 0xffffffff
je 0x41c814
add eax, 1
push eax
lea edx, [esp + 0x138]
push edx
lea ecx, [esp + 0x18]
call fcn.00416120
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x284], 0x26
call fcn.00404670
lea ecx, [esp + 0x134]
mov byte [esp + 0x280], 3
call fcn.00419210
cmp dword [esp + 0x5c], 0
mov ecx, dword [esp + 0x78]
mov eax, dword [esp + 0x74]
mov dword [esp + 0x58], ecx
mov ecx, 0x17
lea esi, [esp + 0x204]
lea edi, [esp + 0x1a4]
mov dword [esp + 0x54], eax
rep movsd dword es:[edi], dword [esi]
je 0x41c84d
mov edx, dword [esp + 0x170]
add dword [ebx + 0x1a0], edx
mov dword [esp + 0x5c], 0
jmp 0x41d2e1
push edi
push str._CODE_
push eax
call fcn.0046a217
add esp, 0xc
test eax, eax
jne 0x41c8fc
mov eax, dword [esp + 0x10]
sub dword [esp + 0x14], edi
cmp dword [eax - 0xc], 0
jle 0x41c8d4
push 0x3e
push eax
call fcn.00469c09
add esp, 8
test eax, eax
je 0x41c8d4
sub eax, dword [esp + 0x10]
sar eax, 1
cmp eax, 0xffffffff
je 0x41c8d4
add eax, 1
push eax
lea ecx, [esp + 0x84]
push ecx
lea ecx, [esp + 0x18]
call fcn.00416120
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x284], 0x27
call fcn.00404670
lea ecx, [esp + 0x80]
mov byte [esp + 0x280], 3
call fcn.00419210
xor eax, eax
jmp 0x41c8e0
movzx ecx, word [eax + str.Courier_New]
mov word [esp + eax + 0x1c0], cx
add eax, 2
test cx, cx
jne 0x41c8e0
jmp 0x41d2e1
mov edx, dword [esp + 0x10]
push esi
push str.__CODE_
push edx
call fcn.0046a217
add esp, 0xc
test eax, eax
jne 0x41c994
mov eax, dword [esp + 0x10]
sub dword [esp + 0x14], esi
cmp dword [eax - 0xc], 0
jle 0x41c97a
push 0x3e
push eax
call fcn.00469c09
add esp, 8
test eax, eax
je 0x41c97a
sub eax, dword [esp + 0x10]
sar eax, 1
cmp eax, 0xffffffff
je 0x41c97a
add eax, 1
push eax
lea eax, [esp + 0x8c]
push eax
lea ecx, [esp + 0x18]
call fcn.00416120
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x284], 0x28
call fcn.00404670
lea ecx, [esp + 0x88]
mov byte [esp + 0x280], 3
call fcn.00419210
mov ecx, 0x17
lea esi, [esp + 0x204]
lea edi, [esp + 0x1a4]
rep movsd dword es:[edi], dword [esi]
jmp 0x41d2e1
mov ecx, dword [esp + 0x10]
push 8
push str._A_HREF
push ecx
call fcn.0046a217
add esp, 0xc
test eax, eax
jne 0x41ca74
mov eax, dword [esp + 0x10]
cmp dword [eax - 0xc], 0
jle 0x41cf26
push 0x3e
push eax
call fcn.00469c09
add esp, 8
test eax, eax
je 0x41cf26
sub eax, dword [esp + 0x10]
sar eax, 1
mov esi, eax
cmp esi, 0xffffffff
je 0x41cf26
lea edx, [esi - 0xa]
push edx
push 9
lea eax, [esp + 0x98]
push eax
lea ecx, [esp + 0x1c]
call fcn.00414d20
push eax
lea ecx, [esp + 0x40]
mov byte [esp + 0x284], 0x29
call fcn.00404670
lea ecx, [esp + 0x90]
mov byte [esp + 0x280], 3
call fcn.00419210
add esi, 1
push esi
lea ecx, [esp + 0x9c]
push ecx
lea ecx, [esp + 0x18]
call fcn.00416120
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x284], 0x2a
call fcn.00404670
lea ecx, [esp + 0x98]
mov byte [esp + 0x280], 3
call fcn.00419210
mov edx, dword [esp + 0x10]
mov eax, dword [edx - 0xc]
mov dword [esp + 0x14], eax
mov dword [ebx + 0x15c], 1
jmp 0x41d2e1
mov ecx, dword [esp + 0x10]
push 4
push str.__A_
push ecx
call fcn.0046a217
add esp, 0xc
test eax, eax
jne 0x41cad9
push 4
lea edx, [esp + 0xa4]
push edx
lea ecx, [esp + 0x18]
call fcn.00416120
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x284], 0x2b
call fcn.00404670
lea ecx, [esp + 0xa0]
mov byte [esp + 0x280], 3
call fcn.00419210
sub dword [esp + 0x14], 4
mov dword [ebx + 0x15c], 0
jmp 0x41d2e1
mov eax, dword [esp + 0x10]
push 3
push 0x4f53b8
push eax
call fcn.0046a217
add esp, 0xc
test eax, eax
jne 0x41cdb5
mov eax, dword [esp + 0x10]
cmp dword [eax - 0xc], 0
jle 0x41cd91
push 0x3e
push eax
call fcn.00469c09
add esp, 8
test eax, eax
je 0x41cd91
sub eax, dword [esp + 0x10]
sar eax, 1
cmp eax, 0xffffffff
mov dword [esp + 0x40], eax
je 0x41cd91
push 3
lea ecx, [esp + 0x28]
push ecx
lea ecx, [esp + 0x18]
call fcn.00416120
mov edx, dword [esp + 0x40]
add edx, 1
mov byte [esp + 0x280], 0x2c
mov esi, dword [esp + 0x24]
mov edi, dword [esi - 0xc]
push edx
lea eax, [esp + 0xac]
push eax
lea ecx, [esp + 0x18]
call fcn.00416120
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x284], 0x2d
call fcn.00404670
lea ecx, [esp + 0xa8]
mov byte [esp + 0x280], 0x2c
call fcn.00419210
test edi, edi
jle 0x41cd71
mov eax, dword [esi - 0xc]
test eax, eax
jle 0x41cbe4
movzx eax, word [esi]
cmp ax, 0x20
jne 0x41cbe4
push 1
lea ecx, [esp + 0xb4]
push ecx
lea ecx, [esp + 0x2c]
sub edi, 1
call fcn.00416120
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x284], 0x2e
call fcn.00404670
lea ecx, [esp + 0xb0]
mov byte [esp + 0x280], 0x2c
call fcn.00419210
mov esi, dword [esp + 0x24]
jmp 0x41cd69
push 4
push str.SIZE
push esi
call fcn.0046a217
add esp, 0xc
test eax, eax
jne 0x41cd12
cmp dword [esi - 0xc], eax
jle 0x41cd71
push 0x3d
push esi
call fcn.00469c09
add esp, 8
test eax, eax
je 0x41cd71
sub eax, esi
sar eax, 1
cmp eax, 0xffffffff
je 0x41cd71
or edx, 0xffffffff
sub edx, eax
add eax, 1
push eax
lea eax, [esp + 0xbc]
push eax
lea ecx, [esp + 0x2c]
add edi, edx
call fcn.00416120
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x284], 0x2f
call fcn.00404670
lea ecx, [esp + 0xb8]
mov byte [esp + 0x280], 0x2c
call fcn.00419210
mov esi, dword [esp + 0x24]
cmp dword [esi - 0xc], 0
jle 0x41cd69
push 0x3e
push esi
call fcn.00469c09
add esp, 8
test eax, eax
je 0x41cd69
sub eax, esi
sar eax, 1
mov ebx, eax
cmp ebx, 0xffffffff
je 0x41cd69
push ebx
lea ecx, [esp + 0x70]
push ecx
lea ecx, [esp + 0x2c]
call fcn.00414dd0
mov byte [esp + 0x280], 0x30
mov edx, dword [esp + 0x6c]
push edx
call fcn.004699f1
mov ecx, dword [esp + 0x20]
add esp, 4
add ebx, 1
push ebx
lea edx, [esp + 0xc4]
mov dword [ecx + 0x150], eax
push edx
lea ecx, [esp + 0x2c]
call fcn.00416120
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x284], 0x31
call fcn.00404670
lea ecx, [esp + 0xc0]
call fcn.00419210
mov esi, dword [esp + 0x24]
mov edi, dword [esi - 0xc]
lea ecx, [esp + 0x6c]
mov byte [esp + 0x280], 0x2c
call fcn.00419210
jmp 0x41cd69
mov eax, dword [esi - 0xc]
test eax, eax
jle 0x41cd69
movzx eax, word [esi]
cmp ax, 0x20
je 0x41cd69
push 1
lea eax, [esp + 0xcc]
push eax
lea ecx, [esp + 0x2c]
sub edi, 1
call fcn.00416120
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x284], 0x32
call fcn.00404670
lea ecx, [esp + 0xc8]
mov byte [esp + 0x280], 0x2c
call fcn.00419210
mov esi, dword [esp + 0x24]
mov eax, dword [esi - 0xc]
test eax, eax
jg 0x41cd19
test edi, edi
jg 0x41cb8f
or ecx, 0xffffffff
sub ecx, dword [esp + 0x40]
mov byte [esp + 0x280], 3
add dword [esp + 0x14], ecx
lea ecx, [esp + 0x24]
call fcn.00419210
mov ebx, dword [esp + 0x1c]
mov esi, 1
add dword [ebx + 0x14c], esi
push 0x4f53c0
lea ecx, [esp + 0x24]
call fcn.00403ee0
mov dword [ebx + 0x1a4], esi
jmp 0x41cf26
lea edx, [esp + 0x10]
push edx
lea ecx, [esp + 0x24]
call fcn.00404670
mov eax, dword [esp + 0x20]
cmp dword [eax - 0xc], 0
jle 0x41cf0a
push 0x3c
push eax
call fcn.00469c09
add esp, 8
test eax, eax
je 0x41cf0a
sub eax, dword [esp + 0x20]
sar eax, 1
mov esi, eax
cmp esi, 0xffffffff
je 0x41cf0a
mov eax, dword [esp + 0x10]
push 4
push str._BR_
push eax
call fcn.0046a217
add esp, 0xc
test eax, eax
jne 0x41ce68
sub dword [esp + 0x14], 4
push 0x4f53c0
lea ecx, [esp + 0x24]
call fcn.00403ee0
push 4
lea ecx, [esp + 0xd4]
push ecx
lea ecx, [esp + 0x18]
mov dword [ebx + 0x1a4], 1
call fcn.00416120
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x284], 0x33
call fcn.00404670
lea ecx, [esp + 0xd0]
mov byte [esp + 0x280], 3
call fcn.00419210
jmp 0x41cf26
push esi
lea edx, [esp + 0xdc]
push edx
lea ecx, [esp + 0x18]
call fcn.00414dd0
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x284], 0x34
call fcn.00404670
lea ecx, [esp + 0xd8]
mov byte [esp + 0x280], 3
call fcn.00419210
mov eax, dword [esp + 0x20]
cmp dword [eax - 0xc], 0
jg 0x41ced0
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx - 0xc]
test eax, eax
je 0x41ced0
jl 0x41d3ad
movzx eax, word [ecx]
lea esi, [esp + 0x20]
call fcn.0041e3f0
mov esi, 1
sub dword [esp + 0x14], esi
push esi
lea ecx, [esp + 0xe4]
push ecx
lea ecx, [esp + 0x18]
call fcn.00416120
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x284], 0x35
call fcn.00404670
lea ecx, [esp + 0xe0]
mov byte [esp + 0x280], 3
call fcn.00419210
jmp 0x41cf26
lea edx, [esp + 0x10]
push edx
lea ecx, [esp + 0x24]
call fcn.00404670
push 0x4f1164
lea ecx, [esp + 0x14]
call fcn.00403ee0
mov eax, dword [ebx + 0x134]
mov cl, byte [ebx + 0x130]
mov dl, byte [ebx + 0x138]
neg eax
sbb eax, eax
and eax, 0x12c
add eax, 0x190
mov dword [esp + 0x1b4], eax
mov al, byte [ebx + 0x140]
mov byte [esp + 0x1b9], cl
lea esi, [ebx + 0x154]
mov ecx, esi
mov byte [esp + 0x1b8], dl
mov byte [esp + 0x1ba], al
call fcn.0045e607
lea ecx, [esp + 0x1a4]
push ecx
mov ecx, esi
call fcn.004016f0
mov edx, dword [esp + 0x54]
push edx
lea ecx, [esp + 0x48]
call fcn.0045de6a
mov ecx, ebx
call fcn.0045c382
test al, 0x20
lea ecx, [esp + 0x44]
je 0x41cfaa
push 1
call fcn.0045de3c
jmp 0x41cfb4
mov eax, dword [esp + 0x58]
push eax
call fcn.0045de0d
push esi
lea ecx, [esp + 0x48]
call fcn.0045e68c
mov edx, dword [esp + 0x4c]
lea ecx, [esp + 0x168]
push ecx
push edx
call dword [sym.imp.GDI32.dll_GetTextMetricsW]
mov eax, dword [esp + 0x16c]
cdq
sub eax, edx
mov esi, eax
sar esi, 1
cmp dword [ebx + 0x144], 0
je 0x41cff6
add dword [esp + 0x2c], esi
add dword [esp + 0x34], esi
add dword [ebx + 0x1a0], esi
cmp dword [ebx + 0x148], 0
je 0x41d00d
sub dword [esp + 0x2c], esi
sub dword [esp + 0x34], esi
sub dword [ebx + 0x1a0], esi
mov eax, dword [esp + 0x1c]
cmp dword [eax + 0x13c], 0
mov ebx, dword [esp + 0x28]
je 0x41d063
mov edx, dword [esp + 0x20]
mov eax, edx
lea edi, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x41d027
sub eax, edi
lea ecx, [esp + 0x148]
push ecx
sar eax, 1
push eax
push edx
mov edx, dword [esp + 0x54]
push edx
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32W]
mov eax, dword [esp + 0x30]
sub eax, dword [esp + 0x28]
sub eax, dword [esp + 0x148]
cdq
sub eax, edx
sar eax, 1
mov dword [esp + 0x28], eax
mov ecx, dword [esp + 0x48]
mov edi, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
lea eax, [esp + 0x28]
push eax
push ecx
mov ecx, dword [esp + 0x40]
push edi
call fcn.0041d3c0
lea edx, [esp + 0x20]
push 0x4f53c0
push edx
mov dword [esp + 0x40], eax
mov dword [esp + 0x30], ebx
call fcn.004041e0
add esp, 8
test al, al
je 0x41d0a5
mov dword [esp + 0x38], 0
cmp dword [edi + 0x144], 0
je 0x41d0bc
sub dword [esp + 0x2c], esi
sub dword [esp + 0x34], esi
sub dword [edi + 0x1a0], esi
cmp dword [edi + 0x148], 0
je 0x41d0d3
add dword [esp + 0x2c], esi
add dword [esp + 0x34], esi
add dword [edi + 0x1a0], esi
cmp dword [edi + 0x15c], 0
je 0x41d1f9
mov eax, dword [esp + 0x20]
mov ecx, dword [eax - 0xc]
lea edx, [esp + 0x140]
push edx
push ecx
push eax
mov eax, dword [esp + 0x54]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32W]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x30]
mov eax, dword [esp + 0x2c]
mov esi, dword [esp + 0x38]
sub esi, dword [esp + 0x140]
mov dword [esp + 0x150], ecx
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x158], edx
mov edx, dword [esp + 0x144]
push 0x10
mov edi, eax
mov dword [esp + 0x160], ecx
lea ebx, [edx + eax]
call fcn.00456d1d
add esp, 4
test eax, eax
je 0x41d159
mov ecx, dword [esp + 0x38]
mov dword [eax], esi
mov dword [eax + 4], edi
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ebx
mov esi, eax
jmp 0x41d15b
xor esi, esi
mov edi, dword [esp + 0x1c]
push esi
lea ecx, [edi + 0x160]
call fcn.0041ac40
mov eax, dword [edi + 0x17c]
lea ecx, [edi + 0x174]
lea edx, [esp + 0x3c]
push edx
push eax
call fcn.00463e4c
cmp dword [edi + 0x128], 0
je 0x41d1d6
mov eax, dword [esp + 0x3c]
push 4
push str.APP:
push eax
call fcn.0046a217
add esp, 0xc
test eax, eax
je 0x41d1d6
mov ecx, dword [esp + 0x3c]
push 5
push str._APP:
push ecx
call fcn.0046a217
add esp, 0xc
test eax, eax
je 0x41d1d6
mov ebx, dword [esp + 0x68]
mov edx, dword [esp + 0x3c]
push ebx
push esi
push edx
push edi
lea ecx, [edi + 0x54]
call fcn.0045f9a9
add ebx, 1
mov dword [esp + 0x68], ebx
cmp dword [edi + 0x188], 0
jne 0x41d1f9
mov eax, dword [edi + 0x20]
push 0
push 0x50
push 1
push eax
mov dword [edi + 0x188], 1
call dword [sym.imp.USER32.dll_SetTimer]
cmp dword [edi + 0x14c], 0
je 0x41d2bf
mov ecx, dword [esp + 0x54]
mov esi, dword [edi + 0x150]
push ecx
push esi
push 0
lea ecx, [esp + 0x120]
call fcn.0045e72c
lea edx, [esp + 0x114]
push edx
lea ecx, [esp + 0x48]
mov byte [esp + 0x284], 0x36
call fcn.0045e68c
mov ecx, dword [esp + 0x28]
sub ecx, dword [edi + 0x198]
mov ebx, eax
mov eax, dword [esp + 0x2c]
push eax
push ecx
lea edx, [esp + 0x168]
push edx
lea ecx, [esp + 0x50]
call fcn.0045e19f
mov ecx, dword [edi + 0x19c]
mov eax, dword [esp + 0x2c]
add ecx, dword [esp + 0x30]
push eax
push ecx
lea ecx, [esp + 0x4c]
call fcn.0045ded7
test ebx, ebx
je 0x41d283
push ebx
lea ecx, [esp + 0x48]
call fcn.0045e68c
add dword [edi + 0x1a0], esi
add dword [esp + 0x2c], esi
add dword [esp + 0x34], esi
add dword [edi + 0x14c], 0xffffffff
mov byte [esp + 0x280], 3
lea ecx, [esp + 0x114]
mov dword [esp + 0x38], 0
mov dword [esp + method.CPen.virtual_0], vtable.CPen.0
call fcn.004015a0
cmp dword [edi + 0x1a4], 0
jne 0x41d2d3
mov edx, dword [esp + 0x20]
mov eax, dword [edx - 0xc]
sub dword [esp + 0x14], eax
mov dword [edi + 0x1a4], 0
mov ebx, dword [esp + 0x1c]
cmp dword [esp + 0x14], 0
jg 0x41b580
mov ecx, dword [esp + 0xe8]
push ecx
lea ecx, [esp + 0x48]
call fcn.0045e68c
mov byte [esp + 0x280], 2
mov eax, dword [esp + 0x3c]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41d325
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x280], 1
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
or edx, 0xffffffff
lea ecx, [eax + 0xc]
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41d34d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x280], 0
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
or edx, 0xffffffff
lea ecx, [eax + 0xc]
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41d375
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x44]
mov dword [esp + 0x280], 0xffffffff
call fcn.0045e3f6
mov ecx, dword [esp + 0x278]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x260]
xor ecx, esp
call fcn.0046875c
mov esp, ebp
pop ebp
ret
push 0x80070057
call fcn.00401440
int3