Function at 0x45e768
Capabilities:
Get graphical window text
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x99
push 0
push 0
dec ecx
jne 0x45e770
push ebx
push esi
push edi
xor eax, eax
push ebp
push 0x462bc3
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x465168]
mov eax, dword [eax]
sub eax, 1
jb 0x45e79b
je 0x45e7eb
jmp 0x45ea1a
mov eax, dword [0x4650a0]
mov eax, dword [eax]
cmp byte [eax + 0xe42c], 0
jne 0x45e7c4
mov eax, dword [0x4653a0]
mov eax, dword [eax]
mov edx, dword [0x4650a0]
mov edx, dword [edx]
mov byte [edx + eax + 0xeb51], 0
jmp 0x45e7db
mov eax, dword [0x4653a0]
mov eax, dword [eax]
mov edx, dword [0x4650a0]
mov edx, dword [edx]
mov byte [edx + eax + 0xeb51], 1
mov eax, dword [0x465168]
mov dword [eax], 1
jmp case.0x4612e3.3
mov eax, dword [0x4653a0]
mov eax, dword [eax]
mov edx, dword [0x4650a0]
mov edx, dword [edx]
cmp byte [edx + eax + 0xeb51], 0
je case.0x4612e3.3
mov eax, dword [0x4653a0]
mov eax, dword [eax]
mov edx, dword [0x4650a0]
mov edx, dword [edx]
mov byte [edx + eax + 0xeb51], 0
mov eax, dword [0x4652d4]
cmp dword [eax], 0
je 0x45e9ff
lea eax, [ebp - 0x1a0]
mov edx, dword [0x4652d4]
mov edx, dword [edx]
mov ecx, 0xff
call fcn.004042a8
lea edx, [ebp - 0x1a0]
mov eax, dword [0x4653a0]
imul eax, dword [eax], 0x33
mov ecx, dword [0x4650a0]
mov ecx, dword [ecx]
lea eax, [ecx + eax + 0x79f2]
mov cl, 0x32
call fcn.00402b18
lea eax, [ebp - 0x1a4]
mov edx, dword [0x4653a0]
mov edx, dword [edx]
lea edx, [edx + edx*8]
mov ecx, dword [0x4650a0]
mov ecx, dword [ecx]
lea edx, [ecx + edx + 0xe524]
call fcn.00404270
mov eax, dword [ebp - 0x1a4]
mov edx, 0x462bdc
call fcn.00407ff4
test al, al
jne 0x45e8e1
mov eax, dword [0x4653a0]
mov eax, dword [eax]
lea eax, [eax + eax*8]
mov edx, dword [0x4650a0]
mov edx, dword [edx]
lea edi, [edx + eax + 0xe524]
mov esi, 0x462be4
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
push 2
mov eax, dword [0x4653a0]
mov eax, dword [eax]
push eax
push 0x64
mov eax, dword [0x4650a0]
mov eax, dword [eax]
mov eax, dword [eax + 0xee2c]
push eax
call sub.user32.dll_PostMessageA
mov eax, dword [0x4652d4]
mov eax, dword [eax]
call fcn.004042cc
mov ebx, eax
test ebx, ebx
jle 0x45e93d
mov esi, 1
lea eax, [ebp - 0x1a8]
push eax
mov eax, dword [0x4652d4]
mov eax, dword [eax]
mov ecx, 1
mov edx, esi
call fcn.0042babc
mov eax, dword [ebp - 0x1a8]
call fcn.004044cc
mov al, byte [eax]
push 0
and eax, 0xff
push eax
push 0x102
mov eax, dword [0x4654d0]
mov eax, dword [eax]
push eax
call sub.user32.dll_SendMessageA
inc esi
dec ebx
jne 0x45e8f8
push 0
push 9
push pe_nt_image_headers32
mov eax, dword [0x4654d0]
mov eax, dword [eax]
push eax
call sub.user32.dll_SendMessageA
push 0
push 9
push 0x101
mov eax, dword [0x4654d0]
mov eax, dword [eax]
push eax
call sub.user32.dll_SendMessageA
mov eax, dword [0x465334]
mov eax, dword [eax]
call fcn.004042cc
mov ebx, eax
test ebx, ebx
jle 0x45e9c5
mov esi, 1
lea eax, [ebp - 0x1ac]
push eax
mov eax, dword [0x465334]
mov eax, dword [eax]
mov ecx, 1
mov edx, esi
call fcn.0042babc
mov eax, dword [ebp - 0x1ac]
call fcn.004044cc
mov al, byte [eax]
push 0
and eax, 0xff
push eax
push 0x102
mov eax, dword [0x4654d0]
mov eax, dword [eax]
push eax
call sub.user32.dll_SendMessageA
inc esi
dec ebx
jne 0x45e980
push 0x13d024c
push 1
push 0x201
mov eax, dword [0x4654d0]
mov eax, dword [eax]
push eax
call sub.user32.dll_SendMessageA
push 0x13d024c
push 1
push 0x202
mov eax, dword [0x4654d0]
mov eax, dword [eax]
push eax
call sub.user32.dll_SendMessageA
mov eax, dword [0x4652a4]
mov byte [eax], 1
mov eax, dword [0x465168]
mov dword [eax], 0xffffffff
mov eax, dword [0x46514c]
mov dword [eax], 0xbb8
jmp case.0x4612e3.3
mov eax, dword [0x4653a0]
mov eax, dword [eax]
mov edx, dword [0x4650a0]
mov edx, dword [edx]
mov eax, dword [edx + eax*4 + 0xecec]
dec eax
je 0x45ea42
dec eax
je 0x45ea9c
dec eax
je 0x45eac8
jmp 0x45eb87
mov eax, dword [0x4654d0]
mov eax, dword [eax]
push eax
call sub.user32.dll_IsWindowVisible
test eax, eax
je 0x45ea7f
push 0
mov eax, dword [0x4654d0]
mov eax, dword [eax]
push eax
call sub.user32.dll_ShowWindow
mov eax, dword [0x4653a0]
mov eax, dword [eax]
mov edx, dword [0x4650a0]
mov edx, dword [edx]
xor ecx, ecx
mov dword [edx + eax*4 + 0xecec], ecx
jmp 0x45eb87
mov eax, dword [0x4653a0]
mov eax, dword [eax]
mov edx, dword [0x4650a0]
mov edx, dword [edx]
xor ecx, ecx
mov dword [edx + eax*4 + 0xecec], ecx
jmp 0x45eb87
push 5
mov eax, dword [0x4654d0]
mov eax, dword [eax]
push eax
call sub.user32.dll_ShowWindow
mov eax, dword [0x4653a0]
mov eax, dword [eax]
mov edx, dword [0x4650a0]
mov edx, dword [edx]
xor ecx, ecx
mov dword [edx + eax*4 + 0xecec], ecx
jmp 0x45eb87
jmp 0x45eada
xor eax, eax
push ebp
push 0x45eb0f
push dword fs:[eax]
mov dword fs:[eax], esp
pushal
mov ecx, dword [0x466d14]
mov ecx, dword [ecx]
push 1
push ecx
push 2
push 2
mov eax, dword [0x466d18]
push eax
call dword [0x466d10]
popal
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x45eb23
jmp 0x45eb33
mov eax, 0x64
call fcn.00459af0
push 0x13b0165
push 1
push 0x201
mov eax, dword [0x4654d0]
mov eax, dword [eax]
push eax
call sub.user32.dll_SendMessageA
push 0x13b0165
push 1
push 0x202
mov eax, dword [0x4654d0]
mov eax, dword [eax]
push eax
call sub.user32.dll_SendMessageA
mov eax, dword [0x4653a0]
mov eax, dword [eax]
mov edx, dword [0x4650a0]
mov edx, dword [edx]
xor ecx, ecx
mov dword [edx + eax*4 + 0xecec], ecx
xor edx, edx
push ebp
push 0x45ebb4
push dword fs:[edx]
mov dword fs:[edx], esp
xor ebx, ebx
mov eax, dword [0x46506c]
mov eax, dword [eax]
test eax, eax
je 0x45ebaa
mov edx, dword [0x46506c]
mov ebx, dword [eax]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x45ebc8
xor edx, edx
push ebp
push 0x45f49e
push dword fs:[edx]
mov dword fs:[edx], esp
sub ebx, 1
jb 0x45ebef
je 0x45f23f
sub ebx, 4
je 0x45f23f
jmp 0x45f494
xor edx, edx
push ebp
push 0x45f21e
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [0x46556c]
mov byte [eax], 0
mov eax, dword [0x4652c8]
mov eax, dword [eax]
mov edx, dword [0x4650a0]
mov edx, dword [edx]
cmp eax, dword [edx]
jne 0x45ec31
mov eax, dword [0x4650a0]
mov eax, dword [eax]
mov byte [eax + 0xe43b], 0
mov eax, dword [0x4650a0]
mov eax, dword [eax]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x4653a0]
mov eax, dword [eax]
mov edx, dword [0x4650a0]
mov edx, dword [edx]
mov byte [edx + eax + 0xeb84], 0
mov eax, dword [0x4653a0]
mov eax, dword [eax]
mov edx, dword [0x4650a0]
mov edx, dword [edx]
mov byte [edx + eax + 0xebb7], 0
mov eax, dword [0x4653a0]
mov eax, dword [eax]
mov edx, dword [0x4650a0]
mov edx, dword [edx]
mov byte [edx + eax + 0x37], 0
mov eax, dword [0x4653a0]
mov eax, dword [eax]
mov edx, dword [0x4650a0]
mov edx, dword [edx]
mov byte [edx + eax + 4], 0
mov eax, dword [0x4653a0]
mov eax, dword [eax]
mov edx, dword [0x4650a0]
mov edx, dword [edx]
mov byte [edx + eax + 0x6a], 0
mov eax, dword [0x4653a0]
mov eax, dword [eax]
mov edx, dword [0x4650a0]
mov edx, dword [edx]
mov byte [edx + eax + 0x9d], 0
mov eax, dword [0x4653a0]
mov eax, dword [eax]
mov edx, dword [0x4650a0]
mov edx, dword [edx]
mov byte [edx + eax + 0xec83], 0
mov eax, dword [0x4653a0]
mov eax, dword [eax]
mov edx, dword [0x4650a0]
mov edx, dword [edx]
cmp byte [edx + eax + 0xeb51], 1
jne 0x45edf3
push 0x1450191
push 1
push 0x201
mov eax, dword [0x4654d0]
mov eax, dword [eax]
push eax
call sub.user32.dll_SendMessageA
push 0x1450191
push 1
push 0x202
mov eax, dword [0x4654d0]
mov eax, dword [eax]
push eax
call sub.user32.dll_SendMessageA
mov eax, dword [0x46523c]
cmp byte [eax], 1
jne 0x45ed4e
push 0
push 9
push pe_nt_image_headers32
mov eax, dword [0x4654d0]
mov eax, dword [eax]
push eax
call sub.user32.dll_SendMessageA
push 0
push 9
push 0x101
mov eax, dword [0x4654d0]
mov eax, dword [eax]
push eax
call sub.user32.dll_SendMessageA
mov eax, dword [0x465334]
mov eax, dword [eax]
call fcn.004042cc
mov ebx, eax
test ebx, ebx
jle 0x45edaa
mov esi, 1
lea eax, [ebp - 0x1b0]
push eax
mov eax, dword [0x465334]
mov eax, dword [eax]
mov ecx, 1
mov edx, esi
call fcn.0042babc
mov eax, dword [ebp - 0x1b0]
call fcn.004044cc
mov al, byte [eax]
push 0
and eax, 0xff
push eax
push 0x102
mov eax, dword [0x4654d0]
mov eax, dword [eax]
push eax
call sub.user32.dll_SendMessageA
inc esi
dec ebx
jne 0x45ed65
push 0x13d024c
push 1
push 0x201
mov eax, dword [0x4654d0]
mov eax, dword [eax]
push eax
call sub.user32.dll_SendMessageA
push 0x13d024c
push 1
push 0x202
mov eax, dword [0x4654d0]
mov eax, dword [eax]
push eax
call sub.user32.dll_SendMessageA
mov eax, dword [0x4653a0]
mov eax, dword [eax]
mov edx, dword [0x4650a0]
mov edx, dword [edx]
mov byte [edx + eax + 0xeb51], 0
push 1
mov eax, dword [0x4653a0]
mov eax, dword [eax]
push eax
push 0x1f4
mov eax, dword [0x4650a0]
mov eax, dword [eax]
mov eax, dword [eax + 0xee2c]
push eax
call sub.user32.dll_PostMessageA
mov eax, dword [0x4650a0]
mov eax, dword [eax]
cmp byte [eax + 0xe42d], 0
jne 0x45ee3a
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp case.0x4612e3.3
mov eax, dword [0x4652a4]
cmp byte [eax], 0
jne 0x45f1f6
mov eax, dword [0x4652d4]
cmp dword [eax], 0
jne 0x45f080
xor eax, eax
push ebp
push 0x45eea3
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x4652c8]
mov eax, dword [eax]
call fcn.0045c8f8
test eax, eax
jne 0x45ee99
mov eax, dword [0x465490]
mov byte [eax], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp case.0x4612e3.3
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x45eec7
lea eax, [ebp - 0x1b4]
mov edx, dword [0x4653a0]
mov edx, dword [edx]
lea edx, [edx + edx*8]
mov ecx, dword [0x4650a0]
mov ecx, dword [ecx]
lea edx, [ecx + edx + 0xe524]
call fcn.00404270
mov eax, dword [ebp - 0x1b4]
mov edx, 0x462bdc
call fcn.00407ff4
test al, al
jne 0x45ef41
mov eax, dword [0x4653a0]
mov eax, dword [eax]
lea eax, [eax + eax*8]
mov edx, dword [0x4650a0]
mov edx, dword [edx]
push edi
lea edi, [edx + eax + 0xe524]
mov esi, 0x462be4
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
pop edi
push 2
mov eax, dword [0x4653a0]
mov eax, dword [eax]
push eax
push 0x64
mov eax, dword [0x4650a0]
mov eax, dword [eax]
mov eax, dword [eax + 0xee2c]
push eax
call sub.user32.dll_PostMessageA
mov ebx, 1
lea eax, [ebp - 0x1b8]
lea esi, [ebx + ebx*4]
mov edx, dword [0x4650a0]
mov edx, dword [edx]
lea edx, [edx + esi + 0xdde3]
call fcn.00404270
mov eax, dword [ebp - 0x1b8]
mov edx, 0x462bf4
call fcn.00407ff4
test al, al
jne 0x45f073
imul eax, ebx, 0x33
mov edx, dword [0x4650a0]
mov edx, dword [edx]
cmp byte [edx + eax + 0x204], 0
jbe 0x45f073
push 0
mov eax, dword [0x4653a0]
mov eax, dword [eax]
push eax
push 0x1f4
mov eax, dword [0x4650a0]
mov eax, dword [eax]
mov eax, dword [eax + 0xee2c]
push eax
call sub.user32.dll_PostMessageA
push 0x7d0
call sub.kernel32.dll_Sleep_1
mov eax, dword [0x4652d4]
imul edx, ebx, 0x33
mov ecx, dword [0x4650a0]
mov ecx, dword [ecx]
lea edx, [ecx + edx + 0x204]
call fcn.00404270
mov eax, dword [0x465334]
mov edx, ebx
shl edx, 4
add edx, ebx
mov ecx, dword [0x4650a0]
mov ecx, dword [ecx]
lea edx, [ecx + edx + 0xb5e9]
call fcn.00404270
mov eax, dword [0x4650a0]
mov eax, dword [eax]
push edi
lea edi, [eax + esi + 0xdde3]
mov esi, 0x462bfc
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
pop edi
lea eax, [ebp - 0x1a0]
mov edx, dword [0x4652d4]
mov edx, dword [edx]
mov ecx, 0xff
call fcn.004042a8
lea edx, [ebp - 0x1a0]
mov eax, dword [0x4653a0]
imul eax, dword [eax], 0x33
mov ecx, dword [0x4650a0]
mov ecx, dword [ecx]
lea eax, [ecx + eax + 0x79f2]
mov cl, 0x32
call fcn.00402b18
push 1
mov eax, dword [0x4653a0]
mov eax, dword [eax]
push eax
push 0x1f4
mov eax, dword [0x4650a0]
mov eax, dword [eax]
mov eax, dword [eax + 0xee2c]
push eax
call sub.user32.dll_PostMessageA
jmp 0x45f080
inc ebx
cmp ebx, 0x12c
jl 0x45ef46
mov eax, dword [0x4652d4]
cmp dword [eax], 0
je 0x45f1f6
mov esi, 0x32
push 0
push 8
push pe_nt_image_headers32
mov eax, dword [0x4654d0]
mov eax, dword [eax]
push eax
call sub.user32.dll_SendMessageA
push 0
push 8
push 0x102
mov eax, dword [0x4654d0]
mov eax, dword [eax]
push eax
call sub.user32.dll_SendMessageA
push 0
push 8
push 0x101
mov eax, dword [0x4654d0]
mov eax, dword [eax]
push eax
call sub.user32.dll_SendMessageA
dec esi
jne 0x45f093
mov eax, dword [0x4652d4]
mov eax, dword [eax]
call fcn.004042cc
mov ebx, eax
test ebx, ebx
jle 0x45f134
mov esi, 1
lea eax, [ebp - 0x1bc]
push eax
mov eax, dword [0x4652d4]
mov eax, dword [eax]
mov ecx, 1
mov edx, esi
call fcn.0042babc
mov eax, dword [ebp - 0x1bc]
call fcn.004044cc
mov al, byte [eax]
push 0
and eax, 0xff
push eax
push 0x102
mov eax, dword [0x4654d0]
mov eax, dword [eax]
push eax
call sub.user32.dll_SendMessageA
inc esi
dec ebx
jne 0x45f0ef
push 0
push 9
push pe_nt_image_headers32
mov eax, dword [0x4654d0]
mov eax, dword [eax]
push eax
call sub.user32.dll_SendMessageA
push 0
push 9
push 0x101
mov eax, dword [0x4654d0]
mov eax, dword [eax]
push eax
call sub.user32.dll_SendMessageA
mov eax, dword [0x465334]
mov eax, dword [eax]
call fcn.004042cc
mov ebx, eax
test ebx, ebx
jle 0x45f1bc
mov esi, 1
lea eax, [ebp - 0x1c0]
push eax
mov eax, dword [0x465334]
mov eax, dword [eax]
mov ecx, 1
mov edx, esi
call fcn.0042babc
mov eax, dword [ebp - 0x1c0]
call fcn.004044cc
mov al, byte [eax]
push 0
and eax, 0xff
push eax
push 0x102
mov eax, dword [0x4654d0]
mov eax, dword [eax]
push eax
call sub.user32.dll_SendMessageA
inc esi
dec ebx
jne 0x45f177
push 0x13d024c
push 1
push 0x201
mov eax, dword [0x4654d0]
mov eax, dword [eax]
push eax
call sub.user32.dll_SendMessageA
push 0x13d024c
push 1
push 0x202
mov eax, dword [0x4654d0]
mov eax, dword [eax]
push eax
call sub.user32.dll_SendMessageA
mov eax, dword [0x4652a4]
mov byte [eax], 1
mov eax, dword [0x46514c]
mov dword [eax], 0xbb8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp case.0x4612e3.3
mov eax, dword [0x4653a0]
mov eax, dword [eax]
mov edx, dword [0x4650a0]
mov edx, dword [edx]
mov byte [edx + eax + 0xeefc], 0
mov eax, dword [0x4653a0]
mov eax, dword [eax]
mov edx, dword [0x4650a0]
mov edx, dword [edx]
mov byte [edx + eax + 0xef2f], 0
mov eax, dword [0x465538]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x4655f8]
mov dword [eax], 1
mov eax, dword [0x46523c]
mov byte [eax], 1
push 2
mov eax, dword [0x4653a0]
mov eax, dword [eax]
push eax
push 0x1f4
mov eax, dword [0x4650a0]
mov eax, dword [eax]
mov eax, dword [eax + 0xee2c]
push eax
call sub.user32.dll_PostMessageA
mov eax, dword [0x4653a0]
mov eax, dword [eax]
mov edx, dword [0x4650a0]
mov edx, dword [edx]
mov byte [edx + eax + 0xeb51], 0
mov eax, dword [0x465110]
mov byte [eax], 0
mov eax, dword [0x46556c]
mov byte [eax], 0
mov eax, dword [0x4653ac]
mov byte [eax], 0
mov eax, dword [0x46550c]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x4650b8]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x465200]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x4653a8]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x4653a0]
mov eax, dword [eax]
mov edx, dword [0x4650a0]
mov edx, dword [edx]
mov byte [edx + eax + 0x37], 0
mov eax, dword [0x4653a0]
mov eax, dword [eax]
mov edx, dword [0x4650a0]
mov edx, dword [edx]
mov byte [edx + eax + 4], 0
mov eax, dword [0x4653a0]
mov eax, dword [eax]
mov edx, dword [0x4650a0]
mov edx, dword [edx]
mov byte [edx + eax + 0x6a], 0
mov eax, dword [0x4653a0]
mov eax, dword [eax]
mov edx, dword [0x4650a0]
mov edx, dword [edx]
mov byte [edx + eax + 0x9d], 0
mov eax, dword [0x4653a0]
mov eax, dword [eax]
mov edx, dword [0x4650a0]
mov edx, dword [edx]
mov byte [edx + eax + 0xec83], 0
mov eax, dword [0x4653a0]
mov eax, dword [eax]
mov edx, dword [0x4650a0]
mov edx, dword [edx]
mov byte [edx + eax + 0xd0], 0
mov eax, dword [0x46548c]
mov byte [eax], 0
mov eax, dword [0x46507c]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x4653a0]
mov eax, dword [eax]
mov edx, dword [0x4650a0]
mov edx, dword [edx]
mov byte [edx + eax + 0xeb84], 0
mov eax, dword [0x4653a0]
mov eax, dword [eax]
mov edx, dword [0x4650a0]
mov edx, dword [edx]
mov byte [edx + eax + 0xebb7], 0
mov eax, dword [0x4653a0]
mov eax, dword [eax]
lea eax, [eax + eax*8]
mov edx, dword [0x4650a0]
mov edx, dword [edx]
lea edi, [edx + eax + 0xe524]
mov esi, 0x462c04
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov eax, dword [0x4653a0]
imul eax, dword [eax], 0x15
mov edx, dword [0x4650a0]
mov edx, dword [edx]
mov byte [edx + eax + 0xe6ef], 0
push 2
mov eax, dword [0x4653a0]
mov eax, dword [eax]
push eax
push 0x64
mov eax, dword [0x4650a0]
mov eax, dword [eax]
mov eax, dword [eax + 0xee2c]
push eax
call sub.user32.dll_PostMessageA
push 0x1450191
push 1
push 0x201
mov eax, dword [0x4654d0]
mov eax, dword [eax]
push eax
call sub.user32.dll_SendMessageA
push 0x1450191
push 1
push 0x202
mov eax, dword [0x4654d0]
mov eax, dword [eax]
push eax
call sub.user32.dll_SendMessageA
push 0x23e017d
push 1
push 0x201
mov eax, dword [0x4654d0]
mov eax, dword [eax]
push eax
call sub.user32.dll_SendMessageA
push 0x23e017d
push 1
push 0x202
mov eax, dword [0x4654d0]
mov eax, dword [eax]
push eax
call sub.user32.dll_SendMessageA
push 0x20
call sub.kernel32.dll_GetCurrentProcess
push eax
call sub.kernel32.dll_SetPriorityClass
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp case.0x4612e3.3
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x45f4b2
xor eax, eax
push ebp
push 0x45f61c
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x465110]
cmp byte [eax], 0
jne 0x45f612
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
test eax, eax
je 0x45f612
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
mov edx, dword [0x465418]
add eax, dword [edx]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x1c8]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x1c8]
lea eax, [ebp - 0x1c4]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x1c4]
call fcn.00408360
call fcn.00459ba4
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call fcn.00459ba4
test eax, eax
je 0x45f612
mov eax, dword [ebp - 4]
add eax, 4
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x1d0]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x1d0]
lea eax, [ebp - 0x1cc]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x1cc]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x1a0]
call fcn.00402d38
lea edx, [ebp - 0x1a0]
mov eax, dword [0x4653a0]
imul eax, dword [eax], 0x15
mov ecx, dword [0x4650a0]
mov ecx, dword [ecx]
lea eax, [ecx + eax + 0xe6ef]
mov cl, 0x14
call fcn.00402b18
mov eax, dword [0x4653a0]
imul eax, dword [eax], 0x15
mov edx, dword [0x4650a0]
mov edx, dword [edx]
cmp byte [edx + eax + 0xe6ef], 0
jbe 0x45f612
mov eax, dword [0x465110]
mov byte [eax], 1
mov eax, dword [0x4653a0]
mov eax, dword [eax]
lea eax, [eax + eax*8]
mov edx, dword [0x4650a0]
mov edx, dword [edx]
push edi
lea edi, [edx + eax + 0xe524]
mov esi, 0x462c1c
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
pop edi
push 2
mov eax, dword [0x4653a0]
mov eax, dword [eax]
push eax
push 0x64
mov eax, dword [0x4650a0]
mov eax, dword [eax]
mov eax, dword [eax + 0xee2c]
push eax
call sub.user32.dll_PostMessageA
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x45f630
mov eax, dword [0x4652d4]
call fcn.0040400c
mov eax, dword [0x4652a4]
mov byte [eax], 0
mov eax, dword [0x4653a0]
mov eax, dword [eax]
mov edx, dword [0x4650a0]
mov edx, dword [edx]
mov byte [edx + eax + 0xeb51], 0
mov eax, dword [0x46556c]
cmp byte [eax], 0
jne 0x45f692
mov eax, dword [0x4650a0]
mov eax, dword [eax]
cmp byte [eax + 0xe430], 1
jne 0x45f692
mov eax, dword [0x4653a0]
mov eax, dword [eax]
mov edx, dword [0x4650a0]
mov edx, dword [edx]
mov byte [edx + eax + 0x9d], 1
mov eax, dword [0x46556c]
mov byte [eax], 1
mov eax, dword [0x4653a0]
mov eax, dword [eax]
mov edx, dword [0x4650a0]
mov edx, dword [edx]
cmp byte [edx + eax + 0x9d], 0
jne 0x45f6b4
mov eax, dword [0x4650b8]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x46514c]
mov dword [eax], 0x3e8
mov eax, dword [0x4653a0]
mov eax, dword [eax]
mov edx, dword [0x4650a0]
mov edx, dword [edx]
cmp byte [edx + eax + 0x9d], 1
jne 0x4610f8
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
test eax, eax
je 0x45f75f
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
mov edi, eax
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
mov edx, dword [0x465418]
add eax, dword [edx]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x1d8]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x1d8]
lea eax, [ebp - 0x1d4]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x1d4]
call fcn.00408360
call fcn.00459ba4
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call fcn.00459ba4
test eax, eax
je 0x45f75f
mov eax, dword [ebp - 4]
call fcn.00459f5c
mov eax, edi
call fcn.0045a874
mov eax, dword [0x46559c]
mov eax, dword [eax]
add eax, dword [ebp - 4]
sub eax, 0x223
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x1e0]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x1e0]
lea eax, [ebp - 0x1dc]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x1dc]
call fcn.00408360
call fcn.00459be0
test eax, eax
jle 0x45f829
mov eax, dword [0x46559c]
mov eax, dword [eax]
add eax, dword [ebp - 4]
sub eax, 0x223
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x1e8]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x1e8]
lea eax, [ebp - 0x1e4]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x1e4]
call fcn.00408360
call fcn.00459be0
cmp eax, 0x9c4
jge 0x45f829
call fcn.0045b214
call fcn.0045bf74
mov edx, 0x462c2c
mov eax, dword [ebp - 4]
call fcn.0045a24c
push 0x7d0
call sub.kernel32.dll_Sleep_1
call fcn.0045c170
mov eax, dword [0x4650b8]
mov eax, dword [eax]
cmp eax, 9
jg 0x45f86f
je 0x460962
cmp eax, 8
ja case.0x4612e3.3
jmp dword [eax*4 + 0x45f84b]
cmp eax, 0x47
jg 0x45f89d
je 0x4603b7
sub eax, 0xa
je 0x460b2b
dec eax
je 0x460d37
dec eax
je 0x460d88
dec eax
je 0x460dde
jmp case.0x4612e3.3
sub eax, 0x48
je 0x46058d
sub eax, 0x149
je 0x460ea8
dec eax
je 0x460fdd
jmp case.0x4612e3.3
xor eax, eax
push ebp
push 0x45f91d
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x465274]
mov eax, dword [eax]
add eax, edi
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x1f0]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x1f0]
lea eax, [ebp - 0x1ec]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x1ec]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x60]
call fcn.00404204
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x45f931
mov eax, dword [ebp - 0x60]
mov edx, 0x462c3c
call fcn.00404418
jne 0x45f94b
mov eax, dword [0x4650b8]
mov dword [eax], 0x191
xor eax, eax
push ebp
push 0x45f9b0
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x4652cc]
mov eax, dword [eax]
add eax, dword [ebp - 4]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x1f8]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x1f8]
lea eax, [ebp - 0x1f4]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x1f4]
call fcn.00408360
call fcn.00459ba4
test eax, eax
jne 0x45f9a6
call fcn.0045b9fc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x45f9ba
mov eax, dword [0x465448]
mov eax, dword [eax]
push eax
mov eax, dword [0x46536c]
mov eax, dword [eax]
push eax
push 0xa
mov ecx, 0x19c
mov edx, 0x339
mov eax, dword [ebp - 4]
call fcn.004599b0
test al, al
je case.0x4612e3.3
mov eax, dword [0x46543c]
cmp dword [eax], 2
jg 0x45fa78
lea edx, [ebp - 0x200]
mov eax, dword [0x46543c]
mov eax, dword [eax]
inc eax
call fcn.004081f4
mov ecx, dword [ebp - 0x200]
lea eax, [ebp - 0x1fc]
mov edx, 0x462c4c
call fcn.00404318
mov edx, dword [ebp - 0x1fc]
lea eax, [ebp - 0x1a0]
mov ecx, 0xff
call fcn.004042a8
lea edx, [ebp - 0x1a0]
mov eax, dword [0x4653a0]
mov eax, dword [eax]
lea eax, [eax + eax*8]
mov ecx, dword [0x4650a0]
mov ecx, dword [ecx]
lea eax, [ecx + eax + 0xe524]
mov cl, 8
call fcn.00402b18
push 0
mov eax, dword [0x4653a0]
mov eax, dword [eax]
push eax
push 0x64
mov eax, dword [0x4650a0]
mov eax, dword [eax]
mov eax, dword [eax + 0xee2c]
push eax
call sub.user32.dll_PostMessageA
mov eax, dword [0x4650b8]
mov dword [eax], 1
jmp case.0x4612e3.3
mov edx, dword [0x465174]
mov edx, dword [edx]
add edx, 0x3e
mov ecx, 2
mov eax, dword [ebp - 4]
call fcn.0045a04c
test al, al
je case.0x4612e3.3
mov eax, dword [0x465308]
mov byte [eax], 1
mov eax, dword [0x4650b8]
mov dword [eax], 2
jmp case.0x4612e3.3
xor eax, eax
push ebp
push 0x45fb20
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x465274]
mov eax, dword [eax]
add eax, edi
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x208]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x208]
lea eax, [ebp - 0x204]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x204]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x60]
call fcn.00404204
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x45fb34
mov eax, dword [ebp - 0x60]
mov edx, 0x462c5c
call fcn.00404418
je 0x45fb4c
mov eax, dword [0x4650b8]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x465448]
mov eax, dword [eax]
push eax
mov eax, dword [0x46536c]
mov eax, dword [eax]
push eax
push 0xa
mov ecx, 0x89
mov edx, 0xd1
mov eax, dword [ebp - 4]
call fcn.004599b0
test al, al
je case.0x4612e3.3
mov eax, dword [0x4650b8]
mov dword [eax], 3
jmp case.0x4612e3.3
xor eax, eax
push ebp
push 0x45fbe8
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x465274]
mov eax, dword [eax]
add eax, edi
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x210]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x210]
lea eax, [ebp - 0x20c]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x20c]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x60]
call fcn.00404204
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x45fbfc
mov eax, dword [ebp - 0x60]
mov edx, 0x462c5c
call fcn.00404418
je 0x45fc14
mov eax, dword [0x4650b8]
xor edx, edx
mov dword [eax], edx
mov edx, dword [0x465210]
mov edx, dword [edx]
add edx, 0x55
mov eax, dword [ebp - 4]
call fcn.00459c1c
push 0x1f4
call sub.kernel32.dll_Sleep_1
mov eax, dword [0x46543c]
cmp dword [eax], 3
jl 0x45fdf5
call fcn.0045ae20
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
mov edx, dword [0x465274]
add eax, dword [edx]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x21c]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x21c]
lea eax, [ebp - 0x218]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x218]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x214]
call fcn.00404204
mov eax, dword [ebp - 0x214]
mov edx, 0x462c6c
call fcn.00404418
jne 0x45fdd3
mov eax, dword [0x4650b8]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x46543c]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x4650a0]
mov eax, dword [eax]
cmp byte [eax + 0xe432], 1
jne 0x45fd7a
jmp 0x45fce8
xor eax, eax
push ebp
push 0x45fd1d
push dword fs:[eax]
mov dword fs:[eax], esp
pushal
mov ecx, dword [0x466d14]
mov ecx, dword [ecx]
push 1
push ecx
push 2
push 2
mov eax, dword [0x466d18]
push eax
call dword [0x466d10]
popal
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x45fd31
jmp 0x45fd41
push 0x64
call sub.kernel32.dll_Sleep_1
push 0x13b0165
push 1
push 0x201
mov eax, dword [0x4654d0]
mov eax, dword [eax]
push eax
call sub.user32.dll_SendMessageA
push 0x13b0165
push 1
push 0x202
mov eax, dword [0x4654d0]
mov eax, dword [eax]
push eax
call sub.user32.dll_SendMessageA
mov eax, dword [0x4653a0]
mov eax, dword [eax]
lea eax, [eax + eax*8]
mov edx, dword [0x4650a0]
mov edx, dword [edx]
lea edi, [edx + eax + 0xe524]
mov esi, 0x462c74
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
push 0
mov eax, dword [0x4653a0]
mov eax, dword [eax]
push eax
push 0x64
mov eax, dword [0x4650a0]
mov eax, dword [eax]
mov eax, dword [eax + 0xee2c]
push eax
call sub.user32.dll_PostMessageA
mov eax, dword [0x4653a0]
mov eax, dword [eax]
mov edx, dword [0x4650a0]
mov edx, dword [edx]
mov byte [edx + eax + 0x9d], 0
jmp 0x45fde5
call fcn.0045bf74
mov edx, 0x462c2c
mov eax, dword [ebp - 4]
call fcn.0045a24c
mov eax, dword [0x46514c]
mov dword [eax], 0x1388
jmp case.0x4612e3.3
call fcn.0045ac24
mov eax, dword [0x4650b8]
mov dword [eax], 4
jmp case.0x4612e3.3
xor eax, eax
push ebp
push 0x45fe6a
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x465274]
mov eax, dword [eax]
add eax, edi
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x224]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x224]
lea eax, [ebp - 0x220]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x220]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x60]
call fcn.00404204
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x45fe7e
mov eax, dword [ebp - 0x60]
mov edx, 0x462c5c
call fcn.00404418
je 0x45fe96
mov eax, dword [0x4650b8]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x465448]
mov eax, dword [eax]
push eax
mov eax, dword [0x46536c]
mov eax, dword [eax]
push eax
push 8
mov ecx, 0x8e
mov edx, 0xbc
mov eax, dword [ebp - 4]
call fcn.004599b0
test al, al
je case.0x4612e3.3
mov eax, dword [0x4650b8]
mov dword [eax], 5
jmp case.0x4612e3.3
xor eax, eax
push ebp
push 0x45ff32
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x465274]
mov eax, dword [eax]
add eax, edi
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x22c]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x22c]
lea eax, [ebp - 0x228]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x228]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x60]
call fcn.00404204
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x45ff46
mov eax, dword [ebp - 0x60]
mov edx, 0x462c5c
call fcn.00404418
je 0x45ff5e
mov eax, dword [0x4650b8]
xor edx, edx
mov dword [eax], edx
mov edx, dword [0x465210]
mov edx, dword [edx]
add edx, 3
mov eax, dword [ebp - 4]
call fcn.00459c1c
push 0x1f4
call sub.kernel32.dll_Sleep_1
lea eax, [ebp - 0x230]
mov edx, dword [0x46543c]
mov edx, dword [edx]
lea edx, [edx + edx*4]
mov ecx, dword [0x4650a0]
mov ecx, dword [ecx]
lea edx, [ecx + edx + 0xf5f7]
call fcn.00404270
mov eax, dword [ebp - 0x230]
call fcn.0045bbf4
mov eax, dword [0x4650b8]
mov dword [eax], 6
mov eax, dword [0x46514c]
mov dword [eax], 0xa
jmp case.0x4612e3.3
mov eax, dword [0x46514c]
mov dword [eax], 0xa
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
mov edx, dword [0x465274]
add eax, dword [edx]
add eax, 0x3a
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x238]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x238]
lea eax, [ebp - 0x234]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x234]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x1a0]
call fcn.00402d38
lea eax, [ebp - 0x1a0]
mov edx, dword [0x46543c]
mov edx, dword [edx]
lea edx, [edx + edx*4]
mov ecx, dword [0x4650a0]
mov ecx, dword [ecx]
lea edx, [ecx + edx + 0xf5f7]
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402bb8
jne 0x4600fb
call fcn.0045b3f8
mov eax, dword [0x4650a0]
mov eax, dword [eax]
cmp byte [eax + 0xe440], 1
jne 0x460081
call fcn.0045b01c
mov eax, dword [0x46514c]
mov dword [eax], 0x1f40
jmp 0x4600f0
xor eax, eax
push ebp
push 0x4600e6
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x4652cc]
mov eax, dword [eax]
add eax, dword [ebp - 4]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x240]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x240]
lea eax, [ebp - 0x23c]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x23c]
call fcn.00408360
call fcn.00459ba4
test eax, eax
jne 0x4600dc
call fcn.0045b9fc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4600f0
mov eax, dword [0x4650b8]
mov dword [eax], 7
mov eax, dword [0x46509c]
mov eax, dword [eax]
call fcn.00459ba4
test eax, eax
jbe case.0x4612e3.3
mov eax, dword [0x4650b8]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x46514c]
mov dword [eax], 0x186a0
jmp case.0x4612e3.3
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
mov edx, dword [0x465274]
add eax, dword [edx]
add eax, 0x3a
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x248]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x248]
lea eax, [ebp - 0x244]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x244]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x1a0]
call fcn.00402d38
lea eax, [ebp - 0x1a0]
mov edx, dword [0x46543c]
mov edx, dword [edx]
lea edx, [edx + edx*4]
mov ecx, dword [0x4650a0]
mov ecx, dword [ecx]
lea edx, [ecx + edx + 0xf5f7]
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402bb8
jne 0x46032a
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
mov edx, dword [0x465274]
add eax, dword [edx]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x254]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x254]
lea eax, [ebp - 0x250]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x250]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x24c]
call fcn.00404204
mov eax, dword [ebp - 0x24c]
mov edx, 0x462c5c
call fcn.00404418
jne 0x4602ae
mov eax, dword [0x4650a0]
mov eax, dword [eax]
cmp byte [eax + 0xe440], 0
jne 0x46029c
xor eax, eax
push ebp
push 0x460292
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x4652cc]
mov eax, dword [eax]
add eax, dword [ebp - 4]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x25c]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x25c]
lea eax, [ebp - 0x258]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x258]
call fcn.00408360
call fcn.00459ba4
test eax, eax
jne 0x460288
call fcn.0045b9fc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x46029c
mov ecx, 0xa
mov edx, 0x55
mov eax, dword [ebp - 4]
call fcn.00459d70
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
mov edx, dword [0x465274]
add eax, dword [edx]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x268]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x268]
lea eax, [ebp - 0x264]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x264]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x260]
call fcn.00404204
mov eax, dword [ebp - 0x260]
mov edx, 0x462c88
call fcn.00404418
jne case.0x4612e3.3
mov eax, dword [0x4650b8]
mov dword [eax], 0x47
jmp case.0x4612e3.3
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
mov edx, dword [0x465274]
add eax, dword [edx]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x274]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x274]
lea eax, [ebp - 0x270]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x270]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x26c]
call fcn.00404204
mov eax, dword [ebp - 0x26c]
mov edx, 0x462c6c
call fcn.00404418
jne 0x4603a0
mov eax, dword [0x4650b8]
xor edx, edx
mov dword [eax], edx
jmp case.0x4612e3.3
call fcn.0045bf74
mov edx, 0x462c2c
mov eax, dword [ebp - 4]
call fcn.0045a24c
jmp case.0x4612e3.3
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
mov edx, dword [0x465274]
add eax, dword [edx]
add eax, 0x3a
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x27c]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x27c]
lea eax, [ebp - 0x278]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x278]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x1a0]
call fcn.00402d38
lea eax, [ebp - 0x1a0]
mov edx, dword [0x46543c]
mov edx, dword [edx]
lea edx, [edx + edx*4]
mov ecx, dword [0x4650a0]
mov ecx, dword [ecx]
lea edx, [ecx + edx + 0xf5f7]
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402bb8
jne 0x460500
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
mov edx, dword [0x465274]
add eax, dword [edx]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x288]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x288]
lea eax, [ebp - 0x284]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x284]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x280]
call fcn.00404204
mov eax, dword [ebp - 0x280]
mov edx, 0x462c88
call fcn.00404418
jne 0x4604bc
mov ecx, 0x136
mov edx, 0x123
mov eax, dword [ebp - 4]
call fcn.00459d70
jmp 0x4604c7
mov eax, dword [0x4650b8]
mov dword [eax], 7
mov eax, dword [0x46536c]
mov eax, dword [eax]
push eax
push 5
mov ecx, dword [0x465448]
mov ecx, dword [ecx]
mov edx, 0x136
mov eax, 0x123
call fcn.00459efc
cmp al, 1
jne case.0x4612e3.3
mov eax, dword [0x4650b8]
mov dword [eax], 0x48
jmp case.0x4612e3.3
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
mov edx, dword [0x465274]
add eax, dword [edx]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x294]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x294]
lea eax, [ebp - 0x290]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x290]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x28c]
call fcn.00404204
mov eax, dword [ebp - 0x28c]
mov edx, 0x462c6c
call fcn.00404418
jne 0x460576
mov eax, dword [0x4650b8]
xor edx, edx
mov dword [eax], edx
jmp case.0x4612e3.3
call fcn.0045bf74
mov edx, 0x462c2c
mov eax, dword [ebp - 4]
call fcn.0045a24c
jmp case.0x4612e3.3
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
mov edx, dword [0x465274]
add eax, dword [edx]
add eax, 0x3a
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x29c]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x29c]
lea eax, [ebp - 0x298]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x298]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x1a0]
call fcn.00402d38
lea eax, [ebp - 0x1a0]
mov edx, dword [0x46543c]
mov edx, dword [edx]
lea edx, [edx + edx*4]
mov ecx, dword [0x4650a0]
mov ecx, dword [ecx]
lea edx, [ecx + edx + 0xf5f7]
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402bb8
jne 0x4606c9
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
mov edx, dword [0x465274]
add eax, dword [edx]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x2a8]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x2a8]
lea eax, [ebp - 0x2a4]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x2a4]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x2a0]
call fcn.00404204
mov eax, dword [ebp - 0x2a0]
mov edx, 0x462c88
call fcn.00404418
jne 0x460690
mov ecx, 0x138
mov edx, 0x94
mov eax, dword [ebp - 4]
call fcn.00459d70
mov eax, dword [0x46536c]
mov eax, dword [eax]
push eax
push 5
mov ecx, dword [0x465448]
mov ecx, dword [ecx]
mov edx, 0x138
mov eax, 0x94
call fcn.00459efc
cmp al, 1
jne case.0x4612e3.3
mov eax, dword [0x4650b8]
mov dword [eax], 8
jmp case.0x4612e3.3
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
mov edx, dword [0x465274]
add eax, dword [edx]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x2b4]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x2b4]
lea eax, [ebp - 0x2b0]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x2b0]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x2ac]
call fcn.00404204
mov eax, dword [ebp - 0x2ac]
mov edx, 0x462c6c
call fcn.00404418
jne 0x46073f
mov eax, dword [0x4650b8]
xor edx, edx
mov dword [eax], edx
jmp case.0x4612e3.3
call fcn.0045bf74
mov edx, 0x462c2c
mov eax, dword [ebp - 4]
call fcn.0045a24c
jmp case.0x4612e3.3
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
mov edx, dword [0x465274]
add eax, dword [edx]
add eax, 0x3a
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x2bc]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x2bc]
lea eax, [ebp - 0x2b8]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x2b8]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x1a0]
call fcn.00402d38
lea eax, [ebp - 0x1a0]
mov edx, dword [0x46543c]
mov edx, dword [edx]
lea edx, [edx + edx*4]
mov ecx, dword [0x4650a0]
mov ecx, dword [ecx]
lea edx, [ecx + edx + 0xf5f7]
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402bb8
jne 0x4608d5
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
mov edx, dword [0x465274]
add eax, dword [edx]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x2c8]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x2c8]
lea eax, [ebp - 0x2c4]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x2c4]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x2c0]
call fcn.00404204
mov eax, dword [ebp - 0x2c0]
mov edx, 0x462c88
call fcn.00404418
jne 0x460859
mov ecx, 0x13a
mov edx, 0xb
mov eax, dword [ebp - 4]
call fcn.00459d70
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
mov edx, dword [0x465274]
add eax, dword [edx]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x2d4]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x2d4]
lea eax, [ebp - 0x2d0]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x2d0]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x2cc]
call fcn.00404204
mov eax, dword [ebp - 0x2cc]
mov edx, 0x462c6c
call fcn.00404418
jne case.0x4612e3.3
mov eax, dword [0x4650b8]
mov dword [eax], 9
jmp case.0x4612e3.3
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
mov edx, dword [0x465274]
add eax, dword [edx]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x2e0]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x2e0]
lea eax, [ebp - 0x2dc]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x2dc]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x2d8]
call fcn.00404204
mov eax, dword [ebp - 0x2d8]
mov edx, 0x462c6c
call fcn.00404418
jne 0x46094b
mov eax, dword [0x4650b8]
xor edx, edx
mov dword [eax], edx
jmp case.0x4612e3.3
call fcn.0045bf74
mov edx, 0x462c2c
mov eax, dword [ebp - 4]
call fcn.0045a24c
jmp case.0x4612e3.3
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
mov edx, dword [0x465274]
add eax, dword [edx]
add eax, 0x3a
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x2e8]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x2e8]
lea eax, [ebp - 0x2e4]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x2e4]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x1a0]
call fcn.00402d38
lea eax, [ebp - 0x1a0]
mov edx, dword [0x46543c]
mov edx, dword [edx]
lea edx, [edx + edx*4]
mov ecx, dword [0x4650a0]
mov ecx, dword [ecx]
lea edx, [ecx + edx + 0xf5f7]
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402bb8
jne 0x460a9e
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
mov edx, dword [0x465274]
add eax, dword [edx]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x2f4]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x2f4]
lea eax, [ebp - 0x2f0]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x2f0]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x2ec]
call fcn.00404204
mov eax, dword [ebp - 0x2ec]
mov edx, 0x462c6c
call fcn.00404418
jne 0x460a65
mov ecx, 0x82
mov edx, 0x372
mov eax, dword [ebp - 4]
call fcn.00459d70
mov eax, dword [0x46536c]
mov eax, dword [eax]
push eax
push 5
mov ecx, dword [0x465448]
mov ecx, dword [ecx]
mov edx, 0x82
mov eax, 0x372
call fcn.00459efc
cmp al, 1
jne case.0x4612e3.3
mov eax, dword [0x4650b8]
mov dword [eax], 0xa
jmp case.0x4612e3.3
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
mov edx, dword [0x465274]
add eax, dword [edx]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x300]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x300]
lea eax, [ebp - 0x2fc]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x2fc]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x2f8]
call fcn.00404204
mov eax, dword [ebp - 0x2f8]
mov edx, 0x462c6c
call fcn.00404418
jne 0x460b14
mov eax, dword [0x4650b8]
xor edx, edx
mov dword [eax], edx
jmp case.0x4612e3.3
call fcn.0045bf74
mov edx, 0x462c2c
mov eax, dword [ebp - 4]
call fcn.0045a24c
jmp case.0x4612e3.3
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
mov edx, dword [0x465274]
add eax, dword [edx]
add eax, 0x3a
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x308]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x308]
lea eax, [ebp - 0x304]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x304]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x1a0]
call fcn.00402d38
lea eax, [ebp - 0x1a0]
mov edx, dword [0x46543c]
mov edx, dword [edx]
lea edx, [edx + edx*4]
mov ecx, dword [0x4650a0]
mov ecx, dword [ecx]
lea edx, [ecx + edx + 0xf5f7]
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402bb8
jne 0x460caa
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
mov edx, dword [0x465274]
add eax, dword [edx]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x314]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x314]
lea eax, [ebp - 0x310]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x310]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x30c]
call fcn.00404204
mov eax, dword [ebp - 0x30c]
mov edx, 0x462c6c
call fcn.00404418
jne 0x460c2e
mov ecx, 0x5f
mov edx, 0x33e
mov eax, dword [ebp - 4]
call fcn.00459d70
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
mov edx, dword [0x465274]
add eax, dword [edx]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x320]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x320]
lea eax, [ebp - 0x31c]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x31c]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x318]
call fcn.00404204
mov eax, dword [ebp - 0x318]
mov edx, 0x462c98
call fcn.00404418
jne case.0x4612e3.3
mov eax, dword [0x4650b8]
mov dword [eax], 0xb
jmp case.0x4612e3.3
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
mov edx, dword [0x465274]
add eax, dword [edx]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x32c]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x32c]
lea eax, [ebp - 0x328]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x328]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x324]
call fcn.00404204
mov eax, dword [ebp - 0x324]
mov edx, 0x462c6c
call fcn.00404418
jne 0x460d20
mov eax, dword [0x4650b8]
xor edx, edx
mov dword [eax], edx
jmp case.0x4612e3.3
call fcn.0045bf74
mov edx, 0x462c2c
mov eax, dword [ebp - 4]
call fcn.0045a24c
jmp case.0x4612e3.3
mov eax, dword [0x465448]
mov eax, dword [eax]
push eax
mov eax, dword [0x46536c]
mov eax, dword [eax]
push eax
push 0xa
mov ecx, 0xcd
mov edx, 0x23
mov eax, dword [ebp - 4]
call fcn.004599b0
test al, al
je case.0x4612e3.3
call fcn.0045b214
call fcn.0045b3f8
mov eax, dword [0x4650b8]
mov dword [eax], 0xc
mov eax, dword [0x46514c]
mov dword [eax], 0x1f4
jmp case.0x4612e3.3
mov eax, dword [0x46514c]
mov dword [eax], 0x1f4
xor ecx, ecx
mov edx, 0xf6284
mov eax, dword [ebp - 4]
call fcn.0045a04c
test al, al
je case.0x4612e3.3
call fcn.0045bf74
mov edx, 0x462c2c
mov eax, dword [ebp - 4]
call fcn.0045a24c
mov eax, dword [0x46514c]
mov dword [eax], 0xfa0
mov eax, dword [0x4650b8]
mov dword [eax], 0xd
mov eax, dword [0x46543c]
inc dword [eax]
jmp case.0x4612e3.3
mov eax, dword [0x4650a0]
mov eax, dword [eax]
cmp byte [eax + 0xe440], 1
jne 0x460dfb
mov eax, dword [0x46514c]
mov dword [eax], 0x15f90
jmp 0x460e06
mov eax, dword [0x46514c]
mov dword [eax], 0xfa0
mov eax, dword [0x46543c]
cmp dword [eax], 3
jl 0x460e1b
mov eax, dword [0x46514c]
mov dword [eax], 0xfa0
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
mov edx, dword [0x465274]
add eax, dword [edx]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x338]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x338]
lea eax, [ebp - 0x334]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x334]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x330]
call fcn.00404204
mov eax, dword [ebp - 0x330]
mov edx, 0x462c6c
call fcn.00404418
jne 0x460e91
mov eax, dword [0x4650b8]
xor edx, edx
mov dword [eax], edx
jmp case.0x4612e3.3
call fcn.0045bf74
mov edx, 0x462c2c
mov eax, dword [ebp - 4]
call fcn.0045a24c
jmp case.0x4612e3.3
mov eax, dword [0x46514c]
mov dword [eax], 0x3e8
xor edx, edx
push ebp
push 0x460fc4
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [0x46536c]
mov eax, dword [eax]
push eax
push 8
mov ecx, dword [0x465448]
mov ecx, dword [ecx]
mov edx, 0x17d
mov eax, 0x1a3
call fcn.00459efc
mov ebx, eax
test bl, bl
jne 0x460f07
mov ecx, 0x17d
mov edx, 0x1a3
mov eax, dword [ebp - 4]
call fcn.00459d70
mov eax, dword [0x4651fc]
mov byte [eax], 0
jmp 0x460fb7
mov eax, dword [0x4650b8]
mov dword [eax], 0x192
mov eax, dword [0x465308]
mov byte [eax], 0
mov eax, dword [0x4651fc]
cmp byte [eax], 0
jne 0x460faf
mov ebx, 2
mov eax, dword [0x465378]
mov eax, dword [eax]
add eax, dword [ebp - 4]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x340]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x340]
lea eax, [ebp - 0x33c]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x33c]
call fcn.00408360
mov dword [eax], ebx
mov eax, dword [0x46513c]
mov eax, dword [eax]
add eax, dword [ebp - 4]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x348]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x348]
lea eax, [ebp - 0x344]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x344]
call fcn.00408360
mov dword [eax], ebx
mov eax, dword [0x4651fc]
mov byte [eax], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp case.0x4612e3.3
xor eax, eax
push ebp
push 0x4610df
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x465274]
mov eax, dword [eax]
add eax, edi
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x350]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x350]
lea eax, [ebp - 0x34c]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x34c]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x60]
call fcn.00404204
mov eax, dword [0x46536c]
mov eax, dword [eax]
push eax
push 8
mov ecx, dword [0x465448]
mov ecx, dword [ecx]
mov edx, 0x17d
mov eax, 0x1a3
call fcn.00459efc
mov ebx, eax
mov eax, dword [ebp - 0x60]
mov edx, 0x462c3c
call fcn.00404418
jne 0x46108b
test bl, bl
jne 0x46108b
mov eax, dword [0x465308]
cmp byte [eax], 0
jne 0x46108b
mov eax, dword [0x4650b8]
mov dword [eax], 0x191
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp case.0x4612e3.3
test bl, bl
je 0x4610ba
mov eax, dword [0x465308]
cmp byte [eax], 0
jne 0x4610ba
mov edx, dword [0x4650ec]
mov edx, dword [edx]
add edx, 0x33
xor ecx, ecx
mov eax, dword [ebp - 4]
call fcn.0045a04c
test al, al
je 0x4610ba
mov eax, dword [0x465308]
mov byte [eax], 1
mov eax, dword [ebp - 0x60]
mov edx, 0x462c6c
call fcn.00404418
jne 0x4610d2
mov eax, dword [0x4650b8]
xor edx, edx
mov dword [eax], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp case.0x4612e3.3
mov eax, dword [0x46556c]
cmp byte [eax], 0
jne 0x461131
mov eax, dword [0x4650a0]
mov eax, dword [eax]
cmp byte [eax + 0xe431], 1
jne 0x461131
mov eax, dword [0x4653a0]
mov eax, dword [eax]
mov edx, dword [0x4650a0]
mov edx, dword [edx]
mov byte [edx + eax + 0xec83], 1
mov eax, dword [0x46556c]
mov byte [eax], 1
mov eax, dword [0x4653a0]
mov eax, dword [eax]
mov edx, dword [0x4650a0]
mov edx, dword [edx]
cmp byte [edx + eax + 0xec83], 0
jne 0x461153
mov eax, dword [0x46542c]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x46514c]
mov dword [eax], 0x3e8
mov eax, dword [0x4653a0]
mov eax, dword [eax]
mov edx, dword [0x4650a0]
mov edx, dword [edx]
cmp byte [edx + eax + 0xec83], 1
jne case.0x4612e3.3
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
test eax, eax
je 0x4611fe
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
mov edi, eax
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
mov edx, dword [0x465418]
add eax, dword [edx]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x358]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x358]
lea eax, [ebp - 0x354]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x354]
call fcn.00408360
call fcn.00459ba4
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call fcn.00459ba4
test eax, eax
je 0x4611fe
mov eax, dword [ebp - 4]
call fcn.00459f5c
mov eax, edi
call fcn.0045a874
mov eax, dword [0x46559c]
mov eax, dword [eax]
add eax, dword [ebp - 4]
sub eax, 0x223
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x360]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x360]
lea eax, [ebp - 0x35c]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x35c]
call fcn.00408360
call fcn.00459be0
test eax, eax
jle 0x4612c8
mov eax, dword [0x46559c]
mov eax, dword [eax]
add eax, dword [ebp - 4]
sub eax, 0x223
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x368]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x368]
lea eax, [ebp - 0x364]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x364]
call fcn.00408360
call fcn.00459be0
cmp eax, 0x9c4
jge 0x4612c8
call fcn.0045b214
call fcn.0045bf74
mov edx, 0x462c2c
mov eax, dword [ebp - 4]
call fcn.0045a24c
push 0x7d0
call sub.kernel32.dll_Sleep_1
call fcn.0045c170
mov eax, dword [0x46542c]
mov eax, dword [eax]
cmp eax, 9
jg 0x46130e
je 0x462066
cmp eax, 8
ja case.0x4612e3.3
jmp dword [eax*4 + 0x4612ea]
cmp eax, 0xe
jg 0x461337
je 0x462668
sub eax, 0xa
je 0x462244
sub eax, 2
je 0x462397
dec eax
je 0x462470
jmp case.0x4612e3.3
sub eax, 0x47
je 0x461bd4
sub eax, 0x14a
je 0x462929
dec eax
je 0x462a5e
jmp case.0x4612e3.3
xor eax, eax
push ebp
push 0x4613b7
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x465274]
mov eax, dword [eax]
add eax, edi
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x370]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x370]
lea eax, [ebp - 0x36c]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x36c]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x60]
call fcn.00404204
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4613cb
mov eax, dword [ebp - 0x60]
mov edx, 0x462c3c
call fcn.00404418
jne 0x4613e5
mov eax, dword [0x46542c]
mov dword [eax], 0x191
xor eax, eax
push ebp
push 0x46144a
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x4652cc]
mov eax, dword [eax]
add eax, dword [ebp - 4]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x378]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x378]
lea eax, [ebp - 0x374]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x374]
call fcn.00408360
call fcn.00459ba4
test eax, eax
jne 0x461440
call fcn.0045b9fc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x461454
mov eax, dword [0x465448]
mov eax, dword [eax]
push eax
mov eax, dword [0x46536c]
mov eax, dword [eax]
push eax
push 0xa
mov ecx, 0x19c
mov edx, 0x339
mov eax, dword [ebp - 4]
call fcn.004599b0
test al, al
je case.0x4612e3.3
mov eax, dword [0x46543c]
cmp dword [eax], 2
jg 0x461512
lea edx, [ebp - 0x380]
mov eax, dword [0x465324]
mov eax, dword [eax]
inc eax
call fcn.004081f4
mov ecx, dword [ebp - 0x380]
lea eax, [ebp - 0x37c]
mov edx, 0x462cac
call fcn.00404318
mov edx, dword [ebp - 0x37c]
lea eax, [ebp - 0x1a0]
mov ecx, 0xff
call fcn.004042a8
lea edx, [ebp - 0x1a0]
mov eax, dword [0x4653a0]
mov eax, dword [eax]
lea eax, [eax + eax*8]
mov ecx, dword [0x4650a0]
mov ecx, dword [ecx]
lea eax, [ecx + eax + 0xe524]
mov cl, 8
call fcn.00402b18
push 0
mov eax, dword [0x4653a0]
mov eax, dword [eax]
push eax
push 0x64
mov eax, dword [0x4650a0]
mov eax, dword [eax]
mov eax, dword [eax + 0xee2c]
push eax
call sub.user32.dll_PostMessageA
mov eax, dword [0x46542c]
mov dword [eax], 1
mov edx, 0x462cbc
mov eax, dword [ebp - 4]
call fcn.0045a554
jmp case.0x4612e3.3
mov edx, dword [0x465174]
mov edx, dword [edx]
add edx, 0x3e
mov ecx, 2
mov eax, dword [ebp - 4]
call fcn.0045a04c
test al, al
je 0x46155e
mov eax, dword [0x465308]
mov byte [eax], 1
mov eax, dword [0x46542c]
mov dword [eax], 2
mov eax, dword [0x46509c]
mov eax, dword [eax]
call fcn.00459ba4
test eax, eax
jbe case.0x4612e3.3
mov eax, dword [0x46542c]
xor edx, edx
mov dword [eax], edx
jmp case.0x4612e3.3
xor eax, eax
push ebp
push 0x4615e0
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x465274]
mov eax, dword [eax]
add eax, edi
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x388]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x388]
lea eax, [ebp - 0x384]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x384]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x60]
call fcn.00404204
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4615f4
mov eax, dword [ebp - 0x60]
mov edx, 0x462c5c
call fcn.00404418
je 0x46160c
mov eax, dword [0x46542c]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x465448]
mov eax, dword [eax]
push eax
mov eax, dword [0x46536c]
mov eax, dword [eax]
push eax
push 8
mov ecx, 0x8e
mov edx, 0xbc
mov eax, dword [ebp - 4]
call fcn.004599b0
test al, al
je case.0x4612e3.3
mov eax, dword [0x46542c]
mov dword [eax], 5
jmp case.0x4612e3.3
xor eax, eax
push ebp
push 0x4616a8
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x465274]
mov eax, dword [eax]
add eax, edi
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x390]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x390]
lea eax, [ebp - 0x38c]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x38c]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x60]
call fcn.00404204
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4616bc
mov eax, dword [ebp - 0x60]
mov edx, 0x462c5c
call fcn.00404418
je 0x4616d4
mov eax, dword [0x46542c]
xor edx, edx
mov dword [eax], edx
mov edx, dword [0x465210]
mov edx, dword [edx]
add edx, 3
mov eax, dword [ebp - 4]
call fcn.00459c1c
push 0x1f4
call sub.kernel32.dll_Sleep_1
lea eax, [ebp - 0x394]
mov edx, dword [0x465324]
mov edx, dword [edx]
lea edx, [edx + edx*4]
mov ecx, dword [0x4650a0]
mov ecx, dword [ecx]
lea edx, [ecx + edx + 0xf606]
call fcn.00404270
mov eax, dword [ebp - 0x394]
call fcn.0045bbf4
mov eax, dword [0x46542c]
mov dword [eax], 6
mov eax, dword [0x46514c]
mov dword [eax], 0xa
jmp case.0x4612e3.3
mov eax, dword [0x46514c]
mov dword [eax], 0xa
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
mov edx, dword [0x465274]
add eax, dword [edx]
add eax, 0x3a
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x39c]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x39c]
lea eax, [ebp - 0x398]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x398]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x1a0]
call fcn.00402d38
lea eax, [ebp - 0x1a0]
mov edx, dword [0x465324]
mov edx, dword [edx]
lea edx, [edx + edx*4]
mov ecx, dword [0x4650a0]
mov ecx, dword [ecx]
lea edx, [ecx + edx + 0xf606]
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402bb8
jne 0x46187a
call fcn.0045b3f8
mov eax, dword [0x4650a0]
mov eax, dword [eax]
cmp byte [eax + 0xe440], 1
jne 0x4617f7
call fcn.0045b01c
mov eax, dword [0x46514c]
mov dword [eax], 0x1f40
jmp 0x461866
xor eax, eax
push ebp
push 0x46185c
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x4652cc]
mov eax, dword [eax]
add eax, dword [ebp - 4]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x3a4]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x3a4]
lea eax, [ebp - 0x3a0]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x3a0]
call fcn.00408360
call fcn.00459ba4
test eax, eax
jne 0x461852
call fcn.0045b9fc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x461866
mov eax, dword [0x46542c]
mov dword [eax], 7
mov eax, dword [0x465098]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x46509c]
mov eax, dword [eax]
call fcn.00459ba4
test eax, eax
jbe 0x46189e
mov eax, dword [0x46542c]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x46514c]
mov dword [eax], 0x186a0
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
mov edx, dword [0x465274]
add eax, dword [edx]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x3b0]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x3b0]
lea eax, [ebp - 0x3ac]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x3ac]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x3a8]
call fcn.00404204
mov eax, dword [ebp - 0x3a8]
mov edx, 0x462c6c
call fcn.00404418
jne case.0x4612e3.3
mov eax, dword [0x46542c]
xor edx, edx
mov dword [eax], edx
jmp case.0x4612e3.3
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
mov edx, dword [0x465274]
add eax, dword [edx]
add eax, 0x3a
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x3b8]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x3b8]
lea eax, [ebp - 0x3b4]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x3b4]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x1a0]
call fcn.00402d38
lea eax, [ebp - 0x1a0]
mov edx, dword [0x465324]
mov edx, dword [edx]
lea edx, [edx + edx*4]
mov ecx, dword [0x4650a0]
mov ecx, dword [ecx]
lea edx, [ecx + edx + 0xf606]
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402bb8
jne 0x461b47
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
mov edx, dword [0x465274]
add eax, dword [edx]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x3c4]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x3c4]
lea eax, [ebp - 0x3c0]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x3c0]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x3bc]
call fcn.00404204
mov eax, dword [ebp - 0x3bc]
mov edx, 0x462c5c
call fcn.00404418
jne 0x461acb
mov eax, dword [0x4650a0]
mov eax, dword [eax]
cmp byte [eax + 0xe440], 0
jne 0x461a8e
xor eax, eax
push ebp
push 0x461a82
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x4652cc]
mov eax, dword [eax]
add eax, dword [ebp - 4]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x3cc]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x3cc]
lea eax, [ebp - 0x3c8]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x3c8]
call fcn.00408360
call fcn.00459ba4
test eax, eax
jne 0x461a78
call fcn.0045b9fc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x461ab9
mov eax, dword [0x465098]
inc dword [eax]
mov eax, dword [0x465098]
cmp dword [eax], 0x55
jne 0x461ab9
mov eax, dword [0x4650a0]
mov eax, dword [eax]
cmp byte [eax + 0xe429], 0
jne 0x461ab9
call fcn.0045b214
call fcn.0045b9fc
mov ecx, 0x12c
mov edx, 0x1a
mov eax, dword [ebp - 4]
call fcn.00459d70
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
mov edx, dword [0x465274]
add eax, dword [edx]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x3d8]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x3d8]
lea eax, [ebp - 0x3d4]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x3d4]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x3d0]
call fcn.00404204
mov eax, dword [ebp - 0x3d0]
mov edx, 0x462cc8
call fcn.00404418
jne case.0x4612e3.3
mov eax, dword [0x46542c]
mov dword [eax], 0x47
jmp case.0x4612e3.3
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
mov edx, dword [0x465274]
add eax, dword [edx]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x3e4]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x3e4]
lea eax, [ebp - 0x3e0]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x3e0]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x3dc]
call fcn.00404204
mov eax, dword [ebp - 0x3dc]
mov edx, 0x462c6c
call fcn.00404418
jne 0x461bbd
mov eax, dword [0x46542c]
xor edx, edx
mov dword [eax], edx
jmp case.0x4612e3.3
call fcn.0045bf74
mov edx, 0x462c2c
mov eax, dword [ebp - 4]
call fcn.0045a24c
jmp case.0x4612e3.3
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
mov edx, dword [0x465274]
add eax, dword [edx]
add eax, 0x3a
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x3ec]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x3ec]
lea eax, [ebp - 0x3e8]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x3e8]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x1a0]
call fcn.00402d38
lea eax, [ebp - 0x1a0]
mov edx, dword [0x465324]
mov edx, dword [edx]
lea edx, [edx + edx*4]
mov ecx, dword [0x4650a0]
mov ecx, dword [ecx]
lea edx, [ecx + edx + 0xf606]
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402bb8
jne 0x461dcd
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
mov edx, dword [0x465274]
add eax, dword [edx]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x3f8]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x3f8]
lea eax, [ebp - 0x3f4]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x3f4]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x3f0]
call fcn.00404204
mov eax, dword [ebp - 0x3f0]
mov edx, 0x462cc8
call fcn.00404418
jne 0x461d89
mov eax, dword [0x4650a0]
mov eax, dword [eax]
cmp byte [eax + 0xe440], 0
jne 0x461d4a
xor eax, eax
push ebp
push 0x461d3e
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x4652cc]
mov eax, dword [eax]
add eax, dword [ebp - 4]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x400]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x400]
lea eax, [ebp - 0x3fc]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x3fc]
call fcn.00408360
call fcn.00459ba4
test eax, eax
jne 0x461d34
call fcn.0045b9fc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x461d75
mov eax, dword [0x465098]
inc dword [eax]
mov eax, dword [0x465098]
cmp dword [eax], 0x55
jne 0x461d75
mov eax, dword [0x4650a0]
mov eax, dword [eax]
cmp byte [eax + 0xe429], 0
jne 0x461d75
call fcn.0045b214
call fcn.0045b9fc
mov ecx, 0x63
mov edx, 0x97
mov eax, dword [ebp - 4]
call fcn.00459d70
jmp 0x461d94
mov eax, dword [0x46542c]
mov dword [eax], 7
mov eax, dword [0x46536c]
mov eax, dword [eax]
push eax
push 0xa
mov ecx, dword [0x465448]
mov ecx, dword [ecx]
mov edx, 0x63
mov eax, 0x97
call fcn.00459efc
cmp al, 1
jne case.0x4612e3.3
mov eax, dword [0x46542c]
mov dword [eax], 8
jmp case.0x4612e3.3
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
mov edx, dword [0x465274]
add eax, dword [edx]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x40c]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x40c]
lea eax, [ebp - 0x408]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x408]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x404]
call fcn.00404204
mov eax, dword [ebp - 0x404]
mov edx, 0x462c6c
call fcn.00404418
jne 0x461e43
mov eax, dword [0x46542c]
xor edx, edx
mov dword [eax], edx
jmp case.0x4612e3.3
call fcn.0045bf74
mov edx, 0x462c2c
mov eax, dword [ebp - 4]
call fcn.0045a24c
jmp case.0x4612e3.3
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
mov edx, dword [0x465274]
add eax, dword [edx]
add eax, 0x3a
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x414]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x414]
lea eax, [ebp - 0x410]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x410]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x1a0]
call fcn.00402d38
lea eax, [ebp - 0x1a0]
mov edx, dword [0x465324]
mov edx, dword [edx]
lea edx, [edx + edx*4]
mov ecx, dword [0x4650a0]
mov ecx, dword [ecx]
lea edx, [ecx + edx + 0xf606]
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402bb8
jne 0x461fd9
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
mov edx, dword [0x465274]
add eax, dword [edx]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x420]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x420]
lea eax, [ebp - 0x41c]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x41c]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x418]
call fcn.00404204
mov eax, dword [ebp - 0x418]
mov edx, 0x462cc8
call fcn.00404418
jne 0x461f5d
mov ecx, 0xc
mov edx, 8
mov eax, dword [ebp - 4]
call fcn.00459d70
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
mov edx, dword [0x465274]
add eax, dword [edx]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x42c]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x42c]
lea eax, [ebp - 0x428]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x428]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x424]
call fcn.00404204
mov eax, dword [ebp - 0x424]
mov edx, 0x462c6c
call fcn.00404418
jne case.0x4612e3.3
mov eax, dword [0x46542c]
mov dword [eax], 9
jmp case.0x4612e3.3
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
mov edx, dword [0x465274]
add eax, dword [edx]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x438]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x438]
lea eax, [ebp - 0x434]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x434]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x430]
call fcn.00404204
mov eax, dword [ebp - 0x430]
mov edx, 0x462c6c
call fcn.00404418
jne 0x46204f
mov eax, dword [0x46542c]
xor edx, edx
mov dword [eax], edx
jmp case.0x4612e3.3
call fcn.0045bf74
mov edx, 0x462c2c
mov eax, dword [ebp - 4]
call fcn.0045a24c
jmp case.0x4612e3.3
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
mov edx, dword [0x465274]
add eax, dword [edx]
add eax, 0x3a
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x440]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x440]
lea eax, [ebp - 0x43c]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x43c]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x1a0]
call fcn.00402d38
lea eax, [ebp - 0x1a0]
mov edx, dword [0x465324]
mov edx, dword [edx]
lea edx, [edx + edx*4]
mov ecx, dword [0x4650a0]
mov ecx, dword [ecx]
lea edx, [ecx + edx + 0xf606]
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402bb8
jne 0x4621b7
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
mov edx, dword [0x465274]
add eax, dword [edx]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x44c]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x44c]
lea eax, [ebp - 0x448]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x448]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x444]
call fcn.00404204
mov eax, dword [ebp - 0x444]
mov edx, 0x462c6c
call fcn.00404418
jne 0x462169
mov ecx, 0x299
mov edx, 0x2a8
mov eax, dword [ebp - 4]
call fcn.00459d70
mov eax, dword [0x46536c]
mov eax, dword [eax]
push eax
push 5
mov ecx, dword [0x465448]
mov ecx, dword [ecx]
mov edx, 0x299
mov eax, 0x2a8
call fcn.00459efc
cmp al, 1
jne case.0x4612e3.3
mov eax, dword [0x4650a0]
mov eax, dword [eax]
cmp byte [eax + 0xe429], 0
jne 0x4621a7
call fcn.0045b01c
mov eax, dword [0x46542c]
mov dword [eax], 0xa
jmp case.0x4612e3.3
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
mov edx, dword [0x465274]
add eax, dword [edx]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x458]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x458]
lea eax, [ebp - 0x454]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x454]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x450]
call fcn.00404204
mov eax, dword [ebp - 0x450]
mov edx, 0x462c6c
call fcn.00404418
jne 0x46222d
mov eax, dword [0x46542c]
xor edx, edx
mov dword [eax], edx
jmp case.0x4612e3.3
call fcn.0045bf74
mov edx, 0x462c2c
mov eax, dword [ebp - 4]
call fcn.0045a24c
jmp case.0x4612e3.3
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
mov edx, dword [0x465274]
add eax, dword [edx]
add eax, 0x3a
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x460]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x460]
lea eax, [ebp - 0x45c]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x45c]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x1a0]
call fcn.00402d38
lea eax, [ebp - 0x1a0]
mov edx, dword [0x465324]
mov edx, dword [edx]
lea edx, [edx + edx*4]
mov ecx, dword [0x4650a0]
mov ecx, dword [ecx]
lea edx, [ecx + edx + 0xf606]
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402bb8
jne case.0x4612e3.3
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
mov edx, dword [0x465274]
add eax, dword [edx]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x46c]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x46c]
lea eax, [ebp - 0x468]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x468]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x464]
call fcn.00404204
mov eax, dword [ebp - 0x464]
mov edx, 0x462c6c
call fcn.00404418
jne case.0x4612e3.3
mov eax, dword [0x465448]
mov eax, dword [eax]
push eax
mov eax, dword [0x46536c]
mov eax, dword [eax]
push eax
push 2
mov ecx, 0x226
mov edx, 0x2ed
mov eax, dword [ebp - 4]
call fcn.004599b0
test al, al
je case.0x4612e3.3
push 0x7d0
call sub.kernel32.dll_Sleep_1
call fcn.0045b214
call fcn.0045b3f8
call fcn.0045b61c
mov eax, dword [0x46542c]
mov dword [eax], 0xc
mov eax, dword [0x465098]
xor edx, edx
mov dword [eax], edx
jmp case.0x4612e3.3
mov eax, dword [ebp - 4]
add eax, 0x72e
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x474]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x474]
lea eax, [ebp - 0x470]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x470]
call fcn.00408360
call fcn.00459be0
test eax, eax
jle 0x462443
call fcn.0045bf74
mov edx, 0x462c2c
mov eax, dword [ebp - 4]
call fcn.0045a24c
mov eax, dword [0x46514c]
mov dword [eax], 0xabe0
mov eax, dword [0x46542c]
mov dword [eax], 0xd
mov eax, dword [0x465324]
inc dword [eax]
push 0x1450191
push 1
push 0x201
mov eax, dword [0x4654d0]
mov eax, dword [eax]
push eax
call sub.user32.dll_SendMessageA
push 0x1450191
push 1
push 0x202
mov eax, dword [0x4654d0]
mov eax, dword [eax]
push eax
call sub.user32.dll_SendMessageA
jmp case.0x4612e3.3
mov eax, dword [0x46509c]
mov eax, dword [eax]
call fcn.00459ba4
test eax, eax
jbe case.0x4612e3.3
mov eax, dword [0x46542c]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x46514c]
mov dword [eax], 0xabe0
jmp case.0x4612e3.3
mov eax, dword [ebp - 4]
add eax, 0x72e
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x47c]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x47c]
lea eax, [ebp - 0x478]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x478]
call fcn.00408360
call fcn.00459be0
test eax, eax
jne 0x462550
call fcn.0045bf74
mov edx, 0x462c2c
mov eax, dword [ebp - 4]
call fcn.0045a24c
push 0x3e8
call sub.kernel32.dll_Sleep_1
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
mov edx, dword [0x465274]
add eax, dword [edx]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x488]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x488]
lea eax, [ebp - 0x484]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x484]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x480]
call fcn.00404204
mov eax, dword [ebp - 0x480]
mov edx, 0x462c6c
call fcn.00404418
jne case.0x4612e3.3
mov eax, dword [0x46542c]
xor edx, edx
mov dword [eax], edx
jmp case.0x4612e3.3
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
mov edx, dword [0x465274]
add eax, dword [edx]
add eax, 0x3a
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x490]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x490]
lea eax, [ebp - 0x48c]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x48c]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x1a0]
call fcn.00402d38
lea eax, [ebp - 0x1a0]
mov edx, dword [0x465324]
mov edx, dword [edx]
lea edx, [edx + edx*4]
mov ecx, dword [0x4650a0]
mov ecx, dword [ecx]
lea edx, [ecx + edx + 0xf601]
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402bb8
je 0x462651
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
mov edx, dword [0x465274]
add eax, dword [edx]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x49c]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x49c]
lea eax, [ebp - 0x498]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x498]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x494]
call fcn.00404204
mov eax, dword [ebp - 0x494]
mov edx, 0x462c6c
call fcn.00404418
jne case.0x4612e3.3
mov eax, dword [0x46542c]
mov dword [eax], 0xe
jmp case.0x4612e3.3
call fcn.0045bf74
mov edx, 0x462c2c
mov eax, dword [ebp - 4]
call fcn.0045a24c
jmp case.0x4612e3.3
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
mov edx, dword [0x465274]
add eax, dword [edx]
add eax, 0x3a
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x4a4]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x4a4]
lea eax, [ebp - 0x4a0]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x4a0]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x1a0]
call fcn.00402d38
lea eax, [ebp - 0x1a0]
mov edx, dword [0x465324]
mov edx, dword [edx]
lea edx, [edx + edx*4]
mov ecx, dword [0x4650a0]
mov ecx, dword [ecx]
lea edx, [ecx + edx + 0xf601]
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402bb8
je 0x462912
mov eax, dword [0x4650e4]
mov eax, dword [eax]
call fcn.00459ba4
mov edx, dword [0x465274]
add eax, dword [edx]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x4b0]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x4b0]
lea eax, [ebp - 0x4ac]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x4ac]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x4a8]
call fcn.00404204
mov eax, dword [ebp - 0x4a8]
mov edx, 0x462c6c
call fcn.00404418
jne case.0x4612e3.3
mov eax, dword [0x465448]
mov eax, dword [eax]
push eax
mov eax, dword [0x46536c]
mov eax, dword [eax]
push eax
push 1
mov ecx, 0x21c
mov edx, 0x2fa
mov eax, dword [ebp - 4]
call fcn.004599b0
test al, al
je case.0x4612e3.3
call fcn.0045b810
mov eax, dword [0x46542c]
xor edx, edx
mov dword [eax], edx
push 0x3e8
call sub.kernel32.dll_Sleep_1
mov eax, dword [0x46509c]
mov eax, dword [eax]
call fcn.00459ba4
test eax, eax
ja case.0x4612e3.3
push 0x1450191
push 1
push 0x201
mov eax, dword [0x4654d0]
mov eax, dword [eax]
push eax
call sub.user32.dll_SendMessageA
push 0x1450191
push 1
push 0x202
mov eax, dword [0x4654d0]
mov eax, dword [eax]
push eax
call sub.user32.dll_SendMessageA
mov eax, dword [0x465324]
cmp dword [eax], 3
jne case.0x4612e3.3
mov eax, dword [0x465324]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x4650a0]
mov eax, dword [eax]
cmp byte [eax + 0xe432], 1
jne 0x4628b6
jmp 0x462824
xor eax, eax
push ebp
push 0x462859
push dword fs:[eax]
mov dword fs:[eax], esp
pushal
mov ecx, dword [0x466d14]
mov ecx, dword [ecx]
push 1
push ecx
push 2
push 2
mov eax, dword [0x466d18]
push eax
call dword [0x466d10]
popal
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x46286d
jmp 0x46287d
push 0x64
call sub.kernel32.dll_Sleep_1
push 0x13b0165
push 1
push 0x201
mov eax, dword [0x4654d0]
mov eax, dword [eax]
push eax
call sub.user32.dll_SendMessageA
push 0x13b0165
push 1
push 0x202
mov eax, dword [0x4654d0]
mov eax, dword [eax]
push eax
call sub.user32.dll_SendMessageA
mov eax, dword [0x4653a0]
mov eax, dword [eax]
lea eax, [eax + eax*8]
mov edx, dword [0x4650a0]
mov edx, dword [edx]
lea edi, [edx + eax + 0xe524]
mov esi, 0x462cd0
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
push 0
mov eax, dword [0x4653a0]
mov eax, dword [eax]
push eax
push 0x64
mov eax, dword [0x4650a0]
mov eax, dword [eax]
mov eax, dword [eax + 0xee2c]
push eax
call sub.user32.dll_PostMessageA
mov eax, dword [0x4653a0]
mov eax, dword [eax]
mov edx, dword [0x4650a0]
mov edx, dword [edx]
mov byte [edx + eax + 0xec83], 0
jmp case.0x4612e3.3
call fcn.0045bf74
mov edx, 0x462c2c
mov eax, dword [ebp - 4]
call fcn.0045a24c
jmp case.0x4612e3.3
mov eax, dword [0x46514c]
mov dword [eax], 0x3e8
xor edx, edx
push ebp
push 0x462a45
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [0x46536c]
mov eax, dword [eax]
push eax
push 8
mov ecx, dword [0x465448]
mov ecx, dword [ecx]
mov edx, 0x17d
mov eax, 0x1a3
call fcn.00459efc
mov ebx, eax
test bl, bl
jne 0x462988
mov ecx, 0x17d
mov edx, 0x1a3
mov eax, dword [ebp - 4]
call fcn.00459d70
mov eax, dword [0x4651fc]
mov byte [eax], 0
jmp 0x462a38
mov eax, dword [0x46542c]
mov dword [eax], 0x192
mov eax, dword [0x465308]
mov byte [eax], 0
mov eax, dword [0x4651fc]
cmp byte [eax], 0
jne 0x462a30
mov ebx, 2
mov eax, dword [0x465378]
mov eax, dword [eax]
add eax, dword [ebp - 4]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x4b8]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x4b8]
lea eax, [ebp - 0x4b4]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x4b4]
call fcn.00408360
mov dword [eax], ebx
mov eax, dword [0x46513c]
mov eax, dword [eax]
add eax, dword [ebp - 4]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x4c0]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x4c0]
lea eax, [ebp - 0x4bc]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x4bc]
call fcn.00408360
mov dword [eax], ebx
mov eax, dword [0x4651fc]
mov byte [eax], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp case.0x4612e3.3
xor eax, eax
push ebp
push 0x462b5a
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x465274]
mov eax, dword [eax]
add eax, edi
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x4c8]
mov eax, 8
call fcn.00408330
mov ecx, dword [ebp - 0x4c8]
lea eax, [ebp - 0x4c4]
mov edx, 0x462c18
call fcn.00404318
mov eax, dword [ebp - 0x4c4]
call fcn.00408360
mov edx, eax
lea eax, [ebp - 0x60]
call fcn.00404204
mov eax, dword [0x46536c]
mov eax, dword [eax]
push eax
push 8
mov ecx, dword [0x465448]
mov ecx, dword [ecx]
mov edx, 0x17d
mov eax, 0x1a3
call fcn.00459efc
mov ebx, eax
mov eax, dword [ebp - 0x60]
mov edx, 0x462c3c
call fcn.00404418
jne 0x462b09
test bl, bl
jne 0x462b09
mov eax, dword [0x465308]
cmp byte [eax], 0
jne 0x462b09
mov eax, dword [0x46542c]
mov dword [eax], 0x191
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp case.0x4612e3.3
test bl, bl
je 0x462b38
mov eax, dword [0x465308]
cmp byte [eax], 0
jne 0x462b38
mov edx, dword [0x4650ec]
mov edx, dword [edx]
add edx, 0x33
xor ecx, ecx
mov eax, dword [ebp - 4]
call fcn.0045a04c
test al, al
je 0x462b38
mov eax, dword [0x465308]
mov byte [eax], 1
mov eax, dword [ebp - 0x60]
mov edx, 0x462c6c
call fcn.00404418
jne 0x462b50
mov eax, dword [0x46542c]
xor edx, edx
mov dword [eax], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp case.0x4612e3.3
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x462bca
lea eax, [ebp - 0x4c8]
mov edx, 0x64
call fcn.00404030
lea eax, [ebp - 0x338]
mov edx, 0x64
call fcn.00404030
lea eax, [ebp - 0x1a8]
mov edx, 2
call fcn.00404030
lea eax, [ebp - 0x68]
mov edx, 3
call fcn.00404030
lea eax, [ebp - 0x38]
mov edx, 3
call fcn.00404030
ret