Function at 0x526c60
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5bb0a6
mov eax, dword fs:[0]
push eax
mov eax, 0x11c8
call fcn.005aae60
mov eax, dword [0x5f8800]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x10ec], edi
mov eax, dword [edi + 0x13f194]
cmp eax, 2
push 0x100
mov dword [ebp - 0x10cc], eax
setge byte [ebp - 0x10b9]
lea eax, [ebp - 0x128]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
push 0x40
lea eax, [ebp - 0x168]
mov dword [ebp - 0x18], 0
xorps xmm0, xmm0
mov byte [ebp - 0x14], 0
push 0
push eax
movups xmmword [ebp - 0x28], xmm0
call sub.VCRUNTIME140.dll_memset
add esp, 0x18
cmp word [edi + 0x144cd0], 0
jle 0x526d7b
mov esi, dword [edi + 0x144b74]
cmp esi, 0x3e7
ja 0x526d43
mov ecx, dword [edi + esi*4 + 0x13b664]
test ecx, ecx
je 0x526d43
call fcn.0040ae30
cmp ax, 4
jne 0x526d43
mov eax, dword [edi + esi*4 + 0x13b664]
mov ecx, eax
mov dword [ebp - 0x10d0], eax
call fcn.0040ae20
cmp ax, 9
jne 0x526d87
cmp dword [edi + 0x13f194], 3
setge byte [ebp - 0x10b9]
jmp 0x526d87
push 0
push 0
push 0
push 0
push 4
push 0
push 0xa6b
mov eax, 0xfffffffb
mov dword [edi + 0x144b74], 0xffffffff
push 0xfa314dc
mov ecx, edi
mov word [edi + 0x144cd0], ax
call fcn.00493690
jmp case.default.0x526fba
mov eax, dword [ebp - 0x10cc]
mov dword [ebp - 0x10d0], eax
movzx esi, word [edi + 0x144bc6]
movzx ecx, word [edi + 0x144bc8]
movzx eax, si
mov dword [ebp - 0x10e4], eax
mov ax, word [edi + 0x144bca]
push 0
push 0
sub ax, 5
mov dword [ebp - 0x10c0], ecx
movzx eax, ax
movsx ecx, cx
push 0
push ecx
mov dword [ebp - 0x10d8], eax
movsx eax, si
push eax
mov dword [ebp - 0x10e8], ecx
mov ecx, edi
push 0x3d
mov dword [ebp - 0x10dc], esi
mov dword [ebp - 0x10e0], eax
call fcn.0043d1d0
push 0
push 0
push 6
push dword [ebp - 0x10e8]
mov ecx, edi
push dword [ebp - 0x10e0]
push 0x46
call fcn.0043d1d0
movsx eax, word [edi + 0x144cd0]
dec eax
cmp eax, 0x15
ja case.default.0x526e14
movzx eax, byte [eax + 0x52dbc4]
jmp dword [eax*4 + 0x52dbbc]
mov eax, dword [ebp - 0x10e0]
movsx ecx, word [ebp + 8]
lea edx, [eax + 0x19]
mov dword [ebp - 0x10c8], edx
cmp ecx, edx
jl 0x526e6d
add eax, 0x41
cmp ecx, eax
jg 0x526e6d
mov eax, dword [ebp - 0x10e8]
movsx edx, word [ebp + 0xc]
lea ecx, [eax + 0x12c]
mov dword [ebp - 0x10c4], ecx
cmp edx, ecx
jl 0x526e6d
add eax, 0x140
cmp edx, eax
jg 0x526e6d
mov edx, 6
mov dword [ebp - 0x10d4], 0x14
jmp 0x526e8b
mov ecx, dword [ebp - 0x10e8]
add ecx, 0x12c
mov dword [ebp - 0x10d4], 7
mov dword [ebp - 0x10c4], ecx
xor edx, edx
push dword [ebp - 0x10d4]
mov eax, edi
push edx
push edx
push str.Back
push ecx
push dword [ebp - 0x10c8]
mov ecx, eax
call fcn.0045dd00
cmp byte [edi + 0x144cd3], 0
jne case.default.0x526e14
cmp byte [ebp - 0x10b9], 0
je case.default.0x526e14
mov eax, dword [ebp - 0x10e0]
mov esi, dword [ebp - 0x10dc]
lea ecx, [eax + 0xb4]
mov dword [ebp - 0x10d4], ecx
lea edx, [eax + 0xb4]
movsx ecx, word [ebp + 8]
cmp ecx, edx
jl 0x526f22
add eax, 0xe6
cmp ecx, eax
mov ecx, dword [ebp - 0x10c4]
jg 0x526f28
movsx edx, word [ebp + 0xc]
cmp edx, ecx
jl 0x526f28
mov eax, dword [ebp - 0x10e8]
add eax, 0x140
cmp edx, eax
jg 0x526f28
push 0x14
push 6
push 6
push str.Apply
push ecx
push dword [ebp - 0x10d4]
jmp 0x526f99
mov ecx, dword [ebp - 0x10c4]
push 7
push 0
push 0
push str.Apply
push ecx
push dword [ebp - 0x10d4]
jmp 0x526f99
mov eax, dword [ebp - 0x10e8]
mov ecx, edi
push 0x14
push 6
push 6
add eax, 0x12c
push str.Back
push eax
mov eax, dword [ebp - 0x10e0]
add eax, 0x19
push eax
call fcn.0045dd00
cmp byte [edi + 0x144cd3], 0
jne case.default.0x526e14
cmp byte [ebp - 0x10b9], 0
je case.default.0x526e14
mov eax, dword [ebp - 0x10e8]
push 0x14
push 6
push 6
add eax, 0x12c
push str.Apply
push eax
mov eax, dword [ebp - 0x10e0]
add eax, 0xb4
push eax
mov ecx, edi
call fcn.0045dd00
movsx eax, word [edi + 0x144cd0]
add eax, 5
cmp eax, 0x1d
ja case.default.0x526fba
movzx eax, byte [eax + 0x52dc14]
jmp dword [eax*4 + 0x52dbdc]
push str.DRAW_DIALOGBOX_SUMMONEVENT64
lea ecx, [ebp - 0x740]
call fcn.0040f9f0
lea eax, [ebp - 0x740]
mov dword [ebp - 4], 0
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
cmp dword [eax + 0x14], 0xf
jbe 0x526ff1
mov eax, dword [eax]
mov ecx, dword [ebp - 0x10e0]
push 0
push 0
push 0
push 0
push eax
mov eax, dword [ebp - 0x10e8]
add eax, 0x2d
push eax
lea eax, [ecx + 0xf0]
push eax
lea eax, [ecx + 0x19]
mov ecx, edi
push eax
call fcn.0045d060
lea ecx, [ebp - 0x740]
call fcn.00411640
jmp case.default.0x526fba
push str.DRAW_DIALOGBOX_SUMMONEVENT58
lea ecx, [ebp - 0x758]
call fcn.0040f9f0
lea eax, [ebp - 0x758]
mov dword [ebp - 4], 1
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
cmp dword [eax + 0x14], 0xf
jbe 0x52705c
mov eax, dword [eax]
mov esi, dword [ebp - 0x10e0]
push 0
push 0
push 0
push 0
push eax
mov eax, dword [ebp - 0x10e8]
lea ecx, [esi + 0xf0]
add eax, 0x2d
lea edx, [esi + 0x19]
push eax
push ecx
push edx
mov ecx, edi
call fcn.0045d060
lea ecx, [ebp - 0x758]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_SUMMONEVENT59
lea ecx, [ebp - 0x770]
call fcn.0040f9f0
lea eax, [ebp - 0x770]
mov dword [ebp - 4], 2
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
cmp dword [eax + 0x14], 0xf
jbe 0x5270c9
mov eax, dword [eax]
push 0
push 0
push 0
push 0
push eax
mov eax, dword [ebp - 0x10e8]
mov ecx, edi
add eax, 0x3c
push eax
lea eax, [esi + 0xf0]
push eax
lea eax, [esi + 0x19]
push eax
call fcn.0045d060
lea ecx, [ebp - 0x770]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
movsx ecx, word [ebp + 8]
lea eax, [esi + 0x9a]
cmp ecx, eax
jle 0x52714a
lea eax, [esi + 0xe4]
cmp ecx, eax
jge 0x52714a
mov eax, dword [ebp - 0x10e8]
movsx edx, word [ebp + 0xc]
lea ecx, [eax + 0x124]
cmp edx, ecx
jle 0x52714a
add eax, 0x138
cmp edx, eax
jge 0x52714a
push 0
mov eax, 0x11
push 0
push eax
lea eax, [esi + 0x9a]
jmp 0x52db8c
mov ecx, dword [ebp - 0x10e8]
mov eax, 0x10
push 0
push 0
push eax
add ecx, 0x124
lea eax, [esi + 0x9a]
jmp 0x52db8c
push str.DRAW_DIALOGBOX_SUMMONEVENT9
lea ecx, [ebp - 0x788]
call fcn.0040f9f0
mov eax, dword [ebp - 0x10e0]
mov ecx, 0x5fd3c4
push 0
push 0
push 0
lea esi, [eax + 0xf0]
mov dword [ebp - 4], 3
lea edi, [eax + 0x19]
push 0
lea eax, [ebp - 0x788]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
mov ecx, dword [ebp - 0x10ec]
push eax
mov eax, dword [ebp - 0x10e8]
add eax, 0x2d
push eax
push esi
push edi
call fcn.0045d060
lea ecx, [ebp - 0x788]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_SUMMONEVENT10
lea ecx, [ebp - 0x7a0]
call fcn.0040f9f0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x7a0]
mov dword [ebp - 4], 4
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x10e8]
add eax, 0x3c
push eax
push esi
mov esi, dword [ebp - 0x10ec]
mov ecx, esi
push edi
call fcn.0045d060
lea ecx, [ebp - 0x7a0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, dword [ebp - 0x10e0]
movsx ecx, word [ebp + 8]
lea edi, [eax + 0x9a]
cmp ecx, edi
jle 0x52728b
add eax, 0xe4
cmp ecx, eax
jge 0x52728b
mov eax, dword [ebp - 0x10e8]
movsx edx, word [ebp + 0xc]
lea ecx, [eax + 0x124]
cmp edx, ecx
jle 0x52728b
add eax, 0x138
cmp edx, eax
jge 0x52728b
push 0
push 0
mov eax, 0x11
push eax
push ecx
push edi
mov ecx, esi
jmp 0x52db90
mov ecx, dword [ebp - 0x10e8]
mov eax, 0x10
push 0
push 0
add ecx, 0x124
push eax
push ecx
push edi
mov ecx, esi
jmp 0x52db90
push str.DRAW_DIALOGBOX_SUMMONEVENT8
lea ecx, [ebp - 0x7b8]
call fcn.0040f9f0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x7b8]
mov dword [ebp - 4], 5
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
mov ecx, dword [ebp - 0x10e0]
push eax
mov eax, dword [ebp - 0x10e8]
add eax, 0x2d
push eax
lea eax, [ecx + 0xf0]
push eax
lea eax, [ecx + 0x19]
mov ecx, edi
push eax
call fcn.0045d060
lea ecx, [ebp - 0x7b8]
call fcn.00411640
jmp case.default.0x526fba
push str.DRAW_DIALOGBOX_SUMMONEVENT11
lea ecx, [ebp - 0x7d0]
call fcn.0040f9f0
lea eax, [ebp - 0x7d0]
mov dword [ebp - 4], 6
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
cmp dword [eax + 0x14], 0xf
jbe 0x527344
mov eax, dword [eax]
mov ecx, dword [ebp - 0x10e0]
push 0
push 0
push 0
push 0
push eax
mov eax, dword [ebp - 0x10e8]
add eax, 0x2d
push eax
lea eax, [ecx + 0xf0]
push eax
lea eax, [ecx + 0x19]
mov ecx, edi
push eax
call fcn.0045d060
lea ecx, [ebp - 0x7d0]
call fcn.00411640
jmp case.default.0x526fba
push str.DRAW_DIALOGBOX_SUMMONEVENT1
lea ecx, [ebp - 0x7e8]
call fcn.0040f9f0
lea eax, [ebp - 0x7e8]
mov dword [ebp - 4], 7
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
cmp dword [eax + 0x14], 0xf
jbe 0x5273af
mov eax, dword [eax]
mov esi, dword [ebp - 0x10e0]
mov ecx, dword [ebp - 0x10e8]
push 0
push 0xc8
push 0xc8
push 0xdc
push eax
add ecx, 0x2d
lea eax, [esi + 0xf0]
push ecx
push eax
lea eax, [esi + 0x19]
mov ecx, edi
push eax
call fcn.0045d060
lea ecx, [ebp - 0x7e8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_SUMMONEVENT1
lea ecx, [ebp - 0x800]
call fcn.0040f9f0
lea eax, [ebp - 0x800]
mov dword [ebp - 4], 8
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
cmp dword [eax + 0x14], 0xf
jbe 0x527425
mov eax, dword [eax]
push 0
push 0xc8
push 0xc8
push 0xdc
push eax
mov eax, dword [ebp - 0x10e8]
mov ecx, edi
add eax, 0x2d
push eax
lea eax, [esi + 0xf1]
push eax
lea eax, [esi + 0x1a]
push eax
call fcn.0045d060
lea ecx, [ebp - 0x800]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
lea eax, [edi + 0x13b664]
xor edx, edx
mov dword [ebp - 0x10c8], edx
mov edi, 0x3e8
mov dword [ebp - 0x10d4], eax
mov dword [ebp - 0x10c4], eax
mov ecx, dword [eax]
test ecx, ecx
je 0x5274a8
call fcn.0040ae30
mov edx, dword [ebp - 0x10c8]
cmp ax, 4
mov eax, dword [ebp - 0x10c4]
jne 0x5274a8
inc edx
mov dword [ebp - 0x10c8], edx
add eax, 4
mov dword [ebp - 0x10c4], eax
sub edi, 1
jne 0x527484
cmp edx, 1
jne 0x527507
push str.DRAW_DIALOGBOX_SUMMONEVENT4
lea ecx, [ebp - 0x818]
call fcn.0040f9f0
lea eax, [ebp - 0x818]
mov dword [ebp - 4], 9
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
cmp dword [eax + 0x14], 0xf
jbe 0x5274eb
mov eax, dword [eax]
push dword [ebp - 0x10c8]
push eax
lea eax, [ebp - 0x128]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
lea ecx, [ebp - 0x818]
jmp 0x527551
push str.DRAW_DIALOGBOX_SUMMONEVENT5
lea ecx, [ebp - 0x830]
call fcn.0040f9f0
lea eax, [ebp - 0x830]
mov dword [ebp - 4], 0xa
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
cmp dword [eax + 0x14], 0xf
jbe 0x527537
mov eax, dword [eax]
push dword [ebp - 0x10c8]
push eax
lea eax, [ebp - 0x128]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
lea ecx, [ebp - 0x830]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov ecx, dword [ebp - 0x10d8]
lea eax, [ebp - 0x128]
mov edi, dword [ebp - 0x10ec]
push 0
push 0
push 0
push 0
push eax
mov eax, dword [ebp - 0x10e8]
movsx ecx, cx
add eax, 0x3c
add ecx, esi
push eax
push ecx
mov dword [ebp - 0x10d0], ecx
mov ecx, edi
push esi
call fcn.0045d060
push str.DRAW_DIALOGBOX_SUMMONEVENT6
lea ecx, [ebp - 0x848]
call fcn.0040f9f0
lea eax, [ebp - 0x848]
mov dword [ebp - 4], 0xb
push eax
lea eax, [ebp - 0x11b4]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x5275d5
mov eax, dword [eax]
push 0
push 0
push 0
push 0
push eax
mov eax, dword [ebp - 0x10e8]
mov ecx, edi
add eax, 0x4b
push eax
push dword [ebp - 0x10d0]
push esi
call fcn.0045d060
lea ecx, [ebp - 0x848]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_SUMMONEVENT7
lea ecx, [ebp - 0x860]
call fcn.0040f9f0
lea eax, [ebp - 0x860]
mov dword [ebp - 4], 0xc
push eax
lea eax, [ebp - 0x10f4]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x527644
mov eax, dword [eax]
push 0
push 0
push 0
push 0
push eax
mov eax, dword [ebp - 0x10e8]
mov ecx, edi
add eax, 0x5a
push eax
push dword [ebp - 0x10d0]
push esi
call fcn.0045d060
lea ecx, [ebp - 0x860]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, dword [ebp - 0x10e8]
lea ecx, [edi + 0x13b664]
xor edx, edx
mov dword [ebp - 0x10c4], 0x3e8
add eax, 0x6e
mov dword [ebp - 0x10d8], edx
mov dword [ebp - 0x10c8], eax
mov eax, 0x3e8
mov ecx, dword [ecx]
test ecx, ecx
je 0x527ea3
call fcn.0040ae30
mov edx, dword [ebp - 0x10d8]
cmp ax, 4
jne 0x527e9d
movsx ecx, word [edi + 0x144bce]
inc edx
mov dword [ebp - 0x10d8], edx
cmp edx, ecx
jle 0x527e9d
mov eax, dword [edi + 0x144b70]
add eax, ecx
cmp edx, eax
jg 0x527e9d
mov esi, dword [ebp - 0x10d4]
lea eax, [ebp - 0x28]
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
push eax
movups xmmword [ebp - 0x28], xmm0
mov byte [ebp - 0x14], 0
mov eax, dword [esi]
add eax, 0x3c
push eax
call fcn.005666c0
push 0x100
lea eax, [ebp - 0x128]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov ecx, dword [esi]
add esp, 0x14
call fcn.0040ae20
cwde
cmp eax, 9
ja case.default.0x527736
jmp dword [eax*4 + 0x52dc34]
push 0x1c
xorps xmm0, xmm0
mov dword [ebp - 0x2f8], 0
push str.DRAW_DIALOGBOX_SUMMONEVENT38
lea ecx, [ebp - 0x308]
mov dword [ebp - 0x2f4], 0
movups xmmword [ebp - 0x308], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x308]
mov dword [ebp - 4], 0xd
push eax
lea eax, [ebp - 0x10fc]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x527799
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x128]
push 0x100
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x308]
call fcn.00411640
jmp case.default.0x527736
push 0x1c
xorps xmm0, xmm0
mov dword [ebp - 0x1a0], 0
push str.DRAW_DIALOGBOX_SUMMONEVENT39
lea ecx, [ebp - 0x1b0]
mov dword [ebp - 0x19c], 0
movups xmmword [ebp - 0x1b0], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x1b0]
mov dword [ebp - 4], 0xe
push eax
lea eax, [ebp - 0x1104]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x527821
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x128]
push 0x100
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
mov eax, dword [ebp - 0x19c]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
cmp eax, 0xf
jbe 0x52785e
push eax
push dword [ebp - 0x1b0]
lea eax, [ebp - 0x1b0]
push eax
call fcn.0047d060
add esp, 0xc
mov dword [ebp - 0x1a0], 0
mov dword [ebp - 0x19c], 0xf
mov byte [ebp - 0x1b0], 0
jmp case.default.0x527736
push 0x1c
xorps xmm0, xmm0
mov dword [ebp - 0x1b8], 0
push str.DRAW_DIALOGBOX_SUMMONEVENT40
lea ecx, [ebp - 0x1c8]
mov dword [ebp - 0x1b4], 0
movups xmmword [ebp - 0x1c8], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x1c8]
mov dword [ebp - 4], 0xf
push eax
lea eax, [ebp - 0x110c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x5278da
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x128]
push 0x100
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
mov eax, dword [ebp - 0x1b4]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
cmp eax, 0xf
jbe 0x527917
push eax
push dword [ebp - 0x1c8]
lea eax, [ebp - 0x1c8]
push eax
call fcn.0047d060
add esp, 0xc
mov dword [ebp - 0x1b8], 0
mov dword [ebp - 0x1b4], 0xf
mov byte [ebp - 0x1c8], 0
jmp case.default.0x527736
push 0x1c
xorps xmm0, xmm0
mov dword [ebp - 0x1d0], 0
push str.DRAW_DIALOGBOX_SUMMONEVENT41
lea ecx, [ebp - 0x1e0]
mov dword [ebp - 0x1cc], 0
movups xmmword [ebp - 0x1e0], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x1e0]
mov dword [ebp - 4], 0x10
push eax
lea eax, [ebp - 0x1114]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x527993
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x128]
push 0x100
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
mov eax, dword [ebp - 0x1cc]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
cmp eax, 0xf
jbe 0x5279d0
push eax
push dword [ebp - 0x1e0]
lea eax, [ebp - 0x1e0]
push eax
call fcn.0047d060
add esp, 0xc
mov dword [ebp - 0x1d0], 0
mov dword [ebp - 0x1cc], 0xf
mov byte [ebp - 0x1e0], 0
jmp case.default.0x527736
push 0x1c
xorps xmm0, xmm0
mov dword [ebp - 0x1e8], 0
push str.DRAW_DIALOGBOX_SUMMONEVENT42
lea ecx, [ebp - 0x1f8]
mov dword [ebp - 0x1e4], 0
movups xmmword [ebp - 0x1f8], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x1f8]
mov dword [ebp - 4], 0x11
push eax
lea eax, [ebp - 0x111c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x527a4c
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x128]
push 0x100
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
mov eax, dword [ebp - 0x1e4]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
cmp eax, 0xf
jbe 0x527a89
push eax
push dword [ebp - 0x1f8]
lea eax, [ebp - 0x1f8]
push eax
call fcn.0047d060
add esp, 0xc
mov dword [ebp - 0x1e8], 0
mov dword [ebp - 0x1e4], 0xf
mov byte [ebp - 0x1f8], 0
jmp case.default.0x527736
push 0x1c
xorps xmm0, xmm0
mov dword [ebp - 0x200], 0
push str.DRAW_DIALOGBOX_SUMMONEVENT43
lea ecx, [ebp - 0x210]
mov dword [ebp - 0x1fc], 0
movups xmmword [ebp - 0x210], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x210]
mov dword [ebp - 4], 0x12
push eax
lea eax, [ebp - 0x1124]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x527b05
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x128]
push 0x100
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
mov eax, dword [ebp - 0x1fc]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
cmp eax, 0xf
jbe 0x527b42
push eax
push dword [ebp - 0x210]
lea eax, [ebp - 0x210]
push eax
call fcn.0047d060
add esp, 0xc
mov dword [ebp - 0x200], 0
mov dword [ebp - 0x1fc], 0xf
mov byte [ebp - 0x210], 0
jmp case.default.0x527736
push 0x1c
xorps xmm0, xmm0
mov dword [ebp - 0x218], 0
push str.DRAW_DIALOGBOX_SUMMONEVENT44
lea ecx, [ebp - 0x228]
mov dword [ebp - 0x214], 0
movups xmmword [ebp - 0x228], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x228]
mov dword [ebp - 4], 0x13
push eax
lea eax, [ebp - 0x112c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x527bbe
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x128]
push 0x100
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
mov eax, dword [ebp - 0x214]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
cmp eax, 0xf
jbe 0x527bfb
push eax
push dword [ebp - 0x228]
lea eax, [ebp - 0x228]
push eax
call fcn.0047d060
add esp, 0xc
mov dword [ebp - 0x218], 0
mov dword [ebp - 0x214], 0xf
mov byte [ebp - 0x228], 0
jmp case.default.0x527736
push 0x1c
xorps xmm0, xmm0
mov dword [ebp - 0x310], 0
push str.DRAW_DIALOGBOX_SUMMONEVENT45
lea ecx, [ebp - 0x320]
mov dword [ebp - 0x30c], 0
movups xmmword [ebp - 0x320], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x320]
mov dword [ebp - 4], 0x14
push eax
lea eax, [ebp - 0x1134]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x527c77
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x128]
push 0x100
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x320]
call fcn.00411640
jmp case.default.0x527736
push 0x1c
xorps xmm0, xmm0
mov dword [ebp - 0x230], 0
push str.DRAW_DIALOGBOX_SUMMONEVENT46
lea ecx, [ebp - 0x240]
mov dword [ebp - 0x22c], 0
movups xmmword [ebp - 0x240], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x240]
mov dword [ebp - 4], 0x15
push eax
lea eax, [ebp - 0x113c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x527cff
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x128]
push 0x100
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
mov eax, dword [ebp - 0x22c]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
cmp eax, 0xf
jbe 0x527d3c
push eax
push dword [ebp - 0x240]
lea eax, [ebp - 0x240]
push eax
call fcn.0047d060
add esp, 0xc
mov dword [ebp - 0x230], 0
mov dword [ebp - 0x22c], 0xf
mov byte [ebp - 0x240], 0
jmp case.default.0x527736
mov eax, dword [esi]
push dword [eax + 0x60]
push dword [eax + 0x5c]
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x128]
push str._s___d__d_
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
push 0x80
lea esi, [edi + 0x18d57f]
push 0
push esi
call sub.VCRUNTIME140.dll_memset
mov ecx, dword [ebp - 0x10d4]
mov ecx, dword [ecx]
movzx eax, word [ecx + 0x74]
push eax
movzx eax, word [ecx + 0x72]
push eax
movzx eax, word [ecx + 0x70]
push eax
movzx eax, word [ecx + 0x6e]
push eax
movzx eax, word [ecx + 0x6a]
push eax
movzx eax, word [ecx + 0x68]
push eax
lea eax, [ebp - 0x128]
push eax
push str._s_r_n_04d__02d__02d__02d:_02d:_02d
push esi
call dword [sym.imp.USER32.dll_wsprintfA]
push 0x100
lea eax, [ebp - 0x128]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
push esi
lea eax, [ebp - 0x128]
push 0x100
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
mov esi, dword [ebp - 0x10e0]
add esp, 0x48
movsx ecx, word [ebp + 8]
lea eax, [esi + 0x1e]
cmp ecx, eax
jle 0x527e39
lea eax, [esi + 0xd2]
cmp ecx, eax
jge 0x527e39
movsx ecx, word [ebp + 0xc]
mov edx, dword [ebp - 0x10c8]
cmp ecx, edx
jl 0x527e39
lea eax, [edx + 0x1d]
cmp ecx, eax
jg 0x527e39
push 0
push 0xff
push 0xff
push 0xff
lea eax, [ebp - 0x128]
push eax
push edx
jmp 0x527e82
mov eax, dword [ebp - 0x10d4]
mov ecx, dword [eax]
call fcn.0040ae00
sub eax, 1
je 0x527e67
sub eax, 1
je 0x527e5a
sub eax, 2
jne 0x527e90
push eax
push eax
push eax
jmp 0x527e70
push 0
push 0
push 0xff
push 0
jmp 0x527e75
push 0
push 0
push 0xff
push 0xff
lea eax, [ebp - 0x128]
push eax
push dword [ebp - 0x10c8]
push dword [ebp - 0x10d0]
mov ecx, edi
push esi
call fcn.0045d060
add dword [ebp - 0x10c8], 0x1e
mov edx, dword [ebp - 0x10d8]
mov eax, dword [ebp - 0x10c4]
mov ecx, dword [ebp - 0x10d4]
add ecx, 4
sub eax, 1
mov dword [ebp - 0x10d4], ecx
mov dword [ebp - 0x10c4], eax
jne 0x5276a3
mov ecx, dword [edi + 0x144b70]
cmp edx, ecx
jle 0x527f39
movsx eax, word [edi + 0x144bce]
push 0
push 0
push 3
movd xmm1, eax
mov eax, edx
sub eax, ecx
mov ecx, edi
cvtdq2pd xmm1, xmm1
movd xmm0, eax
mulsd xmm1, qword [0x5cd590]
cvtdq2pd xmm0, xmm0
push dword [ebp - 0x10e8]
divsd xmm1, xmm0
push dword [ebp - 0x10e0]
cvttsd2si esi, xmm1
push 0x3d
call fcn.0043d1d0
mov eax, dword [ebp - 0x10e8]
mov ecx, edi
push 0
add eax, 0x23
push 0
add eax, esi
mov esi, dword [ebp - 0x10e0]
push 7
push eax
lea eax, [esi + 0xf2]
push eax
push 0x3d
call fcn.0043d1d0
cmp byte [ebp + 0x14], 0
je 0x528003
mov ecx, edi
call fcn.004973c0
cmp eax, 0x36
jne 0x528003
mov edx, dword [edi + 0x144b70]
cmp dword [ebp - 0x10d8], edx
jle 0x528003
movsx ecx, word [ebp + 8]
lea eax, [esi + 0xe6]
cmp ecx, eax
jl 0x52800a
lea eax, [esi + 0x104]
cmp ecx, eax
jg 0x52800a
mov esi, dword [ebp - 0x10e8]
movsx ecx, word [ebp + 0xc]
lea eax, [esi + 0x28]
cmp ecx, eax
jl 0x527fe0
lea eax, [esi + 0x140]
cmp ecx, eax
jg 0x527fe0
sub ecx, esi
mov esi, dword [ebp - 0x10d8]
sub ecx, 0x23
mov eax, esi
sub eax, edx
movd xmm1, ecx
movd xmm0, eax
cvtdq2pd xmm1, xmm1
cvtdq2pd xmm0, xmm0
mulsd xmm1, xmm0
divsd xmm1, qword [0x5cd590]
addsd xmm1, qword [0x5c5598]
cvttsd2si eax, xmm1
mov word [edi + 0x144bce], ax
jmp 0x528010
movsx ecx, word [ebp + 0xc]
lea eax, [esi + 0xa]
cmp ecx, eax
jle 0x52800a
lea eax, [esi + 0x28]
mov esi, dword [ebp - 0x10d8]
cmp ecx, eax
jge 0x528010
xor eax, eax
mov word [edi + 0x144bce], ax
jmp 0x528010
mov byte [edi + 0x144cd2], 0
mov esi, dword [ebp - 0x10d8]
mov ecx, edi
call fcn.004973c0
cmp eax, 0x36
jne 0x52806b
mov cx, word [ebp + 0x10]
test cx, cx
je 0x52806b
cmp esi, 0x32
jle 0x528049
movsx ecx, cx
mov eax, 0x77777777
imul ecx
sub edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
add word [edi + 0x144bce], ax
jmp 0x528062
movzx eax, word [edi + 0x144bce]
test cx, cx
jle 0x528058
dec eax
jmp 0x52805b
jns 0x528062
inc eax
mov word [edi + 0x144bce], ax
xor eax, eax
mov word [edi + 0x14a904], ax
mov edx, dword [edi + 0x144b70]
cmp esi, edx
jle 0x528093
movsx eax, word [edi + 0x144bce]
mov ecx, esi
sub ecx, edx
cmp eax, ecx
jle 0x52808f
mov eax, esi
sub eax, edx
mov word [edi + 0x144bce], ax
cmp esi, edx
jg 0x52809c
xor eax, eax
mov word [edi + 0x144bce], ax
cmp word [edi + 0x144bce], 0
jge 0x5280af
xor eax, eax
mov word [edi + 0x144bce], ax
cmp byte [ebp - 0x10b9], 0
je case.default.0x526fba
mov ecx, dword [ebp - 0x10dc]
movsx esi, word [ebp + 8]
movsx edx, cx
add edx, 0x9a
cmp esi, edx
jle 0x52811a
movsx eax, cx
add eax, 0xe4
cmp esi, eax
jge 0x52811a
mov ecx, dword [ebp - 0x10c0]
mov ax, word [ebp + 0xc]
movsx esi, cx
add esi, 0x124
cwde
cmp eax, esi
jle 0x52811a
mov edi, dword [ebp - 0x10ec]
movsx eax, cx
movsx ecx, word [ebp + 0xc]
add eax, 0x138
cmp ecx, eax
jge 0x52811a
push 0
push 0
push 0x19
push esi
push edx
jmp 0x52db8e
mov eax, dword [ebp - 0x10c0]
push 0
push 0
cwde
push 0x18
add eax, 0x124
push eax
push edx
jmp 0x52db8e
push str.DRAW_DIALOGBOX_SUMMONEVENT2
lea ecx, [ebp - 0x878]
call fcn.0040f9f0
lea eax, [ebp - 0x878]
mov dword [ebp - 4], 0x16
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov edx, eax
cmp dword [edx + 0x14], 0xf
jbe 0x528165
mov edx, dword [edx]
mov eax, dword [ebp - 0x10c0]
mov ecx, edi
push 0
push 0xc8
push 0xc8
movsx eax, ax
add eax, 0x2d
push 0xdc
push edx
push eax
mov dword [ebp - 0x10c4], eax
movsx eax, si
add eax, 0xf0
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d060
lea ecx, [ebp - 0x878]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_SUMMONEVENT2
lea ecx, [ebp - 0x890]
call fcn.0040f9f0
lea eax, [ebp - 0x890]
mov dword [ebp - 4], 0x17
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
cmp dword [eax + 0x14], 0xf
jbe 0x5281e3
mov eax, dword [eax]
push 0
push 0xc8
push 0xc8
push 0xdc
push eax
push dword [ebp - 0x10c4]
movsx eax, si
mov ecx, edi
add eax, 0xf1
push eax
movsx eax, si
add eax, 0x1a
push eax
call fcn.0045d060
lea ecx, [ebp - 0x890]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
lea eax, [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x10d0]
add eax, 0x3c
push eax
call fcn.005666c0
mov ecx, dword [ebp - 0x10d0]
add esp, 8
call fcn.0040ae20
movsx ecx, ax
cmp ecx, 9
ja case.default.0x528251
jmp dword [ecx*4 + 0x52dc5c]
push str.DRAW_DIALOGBOX_SUMMONEVENT38
lea ecx, [ebp - 0x8c0]
call fcn.0040f9f0
push str.DRAW_DIALOGBOX_SUMMONEVENT12
lea ecx, [ebp - 0x8a8]
mov dword [ebp - 4], 0x18
call fcn.0040f9f0
lea eax, [ebp - 0x8c0]
mov byte [ebp - 4], 0x19
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x8a8]
mov ecx, 0x5fd3c4
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x128]
push eax
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
call eax
add esp, 0xc
lea ecx, [ebp - 0x8a8]
call fcn.00411640
lea ecx, [ebp - 0x8c0]
jmp 0x528778
push str.DRAW_DIALOGBOX_SUMMONEVENT39
lea ecx, [ebp - 0x8f0]
call fcn.0040f9f0
push str.DRAW_DIALOGBOX_SUMMONEVENT12
lea ecx, [ebp - 0x8d8]
mov dword [ebp - 4], 0x1a
call fcn.0040f9f0
lea eax, [ebp - 0x8f0]
mov byte [ebp - 4], 0x1b
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x8d8]
mov ecx, 0x5fd3c4
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x128]
push eax
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
call eax
add esp, 0xc
lea ecx, [ebp - 0x8d8]
call fcn.00411640
lea ecx, [ebp - 0x8f0]
jmp 0x528778
push str.DRAW_DIALOGBOX_SUMMONEVENT40
lea ecx, [ebp - 0x920]
call fcn.0040f9f0
push str.DRAW_DIALOGBOX_SUMMONEVENT12
lea ecx, [ebp - 0x908]
mov dword [ebp - 4], 0x1c
call fcn.0040f9f0
lea eax, [ebp - 0x920]
mov byte [ebp - 4], 0x1d
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x908]
mov ecx, 0x5fd3c4
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x128]
push eax
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
call eax
add esp, 0xc
lea ecx, [ebp - 0x908]
call fcn.00411640
lea ecx, [ebp - 0x920]
jmp 0x528778
push str.DRAW_DIALOGBOX_SUMMONEVENT41
lea ecx, [ebp - 0x950]
call fcn.0040f9f0
push str.DRAW_DIALOGBOX_SUMMONEVENT12
lea ecx, [ebp - 0x938]
mov dword [ebp - 4], 0x1e
call fcn.0040f9f0
lea eax, [ebp - 0x950]
mov byte [ebp - 4], 0x1f
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x938]
mov ecx, 0x5fd3c4
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x128]
push eax
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
call eax
add esp, 0xc
lea ecx, [ebp - 0x938]
call fcn.00411640
lea ecx, [ebp - 0x950]
jmp 0x528778
push str.DRAW_DIALOGBOX_SUMMONEVENT42
lea ecx, [ebp - 0x980]
call fcn.0040f9f0
push str.DRAW_DIALOGBOX_SUMMONEVENT12
lea ecx, [ebp - 0x968]
mov dword [ebp - 4], 0x20
call fcn.0040f9f0
lea eax, [ebp - 0x980]
mov byte [ebp - 4], 0x21
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x968]
mov ecx, 0x5fd3c4
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x128]
push eax
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
call eax
add esp, 0xc
lea ecx, [ebp - 0x968]
call fcn.00411640
lea ecx, [ebp - 0x980]
jmp 0x528778
push str.DRAW_DIALOGBOX_SUMMONEVENT43
lea ecx, [ebp - 0x9b0]
call fcn.0040f9f0
push str.DRAW_DIALOGBOX_SUMMONEVENT12
lea ecx, [ebp - 0x998]
mov dword [ebp - 4], 0x22
call fcn.0040f9f0
lea eax, [ebp - 0x9b0]
mov byte [ebp - 4], 0x23
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x998]
mov ecx, 0x5fd3c4
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x128]
push eax
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
call eax
add esp, 0xc
lea ecx, [ebp - 0x998]
call fcn.00411640
lea ecx, [ebp - 0x9b0]
jmp 0x528778
push str.DRAW_DIALOGBOX_SUMMONEVENT44
lea ecx, [ebp - 0x9e0]
call fcn.0040f9f0
push str.DRAW_DIALOGBOX_SUMMONEVENT12
lea ecx, [ebp - 0x9c8]
mov dword [ebp - 4], 0x24
call fcn.0040f9f0
lea eax, [ebp - 0x9e0]
mov byte [ebp - 4], 0x25
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x9c8]
mov ecx, 0x5fd3c4
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x128]
push eax
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
call eax
add esp, 0xc
lea ecx, [ebp - 0x9c8]
call fcn.00411640
lea ecx, [ebp - 0x9e0]
jmp 0x528778
push str.DRAW_DIALOGBOX_SUMMONEVENT45
lea ecx, [ebp - 0xa10]
call fcn.0040f9f0
push str.DRAW_DIALOGBOX_SUMMONEVENT12
lea ecx, [ebp - 0x9f8]
mov dword [ebp - 4], 0x26
call fcn.0040f9f0
lea eax, [ebp - 0xa10]
mov byte [ebp - 4], 0x27
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x9f8]
mov ecx, 0x5fd3c4
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x128]
push eax
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
call eax
add esp, 0xc
lea ecx, [ebp - 0x9f8]
call fcn.00411640
lea ecx, [ebp - 0xa10]
jmp 0x528778
push str.DRAW_DIALOGBOX_SUMMONEVENT46
lea ecx, [ebp - 0xa40]
call fcn.0040f9f0
push str.DRAW_DIALOGBOX_SUMMONEVENT12
lea ecx, [ebp - 0xa28]
mov dword [ebp - 4], 0x28
call fcn.0040f9f0
lea eax, [ebp - 0xa40]
mov byte [ebp - 4], 0x29
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0xa28]
mov ecx, 0x5fd3c4
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x128]
push eax
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
call eax
add esp, 0xc
lea ecx, [ebp - 0xa28]
call fcn.00411640
lea ecx, [ebp - 0xa40]
jmp 0x528778
push str.DRAW_DIALOGBOX_SUMMONEVENT47
lea ecx, [ebp - 0xa70]
call fcn.0040f9f0
push str.DRAW_DIALOGBOX_SUMMONEVENT12
lea ecx, [ebp - 0xa58]
mov dword [ebp - 4], 0x2a
call fcn.0040f9f0
lea eax, [ebp - 0xa70]
mov byte [ebp - 4], 0x2b
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0xa58]
mov ecx, 0x5fd3c4
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x128]
push eax
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
call eax
add esp, 0xc
lea ecx, [ebp - 0xa58]
call fcn.00411640
lea ecx, [ebp - 0xa70]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
cmp byte [ebp - 0x10b9], 0
je 0x5287d7
movsx ecx, word [ebp + 8]
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x5287d7
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x5287d7
mov ecx, dword [ebp - 0x10c0]
mov ax, word [ebp + 0xc]
movsx edx, cx
add edx, 0x41
cwde
cmp eax, edx
jl 0x5287d7
mov edi, dword [ebp - 0x10ec]
movsx eax, cx
movsx ecx, word [ebp + 0xc]
add eax, 0x4f
cmp ecx, eax
jg 0x5287d7
mov eax, 0xffffff
jmp 0x5287e8
mov eax, dword [ebp - 0x10c0]
movsx edx, ax
mov eax, 0x320004
add edx, 0x41
push 0
push eax
lea eax, [ebp - 0x128]
mov ecx, edi
push eax
movsx eax, si
push edx
add eax, 0x19
push eax
call fcn.0045d450
mov ecx, dword [ebp - 0x10d0]
call fcn.0040ae20
cmp ax, 9
jne 0x528915
push 0x100
lea eax, [ebp - 0x128]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0xa88]
push str.DRAW_DIALOGBOX_SUMMONEVENT13
call fcn.0040f9f0
mov eax, dword [ebp - 0x10d0]
mov ecx, 0x5fd3c4
mov dword [ebp - 4], 0x2c
push dword [eax + 0x60]
push dword [eax + 0x5c]
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0xa88]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x128]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa88]
call fcn.00411640
cmp byte [ebp - 0x10b9], 0
je 0x5288ec
movsx ecx, word [ebp + 8]
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x5288ec
movsx eax, si
add eax, 0xf0
cmp ecx, eax
mov ecx, dword [ebp - 0x10c0]
jge 0x5288f2
movsx eax, cx
lea edx, [eax + 0x50]
mov dword [ebp - 0x10c4], edx
movsx edx, word [ebp + 0xc]
cmp edx, dword [ebp - 0x10c4]
jl 0x5288f2
add eax, 0x5e
cmp edx, eax
jg 0x5288f2
push 0
push 0xffffff
lea eax, [ebp - 0x128]
push eax
push dword [ebp - 0x10c4]
jmp 0x528907
mov ecx, dword [ebp - 0x10c0]
push 0
push 0x320004
lea eax, [ebp - 0x128]
push eax
movsx eax, cx
add eax, 0x50
push eax
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
push 0x100
lea eax, [ebp - 0x128]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0xaa0]
push str.DRAW_DIALOGBOX_SUMMONEVENT14
call fcn.0040f9f0
lea eax, [ebp - 0xaa0]
mov dword [ebp - 4], 0x2d
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov edx, eax
cmp dword [edx + 0x14], 0xf
jbe 0x52895d
mov edx, dword [edx]
mov eax, dword [ebp - 0x10d0]
movzx ecx, word [eax + 0x74]
push ecx
mov ecx, eax
movzx eax, word [ecx + 0x72]
push eax
movzx eax, word [ecx + 0x70]
push eax
movzx eax, word [ecx + 0x6e]
push eax
movzx eax, word [ecx + 0x6a]
push eax
movzx eax, word [ecx + 0x68]
push eax
push edx
lea eax, [ebp - 0x128]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x20
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xaa0]
call fcn.00411640
cmp byte [ebp - 0x10b9], 0
je 0x5289fd
movsx ecx, word [ebp + 8]
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x5289fd
movsx eax, si
add eax, 0xf0
cmp ecx, eax
mov ecx, dword [ebp - 0x10c0]
jge 0x528a03
movsx edx, word [ebp + 0xc]
movsx eax, cx
mov dword [ebp - 0x10d4], eax
add eax, 0x5f
mov dword [ebp - 0x10c4], eax
cmp edx, eax
jl 0x528a03
mov eax, dword [ebp - 0x10d4]
add eax, 0x6d
cmp edx, eax
jg 0x528a03
mov ecx, 0xffffff
jmp 0x528a14
mov ecx, dword [ebp - 0x10c0]
movsx eax, cx
mov ecx, 0x320004
add eax, 0x5f
mov dword [ebp - 0x10c4], eax
push 0
push ecx
lea eax, [ebp - 0x128]
mov edx, edi
push eax
push dword [ebp - 0x10c4]
movsx eax, si
mov ecx, edx
add eax, 0x19
push eax
call fcn.0045d450
push 0x100
lea eax, [ebp - 0x128]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
cmp byte [ebp - 0x10b9], 0
je 0x528bf5
movsx ecx, word [ebp + 8]
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x528bf5
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x528bf5
mov ecx, dword [ebp - 0x10c0]
movsx edx, word [ebp + 0xc]
mov edi, dword [ebp - 0x10ec]
movsx eax, cx
add eax, 0x6e
mov dword [ebp - 0x10c4], eax
cmp edx, eax
jl 0x528bf5
movsx eax, cx
add eax, 0x7c
cmp edx, eax
jg 0x528bf5
push str.DRAW_DIALOGBOX_SUMMONEVENT15
lea ecx, [ebp - 0xab8]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0xab8]
mov dword [ebp - 4], 0x2e
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x10c4]
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0xab8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
movsx eax, si
add eax, 0xb4
mov dword [ebp - 0x10d4], eax
mov eax, dword [ebp - 0x10d0]
cmp byte [eax + 0xa4], 0
je 0x528b77
push str.DRAW_DIALOGBOX_SUMMONEVENT29
lea ecx, [ebp - 0xad0]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0xad0]
mov dword [ebp - 4], 0x2f
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x10c4]
mov ecx, edi
push dword [ebp - 0x10d4]
call fcn.0045d450
lea ecx, [ebp - 0xad0]
jmp 0x528bc7
push str.DRAW_DIALOGBOX_SUMMONEVENT30
lea ecx, [ebp - 0xae8]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0xae8]
mov dword [ebp - 4], 0x30
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x10c4]
mov ecx, edi
push dword [ebp - 0x10d4]
call fcn.0045d450
lea ecx, [ebp - 0xae8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, dword [ebp - 0x10e4]
movsx edx, ax
movzx eax, word [ebp + 8]
add edx, 0x1e
cwde
mov dword [ebp - 0x10d4], edx
mov dword [ebp - 0x10c4], eax
jmp 0x528d5b
push str.DRAW_DIALOGBOX_SUMMONEVENT15
lea ecx, [ebp - 0x608]
call fcn.0040f9f0
mov eax, dword [ebp - 0x10c0]
mov ecx, 0x5fd3c4
cwde
add eax, 0x6e
mov dword [ebp - 4], 0x31
push 0
mov dword [ebp - 0x10c4], eax
lea eax, [ebp - 0x608]
push 0x320004
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x10c4]
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x608]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
movsx eax, si
add eax, 0xb4
mov dword [ebp - 0x10d4], eax
mov eax, dword [ebp - 0x10d0]
cmp byte [eax + 0xa4], 0
je 0x528cd1
push str.DRAW_DIALOGBOX_SUMMONEVENT29
lea ecx, [ebp - 0xb18]
call fcn.0040f9f0
push 0
push 0xff00
lea eax, [ebp - 0xb18]
mov dword [ebp - 4], 0x32
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x10c4]
mov ecx, edi
push dword [ebp - 0x10d4]
call fcn.0045d450
lea ecx, [ebp - 0xb18]
jmp 0x528d21
push str.DRAW_DIALOGBOX_SUMMONEVENT30
lea ecx, [ebp - 0xb30]
call fcn.0040f9f0
push 0
push 0xff
lea eax, [ebp - 0xb30]
mov dword [ebp - 4], 0x33
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x10c4]
mov ecx, edi
push dword [ebp - 0x10d4]
call fcn.0045d450
lea ecx, [ebp - 0xb30]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
movsx ecx, word [ebp + 8]
movsx eax, si
add eax, 0x1e
mov dword [ebp - 0x10c4], ecx
mov dword [ebp - 0x10d4], eax
cmp ecx, eax
jle 0x528e0a
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x528e0a
mov eax, dword [ebp - 0x10c0]
movsx ecx, word [ebp + 0xc]
cwde
lea edx, [eax + 0x8c]
mov dword [ebp - 0x10e4], edx
cmp ecx, edx
jl 0x528e0a
add eax, 0x9a
cmp ecx, eax
jg 0x528e0a
push str.DRAW_DIALOGBOX_SUMMONEVENT33
lea ecx, [ebp - 0xb48]
call fcn.0040f9f0
mov ecx, dword [ebp - 0x10d8]
push 0
movsx ecx, cx
push 0xff
movsx eax, si
add eax, ecx
mov dword [ebp - 4], 0x34
push 0xff
mov dword [ebp - 0x10c8], eax
mov ecx, 0x5fd3c4
push 0xff
lea eax, [ebp - 0xb48]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x10e4]
movsx eax, si
mov ecx, edi
push dword [ebp - 0x10c8]
push eax
call fcn.0045d060
lea ecx, [ebp - 0xb48]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
jmp 0x528ea8
push str.DRAW_DIALOGBOX_SUMMONEVENT33
lea ecx, [ebp - 0xb60]
call fcn.0040f9f0
mov ecx, dword [ebp - 0x10d8]
push 0
movsx ecx, cx
push 0x32
movsx eax, si
add eax, ecx
mov dword [ebp - 4], 0x35
push 0
mov dword [ebp - 0x10c8], eax
mov ecx, 0x5fd3c4
push 4
lea eax, [ebp - 0xb60]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x10c0]
mov ecx, edi
cwde
add eax, 0x8c
push eax
push dword [ebp - 0x10c8]
movsx eax, si
push eax
call fcn.0045d060
lea ecx, [ebp - 0xb60]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov ecx, dword [ebp - 0x10c4]
cmp ecx, dword [ebp - 0x10d4]
jle 0x528f32
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x528f32
mov eax, dword [ebp - 0x10c0]
movsx ecx, word [ebp + 0xc]
mov edi, dword [ebp - 0x10ec]
cwde
lea edx, [eax + 0x9b]
mov dword [ebp - 0x10e4], edx
cmp ecx, edx
jl 0x528f32
add eax, 0xa9
cmp ecx, eax
jg 0x528f32
push str.DRAW_DIALOGBOX_SUMMONEVENT34
lea ecx, [ebp - 0xb78]
call fcn.0040f9f0
push 0
push 0xff
push 0xff
push 0xff
lea eax, [ebp - 0xb78]
mov dword [ebp - 4], 0x36
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x10e4]
movsx eax, si
mov ecx, edi
push dword [ebp - 0x10c8]
push eax
call fcn.0045d060
lea ecx, [ebp - 0xb78]
jmp 0x528f8e
push str.DRAW_DIALOGBOX_SUMMONEVENT34
lea ecx, [ebp - 0xb90]
call fcn.0040f9f0
push 0
push 0x32
push 0
push 4
lea eax, [ebp - 0xb90]
mov dword [ebp - 4], 0x37
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x10c0]
mov ecx, edi
cwde
add eax, 0x9b
push eax
push dword [ebp - 0x10c8]
movsx eax, si
push eax
call fcn.0045d060
lea ecx, [ebp - 0xb90]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0x100
lea eax, [ebp - 0x128]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov ecx, dword [ebp - 0x10d0]
add esp, 0xc
call fcn.0040ae00
sub eax, 1
je 0x529102
sub eax, 1
je 0x52906c
sub eax, 2
jne 0x5291b5
push str.DRAW_DIALOGBOX_SUMMONEVENT19
lea ecx, [ebp - 0xbc0]
call fcn.0040f9f0
push str.DRAW_DIALOGBOX_SUMMONEVENT16
lea ecx, [ebp - 0xba8]
mov dword [ebp - 4], 0x3c
call fcn.0040f9f0
lea eax, [ebp - 0xbc0]
mov byte [ebp - 4], 0x3d
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0xba8]
mov ecx, 0x5fd3c4
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x128]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [ebp - 0xba8]
call fcn.00411640
lea ecx, [ebp - 0xbc0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0xff
jmp 0x529193
push str.DRAW_DIALOGBOX_SUMMONEVENT18
lea ecx, [ebp - 0xbf0]
call fcn.0040f9f0
push str.DRAW_DIALOGBOX_SUMMONEVENT16
lea ecx, [ebp - 0xbd8]
mov dword [ebp - 4], 0x3a
call fcn.0040f9f0
lea eax, [ebp - 0xbf0]
mov byte [ebp - 4], 0x3b
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0xbd8]
mov ecx, 0x5fd3c4
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x128]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [ebp - 0xbd8]
call fcn.00411640
lea ecx, [ebp - 0xbf0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0xff00
jmp 0x529193
push str.DRAW_DIALOGBOX_SUMMONEVENT17
lea ecx, [ebp - 0xc20]
call fcn.0040f9f0
push str.DRAW_DIALOGBOX_SUMMONEVENT16
lea ecx, [ebp - 0xc08]
mov dword [ebp - 4], 0x38
call fcn.0040f9f0
lea eax, [ebp - 0xc20]
mov byte [ebp - 4], 0x39
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0xc08]
mov ecx, 0x5fd3c4
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x128]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [ebp - 0xc08]
call fcn.00411640
lea ecx, [ebp - 0xc20]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0xffff
lea eax, [ebp - 0x128]
mov ecx, edi
push eax
mov eax, dword [ebp - 0x10c0]
cwde
add eax, 0xb9
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d450
push 0x100
lea eax, [ebp - 0x128]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [ebp - 0x168]
push 0
push eax
mov eax, dword [ebp - 0x10d0]
push dword [eax + 0x9c]
call fcn.00582790
add esp, 4
movzx eax, ax
mov ecx, edi
push eax
call fcn.00449b90
push str.DRAW_DIALOGBOX_SUMMONEVENT20
lea ecx, [ebp - 0xc38]
call fcn.0040f9f0
lea eax, [ebp - 0xc38]
mov dword [ebp - 4], 0x3e
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
cmp dword [eax + 0x14], 0xf
jbe 0x529223
mov eax, dword [eax]
lea ecx, [ebp - 0x168]
push ecx
push eax
lea eax, [ebp - 0x128]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc38]
call fcn.00411640
push 0
push 0
lea eax, [ebp - 0x128]
mov ecx, edi
push eax
mov eax, dword [ebp - 0x10c0]
cwde
add eax, 0xc8
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d450
mov ecx, dword [ebp - 0x10d0]
call fcn.0040ae00
cmp eax, 4
je 0x5294a3
push 0x100
lea eax, [ebp - 0x128]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov ecx, dword [ebp - 0x10d0]
add esp, 0xc
mov eax, dword [ecx + 0xa0]
sub eax, 0
je 0x5293f0
sub eax, 1
je 0x52935a
sub eax, 1
jne 0x5294a9
push str.DRAW_DIALOGBOX_SUMMONEVENT24
lea ecx, [ebp - 0xc68]
call fcn.0040f9f0
push str.DRAW_DIALOGBOX_SUMMONEVENT21
lea ecx, [ebp - 0xc50]
mov dword [ebp - 4], 0x43
call fcn.0040f9f0
lea eax, [ebp - 0xc68]
mov byte [ebp - 4], 0x44
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0xc50]
mov ecx, 0x5fd3c4
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x128]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [ebp - 0xc50]
call fcn.00411640
lea ecx, [ebp - 0xc68]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0xff00
jmp 0x529481
push str.DRAW_DIALOGBOX_SUMMONEVENT23
lea ecx, [ebp - 0xc98]
call fcn.0040f9f0
push str.DRAW_DIALOGBOX_SUMMONEVENT21
lea ecx, [ebp - 0xc80]
mov dword [ebp - 4], 0x41
call fcn.0040f9f0
lea eax, [ebp - 0xc98]
mov byte [ebp - 4], 0x42
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0xc80]
mov ecx, 0x5fd3c4
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x128]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [ebp - 0xc80]
call fcn.00411640
lea ecx, [ebp - 0xc98]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0xffff
jmp 0x529481
push str.DRAW_DIALOGBOX_SUMMONEVENT22
lea ecx, [ebp - 0xcc8]
call fcn.0040f9f0
push str.DRAW_DIALOGBOX_SUMMONEVENT21
lea ecx, [ebp - 0xcb0]
mov dword [ebp - 4], 0x3f
call fcn.0040f9f0
lea eax, [ebp - 0xcc8]
mov byte [ebp - 4], 0x40
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0xcb0]
mov ecx, 0x5fd3c4
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x128]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [ebp - 0xcb0]
call fcn.00411640
lea ecx, [ebp - 0xcc8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0
push 0xff
lea eax, [ebp - 0x128]
mov ecx, edi
push eax
mov eax, dword [ebp - 0x10c0]
cwde
add eax, 0xd7
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d450
mov ecx, dword [ebp - 0x10d0]
cmp byte [ebp - 0x10b9], 0
je case.default.0x526fba
movsx eax, si
mov dword [ebp - 0x10c4], eax
call fcn.0040ae00
cmp eax, 1
je 0x52960a
mov ecx, dword [ebp - 0x10c4]
mov dx, word [ebp + 8]
add ecx, 0x1e
movsx eax, dx
cmp eax, ecx
jle 0x529598
movsx ecx, si
add ecx, 0xf0
movsx eax, dx
cmp eax, ecx
jge 0x529598
mov eax, dword [ebp - 0x10c0]
movsx ecx, word [ebp + 0xc]
cwde
lea edx, [eax + 0xf5]
mov dword [ebp - 0x10e4], edx
cmp ecx, edx
jl 0x529598
add eax, 0x103
cmp ecx, eax
jg 0x529598
push str.DRAW_DIALOGBOX_SUMMONEVENT60
lea ecx, [ebp - 0xce0]
call fcn.0040f9f0
mov eax, dword [ebp - 0x10d8]
movsx ecx, ax
push 0
push 0xff
movsx eax, si
add eax, ecx
mov dword [ebp - 4], 0x45
push 0xff
mov dword [ebp - 0x10ec], eax
mov ecx, 0x5fd3c4
push 0xff
lea eax, [ebp - 0xce0]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x10e4]
movsx eax, si
mov ecx, edi
push dword [ebp - 0x10ec]
push eax
call fcn.0045d060
lea ecx, [ebp - 0xce0]
jmp 0x529679
push str.DRAW_DIALOGBOX_SUMMONEVENT60
lea ecx, [ebp - 0xcf8]
call fcn.0040f9f0
mov eax, dword [ebp - 0x10d8]
movsx ecx, ax
push 0
push 0x32
movsx eax, si
add eax, ecx
mov dword [ebp - 4], 0x46
push 0
mov dword [ebp - 0x10ec], eax
mov ecx, 0x5fd3c4
push 4
lea eax, [ebp - 0xcf8]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x10c0]
mov ecx, edi
cwde
add eax, 0xf5
push eax
push dword [ebp - 0x10ec]
movsx eax, si
push eax
call fcn.0045d060
lea ecx, [ebp - 0xcf8]
jmp 0x529679
push str.DRAW_DIALOGBOX_SUMMONEVENT60
lea ecx, [ebp - 0xd10]
call fcn.0040f9f0
mov eax, dword [ebp - 0x10d8]
mov ecx, 0x5fd3c4
push 0
cwde
add eax, dword [ebp - 0x10c4]
push 0x41
push 0x41
mov dword [ebp - 0x10ec], eax
lea eax, [ebp - 0xd10]
push 0x41
push eax
mov dword [ebp - 4], 0x47
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x10c0]
mov ecx, edi
cwde
add eax, 0xf5
push eax
push dword [ebp - 0x10ec]
movsx eax, si
push eax
call fcn.0045d060
lea ecx, [ebp - 0xd10]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov ecx, dword [ebp - 0x10d0]
movsx eax, si
mov dword [ebp - 0x10e4], eax
call fcn.0040ae00
cmp eax, 2
jne 0x5297bc
mov ecx, dword [ebp - 0x10e4]
mov dx, word [ebp + 8]
add ecx, 0x1e
movsx eax, dx
cmp eax, ecx
jle 0x52975e
movsx ecx, si
add ecx, 0xf0
movsx eax, dx
cmp eax, ecx
jge 0x52975e
mov eax, dword [ebp - 0x10c0]
movsx ecx, word [ebp + 0xc]
cwde
lea edx, [eax + 0x104]
mov dword [ebp - 0x10e4], edx
cmp ecx, edx
jl 0x52975e
add eax, 0x112
cmp ecx, eax
jg 0x52975e
push str.DRAW_DIALOGBOX_SUMMONEVENT65
lea ecx, [ebp - 0xd28]
call fcn.0040f9f0
push 0
push 0xff
push 0xff
push 0xff
lea eax, [ebp - 0xd28]
mov dword [ebp - 4], 0x48
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x10d8]
push dword [ebp - 0x10e4]
movsx ecx, ax
movsx eax, si
add ecx, eax
movsx eax, si
push ecx
push eax
mov ecx, edi
call fcn.0045d060
lea ecx, [ebp - 0xd28]
jmp 0x529818
push str.DRAW_DIALOGBOX_SUMMONEVENT65
lea ecx, [ebp - 0xd40]
call fcn.0040f9f0
push 0
push 0x32
push 0
push 4
lea eax, [ebp - 0xd40]
mov dword [ebp - 4], 0x49
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x10c0]
mov ecx, edi
cwde
add eax, 0x104
push eax
push dword [ebp - 0x10ec]
movsx eax, si
push eax
call fcn.0045d060
lea ecx, [ebp - 0xd40]
jmp 0x529818
push str.DRAW_DIALOGBOX_SUMMONEVENT65
lea ecx, [ebp - 0xd58]
call fcn.0040f9f0
push 0
push 0x41
push 0x41
push 0x41
lea eax, [ebp - 0xd58]
mov dword [ebp - 4], 0x4a
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x10c0]
mov ecx, edi
cwde
add eax, 0x104
push eax
push dword [ebp - 0x10ec]
movsx eax, si
push eax
call fcn.0045d060
lea ecx, [ebp - 0xd58]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
cmp dword [ebp - 0x10cc], 5
movsx eax, si
mov dword [ebp - 0x10e4], eax
jl 0x529964
mov dx, word [ebp + 8]
lea ecx, [eax + 0x1e]
movsx eax, dx
cmp eax, ecx
jle 0x5298f5
movsx ecx, si
add ecx, 0xf0
movsx eax, dx
cmp eax, ecx
jge 0x5298f5
mov eax, dword [ebp - 0x10c0]
movsx ecx, word [ebp + 0xc]
cwde
lea edx, [eax + 0x113]
mov dword [ebp - 0x10cc], edx
cmp ecx, edx
jl 0x5298f5
add eax, 0x121
cmp ecx, eax
jg 0x5298f5
push str.DRAW_DIALOGBOX_SUMMONEVENT61
lea ecx, [ebp - 0xd70]
call fcn.0040f9f0
push 0
push 0xff
push 0xff
push 0xff
lea eax, [ebp - 0xd70]
mov dword [ebp - 4], 0x4b
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x10d8]
push dword [ebp - 0x10cc]
movsx ecx, ax
movsx eax, si
add ecx, eax
movsx eax, si
push ecx
push eax
mov ecx, edi
call fcn.0045d060
lea ecx, [ebp - 0xd70]
call fcn.00411640
jmp case.default.0x526fba
push str.DRAW_DIALOGBOX_SUMMONEVENT61
lea ecx, [ebp - 0xd88]
call fcn.0040f9f0
push 0
push 0x32
push 0
push 4
lea eax, [ebp - 0xd88]
mov dword [ebp - 4], 0x4c
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x10c0]
cwde
add eax, 0x113
push eax
mov eax, dword [ebp - 0x10d8]
movsx ecx, ax
movsx eax, si
add ecx, eax
movsx eax, si
push ecx
push eax
mov ecx, edi
call fcn.0045d060
lea ecx, [ebp - 0xd88]
call fcn.00411640
jmp case.default.0x526fba
push str.DRAW_DIALOGBOX_SUMMONEVENT61
lea ecx, [ebp - 0xda0]
call fcn.0040f9f0
push 0
push 0x32
push 0
push 4
lea eax, [ebp - 0xda0]
mov dword [ebp - 4], 0x4d
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x10c0]
mov ecx, edi
cwde
add eax, 0x113
push eax
mov eax, dword [ebp - 0x10d8]
cwde
add eax, dword [ebp - 0x10e4]
push eax
movsx eax, si
push eax
call fcn.0045d060
lea ecx, [ebp - 0xda0]
call fcn.00411640
jmp case.default.0x526fba
push str.DRAW_DIALOGBOX_SUMMONEVENT25
lea ecx, [ebp - 0xdb8]
call fcn.0040f9f0
lea eax, [ebp - 0xdb8]
mov dword [ebp - 4], 0x4e
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov edx, eax
cmp dword [edx + 0x14], 0xf
jbe 0x529a04
mov edx, dword [edx]
mov eax, dword [ebp - 0x10c0]
mov ecx, edi
push 0
push 0xc8
push 0xc8
movsx eax, ax
add eax, 0x2d
push 0xdc
push edx
push eax
mov dword [ebp - 0x10cc], eax
movsx eax, si
add eax, 0xf0
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d060
lea ecx, [ebp - 0xdb8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_SUMMONEVENT25
lea ecx, [ebp - 0xdd0]
call fcn.0040f9f0
lea eax, [ebp - 0xdd0]
mov dword [ebp - 4], 0x4f
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
cmp dword [eax + 0x14], 0xf
jbe 0x529a82
mov eax, dword [eax]
push 0
push 0xc8
push 0xc8
push 0xdc
push eax
push dword [ebp - 0x10cc]
movsx eax, si
mov ecx, edi
add eax, 0xf1
push eax
movsx eax, si
add eax, 0x1a
push eax
call fcn.0045d060
lea ecx, [ebp - 0xdd0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
xor esi, esi
xor edi, edi
push edi
call fcn.00582790
add esp, 4
cmp ax, 0xffff
je 0x529ad7
inc esi
inc edi
cmp edi, 0x64
jl 0x529ac7
cmp esi, 1
jne 0x529b29
push str.DRAW_DIALOGBOX_SUMMONEVENT26
lea ecx, [ebp - 0xde8]
call fcn.0040f9f0
lea eax, [ebp - 0xde8]
mov dword [ebp - 4], 0x50
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
cmp dword [eax + 0x14], 0xf
jbe 0x529b12
mov eax, dword [eax]
push esi
push eax
lea eax, [ebp - 0x128]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
lea ecx, [ebp - 0xde8]
jmp 0x529b6e
push str.DRAW_DIALOGBOX_SUMMONEVENT27
lea ecx, [ebp - 0xe00]
call fcn.0040f9f0
lea eax, [ebp - 0xe00]
mov dword [ebp - 4], 0x51
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
cmp dword [eax + 0x14], 0xf
jbe 0x529b59
mov eax, dword [eax]
push esi
push eax
lea eax, [ebp - 0x128]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
lea ecx, [ebp - 0xe00]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, dword [ebp - 0x10d8]
mov esi, dword [ebp - 0x10dc]
mov edi, dword [ebp - 0x10ec]
push 0
movsx ecx, ax
push 0
push 0
movsx eax, si
add ecx, eax
lea eax, [ebp - 0x128]
push 0
push eax
mov eax, dword [ebp - 0x10c0]
cwde
add eax, 0x3c
mov dword [ebp - 0x10cc], ecx
push eax
push ecx
movsx eax, si
mov ecx, edi
push eax
call fcn.0045d060
cmp byte [ebp - 0x10b9], 0
je 0x529c33
push str.DRAW_DIALOGBOX_SUMMONEVENT28
lea ecx, [ebp - 0xe18]
call fcn.0040f9f0
lea eax, [ebp - 0xe18]
mov dword [ebp - 4], 0x52
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
cmp dword [eax + 0x14], 0xf
jbe 0x529bfc
mov eax, dword [eax]
push 0
push 0
push 0
push 0
push eax
mov eax, dword [ebp - 0x10c0]
mov ecx, edi
cwde
add eax, 0x4b
push eax
push dword [ebp - 0x10cc]
movsx eax, si
push eax
call fcn.0045d060
lea ecx, [ebp - 0xe18]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
xor eax, eax
xor edx, edx
mov dword [ebp - 0x10e0], eax
movsx eax, si
add eax, 0x19
mov dword [ebp - 0x10d4], edx
mov dword [ebp - 0x10c8], eax
movsx eax, si
mov dword [ebp - 0x10c4], eax
mov eax, dword [ebp - 0x10c0]
movsx esi, ax
add esi, 0x6e
push edx
call fcn.00582790
mov ecx, dword [ebp - 0x10e0]
add esp, 4
movzx eax, ax
mov dword [ebp - 0x10cc], eax
cmp ax, 0xffff
je 0x52a167
movsx edx, word [edi + 0x144bce]
inc ecx
mov dword [ebp - 0x10e0], ecx
cmp ecx, edx
jle 0x52a167
mov eax, dword [edi + 0x144b7c]
add eax, edx
cmp ecx, eax
jg 0x52a167
push 0x40
lea eax, [ebp - 0x168]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
push 0x100
lea eax, [ebp - 0x128]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x10cc]
add esp, 0x18
cmp ax, 0x61
jne 0x529d95
push 0x1e
xorps xmm0, xmm0
mov dword [ebp - 0x248], 0
push str.NPC_NAME_TWIN_MAGE_AND_WARRIOR
lea ecx, [ebp - 0x258]
mov dword [ebp - 0x244], 0
movups xmmword [ebp - 0x258], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x258]
mov dword [ebp - 4], 0x53
push eax
lea eax, [ebp - 0x1144]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x529d3e
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x168]
push 0x40
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
mov eax, dword [ebp - 0x244]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
cmp eax, 0xf
jbe 0x529d78
push eax
push dword [ebp - 0x258]
lea eax, [ebp - 0x258]
push eax
call fcn.0047d060
add esp, 0xc
mov dword [ebp - 0x248], 0
mov dword [ebp - 0x244], 0xf
mov byte [ebp - 0x258], 0
jmp 0x529da6
push 0
lea ecx, [ebp - 0x168]
push ecx
push eax
mov ecx, edi
call fcn.00449b90
push 0x1c
xorps xmm0, xmm0
mov dword [ebp - 0x328], 0
push str.DRAW_DIALOGBOX_SUMMONEVENT31
lea ecx, [ebp - 0x338]
mov dword [ebp - 0x324], 0
movups xmmword [ebp - 0x338], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x338]
mov dword [ebp - 4], 0x54
push eax
lea eax, [ebp - 0x114c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x529e02
mov eax, dword [eax]
lea ecx, [ebp - 0x168]
push ecx
push eax
lea eax, [ebp - 0x128]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x338]
call fcn.00411640
cmp byte [ebp - 0x10b9], 0
je 0x529fe3
mov edx, dword [ebp - 0x10c4]
movsx ecx, word [ebp + 8]
lea eax, [edx + 0x1e]
cmp ecx, eax
jle 0x529fe3
lea eax, [edx + 0xd2]
cmp ecx, eax
jge 0x529fe3
movsx ecx, word [ebp + 0xc]
cmp ecx, esi
jl 0x529fe3
lea eax, [esi + 0xe]
cmp ecx, eax
jg 0x529fe3
push 0
push 0xffffff
lea eax, [ebp - 0x128]
mov ecx, edi
push eax
push esi
push dword [ebp - 0x10c8]
call fcn.0045d450
mov eax, dword [ebp - 0x10d4]
xorps xmm0, xmm0
mov ecx, dword [ebp - 0x10d0]
push 0x1c
cmp byte [ecx + eax + 0xa5], 0
je 0x529f28
push str.DRAW_DIALOGBOX_SUMMONEVENT29
lea ecx, [ebp - 0x350]
mov dword [ebp - 0x340], 0
movups xmmword [ebp - 0x350], xmm0
mov dword [ebp - 0x33c], 0
call fcn.0040b5c0
lea eax, [ebp - 0x350]
mov dword [ebp - 4], 0x55
push eax
lea eax, [ebp - 0x11d4]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x529f01
mov eax, dword [eax]
push 0
push 0xffffff
push eax
mov eax, dword [ebp - 0x10c4]
mov ecx, edi
push esi
add eax, 0xb4
push eax
call fcn.0045d450
lea ecx, [ebp - 0x350]
jmp 0x52a152
push str.DRAW_DIALOGBOX_SUMMONEVENT30
lea ecx, [ebp - 0x198]
mov dword [ebp - 0x188], 0
movups xmmword [ebp - 0x198], xmm0
mov dword [ebp - 0x184], 0
call fcn.0040b5c0
lea eax, [ebp - 0x198]
mov dword [ebp - 4], 0x56
push eax
lea eax, [ebp - 0x1154]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x529f7f
mov eax, dword [eax]
push 0
push 0xffffff
push eax
mov eax, dword [ebp - 0x10c4]
mov ecx, edi
push esi
add eax, 0xb4
push eax
call fcn.0045d450
mov eax, dword [ebp - 0x184]
mov dword [ebp - 4], 0xffffffff
cmp eax, 0xf
jbe 0x529fc3
push eax
push dword [ebp - 0x198]
lea eax, [ebp - 0x198]
push eax
call fcn.0047d060
add esp, 0xc
mov dword [ebp - 0x188], 0
mov dword [ebp - 0x184], 0xf
mov byte [ebp - 0x198], 0
jmp 0x52a15e
push 0
push 0x320004
lea eax, [ebp - 0x128]
mov ecx, edi
push eax
push esi
push dword [ebp - 0x10c8]
call fcn.0045d450
mov eax, dword [ebp - 0x10d4]
xorps xmm0, xmm0
mov ecx, dword [ebp - 0x10d0]
push 0x1c
cmp byte [ecx + eax + 0xa5], 0
je 0x52a0d9
push str.DRAW_DIALOGBOX_SUMMONEVENT29
lea ecx, [ebp - 0x180]
mov dword [ebp - 0x170], 0
movups xmmword [ebp - 0x180], xmm0
mov dword [ebp - 0x16c], 0
call fcn.0040b5c0
lea eax, [ebp - 0x180]
mov dword [ebp - 4], 0x57
push eax
lea eax, [ebp - 0x115c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x52a075
mov eax, dword [eax]
push 0
push 0xff00
push eax
mov eax, dword [ebp - 0x10c4]
mov ecx, edi
push esi
add eax, 0xb4
push eax
call fcn.0045d450
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 4], 0xffffffff
cmp eax, 0xf
jbe 0x52a0b9
push eax
push dword [ebp - 0x180]
lea eax, [ebp - 0x180]
push eax
call fcn.0047d060
add esp, 0xc
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x16c], 0xf
mov byte [ebp - 0x180], 0
jmp 0x52a15e
push str.DRAW_DIALOGBOX_SUMMONEVENT30
lea ecx, [ebp - 0x368]
mov dword [ebp - 0x358], 0
movups xmmword [ebp - 0x368], xmm0
mov dword [ebp - 0x354], 0
call fcn.0040b5c0
lea eax, [ebp - 0x368]
mov dword [ebp - 4], 0x58
push eax
lea eax, [ebp - 0x1164]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x52a130
mov eax, dword [eax]
push 0
push 0xff
push eax
mov eax, dword [ebp - 0x10c4]
mov ecx, edi
push esi
add eax, 0xb4
push eax
call fcn.0045d450
lea ecx, [ebp - 0x368]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov ecx, dword [ebp - 0x10e0]
add esi, 0xf
mov edx, dword [ebp - 0x10d4]
inc edx
mov dword [ebp - 0x10d4], edx
cmp edx, 0x64
jl 0x529c64
mov edx, dword [edi + 0x144b7c]
mov esi, dword [ebp - 0x10dc]
cmp ecx, edx
jle 0x52a202
movsx eax, word [edi + 0x144bce]
push 0
push 0
push 3
movd xmm1, eax
mov eax, ecx
sub eax, edx
mov ecx, edi
cvtdq2pd xmm1, xmm1
movd xmm0, eax
mulsd xmm1, qword [0x5cd590]
mov eax, dword [ebp - 0x10c0]
cvtdq2pd xmm0, xmm0
cwde
push eax
mov eax, dword [ebp - 0x10dc]
cwde
push eax
push 0x3d
divsd xmm1, xmm0
cvttsd2si esi, xmm1
call fcn.0043d1d0
mov eax, dword [ebp - 0x10c0]
mov ecx, edi
push 0
cwde
push 0
add eax, 0x23
add eax, esi
mov esi, dword [ebp - 0x10dc]
push 7
push eax
movsx eax, si
add eax, 0xf2
push eax
push 0x3d
call fcn.0043d1d0
cmp byte [ebp + 0x14], 0
je 0x52a2e4
mov ecx, edi
call fcn.004973c0
cmp eax, 0x36
jne 0x52a2e4
mov eax, dword [ebp - 0x10e0]
cmp eax, dword [edi + 0x144b7c]
jle 0x52a2e4
movsx ecx, word [ebp + 8]
movsx eax, si
add eax, 0xe6
cmp ecx, eax
jl 0x52a2eb
movsx eax, si
add eax, 0x104
cmp ecx, eax
jg 0x52a2eb
mov ecx, dword [ebp - 0x10c0]
mov si, word [ebp + 0xc]
movsx eax, cx
movsx edx, si
add eax, 0x28
cmp edx, eax
jl 0x52a2bc
movsx eax, cx
add eax, 0x140
cmp edx, eax
jg 0x52a2bc
mov esi, dword [ebp - 0x10e0]
movsx eax, cx
sub edx, eax
mov eax, esi
sub edx, 0x23
sub eax, dword [edi + 0x144b7c]
movd xmm0, eax
movd xmm1, edx
cvtdq2pd xmm1, xmm1
cvtdq2pd xmm0, xmm0
mulsd xmm1, xmm0
divsd xmm1, qword [0x5cd590]
addsd xmm1, qword [0x5c5598]
cvttsd2si eax, xmm1
mov word [edi + 0x144bce], ax
jmp 0x52a2f1
movsx eax, cx
movsx edx, si
add eax, 0xa
cmp edx, eax
jle 0x52a2eb
mov esi, dword [ebp - 0x10e0]
movsx eax, cx
add eax, 0x28
cmp edx, eax
jge 0x52a2f1
xor eax, eax
mov word [edi + 0x144bce], ax
jmp 0x52a2f1
mov byte [edi + 0x144cd2], 0
mov esi, dword [ebp - 0x10e0]
mov ecx, edi
call fcn.004973c0
cmp eax, 0x36
jne 0x52a34c
mov cx, word [ebp + 0x10]
test cx, cx
je 0x52a34c
cmp esi, 0x32
jle 0x52a32a
movsx ecx, cx
mov eax, 0x77777777
imul ecx
sub edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
add word [edi + 0x144bce], ax
jmp 0x52a343
movzx eax, word [edi + 0x144bce]
test cx, cx
jle 0x52a339
dec eax
jmp 0x52a33c
jns 0x52a343
inc eax
mov word [edi + 0x144bce], ax
xor eax, eax
mov word [edi + 0x14a904], ax
mov edx, dword [edi + 0x144b7c]
cmp esi, edx
jle 0x52a374
movsx eax, word [edi + 0x144bce]
mov ecx, esi
sub ecx, edx
cmp eax, ecx
jle 0x52a370
mov eax, esi
sub eax, edx
mov word [edi + 0x144bce], ax
cmp esi, edx
jg 0x52a37d
xor eax, eax
mov word [edi + 0x144bce], ax
cmp word [edi + 0x144bce], 0
jge case.default.0x526fba
xor eax, eax
mov word [edi + 0x144bce], ax
jmp case.default.0x526fba
push str.DRAW_DIALOGBOX_SUMMONEVENT32
lea ecx, [ebp - 0xe30]
call fcn.0040f9f0
lea eax, [ebp - 0xe30]
mov dword [ebp - 4], 0x59
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov edx, eax
cmp dword [edx + 0x14], 0xf
jbe 0x52a3cb
mov edx, dword [edx]
mov eax, dword [ebp - 0x10c0]
push 0
push 0xc8
push 0xc8
movsx ecx, ax
push 0xdc
add ecx, 0x2d
movsx eax, si
push edx
add eax, 0xf0
mov dword [ebp - 0x10cc], ecx
push ecx
push eax
mov dword [ebp - 0x10e4], eax
mov ecx, edi
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d060
lea ecx, [ebp - 0xe30]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_SUMMONEVENT32
lea ecx, [ebp - 0xe48]
call fcn.0040f9f0
lea eax, [ebp - 0xe48]
mov dword [ebp - 4], 0x5a
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
cmp dword [eax + 0x14], 0xf
jbe 0x52a44f
mov eax, dword [eax]
push 0
push 0xc8
push 0xc8
push 0xdc
push eax
push dword [ebp - 0x10cc]
movsx eax, si
mov ecx, edi
add eax, 0xf1
push eax
movsx eax, si
add eax, 0x1a
push eax
call fcn.0045d060
lea ecx, [ebp - 0xe48]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
cmp byte [ebp - 0x10b9], 0
je 0x52a582
movsx ecx, word [ebp + 8]
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x52a582
cmp ecx, dword [ebp - 0x10e4]
jge 0x52a582
mov ecx, dword [ebp - 0x10c0]
movsx edx, word [ebp + 0xc]
movsx eax, cx
add eax, 0x41
mov dword [ebp - 0x10e4], edx
mov dword [ebp - 0x10cc], eax
cmp edx, eax
jl 0x52a582
movsx eax, cx
add eax, 0x4f
cmp edx, eax
jg 0x52a582
push str.DRAW_DIALOGBOX_SUMMONEVENT38
lea ecx, [ebp - 0xe60]
call fcn.0040f9f0
mov eax, dword [ebp - 0x10d8]
movsx ecx, ax
push 0
push 0xff
movsx eax, si
add eax, ecx
mov dword [ebp - 4], 0x5b
push 0xff
mov dword [ebp - 0x10ec], eax
mov ecx, 0x5fd3c4
push 0xff
lea eax, [ebp - 0xe60]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x10cc]
movsx eax, si
mov ecx, edi
push dword [ebp - 0x10ec]
push eax
call fcn.0045d060
lea ecx, [ebp - 0xe60]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, dword [ebp - 0x10ec]
mov ecx, dword [ebp - 0x10e4]
mov dword [ebp - 0x10d4], eax
jmp 0x52a657
push str.DRAW_DIALOGBOX_SUMMONEVENT38
lea ecx, [ebp - 0xe78]
call fcn.0040f9f0
mov eax, dword [ebp - 0x10d8]
movsx ecx, ax
push 0
push 0x32
movsx eax, si
add eax, ecx
mov dword [ebp - 4], 0x5c
push 0
mov dword [ebp - 0x10ec], eax
mov ecx, 0x5fd3c4
push 4
lea eax, [ebp - 0xe78]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x10c0]
mov ecx, edi
cwde
add eax, 0x41
push eax
push dword [ebp - 0x10ec]
movsx eax, si
push eax
call fcn.0045d060
lea ecx, [ebp - 0xe78]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
cmp byte [ebp - 0x10b9], 0
movsx eax, word [ebp + 8]
movsx ecx, word [ebp + 0xc]
mov dword [ebp - 0x10c4], eax
mov eax, dword [ebp - 0x10ec]
mov dword [ebp - 0x10d4], eax
je 0x52a6e8
mov edx, eax
mov dword [ebp - 0x10ec], eax
movsx eax, si
add eax, 0x1e
cmp dword [ebp - 0x10c4], eax
jle 0x52a6e8
movsx eax, si
add eax, 0xf0
mov dword [ebp - 0x10ec], edx
cmp dword [ebp - 0x10c4], eax
jge 0x52a6e8
mov eax, dword [ebp - 0x10c0]
cwde
lea edx, [eax + 0x50]
mov dword [ebp - 0x10cc], edx
cmp ecx, edx
jl 0x52a6e8
add eax, 0x5e
cmp ecx, eax
jg 0x52a6e8
push str.DRAW_DIALOGBOX_SUMMONEVENT39
lea ecx, [ebp - 0xe90]
call fcn.0040f9f0
push 0
push 0xff
push 0xff
push 0xff
lea eax, [ebp - 0xe90]
mov dword [ebp - 4], 0x5d
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x10cc]
movsx eax, si
mov ecx, edi
push dword [ebp - 0x10d4]
push eax
call fcn.0045d060
lea ecx, [ebp - 0xe90]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
movzx eax, word [ebp + 8]
movsx ecx, ax
jmp 0x52a76d
push str.DRAW_DIALOGBOX_SUMMONEVENT39
lea ecx, [ebp - 0xea8]
call fcn.0040f9f0
push 0
push 0x32
push 0
push 4
lea eax, [ebp - 0xea8]
mov dword [ebp - 4], 0x5e
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x10c0]
mov ecx, edi
cwde
add eax, 0x50
push eax
push dword [ebp - 0x10ec]
movsx eax, si
push eax
call fcn.0045d060
lea ecx, [ebp - 0xea8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
cmp byte [ebp - 0x10b9], 0
je 0x52a833
movsx ecx, word [ebp + 8]
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x52a833
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x52a833
mov eax, dword [ebp - 0x10c0]
movsx ecx, word [ebp + 0xc]
cwde
mov dword [ebp - 0x10e4], ecx
lea edx, [eax + 0x5f]
mov dword [ebp - 0x10cc], edx
cmp ecx, edx
jl 0x52a833
add eax, 0x6d
cmp ecx, eax
jg 0x52a833
push str.DRAW_DIALOGBOX_SUMMONEVENT40
lea ecx, [ebp - 0xec0]
call fcn.0040f9f0
mov eax, dword [ebp - 0x10d8]
movsx ecx, ax
push 0
push 0xff
movsx eax, si
add eax, ecx
mov dword [ebp - 4], 0x5f
push 0xff
mov dword [ebp - 0x10c8], eax
mov ecx, 0x5fd3c4
push 0xff
lea eax, [ebp - 0xec0]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x10cc]
movsx eax, si
mov ecx, edi
push dword [ebp - 0x10c8]
push eax
call fcn.0045d060
lea ecx, [ebp - 0xec0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov edx, dword [ebp - 0x10e4]
jmp 0x52a8ec
push str.DRAW_DIALOGBOX_SUMMONEVENT40
lea ecx, [ebp - 0xed8]
call fcn.0040f9f0
mov eax, dword [ebp - 0x10d8]
movsx ecx, ax
push 0
push 0x32
movsx eax, si
add eax, ecx
mov dword [ebp - 4], 0x60
push 0
mov dword [ebp - 0x10c8], eax
mov ecx, 0x5fd3c4
push 4
lea eax, [ebp - 0xed8]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x10c0]
mov ecx, edi
cwde
add eax, 0x5f
push eax
push dword [ebp - 0x10c8]
movsx eax, si
push eax
call fcn.0045d060
lea ecx, [ebp - 0xed8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
cmp byte [ebp - 0x10b9], 0
movsx ecx, word [ebp + 8]
movsx edx, word [ebp + 0xc]
je 0x52a988
mov eax, dword [ebp - 0x10c8]
mov dword [ebp - 0x10c8], eax
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x52a988
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x52a988
mov ecx, dword [ebp - 0x10c0]
movsx eax, cx
add eax, 0x6e
mov dword [ebp - 0x10cc], eax
cmp edx, eax
jl 0x52a988
movsx eax, cx
add eax, 0x7c
cmp edx, eax
jg 0x52a988
push str.DRAW_DIALOGBOX_SUMMONEVENT41
lea ecx, [ebp - 0xef0]
call fcn.0040f9f0
push 0
push 0xff
push 0xff
push 0xff
lea eax, [ebp - 0xef0]
mov dword [ebp - 4], 0x61
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x10d8]
push dword [ebp - 0x10cc]
movsx ecx, ax
movsx eax, si
add ecx, eax
movsx eax, si
push ecx
push eax
mov ecx, edi
call fcn.0045d060
lea ecx, [ebp - 0xef0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
jmp 0x52aa1d
push str.DRAW_DIALOGBOX_SUMMONEVENT41
lea ecx, [ebp - 0xf08]
call fcn.0040f9f0
push 0
push 0x32
push 0
push 4
lea eax, [ebp - 0xf08]
mov dword [ebp - 4], 0x62
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x10c0]
mov ecx, edi
cwde
add eax, 0x6e
push eax
push dword [ebp - 0x10c8]
movsx eax, si
push eax
call fcn.0045d060
lea ecx, [ebp - 0xf08]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
cmp byte [ebp - 0x10b9], 0
je 0x52aad5
movsx ecx, word [ebp + 8]
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x52aad5
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x52aad5
mov eax, dword [ebp - 0x10c0]
movsx ecx, word [ebp + 0xc]
cwde
mov dword [ebp - 0x10e4], ecx
lea edx, [eax + 0x7d]
mov dword [ebp - 0x10cc], edx
cmp ecx, edx
jl 0x52aad5
add eax, 0x8b
cmp ecx, eax
jg 0x52aad5
push str.DRAW_DIALOGBOX_SUMMONEVENT42
lea ecx, [ebp - 0xf20]
call fcn.0040f9f0
mov eax, dword [ebp - 0x10d8]
movsx ecx, ax
push 0
push 0xff
movsx eax, si
add eax, ecx
mov dword [ebp - 4], 0x63
push 0xff
mov dword [ebp - 0x10c8], eax
mov ecx, 0x5fd3c4
push 0xff
lea eax, [ebp - 0xf20]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x10cc]
movsx eax, si
mov ecx, edi
push dword [ebp - 0x10c8]
push eax
call fcn.0045d060
lea ecx, [ebp - 0xf20]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov ecx, dword [ebp - 0x10e4]
jmp 0x52ab8e
push str.DRAW_DIALOGBOX_SUMMONEVENT42
lea ecx, [ebp - 0xf38]
call fcn.0040f9f0
mov eax, dword [ebp - 0x10d8]
movsx ecx, ax
push 0
push 0x32
movsx eax, si
add eax, ecx
mov dword [ebp - 4], 0x64
push 0
mov dword [ebp - 0x10c8], eax
mov ecx, 0x5fd3c4
push 4
lea eax, [ebp - 0xf38]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x10c0]
mov ecx, edi
cwde
add eax, 0x7d
push eax
push dword [ebp - 0x10c8]
movsx eax, si
push eax
call fcn.0045d060
lea ecx, [ebp - 0xf38]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
cmp byte [ebp - 0x10b9], 0
movsx edx, word [ebp + 8]
movsx ecx, word [ebp + 0xc]
je 0x52ac2a
mov eax, dword [ebp - 0x10c8]
mov dword [ebp - 0x10c8], eax
movsx eax, si
add eax, 0x1e
cmp edx, eax
jle 0x52ac2a
movsx eax, si
add eax, 0xf0
cmp edx, eax
jge 0x52ac2a
mov eax, dword [ebp - 0x10c0]
cwde
lea edx, [eax + 0x8c]
mov dword [ebp - 0x10cc], edx
cmp ecx, edx
jl 0x52ac2a
add eax, 0x9a
cmp ecx, eax
jg 0x52ac2a
push str.DRAW_DIALOGBOX_SUMMONEVENT43
lea ecx, [ebp - 0xf50]
call fcn.0040f9f0
push 0
push 0xff
push 0xff
push 0xff
lea eax, [ebp - 0xf50]
mov dword [ebp - 4], 0x65
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x10d8]
push dword [ebp - 0x10cc]
movsx ecx, ax
movsx eax, si
add ecx, eax
movsx eax, si
push ecx
push eax
mov ecx, edi
call fcn.0045d060
lea ecx, [ebp - 0xf50]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
jmp 0x52acc1
push str.DRAW_DIALOGBOX_SUMMONEVENT43
lea ecx, [ebp - 0xf68]
call fcn.0040f9f0
push 0
push 0x32
push 0
push 4
lea eax, [ebp - 0xf68]
mov dword [ebp - 4], 0x66
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x10c0]
mov ecx, edi
cwde
add eax, 0x8c
push eax
push dword [ebp - 0x10c8]
movsx eax, si
push eax
call fcn.0045d060
lea ecx, [ebp - 0xf68]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
cmp byte [ebp - 0x10b9], 0
je 0x52ad7c
movsx ecx, word [ebp + 8]
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x52ad7c
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x52ad7c
mov eax, dword [ebp - 0x10c0]
movsx ecx, word [ebp + 0xc]
cwde
mov dword [ebp - 0x10e4], ecx
lea edx, [eax + 0x9b]
mov dword [ebp - 0x10cc], edx
cmp ecx, edx
jl 0x52ad7c
add eax, 0xa9
cmp ecx, eax
jg 0x52ad7c
push str.DRAW_DIALOGBOX_SUMMONEVENT44
lea ecx, [ebp - 0xf80]
call fcn.0040f9f0
mov eax, dword [ebp - 0x10d8]
movsx ecx, ax
push 0
push 0xff
movsx eax, si
add eax, ecx
mov dword [ebp - 4], 0x67
push 0xff
mov dword [ebp - 0x10c8], eax
mov ecx, 0x5fd3c4
push 0xff
lea eax, [ebp - 0xf80]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x10cc]
movsx eax, si
mov ecx, edi
push dword [ebp - 0x10c8]
push eax
call fcn.0045d060
lea ecx, [ebp - 0xf80]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov ecx, dword [ebp - 0x10e4]
jmp 0x52ae37
push str.DRAW_DIALOGBOX_SUMMONEVENT44
lea ecx, [ebp - 0xf98]
call fcn.0040f9f0
mov eax, dword [ebp - 0x10d8]
movsx ecx, ax
push 0
push 0x32
movsx eax, si
add eax, ecx
mov dword [ebp - 4], 0x68
push 0
mov dword [ebp - 0x10c8], eax
mov ecx, 0x5fd3c4
push 4
lea eax, [ebp - 0xf98]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x10c0]
mov ecx, edi
cwde
add eax, 0x9b
push eax
push dword [ebp - 0x10c8]
movsx eax, si
push eax
call fcn.0045d060
lea ecx, [ebp - 0xf98]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
cmp byte [ebp - 0x10b9], 0
movsx edx, word [ebp + 8]
movsx ecx, word [ebp + 0xc]
je 0x52aed3
mov eax, dword [ebp - 0x10c8]
mov dword [ebp - 0x10c8], eax
movsx eax, si
add eax, 0x1e
cmp edx, eax
jle 0x52aed3
movsx eax, si
add eax, 0xf0
cmp edx, eax
jge 0x52aed3
mov eax, dword [ebp - 0x10c0]
cwde
lea edx, [eax + 0xaa]
mov dword [ebp - 0x10cc], edx
cmp ecx, edx
jl 0x52aed3
add eax, 0xb8
cmp ecx, eax
jg 0x52aed3
push str.DRAW_DIALOGBOX_SUMMONEVENT45
lea ecx, [ebp - 0xfb0]
call fcn.0040f9f0
push 0
push 0xff
push 0xff
push 0xff
lea eax, [ebp - 0xfb0]
mov dword [ebp - 4], 0x69
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x10d8]
push dword [ebp - 0x10cc]
movsx ecx, ax
movsx eax, si
add ecx, eax
movsx eax, si
push ecx
push eax
mov ecx, edi
call fcn.0045d060
lea ecx, [ebp - 0xfb0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
jmp 0x52af6a
push str.DRAW_DIALOGBOX_SUMMONEVENT45
lea ecx, [ebp - 0xb00]
call fcn.0040f9f0
push 0
push 0x32
push 0
push 4
lea eax, [ebp - 0xb00]
mov dword [ebp - 4], 0x6a
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x10c0]
mov ecx, edi
cwde
add eax, 0xaa
push eax
push dword [ebp - 0x10c8]
movsx eax, si
push eax
call fcn.0045d060
lea ecx, [ebp - 0xb00]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
cmp byte [ebp - 0x10b9], 0
je 0x52b002
movsx ecx, word [ebp + 8]
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x52b002
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x52b002
mov eax, dword [ebp - 0x10c0]
movsx ecx, word [ebp + 0xc]
cwde
lea edx, [eax + 0xb9]
mov dword [ebp - 0x10cc], edx
cmp ecx, edx
jl 0x52b002
add eax, 0xc7
cmp ecx, eax
jg 0x52b002
push str.DRAW_DIALOGBOX_SUMMONEVENT46
lea ecx, [ebp - 0xfc8]
call fcn.0040f9f0
mov eax, dword [ebp - 0x10d8]
movsx ecx, ax
push 0
push 0xff
movsx eax, si
add eax, ecx
mov dword [ebp - 4], 0x6b
push 0xff
mov dword [ebp - 0x10c4], eax
mov ecx, 0x5fd3c4
push 0xff
lea eax, [ebp - 0xfc8]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x10cc]
movsx eax, si
mov ecx, edi
push dword [ebp - 0x10c4]
push eax
call fcn.0045d060
lea ecx, [ebp - 0xfc8]
jmp 0x52b072
push str.DRAW_DIALOGBOX_SUMMONEVENT46
lea ecx, [ebp - 0xfe0]
call fcn.0040f9f0
mov eax, dword [ebp - 0x10d8]
movsx ecx, ax
push 0
push 0x32
movsx eax, si
add eax, ecx
mov dword [ebp - 4], 0x6c
push 0
mov dword [ebp - 0x10c4], eax
mov ecx, 0x5fd3c4
push 4
lea eax, [ebp - 0xfe0]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x10c0]
mov ecx, edi
cwde
add eax, 0xb9
push eax
push dword [ebp - 0x10c4]
movsx eax, si
push eax
call fcn.0045d060
lea ecx, [ebp - 0xfe0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
cmp dword [edi + 0x13f194], 3
jl 0x52b1b5
cmp byte [ebp - 0x10b9], 0
je 0x52b14f
movsx ecx, word [ebp + 8]
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x52b14f
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x52b14f
mov eax, dword [ebp - 0x10c0]
movsx ecx, word [ebp + 0xc]
cwde
lea edx, [eax + 0xc8]
mov dword [ebp - 0x10cc], edx
cmp ecx, edx
jl 0x52b14f
add eax, 0xd6
cmp ecx, eax
jg 0x52b14f
push str.DRAW_DIALOGBOX_SUMMONEVENT47
lea ecx, [ebp - 0xff8]
call fcn.0040f9f0
push 0
push 0xff
push 0xff
push 0xff
lea eax, [ebp - 0xff8]
mov dword [ebp - 4], 0x6d
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x10d8]
push dword [ebp - 0x10cc]
movsx ecx, ax
movsx eax, si
add ecx, eax
movsx eax, si
push ecx
push eax
mov ecx, edi
call fcn.0045d060
lea ecx, [ebp - 0xff8]
call fcn.00411640
jmp case.default.0x526fba
push str.DRAW_DIALOGBOX_SUMMONEVENT47
lea ecx, [ebp - 0x1010]
call fcn.0040f9f0
push 0
push 0x32
push 0
push 4
lea eax, [ebp - 0x1010]
mov dword [ebp - 4], 0x6e
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x10c0]
mov ecx, edi
cwde
add eax, 0xc8
push eax
push dword [ebp - 0x10c4]
movsx eax, si
push eax
call fcn.0045d060
lea ecx, [ebp - 0x1010]
call fcn.00411640
jmp case.default.0x526fba
push str.DRAW_DIALOGBOX_SUMMONEVENT47
lea ecx, [ebp - 0x1028]
call fcn.0040f9f0
push 0
push 0x41
push 0x41
push 0x41
lea eax, [ebp - 0x1028]
mov dword [ebp - 4], 0x6f
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x10c0]
mov ecx, edi
cwde
add eax, 0xc8
push eax
push dword [ebp - 0x10c4]
movsx eax, si
push eax
call fcn.0045d060
lea ecx, [ebp - 0x1028]
call fcn.00411640
jmp case.default.0x526fba
push str.DRAW_DIALOGBOX_SUMMONEVENT2
lea ecx, [ebp - 0x1040]
call fcn.0040f9f0
lea eax, [ebp - 0x1040]
mov dword [ebp - 4], 0x70
push eax
lea eax, [ebp - 0x116c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x52b257
mov ecx, dword [ecx]
mov eax, dword [ebp - 0x10c0]
push 0
push 0xc8
cwde
push 0xc8
push 0xdc
push ecx
lea edx, [eax + 0x2d]
mov ecx, edi
movsx eax, si
add eax, 0xf0
mov dword [ebp - 0x10cc], edx
push edx
push eax
mov dword [ebp - 0x10e4], eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d060
lea ecx, [ebp - 0x1040]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_SUMMONEVENT2
lea ecx, [ebp - 0x1058]
call fcn.0040f9f0
lea eax, [ebp - 0x1058]
mov dword [ebp - 4], 0x71
push eax
lea eax, [ebp - 0x1174]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x52b2e5
mov eax, dword [eax]
push 0
push 0xc8
push 0xc8
push 0xdc
push eax
push dword [ebp - 0x10cc]
movsx eax, si
mov ecx, edi
add eax, 0xf1
push eax
movsx eax, si
add eax, 0x1a
push eax
call fcn.0045d060
lea ecx, [ebp - 0x1058]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
lea eax, [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x10d0]
add eax, 0x3c
push eax
call fcn.005666c0
add esp, 8
lea ecx, [ebp - 0x1070]
push str.DRAW_DIALOGBOX_SUMMONEVENT48
call fcn.0040f9f0
lea eax, [ebp - 0x1070]
mov dword [ebp - 4], 0x72
push eax
lea eax, [ebp - 0x117c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x52b378
mov eax, dword [eax]
lea ecx, [ebp - 0x28]
push ecx
push eax
lea eax, [ebp - 0x128]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1070]
call fcn.00411640
cmp byte [ebp - 0x10b9], 0
je 0x52b3f8
movsx ecx, word [ebp + 8]
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x52b3f8
cmp ecx, dword [ebp - 0x10e4]
jge 0x52b3f8
mov ecx, dword [ebp - 0x10c0]
movsx edx, word [ebp + 0xc]
movsx eax, cx
add eax, 0x41
mov dword [ebp - 0x10cc], eax
cmp edx, eax
jl 0x52b3f8
movsx eax, cx
add eax, 0x4f
cmp edx, eax
jg 0x52b3f8
push 0
push 0xffffff
lea eax, [ebp - 0x128]
push eax
push dword [ebp - 0x10cc]
jmp 0x52b411
push 0
push 0x320004
lea eax, [ebp - 0x128]
push eax
mov eax, dword [ebp - 0x10c0]
cwde
add eax, 0x41
push eax
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
movsx eax, word [edi + 0x144cd0]
sub eax, 4
je 0x52b5b1
sub eax, 1
je 0x52b4e3
sub eax, 1
je 0x52b4e3
push str.DRAW_DIALOGBOX_SUMMONEVENT49
lea ecx, [ebp - 0x1088]
call fcn.0040f9f0
lea eax, [ebp - 0x1088]
mov dword [ebp - 4], 0x76
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov edx, eax
cmp dword [edx + 0x14], 0xf
jbe 0x52b473
mov edx, dword [edx]
mov eax, dword [ebp - 0x10c0]
mov ecx, edi
push 0
movsx esi, ax
mov eax, dword [ebp - 0x10dc]
add esi, 0x50
push 0x320004
push edx
cwde
push esi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x1088]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0x100
lea eax, [ebp - 0x128]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x10d0]
push dword [eax + 0x5c]
lea eax, [ebp - 0x128]
push 0x5c813c
push eax
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
call eax
add esp, 0x18
jmp 0x52b746
push str.DRAW_DIALOGBOX_SUMMONEVENT49
lea ecx, [ebp - 0x10a0]
call fcn.0040f9f0
lea eax, [ebp - 0x10a0]
mov dword [ebp - 4], 0x75
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
cmp dword [ecx + 0x14], 0xf
jbe 0x52b515
mov ecx, dword [ecx]
mov eax, dword [ebp - 0x10c0]
push 0
cwde
push 0xffffff
mov dword [ebp - 0x10c4], eax
add eax, 0x50
push ecx
push eax
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x10a0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov ecx, edi
call fcn.004973c0
cmp eax, 0x36
jne 0x52b564
cmp word [edi + 0x144cd0], 6
jne 0x52b590
push 0
push 0
push 0xffffffffffffffff
push 0
push 0xffffff
lea eax, [edi + 0x18d63e]
mov ecx, edi
push eax
mov eax, dword [ebp - 0x10c4]
add eax, 0x50
push eax
movsx eax, si
add eax, 0x64
push eax
call fcn.0045d4a0
mov eax, dword [ebp - 0x10c4]
push 0
push 0x192319
add eax, 0x53
push str.______1__750_
push eax
movsx eax, si
add eax, 0x62
jmp 0x52b761
push 0x100
lea eax, [ebp - 0x128]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
cmp byte [ebp - 0x10b9], 0
je 0x52b6bc
movsx ecx, word [ebp + 8]
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x52b6bc
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x52b6bc
mov eax, dword [ebp - 0x10c0]
movsx edx, word [ebp + 0xc]
movsx ecx, ax
mov dword [ebp - 0x10c4], ecx
lea eax, [ecx + 0x50]
cmp edx, eax
jl 0x52b6bc
lea eax, [ecx + 0x5e]
cmp edx, eax
jg 0x52b6bc
push str.DRAW_DIALOGBOX_SUMMONEVENT49
lea ecx, [ebp - 0x10b8]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x10b8]
mov dword [ebp - 4], 0x73
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x10c4]
mov ecx, edi
add eax, 0x50
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x10b8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, dword [ebp - 0x10d0]
push dword [eax + 0x5c]
lea eax, [ebp - 0x128]
push 0x5c813c
push eax
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
call eax
add esp, 0xc
lea eax, [ebp - 0x128]
push 0
push 0x320004
push eax
mov eax, dword [ebp - 0x10c4]
add eax, 0x50
push eax
jmp 0x52b75b
push str.DRAW_DIALOGBOX_SUMMONEVENT49
lea ecx, [ebp - 0x3b0]
call fcn.0040f9f0
lea eax, [ebp - 0x3b0]
mov dword [ebp - 4], 0x74
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov edx, eax
cmp dword [edx + 0x14], 0xf
jbe 0x52b6ee
mov edx, dword [edx]
mov eax, dword [ebp - 0x10c0]
mov ecx, edi
push 0
movsx esi, ax
mov eax, dword [ebp - 0x10dc]
add esi, 0x50
push 0x320004
push edx
cwde
push esi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x3b0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, dword [ebp - 0x10d0]
push dword [eax + 0x5c]
lea eax, [ebp - 0x128]
push 0x5c813c
push eax
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
call eax
add esp, 0xc
push 0
push 0x320004
lea eax, [ebp - 0x128]
push eax
push esi
mov esi, dword [ebp - 0x10dc]
movsx eax, si
add eax, 0x64
push eax
mov ecx, edi
call fcn.0045d450
movsx eax, word [edi + 0x144cd0]
sub eax, 4
je 0x52b8fa
sub eax, 3
je 0x52b82c
sub eax, 1
je 0x52b82c
push str.DRAW_DIALOGBOX_SUMMONEVENT50
lea ecx, [ebp - 0x3c8]
call fcn.0040f9f0
lea eax, [ebp - 0x3c8]
mov dword [ebp - 4], 0x7a
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov edx, eax
cmp dword [edx + 0x14], 0xf
jbe 0x52b7bd
mov edx, dword [edx]
mov eax, dword [ebp - 0x10c0]
mov ecx, edi
push 0
movsx esi, ax
mov eax, dword [ebp - 0x10dc]
add esi, 0x5f
push 0x320004
push edx
cwde
push esi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x3c8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0x100
lea eax, [ebp - 0x128]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x10d0]
push dword [eax + 0x60]
lea eax, [ebp - 0x128]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
jmp 0x52ba9b
push str.DRAW_DIALOGBOX_SUMMONEVENT50
lea ecx, [ebp - 0x3e0]
call fcn.0040f9f0
lea eax, [ebp - 0x3e0]
mov dword [ebp - 4], 0x79
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
cmp dword [ecx + 0x14], 0xf
jbe 0x52b85e
mov ecx, dword [ecx]
mov eax, dword [ebp - 0x10c0]
push 0
cwde
push 0xffffff
mov dword [ebp - 0x10c4], eax
add eax, 0x5f
push ecx
push eax
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x3e0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov ecx, edi
call fcn.004973c0
cmp eax, 0x36
jne 0x52b8ad
cmp word [edi + 0x144cd0], 8
jne 0x52b8d9
push 0
push 0
push 2
push 0
push 0xffffff
lea eax, [edi + 0x18d63e]
mov ecx, edi
push eax
mov eax, dword [ebp - 0x10c4]
add eax, 0x5f
push eax
movsx eax, si
add eax, 0x64
push eax
call fcn.0045d4a0
mov eax, dword [ebp - 0x10c4]
push 0
push 0x192319
add eax, 0x62
push str.______1__750_
push eax
movsx eax, si
add eax, 0x62
jmp 0x52bab6
push 0x100
lea eax, [ebp - 0x128]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
cmp byte [ebp - 0x10b9], 0
je 0x52ba12
movsx ecx, word [ebp + 8]
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x52ba12
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x52ba12
mov eax, dword [ebp - 0x10c0]
movsx edx, word [ebp + 0xc]
movsx ecx, ax
mov dword [ebp - 0x10c4], ecx
lea eax, [ecx + 0x5f]
cmp edx, eax
jl 0x52ba12
lea eax, [ecx + 0x6d]
cmp edx, eax
jg 0x52ba12
push str.DRAW_DIALOGBOX_SUMMONEVENT50
lea ecx, [ebp - 0x3f8]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x3f8]
mov dword [ebp - 4], 0x77
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x10c4]
mov ecx, edi
add eax, 0x5f
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x3f8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, dword [ebp - 0x10d0]
push dword [eax + 0x60]
lea eax, [ebp - 0x128]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x128]
mov ecx, edi
push 0
push 0x320004
push eax
mov eax, dword [ebp - 0x10c4]
add eax, 0x5f
push eax
movsx eax, si
add eax, 0x64
push eax
call fcn.0045d450
jmp 0x52baed
push str.DRAW_DIALOGBOX_SUMMONEVENT50
lea ecx, [ebp - 0x410]
call fcn.0040f9f0
lea eax, [ebp - 0x410]
mov dword [ebp - 4], 0x78
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov edx, eax
cmp dword [edx + 0x14], 0xf
jbe 0x52ba44
mov edx, dword [edx]
mov eax, dword [ebp - 0x10c0]
mov ecx, edi
push 0
movsx esi, ax
mov eax, dword [ebp - 0x10dc]
add esi, 0x5f
push 0x320004
push edx
cwde
push esi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x410]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, dword [ebp - 0x10d0]
push dword [eax + 0x60]
lea eax, [ebp - 0x128]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push 0
push 0x320004
lea eax, [ebp - 0x128]
push eax
push esi
mov esi, dword [ebp - 0x10dc]
movsx eax, si
add eax, 0x64
push eax
mov ecx, edi
call fcn.0045d450
cmp byte [ebp - 0x10b9], 0
je 0x52bb7f
movsx ecx, word [ebp + 8]
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x52bb7f
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x52bb7f
mov eax, dword [ebp - 0x10c0]
movsx ecx, word [ebp + 0xc]
cwde
lea edx, [eax + 0x7d]
mov dword [ebp - 0x10cc], edx
cmp ecx, edx
jl 0x52bb7f
add eax, 0x8b
cmp ecx, eax
jg 0x52bb7f
push str.DRAW_DIALOGBOX_SUMMONEVENT51
lea ecx, [ebp - 0x428]
call fcn.0040f9f0
push 0
push 0xff
push 0xff
push 0xff
lea eax, [ebp - 0x428]
mov dword [ebp - 4], 0x7b
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x10d8]
push dword [ebp - 0x10cc]
movsx ecx, ax
movsx eax, si
add ecx, eax
movsx eax, si
push ecx
push eax
mov ecx, edi
call fcn.0045d060
lea ecx, [ebp - 0x428]
call fcn.00411640
jmp case.default.0x526fba
push str.DRAW_DIALOGBOX_SUMMONEVENT51
lea ecx, [ebp - 0x440]
call fcn.0040f9f0
lea eax, [ebp - 0x440]
mov dword [ebp - 4], 0x7c
push eax
lea eax, [ebp - 0x1184]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x52bbbb
mov eax, dword [eax]
push 0
push 0x32
push 0
push 4
push eax
mov eax, dword [ebp - 0x10c0]
cwde
add eax, 0x7d
push eax
mov eax, dword [ebp - 0x10d8]
movsx ecx, ax
movsx eax, si
add ecx, eax
movsx eax, si
push ecx
push eax
mov ecx, edi
call fcn.0045d060
lea ecx, [ebp - 0x440]
call fcn.00411640
jmp case.default.0x526fba
xorps xmm0, xmm0
mov dword [ebp - 0x2e0], 0
push 0x20
movups xmmword [ebp - 0x2f0], xmm0
mov dword [ebp - 0x2dc], 0
call fcn.005aa520
movups xmm0, xmmword [str.DRAW_DIALOGBOX_SUMMONEVENT2]
mov edx, eax
mov dword [ebp - 0x2e0], 0x1b
mov dword [ebp - 0x2f0], edx
add esp, 4
mov dword [ebp - 0x2dc], 0x1f
movups xmmword [edx], xmm0
movq xmm0, qword [0x5d76d0]
movq qword [edx + 0x10], xmm0
mov cx, word [0x5d76d8]
mov word [edx + 0x18], cx
mov al, byte [0x5d76da]
mov byte [edx + 0x1a], al
mov byte [edx + 0x1b], 0
lea eax, [ebp - 0x2f0]
mov dword [ebp - 4], 0x7d
push eax
lea eax, [ebp - 0x118c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x52bc97
mov ecx, dword [ecx]
mov eax, dword [ebp - 0x10c0]
push 0
push 0xc8
push 0xc8
cwde
add eax, 0x2d
push 0xdc
push ecx
push eax
mov dword [ebp - 0x10cc], eax
mov ecx, edi
movsx eax, si
add eax, 0xf0
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d060
lea ecx, [ebp - 0x2f0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
xorps xmm0, xmm0
mov dword [ebp - 0x264], 0
push 0x20
movups xmmword [ebp - 0x274], xmm0
mov dword [ebp - 0x260], 0
call fcn.005aa520
movups xmm0, xmmword [str.DRAW_DIALOGBOX_SUMMONEVENT2]
mov edx, eax
mov dword [ebp - 0x264], 0x1b
mov dword [ebp - 0x274], edx
add esp, 4
mov dword [ebp - 0x260], 0x1f
movups xmmword [edx], xmm0
movq xmm0, qword [0x5d76d0]
movq qword [edx + 0x10], xmm0
mov cx, word [0x5d76d8]
mov word [edx + 0x18], cx
mov al, byte [0x5d76da]
mov byte [edx + 0x1a], al
mov byte [edx + 0x1b], 0
lea eax, [ebp - 0x274]
mov dword [ebp - 4], 0x7e
push eax
lea eax, [ebp - 0x1194]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x52bd81
mov eax, dword [eax]
push 0
push 0xc8
push 0xc8
push 0xdc
push eax
push dword [ebp - 0x10cc]
movsx eax, si
mov ecx, edi
add eax, 0xf1
push eax
movsx eax, si
add eax, 0x1a
push eax
call fcn.0045d060
mov ecx, dword [ebp - 0x260]
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0xf
jbe 0x52bdf1
mov edx, dword [ebp - 0x274]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x52bde7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x52dbb4
push ecx
push edx
call fcn.005aa4e8
add esp, 8
mov dword [ebp - 0x264], 0
mov dword [ebp - 0x260], 0xf
mov byte [ebp - 0x274], 0
movsx eax, word [edi + 0x144cd0]
sub eax, 9
je 0x52bfc8
sub eax, 1
je 0x52be8a
sub eax, 1
je 0x52be8a
push str.DRAW_DIALOGBOX_SUMMONEVENT52
lea ecx, [ebp - 0x458]
call fcn.0040f9f0
lea eax, [ebp - 0x458]
mov dword [ebp - 4], 0x82
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov edx, eax
cmp dword [edx + 0x14], 0xf
jbe 0x52be58
mov edx, dword [edx]
mov eax, dword [ebp - 0x10c0]
mov ecx, edi
push 0
movsx esi, ax
mov eax, dword [ebp - 0x10dc]
add esi, 0x41
push 0x320004
push edx
cwde
push esi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x458]
jmp 0x52c119
push 0x1c
xorps xmm0, xmm0
mov dword [ebp - 0x27c], 0
push str.DRAW_DIALOGBOX_SUMMONEVENT52
lea ecx, [ebp - 0x28c]
mov dword [ebp - 0x278], 0
movups xmmword [ebp - 0x28c], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x28c]
mov dword [ebp - 4], 0x81
push eax
lea eax, [ebp - 0x119c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x52bee6
mov eax, dword [eax]
push 0
push 0xffffff
push eax
mov eax, dword [ebp - 0x10c0]
mov ecx, edi
cwde
add eax, 0x41
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d450
mov ecx, dword [ebp - 0x278]
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0xf
jbe 0x52bf48
mov edx, dword [ebp - 0x28c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x52bf3e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x52dbb4
push ecx
push edx
call fcn.005aa4e8
add esp, 8
mov ecx, edi
mov dword [ebp - 0x27c], 0
mov dword [ebp - 0x278], 0xf
mov byte [ebp - 0x28c], 0
call fcn.004973c0
cmp eax, 0x36
jne 0x52bf79
cmp word [edi + 0x144cd0], 0xb
jne 0x52bfa6
push 0
push 0
push 2
push 0
push 0xffffff
lea eax, [edi + 0x18d63e]
mov ecx, edi
push eax
mov eax, dword [ebp - 0x10c0]
cwde
add eax, 0x41
push eax
movsx eax, si
add eax, 0x64
push eax
call fcn.0045d4a0
mov eax, dword [ebp - 0x10c0]
push 0
cwde
push 0x192319
add eax, 0x44
push str._______2011__2030_
push eax
movsx eax, si
add eax, 0x62
jmp 0x52c161
cmp byte [ebp - 0x10b9], 0
je 0x52c0ba
movsx ecx, word [ebp + 8]
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x52c0ba
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x52c0ba
mov ecx, dword [ebp - 0x10c0]
movsx edx, word [ebp + 0xc]
movsx eax, cx
add eax, 0x41
mov dword [ebp - 0x10c4], eax
cmp edx, eax
jl 0x52c0ba
movsx eax, cx
add eax, 0x4f
cmp edx, eax
jg 0x52c0ba
push str.DRAW_DIALOGBOX_SUMMONEVENT52
lea ecx, [ebp - 0x470]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x470]
mov dword [ebp - 4], 0x7f
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x10c4]
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x470]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov ecx, dword [ebp - 0x10d0]
movzx eax, word [ecx + 0x68]
push eax
lea eax, [ebp - 0x128]
push 0x5c813c
push eax
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
call eax
add esp, 0xc
lea eax, [ebp - 0x128]
push 0
push 0x320004
push eax
push dword [ebp - 0x10c4]
jmp 0x52c15b
push str.DRAW_DIALOGBOX_SUMMONEVENT52
lea ecx, [ebp - 0x488]
call fcn.0040f9f0
lea eax, [ebp - 0x488]
mov dword [ebp - 4], 0x80
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov edx, eax
cmp dword [edx + 0x14], 0xf
jbe 0x52c0ec
mov edx, dword [edx]
mov eax, dword [ebp - 0x10c0]
mov ecx, edi
push 0
movsx esi, ax
mov eax, dword [ebp - 0x10dc]
add esi, 0x41
push 0x320004
push edx
cwde
push esi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x488]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov ecx, dword [ebp - 0x10d0]
movzx eax, word [ecx + 0x68]
push eax
lea eax, [ebp - 0x128]
push 0x5c813c
push eax
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
call eax
add esp, 0xc
lea eax, [ebp - 0x128]
push 0
push 0x320004
push eax
push esi
mov esi, dword [ebp - 0x10dc]
movsx eax, si
add eax, 0x64
push eax
mov ecx, edi
call fcn.0045d450
movsx eax, word [edi + 0x144cd0]
sub eax, 9
je 0x52c36c
sub eax, 3
je 0x52c22e
sub eax, 1
je 0x52c22e
push str.DRAW_DIALOGBOX_SUMMONEVENT53
lea ecx, [ebp - 0x4a0]
call fcn.0040f9f0
lea eax, [ebp - 0x4a0]
mov dword [ebp - 4], 0x86
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov edx, eax
cmp dword [edx + 0x14], 0xf
jbe 0x52c1bd
mov edx, dword [edx]
mov eax, dword [ebp - 0x10c0]
mov ecx, edi
push 0
movsx esi, ax
mov eax, dword [ebp - 0x10dc]
add esi, 0x50
push 0x320004
push edx
cwde
push esi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x4a0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0x100
lea eax, [ebp - 0x128]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x10d0]
movzx eax, word [eax + 0x6a]
push eax
lea eax, [ebp - 0x128]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
jmp 0x52c503
push 0x1c
xorps xmm0, xmm0
mov dword [ebp - 0x294], 0
push str.DRAW_DIALOGBOX_SUMMONEVENT53
lea ecx, [ebp - 0x2a4]
mov dword [ebp - 0x290], 0
movups xmmword [ebp - 0x2a4], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x2a4]
mov dword [ebp - 4], 0x85
push eax
lea eax, [ebp - 0x11a4]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x52c28a
mov eax, dword [eax]
push 0
push 0xffffff
push eax
mov eax, dword [ebp - 0x10c0]
mov ecx, edi
cwde
add eax, 0x50
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d450
mov ecx, dword [ebp - 0x290]
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0xf
jbe 0x52c2ec
mov edx, dword [ebp - 0x2a4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x52c2e2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x52dbb4
push ecx
push edx
call fcn.005aa4e8
add esp, 8
mov ecx, edi
mov dword [ebp - 0x294], 0
mov dword [ebp - 0x290], 0xf
mov byte [ebp - 0x2a4], 0
call fcn.004973c0
cmp eax, 0x36
jne 0x52c31d
cmp word [edi + 0x144cd0], 0xd
jne 0x52c34a
push 0
push 0
push 2
push 0
push 0xffffff
lea eax, [edi + 0x18d63e]
mov ecx, edi
push eax
mov eax, dword [ebp - 0x10c0]
cwde
add eax, 0x50
push eax
movsx eax, si
add eax, 0x64
push eax
call fcn.0045d4a0
mov eax, dword [ebp - 0x10c0]
push 0
cwde
push 0x192319
add eax, 0x53
push str._____1__12_
push eax
movsx eax, si
add eax, 0x62
jmp 0x52c51e
push 0x100
lea eax, [ebp - 0x128]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
cmp byte [ebp - 0x10b9], 0
je 0x52c478
movsx ecx, word [ebp + 8]
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x52c478
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x52c478
mov eax, dword [ebp - 0x10c0]
movsx edx, word [ebp + 0xc]
movsx ecx, ax
mov dword [ebp - 0x10c4], ecx
lea eax, [ecx + 0x50]
cmp edx, eax
jl 0x52c478
lea eax, [ecx + 0x5e]
cmp edx, eax
jg 0x52c478
push str.DRAW_DIALOGBOX_SUMMONEVENT53
lea ecx, [ebp - 0x4b8]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x4b8]
mov dword [ebp - 4], 0x83
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x10c4]
mov ecx, edi
add eax, 0x50
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x4b8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov ecx, dword [ebp - 0x10d0]
movzx eax, word [ecx + 0x6a]
push eax
lea eax, [ebp - 0x128]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x128]
push 0
push 0x320004
push eax
mov eax, dword [ebp - 0x10c4]
add eax, 0x50
push eax
jmp 0x52c518
push str.DRAW_DIALOGBOX_SUMMONEVENT53
lea ecx, [ebp - 0x4d0]
call fcn.0040f9f0
lea eax, [ebp - 0x4d0]
mov dword [ebp - 4], 0x84
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov edx, eax
cmp dword [edx + 0x14], 0xf
jbe 0x52c4aa
mov edx, dword [edx]
mov eax, dword [ebp - 0x10c0]
mov ecx, edi
push 0
movsx esi, ax
mov eax, dword [ebp - 0x10dc]
add esi, 0x50
push 0x320004
push edx
cwde
push esi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x4d0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov ecx, dword [ebp - 0x10d0]
movzx eax, word [ecx + 0x6a]
push eax
lea eax, [ebp - 0x128]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push 0
push 0x320004
lea eax, [ebp - 0x128]
push eax
push esi
mov esi, dword [ebp - 0x10dc]
movsx eax, si
add eax, 0x64
push eax
mov ecx, edi
call fcn.0045d450
movsx eax, word [edi + 0x144cd0]
sub eax, 9
je 0x52c729
sub eax, 5
je 0x52c5eb
sub eax, 1
je 0x52c5eb
push str.DRAW_DIALOGBOX_SUMMONEVENT54
lea ecx, [ebp - 0x4e8]
call fcn.0040f9f0
lea eax, [ebp - 0x4e8]
mov dword [ebp - 4], 0x8a
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov edx, eax
cmp dword [edx + 0x14], 0xf
jbe 0x52c57a
mov edx, dword [edx]
mov eax, dword [ebp - 0x10c0]
mov ecx, edi
push 0
movsx esi, ax
mov eax, dword [ebp - 0x10dc]
add esi, 0x5f
push 0x320004
push edx
cwde
push esi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x4e8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0x100
lea eax, [ebp - 0x128]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x10d0]
movzx eax, word [eax + 0x6e]
push eax
lea eax, [ebp - 0x128]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
jmp 0x52c8c0
push 0x1c
xorps xmm0, xmm0
mov dword [ebp - 0x2ac], 0
push str.DRAW_DIALOGBOX_SUMMONEVENT54
lea ecx, [ebp - 0x2bc]
mov dword [ebp - 0x2a8], 0
movups xmmword [ebp - 0x2bc], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x2bc]
mov dword [ebp - 4], 0x89
push eax
lea eax, [ebp - 0x11ac]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x52c647
mov eax, dword [eax]
push 0
push 0xffffff
push eax
mov eax, dword [ebp - 0x10c0]
mov ecx, edi
cwde
add eax, 0x5f
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d450
mov ecx, dword [ebp - 0x2a8]
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0xf
jbe 0x52c6a9
mov edx, dword [ebp - 0x2bc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x52c69f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x52dbb4
push ecx
push edx
call fcn.005aa4e8
add esp, 8
mov ecx, edi
mov dword [ebp - 0x2ac], 0
mov dword [ebp - 0x2a8], 0xf
mov byte [ebp - 0x2bc], 0
call fcn.004973c0
cmp eax, 0x36
jne 0x52c6da
cmp word [edi + 0x144cd0], 0xf
jne 0x52c707
push 0
push 0
push 2
push 0
push 0xffffff
lea eax, [edi + 0x18d63e]
mov ecx, edi
push eax
mov eax, dword [ebp - 0x10c0]
cwde
add eax, 0x5f
push eax
movsx eax, si
add eax, 0x64
push eax
call fcn.0045d4a0
mov eax, dword [ebp - 0x10c0]
push 0
cwde
push 0x192319
add eax, 0x64
push str._____1__31_
push eax
movsx eax, si
add eax, 0x62
jmp 0x52c8db
push 0x100
lea eax, [ebp - 0x128]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
cmp byte [ebp - 0x10b9], 0
je 0x52c835
movsx ecx, word [ebp + 8]
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x52c835
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x52c835
mov eax, dword [ebp - 0x10c0]
movsx edx, word [ebp + 0xc]
movsx ecx, ax
mov dword [ebp - 0x10c4], ecx
lea eax, [ecx + 0x5f]
cmp edx, eax
jl 0x52c835
lea eax, [ecx + 0x6d]
cmp edx, eax
jg 0x52c835
push str.DRAW_DIALOGBOX_SUMMONEVENT54
lea ecx, [ebp - 0x728]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x728]
mov dword [ebp - 4], 0x87
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x10c4]
mov ecx, edi
add eax, 0x5f
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x728]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov ecx, dword [ebp - 0x10d0]
movzx eax, word [ecx + 0x6e]
push eax
lea eax, [ebp - 0x128]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x128]
push 0
push 0x320004
push eax
mov eax, dword [ebp - 0x10c4]
add eax, 0x5f
push eax
jmp 0x52c8d5
push str.DRAW_DIALOGBOX_SUMMONEVENT54
lea ecx, [ebp - 0x500]
call fcn.0040f9f0
lea eax, [ebp - 0x500]
mov dword [ebp - 4], 0x88
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov edx, eax
cmp dword [edx + 0x14], 0xf
jbe 0x52c867
mov edx, dword [edx]
mov eax, dword [ebp - 0x10c0]
mov ecx, edi
push 0
movsx esi, ax
mov eax, dword [ebp - 0x10dc]
add esi, 0x5f
push 0x320004
push edx
cwde
push esi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x500]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov ecx, dword [ebp - 0x10d0]
movzx eax, word [ecx + 0x6e]
push eax
lea eax, [ebp - 0x128]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push 0
push 0x320004
lea eax, [ebp - 0x128]
push eax
push esi
mov esi, dword [ebp - 0x10dc]
movsx eax, si
add eax, 0x64
push eax
mov ecx, edi
call fcn.0045d450
movsx eax, word [edi + 0x144cd0]
sub eax, 9
je 0x52ca9d
sub eax, 7
je 0x52c9a8
sub eax, 1
je 0x52c9a8
push str.DRAW_DIALOGBOX_SUMMONEVENT55
lea ecx, [ebp - 0x518]
call fcn.0040f9f0
lea eax, [ebp - 0x518]
mov dword [ebp - 4], 0x8e
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov edx, eax
cmp dword [edx + 0x14], 0xf
jbe 0x52c937
mov edx, dword [edx]
mov eax, dword [ebp - 0x10c0]
mov ecx, edi
push 0
movsx esi, ax
mov eax, dword [ebp - 0x10dc]
add esi, 0x6e
push 0x320004
push edx
cwde
push esi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x518]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0x100
lea eax, [ebp - 0x128]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x10d0]
movzx eax, word [eax + 0x70]
push eax
lea eax, [ebp - 0x128]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
jmp 0x52cc2f
push 0x1c
xorps xmm0, xmm0
mov dword [ebp - 0x370], 0
push str.DRAW_DIALOGBOX_SUMMONEVENT55
lea ecx, [ebp - 0x380]
mov dword [ebp - 0x36c], 0
movups xmmword [ebp - 0x380], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x380]
mov dword [ebp - 4], 0x8d
push eax
lea eax, [ebp - 0x11cc]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x52ca04
mov ecx, dword [ecx]
mov eax, dword [ebp - 0x10c0]
push 0
cwde
push 0xffffff
add eax, 0x6e
push ecx
push eax
mov dword [ebp - 0x10cc], eax
mov ecx, edi
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x380]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov ecx, edi
call fcn.004973c0
cmp eax, 0x36
jne 0x52ca53
cmp word [edi + 0x144cd0], 0x11
jne 0x52ca7b
push 0
push 0
push 2
push 0
push 0xffffff
lea eax, [edi + 0x18d63e]
mov ecx, edi
push eax
push dword [ebp - 0x10cc]
movsx eax, si
add eax, 0x64
push eax
call fcn.0045d4a0
mov eax, dword [ebp - 0x10c0]
push 0
cwde
push 0x192319
add eax, 0x71
push str._____0__23_
push eax
movsx eax, si
add eax, 0x62
jmp 0x52cc4a
push 0x100
lea eax, [ebp - 0x128]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
cmp byte [ebp - 0x10b9], 0
je 0x52cba4
movsx ecx, word [ebp + 8]
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x52cba4
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x52cba4
mov ecx, dword [ebp - 0x10c0]
movsx edx, word [ebp + 0xc]
movsx eax, cx
add eax, 0x6e
mov dword [ebp - 0x10c4], eax
cmp edx, eax
jl 0x52cba4
movsx eax, cx
add eax, 0x7c
cmp edx, eax
jg 0x52cba4
push str.DRAW_DIALOGBOX_SUMMONEVENT55
lea ecx, [ebp - 0x530]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x530]
mov dword [ebp - 4], 0x8b
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x10c4]
movsx eax, si
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x530]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov ecx, dword [ebp - 0x10d0]
movzx eax, word [ecx + 0x70]
push eax
lea eax, [ebp - 0x128]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x128]
push 0
push 0x320004
push eax
push dword [ebp - 0x10c4]
jmp 0x52cc44
push str.DRAW_DIALOGBOX_SUMMONEVENT55
lea ecx, [ebp - 0x548]
call fcn.0040f9f0
lea eax, [ebp - 0x548]
mov dword [ebp - 4], 0x8c
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov edx, eax
cmp dword [edx + 0x14], 0xf
jbe 0x52cbd6
mov edx, dword [edx]
mov eax, dword [ebp - 0x10c0]
mov ecx, edi
push 0
movsx esi, ax
mov eax, dword [ebp - 0x10dc]
add esi, 0x6e
push 0x320004
push edx
cwde
push esi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x548]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov ecx, dword [ebp - 0x10d0]
movzx eax, word [ecx + 0x70]
push eax
lea eax, [ebp - 0x128]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push 0
push 0x320004
lea eax, [ebp - 0x128]
push eax
push esi
mov esi, dword [ebp - 0x10dc]
movsx eax, si
add eax, 0x64
push eax
mov ecx, edi
call fcn.0045d450
movsx eax, word [edi + 0x144cd0]
sub eax, 9
je 0x52ce55
sub eax, 9
je 0x52cd17
sub eax, 1
je 0x52cd17
push str.DRAW_DIALOGBOX_SUMMONEVENT56
lea ecx, [ebp - 0x560]
call fcn.0040f9f0
lea eax, [ebp - 0x560]
mov dword [ebp - 4], 0x92
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov edx, eax
cmp dword [edx + 0x14], 0xf
jbe 0x52cca6
mov edx, dword [edx]
mov eax, dword [ebp - 0x10c0]
mov ecx, edi
push 0
movsx esi, ax
mov eax, dword [ebp - 0x10dc]
add esi, 0x7d
push 0x320004
push edx
cwde
push esi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x560]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0x100
lea eax, [ebp - 0x128]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x10d0]
movzx eax, word [eax + 0x72]
push eax
lea eax, [ebp - 0x128]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
jmp 0x52cfef
push 0x1c
xorps xmm0, xmm0
mov dword [ebp - 0x2c4], 0
push str.DRAW_DIALOGBOX_SUMMONEVENT56
lea ecx, [ebp - 0x2d4]
mov dword [ebp - 0x2c0], 0
movups xmmword [ebp - 0x2d4], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x2d4]
mov dword [ebp - 4], 0x91
push eax
lea eax, [ebp - 0x11c4]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x52cd73
mov eax, dword [eax]
push 0
push 0xffffff
push eax
mov eax, dword [ebp - 0x10c0]
mov ecx, edi
cwde
add eax, 0x7d
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d450
mov ecx, dword [ebp - 0x2c0]
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0xf
jbe 0x52cdd5
mov edx, dword [ebp - 0x2d4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x52cdcb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x52dbb4
push ecx
push edx
call fcn.005aa4e8
add esp, 8
mov ecx, edi
mov dword [ebp - 0x2c4], 0
mov dword [ebp - 0x2c0], 0xf
mov byte [ebp - 0x2d4], 0
call fcn.004973c0
cmp eax, 0x36
jne 0x52ce06
cmp word [edi + 0x144cd0], 0x13
jne 0x52ce33
push 0
push 0
push 2
push 0
push 0xffffff
lea eax, [edi + 0x18d63e]
mov ecx, edi
push eax
mov eax, dword [ebp - 0x10c0]
cwde
add eax, 0x7d
push eax
movsx eax, si
add eax, 0x64
push eax
call fcn.0045d4a0
mov eax, dword [ebp - 0x10c0]
push 0
cwde
push 0x192319
sub eax, 0xffffff80
push str._____0__59_
push eax
movsx eax, si
add eax, 0x62
jmp 0x52d00a
push 0x100
lea eax, [ebp - 0x128]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
cmp byte [ebp - 0x10b9], 0
je 0x52cf64
movsx ecx, word [ebp + 8]
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x52cf64
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x52cf64
mov eax, dword [ebp - 0x10c0]
movsx edx, word [ebp + 0xc]
movsx ecx, ax
mov dword [ebp - 0x10c4], ecx
lea eax, [ecx + 0x7d]
cmp edx, eax
jl 0x52cf64
lea eax, [ecx + 0x8b]
cmp edx, eax
jg 0x52cf64
push str.DRAW_DIALOGBOX_SUMMONEVENT56
lea ecx, [ebp - 0x578]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x578]
mov dword [ebp - 4], 0x8f
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x10c4]
mov ecx, edi
add eax, 0x7d
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x578]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov ecx, dword [ebp - 0x10d0]
movzx eax, word [ecx + 0x72]
push eax
lea eax, [ebp - 0x128]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x128]
push 0
push 0x320004
push eax
mov eax, dword [ebp - 0x10c4]
add eax, 0x7d
push eax
jmp 0x52d004
push str.DRAW_DIALOGBOX_SUMMONEVENT56
lea ecx, [ebp - 0x590]
call fcn.0040f9f0
lea eax, [ebp - 0x590]
mov dword [ebp - 4], 0x90
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov edx, eax
cmp dword [edx + 0x14], 0xf
jbe 0x52cf96
mov edx, dword [edx]
mov eax, dword [ebp - 0x10c0]
mov ecx, edi
push 0
movsx esi, ax
mov eax, dword [ebp - 0x10dc]
add esi, 0x7d
push 0x320004
push edx
cwde
push esi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x590]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov ecx, dword [ebp - 0x10d0]
movzx eax, word [ecx + 0x72]
push eax
lea eax, [ebp - 0x128]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push 0
push 0x320004
lea eax, [ebp - 0x128]
push eax
push esi
mov esi, dword [ebp - 0x10dc]
movsx eax, si
add eax, 0x64
push eax
mov ecx, edi
call fcn.0045d450
movsx eax, word [edi + 0x144cd0]
sub eax, 9
je 0x52d201
sub eax, 0xb
je 0x52d0fb
sub eax, 1
je 0x52d0fb
push str.DRAW_DIALOGBOX_SUMMONEVENT57
lea ecx, [ebp - 0x5a8]
call fcn.0040f9f0
lea eax, [ebp - 0x5a8]
mov dword [ebp - 4], 0x96
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov edx, eax
cmp dword [edx + 0x14], 0xf
jbe 0x52d066
mov edx, dword [edx]
mov eax, dword [ebp - 0x10c0]
mov ecx, edi
push 0
movsx esi, ax
mov eax, dword [ebp - 0x10dc]
add esi, 0x8c
push 0x320004
push edx
cwde
push esi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x5a8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0x100
lea eax, [ebp - 0x128]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x10d0]
movzx eax, word [eax + 0x74]
push eax
lea eax, [ebp - 0x128]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
lea eax, [ebp - 0x128]
mov ecx, edi
push 0
push 0x320004
push eax
mov eax, dword [ebp - 0x10dc]
cwde
push esi
add eax, 0x64
push eax
call fcn.0045d450
jmp case.default.0x526fba
push 0x1c
xorps xmm0, xmm0
mov dword [ebp - 0x388], 0
push str.DRAW_DIALOGBOX_SUMMONEVENT57
lea ecx, [ebp - 0x398]
mov dword [ebp - 0x384], 0
movups xmmword [ebp - 0x398], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x398]
mov dword [ebp - 4], 0x95
push eax
lea eax, [ebp - 0x11bc]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x52d157
mov ecx, dword [ecx]
mov eax, dword [ebp - 0x10c0]
push 0
cwde
push 0xffffff
mov dword [ebp - 0x10e4], eax
add eax, 0x8c
push ecx
push eax
mov dword [ebp - 0x10cc], eax
mov ecx, edi
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x398]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov ecx, edi
call fcn.004973c0
cmp eax, 0x36
jne 0x52d1ae
cmp word [edi + 0x144cd0], 0x15
jne 0x52d1d6
push 0
push 0
push 2
push 0
push 0xffffff
lea eax, [edi + 0x18d63e]
mov ecx, edi
push eax
push dword [ebp - 0x10cc]
movsx eax, si
add eax, 0x64
push eax
call fcn.0045d4a0
mov eax, dword [ebp - 0x10e4]
mov ecx, edi
push 0
push 0x192319
add eax, 0x8f
push str._____0__59_
push eax
movsx eax, si
add eax, 0x62
push eax
call fcn.0045d450
jmp case.default.0x526fba
push 0x100
lea eax, [ebp - 0x128]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
cmp byte [ebp - 0x10b9], 0
je 0x52d325
movsx ecx, word [ebp + 8]
movsx eax, si
add eax, 0x1e
cmp ecx, eax
jle 0x52d325
movsx eax, si
add eax, 0xf0
cmp ecx, eax
jge 0x52d325
mov eax, dword [ebp - 0x10c0]
movsx edx, word [ebp + 0xc]
movsx ecx, ax
mov dword [ebp - 0x10c4], ecx
lea eax, [ecx + 0x8c]
cmp edx, eax
jl 0x52d325
lea eax, [ecx + 0x9a]
cmp edx, eax
jg 0x52d325
push str.DRAW_DIALOGBOX_SUMMONEVENT57
lea ecx, [ebp - 0x5c0]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0x5c0]
mov dword [ebp - 4], 0x93
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x10c4]
mov ecx, edi
add eax, 0x8c
push eax
movsx eax, si
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x5c0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov ecx, dword [ebp - 0x10d0]
movzx eax, word [ecx + 0x74]
push eax
lea eax, [ebp - 0x128]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x128]
mov ecx, edi
push 0
push 0x320004
push eax
mov eax, dword [ebp - 0x10c4]
add eax, 0x8c
push eax
movsx eax, si
add eax, 0x64
push eax
call fcn.0045d450
jmp case.default.0x526fba
push str.DRAW_DIALOGBOX_SUMMONEVENT57
lea ecx, [ebp - 0x5d8]
call fcn.0040f9f0
lea eax, [ebp - 0x5d8]
mov dword [ebp - 4], 0x94
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov edx, eax
cmp dword [edx + 0x14], 0xf
jbe 0x52d357
mov edx, dword [edx]
mov eax, dword [ebp - 0x10c0]
mov ecx, edi
push 0
movsx esi, ax
mov eax, dword [ebp - 0x10dc]
add esi, 0x8c
push 0x320004
push edx
cwde
push esi
add eax, 0x19
push eax
call fcn.0045d450
lea ecx, [ebp - 0x5d8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov ecx, dword [ebp - 0x10d0]
movzx eax, word [ecx + 0x74]
push eax
lea eax, [ebp - 0x128]
push 0x5c813c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x128]
mov ecx, edi
push 0
push 0x320004
push eax
mov eax, dword [ebp - 0x10dc]
cwde
push esi
add eax, 0x64
push eax
call fcn.0045d450
jmp case.default.0x526fba
push str.DRAW_DIALOGBOX_SUMMONEVENT35
lea ecx, [ebp - 0x5f0]
call fcn.0040f9f0
lea eax, [ebp - 0x5f0]
mov dword [ebp - 4], 0x97
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov edx, eax
cmp dword [edx + 0x14], 0xf
jbe 0x52d40b
mov edx, dword [edx]
mov eax, dword [ebp - 0x10c0]
push 0
push 0xc8
push 0xc8
movsx eax, ax
push 0xdc
add eax, 0x2d
movsx ecx, si
mov dword [ebp - 0x10c4], eax
add ecx, 0xf0
push edx
push dword [ebp - 0x10c4]
movsx eax, si
add eax, 0x19
mov dword [ebp - 0x10d4], ecx
push ecx
push eax
mov ecx, edi
mov dword [ebp - 0x10c8], eax
call fcn.0045d060
lea ecx, [ebp - 0x5f0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_SUMMONEVENT35
lea ecx, [ebp - 0x620]
call fcn.0040f9f0
lea eax, [ebp - 0x620]
mov dword [ebp - 4], 0x98
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
cmp dword [eax + 0x14], 0xf
jbe 0x52d49b
mov eax, dword [eax]
push 0
push 0xc8
push 0xc8
push 0xdc
push eax
push dword [ebp - 0x10c4]
movsx eax, si
mov ecx, edi
add eax, 0xf1
push eax
movsx eax, si
add eax, 0x1a
push eax
call fcn.0045d060
lea ecx, [ebp - 0x620]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_SUMMONEVENT36
lea ecx, [ebp - 0x638]
call fcn.0040f9f0
lea eax, [ebp - 0x638]
mov dword [ebp - 4], 0x99
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
cmp dword [eax + 0x14], 0xf
jbe 0x52d50c
mov eax, dword [eax]
push 0
push 0
push 0
push 0
push eax
mov eax, dword [ebp - 0x10c0]
mov ecx, edi
cwde
add eax, 0x5f
push eax
push dword [ebp - 0x10d4]
push dword [ebp - 0x10c8]
call fcn.0045d060
lea ecx, [ebp - 0x638]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_SUMMONEVENT37
lea ecx, [ebp - 0x650]
call fcn.0040f9f0
lea eax, [ebp - 0x650]
mov dword [ebp - 4], 0x9a
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
cmp dword [eax + 0x14], 0xf
jbe 0x52d575
mov eax, dword [eax]
push 0
push 0
push 0
push 0
push eax
mov eax, dword [ebp - 0x10c0]
mov ecx, edi
cwde
add eax, 0x6e
push eax
push dword [ebp - 0x10d4]
push dword [ebp - 0x10c8]
call fcn.0045d060
lea ecx, [ebp - 0x650]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
cmp byte [ebp - 0x10b9], 0
je 0x52d62a
movsx ecx, word [ebp + 8]
movsx eax, si
add eax, 0x1e
mov dword [ebp - 0x10d4], ecx
mov dword [ebp - 0x10cc], eax
cmp ecx, eax
jle 0x52d62a
movsx eax, si
add eax, 0x68
cmp ecx, eax
jge 0x52d62a
mov eax, dword [ebp - 0x10c0]
movsx edx, word [ebp + 0xc]
cwde
mov dword [ebp - 0x10c8], edx
lea ecx, [eax + 0x124]
mov dword [ebp - 0x10c4], ecx
cmp edx, ecx
jle 0x52d62a
mov eax, dword [ebp - 0x10c0]
cwde
add eax, 0x138
cmp edx, eax
jge 0x52d62a
push 0
push 0
push 0x13
push ecx
push dword [ebp - 0x10cc]
mov ecx, edi
push 0x47
call fcn.0043d1d0
mov ecx, dword [ebp - 0x10c4]
jmp 0x52d679
mov ecx, dword [ebp - 0x10c0]
movsx edx, word [ebp + 8]
push 0
push 0
movsx ecx, cx
add ecx, 0x124
movsx eax, si
push 0x12
push ecx
add eax, 0x1e
mov dword [ebp - 0x10d4], edx
movsx edx, word [ebp + 0xc]
push eax
mov dword [ebp - 0x10c4], ecx
mov ecx, edi
push 0x47
mov dword [ebp - 0x10c8], edx
call fcn.0043d1d0
cmp byte [ebp - 0x10b9], 0
mov ecx, dword [ebp - 0x10c4]
je 0x52d6c7
movsx edx, si
add edx, 0x9a
cmp dword [ebp - 0x10d4], edx
jle 0x52d6c7
movsx eax, si
add eax, 0xe4
cmp dword [ebp - 0x10d4], eax
jge 0x52d6c7
cmp dword [ebp - 0x10c8], ecx
jle 0x52d6c7
mov eax, dword [ebp - 0x10c0]
cwde
add eax, 0x138
cmp dword [ebp - 0x10c8], eax
jge 0x52d6c7
push 0
push 0
mov eax, 3
push eax
push ecx
push edx
jmp 0x52db8e
push 0
push 0
mov eax, 2
movsx edx, si
push eax
add edx, 0x9a
push ecx
push edx
jmp 0x52db8e
push str.DRAW_DIALOGBOX_SUMMONEVENT62
lea ecx, [ebp - 0x668]
call fcn.0040f9f0
lea eax, [ebp - 0x668]
mov dword [ebp - 4], 0x9b
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov edx, eax
cmp dword [edx + 0x14], 0xf
jbe 0x52d713
mov edx, dword [edx]
mov eax, dword [ebp - 0x10c0]
push 0
push 0xc8
push 0xc8
movsx eax, ax
push 0xdc
add eax, 0x2d
movsx ecx, si
mov dword [ebp - 0x10c4], eax
add ecx, 0xf0
push edx
push dword [ebp - 0x10c4]
movsx eax, si
add eax, 0x19
mov dword [ebp - 0x10d4], ecx
push ecx
push eax
mov ecx, edi
mov dword [ebp - 0x10c8], eax
call fcn.0045d060
lea ecx, [ebp - 0x668]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_SUMMONEVENT62
lea ecx, [ebp - 0x680]
call fcn.0040f9f0
lea eax, [ebp - 0x680]
mov dword [ebp - 4], 0x9c
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
cmp dword [eax + 0x14], 0xf
jbe 0x52d7a3
mov eax, dword [eax]
push 0
push 0xc8
push 0xc8
push 0xdc
push eax
push dword [ebp - 0x10c4]
movsx eax, si
mov ecx, edi
add eax, 0xf1
push eax
movsx eax, si
add eax, 0x1a
push eax
call fcn.0045d060
lea ecx, [ebp - 0x680]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_SUMMONEVENT36
lea ecx, [ebp - 0x698]
call fcn.0040f9f0
lea eax, [ebp - 0x698]
mov dword [ebp - 4], 0x9d
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
cmp dword [eax + 0x14], 0xf
jbe 0x52d814
mov eax, dword [eax]
push 0
push 0
push 0
push 0
push eax
mov eax, dword [ebp - 0x10c0]
mov ecx, edi
cwde
add eax, 0x5f
push eax
push dword [ebp - 0x10d4]
push dword [ebp - 0x10c8]
call fcn.0045d060
lea ecx, [ebp - 0x698]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_SUMMONEVENT63
lea ecx, [ebp - 0x6b0]
call fcn.0040f9f0
lea eax, [ebp - 0x6b0]
mov dword [ebp - 4], 0x9e
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
cmp dword [eax + 0x14], 0xf
jbe 0x52d87d
mov eax, dword [eax]
push 0
push 0
push 0
push 0
push eax
mov eax, dword [ebp - 0x10c0]
mov ecx, edi
cwde
add eax, 0x6e
push eax
push dword [ebp - 0x10d4]
push dword [ebp - 0x10c8]
call fcn.0045d060
lea ecx, [ebp - 0x6b0]
jmp 0x52d5a2
push str.DRAW_DIALOGBOX_SUMMONEVENT66
lea ecx, [ebp - 0x6c8]
call fcn.0040f9f0
lea eax, [ebp - 0x6c8]
mov dword [ebp - 4], 0x9f
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov edx, eax
cmp dword [edx + 0x14], 0xf
jbe 0x52d8e1
mov edx, dword [edx]
mov eax, dword [ebp - 0x10c0]
push 0
push 0xc8
push 0xc8
movsx eax, ax
push 0xdc
add eax, 0x2d
movsx ecx, si
mov dword [ebp - 0x10c4], eax
add ecx, 0xf0
push edx
push dword [ebp - 0x10c4]
movsx eax, si
add eax, 0x19
mov dword [ebp - 0x10d4], ecx
push ecx
push eax
mov ecx, edi
mov dword [ebp - 0x10c8], eax
call fcn.0045d060
lea ecx, [ebp - 0x6c8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_SUMMONEVENT66
lea ecx, [ebp - 0x6e0]
call fcn.0040f9f0
lea eax, [ebp - 0x6e0]
mov dword [ebp - 4], 0xa0
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
cmp dword [eax + 0x14], 0xf
jbe 0x52d971
mov eax, dword [eax]
push 0
push 0xc8
push 0xc8
push 0xdc
push eax
push dword [ebp - 0x10c4]
movsx eax, si
mov ecx, edi
add eax, 0xf1
push eax
movsx eax, si
add eax, 0x1a
push eax
call fcn.0045d060
lea ecx, [ebp - 0x6e0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_SUMMONEVENT36
lea ecx, [ebp - 0x6f8]
call fcn.0040f9f0
lea eax, [ebp - 0x6f8]
mov dword [ebp - 4], 0xa1
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
cmp dword [eax + 0x14], 0xf
jbe 0x52d9e2
mov eax, dword [eax]
push 0
push 0
push 0
push 0
push eax
mov eax, dword [ebp - 0x10c0]
mov ecx, edi
cwde
add eax, 0x5f
push eax
push dword [ebp - 0x10d4]
push dword [ebp - 0x10c8]
call fcn.0045d060
lea ecx, [ebp - 0x6f8]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_SUMMONEVENT67
lea ecx, [ebp - 0x710]
call fcn.0040f9f0
lea eax, [ebp - 0x710]
mov dword [ebp - 4], 0xa2
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
cmp dword [eax + 0x14], 0xf
jbe 0x52da4b
mov eax, dword [eax]
push 0
push 0
push 0
push 0
push eax
mov eax, dword [ebp - 0x10c0]
mov ecx, edi
cwde
add eax, 0x6e
push eax
push dword [ebp - 0x10d4]
push dword [ebp - 0x10c8]
call fcn.0045d060
lea ecx, [ebp - 0x710]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
cmp byte [ebp - 0x10b9], 0
je 0x52daf4
movsx ecx, word [ebp + 8]
movsx eax, si
add eax, 0x1e
mov dword [ebp - 0x10cc], eax
cmp ecx, eax
jle 0x52daf4
movsx eax, si
add eax, 0x68
cmp ecx, eax
jge 0x52daf4
mov eax, dword [ebp - 0x10c0]
movsx edx, word [ebp + 0xc]
cwde
lea ecx, [eax + 0x124]
mov dword [ebp - 0x10c4], ecx
cmp edx, ecx
jle 0x52daf4
mov eax, dword [ebp - 0x10c0]
cwde
add eax, 0x138
cmp edx, eax
jge 0x52daf4
push 0
push 0
push 0x13
push ecx
push dword [ebp - 0x10cc]
mov ecx, edi
push 0x47
call fcn.0043d1d0
mov ecx, dword [ebp - 0x10c4]
jmp 0x52db2f
mov ecx, dword [ebp - 0x10c0]
push 0
push 0
movsx ecx, cx
add ecx, 0x124
movsx eax, si
push 0x12
push ecx
add eax, 0x1e
mov dword [ebp - 0x10c4], ecx
push eax
push 0x47
mov ecx, edi
call fcn.0043d1d0
cmp byte [ebp - 0x10b9], 0
mov ecx, dword [ebp - 0x10c4]
je 0x52db7e
movsx edx, word [ebp + 8]
mov edi, dword [ebp - 0x10ec]
movsx eax, si
add eax, 0x9a
mov dword [ebp - 0x10cc], eax
cmp edx, eax
jle 0x52db7e
movsx eax, si
add eax, 0xe4
cmp edx, eax
jge 0x52db7e
movsx edx, word [ebp + 0xc]
cmp edx, ecx
jle 0x52db7e
mov eax, dword [ebp - 0x10c0]
cwde
add eax, 0x138
cmp edx, eax
jge 0x52db7e
push 0
push 0
push 3
push ecx
push dword [ebp - 0x10cc]
jmp 0x52db8e
push 0
push 0
movsx eax, si
push 2
add eax, 0x9a
push ecx
push eax
mov ecx, edi
push 0x47
call fcn.0043d1d0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005aa550
mov esp, ebp
pop ebp
ret 0x10
call fcn.005ac169
nop dword [eax]
sbb ebp, dword [esi + 0x52]
add byte [edi + ebp*2], bh
push edx
add byte [eax], al
add byte [eax], al
add byte [ecx], al
add dword [ecx], eax
add dword [eax], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add byte [esi - 112], ah
shr dword [edi + 82], 0
sub al, 112
push edx
add byte [ebx + 0x71], ch
push edx
add byte [edx + 0x14005272], ch
jae 0x52dc41
add byte [edi + 0x73], bh
push edx
add byte [ebx], dh
adc dword [edx], case.0x526fba.2
cdq
mov dword [-1306853294], eax
push edx
add byte [ecx + 0x1b0052a3], bl
mov dl, 0x52
add cl, bh
stc
mov ebx, 0xd3d90052
push edx
add cl, ah
salc
push edx
add byte [edi + 0x52d8], ch
add dword [edx], eax
add eax, dword [eax + 151521030]
or dword [ecx], ecx
or dword [ecx], ecx
or cl, byte [edx]
or cl, byte [edx]
or cl, byte [edx]
or cl, byte [edx]
or cl, byte [edx]
or cl, byte [edx]
or cl, byte [ebx]
or al, 13
nop
cmp eax, 0xc5005277
ja 5430413
add byte [esi + 0x78], bh
push edx
add byte [edi], dh
jns 0x52dc95
add al, dh
jns 0x52dc99
add byte [ecx + 0x6200527a], ch
jnp 0x52dca1
add byte [ebx], bl
jl 0x52dca5
add byte [ebx + 0x5900527c], ah
jge 0x52dcad
add byte [eax - 0x7e], bl
push edx
add ah, bl
adc byte [edx], 0x60
adc dword [edx], 0xffffffe4
adc dword [edx], 0x68
test byte [edx], dl
in al, dx
test byte [edx], dl
jo 0x52dbfb
push edx
add ah, dh
test dword [edx], edx
js 0x52dc04
push edx
add cl, bh
xchg byte [edx], dl
int3
int3
add byte [ecx], ah
add byte [eax], al
add byte [eax - 0x7f], dl
in al, dx
mov word [eax], es
add byte [eax], al
lds ecx, [ecx + 0x5756f045]