Function at 0x4297d0
Capabilities:
Log keystrokes via polling
Read file on windows
Resolve function by parsing pe exports
Resume thread
Suspend thread
Write file on windows

Disassembly:
sub esp, 0x660
mov eax, dword [0x4c2398]
push ebx
push ebp
xor edx, edx
cmp eax, edx
push esi
push edi
mov dword [esp + 0x28], edx
jbe 0x4303b2
mov ebp, dword [esp + 0x674]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
mov ebx, dword [sym.imp.USER32.dll_ClientToScreen]
inc dword [esp + 0x28]
mov eax, dword [ebp + 0x18]
cmp eax, edx
je 0x4303b2
test al, 8
jne 0x4303b2
mov eax, dword [ebp + 0x10]
mov dword [ebp + 0x14], eax
mov ecx, dword [ebp + 0x10]
mov ax, word [ecx]
add ecx, 2
mov dword [ebp + 0x10], ecx
mov word [ebp + 0x20], ax
mov dword [esp + 0x68], eax
and eax, 0xffff
cmp eax, 0x6f
jg 0x429f2e
je 0x429f20
cmp eax, 0x6b
ja case.0x43026e.65053
xor ecx, ecx
mov cl, byte [eax + 0x430468]
jmp dword [ecx*4 + 0x4303c0]
push ebp
mov dword [ebp + 0x18], 0
call fcn.004169e0
add esp, 4
mov ecx, ebp
call fcn.004164d0
test eax, eax
mov dword [ebp + 0x24], eax
jne 0x430392
jmp 0x430345
mov ecx, ebp
call fcn.004164d0
mov esi, eax
cmp esi, 0x3e8
ja case.0x43026e.65053
mov ecx, ebp
call fcn.004164d0
push eax
lea edx, [esp + 0x46c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
call fcn.004111f0
lea eax, [esp + 0x468]
push eax
push esi
call fcn.00405b00
add esp, 8
test eax, eax
je case.0x43026e.65053
mov ecx, esi
shl ecx, 7
add ecx, esi
lea eax, [esi + ecx*4]
shl eax, 3
mov dword [eax + 0x914f94], 0
mov dword [eax + 0x915f5c], 0x3e8
push ebp
mov dword [eax + 0x914f78], 1
call fcn.004169e0
add esp, 4
jmp 0x430345
mov ecx, ebp
call fcn.004164d0
mov esi, eax
cmp esi, 0x3e8
ja case.0x43026e.65053
mov ecx, ebp
call fcn.004164d0
push eax
lea edx, [esp + 0x570]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
call fcn.004111f0
lea eax, [esp + 0x56c]
push eax
push esi
call fcn.00405b00
add esp, 8
jmp 0x42db9c
mov edx, dword [0x4ffc34]
mov ecx, ebp
call fcn.00415f80
jmp 0x430345
mov ecx, ebp
call fcn.004164d0
mov ecx, dword [0x4ffc34]
test ecx, ecx
je 0x42998c
test eax, eax
jne 0x430345
mov dword [0x4ffc28], 1
jmp 0x430345
test eax, eax
je 0x430345
mov dword [0x4ffc28], 1
jmp 0x430345
mov ecx, ebp
call fcn.004164d0
cmp eax, 0x3e8
ja case.0x43026e.65053
mov ecx, eax
shl ecx, 7
mov edx, eax
add ecx, eax
shl edx, 9
add edx, eax
lea ecx, [eax + ecx*4]
mov eax, dword [edx*4 + 0x6cd208]
shl ecx, 3
cmp eax, 0xffffffff
lea esi, [edx*4 + 0x6cd208]
mov dword [ecx + 0x914f94], 0
mov dword [ecx + 0x915f5c], 0x3e8
je 0x430345
push esi
call fcn.0043e3e0
mov eax, dword [esi]
add esp, 4
cmp eax, 0xffffffff
jne 0x4299f4
jmp 0x430345
push ebp
call fcn.00416a20
add esp, 4
jmp 0x42c252
mov ecx, ebp
call fcn.004164d0
cmp eax, 0x3e8
ja case.0x43026e.65053
mov ecx, eax
shl ecx, 7
add ecx, eax
lea eax, [eax + ecx*4]
shl eax, 3
mov edx, dword [eax + 0x914f6c]
mov dword [eax + 0x914f70], edx
mov dword [eax + 0x914f94], 0
mov dword [eax + 0x915f5c], 0x3e8
push ebp
mov dword [eax + 0x914f78], 1
call fcn.004169e0
add esp, 4
jmp 0x430345
mov ecx, ebp
call fcn.004164d0
cmp eax, 0x3e8
ja case.0x43026e.65053
mov ecx, eax
shl ecx, 7
add ecx, eax
lea eax, [eax + ecx*4]
shl eax, 3
mov dword [eax + 0x914f78], 0
mov eax, dword [eax + 0x914f90]
test eax, eax
je 0x429b1f
push eax
call fcn.0040d8f0
add esp, 4
jmp 0x430345
push ebp
call fcn.00416b40
add esp, 4
jmp 0x42c252
mov ecx, ebp
call fcn.004164d0
cmp eax, 0x3e8
ja case.0x43026e.65053
cmp dword [ebp], eax
je case.0x43026e.65053
mov edx, eax
shl edx, 7
add edx, eax
lea esi, [eax + edx*4]
shl esi, 3
mov edi, dword [esi + 0x914f90]
test edi, edi
je 0x429b15
cmp dword [edi + 0x10], 1
jne 0x430345
mov eax, dword [edi]
push eax
call dword [sym.imp.KERNEL32.dll_SuspendThread]
mov eax, 3
mov dword [edi + 0x10], eax
mov dword [esi + 0x914f78], eax
jmp 0x430345
mov dword [esi + 0x914f78], 0
push ebp
call fcn.004169e0
add esp, 4
jmp 0x430345
mov ecx, ebp
call fcn.004164d0
cmp eax, 0x3e8
ja case.0x43026e.65053
mov ecx, eax
shl ecx, 7
add ecx, eax
lea eax, [eax + ecx*4]
shl eax, 3
mov ecx, dword [eax + 0x914f64]
test ecx, ecx
je case.0x43026e.65053
mov dword [eax + 0x914f78], 1
mov esi, dword [eax + 0x914f90]
test esi, esi
je 0x429b1f
cmp dword [esi + 0x10], 3
jne 0x430345
mov edx, dword [esi]
push edx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
mov dword [esi + 0x10], 1
jmp 0x430345
mov ecx, ebp
call fcn.004164d0
cmp eax, 0x3e8
ja case.0x43026e.65053
mov ecx, eax
shl ecx, 7
add ecx, eax
lea edx, [eax + ecx*4]
mov edx, dword [edx*8 + 0x914f78]
mov ecx, ebp
call fcn.00415f80
jmp 0x430345
mov edx, dword [ebp + 4]
mov ecx, ebp
call fcn.00415f80
jmp 0x430345
mov edx, dword [ebp]
mov ecx, ebp
call fcn.00415f80
jmp 0x430345
mov ecx, ebp
call fcn.004164d0
mov ecx, eax
shl ecx, 7
add ecx, eax
lea edx, [eax + ecx*4]
lea edx, [edx*8 + 0x914f60]
mov ecx, ebp
call fcn.00415f80
jmp 0x430345
mov ecx, ebp
call fcn.004164d0
mov ecx, ebp
mov edi, eax
call fcn.004164d0
mov ecx, ebp
mov esi, eax
call fcn.004164d0
mov edx, esi
shl edx, 7
add edx, esi
lea ecx, [edi + edi*2]
shl ecx, 3
lea edx, [esi + edx*4]
lea edi, [ecx + 0x8e3b08]
shl edx, 3
mov dword [edx + 0x914f90], edi
mov dword [ecx + 0x8e3b0c], esi
push edi
mov dword [ecx + 0x8e3b14], eax
mov dword [edx + 0x914f78], 1
call fcn.0040d940
add esp, 4
jmp 0x430345
mov edx, fcn.004137e0
mov ecx, ebp
call fcn.00415f80
jmp 0x430345
mov edx, fcn.00432680
mov ecx, ebp
call fcn.00415f80
jmp 0x430345
mov ecx, dword [ebp + 0x1004]
lea eax, [ecx + ecx*2]
lea eax, [eax + eax*4]
shl eax, 5
sub eax, ecx
lea eax, [eax + eax*2]
mov edx, dword [eax*4 + 0x504e2c]
lea esi, [eax*4 + 0x504810]
mov ecx, ebp
call fcn.00415f80
mov edx, dword [esi + 0x620]
mov ecx, ebp
call fcn.00415f80
mov edx, dword [esi + 0x624]
mov ecx, ebp
call fcn.00415f80
mov edx, dword [esi + 0x628]
mov ecx, ebp
call fcn.00415f80
jmp 0x430345
mov ecx, dword [ebp + 0x1004]
lea eax, [ecx + ecx*2]
lea eax, [eax + eax*4]
shl eax, 5
sub eax, ecx
lea ecx, [eax + eax*2]
mov edx, dword [ecx*4 + 0x504e28]
mov ecx, ebp
call fcn.00415f80
jmp 0x430345
mov ecx, dword [ebp + 0x1004]
lea eax, [ecx + ecx*2]
lea eax, [eax + eax*4]
shl eax, 5
sub eax, ecx
lea eax, [eax + eax*2]
mov esi, dword [eax*4 + 0x504978]
mov cl, byte [esi]
cmp cl, 0x81
jb 0x429d30
cmp cl, 0x9f
jbe 0x429d29
cmp cl, 0xe0
jb 0x429d30
cmp cl, 0xfc
ja 0x429d30
mov edx, 1
jmp 0x429d32
xor edx, edx
lea edx, [edx + esi + 1]
mov ecx, edx
sub ecx, esi
mov ebx, ecx
shr ecx, 2
mov dword [esp + 0x10], 0
lea edi, [esp + 0x10]
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov dword [eax*4 + 0x504978], edx
mov edx, dword [esp + 0x10]
mov ecx, ebp
call fcn.00415f80
jmp 0x430345
mov edx, dword [0x6ccdf8]
mov ecx, ebp
call fcn.00415f80
jmp 0x430345
push 0
lea edx, [esp + 0x78]
push edx
push ebp
call fcn.00416c40
mov edx, dword [esp + 0x80]
add esp, 0xc
mov ecx, ebp
call fcn.00415f80
jmp 0x430345
lea eax, [esp + 0x5c]
push eax
push 0
push ebp
call fcn.00416c40
mov edx, dword [esp + 0x68]
add esp, 0xc
mov ecx, ebp
call fcn.00415f80
jmp 0x430345
push ebp
call fcn.004215d0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00421610
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00421640
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00421660
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00421690
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004216b0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004216c0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004216f0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00421710
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00421730
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00425af0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00425b00
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00425b10
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00425a60
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00425a70
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00425a80
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00416da0
add esp, 4
jmp 0x42c252
cmp eax, 0x5b5
jg 0x42d529
je 0x42d513
add eax, 0xffffff88
cmp eax, 0x53c
ja case.0x43026e.65053
jmp dword [eax*4 + 0x4304d4]
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00420b40
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
cmp eax, 0x5e5
jg 0x42ddc4
je 0x42ddae
add eax, 0xfffffa4a
cmp eax, 0x2b
ja case.0x43026e.65053
jmp dword [eax*4 + 0x4319d8]
mov ecx, ebp
call fcn.004164d0
mov ecx, dword [0x4c23b0]
test ecx, ecx
je case.0x43026e.65053
lea ecx, [eax*8]
sub ecx, eax
lea ecx, [ecx + ecx*2]
lea esi, [eax + ecx*2]
shl esi, 3
lea edx, [esi + 0x4f3ec0]
push edx
call fcn.0040bee0
add esp, 4
mov dword [esi + 0x4f3ed8], 0xffffffff
jmp 0x430345
mov ecx, ebp
call fcn.004164d0
mov ecx, dword [0x4c23b0]
test ecx, ecx
je case.0x43026e.65053
mov ecx, dword [0xd09e10]
test ecx, ecx
jne 0x430345
lea ecx, [eax*8]
sub ecx, eax
lea ecx, [ecx + ecx*2]
lea edx, [eax + ecx*2]
lea eax, [edx*8 + 0x4f3ec0]
push eax
call fcn.0040be80
add esp, 4
jmp 0x430345
mov ecx, ebp
call fcn.004164d0
mov ecx, dword [0x4c23b0]
test ecx, ecx
je case.0x43026e.65053
lea ecx, [eax*8]
sub ecx, eax
lea ecx, [ecx + ecx*2]
lea edx, [eax + ecx*2]
lea eax, [edx*8 + 0x4f3ec0]
push eax
call fcn.0040bc90
add esp, 4
jmp 0x430345
mov ecx, ebp
call fcn.004164d0
mov ecx, dword [0x4c23b0]
test ecx, ecx
je case.0x43026e.65053
lea ecx, [eax*8]
sub ecx, eax
lea ecx, [ecx + ecx*2]
lea edx, [eax + ecx*2]
lea eax, [edx*8 + 0x4f3ec0]
push eax
call fcn.0040bf50
add esp, 4
mov edx, eax
mov ecx, ebp
call fcn.00415f80
jmp 0x430345
mov ecx, ebp
call fcn.004164d0
mov ecx, dword [0x4c23b0]
test ecx, ecx
je case.0x43026e.65053
lea ecx, [eax*8]
sub ecx, eax
lea ecx, [ecx + ecx*2]
lea edx, [eax + ecx*2]
lea eax, [edx*8 + 0x4f3ec0]
push eax
call fcn.0040bfd0
add esp, 4
mov edx, eax
mov ecx, ebp
call fcn.00415f80
jmp 0x430345
mov ecx, ebp
call fcn.004164d0
mov esi, eax
mov eax, dword [0x4c23b0]
test eax, eax
je case.0x43026e.65053
mov ecx, ebp
call fcn.004164d0
push eax
lea eax, [esi*8]
sub eax, esi
lea ecx, [eax + eax*2]
lea edx, [esi + ecx*2]
lea eax, [edx*8 + 0x4f3ec0]
push eax
call fcn.0040bf90
add esp, 8
jmp 0x430345
mov ecx, ebp
call fcn.004164d0
mov ecx, dword [0x4c23b0]
test ecx, ecx
je case.0x43026e.65053
lea ecx, [eax*8]
sub ecx, eax
lea ecx, [ecx + ecx*2]
lea edx, [eax + ecx*2]
mov edx, dword [edx*8 + 0x4f3ed8]
mov ecx, ebp
call fcn.00415f80
jmp 0x430345
mov ecx, ebp
call fcn.004164d0
lea ecx, [eax*8]
sub ecx, eax
lea ecx, [ecx + ecx*2]
lea esi, [eax + ecx*2]
shl esi, 3
mov edx, dword [esi + 0x4f3ee8]
mov ecx, ebp
call fcn.00415f80
mov edx, dword [esi + 0x4f3eec]
mov ecx, ebp
call fcn.00415f80
jmp 0x430345
mov ecx, ebp
call fcn.004164d0
mov ecx, ebp
mov edi, eax
call fcn.004164d0
mov ebx, eax
mov eax, dword [0x4c23b0]
test eax, eax
je case.0x43026e.65053
lea eax, [edi*8]
sub eax, edi
lea edx, [eax + eax*2]
lea esi, [edi + edx*2]
shl esi, 3
push ebx
lea eax, [esi + 0x4f3ef8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, ebp
call fcn.004164d0
mov ecx, ebp
call fcn.004164d0
lea ecx, [eax + eax*2]
shl ecx, 4
mov eax, dword [ecx + 0x8c9ae0]
test eax, eax
mov dword [esi + 0x4f3ec4], eax
je case.0x43026e.65053
mov eax, dword [0x4c23b0]
test eax, eax
je case.0x43026e.65053
push DirectSoundCreate
push ebx
push edi
jmp 0x42db94
cmp dword [0x4c23b0], edx
je case.0x43026e.65053
mov ecx, ebp
call fcn.004164d0
cmp eax, 0xffffffff
je 0x430345
lea ecx, [eax*8]
sub ecx, eax
lea edx, [ecx + ecx*2]
lea eax, [eax + edx*2]
shl eax, 3
mov ecx, dword [eax + 0x4f3ec8]
test ecx, ecx
je 0x42d810
lea eax, [eax + 0x4f3ec0]
push eax
call fcn.0040bc90
add esp, 4
mov ecx, ebp
call fcn.004164d0
cmp eax, 0xffffffff
jne 0x42d7e5
jmp 0x430345
mov ecx, ebp
call fcn.004164d0
lea ecx, [eax*8]
sub ecx, eax
lea ecx, [ecx + ecx*2]
lea edx, [eax + ecx*2]
lea eax, [edx*8 + 0x4f3ec0]
push eax
call fcn.0040c010
add esp, 4
jmp 0x430345
mov ecx, ebp
call fcn.004164d0
lea ecx, [eax*8]
sub ecx, eax
lea ecx, [ecx + ecx*2]
lea esi, [eax + ecx*2]
shl esi, 3
lea edx, [esi + 0x4f3ec0]
push edx
call fcn.0040c010
lea eax, [esi + 0x4f3ee0]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [esp + 0x80], ecx
mov ecx, dword [eax + 8]
mov dword [esp + 0x84], edx
mov edx, dword [eax + 0xc]
lea eax, [esp + 0x80]
push eax
mov dword [esp + 0x8c], ecx
mov dword [esp + 0x90], edx
call fcn.00432600
mov edx, dword [0xd09dfc]
add esp, 8
lea ecx, [esp + 0x7c]
push ecx
push edx
call ebx
mov ecx, dword [0xd09dfc]
lea eax, [esp + 0x84]
push eax
push ecx
call ebx
mov ecx, dword [esi + 0x4f3ec4]
mov eax, dword [0x4eb8a4]
mov edx, dword [eax]
push 0
push 0x1000000
push 0
push ecx
lea ecx, [esp + 0x8c]
push ecx
push eax
call dword [edx + 0x14]
jmp 0x430345
mov ecx, ebp
call fcn.004164d0
lea ecx, [eax*8]
sub ecx, eax
lea edx, [ecx + ecx*2]
lea eax, [eax + edx*2]
lea ecx, [eax*8 + 0x4f3ec0]
push ecx
call fcn.0040c100
add esp, 4
mov edx, eax
mov ecx, ebp
call fcn.00415f80
jmp 0x430345
mov ecx, ebp
call fcn.004164d0
mov ecx, ebp
mov esi, eax
call fcn.004164d0
push eax
lea eax, [esi*8]
sub eax, esi
lea edx, [eax + eax*2]
lea eax, [esi + edx*2]
lea ecx, [eax*8 + 0x4f3ec0]
push ecx
call fcn.0040c110
add esp, 8
jmp 0x430345
push ebp
call fcn.00420c30
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
mov ecx, ebp
call fcn.004164d0
mov ecx, dword [0x4c23b0]
test ecx, ecx
je case.0x43026e.65053
mov esi, eax
shl esi, 4
add esi, eax
shl esi, 5
lea edx, [esi + 0x4f5440]
push edx
call fcn.0040c930
add esp, 4
mov dword [esi + 0x4f5530], 0xffffffff
jmp 0x430345
mov ecx, ebp
call fcn.004164d0
mov ecx, dword [0x4c23b0]
test ecx, ecx
je case.0x43026e.65053
mov ecx, dword [0xd09e10]
test ecx, ecx
jne 0x430345
mov ecx, eax
shl ecx, 4
add ecx, eax
shl ecx, 5
add ecx, 0x4f5440
push ecx
call fcn.0040ae40
add esp, 4
jmp 0x430345
mov ecx, ebp
call fcn.004164d0
mov ecx, dword [0x4c23b0]
test ecx, ecx
je case.0x43026e.65053
mov edx, eax
shl edx, 4
add edx, eax
shl edx, 5
add edx, 0x4f5440
push edx
call fcn.0040c790
add esp, 4
jmp 0x430345
mov ecx, ebp
call fcn.004164d0
mov ecx, dword [0x4c23b0]
test ecx, ecx
je case.0x43026e.65053
mov ecx, eax
shl ecx, 4
add ecx, eax
shl ecx, 5
add ecx, 0x4f5440
push ecx
call fcn.0040cb80
add esp, 4
mov edx, eax
mov ecx, ebp
call fcn.00415f80
jmp 0x430345
mov ecx, ebp
call fcn.004164d0
mov ecx, dword [0x4c23b0]
test ecx, ecx
je case.0x43026e.65053
mov edx, eax
shl edx, 4
add edx, eax
shl edx, 5
add edx, 0x4f5440
push edx
call fcn.0040cc30
add esp, 4
mov edx, eax
mov ecx, ebp
call fcn.00415f80
jmp 0x430345
mov ecx, ebp
call fcn.004164d0
mov esi, eax
mov eax, dword [0x4c23b0]
test eax, eax
je case.0x43026e.65053
mov ecx, ebp
call fcn.004164d0
push eax
mov eax, esi
shl eax, 4
add eax, esi
shl eax, 5
add eax, 0x4f5440
push eax
call fcn.0040cbc0
add esp, 8
jmp 0x430345
mov ecx, ebp
call fcn.004164d0
mov ecx, dword [0x4c23b0]
test ecx, ecx
je case.0x43026e.65053
mov ecx, eax
shl ecx, 4
add ecx, eax
shl ecx, 5
mov edx, dword [ecx + 0x4f5530]
mov ecx, ebp
call fcn.00415f80
jmp 0x430345
mov ecx, ebp
call fcn.004164d0
mov ecx, eax
shl ecx, 4
add ecx, eax
lea edx, [esp + 0x124]
shl ecx, 5
push edx
add ecx, 0x4f5440
push ecx
call fcn.0040c670
mov edx, dword [esp + 0x134]
add esp, 8
mov ecx, ebp
call fcn.00415f80
mov edx, dword [esp + 0x130]
mov ecx, ebp
call fcn.00415f80
jmp 0x430345
mov ecx, ebp
call fcn.004164d0
mov ecx, ebp
mov esi, eax
call fcn.004164d0
mov edi, eax
mov eax, dword [0x4c23b0]
test eax, eax
je case.0x43026e.65053
mov edx, esi
shl edx, 4
add edx, esi
shl edx, 5
push edi
add edx, 0x4f5558
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, ebp
call fcn.004164d0
push 1
push edi
push esi
call fcn.004077c0
add esp, 0xc
test eax, eax
je case.0x43026e.65053
jmp 0x430345
cmp dword [0x4c23b0], edx
je case.0x43026e.65053
mov ecx, ebp
call fcn.004164d0
cmp eax, 0xffffffff
je 0x430345
mov ecx, eax
shl ecx, 4
add ecx, eax
shl ecx, 5
mov eax, dword [ecx + 0x4f5444]
test eax, eax
je 0x42dbe8
lea eax, [ecx + 0x4f5440]
push eax
call fcn.0040c790
add esp, 4
mov ecx, ebp
call fcn.004164d0
cmp eax, 0xffffffff
jne 0x42dbc5
jmp 0x430345
mov ecx, ebp
call fcn.004164d0
mov ecx, ebp
mov edi, eax
call fcn.004164d0
mov ecx, ebp
mov esi, eax
call fcn.004164d0
mov ecx, ebp
mov ebx, eax
call fcn.004164d0
cmp esi, 0xffffffff
je 0x42dc2e
lea ecx, [esi + esi*2]
shl ecx, 4
mov ecx, dword [ecx + 0x8c9acc]
jmp 0x42dc30
xor ecx, ecx
mov edx, edi
shl edx, 4
push eax
add edx, edi
push ebx
shl edx, 5
push ecx
add edx, 0x4f5440
push edx
call fcn.0040cdd0
add esp, 0x10
jmp 0x430345
mov ecx, ebp
call fcn.004164d0
mov ecx, ebp
mov edi, eax
call fcn.004164d0
mov ecx, ebp
mov esi, eax
call fcn.004164d0
mov ecx, ebp
mov ebx, eax
call fcn.004164d0
cmp esi, 0xffffffff
je 0x42dc86
lea ecx, [esi + esi*2]
shl ecx, 4
mov ecx, dword [ecx + 0x8c9acc]
jmp 0x42dc88
xor ecx, ecx
mov edx, edi
shl edx, 4
push eax
add edx, edi
push ebx
shl edx, 5
push ecx
add edx, 0x4f5440
push edx
call fcn.0040cd10
add esp, 0x10
jmp 0x430345
mov ecx, ebp
call fcn.004164d0
mov ecx, eax
shl ecx, 4
add ecx, eax
shl ecx, 5
add ecx, 0x4f5440
push ecx
call fcn.0040cd50
add esp, 4
jmp 0x430345
mov ecx, ebp
call fcn.004164d0
mov edx, eax
shl edx, 4
add edx, eax
shl edx, 5
add edx, 0x4f5440
push edx
call fcn.0040cca0
add esp, 4
mov edx, eax
mov ecx, ebp
call fcn.00415f80
jmp 0x430345
mov ecx, ebp
call fcn.004164d0
mov ecx, ebp
mov esi, eax
call fcn.004164d0
push eax
mov eax, esi
shl eax, 4
add eax, esi
shl eax, 5
add eax, 0x4f5440
push eax
call fcn.0040ccb0
add esp, 8
jmp 0x430345
push ebp
call fcn.00421010
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00421040
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00421050
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00421080
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004210a0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004210c0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004210d0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
cmp eax, 0x654
jg 0x42de6e
je 0x42de58
add eax, 0xfffff9c0
cmp eax, 5
ja case.0x43026e.65053
jmp dword [eax*4 + 0x431a88]
push ebp
call fcn.004210f0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00421120
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00421180
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004211a0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004211e0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00421240
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
cmp eax, 0x780
jg 0x42e851
je 0x42e83b
add eax, 0xfffff98e
cmp eax, 0x10a
ja case.0x43026e.65053
xor ecx, ecx
mov cl, byte [eax + 0x431c38]
jmp dword [ecx*4 + 0x431aa0]
cmp dword [0xd09e20], edx
je 0x42deb1
push ebp
call fcn.00420390
jmp 0x430183
mov ecx, ebp
call fcn.004164d0
test eax, eax
je 0x42decb
push 0
call fcn.00413e70
add esp, 4
jmp 0x430345
push 1
call fcn.00414270
push 0
push 0
push 0
call fcn.00418dd0
add esp, 0x10
jmp 0x430345
mov ecx, ebp
call fcn.004164d0
mov ecx, ebp
mov esi, eax
call fcn.004164d0
test esi, esi
je 0x42df14
push eax
call fcn.00413e70
mov edx, dword [0xd09e18]
add esp, 4
mov ecx, ebp
call fcn.00415f80
jmp 0x430345
push 1
call fcn.00414270
push 0
push 0
push 0
call fcn.00418dd0
mov edx, dword [0xd09e18]
add esp, 0x10
mov ecx, ebp
call fcn.00415f80
jmp 0x430345
mov ecx, ebp
call fcn.004164d0
test eax, eax
je 0x42df6c
mov ecx, dword [0xd09e20]
test ecx, ecx
je 0x42df5e
push ecx
call fcn.00414470
add esp, 4
jmp 0x430345
push eax
call fcn.00414470
add esp, 4
jmp 0x430345
call fcn.00414780
jmp 0x430345
mov ecx, ebp
call fcn.004164d0
mov ecx, ebp
mov dword [0xd09e30], eax
call fcn.004164d0
mov dword [0xd09e34], eax
jmp 0x430345
mov ecx, ebp
call fcn.004164d0
mov ecx, ebp
mov esi, eax
call fcn.004164d0
mov ecx, ebp
mov edi, eax
call fcn.004164d0
mov ecx, ebp
mov ebx, eax
call fcn.004164d0
mov ecx, ebp
mov dword [esp + 0x18], eax
call fcn.004164d0
mov ecx, ebp
mov dword [esp + 0x14], eax
call fcn.004164d0
mov ecx, ebp
mov dword [esp + 0x20], eax
call fcn.004164d0
test esi, esi
jne 0x42dfe0
mov esi, dword [0xd09dfc]
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x18]
push eax
mov eax, dword [esp + 0x18]
push edx
push eax
push ecx
push ebx
push edi
push esi
call dword [sym.imp.USER32.dll_SetWindowPos]
jmp 0x42db9c
call fcn.0040ce90
mov edx, eax
mov ecx, ebp
call fcn.00415f80
jmp 0x430345
push ebp
call fcn.00420d30
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00420da0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00420e10
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00420e40
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00420e70
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00420eb0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004233c0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004233e0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004263d0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00426400
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00426440
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00426450
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00426470
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00426480
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004264a0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004264d0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00426500
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00426520
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00426540
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00426720
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00426760
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00426780
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00426870
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00426910
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00427ca0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00427d10
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00427d60
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00427de0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00427e30
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00427e60
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00427ea0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00427ee0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00427f20
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00427f70
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00427fc0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00428010
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00428060
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004280a0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00428210
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00428230
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00428260
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004282b0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004282e0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00428150
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00428330
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00428350
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00427bf0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00427c10
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00427c20
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00427c60
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00419170
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004191b0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00419210
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00428370
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00428400
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004284e0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00428530
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004285a0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004285c0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004285e0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00428600
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00428640
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004286c0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004286f0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00428720
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00428750
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00428780
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004287b0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004287e0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00428810
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00428840
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00428870
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004288a0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004288d0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00428900
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00428680
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00428930
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00428970
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004289d0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00428a20
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00428a60
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00428a80
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00428a90
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00428ac0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00428ae0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00428af0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00428b00
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00479130
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00479130
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00428b10
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00479130
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00479130
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00428b30
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00479130
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00428b50
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00423360
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
cmp eax, 0xbc3
jg 0x42f345
je 0x42f32f
cmp eax, 0x9dd
jg 0x42ee10
je 0x42edfa
cmp eax, 0x7ef
jg 0x42eb1f
je 0x42eb09
add eax, 0xfffff876
cmp eax, 0x64
ja case.0x43026e.65053
xor edx, edx
mov dl, byte [eax + 0x431db8]
jmp dword [edx*4 + 0x431d44]
push ebp
call fcn.004233a0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00423400
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00425280
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004252b0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004252f0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00425790
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004257c0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004257e0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004259e0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00425b40
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00425b90
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00425be0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00425bf0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00425c40
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00425c60
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00425cc0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00425cd0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00425d20
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00425df0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00425e10
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00425e30
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00425e50
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00425ed0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004271c0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004271e0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004271f0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00427200
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00427220
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00425a20
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
cmp eax, 0x8d4
jg 0x42ecbd
je 0x42eca7
add eax, 0xfffff80f
cmp eax, 0xd9
ja case.0x43026e.65053
xor ecx, ecx
mov cl, byte [eax + 0x431e5c]
jmp dword [ecx*4 + 0x431e20]
mov ecx, ebp
call fcn.004164d0
mov ecx, ebp
mov esi, eax
call fcn.004164d0
mov ecx, ebp
mov ebx, eax
call fcn.004164d0
test esi, esi
jne 0x42eb72
mov esi, dword [0xd09dfc]
push eax
push ebx
push esi
call dword [sym.imp.USER32.dll_SetWindowLongA]
mov edx, eax
mov ecx, ebp
call fcn.00415f80
jmp 0x430345
push ebp
call fcn.00425320
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00425340
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00425360
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004253f0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004254d0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00425590
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00425800
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00425830
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00425840
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004258b0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00425950
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00425990
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00418af0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004255b0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
add eax, 0xfffff722
cmp eax, 0xfa
ja case.0x43026e.65053
xor edx, edx
mov dl, byte [eax + 0x431f70]
jmp dword [edx*4 + 0x431f38]
push ebp
call fcn.004255e0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00425650
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00425680
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00425750
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004203d0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004203f0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00420410
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00420590
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00418780
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00418860
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00418970
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00418990
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004189c0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004269d0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
cmp eax, 0xa97
jg 0x42f0be
je 0x42f0a8
add eax, 0xfffff61e
cmp eax, 0xb4
ja case.0x43026e.65053
xor ecx, ecx
mov cl, byte [eax + 0x4320e0]
jmp dword [ecx*4 + 0x43206c]
push ebp
call fcn.00425d60
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00425d80
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00425d90
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00420550
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00420570
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004261c0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004261e0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00426200
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00426240
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00426260
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00426280
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00426360
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00426380
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004263b0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00426310
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004262a0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004269f0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00426a60
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00426ac0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00426ea0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00426f20
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00426f40
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00426fd0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004270f0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00427140
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00427150
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00427170
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00427190
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00425dc0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
add eax, 0xfffff510
cmp eax, 0xd2
ja case.0x43026e.65053
xor edx, edx
mov dl, byte [eax + 0x432208]
jmp dword [edx*4 + 0x432198]
push ebp
call fcn.00425f50
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00425f80
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00425fb0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00425fc0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00425fc0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00426000
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00426060
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00426070
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00426130
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00426190
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00418be0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00418c20
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00418c50
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00418d10
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00418d80
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00418da0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00428b70
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00428ed0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00428ef0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00428f10
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00428f40
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00428f80
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00429050
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004290f0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00429120
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00429150
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004291a0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004291e0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
cmp eax, 0x13a1
jg 0x42fa1b
je 0x42fa0d
cmp eax, 0xfa0
jg 0x42f602
je 0x42f5ec
add eax, 0xfffff43c
cmp eax, 0x6c
ja case.0x43026e.65053
xor ecx, ecx
mov cl, byte [eax + 0x432350]
jmp dword [ecx*4 + 0x4322dc]
push ebp
call fcn.00429210
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00429260
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00429290
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004292c0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00429300
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00429340
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00429380
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004293b0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004293e0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00429410
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00429440
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00429470
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004294a0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004294f0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00429540
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00429580
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004295a0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004295c0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004295e0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00429600
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00429620
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00429640
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00429660
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004296a0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004296e0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00429700
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00429750
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00429790
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004277a0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
cmp eax, 0x1068
jg 0x42f74c
je 0x42f73e
add eax, 0xfffff05f
cmp eax, 0x6d
ja case.0x43026e.65053
xor edx, edx
mov dl, byte [eax + 0x4323f8]
jmp dword [edx*4 + 0x4323c0]
push ebp
call fcn.0041e760
add esp, 4
jmp 0x42c252
push ebp
call fcn.0041ecf0
add esp, 4
jmp 0x42c252
push ebp
call fcn.004251c0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00425210
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004277f0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00427820
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00427910
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00427960
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00427990
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00427a20
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00427a40
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00427a60
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00427a80
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.0041e9f0
add esp, 4
jmp 0x42c252
cmp eax, 0x1393
jg 0x42f91f
je 0x42f87e
cmp eax, 0x138a
jg 0x42f7cf
je 0x42f7a8
sub eax, 0x1072
je 0x42f79a
sub eax, 0x316
je 0x42f789
dec eax
jne case.0x43026e.65053
push ebp
call fcn.00419280
add esp, 4
jmp 0x42c252
mov ecx, ebp
call fcn.004164d0
mov dword [0xd0ac18], eax
jmp 0x430345
push ebp
call fcn.0041f440
add esp, 4
jmp 0x42c252
mov ecx, ebp
call fcn.004164d0
cmp eax, 0x400
ja case.0x43026e.65053
lea eax, [eax*8 + 0x8c4730]
push eax
call fcn.0043c490
add esp, 4
jmp 0x42db9c
sub eax, 0x138b
je 0x42f870
sub eax, 7
jne case.0x43026e.65053
mov ecx, ebp
call fcn.004164d0
mov esi, eax
cmp esi, 0x400
ja case.0x43026e.65053
mov ecx, ebp
call fcn.004164d0
mov ecx, ebp
mov dword [esp + 0x10], eax
lea edi, [esi*8 + 0x8c4730]
call fcn.004164d0
mov ecx, ebp
mov esi, eax
call fcn.004164d0
mov ebx, eax
test bl, 0x10
jne 0x42f832
push edi
call fcn.0043c490
add esp, 4
test eax, eax
je 0x430345
mov ecx, dword [esp + 0x10]
inc ecx
push ecx
push edi
call fcn.0043c520
add esp, 8
test eax, eax
je case.0x43026e.65053
mov edx, dword [esp + 0x10]
mov ecx, dword [0x4eb89c]
push ebx
push edx
lea eax, [esi + esi*2]
shl eax, 4
push edi
add eax, 0x8c9ac8
push eax
push ecx
call fcn.0043dd10
add esp, 0x14
jmp 0x42db9c
push ebp
call fcn.00419380
add esp, 4
jmp 0x42c252
mov ecx, ebp
call fcn.004164d0
cmp eax, 0x400
ja case.0x43026e.65053
mov ecx, ebp
lea esi, [eax*8 + 0x8c4730]
call fcn.004164d0
mov ecx, ebp
mov edi, eax
call fcn.004164d0
mov ebx, eax
test bl, 0x10
jne 0x42f8bf
push esi
call fcn.0043c490
add esp, 4
test eax, eax
je 0x430345
lea edx, [esp + 0x10c]
push edx
push edi
call fcn.00405940
add esp, 8
test eax, eax
mov dword [esp + 0x24], eax
je case.0x43026e.65053
lea eax, [esp + 0x24]
push 0
push eax
call fcn.00444490
mov ecx, dword [esp + 0x2c]
push ecx
call fcn.004039b0
mov edx, dword [esp + 0x30]
mov eax, dword [0x4eb89c]
push ebx
push esi
push edx
push eax
call fcn.0043d580
add esp, 0x1c
test eax, eax
je case.0x43026e.65053
mov ecx, dword [esp + 0x24]
push ecx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
jmp 0x430345
add eax, 0xffffec6c
cmp eax, 0xb
ja case.0x43026e.65053
jmp dword [eax*4 + 0x432468]
push ebp
call fcn.00419690
add esp, 4
jmp 0x42c252
push ebp
call fcn.00419760
add esp, 4
jmp 0x42c252
push ebp
call fcn.004198d0
add esp, 4
jmp 0x42c252
push ebp
call fcn.00419a20
add esp, 4
jmp 0x42c252
mov ecx, ebp
call fcn.004164d0
mov ecx, ebp
mov esi, eax
call fcn.004164d0
mov ecx, ebp
mov edi, eax
call fcn.004164d0
mov ecx, ebp
mov ebx, eax
call fcn.004164d0
mov ecx, ebp
mov dword [esp + 0x1c], eax
call fcn.004164d0
mov ecx, ebp
mov dword [esp + 0x3c], eax
call fcn.004164d0
mov ecx, ebp
mov dword [esp + 0x10], eax
call fcn.004164d0
mov ecx, ebp
mov dword [esp + 0x18], eax
call fcn.004164d0
mov ecx, ebp
mov dword [esp + 0x14], eax
call fcn.004164d0
mov ecx, ebp
mov dword [esp + 0x20], eax
call fcn.004164d0
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x18]
push eax
mov eax, dword [esp + 0x18]
push edx
mov edx, dword [esp + 0x18]
push eax
mov eax, dword [esp + 0x48]
push ecx
mov ecx, dword [esp + 0x2c]
push edx
push eax
push ecx
push ebx
push edi
push esi
call fcn.00419b80
add esp, 0x28
jmp 0x42db9c
push ebp
call fcn.00419db0
add esp, 4
jmp 0x42c252
push ebp
call fcn.0041a000
add esp, 4
jmp 0x42c252
cmp eax, 0x13ec
jg 0x4300f3
je 0x4300e5
add eax, 0xffffec5a
cmp eax, 0x41
ja case.0x43026e.65053
xor ecx, ecx
mov cl, byte [eax + 0x432518]
jmp dword [ecx*4 + 0x432498]
mov ecx, ebp
call fcn.004164d0
mov ecx, ebp
mov esi, eax
call fcn.004164d0
push eax
push esi
call fcn.00419250
mov esi, eax
add esp, 8
test esi, esi
je case.0x43026e.65053
mov ecx, ebp
call fcn.004164d0
mov ecx, ebp
mov dword [esp + 0xc0], eax
call fcn.004164d0
mov ecx, ebp
mov dword [esp + 0xc4], eax
call fcn.004164d0
mov ecx, ebp
mov dword [esp + 0xc8], eax
call fcn.004164d0
mov ecx, ebp
mov dword [esp + 0xcc], eax
call fcn.004164d0
mov ecx, dword [esi]
push eax
lea edx, [esp + 0xc4]
push edx
lea eax, [esp + 0x10c]
push eax
push ecx
call fcn.0043e110
add esp, 0x10
test eax, eax
je case.0x43026e.65053
mov edx, dword [esp + 0x108]
mov ecx, ebp
call fcn.00415f80
jmp 0x430345
mov ecx, ebp
call fcn.004164d0
mov ecx, ebp
mov esi, eax
call fcn.004164d0
push eax
push esi
call fcn.00419250
add esp, 8
test eax, eax
je case.0x43026e.65053
mov edx, dword [eax]
push edx
call fcn.0043e170
add esp, 4
jmp 0x42db9c
mov ecx, ebp
call fcn.004164d0
mov ecx, ebp
mov esi, eax
call fcn.004164d0
push eax
push esi
call fcn.00419250
mov esi, eax
add esp, 8
test esi, esi
je case.0x43026e.65053
fld dword [esi + 0x3c]
call fcn.00408160
fld dword [esi + 0x40]
mov ebx, eax
call fcn.00408160
fld dword [esi + 0x24]
mov dword [esp + 0x10], eax
call fcn.00408160
fld dword [esi + 0x28]
mov edi, eax
add edi, ebx
call fcn.00408160
mov esi, eax
mov eax, dword [esp + 0x10]
mov edx, ebx
mov ecx, ebp
add esi, eax
call fcn.00415f80
mov edx, dword [esp + 0x10]
mov ecx, ebp
call fcn.00415f80
mov edx, edi
mov ecx, ebp
call fcn.00415f80
mov edx, esi
mov ecx, ebp
call fcn.00415f80
jmp 0x430345
mov ecx, ebp
call fcn.004164d0
mov ecx, ebp
mov esi, eax
call fcn.004164d0
push eax
push esi
call fcn.00419250
mov esi, eax
add esp, 8
test esi, esi
je case.0x43026e.65053
fld dword [esi + 0x24]
call fcn.00408160
mov edx, eax
mov ecx, ebp
call fcn.00415f80
fld dword [esi + 0x28]
call fcn.00408160
mov edx, eax
mov ecx, ebp
call fcn.00415f80
jmp 0x430345
mov ecx, ebp
call fcn.004164d0
mov ecx, ebp
mov esi, eax
call fcn.004164d0
push eax
push esi
call fcn.00419250
add esp, 8
test eax, eax
je case.0x43026e.65053
mov edx, dword [eax + 0x18]
mov ecx, ebp
call fcn.00415f80
jmp 0x430345
mov ecx, ebp
call fcn.004164d0
mov ecx, ebp
mov esi, eax
call fcn.004164d0
push eax
push esi
call fcn.00419250
mov edx, eax
add esp, 8
neg edx
sbb edx, edx
neg edx
mov ecx, ebp
call fcn.00415f80
jmp 0x430345
mov ecx, ebp
mov dword [esp + 0x30], 0xffffffff
call fcn.004164d0
mov ecx, ebp
mov esi, eax
call fcn.004164d0
mov ecx, dword [0xd0ac14]
mov edx, dword [ecx*4 + 0x8c8848]
push eax
push esi
lea eax, [esp + 0x38]
push eax
mov eax, dword [ecx*4 + 0x8ed900]
push 0
push edx
push eax
call fcn.0043df30
mov edx, dword [esp + 0x48]
add esp, 0x18
mov ecx, ebp
call fcn.00415f80
jmp 0x430345
mov ecx, ebp
call fcn.004164d0
mov ecx, ebp
mov esi, eax
call fcn.004164d0
push eax
push esi
call fcn.00419250
mov esi, eax
add esp, 8
test esi, esi
je case.0x43026e.65053
fld dword [esi + 0x3c]
call fcn.00408160
mov edx, eax
mov ecx, ebp
call fcn.00415f80
fld dword [esi + 0x40]
call fcn.00408160
mov edx, eax
mov ecx, ebp
call fcn.00415f80
jmp 0x430345
mov ecx, ebp
call fcn.004164d0
mov ecx, ebp
mov esi, eax
call fcn.004164d0
push eax
push esi
call fcn.00419250
mov esi, eax
add esp, 8
test esi, esi
je case.0x43026e.65053
mov ecx, ebp
call fcn.004164d0
mov dword [esp + 0x1c], eax
fild dword [esp + 0x1c]
mov ecx, ebp
fstp dword [esi + 0x3c]
call fcn.004164d0
mov dword [esp + 0x1c], eax
fild dword [esp + 0x1c]
fstp dword [esi + 0x40]
jmp 0x430345
mov ecx, ebp
call fcn.004164d0
mov ecx, ebp
mov ebx, eax
call fcn.004164d0
mov esi, eax
test esi, esi
jne 0x42fd42
mov esi, 0x400
mov eax, dword [ebx*4 + 0x8ed900]
test eax, eax
je 0x42fd54
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov ecx, esi
shl ecx, 5
add ecx, esi
lea edx, [esi + ecx*2]
shl edx, 2
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov dword [ebx*4 + 0x8ed900], eax
jmp 0x42db9c
mov ecx, ebp
call fcn.004164d0
mov esi, eax
mov eax, dword [esi*4 + 0x8ed900]
test eax, eax
je 0x430345
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov dword [esi*4 + 0x8ed900], 0
jmp 0x430345
mov edx, dword [0xd0ac1c]
mov ecx, ebp
call fcn.00415f80
jmp 0x430345
mov ecx, ebp
call fcn.004164d0
mov dword [0xd0ac1c], eax
jmp 0x430345
mov eax, dword [0xd0ac1c]
mov dword [eax*4 + 0x8c8848], edx
jmp 0x430345
mov ecx, ebp
call fcn.004164d0
mov ecx, dword [0xd0ac1c]
mov dword [ecx*4 + 0x8c8848], eax
jmp 0x430345
mov edx, dword [0xd0ac1c]
mov edx, dword [edx*4 + 0x8c8848]
mov ecx, ebp
call fcn.00415f80
jmp 0x430345
mov ecx, dword [0xd0ac1c]
mov eax, dword [ecx*4 + 0x8c8848]
mov ecx, dword [ecx*4 + 0x8ed900]
mov edx, eax
shl edx, 5
add edx, eax
lea eax, [eax + edx*2]
lea edx, [ecx + eax*4]
mov ecx, ebp
call fcn.00415f80
jmp 0x430345
push ebp
call fcn.004194e0
add esp, 4
jmp 0x42c252
mov ecx, ebp
call fcn.004164d0
mov dword [0x4c2388], eax
jmp 0x430345
mov ecx, ebp
call fcn.004164d0
mov ecx, ebp
mov esi, eax
call fcn.004164d0
mov ecx, ebp
mov ebx, eax
call fcn.004164d0
mov ecx, dword [0x4eb89c]
test ecx, ecx
je case.0x43026e.65053
mov edx, dword [ecx]
push eax
push ebx
push esi
push ecx
call dword [edx + 0x114]
jmp 0x430345
mov ecx, ebp
call fcn.004164d0
mov ecx, ebp
mov esi, eax
call fcn.004164d0
mov ecx, ebp
mov ebx, eax
call fcn.004164d0
mov ecx, dword [0x4eb89c]
test ecx, ecx
je case.0x43026e.65053
mov edx, dword [ecx]
push eax
push ebx
push esi
push ecx
call dword [edx + 0x10c]
jmp 0x430345
mov ecx, ebp
call fcn.004164d0
mov ecx, ebp
mov esi, eax
call fcn.004164d0
mov ecx, dword [0x4eb89c]
test ecx, ecx
je case.0x43026e.65053
mov edx, dword [ecx]
push eax
push esi
push ecx
call dword [edx + 0xe4]
jmp 0x430345
push ebp
call fcn.0041a210
add esp, 4
jmp 0x42c252
cmp dword [0x4eb89c], edx
je case.0x43026e.65053
mov ecx, ebp
call fcn.004164d0
mov ecx, ebp
mov esi, eax
call fcn.004164d0
cmp esi, 1
jne 0x42ff43
mov edx, dword [0x6cd204]
mov eax, dword [0x4eb89c]
mov ecx, dword [eax]
push edx
push 0
push eax
call dword [ecx + 0x94]
test eax, eax
jl case.0x43026e.65053
mov eax, dword [0x4eb89c]
mov ecx, dword [eax]
push 0
push 0x3f800000
push 0xff000000
push 3
push 0
push 0
push eax
call dword [ecx + 0xac]
cmp esi, 1
jne 0x430345
mov ecx, dword [0x6cd200]
mov eax, dword [0x4eb89c]
mov edx, dword [eax]
push ecx
push 0
push eax
call dword [edx + 0x94]
test eax, eax
jl case.0x43026e.65053
jmp 0x430345
cmp dword [0x4eb89c], edx
je case.0x43026e.65053
mov ecx, ebp
call fcn.004164d0
call fcn.0041a2f0
jmp 0x42db9c
mov ecx, ebp
call fcn.004164d0
cmp eax, 0x400
ja case.0x43026e.65053
shl eax, 4
add eax, 0x8cd6f8
mov ecx, ebp
mov edi, eax
call fcn.004164d0
mov esi, eax
mov ecx, ebp
mov dword [esp + 0x1c], esi
call fcn.004164d0
add esi, 3
mov ebx, eax
mov eax, dword [edi]
and esi, 0xfffffffc
test eax, eax
je 0x42fff2
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov edx, esi
imul edx, ebx
push edx
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
test eax, eax
mov dword [edi], eax
je 0x430345
mov eax, dword [esp + 0x1c]
mov dword [edi + 8], eax
mov dword [edi + 0xc], ebx
mov dword [edi + 4], esi
jmp 0x430345
push ebp
call fcn.0041a440
add esp, 4
jmp 0x42c252
mov ecx, ebp
call fcn.004164d0
cmp eax, 0x400
ja case.0x43026e.65053
shl eax, 4
add eax, 0x8cd6f8
mov esi, eax
mov eax, dword [esi]
test eax, eax
je 0x430345
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov dword [esi], 0
jmp 0x430345
mov ecx, ebp
call fcn.004164d0
cmp eax, 0x400
ja case.0x43026e.65053
shl eax, 4
mov edx, dword [eax + 0x8cd6f8]
mov ecx, ebp
call fcn.00415f80
jmp 0x430345
mov ecx, ebp
call fcn.004164d0
cmp eax, 0x400
ja case.0x43026e.65053
shl eax, 4
add eax, 0x8cd6f8
mov esi, eax
mov edx, dword [esi + 8]
mov ecx, ebp
call fcn.00415f80
mov edx, dword [esi + 0xc]
mov ecx, ebp
call fcn.00415f80
jmp 0x430345
mov ecx, ebp
call fcn.004164d0
cmp eax, 0x400
ja case.0x43026e.65053
shl eax, 4
mov edx, dword [eax + 0x8cd6fc]
mov ecx, ebp
call fcn.00415f80
jmp 0x430345
push ebp
call fcn.0041a560
add esp, 4
jmp 0x42c252
cmp eax, 0xfe11
jg 0x430258
je 0x430242
cmp eax, 0xd382
jg 0x4301b7
je 0x4301a1
cmp eax, 0x1400
jg 0x43016b
je 0x43015d
sub eax, 0x13f6
je 0x43014f
sub eax, 2
je 0x430141
sub eax, 6
jne case.0x43026e.65053
push ebp
call fcn.0041bff0
add esp, 4
jmp 0x42c252
push ebp
call fcn.0041ad40
add esp, 4
jmp 0x42c252
push ebp
call fcn.0041a960
add esp, 4
jmp 0x42c252
push ebp
call fcn.0041b280
add esp, 4
jmp 0x42c252
cmp eax, 0x140a
je 0x430193
cmp eax, 0xaa82
jne case.0x43026e.65053
push ebp
call fcn.00418770
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.0041b610
add esp, 4
jmp 0x42c252
push ebp
call fcn.00427280
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
add eax, 0xffff0218
cmp eax, 0x28
ja case.0x43026e.65053
xor ecx, ecx
mov cl, byte [eax + 0x432574]
jmp dword [ecx*4 + 0x43255c]
push ebp
call fcn.00479130
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004270d0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004270d0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004270d0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004270d0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00427240
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
add eax, 0xffff01ee
cmp eax, 0x27
ja case.0x43026e.65053
xor edx, edx
mov dl, byte [eax + 0x4325d0]
jmp dword [edx*4 + 0x4325a0]
push ebp
call fcn.004270d0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00427240
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00427260
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004270d0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004270e0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00427240
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004270d0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00427290
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004272b0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.004272e0
add esp, 4
test eax, eax
jne 0x4303b4
jmp 0x430345
push ebp
call fcn.00427310
add esp, 4
test eax, eax
jne 0x4303b4
cmp word [esp + 0x68], 0x34
je 0x4303b2
mov eax, dword [0x4c21ec]
test eax, eax
jne 0x4303b2
mov eax, dword [esp + 0x28]
cmp eax, dword [0x4c2398]
jae 0x4303b2
mov ebx, dword [sym.imp.USER32.dll_ClientToScreen]
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
xor edx, edx
jmp 0x429806
pop edi
pop esi
pop ebp
mov eax, 2
pop ebx
add esp, 0x660
ret
pop edi
pop esi
pop ebp
mov eax, 3
pop ebx
add esp, 0x660
ret
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x660
ret