Function at 0x43492a
Capabilities:
Check for software breakpoints
Check for time delay via gettickcount
Contain obfuscated stackstrings
Copy file
Encode data using base64
Open clipboard
Parse pe header
Read clipboard data
Write clipboard data

Disassembly:
mov eax, 0x4b49d0
call fcn.0048a7d0
sub esp, 0xd40
push ebx
push esi
mov ebx, ecx
push edi
xor esi, esi
push dword [ebx + 0x1c]
mov dword [ebp - 0x40], esi
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x43ef8a
mov eax, dword [ebp + 8]
cmp eax, esi
je 0x43ef8a
cmp dword [eax + 4], esi
je 0x43ef8a
cmp byte [ebx + 0xa0], 0
jne 0x43ef8a
cmp dword [ebx + 0x1200], esi
je 0x43ef8a
mov dword [ebx + 0x1350], eax
mov ecx, dword [eax + 4]
cmp dword [ecx + 0xc], 1
jl 0x43ef8a
mov byte [ebx + 0x1349], 1
cmp dword [ebx + 0x1350], esi
je 0x4349ac
mov eax, dword [eax + 4]
mov eax, dword [eax + 4]
jmp 0x4349ae
xor eax, eax
mov dword [ebp - 0x114], eax
mov eax, dword [0x4ea054]
mov dword [ebp - 0x128], eax
push 0xc
xor eax, eax
pop ecx
lea edi, [ebp - 0x6c7]
test byte [0x4f6d60], 1
mov byte [ebp - 0x6c8], 1
mov dword [ebp - 4], esi
rep stosd dword es:[edi], eax
mov dword [ebp - 0x84], esi
mov dword [ebp - 0x80], esi
mov dword [ebp - 0x7c], esi
mov dword [ebp - 0x78], esi
mov dword [ebp - 0x94], esi
mov byte [ebp - 0x6d], 1
stosw word es:[edi], ax
jne 0x434a1b
or byte [0x4f6d60], 1
push str.If_.._Then_reached__d_levels.
mov ecx, 0x4f6d5c
call fcn.004a5f94
push 0x43f396
call fcn.0048b2d8
pop ecx
cmp dword [ebp - 0x114], esi
je 0x43ef3d
cmp byte [ebx + 0xa0], 0
jne 0x43ec5a
cmp byte [ebx + 0x134a], 0
jne 0x43ef74
mov eax, dword [ebp - 0x114]
cmp dword [ebx + 0x1350], esi
mov dword [ebp - 0x444], eax
je 0x434a6b
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
lea eax, [ebp - 0x114]
push eax
call fcn.0043f2f0
mov edi, dword [eax]
jmp 0x434a6d
xor edi, edi
cmp edi, esi
mov dword [ebp - 0x2c], edi
je 0x43ec26
cmp byte [ebp - 0x6d], 0
je 0x43eb6a
and dword [ebp - 0x68], 0
push ecx
lea esi, [edi + 0xc]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5c9b
lea eax, [ebp - 0x64]
mov ecx, ebx
push eax
call fcn.004421ad
push 0x4df564
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 1
call fcn.004a022e
test eax, eax
jle 0x434ad2
push ecx
lea eax, [ebp - 0x64]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea ecx, [ebx + 0x11b8]
call fcn.0042c0f5
mov dword [ebp - 0x68], eax
mov edi, dword [edi + 4]
cmp edi, 0x4a
je 0x434ae4
cmp edi, 0x4b
je 0x434ae4
push 1
pop eax
jmp 0x434ae6
xor eax, eax
push eax
push ecx
lea eax, [ebp - 0x64]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
mov ecx, ebx
call fcn.00441536
mov edi, eax
mov eax, dword [0x4ea054]
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], eax
mov ecx, dword [ebp - 0x2c]
mov byte [ebp - 4], 0xa
mov ecx, dword [ecx + 4]
cmp ecx, 0x103
ja case.0x434b3f.13
movzx ecx, byte [ecx + 0x43f139]
jmp dword [ecx*4 + 0x43ef9d]
test edi, edi
je 0x43eae8
cmp dword [ebp - 0x68], 0
mov ecx, dword [ebp - 0x68]
lea eax, [ebx + 0x11b8]
push eax
push 0
push 1
push edi
push ebx
jne 0x434b6a
mov ecx, dword [ebx + 0x1200]
call fcn.0041d5db
mov eax, dword [ebp - 0x38]
lea edi, [ebp - 0x684]
push 2
push 2
lea esi, [eax + 0xb4]
lea eax, [ebp - 0x684]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push eax
movsd dword es:[edi], dword [esi]
call dword [sym.imp.USER32.dll_InflateRect]
lea eax, [ebp - 0x684]
push eax
jmp 0x4360f7
test edi, edi
je 0x43eae8
cmp dword [ebp - 0x68], 0
je 0x434bc7
mov ecx, dword [ebp - 0x68]
lea eax, [ebx + 0x11b8]
push eax
push 0
push 0
push edi
push ebx
call fcn.0041d5db
jmp 0x4360f0
mov ecx, dword [ebx + 0x1200]
mov esi, dword [edi + 0xf0]
lea eax, [ebx + 0x11b8]
push eax
push 0
push 0
push edi
push ebx
call fcn.0041d5db
cmp dword [edi + 0x38], 0x16
jne 0x4360f0
test esi, esi
jne 0x4360f0
mov ecx, dword [edi + 0x34]
test ecx, ecx
je 0x4360f0
push ebx
call fcn.0040ca7a
lea ecx, [ebx + 0x60]
call fcn.004a56f5
jmp 0x4360f0
test edi, edi
je 0x43eae8
cmp dword [ebp - 0x68], 0
lea eax, [ebx + 0x11b8]
push eax
push 0
je 0x434c3f
xor eax, eax
mov ecx, dword [ebp - 0x68]
cmp dword [edi + 0xf0], eax
sete al
push eax
push edi
push ebx
jmp 0x434c53
xor eax, eax
mov ecx, dword [ebx + 0x1200]
cmp dword [edi + 0xf0], eax
sete al
push eax
push edi
push ebx
call fcn.0041d5db
mov eax, dword [ebp - 0x38]
lea edi, [ebp - 0x694]
push 2
push 2
lea esi, [eax + 0xb4]
lea eax, [ebp - 0x694]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push eax
movsd dword es:[edi], dword [esi]
call dword [sym.imp.USER32.dll_InflateRect]
lea eax, [ebp - 0x694]
jmp 0x434b99
test edi, edi
je 0x43eae8
cmp dword [edi + 0x38], 0xc
jne 0x43eae8
mov eax, dword [ebp - 0x2c]
push ecx
mov esi, esp
mov dword [ebp - 0x1c], esp
push ecx
add eax, 0x10
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
push esi
mov ecx, ebx
call fcn.004421ad
lea eax, [ebp - 0x27c]
push eax
call fcn.004311d6
pop ecx
pop ecx
push 0
lea ecx, [ebp - 0x27c]
mov byte [ebp - 4], 0xb
call fcn.004a6356
push eax
push ebx
push 0
mov ecx, edi
call fcn.00425932
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x27c]
jmp 0x43eae3
test edi, edi
je 0x43eae8
cmp dword [edi + 0x38], 0xc
jne 0x43eae8
push 0
push ebx
push 1
jmp 0x434d54
test edi, edi
je 0x43eae8
cmp dword [edi + 0x38], 0xc
jne 0x43eae8
push 0
push ebx
push 3
jmp 0x434d54
test edi, edi
je 0x43eae8
cmp dword [edi + 0x38], 0xc
jne 0x43eae8
push 0
push ebx
push 4
jmp 0x434d54
test edi, edi
je 0x43eae8
cmp dword [edi + 0x38], 0xc
jne 0x43eae8
push 0
push ebx
push 2
mov ecx, edi
call fcn.00425932
jmp 0x43eae8
test edi, edi
je 0x43eae8
cmp dword [edi + 0x38], 0xc
jne 0x43eae8
mov esi, dword [ebp - 0x2c]
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
lea eax, [esi + 0x10]
push eax
call fcn.004a5c9b
lea eax, [ebp - 0x1c0]
mov ecx, ebx
push eax
call fcn.004421ad
and byte [ebp - 0x15], 0
lea eax, [ebp - 0x360]
push 9
push eax
lea ecx, [ebp - 0x1c0]
mov byte [ebp - 4], 0xc
call fcn.004a0118
push str._RELATIVE
push dword [eax]
call fcn.0048a850
pop ecx
pop ecx
test eax, eax
lea ecx, [ebp - 0x360]
sete byte [ebp - 0xd]
call fcn.004a5f26
cmp byte [ebp - 0xd], 0
je 0x434dd7
mov byte [ebp - 0x15], 1
cmp dword [esi + 4], 0xe2
push ecx
mov ecx, esp
jne 0x434e1e
lea eax, [ebp - 0x1c0]
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00413ff7
fmul qword [0x4b8ce0]
lea eax, [ebp - 0x64c]
push eax
xor eax, eax
cmp byte [ebp - 0x15], al
push ebx
fstp qword [ebp - 0x64c]
setne al
add eax, 7
jmp 0x434e56
lea eax, [ebp - 0x1c0]
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00413ff7
call fcn.0048aa60
mov dword [ebp - 0x474], eax
lea eax, [ebp - 0x474]
push eax
xor eax, eax
cmp byte [ebp - 0x15], al
push ebx
setne al
add eax, 5
push eax
mov ecx, edi
call fcn.00425932
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x1c0]
jmp 0x43eae3
test edi, edi
je 0x43eae8
cmp dword [edi + 0x38], 0xc
jne 0x43eae8
mov eax, dword [ebp - 0x2c]
push ecx
add eax, 0x10
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea eax, [ebp - 0x284]
mov ecx, ebx
push eax
call fcn.004421ad
push 0
lea ecx, [ebp - 0x284]
mov byte [ebp - 4], 0xd
call fcn.004a6356
push eax
push ebx
push 0xa
mov ecx, edi
call fcn.00425932
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x284]
jmp 0x43eae3
test edi, edi
je 0x43eae8
cmp dword [edi + 0x38], 0xc
jne 0x43eae8
mov eax, dword [ebp - 0x2c]
push ecx
add eax, 0x10
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea eax, [ebp - 0xb0]
mov ecx, ebx
push eax
call fcn.004421ad
and byte [ebp - 0x45], 0
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0xe
call fcn.004a6481
lea ecx, [ebp - 0xb0]
call fcn.004a0609
lea eax, [ebp - 0x510]
push 0xa
push eax
lea ecx, [ebp - 0xb0]
call fcn.004a0194
push str.fullscreen
push dword [eax]
call fcn.0048a850
pop ecx
pop ecx
test eax, eax
lea ecx, [ebp - 0x510]
sete byte [ebp - 0xd]
call fcn.004a5f26
cmp byte [ebp - 0xd], 0
je 0x434fbc
push 0x3d
lea ecx, [ebp - 0xb0]
call fcn.004a6414
cmp eax, 9
jle 0x434f9c
lea eax, [ebp - 0x518]
push 2
push eax
lea ecx, [ebp - 0xb0]
call fcn.004a0118
push 0x4e6358
push dword [eax]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
sete al
lea ecx, [ebp - 0x518]
mov byte [ebp - 0x45], al
call fcn.004a5f26
jmp 0x434fb0
mov eax, dword [edi + 0x18]
test eax, eax
je 0x434fb0
cmp dword [eax + 0x168], 0
sete al
mov byte [ebp - 0x45], al
lea eax, [ebp - 0x45]
push eax
push ebx
push 0xc
jmp 0x43516b
lea eax, [ebp - 0x520]
push 4
push eax
lea ecx, [ebp - 0xb0]
call fcn.004a0194
push str.loop
push dword [eax]
call fcn.0048a850
pop ecx
pop ecx
test eax, eax
lea ecx, [ebp - 0x520]
sete byte [ebp - 0xd]
call fcn.004a5f26
cmp byte [ebp - 0xd], 0
je 0x435036
lea eax, [ebp - 0x570]
push 2
push eax
lea ecx, [ebp - 0xb0]
call fcn.004a0118
push 0x4e6358
push dword [eax]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
sete al
lea ecx, [ebp - 0x570]
mov byte [ebp - 0x45], al
call fcn.004a5f26
lea eax, [ebp - 0x45]
push eax
push ebx
push 0xd
jmp 0x43516b
lea eax, [ebp - 0x578]
push 4
push eax
lea ecx, [ebp - 0xb0]
call fcn.004a0194
push str.mute
push dword [eax]
call fcn.0048a850
pop ecx
pop ecx
test eax, eax
lea ecx, [ebp - 0x578]
sete byte [ebp - 0xd]
call fcn.004a5f26
cmp byte [ebp - 0xd], 0
je 0x4350b0
lea eax, [ebp - 0x580]
push 2
push eax
lea ecx, [ebp - 0xb0]
call fcn.004a0118
push 0x4e6358
push dword [eax]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
sete al
lea ecx, [ebp - 0x580]
mov byte [ebp - 0x45], al
call fcn.004a5f26
lea eax, [ebp - 0x45]
push eax
push ebx
push 0xe
jmp 0x43516b
lea eax, [ebp - 0x588]
push 4
push eax
lea ecx, [ebp - 0xb0]
call fcn.004a0194
mov esi, str.time
mov byte [ebp - 4], 0xf
push esi
push dword [eax]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43511a
lea eax, [ebp - 0x58c]
push 5
push eax
lea ecx, [ebp - 0xb0]
call fcn.004a0194
push str.frame
push dword [eax]
call fcn.0048a850
pop ecx
pop ecx
test eax, eax
lea ecx, [ebp - 0x58c]
sete byte [ebp - 0xd]
call fcn.004a5f26
cmp byte [ebp - 0xd], 0
jne 0x43511a
and byte [ebp - 0x15], 0
jmp 0x43511e
mov byte [ebp - 0x15], 1
lea ecx, [ebp - 0x588]
mov byte [ebp - 4], 0xe
call fcn.004a5f26
cmp byte [ebp - 0x15], 0
je 0x435172
lea eax, [ebp - 0x544]
push 4
push eax
lea ecx, [ebp - 0xb0]
call fcn.004a0194
push esi
push dword [eax]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
setne al
lea ecx, [ebp - 0x544]
mov byte [ebp - 0x45], al
call fcn.004a5f26
lea eax, [ebp - 0x45]
push eax
push ebx
push 0xf
mov ecx, edi
call fcn.00425932
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xb0]
jmp 0x43eae3
push 0x4eea58
push dword [esi]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43eceb
push ecx
mov edi, esp
mov dword [ebp - 0x1c], esp
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5c9b
push edi
mov ecx, ebx
call fcn.004421ad
lea eax, [ebp - 0x1b8]
push eax
call fcn.004311d6
mov eax, dword [ebp - 0x2c]
add esp, 4
add eax, 0x10
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0x10
call fcn.004a5c9b
lea eax, [ebp - 0x118]
mov ecx, ebx
push eax
call fcn.004421ad
push 0xa
lea eax, [ebp - 0x530]
push 0
push eax
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 0x11
call fcn.004a0082
push str.NEW_WINDOW
mov byte [ebp - 4], 0x12
push dword [eax]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
jne 0x435283
mov eax, dword [ebp - 0x118]
cmp dword [eax - 8], 0xa
je 0x43527d
push 1
push 0x2c
lea ecx, [ebp - 0x28c]
call fcn.0049fd22
push 1
lea eax, [ebp - 0x2e0]
push 0xa
push eax
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 0x13
call fcn.004a0082
push dword [ebp - 0x28c]
push dword [eax]
call fcn.0048a850
pop ecx
pop ecx
test eax, eax
lea ecx, [ebp - 0x2e0]
sete byte [ebp - 0xd]
call fcn.004a5f26
lea ecx, [ebp - 0x28c]
mov byte [ebp - 4], 0x12
call fcn.004a5f26
cmp byte [ebp - 0xd], 0
je 0x435283
mov byte [ebp - 0x15], 1
jmp 0x435287
and byte [ebp - 0x15], 0
lea ecx, [ebp - 0x530]
mov byte [ebp - 4], 0x11
call fcn.004a5f26
cmp byte [ebp - 0x15], 0
je 0x43ec66
push 5
push ecx
lea eax, [ebp - 0x118]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
push ecx
lea eax, [ebp - 0x1b8]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
mov byte [ebp - 4], 0x14
call fcn.004a5c9b
mov ecx, dword [ebx + 0x1200]
mov byte [ebp - 4], 0x11
call fcn.0041c8d0
and dword [ebp - 0x5cc], 0
mov edi, eax
mov dword [ebp - 0x5d0], edi
push ecx
fild qword [ebp - 0x5d0]
push ecx
mov esi, str.CBK_ReturnVal
fstp qword [esp]
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5f94
lea ecx, [ebx + 0x118c]
call fcn.00419b0a
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5f94
mov ecx, ebx
call fcn.00441536
mov esi, eax
test esi, esi
je 0x435351
push edi
lea eax, [esi + 0xc4]
push 0x4deca0
push eax
call fcn.004a05b4
add esp, 0xc
add esi, 0xb4
push 1
push esi
push dword [ebx + 0x1c]
call dword [sym.imp.USER32.dll_InvalidateRect]
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 0x10
call fcn.004a5f26
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x1b8]
jmp 0x43eae3
push 0x4eea58
push dword [esi]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43eae8
mov eax, dword [ebp - 0x2c]
push 1
push ecx
add eax, 0x10
mov edi, esp
mov dword [ebp - 0x1c], esp
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.004a5c9b
push edi
mov ecx, ebx
call fcn.004421ad
push ecx
mov byte [ebp - 4], 0x15
mov edi, esp
mov dword [ebp - 0x14], esp
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push esi
call fcn.004a5c9b
push edi
mov ecx, ebx
call fcn.004421ad
mov ecx, dword [ebx + 0x1200]
mov byte [ebp - 4], 0xa
call fcn.0041c8d0
and dword [ebp - 0x5fc], 0
mov edi, eax
mov dword [ebp - 0x600], edi
push ecx
fild qword [ebp - 0x600]
push ecx
mov esi, str.CBK_ReturnVal
fstp qword [esp]
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5f94
lea ecx, [ebx + 0x118c]
call fcn.00419b0a
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5f94
mov ecx, ebx
call fcn.00441536
mov esi, eax
test esi, esi
je 0x43544c
push edi
lea eax, [esi + 0xc4]
push 0x4deca0
push eax
call fcn.004a05b4
add esp, 0xc
add esi, 0xb4
push 1
push esi
push dword [ebx + 0x1c]
call dword [sym.imp.USER32.dll_InvalidateRect]
push 1
push 0
jmp 0x439bae
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push 0x4eea58
call fcn.004a5f94
push 0
jmp 0x4354a3
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push 0x4eea58
call fcn.004a5f94
push 1
jmp 0x4354a3
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push 0x4eea58
call fcn.004a5f94
push 3
jmp 0x4354a3
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push 0x4eea58
call fcn.004a5f94
push 2
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
mov ecx, ebx
call fcn.0043f41f
jmp 0x43eae8
push 0x4eea58
push dword [esi]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43eae8
mov byte [0x4f6ea2], 1
call dword [sym.imp.USER32.dll_GetFocus]
push eax
call fcn.004a2b9b
push eax
push 0x4b8600
call fcn.004a6e69
pop ecx
test eax, eax
pop ecx
jne 0x4354f6
mov ecx, ebx
call fcn.004a56f5
mov esi, dword [sym.imp.USER32.dll_KillTimer]
push 0
push dword [ebx + 0x1c]
call esi
push 4
push dword [ebx + 0x1c]
call esi
mov edi, 0x3e9
push edi
push dword [ebx + 0x1c]
call esi
inc edi
cmp edi, 0x7d0
jle 0x43550f
and dword [ebx + 0x126c], 0
mov ecx, ebx
call fcn.00440f09
mov eax, dword [ebp - 0x2c]
push ecx
add eax, 0xc
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea eax, [ebp - 0x218]
mov ecx, ebx
push eax
call fcn.004421ad
push str._File_
mov byte [ebp - 4], 0x16
push dword [ebp - 0x218]
call fcn.0048a850
pop ecx
pop ecx
test eax, eax
push 1
jne 0x43557a
call fcn.0043f353
push ecx
add eax, 0xcc
mov ecx, esp
mov dword [ebp - 0x1c], esp
jmp 0x435586
push ecx
lea eax, [ebp - 0x218]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea ecx, [ebx + 0x11b8]
call fcn.0042b524
mov ecx, ebx
mov esi, eax
call fcn.00442d60
mov ecx, ebx
call fcn.00441095
test eax, eax
jne 0x4355b7
push 1
push eax
push dword [ebx + 0x1c]
call dword [sym.imp.USER32.dll_InvalidateRect]
test esi, esi
je 0x4355c4
push 1
mov ecx, ebx
call fcn.00442593
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x218]
jmp 0x43eae3
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0xc4]
jmp 0x43eae8
push 0
push 0xf030
jmp 0x4355fb
push 0
push 0xf020
jmp 0x4355fb
push 0
push 0xf120
push 0x112
push dword [ebx + 0x1c]
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x43eae8
push 0x4eea58
push dword [esi]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43eae8
push dword [esi]
call fcn.0048cae6
xor edi, edi
pop ecx
cmp eax, edi
mov dword [ebp - 0x14], eax
jle 0x4356a8
push edi
push dword [ebx + 0x1c]
call dword [sym.imp.USER32.dll_KillTimer]
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp dword [eax + 4], 0x1c
sete cl
inc ecx
inc ecx
mov dword [ebx + 0x126c], ecx
cmp dword [eax + 4], 0x1c
jne 0x435695
push ecx
add eax, 0x10
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea eax, [ebp - 0x2e8]
mov ecx, ebx
push eax
call fcn.004421ad
push eax
lea ecx, [ebx + 0x1270]
mov byte [ebp - 4], 0x17
call fcn.004a605f
lea ecx, [ebp - 0x2e8]
mov byte [ebp - 4], 0xa
call fcn.004a5f26
push edi
push dword [ebp - 0x14]
push edi
push dword [ebx + 0x1c]
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x43eae8
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00413ff7
call fcn.0048aa60
push edi
mov esi, eax
push dword [ebx + 0x1c]
call dword [sym.imp.USER32.dll_KillTimer]
cmp esi, edi
jle 0x43eae8
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp dword [eax + 4], 0x1c
sete cl
inc ecx
inc ecx
mov dword [ebx + 0x126c], ecx
cmp dword [eax + 4], 0x1c
jne 0x43572e
push ecx
add eax, 0x10
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea eax, [ebp - 0x4ac]
mov ecx, ebx
push eax
call fcn.004421ad
push eax
lea ecx, [ebx + 0x1270]
mov byte [ebp - 4], 0x18
call fcn.004a605f
lea ecx, [ebp - 0x4ac]
mov byte [ebp - 4], 0xa
call fcn.004a5f26
push 0
push esi
push 0
jmp 0x43569a
test edi, edi
je 0x43eae8
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0x2c]
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
lea esi, [eax + 0x10]
mov byte [ebp - 4], 0x19
push esi
call fcn.004a5c9b
lea eax, [ebp - 0x2f0]
mov ecx, ebx
push eax
call fcn.004421ad
push dword [esi]
push dword [eax]
call fcn.0048a850
pop ecx
pop ecx
test eax, eax
lea ecx, [ebp - 0x2f0]
setne byte [ebp - 0xd]
call fcn.004a5f26
cmp byte [ebp - 0xd], 0
push ecx
mov ecx, esp
je 0x4357c2
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5c9b
lea eax, [ebp - 0x558]
mov ecx, ebx
push eax
call fcn.004421ad
push eax
lea ecx, [ebp - 0xd0]
mov byte [ebp - 4], 0x1a
call fcn.004a605f
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x558]
jmp 0x435836
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5c9b
lea esi, [ebx + 0x118c]
mov ecx, esi
call fcn.00413ff7
fld st(0)
call fcn.0048aa60
mov dword [ebp - 0x14], eax
fild dword [ebp - 0x14]
fld st(1)
fcompp
fnstsw ax
sahf
jne 0x435809
push dword [ebp - 0x14]
lea eax, [ebp - 0xd0]
fstp st(0)
push 0x4dde4c
push eax
call fcn.004a05b4
add esp, 0xc
jmp 0x43583b
push ecx
push ecx
lea eax, [ebp - 0x2f8]
mov ecx, esi
fstp qword [esp]
push eax
call fcn.00413f30
push eax
lea ecx, [ebp - 0xd0]
mov byte [ebp - 4], 0x1b
call fcn.004a605f
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x2f8]
call fcn.004a5f26
lea eax, [ebp - 0xd0]
lea ecx, [edi + 0xc4]
push eax
call fcn.004a605f
cmp dword [edi + 0x34], 0
je 0x435905
push ecx
lea eax, [ebp - 0xd0]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
mov ecx, dword [edi + 0x34]
call fcn.0040b609
push ecx
lea eax, [ebp - 0xd0]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
push ecx
lea eax, [edi + 0x1c4]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
mov byte [ebp - 4], 0x1c
call fcn.004a5c9b
lea esi, [ebx + 0x118c]
mov byte [ebp - 4], 0x19
mov ecx, esi
call fcn.00414862
mov eax, dword [edi + 0x1ec]
cmp eax, 1
jne 0x4358d8
push dword [ebp - 0xd0]
call fcn.0048cae6
mov dword [ebp - 0x14], eax
push ecx
fild dword [ebp - 0x14]
add edi, 0x1c8
fstp qword [esp]
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
jmp 0x4358f8
cmp eax, 2
jne 0x435905
push dword [ebp - 0xd0]
call fcn.0048cd8e
push ecx
add edi, 0x1c8
fstp qword [esp]
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push edi
call fcn.004a5c9b
mov ecx, esi
call fcn.00419b0a
mov eax, dword [ebp - 0x38]
lea edi, [ebp - 0x674]
push 1
lea esi, [eax + 0xb4]
lea eax, [ebp - 0x674]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
add dword [ebp - 0x66c], 0xc8
push eax
push dword [ebx + 0x1c]
call dword [sym.imp.USER32.dll_InvalidateRect]
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xd0]
jmp 0x43eae3
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5c9b
lea eax, [ebp - 0x4b4]
mov ecx, ebx
push eax
call fcn.004421ad
push eax
lea ecx, [ebp - 0x128]
mov byte [ebp - 4], 0x1d
call fcn.004a605f
lea ecx, [ebp - 0x4b4]
mov byte [ebp - 4], 0xa
call fcn.004a5f26
mov eax, dword [ebp - 0x2c]
push 0x4eea58
push dword [eax + 0x10]
lea esi, [eax + 0x10]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x435b9b
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5c9b
lea eax, [ebp - 0x300]
mov ecx, ebx
push eax
call fcn.004421ad
push dword [esi]
push dword [eax]
call fcn.0048a850
pop ecx
pop ecx
test eax, eax
lea ecx, [ebp - 0x300]
setne byte [ebp - 0xd]
call fcn.004a5f26
cmp byte [ebp - 0xd], 0
push ecx
mov ecx, esp
je 0x435a60
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5c9b
lea eax, [ebp - 0x4bc]
mov ecx, ebx
push eax
call fcn.004421ad
mov esi, eax
lea eax, [ebp - 0x128]
push 0x4dd4ec
push eax
lea eax, [ebp - 0x308]
push eax
mov byte [ebp - 4], 0x1e
call fcn.004a61bb
push esi
push eax
lea eax, [ebp - 0x53c]
mov byte [ebp - 4], 0x1f
push eax
call fcn.004a6155
push eax
lea ecx, [ebp - 0x128]
mov byte [ebp - 4], 0x20
call fcn.004a605f
lea ecx, [ebp - 0x53c]
mov byte [ebp - 4], 0x1f
call fcn.004a5f26
lea ecx, [ebp - 0x308]
mov byte [ebp - 4], 0x1e
call fcn.004a5f26
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x4bc]
jmp 0x435b96
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5c9b
lea edi, [ebx + 0x118c]
mov ecx, edi
call fcn.00413ff7
mov eax, dword [0x4ea054]
mov dword [ebp - 0x1c8], eax
fld st(0)
mov byte [ebp - 4], 0x21
call fcn.0048aa60
mov dword [ebp - 0x14], eax
fild dword [ebp - 0x14]
fld st(1)
fcompp
fnstsw ax
sahf
jne 0x435ab6
push dword [ebp - 0x14]
lea eax, [ebp - 0x1c8]
fstp st(0)
push 0x4e6354
push eax
call fcn.004a05b4
add esp, 0xc
jmp 0x435ae8
push ecx
push ecx
lea eax, [ebp - 0x310]
mov ecx, edi
fstp qword [esp]
push eax
call fcn.00413f30
push eax
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 4], 0x22
call fcn.004a605f
lea ecx, [ebp - 0x310]
mov byte [ebp - 4], 0x21
call fcn.004a5f26
lea eax, [ebp - 0x128]
push 0x4dd4ec
push eax
lea eax, [ebp - 0x320]
push eax
call fcn.004a61bb
push esi
push eax
lea eax, [ebp - 0x4c4]
mov byte [ebp - 4], 0x23
push eax
call fcn.004a6155
push 0x4e6350
push eax
lea eax, [ebp - 0x318]
mov byte [ebp - 4], 0x24
push eax
call fcn.004a61bb
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 4], 0x25
push ecx
push eax
lea eax, [ebp - 0x560]
push eax
call fcn.004a6155
push eax
lea ecx, [ebp - 0x128]
mov byte [ebp - 4], 0x26
call fcn.004a605f
lea ecx, [ebp - 0x560]
mov byte [ebp - 4], 0x25
call fcn.004a5f26
lea ecx, [ebp - 0x318]
mov byte [ebp - 4], 0x24
call fcn.004a5f26
lea ecx, [ebp - 0x4c4]
mov byte [ebp - 4], 0x23
call fcn.004a5f26
lea ecx, [ebp - 0x320]
mov byte [ebp - 4], 0x21
call fcn.004a5f26
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x1c8]
call fcn.004a5f26
mov eax, dword [ebx + 0x12c0]
push 0x30
push eax
mov ecx, ebx
push dword [ebp - 0x128]
call fcn.004a4268
jmp 0x43eae8
mov eax, dword [ebp - 0x2c]
push ecx
add eax, 0x10
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea eax, [ebp - 0xbc]
mov ecx, ebx
push eax
call fcn.004421ad
fldz
push 0
push 0x22
fstp qword [ebp - 0x52c]
fldz
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0x27
fstp qword [ebp - 0x2c4]
call fcn.004a6422
mov dword [ebp - 0x28], eax
inc eax
push eax
push 0x22
lea ecx, [ebp - 0xbc]
call fcn.004a6422
mov edi, eax
lea ecx, [ebp - 0xbc]
lea eax, [edi + 1]
push eax
push 0x2c
call fcn.004a6422
cmp dword [ebp - 0x28], 0
mov dword [ebp - 0x14], eax
jne 0x435cbe
test edi, edi
jle 0x435cbe
dec edi
lea eax, [ebp - 0x568]
push edi
push 1
push eax
lea ecx, [ebp - 0xbc]
call fcn.004a0082
push eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x28
call fcn.004a605f
lea ecx, [ebp - 0x568]
mov byte [ebp - 4], 0x27
call fcn.004a5f26
cmp dword [ebp - 0x14], 0
jle 0x435cf7
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 0xbc]
inc eax
push eax
lea eax, [ebp - 0x328]
push eax
call fcn.004a005f
push eax
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0x29
call fcn.004a605f
lea ecx, [ebp - 0x328]
mov byte [ebp - 4], 0x27
call fcn.004a5f26
push 0x2c
push 0
push dword [ebp - 0xbc]
lea eax, [ebp - 0x30]
push eax
call fcn.004a70a2
push 0x2c
push 1
jmp 0x435ce8
push 0x2c
push 0
push dword [ebp - 0xbc]
lea eax, [ebp - 0x24]
push eax
call fcn.004a70a2
push 0x2c
push 1
push dword [ebp - 0xbc]
lea eax, [ebp - 0x30]
push eax
call fcn.004a70a2
push 0x2c
push 2
push dword [ebp - 0xbc]
lea eax, [ebp - 0x34]
push eax
call fcn.004a70a2
mov edi, 0x4eea58
push edi
push dword [ebp - 0x30]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x435d3f
lea eax, [ebp - 0x52c]
push eax
push ecx
lea eax, [ebp - 0x30]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00419bc0
test eax, eax
jne 0x435d3f
push dword [ebp - 0x30]
call fcn.0048cd8e
fstp qword [ebp - 0x52c]
pop ecx
push edi
push dword [ebp - 0x34]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x435d82
lea eax, [ebp - 0x2c4]
push eax
push ecx
lea eax, [ebp - 0x34]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00419bc0
test eax, eax
jne 0x435d82
push dword [ebp - 0x34]
call fcn.0048cd8e
fstp qword [ebp - 0x2c4]
pop ecx
fld qword [ebp - 0x52c]
and dword [ebp - 0x28], 0
call fcn.0048aa60
mov ecx, eax
mov edx, eax
mov edi, eax
mov dword [ebp - 0x4c], eax
and ecx, 0xf
and edx, 0xf0
and edi, 0xf00
and eax, 0xf000
sub ecx, 0
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x14], 3
je 0x435df0
dec ecx
je 0x435dec
dec ecx
je 0x435de8
dec ecx
je 0x435de4
dec ecx
je 0x435de0
dec ecx
je 0x435dd4
dec ecx
jne 0x435df7
push 6
pop edi
jmp 0x435dfa
push 5
pop edi
mov dword [ebp - 0x14], 2
jmp 0x435dfa
push 4
jmp 0x435dd6
push 3
jmp 0x435dd1
push 2
jmp 0x435dd1
push 1
jmp 0x435dd6
mov dword [ebp - 0x14], 1
mov edi, dword [ebp - 0x28]
cmp edx, 0x10
je 0x435e1c
cmp edx, 0x20
je 0x435e17
cmp edx, 0x30
je 0x435e12
cmp edx, 0x40
jne 0x435e1f
or edi, edx
jmp 0x435e1f
or edi, 0x30
jmp 0x435e1f
or edi, 0x20
jmp 0x435e1f
or edi, 0x10
mov ecx, 0x1000
cmp eax, ecx
je 0x435e31
mov ecx, 0x2000
cmp eax, ecx
jne 0x435e33
or edi, ecx
mov eax, pe_nt_image_headers32
cmp dword [ebp - 0x50], eax
je 0x435e4d
mov eax, 0x200
cmp dword [ebp - 0x50], eax
jne 0x435e55
cmp dword [ebp - 0x14], 2
jmp 0x435e51
cmp dword [ebp - 0x14], 1
jle 0x435e55
or edi, eax
mov ecx, dword [ebp - 0x4c]
mov eax, 0x40000
mov edx, ecx
and edx, eax
cmp edx, eax
jne 0x435e67
or edi, eax
mov eax, 0x80000
and ecx, eax
cmp ecx, eax
jne 0x435e74
or edi, eax
fld qword [ebp - 0x2c4]
fcomp qword [0x4b7aa8]
and dword [ebp - 0x14], 0
and byte [0x4f6df0], 0
fnstsw ax
sahf
jbe 0x435ed7
mov byte [0x4f6df1], 1
call dword [sym.imp.KERNEL32.DLL_GetCurrentThreadId]
fld qword [ebp - 0x2c4]
mov dword [ebp - 0x620], eax
call fcn.0048aa60
mov dword [ebp - 0x61c], eax
lea eax, [ebp - 0x644]
push eax
xor eax, eax
lea ecx, [ebp - 0x620]
push eax
push ecx
push 0x443ee6
push eax
push eax
call fcn.0048df77
add esp, 0x18
mov dword [ebp - 0x14], eax
push edi
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5c9b
lea eax, [ebp - 0x4cc]
mov ecx, ebx
push eax
call fcn.004421ad
mov ecx, eax
mov byte [ebp - 4], 0x2a
call fcn.00426088
push eax
lea ecx, [ebp - 0x24]
call fcn.00426088
push eax
mov ecx, ebx
call fcn.004a4268
lea ecx, [ebp - 0x4cc]
mov esi, eax
mov byte [ebp - 4], 0x27
call fcn.004a5f26
cmp dword [ebp - 0x14], 0
je 0x435f40
and byte [0x4f6df1], 0
push 0xffffffffffffffff
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.DLL_WaitForSingleObject]
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
cmp byte [0x4f6df0], 1
je case.0x435f53.8
push 0xa
lea eax, [esi - 1]
pop ecx
cmp eax, ecx
ja case.0x435f53.8
jmp dword [eax*4 + 0x43f23d]
mov dword [ebp - 0x38], 1
jmp 0x435fab
mov dword [ebp - 0x38], 2
jmp 0x435fab
mov dword [ebp - 0x38], 3
jmp 0x435fab
mov dword [ebp - 0x38], 4
jmp 0x435fab
mov dword [ebp - 0x38], 5
jmp 0x435fab
mov dword [ebp - 0x38], 6
jmp 0x435fab
mov dword [ebp - 0x38], 7
jmp 0x435fab
mov dword [ebp - 0x38], ecx
jmp 0x435fab
mov dword [ebp - 0x38], 0xb
jmp 0x435fab
or dword [ebp - 0x38], 0xffffffff
fild dword [ebp - 0x38]
push ecx
push ecx
mov esi, str.CBK_MsgEx
fstp qword [esp]
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5f94
lea ecx, [ebx + 0x118c]
call fcn.00419b0a
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5f94
mov ecx, ebx
call fcn.00441536
mov esi, eax
test esi, esi
je 0x43603f
push dword [ebp - 0x38]
lea eax, [esi + 0xc4]
push 0x4dde4c
push eax
call fcn.004a05b4
add esp, 0xc
lea eax, [esi + 0xb4]
mov edi, dword [sym.imp.USER32.dll_UnionRect]
mov dword [ebp - 0x14], eax
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x84]
push eax
call edi
mov ecx, esi
call fcn.0042a4a1
test al, al
je 0x43603f
push dword [ebp - 0x14]
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x84]
push eax
call edi
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xbc]
jmp 0x43eae3
mov byte [ebx + 0x134a], 1
jmp 0x43eae8
test edi, edi
je 0x43eae8
cmp dword [edi + 0x38], 0x10
jne 0x43eae8
cmp dword [edi + 0x3c], 0
je 0x43eae8
push dword [edi + 0xd0]
mov ecx, edi
call fcn.004265e2
test eax, eax
jle 0x43eae8
fild dword [edi + 0x1f0]
lea eax, [eax + eax*4]
mov edi, dword [edi + 0x40]
shl eax, 1
fmul qword [0x4b8cb0]
mov dword [ebp - 0x14], eax
push 0
fild dword [ebp - 0x14]
fmulp st(1)
call fcn.0048aa60
push eax
jmp 0x435699
test edi, edi
je 0x43eae8
cmp dword [edi + 0x38], 0x10
jne 0x43eae8
push dword [edi + 0x40]
push dword [ebx + 0x1c]
call dword [sym.imp.USER32.dll_KillTimer]
jmp 0x43eae8
test edi, edi
je 0x43eae8
cmp dword [edi + 0x38], 0x10
jne 0x43eae8
and dword [edi + 0xd0], 0
add edi, 0xb4
push edi
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x84]
push eax
call dword [sym.imp.USER32.dll_UnionRect]
jmp 0x43eae8
test edi, edi
je 0x43eae8
lea eax, [edi + 0xc8]
lea ecx, [edi + 0x60]
push eax
call fcn.004a605f
add edi, 0x54
mov ecx, ebx
push edi
call fcn.004348ef
jmp 0x43eae8
push 0x4eea58
push dword [esi]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43eae8
push 0x10
call fcn.004a64f5
pop ecx
mov dword [ebp - 0x1c], eax
test eax, eax
mov byte [ebp - 4], 0x2b
je 0x43616b
mov ecx, eax
call fcn.0042ef7b
mov edi, eax
jmp 0x43616d
xor edi, edi
test edi, edi
mov byte [ebp - 4], 0xa
je 0x43eae8
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5c9b
lea eax, [ebp - 0x2bc]
mov ecx, ebx
push eax
call fcn.004421ad
mov eax, dword [ebp - 0x2c]
push ecx
add eax, 0x10
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0x2c
call fcn.004a5c9b
lea eax, [ebp - 0x2a8]
mov ecx, ebx
push eax
call fcn.004421ad
push ecx
lea eax, [ebp - 0x2a8]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0x2d
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00413ff7
fcomp qword [0x4b7aa8]
fnstsw ax
sahf
je 0x4361ec
mov byte [ebp - 0x2a0], 1
jmp 0x4361f3
and byte [ebp - 0x2a0], 0
push dword [ebp - 0x2a0]
lea eax, [ebp - 0x2bc]
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
mov ecx, edi
call fcn.0042f14e
push edi
mov ecx, ebx
call fcn.004348ef
mov eax, dword [edi]
push 1
mov ecx, edi
call dword [eax + 4]
lea ecx, [ebp - 0x2a8]
mov byte [ebp - 4], 0x2c
call fcn.004a5f26
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x2bc]
jmp 0x43eae3
push 0x4eea58
push dword [esi]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43eae8
mov eax, dword [ebp - 0x2c]
push 0x4eea58
push dword [eax + 0x10]
lea edi, [eax + 0x10]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43eae8
push dword [edi]
call fcn.0048cae6
test eax, eax
pop ecx
mov dword [ebp - 0x14], eax
jg 0x4362ad
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push edi
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00413ff7
call fcn.0048aa60
cmp eax, 1
jge 0x4362aa
and dword [ebp - 0x14], 0
jmp 0x4362ad
mov dword [ebp - 0x14], eax
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5c9b
lea eax, [ebp - 0x134]
mov ecx, ebx
push eax
call fcn.004421ad
push 4
lea ecx, [ebp - 0x134]
pop edi
mov byte [ebp - 4], 0x2e
push 0x4de7f8
call fcn.004a022e
mov esi, eax
test esi, esi
jle 0x43640b
lea eax, [ebp - 0xcc]
push esi
push eax
lea ecx, [ebp - 0x134]
call fcn.004a0194
inc esi
lea eax, [ebp - 0x330]
push esi
push eax
lea ecx, [ebp - 0x134]
mov byte [ebp - 4], 0x2f
call fcn.004a005f
push eax
lea ecx, [ebp - 0x134]
mov byte [ebp - 4], 0x30
call fcn.004a605f
lea ecx, [ebp - 0x330]
mov byte [ebp - 4], 0x2f
call fcn.004a5f26
lea ecx, [ebp - 0xcc]
call fcn.004a6481
push 0x4e633c
lea ecx, [ebp - 0xcc]
call fcn.004a022e
test eax, eax
jne 0x4363fc
lea eax, [ebp - 0x56c]
push 5
push eax
lea ecx, [ebp - 0xcc]
call fcn.004a005f
push eax
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0x31
call fcn.004a605f
lea ecx, [ebp - 0x56c]
mov byte [ebp - 4], 0x2f
call fcn.004a5f26
push 0x4e6338
push dword [ebp - 0xcc]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
jne 0x4363a5
mov edi, 0x3e9
jmp 0x4363fc
push 0x4e6334
push dword [ebp - 0xcc]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
jne 0x4363c2
mov edi, 0x3ea
jmp 0x4363fc
push 0x4e6330
push dword [ebp - 0xcc]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
jne 0x4363df
mov edi, 0x3eb
jmp 0x4363fc
push dword [ebp - 0xcc]
call fcn.0048cae6
test eax, eax
pop ecx
jle 0x4363fc
cmp eax, 0x3e8
jg 0x4363fc
lea edi, [eax + 0x3e8]
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0x2e
call fcn.004a5f26
push edi
push dword [ebx + 0x1c]
call dword [sym.imp.USER32.dll_KillTimer]
lea eax, [ebp - 0x134]
cmp edi, 4
push eax
lea ecx, [ebx + 0x1e4]
je 0x43642e
lea ecx, [ebx + edi*4 - 0xdbc]
call fcn.004a605f
push 0
push dword [ebp - 0x14]
push edi
push dword [ebx + 0x1c]
call dword [sym.imp.USER32.dll_SetTimer]
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x134]
jmp 0x43eae3
push 0x4eea58
push dword [esi]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43eae8
push ebx
push ecx
mov edi, esp
mov dword [ebp - 0x1c], esp
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5c9b
push edi
mov ecx, ebx
call fcn.004421ad
lea ecx, [ebx + 0x11b8]
call fcn.0042bcdf
mov dword [ebp - 0x14], eax
push ecx
fild dword [ebp - 0x14]
push ecx
fstp qword [esp]
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push str.MCIResult
call fcn.004a5f94
jmp 0x43c42a
mov eax, dword [ebp - 0x2c]
push 0
push ecx
add eax, 0x10
mov edi, esp
mov dword [ebp - 0x1c], esp
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.004a5c9b
push edi
mov ecx, ebx
call fcn.004421ad
push ecx
mov byte [ebp - 4], 0x32
mov edi, esp
mov dword [ebp - 0x14], esp
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
jmp 0x436547
mov eax, dword [ebp - 0x2c]
push 1
push ecx
add eax, 0x10
mov edi, esp
mov dword [ebp - 0x1c], esp
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.004a5c9b
push edi
mov ecx, ebx
call fcn.004421ad
push ecx
mov byte [ebp - 4], 0x33
mov edi, esp
mov dword [ebp - 0x14], esp
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
jmp 0x436547
mov eax, dword [ebp - 0x2c]
push 2
push ecx
add eax, 0x10
mov edi, esp
mov dword [ebp - 0x1c], esp
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.004a5c9b
push edi
mov ecx, ebx
call fcn.004421ad
push ecx
mov byte [ebp - 4], 0x34
mov edi, esp
mov dword [ebp - 0x14], esp
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push esi
call fcn.004a5c9b
push edi
mov ecx, ebx
call fcn.004421ad
mov ecx, ebx
mov byte [ebp - 4], 0xa
call fcn.0043fa28
jmp 0x43eae8
mov eax, dword [ebp - 0x2c]
push ecx
add eax, 0x10
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
push ecx
mov byte [ebp - 4], 0x35
mov edi, esp
mov dword [ebp - 0x14], esp
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push esi
call fcn.004a5c9b
push edi
mov ecx, ebx
call fcn.004421ad
mov ecx, ebx
mov byte [ebp - 4], 0xa
call fcn.0043fe99
jmp 0x43eae8
mov eax, dword [ebp - 0x2c]
push 0x4eea58
push dword [eax + 0x10]
lea edi, [eax + 0x10]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43eae8
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push edi
call fcn.004a5c9b
lea eax, [ebp - 0x338]
mov ecx, ebx
push eax
call fcn.004421ad
push dword [edi]
push dword [eax]
call fcn.0048a850
pop ecx
pop ecx
test eax, eax
lea ecx, [ebp - 0x338]
setne byte [ebp - 0xd]
call fcn.004a5f26
cmp byte [ebp - 0xd], 0
push ecx
mov ecx, esp
je 0x4366ca
mov dword [ebp - 0x1c], esp
push edi
call fcn.004a5c9b
lea eax, [ebp - 0x2b8]
mov ecx, ebx
push eax
call fcn.004421ad
mov eax, dword [0x4ea054]
mov dword [ebp - 0x16c], eax
push ecx
mov byte [ebp - 4], 0x37
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5c9b
lea eax, [ebp - 0x4d4]
mov ecx, ebx
push eax
call fcn.004421ad
push eax
lea ecx, [ebp - 0x16c]
mov byte [ebp - 4], 0x38
call fcn.004a605f
lea ecx, [ebp - 0x4d4]
mov byte [ebp - 4], 0x37
call fcn.004a5f26
push 0x4eea58
push dword [ebp - 0x16c]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
jne 0x43668a
push str.Default
lea ecx, [ebp - 0x16c]
call fcn.004a60af
mov esi, dword [ebx + 0x1334]
call fcn.004ac071
push dword [ebp - 0x2b8]
mov eax, dword [eax + 4]
mov ecx, eax
push dword [ebp - 0x16c]
push esi
call fcn.004aae6a
lea ecx, [ebp - 0x16c]
mov byte [ebp - 4], 0x36
call fcn.004a5f26
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x2b8]
jmp 0x43eae3
mov dword [ebp - 0x1c], esp
push edi
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00413ff7
call fcn.0048aa60
mov edi, eax
mov eax, dword [0x4ea054]
mov dword [ebp - 0x174], eax
push ecx
mov byte [ebp - 4], 0x39
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5c9b
lea eax, [ebp - 0x340]
mov ecx, ebx
push eax
call fcn.004421ad
push eax
lea ecx, [ebp - 0x174]
mov byte [ebp - 4], 0x3a
call fcn.004a605f
lea ecx, [ebp - 0x340]
mov byte [ebp - 4], 0x39
call fcn.004a5f26
push 0x4eea58
push dword [ebp - 0x174]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
jne 0x436753
push str.Default
lea ecx, [ebp - 0x174]
call fcn.004a60af
mov esi, dword [ebx + 0x1334]
call fcn.004ac071
mov eax, dword [eax + 4]
push edi
push dword [ebp - 0x174]
mov ecx, eax
push esi
call fcn.004aadf5
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x174]
jmp 0x43eae3
mov eax, dword [ebp - 0x2c]
push 0x4eea58
push dword [eax + 0x10]
lea edi, [eax + 0x10]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43eae8
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5c9b
lea eax, [ebp - 0x160]
mov ecx, ebx
push eax
call fcn.004421ad
push 0x4eea58
mov byte [ebp - 4], 0x3b
push dword [ebp - 0x160]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
jne 0x4367e0
push str.Default
lea ecx, [ebp - 0x160]
call fcn.004a60af
push str._____
mov ecx, edi
call fcn.004a022e
test eax, eax
jle 0x43699f
push edi
lea ecx, [ebp - 0xfc]
call fcn.004a5c9b
push 0x4de5bc
lea ecx, [ebp - 0xfc]
mov byte [ebp - 4], 0x3c
call fcn.004a022e
push 0x4e6318
lea ecx, [ebp - 0xfc]
mov dword [ebp - 0x14], eax
call fcn.004a022e
cmp dword [ebp - 0x14], 0xffffffff
jg 0x436836
cmp eax, 0xffffffff
jle 0x436939
push 0x4de56c
lea ecx, [ebp - 0xfc]
call fcn.004a022e
push 0x4de568
lea ecx, [ebp - 0xfc]
mov esi, eax
call fcn.004a022e
mov ecx, dword [0x4ea054]
mov dword [ebp - 0x1d0], ecx
sub eax, esi
lea ecx, [ebp - 0xfc]
dec eax
mov byte [ebp - 4], 0x3d
push eax
lea eax, [esi + 1]
push eax
lea eax, [ebp - 0x54c]
push eax
call fcn.004a0082
push eax
lea ecx, [ebp - 0x1d0]
mov byte [ebp - 4], 0x3e
call fcn.004a605f
lea ecx, [ebp - 0x54c]
mov byte [ebp - 4], 0x3d
call fcn.004a5f26
lea eax, [ebp - 0x5e8]
push eax
push ecx
lea eax, [ebp - 0x1d0]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00419bc0
test eax, eax
jne 0x4368db
push dword [ebp - 0x1d0]
call fcn.0048cd8e
fstp qword [ebp - 0x5e8]
pop ecx
cmp dword [ebp - 0x14], 0xffffffff
jle 0x4368e4
mov esi, dword [ebp - 0x14]
lea eax, [ebp - 0x348]
push esi
push eax
mov ecx, edi
call fcn.004a0194
mov esi, eax
fld qword [ebp - 0x5e8]
mov byte [ebp - 4], 0x3f
call fcn.0048aa60
push eax
lea eax, [ebp - 0xfc]
push dword [esi]
push 0x4de554
push eax
call fcn.004a05b4
add esp, 0x10
lea ecx, [ebp - 0x348]
mov byte [ebp - 4], 0x3d
call fcn.004a5f26
lea ecx, [ebp - 0x1d0]
mov byte [ebp - 4], 0x3c
call fcn.004a5f26
push ecx
lea ecx, [ebp - 0x160]
mov esi, esp
mov dword [ebp - 0x1c], esp
push 0x4eea58
call fcn.00426088
push eax
lea ecx, [ebx + 0x1334]
call fcn.00426088
push eax
push esi
call fcn.0043f353
mov ecx, eax
call fcn.004ac57d
push ecx
lea eax, [ebp - 0xfc]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
mov byte [ebp - 4], 0x40
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
mov byte [ebp - 4], 0x3c
call fcn.00414862
lea ecx, [ebp - 0xfc]
mov byte [ebp - 4], 0x3b
call fcn.004a5f26
jmp 0x4369df
mov esi, dword [ebx + 0x1334]
call fcn.004ac071
mov eax, dword [eax + 4]
push 0
push dword [ebp - 0x160]
mov ecx, eax
push esi
call fcn.004ac511
mov dword [ebp - 0x14], eax
push ecx
fild dword [ebp - 0x14]
push ecx
fstp qword [esp]
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push edi
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00419b0a
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x160]
jmp 0x43eae3
test edi, edi
je 0x43eae8
lea ecx, [ebp - 0x734]
call fcn.0042d5f5
push ecx
lea eax, [edi + 0xc4]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0x41
call fcn.004a5c9b
lea ecx, [ebp - 0x734]
call fcn.0042e292
mov eax, dword [ebp - 0x2c]
push str.FONT_FROM_OBJECT
push dword [eax + 0x10]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
jne 0x436a9f
lea ecx, [ebp - 0x248]
call fcn.0041f4f3
mov esi, vtable.CFont.0
mov dword [ebp - 0x248], esi
add edi, 0x154
mov byte [ebp - 4], 0x42
push edi
call dword [sym.imp.GDI32.dll_CreateFontIndirectA]
push eax
lea ecx, [ebp - 0x248]
call fcn.004a9c67
lea eax, [ebp - 0x248]
lea ecx, [ebp - 0x734]
push eax
call fcn.0042d6bd
lea ecx, [ebp - 0x248]
call fcn.004a9cbe
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 0x41
mov dword [ebp - 0x248], esi
call fcn.00401f86
jmp 0x436aac
push 0
lea ecx, [ebp - 0x734]
call fcn.0042d6bd
lea ecx, [ebp - 0x734]
mov byte [ebp - 4], 0xa
call fcn.0042d67e
jmp 0x43eae8
push 0x4eea58
push dword [esi]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43eae8
push ecx
mov edi, esp
mov dword [ebp - 0x1c], esp
push ecx
mov dword [ebp - 0x14], edi
mov edi, esp
mov dword [ebp - 0x1c], esp
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5c9b
push edi
mov ecx, ebx
call fcn.004421ad
mov eax, dword [ebp - 0x14]
push eax
call fcn.004311d6
pop ecx
pop ecx
mov ecx, ebx
call fcn.0043ff72
jmp 0x43eae8
push 0x4eea58
mov dword [ebp - 0x14], 0x64
push dword [esi]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x436b48
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00413ff7
call fcn.0048aa60
mov dword [ebp - 0x14], eax
xor eax, eax
sub esp, 0x10
lea esi, [ebp - 0x630]
mov edi, esp
mov dword [ebp - 0x630], eax
mov dword [ebp - 0x62c], eax
mov dword [ebp - 0x628], eax
mov dword [ebp - 0x624], eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x14]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
jmp 0x436be2
test edi, edi
je 0x43eae8
mov eax, dword [ebp - 0x38]
lea edi, [ebp - 0x6ec]
push 0x4eea58
mov dword [ebp - 0x14], 0x64
lea esi, [eax + 0xb4]
mov eax, dword [ebp - 0x2c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push dword [eax + 0x10]
movsd dword es:[edi], dword [esi]
lea esi, [eax + 0x10]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x436bd0
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00413ff7
call fcn.0048aa60
mov dword [ebp - 0x14], eax
sub esp, 0x10
lea esi, [ebp - 0x6ec]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x14]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov ecx, ebx
call fcn.00440219
jmp 0x43eae8
mov ecx, ebx
call fcn.00440637
test eax, eax
jne 0x43eae8
push eax
push 4
push str.Your_system_needs_to_be_updated_with_the_latest_Text_to_Speech_control._nDo_you_want_to_update_your_system___Recomended_
call fcn.004aacbc
cmp eax, 6
jne 0x43eae8
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push str._SrcDir_TTSSpchapi.exe
call fcn.004a5f94
lea eax, [ebp - 0xc8]
push eax
call fcn.004311d6
add esp, 4
lea eax, [ebp - 0xc8]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0x43
call fcn.004a5c9b
mov ecx, ebx
call fcn.004405e9
xor esi, esi
cmp eax, esi
je 0x436c7e
push 0x4e6268
lea ecx, [ebp - 0xc8]
call fcn.004a6302
push ecx
lea eax, [ebp - 0xc8]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
call fcn.004305bb
pop ecx
jmp 0x436cb3
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0x4dc]
push str.Cannot_find_API_n
push eax
call fcn.004a622f
mov eax, dword [eax]
push esi
push esi
push eax
mov byte [ebp - 4], 0x44
call fcn.004aacbc
lea ecx, [ebp - 0x4dc]
mov byte [ebp - 4], 0x43
call fcn.004a5f26
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push str._SrcDir_TTSmsttss22L.exe
call fcn.004a5f94
lea eax, [ebp - 0x350]
push eax
call fcn.004311d6
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x45
call fcn.004a605f
lea ecx, [ebp - 0x350]
mov byte [ebp - 4], 0x43
call fcn.004a5f26
push ecx
lea eax, [ebp - 0xc8]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
mov ecx, ebx
call fcn.004405e9
cmp eax, esi
je 0x436d37
push 0x4e6268
lea ecx, [ebp - 0xc8]
call fcn.004a6302
push ecx
lea eax, [ebp - 0xc8]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
call fcn.004305bb
pop ecx
jmp 0x436d6c
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0x584]
push str.Cannot_find_TTS_engine_n
push eax
call fcn.004a622f
mov eax, dword [eax]
push esi
push esi
push eax
mov byte [ebp - 4], 0x46
call fcn.004aacbc
lea ecx, [ebp - 0x584]
mov byte [ebp - 4], 0x43
call fcn.004a5f26
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xc8]
jmp 0x43eae3
mov ecx, ebx
call fcn.00440681
jmp 0x43eae8
push 0x4eea58
push dword [esi]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43eae8
push ecx
mov edi, esp
mov dword [ebp - 0x1c], esp
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5c9b
push edi
mov ecx, ebx
call fcn.004421ad
jmp 0x436dd3
test edi, edi
je 0x43eae8
push ecx
add edi, 0xc4
mov ecx, esp
mov dword [ebp - 0x1c], esp
push edi
call fcn.004a5c9b
mov ecx, ebx
call fcn.00440760
jmp 0x43eae8
mov eax, dword [0x4f6da8]
test eax, eax
je 0x43eae8
mov ecx, dword [eax]
push eax
call dword [ecx + 0x2c]
jmp 0x43eae8
mov eax, dword [0x4f6da8]
test eax, eax
je 0x43eae8
mov ecx, dword [eax]
push eax
call dword [ecx + 0x24]
jmp 0x43eae8
mov eax, dword [0x4f6da8]
test eax, eax
je 0x43eae8
mov ecx, dword [eax]
push eax
call dword [ecx + 0x28]
jmp 0x43eae8
push 0x4eea58
push dword [esi]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43eae8
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00413ff7
call fcn.0048aa60
mov ecx, dword [0x4f6da4]
test ecx, ecx
je 0x43eae8
cmp eax, 0x2e
jle 0x43eae8
cmp eax, 0xc9
jge 0x43eae8
test eax, eax
jle 0x43eae8
cmp eax, 0xffff
jge 0x43eae8
mov edx, dword [ecx]
push eax
push ecx
call dword [edx + 0x10]
jmp 0x43eae8
push 0x4eea58
push dword [esi]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43eae8
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00413ff7
call fcn.0048aa60
mov ecx, dword [0x4f6da4]
test ecx, ecx
je 0x43eae8
cmp eax, 0x1d
jle 0x43eae8
cmp eax, 0x1c2
jge 0x43eae8
test eax, eax
jle 0x43eae8
cmp eax, 0xffffffff
jae 0x43eae8
mov edx, dword [ecx]
push eax
push ecx
call dword [edx + 0x20]
jmp 0x43eae8
test edi, edi
je 0x43eae8
mov eax, dword [ebp - 0x2c]
push 0x4eea58
push dword [eax + 0x10]
lea edi, [eax + 0x10]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43eae8
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5c9b
lea eax, [ebp - 0x184]
mov ecx, ebx
push eax
call fcn.004421ad
push ecx
mov byte [ebp - 4], 0x47
mov ecx, esp
mov dword [ebp - 0x1c], esp
push edi
call fcn.004a5c9b
lea eax, [ebp - 0x6c]
mov ecx, ebx
push eax
call fcn.004421ad
push 1
push ecx
lea eax, [ebp - 0x184]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0x48
call fcn.004a5c9b
mov ecx, ebx
call fcn.00441536
mov edi, eax
test edi, edi
mov dword [ebp - 0x14], edi
je 0x437e4a
mov eax, dword [0x4ea054]
mov dword [ebp - 0x44], eax
push 0x3d
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x49
call fcn.004a6414
mov esi, eax
mov eax, dword [edi + 0x38]
inc esi
test eax, eax
mov dword [ebp - 0x4c], esi
jle 0x43715a
cmp eax, 5
jle 0x436fd0
cmp eax, 7
je 0x436fd0
cmp eax, 0xb
je 0x436fd0
cmp eax, 0x11
jne 0x43715a
cmp eax, 0x11
mov eax, str.SCRIPT
je 0x436fdf
mov eax, str.MOUSEUPSCRIPT
push eax
lea ecx, [ebp - 0x44]
call fcn.004a60af
mov eax, dword [ebp - 0x44]
and byte [ebp - 0x15], 0
mov esi, dword [eax - 8]
cmp dword [ebp - 0x4c], esi
jle 0x437004
push eax
lea ecx, [ebp - 0x6c]
call fcn.004a022e
test eax, eax
je 0x43703f
cmp dword [edi + 0x38], 0x11
je 0x437157
push str.MOUSEDOWNSCRIPT
lea ecx, [ebp - 0x44]
call fcn.004a60af
mov eax, dword [ebp - 0x44]
mov byte [ebp - 0x15], 1
mov esi, dword [eax - 8]
cmp dword [ebp - 0x4c], esi
jle 0x437157
push eax
lea ecx, [ebp - 0x6c]
call fcn.004a022e
test eax, eax
jne 0x437157
mov eax, dword [ebp - 0x4c]
lea ecx, [ebp - 0x6c]
sub eax, esi
dec eax
push eax
lea eax, [ebp - 0x358]
push esi
push eax
call fcn.004a0082
push eax
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x4a
call fcn.004a605f
lea ecx, [ebp - 0x358]
mov byte [ebp - 4], 0x49
call fcn.004a5f26
push 0x3a
lea ecx, [ebp - 0x44]
call fcn.004a6414
test eax, eax
jne 0x4370b0
push ecx
lea ecx, [ebp - 0x44]
mov eax, esp
mov dword [ebp - 0x1c], esp
push 1
push eax
call fcn.004a005f
lea ecx, [ebx + 0x118c]
call fcn.00413ff7
fcomp qword [0x4b7aa8]
fnstsw ax
sahf
jne 0x4370b0
and byte [ebp - 0x1d8], 0
jmp 0x4370b7
mov byte [ebp - 0x1d8], 1
push ecx
lea ecx, [ebp - 0x6c]
mov eax, esp
mov dword [ebp - 0x1c], esp
push dword [ebp - 0x4c]
push eax
call fcn.004a005f
lea eax, [ebp - 0x4e4]
mov ecx, ebx
push eax
call fcn.004421ad
push eax
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x4b
call fcn.004a605f
lea ecx, [ebp - 0x4e4]
mov byte [ebp - 4], 0x49
call fcn.004a5f26
push dword [ebp - 0x1d8]
cmp byte [ebp - 0x15], 0
push ecx
mov ecx, esp
je 0x437113
lea eax, [ebp - 0x44]
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea ecx, [edi + 0x44]
jmp 0x437122
lea eax, [ebp - 0x44]
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea ecx, [edi + 0x54]
call fcn.0042f14e
push 0x4eea58
push dword [ebp - 0x44]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x437e3e
cmp dword [edi + 0x38], 0x11
je 0x437e3e
mov dword [edi + 0xb0], 1
jmp 0x437e3e
mov esi, dword [ebp - 0x4c]
lea eax, [ebp - 0x24]
push eax
push ecx
lea eax, [ebp - 0x6c]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
push 1
push ebx
call fcn.00434867
add esp, 0x10
cmp eax, 1
jne 0x437e3e
push 7
lea eax, [ebp - 0x368]
push 0
push eax
lea ecx, [ebp - 0x6c]
call fcn.004a0082
push str.BGCOLOR
mov byte [ebp - 4], 0x4c
push dword [eax]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
jne 0x4371b7
test esi, esi
setg al
test al, al
jne 0x43724f
push 9
lea eax, [ebp - 0x2d8]
push 0
push eax
lea ecx, [ebp - 0x6c]
call fcn.004a0082
push str.TEXTCOLOR
push dword [eax]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
jne 0x4371eb
test esi, esi
setg al
test al, al
je 0x4371eb
mov byte [ebp - 0x15], 1
jmp 0x4371ef
and byte [ebp - 0x15], 0
lea ecx, [ebp - 0x2d8]
call fcn.004a5f26
cmp byte [ebp - 0x15], 0
jne 0x43724f
push 0xb
lea eax, [ebp - 0x554]
push 0
push eax
lea ecx, [ebp - 0x6c]
call fcn.004a0082
push str.BORDERCOLOR
push dword [eax]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
jne 0x437234
test esi, esi
setg al
test al, al
je 0x437234
mov byte [ebp - 0x15], 1
jmp 0x437238
and byte [ebp - 0x15], 0
lea ecx, [ebp - 0x554]
call fcn.004a5f26
cmp byte [ebp - 0x15], 0
jne 0x43724f
and byte [ebp - 0x15], 0
jmp 0x437253
mov byte [ebp - 0x15], 1
lea ecx, [ebp - 0x368]
mov byte [ebp - 4], 0x49
call fcn.004a5f26
cmp byte [ebp - 0x15], 0
je 0x437465
lea eax, [ebp - 0x4ec]
push esi
push eax
lea ecx, [ebp - 0x6c]
call fcn.004a005f
push eax
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x4d
call fcn.004a605f
lea ecx, [ebp - 0x4ec]
mov byte [ebp - 4], 0x49
call fcn.004a5f26
lea ecx, [ebp - 0x44]
call fcn.004a0698
mov esi, str.CBK_SelColor
lea ecx, [ebp - 0x44]
push esi
call fcn.004a022e
test eax, eax
jne 0x4372cd
lea eax, [ebp - 0x44]
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5f94
lea ecx, [ebx + 0x118c]
call fcn.00414931
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x24]
push eax
push ecx
mov esi, esp
mov dword [ebp - 0x1c], esp
push ecx
lea eax, [ebp - 0x44]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
push esi
mov ecx, ebx
call fcn.004421ad
push 3
push ebx
call fcn.00434867
add esp, 0x18
test eax, eax
je 0x437e0a
push ecx
lea eax, [ebp - 0x24]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea esi, [ebx + 0x118c]
mov ecx, esi
call fcn.00413ff7
fstp qword [ebp - 0x180]
push ecx
lea eax, [ebp - 0x30]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
mov ecx, esi
call fcn.00413ff7
fstp qword [ebp - 0x250]
push ecx
lea eax, [ebp - 0x34]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
mov ecx, esi
call fcn.00413ff7
call fcn.0048aa60
fld qword [ebp - 0x250]
xor edx, edx
mov dh, al
mov dword [ebp - 0x14], edx
call fcn.0048aa60
mov edx, dword [ebp - 0x14]
fld qword [ebp - 0x180]
mov dl, al
shl edx, 8
mov dword [ebp - 0x14], edx
call fcn.0048aa60
mov ecx, dword [ebp - 0x14]
movzx eax, al
or ecx, eax
cmp dword [ebp - 0x4c], 8
mov edx, ecx
jne 0x4373fc
mov ecx, dword [edi + 0x38]
cmp ecx, 0x16
jne 0x4373ad
mov dword [edi + 0x14c], edx
jmp 0x437e0a
cmp ecx, 0x1d
jne 0x4373d4
mov eax, dword [edi + 0x14]
test eax, eax
je 0x4373d4
mov dword [eax + 0xbc], edx
mov ecx, dword [edi + 0x14]
call fcn.00411c5f
mov ecx, dword [edi + 0x14]
call fcn.00411ca6
jmp 0x437e0a
cmp ecx, 6
je 0x4373f1
cmp ecx, 2
je 0x4373f1
cmp ecx, 7
je 0x4373f1
cmp ecx, 0xd
je 0x4373f1
cmp ecx, 0xb
jne 0x437e0a
mov dword [edi + 0x148], edx
jmp 0x437e0a
cmp dword [ebp - 0x4c], 0xa
mov eax, dword [edi + 0x38]
jne 0x437435
cmp eax, 0x16
je 0x4373f1
cmp eax, 1
je 0x4373f1
cmp eax, 0xf
je 0x4373f1
cmp eax, 0xb
je 0x4373a2
cmp eax, 0x1d
jne 0x437e0a
mov eax, dword [edi + 0x14]
test eax, eax
je 0x437e0a
mov dword [eax + 0xc0], edx
jmp 0x4373bf
cmp eax, 0x16
jne 0x437445
mov dword [edi + 0x150], edx
jmp 0x437e0a
cmp eax, 2
je 0x4373a2
cmp eax, 7
je 0x4373a2
cmp eax, 0xd
jne 0x437e0a
jmp 0x4373a2
cmp dword [edi + 0x38], 0x16
jne 0x437568
push 2
lea eax, [ebp - 0x370]
push 0
push eax
lea ecx, [ebp - 0x6c]
call fcn.004a0082
push 0x4e61c4
push dword [eax]
call fcn.0048a850
pop ecx
pop ecx
test eax, eax
lea ecx, [ebp - 0x370]
sete byte [ebp - 0xd]
call fcn.004a5f26
cmp byte [ebp - 0xd], 0
je 0x437568
test esi, esi
jle 0x437568
lea eax, [ebp - 0x574]
push esi
push eax
lea ecx, [ebp - 0x6c]
call fcn.004a005f
push eax
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x4e
call fcn.004a605f
lea ecx, [ebp - 0x574]
mov byte [ebp - 4], 0x49
call fcn.004a5f26
lea ecx, [ebp - 0x44]
call fcn.004a0698
lea eax, [ebp - 0x24]
push eax
push ecx
mov esi, esp
mov dword [ebp - 0x1c], esp
push ecx
lea eax, [ebp - 0x44]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
push esi
mov ecx, ebx
call fcn.004421ad
push 1
push ebx
call fcn.00434867
add esp, 0x10
test eax, eax
je 0x437e0a
push str.true
push dword [ebp - 0x24]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x437558
push str.TRUE
push dword [ebp - 0x24]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x437558
push 0x4de85c
push dword [ebp - 0x24]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x437558
xor al, al
jmp 0x43755a
mov al, 1
movzx eax, al
mov dword [edi + 0xfc], eax
jmp 0x437e0a
mov eax, dword [edi + 0x38]
cmp eax, 0x16
je 0x437583
cmp eax, 2
je 0x437583
cmp eax, 7
je 0x437583
cmp eax, 0xd
jne 0x4376b5
push 0xa
lea eax, [ebp - 0x378]
push 0
push eax
lea ecx, [ebp - 0x6c]
call fcn.004a0082
push str.BORDERTYPE
push dword [eax]
call fcn.0048a850
pop ecx
pop ecx
test eax, eax
lea ecx, [ebp - 0x378]
sete byte [ebp - 0xd]
call fcn.004a5f26
cmp byte [ebp - 0xd], 0
je 0x4376b5
test esi, esi
jle 0x4376b5
lea eax, [ebp - 0x4f4]
push esi
push eax
lea ecx, [ebp - 0x6c]
call fcn.004a005f
push eax
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x4f
call fcn.004a605f
lea ecx, [ebp - 0x4f4]
mov byte [ebp - 4], 0x49
call fcn.004a5f26
lea ecx, [ebp - 0x44]
call fcn.004a0698
lea eax, [ebp - 0x24]
push eax
push ecx
mov esi, esp
mov dword [ebp - 0x1c], esp
push ecx
lea eax, [ebp - 0x44]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
push esi
mov ecx, ebx
call fcn.004421ad
push 1
pop esi
push esi
push ebx
call fcn.00434867
add esp, 0x10
test eax, eax
je 0x437e0a
push str.LINE
push dword [ebp - 0x24]
call fcn.0048be10
pop ecx
test eax, eax
pop ecx
jne 0x43764f
and dword [edi + 0xcc], eax
jmp 0x437e0a
push str.WINDOWS
push dword [ebp - 0x24]
call fcn.0048be10
pop ecx
test eax, eax
pop ecx
jne 0x43766d
mov dword [edi + 0xcc], esi
jmp 0x437e0a
push str.SUNKEN
push dword [ebp - 0x24]
call fcn.0048be10
pop ecx
test eax, eax
pop ecx
jne 0x43768f
mov dword [edi + 0xcc], 2
jmp 0x437e0a
push str.NONE
push dword [ebp - 0x24]
call fcn.0048be10
pop ecx
test eax, eax
pop ecx
jne 0x437e0a
mov dword [edi + 0xcc], 3
jmp 0x437e0a
mov eax, dword [edi + 0x38]
cmp eax, 0x16
je 0x4376df
cmp eax, 0xb
je 0x4376df
cmp eax, 1
je 0x4376df
cmp eax, 0xf
je 0x4376df
cmp eax, 0x1d
jne 0x437d13
cmp dword [edi + 0x14], 0
je 0x437d13
push 4
lea eax, [ebp - 0x380]
push 0
push eax
lea ecx, [ebp - 0x6c]
call fcn.004a0082
push str.FONT
push dword [eax]
call fcn.0048a850
pop ecx
pop ecx
test eax, eax
lea ecx, [ebp - 0x380]
sete byte [ebp - 0xd]
call fcn.004a5f26
cmp byte [ebp - 0xd], 0
je 0x437d13
test esi, esi
jle 0x437d13
cmp dword [edi + 0x38], 0x1d
jne 0x437731
mov esi, dword [edi + 0x14]
add esi, 0x60
jmp 0x437737
lea esi, [edi + 0x154]
push dword [ebp - 0x4c]
lea eax, [ebp - 0x55c]
lea ecx, [ebp - 0x6c]
push eax
call fcn.004a005f
push eax
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x50
call fcn.004a605f
lea ecx, [ebp - 0x55c]
mov byte [ebp - 4], 0x49
call fcn.004a5f26
lea ecx, [ebp - 0x44]
call fcn.004a0698
lea eax, [ebp - 0x24]
push eax
push ecx
mov edi, esp
mov dword [ebp - 0x1c], esp
push ecx
lea eax, [ebp - 0x44]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
push edi
mov ecx, ebx
call fcn.004421ad
push 1
push ebx
call fcn.00434867
add esp, 0x10
test eax, eax
je 0x437ce9
mov edi, str.CBK_Font
push edi
push dword [ebp - 0x24]
call fcn.0048be10
pop ecx
test eax, eax
pop ecx
jne 0x4377d0
lea eax, [ebp - 0x24]
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push edi
call fcn.004a5f94
lea ecx, [ebx + 0x118c]
call fcn.00414931
lea eax, [ebp - 0x24]
lea ecx, [ebp - 0x44]
push eax
call fcn.004a605f
mov edi, 0x4eea58
lea ecx, [ebp - 0x158]
push edi
call fcn.004a5f94
push edi
lea ecx, [ebp - 0x10c]
mov byte [ebp - 4], 0x51
call fcn.004a5f94
push edi
lea ecx, [ebp - 0x13c]
mov byte [ebp - 4], 0x52
call fcn.004a5f94
push edi
lea ecx, [ebp - 0x164]
mov byte [ebp - 4], 0x53
call fcn.004a5f94
push edi
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 0x54
call fcn.004a5f94
push 0xa
lea eax, [ebp - 0x388]
push 0
push eax
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x55
call fcn.004a0082
push str.FONTEFFECT
push dword [eax]
call fcn.0048a850
pop ecx
pop ecx
test eax, eax
lea ecx, [ebp - 0x388]
sete byte [ebp - 0xd]
call fcn.004a5f26
cmp byte [ebp - 0xd], 0
je 0x43787d
lea eax, [ebp - 0x44]
lea ecx, [ebp - 0x104]
push eax
call fcn.004a605f
jmp 0x437a2d
push 0xa
lea eax, [ebp - 0x4fc]
push 0
push eax
lea ecx, [ebp - 0x6c]
call fcn.004a0082
push str.FONTSCRIPT
push dword [eax]
call fcn.0048a850
pop ecx
pop ecx
test eax, eax
lea ecx, [ebp - 0x4fc]
sete byte [ebp - 0xd]
call fcn.004a5f26
cmp byte [ebp - 0xd], 0
je 0x4378c1
lea eax, [ebp - 0x44]
lea ecx, [ebp - 0x164]
push eax
jmp 0x437873
push 9
lea eax, [ebp - 0x390]
push 0
push eax
lea ecx, [ebp - 0x6c]
call fcn.004a0082
push str.FONTSTYLE
push dword [eax]
call fcn.0048a850
pop ecx
pop ecx
test eax, eax
lea ecx, [ebp - 0x390]
sete byte [ebp - 0xd]
call fcn.004a5f26
cmp byte [ebp - 0xd], 0
je 0x437908
lea eax, [ebp - 0x44]
lea ecx, [ebp - 0x10c]
push eax
jmp 0x437873
push 8
lea eax, [ebp - 0x44c]
push 0
push eax
lea ecx, [ebp - 0x6c]
call fcn.004a0082
push str.FONTSIZE
push dword [eax]
call fcn.0048a850
pop ecx
pop ecx
test eax, eax
lea ecx, [ebp - 0x44c]
sete byte [ebp - 0xd]
call fcn.004a5f26
cmp byte [ebp - 0xd], 0
je 0x43794f
lea eax, [ebp - 0x44]
lea ecx, [ebp - 0x13c]
push eax
jmp 0x437873
push 8
lea eax, [ebp - 0x398]
push 0
push eax
lea ecx, [ebp - 0x6c]
call fcn.004a0082
push str.FONTNAME
push dword [eax]
call fcn.0048a850
pop ecx
pop ecx
test eax, eax
lea ecx, [ebp - 0x398]
sete byte [ebp - 0xd]
call fcn.004a5f26
cmp byte [ebp - 0xd], 0
je 0x437996
lea eax, [ebp - 0x44]
lea ecx, [ebp - 0x158]
push eax
jmp 0x437873
push 7
lea eax, [ebp - 0x450]
push 0
push eax
lea ecx, [ebp - 0x6c]
call fcn.004a0082
push str.FONTALL
push dword [eax]
call fcn.0048a850
pop ecx
pop ecx
test eax, eax
lea ecx, [ebp - 0x450]
sete byte [ebp - 0xd]
call fcn.004a5f26
cmp byte [ebp - 0xd], 0
je 0x437a2d
push 0x7c
push 0
push dword [ebp - 0x44]
lea eax, [ebp - 0x158]
push eax
call fcn.004a70a2
push 0x7c
push 1
push dword [ebp - 0x44]
lea eax, [ebp - 0x10c]
push eax
call fcn.004a70a2
push 0x7c
push 2
push dword [ebp - 0x44]
lea eax, [ebp - 0x13c]
push eax
call fcn.004a70a2
push 0x7c
push 3
push dword [ebp - 0x44]
lea eax, [ebp - 0x164]
push eax
call fcn.004a70a2
push 0x7c
push 4
push dword [ebp - 0x44]
lea eax, [ebp - 0x104]
push eax
call fcn.004a70a2
push edi
push dword [ebp - 0x104]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x437ab3
push str.NONE
push dword [ebp - 0x104]
call fcn.0048be10
pop ecx
test eax, eax
pop ecx
jne 0x437a5e
and byte [esi + 0x15], al
and byte [esi + 0x16], 0
jmp 0x437ab3
push str.UNDERLINE
push dword [ebp - 0x104]
call fcn.0048be10
pop ecx
test eax, eax
pop ecx
jne 0x437a7a
mov byte [esi + 0x15], 1
jmp 0x437a58
push str.STRIKEOUT
push dword [ebp - 0x104]
call fcn.0048be10
pop ecx
test eax, eax
pop ecx
jne 0x437a95
and byte [esi + 0x15], al
jmp 0x437aaf
push str.STRIKEUNDER
push dword [ebp - 0x104]
call fcn.0048be10
pop ecx
test eax, eax
pop ecx
jne 0x437ab3
mov byte [esi + 0x15], 1
mov byte [esi + 0x16], 1
push edi
push dword [ebp - 0x164]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x437ad4
push dword [ebp - 0x164]
call fcn.0048cae6
pop ecx
mov byte [esi + 0x17], al
push edi
push dword [ebp - 0x10c]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x437b60
push str.REGULAR
push dword [ebp - 0x10c]
call fcn.0048be10
pop ecx
test eax, eax
pop ecx
jne 0x437b08
and byte [esi + 0x14], al
mov dword [esi + 0x10], 0x190
jmp 0x437b60
push str.ITALIC
push dword [ebp - 0x10c]
call fcn.0048be10
pop ecx
test eax, eax
pop ecx
jne 0x437b24
mov byte [esi + 0x14], 1
jmp 0x437aff
push str.BOLD
push dword [ebp - 0x10c]
call fcn.0048be10
pop ecx
test eax, eax
pop ecx
jne 0x437b3f
and byte [esi + 0x14], al
jmp 0x437b59
push str.BOLDITALIC
push dword [ebp - 0x10c]
call fcn.0048be10
pop ecx
test eax, eax
pop ecx
jne 0x437b60
mov byte [esi + 0x14], 1
mov dword [esi + 0x10], 0x2bc
push edi
push dword [ebp - 0x13c]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x437c72
fld qword [0x4b9cb0]
lea eax, [ebp - 0x538]
fstp qword [ebp - 0x538]
push eax
push ecx
lea eax, [ebp - 0x13c]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00419bc0
test eax, eax
jne 0x437bbc
push dword [ebp - 0x13c]
call fcn.0048cd8e
fstp qword [ebp - 0x538]
pop ecx
push dword [ebx + 0x1c]
call dword [sym.imp.USER32.dll_GetDC]
push eax
call fcn.004a91f4
mov edi, eax
push 0x5a
push dword [edi + 4]
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push dword [edi + 4]
mov dword [ebp - 0x28], eax
push dword [ebx + 0x1c]
call dword [sym.imp.USER32.dll_ReleaseDC]
fld qword [ebp - 0x538]
push 0x48
push dword [ebp - 0x28]
call fcn.0048aa60
push eax
call dword [sym.imp.KERNEL32.DLL_MulDiv]
mov edi, dword [ebp - 0x14]
neg eax
mov dword [esi], eax
cmp dword [edi + 0x38], 0xf
jne 0x437c2f
mov eax, dword [edi + 0xa4]
test eax, eax
mov dword [ebp - 0x14], eax
je 0x437c2f
mov ecx, eax
call fcn.00407392
push dword [ebp - 0x14]
call fcn.004a651e
and dword [edi + 0xa4], 0
pop ecx
lea eax, [edi + 0xb4]
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x84]
push eax
call dword [sym.imp.USER32.dll_UnionRect]
mov ecx, edi
call fcn.0042a4a1
test al, al
je 0x437c75
lea eax, [edi + 0xb4]
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x84]
push eax
call dword [sym.imp.USER32.dll_UnionRect]
jmp 0x437c75
mov edi, dword [ebp - 0x14]
push 0x4eea58
push dword [ebp - 0x158]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x437c9c
push dword [ebp - 0x158]
add esi, 0x1c
push esi
call fcn.0048c040
pop ecx
pop ecx
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 0x54
call fcn.004a5f26
lea ecx, [ebp - 0x164]
mov byte [ebp - 4], 0x53
call fcn.004a5f26
lea ecx, [ebp - 0x13c]
mov byte [ebp - 4], 0x52
call fcn.004a5f26
lea ecx, [ebp - 0x10c]
mov byte [ebp - 4], 0x51
call fcn.004a5f26
lea ecx, [ebp - 0x158]
mov byte [ebp - 4], 0x49
call fcn.004a5f26
jmp 0x437cec
mov edi, dword [ebp - 0x14]
cmp dword [edi + 0x38], 0xb
jne 0x437cfc
mov dword [edi + 0xcc], 1
cmp dword [edi + 0x38], 0x1d
jne 0x437e0a
mov ecx, dword [edi + 0x14]
call fcn.00413792
jmp 0x4373c7
cmp dword [edi + 0x38], 0x16
jne 0x437e0a
push 8
lea eax, [ebp - 0x3a0]
push 0
push eax
lea ecx, [ebp - 0x6c]
call fcn.004a0082
push str.PASSWORD
push dword [eax]
call fcn.0048a850
pop ecx
pop ecx
test eax, eax
lea ecx, [ebp - 0x3a0]
sete byte [ebp - 0xd]
call fcn.004a5f26
cmp byte [ebp - 0xd], 0
je 0x437e0a
test esi, esi
jle 0x437e0a
lea eax, [ebp - 0x458]
push esi
push eax
lea ecx, [ebp - 0x6c]
call fcn.004a005f
push eax
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x56
call fcn.004a605f
lea ecx, [ebp - 0x458]
mov byte [ebp - 4], 0x49
call fcn.004a5f26
lea ecx, [ebp - 0x44]
call fcn.004a0698
lea eax, [ebp - 0x24]
push eax
push ecx
mov esi, esp
mov dword [ebp - 0x1c], esp
push ecx
lea eax, [ebp - 0x44]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
push esi
mov ecx, ebx
call fcn.004421ad
push 1
push ebx
call fcn.00434867
add esp, 0x10
test eax, eax
je 0x437e0a
push str.true
push dword [ebp - 0x24]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x437e02
push str.TRUE
push dword [ebp - 0x24]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x437e02
push 0x4de85c
push dword [ebp - 0x24]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x437e02
xor al, al
jmp 0x437e04
mov al, 1
mov byte [edi + 0x248], al
lea eax, [ebp - 0x8a4]
mov ecx, edi
push eax
call fcn.004257c7
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x84]
push eax
call dword [sym.imp.USER32.dll_UnionRect]
push 1
lea eax, [ebp - 0x84]
push 1
push eax
call dword [sym.imp.USER32.dll_InflateRect]
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x48
call fcn.004a5f26
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x47
call fcn.004a5f26
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x184]
jmp 0x43eae3
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x2c]
push ecx
add eax, 0x10
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0x57
call fcn.004a5c9b
lea eax, [ebp - 0xc0]
mov ecx, ebx
push eax
call fcn.004421ad
push 0x4de7f8
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0x58
call fcn.004a022e
mov edi, eax
push 5
lea eax, [ebp - 0x3a8]
push 0
push eax
lea ecx, [ebp - 0xc0]
inc edi
call fcn.004a0082
push str.IMAGE
push dword [eax]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
jne 0x437edd
test edi, edi
setg al
test al, al
je 0x437edd
mov byte [ebp - 0x15], 1
jmp 0x437ee1
and byte [ebp - 0x15], 0
lea ecx, [ebp - 0x3a8]
call fcn.004a5f26
cmp byte [ebp - 0x15], 0
je 0x43805c
push ecx
lea ecx, [ebp - 0xc0]
mov eax, esp
mov dword [ebp - 0x1c], esp
push edi
push eax
call fcn.004a005f
lea eax, [ebp - 0x460]
mov ecx, ebx
push eax
call fcn.004421ad
push eax
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x59
call fcn.004a605f
lea ecx, [ebp - 0x460]
mov byte [ebp - 4], 0x58
call fcn.004a5f26
lea ecx, [ebp - 0x88]
call fcn.004a0698
lea ecx, [ebp - 0x88]
call fcn.004a0609
push ecx
lea eax, [ebp - 0x88]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea eax, [ebp - 0x3b0]
push eax
call fcn.004311d6
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x5a
call fcn.004a605f
lea ecx, [ebp - 0x3b0]
mov byte [ebp - 4], 0x58
call fcn.004a5f26
push str.PAGEBG
push dword [esi]
call fcn.0048a850
xor edi, edi
pop ecx
cmp eax, edi
pop ecx
jne 0x437fd4
mov eax, dword [ebp - 0x88]
cmp dword [eax - 8], edi
jle 0x437fcc
push ecx
lea eax, [ebp - 0x88]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
mov ecx, dword [ebx + 0x1200]
call fcn.0041e63f
jmp 0x438586
mov eax, dword [ebx + 0x1200]
jmp 0x438011
push str.MASTERPAGEBG
push dword [esi]
call fcn.0048a850
pop ecx
cmp eax, edi
pop ecx
jne 0x43801c
mov eax, dword [ebp - 0x88]
cmp dword [eax - 8], edi
jle 0x43800b
push ecx
lea eax, [ebp - 0x88]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
mov ecx, dword [ebx + 0x1208]
jmp 0x437fc2
mov eax, dword [ebx + 0x1208]
mov dword [eax + 0x9c], edi
jmp 0x438586
push str.FULLSCREENBG
push dword [esi]
call fcn.0048a850
pop ecx
cmp eax, edi
pop ecx
jne 0x438586
cmp dword [ebx + 0x1e0], edi
je 0x438586
push ecx
lea eax, [ebp - 0x88]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
mov ecx, ebx
call fcn.00443bf4
jmp 0x438586
push 5
lea eax, [ebp - 0x468]
push 0
push eax
lea ecx, [ebp - 0xc0]
call fcn.004a0082
push str.COLOR
push dword [eax]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
jne 0x438093
test edi, edi
setg al
test al, al
je 0x438093
mov byte [ebp - 0x15], 1
jmp 0x438097
and byte [ebp - 0x15], 0
lea ecx, [ebp - 0x468]
call fcn.004a5f26
cmp byte [ebp - 0x15], 0
je 0x438245
lea eax, [ebp - 0x3b8]
push edi
push eax
lea ecx, [ebp - 0xc0]
call fcn.004a005f
push eax
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x5b
call fcn.004a605f
lea ecx, [ebp - 0x3b8]
mov byte [ebp - 4], 0x58
call fcn.004a5f26
lea ecx, [ebp - 0x88]
call fcn.004a0698
mov edi, str.CBK_SelColor
lea ecx, [ebp - 0x88]
push edi
call fcn.004a022e
test eax, eax
jne 0x43811c
lea eax, [ebp - 0x88]
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push edi
call fcn.004a5f94
lea ecx, [ebx + 0x118c]
call fcn.00414931
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x24]
push eax
push ecx
mov edi, esp
mov dword [ebp - 0x1c], esp
push ecx
lea eax, [ebp - 0x88]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
push edi
mov ecx, ebx
call fcn.004421ad
push 3
push ebx
call fcn.00434867
add esp, 0x18
test eax, eax
je 0x438586
push ecx
lea eax, [ebp - 0x24]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea edi, [ebx + 0x118c]
mov ecx, edi
call fcn.00413ff7
fstp qword [ebp - 0x180]
push ecx
lea eax, [ebp - 0x30]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
mov ecx, edi
call fcn.00413ff7
fstp qword [ebp - 0x250]
push ecx
lea eax, [ebp - 0x34]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
mov ecx, edi
call fcn.00413ff7
call fcn.0048aa60
fld qword [ebp - 0x250]
xor edx, edx
mov dh, al
mov dword [ebp - 0x14], edx
call fcn.0048aa60
mov edx, dword [ebp - 0x14]
fld qword [ebp - 0x180]
mov dl, al
shl edx, 8
mov dword [ebp - 0x14], edx
call fcn.0048aa60
mov ecx, dword [ebp - 0x14]
push str.PAGEBG
push dword [esi]
movzx eax, al
or ecx, eax
mov edi, ecx
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
jne 0x438200
mov eax, dword [ebx + 0x1200]
jmp 0x438218
push str.MASTERPAGEBG
push dword [esi]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
jne 0x438223
mov eax, dword [ebx + 0x1208]
mov dword [eax + 0x98], edi
jmp 0x438586
mov ecx, dword [ebx + 0x1e0]
lea eax, [ebx + 0x1e0]
test ecx, ecx
je 0x438586
mov dword [ecx + 0x7c], edi
mov eax, dword [eax]
push 1
push 0
jmp 0x4383e3
push 7
lea eax, [ebp - 0x470]
push 0
push eax
lea ecx, [ebp - 0xc0]
call fcn.004a0082
push str.DISPLAY
push dword [eax]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
jne 0x43827c
test edi, edi
setg al
test al, al
je 0x43827c
mov byte [ebp - 0x15], 1
jmp 0x438280
and byte [ebp - 0x15], 0
lea ecx, [ebp - 0x470]
call fcn.004a5f26
cmp byte [ebp - 0x15], 0
je 0x438464
lea eax, [ebp - 0x3c0]
push edi
push eax
lea ecx, [ebp - 0xc0]
call fcn.004a005f
push eax
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x5c
call fcn.004a605f
lea ecx, [ebp - 0x3c0]
mov byte [ebp - 4], 0x58
call fcn.004a5f26
lea ecx, [ebp - 0x88]
call fcn.004a0698
lea eax, [ebp - 0x24]
push eax
push ecx
mov edi, esp
mov dword [ebp - 0x1c], esp
push ecx
lea eax, [ebp - 0x88]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
push edi
mov ecx, ebx
call fcn.004421ad
push 1
push ebx
call fcn.00434867
xor edi, edi
add esp, 0x10
cmp eax, edi
je 0x438586
push str.TILE
push dword [ebp - 0x24]
call fcn.0048be10
pop ecx
cmp eax, edi
pop ecx
jne 0x438381
push str.PAGEBG
push dword [esi]
call fcn.0048a850
pop ecx
cmp eax, edi
pop ecx
jne 0x438345
mov eax, dword [ebx + 0x1200]
mov dword [eax + 0x94], 1
jmp 0x438586
push str.MASTERPAGEBG
push dword [esi]
call fcn.0048a850
pop ecx
cmp eax, edi
pop ecx
jne 0x43835f
mov eax, dword [ebx + 0x1208]
jmp 0x438336
mov ecx, dword [ebx + 0x1e0]
lea eax, [ebx + 0x1e0]
cmp ecx, edi
je 0x438586
push 1
pop edx
mov dword [ecx + 0x80], edx
mov eax, dword [eax]
push edx
jmp 0x4383e2
push str.STRETCH
push dword [ebp - 0x24]
call fcn.0048be10
pop ecx
cmp eax, edi
pop ecx
jne 0x4383f1
push str.PAGEBG
push dword [esi]
call fcn.0048a850
pop ecx
cmp eax, edi
pop ecx
je 0x438586
push str.MASTERPAGEBG
push dword [esi]
call fcn.0048a850
pop ecx
cmp eax, edi
pop ecx
je 0x438586
mov ecx, dword [ebx + 0x1e0]
lea eax, [ebx + 0x1e0]
cmp ecx, edi
je 0x438586
mov dword [ecx + 0x80], 2
mov eax, dword [eax]
push 1
push edi
push dword [eax + 0x1c]
call dword [sym.imp.USER32.dll_InvalidateRect]
jmp 0x438586
push str.NORMAL
push dword [ebp - 0x24]
call fcn.0048be10
pop ecx
cmp eax, edi
pop ecx
jne 0x438586
push str.PAGEBG
push dword [esi]
call fcn.0048a850
pop ecx
cmp eax, edi
pop ecx
jne 0x438422
mov eax, dword [ebx + 0x1200]
jmp 0x43843a
push str.MASTERPAGEBG
push dword [esi]
call fcn.0048a850
pop ecx
cmp eax, edi
pop ecx
jne 0x438445
mov eax, dword [ebx + 0x1208]
mov dword [eax + 0x94], edi
jmp 0x438586
mov ecx, dword [ebx + 0x1e0]
lea eax, [ebx + 0x1e0]
cmp ecx, edi
je 0x438586
mov dword [ecx + 0x80], edi
jmp 0x4383de
push 0xa
lea eax, [ebp - 0x478]
push 0
push eax
lea ecx, [ebp - 0xc0]
call fcn.004a0082
push str.FROMMASTER
push dword [eax]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
jne 0x4384b2
test edi, edi
setg al
test al, al
je 0x4384b2
push str.PAGEBG
push dword [esi]
call fcn.0048a850
test eax, eax
sete al
pop ecx
test al, al
pop ecx
je 0x4384b2
mov byte [ebp - 0x15], 1
jmp 0x4384b6
and byte [ebp - 0x15], 0
lea ecx, [ebp - 0x478]
call fcn.004a5f26
cmp byte [ebp - 0x15], 0
je 0x438586
lea eax, [ebp - 0x3c8]
push edi
push eax
lea ecx, [ebp - 0xc0]
call fcn.004a005f
push eax
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x5d
call fcn.004a605f
lea ecx, [ebp - 0x3c8]
mov byte [ebp - 4], 0x58
call fcn.004a5f26
lea ecx, [ebp - 0x88]
call fcn.004a0698
lea eax, [ebp - 0x24]
push eax
push ecx
mov esi, esp
mov dword [ebp - 0x1c], esp
push ecx
lea eax, [ebp - 0x88]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
push esi
mov ecx, ebx
call fcn.004421ad
push 1
push ebx
call fcn.00434867
add esp, 0x10
test eax, eax
je 0x438586
push str.true
push dword [ebp - 0x24]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x438578
push str.TRUE
push dword [ebp - 0x24]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x438578
push 0x4de85c
push dword [ebp - 0x24]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x438578
xor al, al
jmp 0x43857a
mov al, 1
mov ecx, dword [ebx + 0x1200]
movzx eax, al
mov dword [ecx + 0x68], eax
push 1
push 0
push dword [ebx + 0x1c]
call dword [sym.imp.USER32.dll_InvalidateRect]
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0x57
call fcn.004a5f26
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x88]
jmp 0x43eae3
test edi, edi
je 0x43eae8
push 8
call fcn.004a64f5
test eax, eax
pop ecx
je 0x43eae8
mov ecx, dword [ebp - 0x68]
mov dword [eax], edi
test ecx, ecx
jne 0x4385d8
mov ecx, dword [ebx + 0x1200]
push eax
push 0
push 0x8ca
mov dword [eax + 4], ecx
push dword [ebx + 0x1c]
call dword [sym.imp.USER32.dll_PostMessageA]
jmp 0x43eae8
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5c9b
lea eax, [ebp - 0xa4]
mov ecx, ebx
push eax
call fcn.004421ad
lea eax, [ebp - 0x5c]
mov byte [ebp - 4], 0x5e
push eax
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [ebp - 0x2c]
push ecx
add eax, 0x10
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
push 8
push ebx
call fcn.00434867
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x68]
add esp, 0x2c
test eax, eax
je 0x43865e
mov dword [ebp - 0xa8], eax
jmp 0x43866a
mov ecx, dword [ebx + 0x1200]
mov dword [ebp - 0xa8], ecx
cmp dword [ebp - 0xa8], 0
je case.default.0x4386db
test eax, eax
je 0x4386c4
push 0x4df564
lea ecx, [ebp - 0xa4]
call fcn.004a022e
test eax, eax
jle 0x4386c4
add eax, 2
lea ecx, [ebp - 0xa4]
push eax
lea eax, [ebp - 0x480]
push eax
call fcn.004a005f
push eax
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x5f
call fcn.004a605f
lea ecx, [ebp - 0x480]
mov byte [ebp - 4], 0x5e
call fcn.004a5f26
mov eax, dword [ebp - 0x2c]
xor edi, edi
mov eax, dword [eax + 4]
lea ecx, [eax - 0xfa]
cmp ecx, 8
ja case.default.0x4386db
jmp dword [ecx*4 + 0x43f269]
cmp dword [ebp - 0x38], 2
mov esi, 0x4eea58
jl 0x438720
push esi
push dword [ebp - 0x30]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x438720
push ecx
lea eax, [ebp - 0x30]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00413ff7
call fcn.0048aa60
mov dword [ebp - 0x14], eax
jmp 0x438724
and dword [ebp - 0x14], 0
cmp dword [ebp - 0x38], 3
jl 0x43875c
push esi
push dword [ebp - 0x34]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43875c
push ecx
lea eax, [ebp - 0x34]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00413ff7
call fcn.0048aa60
mov edi, eax
jmp 0x43875e
xor edi, edi
cmp dword [ebp - 0x38], 4
jl 0x438797
push esi
push dword [ebp - 0x3c]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x438797
push ecx
lea eax, [ebp - 0x3c]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00413ff7
call fcn.0048aa60
mov dword [ebp - 0x4c], eax
jmp 0x43879e
mov dword [ebp - 0x4c], 0x32
cmp dword [ebp - 0x38], 5
jl 0x4387d7
push esi
push dword [ebp - 0x54]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x4387d7
push ecx
lea eax, [ebp - 0x54]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00413ff7
call fcn.0048aa60
mov dword [ebp - 0x68], eax
jmp 0x4387de
mov dword [ebp - 0x68], 0x32
cmp dword [ebp - 0x38], 6
jl 0x438817
push esi
push dword [ebp - 0x58]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x438817
push ecx
lea eax, [ebp - 0x58]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00413ff7
call fcn.0048aa60
mov dword [ebp - 0x28], eax
jmp 0x43881e
mov dword [ebp - 0x28], 0xff
cmp dword [ebp - 0x38], 7
jl 0x438857
push esi
push dword [ebp - 0x60]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x438857
push ecx
lea eax, [ebp - 0x60]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00413ff7
call fcn.0048aa60
mov dword [ebp - 0x50], eax
jmp 0x43885b
and dword [ebp - 0x50], 0
cmp dword [ebp - 0x38], 8
jl 0x438894
push esi
push dword [ebp - 0x5c]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x438894
push ecx
lea eax, [ebp - 0x5c]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00413ff7
call fcn.0048aa60
mov dword [ebp - 0x38], eax
jmp 0x438898
and dword [ebp - 0x38], 0
mov eax, dword [ebp - 0x2c]
mov ecx, 0xfa
mov edx, dword [eax + 4]
mov eax, edx
sub eax, ecx
je 0x4388be
sub eax, 3
je 0x4388be
sub eax, 4
jne 0x4388df
mov eax, dword [ebp - 0x14]
sub dword [ebp - 0x4c], eax
sub dword [ebp - 0x68], edi
jmp 0x4388df
cmp dword [ebp - 0x4c], 0
jge 0x4388cf
mov eax, dword [ebp - 0x4c]
neg eax
sub dword [ebp - 0x14], eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x68], 0
jge 0x4388df
mov eax, dword [ebp - 0x68]
neg eax
mov dword [ebp - 0x68], eax
sub edi, eax
cmp dword [ebp - 0x28], 0
jge 0x4388f0
and dword [ebp - 0x28], 0
mov eax, 0xff
jmp 0x4388fd
mov eax, 0xff
cmp dword [ebp - 0x28], eax
jle 0x4388fd
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x50], 0
jge 0x438909
and dword [ebp - 0x50], 0
jmp 0x438911
cmp dword [ebp - 0x50], eax
jle 0x438911
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x38], 0
jge 0x43891d
and dword [ebp - 0x38], 0
jmp 0x438925
cmp dword [ebp - 0x38], eax
jle 0x438925
mov dword [ebp - 0x38], eax
mov eax, edx
sub eax, ecx
je 0x438a02
dec eax
dec eax
je 0x43899c
dec eax
je 0x438940
sub eax, 4
je 0x43899c
jmp case.default.0x4386db
push ecx
lea eax, [ebp - 0xa4]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
movzx ecx, byte [ebp - 0x28]
xor eax, eax
mov byte [ebp - 4], 0x5e
mov ah, byte [ebp - 0x38]
mov al, byte [ebp - 0x50]
shl eax, 8
or eax, ecx
mov ecx, dword [ebp - 0x4c]
push eax
mov eax, dword [ebp - 0x68]
add eax, edi
push eax
mov eax, dword [ebp - 0x14]
add ecx, eax
push ecx
push edi
push eax
lea ecx, [ebp - 0x844]
call fcn.0043f36e
sub esp, 0x10
mov esi, eax
mov edi, esp
mov ecx, dword [ebp - 0xa8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.0041e09d
jmp 0x4389f6
push ecx
lea eax, [ebp - 0xa4]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
movzx ecx, byte [ebp - 0x28]
xor eax, eax
mov byte [ebp - 4], 0x5e
mov ah, byte [ebp - 0x38]
mov al, byte [ebp - 0x50]
shl eax, 8
or eax, ecx
mov ecx, dword [ebp - 0x4c]
push eax
mov eax, dword [ebp - 0x68]
add eax, edi
push eax
mov eax, dword [ebp - 0x14]
add ecx, eax
push ecx
push edi
push eax
lea ecx, [ebp - 0x894]
call fcn.0043f36e
sub esp, 0x10
mov esi, eax
mov edi, esp
mov ecx, dword [ebp - 0xa8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.0041dde7
mov edi, eax
mov esi, 0x4eea58
jmp 0x439078
push ecx
lea eax, [ebp - 0xa4]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
movzx ecx, byte [ebp - 0x28]
xor eax, eax
mov byte [ebp - 4], 0x5e
mov ah, byte [ebp - 0x38]
mov al, byte [ebp - 0x50]
shl eax, 8
or eax, ecx
mov ecx, dword [ebp - 0x4c]
push eax
mov eax, dword [ebp - 0x68]
add eax, edi
push eax
mov eax, dword [ebp - 0x14]
add ecx, eax
push ecx
push edi
push eax
lea ecx, [ebp - 0x8b4]
call fcn.0043f36e
sub esp, 0x10
mov esi, eax
mov edi, esp
mov ecx, dword [ebp - 0xa8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.0041db90
jmp 0x4389f6
cmp dword [ebp - 0x38], 2
mov esi, 0x4eea58
jl 0x438a9c
push esi
push dword [ebp - 0x30]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x438a9c
push ecx
lea eax, [ebp - 0x30]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00413ff7
call fcn.0048aa60
mov dword [ebp - 0x28], eax
jmp 0x438aa0
and dword [ebp - 0x28], 0
cmp dword [ebp - 0x38], 3
jl 0x438ad9
push esi
push dword [ebp - 0x34]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x438ad9
push ecx
lea eax, [ebp - 0x34]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00413ff7
call fcn.0048aa60
mov dword [ebp - 0x14], eax
jmp 0x438add
and dword [ebp - 0x14], 0
cmp dword [ebp - 0x38], 4
jl 0x438b15
push esi
push dword [ebp - 0x3c]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x438b15
push ecx
lea eax, [ebp - 0x3c]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00413ff7
call fcn.0048aa60
mov edi, eax
jmp 0x438b18
push 0x32
pop edi
cmp dword [ebp - 0x38], 5
jl 0x438b50
push esi
push dword [ebp - 0x54]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x438b50
push ecx
lea eax, [ebp - 0x54]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00413ff7
call fcn.0048aa60
mov esi, eax
jmp 0x438b53
push 0x32
pop esi
test edi, edi
jge 0x438b5c
neg edi
sub dword [ebp - 0x28], edi
test esi, esi
jge 0x438b65
neg esi
sub dword [ebp - 0x14], esi
push ecx
lea eax, [ebp - 0xa4]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
add esi, eax
add edi, ecx
push esi
push edi
push eax
push ecx
lea ecx, [ebp - 0x8d4]
mov byte [ebp - 4], 0x5e
call fcn.0043f36e
sub esp, 0x10
mov esi, eax
mov edi, esp
mov ecx, dword [ebp - 0xa8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.0041dcbb
jmp 0x4389f6
push ecx
lea eax, [ebp - 0xa4]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
push 0
push 0
lea ecx, [ebp - 0x6fc]
mov byte [ebp - 4], 0x5e
call fcn.0043f35c
push dword [eax + 4]
mov ecx, dword [ebp - 0xa8]
push dword [eax]
call fcn.0041e1c8
jmp 0x4389f6
cmp dword [ebp - 0x38], 2
mov esi, 0x4eea58
jl 0x438c27
push esi
push dword [ebp - 0x30]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x438c27
push ecx
lea eax, [ebp - 0x30]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00413ff7
call fcn.0048aa60
mov dword [ebp - 0x14], eax
jmp 0x438c2b
and dword [ebp - 0x14], 0
cmp dword [ebp - 0x38], 3
jl 0x438c63
push esi
push dword [ebp - 0x34]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x438c63
push ecx
lea eax, [ebp - 0x34]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00413ff7
call fcn.0048aa60
mov edi, eax
jmp 0x438c65
xor edi, edi
cmp dword [ebp - 0x38], 4
jl 0x438ca1
push esi
push dword [ebp - 0x3c]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x438ca1
push ecx
lea eax, [ebp - 0x3c]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea eax, [ebp - 0x488]
mov ecx, ebx
push eax
call fcn.004421ad
or dword [ebp - 0x40], 1
mov byte [ebp - 4], 0x65
jmp 0x438cb8
push esi
lea ecx, [ebp - 0x3d0]
call fcn.004a5f94
or dword [ebp - 0x40], 2
mov dword [ebp - 4], 0x66
push eax
lea ecx, [ebp - 0x1e0]
call fcn.004a5c9b
test byte [ebp - 0x40], 2
mov dword [ebp - 4], 0x69
je 0x438ce0
and dword [ebp - 0x40], 0xfffffffd
lea ecx, [ebp - 0x3d0]
call fcn.004a5f26
test byte [ebp - 0x40], 1
mov dword [ebp - 4], 0x68
je 0x438cfc
and dword [ebp - 0x40], 0xfffffffe
lea ecx, [ebp - 0x488]
call fcn.004a5f26
push esi
push dword [ebp - 0x1e0]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
jne 0x438d1e
push str.Text
lea ecx, [ebp - 0x1e0]
call fcn.004a60af
push ecx
lea eax, [ebp - 0xa4]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
push ecx
lea eax, [ebp - 0x1e0]
mov ecx, esp
mov dword [ebp - 0x28], esp
push eax
mov byte [ebp - 4], 0x6a
call fcn.004a5c9b
push edi
lea ecx, [ebp - 0x6f4]
push dword [ebp - 0x14]
mov byte [ebp - 4], 0x68
call fcn.0043f35c
push dword [eax + 4]
mov ecx, dword [ebp - 0xa8]
push dword [eax]
call fcn.0041e327
mov edi, eax
mov byte [ebp - 4], 0x5e
lea ecx, [ebp - 0x1e0]
jmp 0x439073
xor ecx, ecx
cmp eax, 0x102
setne cl
dec ecx
mov esi, 0x4eea58
and ecx, 0x37
add ecx, 0x19
cmp dword [ebp - 0x38], 2
mov dword [ebp - 0x14], ecx
jl 0x438dcc
push esi
push dword [ebp - 0x30]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x438dcc
push ecx
lea eax, [ebp - 0x30]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00413ff7
call fcn.0048aa60
mov dword [ebp - 0x4c], eax
jmp 0x438dd0
and dword [ebp - 0x4c], 0
cmp dword [ebp - 0x38], 3
jl 0x438e09
push esi
push dword [ebp - 0x34]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x438e09
push ecx
lea eax, [ebp - 0x34]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00413ff7
call fcn.0048aa60
mov dword [ebp - 0x28], eax
jmp 0x438e0d
and dword [ebp - 0x28], 0
cmp dword [ebp - 0x38], 4
jl 0x438e46
push esi
push dword [ebp - 0x3c]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x438e46
push ecx
lea eax, [ebp - 0x3c]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00413ff7
call fcn.0048aa60
mov dword [ebp - 0x50], eax
jmp 0x438e4d
mov dword [ebp - 0x50], 0x50
cmp dword [ebp - 0x38], 5
jl 0x438e83
push esi
push dword [ebp - 0x54]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x438e83
push ecx
lea eax, [ebp - 0x54]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00413ff7
call fcn.0048aa60
jmp 0x438e86
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x38], 6
mov dword [ebp - 0x14], eax
jl 0x438ec5
push esi
push dword [ebp - 0x58]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x438ec5
push ecx
lea eax, [ebp - 0x58]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea eax, [ebp - 0x490]
mov ecx, ebx
push eax
call fcn.004421ad
or dword [ebp - 0x40], 4
mov byte [ebp - 4], 0x6c
jmp 0x438edc
push esi
lea ecx, [ebp - 0x3d8]
call fcn.004a5f94
or dword [ebp - 0x40], 8
mov dword [ebp - 4], 0x6d
push eax
lea ecx, [ebp - 0x168]
call fcn.004a5c9b
test byte [ebp - 0x40], 8
mov dword [ebp - 4], 0x70
je 0x438f04
and dword [ebp - 0x40], 0xfffffff7
lea ecx, [ebp - 0x3d8]
call fcn.004a5f26
test byte [ebp - 0x40], 4
mov dword [ebp - 4], 0x6f
je 0x438f20
and dword [ebp - 0x40], 0xfffffffb
lea ecx, [ebp - 0x490]
call fcn.004a5f26
cmp dword [ebp - 0x50], 0
jge 0x438f31
mov eax, dword [ebp - 0x50]
neg eax
sub dword [ebp - 0x4c], eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x14], 0
jge 0x438f42
mov eax, dword [ebp - 0x14]
neg eax
sub dword [ebp - 0x28], eax
mov dword [ebp - 0x14], eax
push esi
push dword [ebp - 0x168]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
jne 0x438f76
mov eax, dword [ebp - 0x2c]
cmp dword [eax + 4], 0x102
mov eax, str.Paragraph
je 0x438f6a
mov eax, str.Button
push eax
lea ecx, [ebp - 0x168]
call fcn.004a60af
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + 4]
sub eax, 0x100
je 0x438ff5
dec eax
dec eax
jne 0x439069
push ecx
lea eax, [ebp - 0xa4]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
push ecx
lea eax, [ebp - 0x168]
mov ecx, esp
mov dword [ebp - 0x68], esp
push eax
mov byte [ebp - 4], 0x71
call fcn.004a5c9b
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x28]
mov edx, dword [ebp - 0x50]
add ecx, eax
push ecx
mov ecx, dword [ebp - 0x4c]
add edx, ecx
mov byte [ebp - 4], 0x6f
push edx
push eax
push ecx
lea ecx, [ebp - 0x854]
call fcn.0043f36e
sub esp, 0x10
mov esi, eax
mov edi, esp
mov ecx, dword [ebp - 0xa8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.0041df5a
mov edi, eax
mov esi, 0x4eea58
jmp 0x439069
push ecx
lea eax, [ebp - 0xa4]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
push ecx
lea eax, [ebp - 0x168]
mov ecx, esp
mov dword [ebp - 0x68], esp
push eax
mov byte [ebp - 4], 0x73
call fcn.004a5c9b
push dword [ebp - 0x28]
lea ecx, [ebp - 0x704]
mov byte [ebp - 4], 0x6f
push dword [ebp - 0x4c]
call fcn.0043f35c
push dword [eax + 4]
mov ecx, dword [ebp - 0xa8]
push dword [eax]
call fcn.0041e4bc
mov edi, eax
test edi, edi
je 0x439069
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x28]
mov edx, dword [ebp - 0x50]
add ecx, eax
push ecx
mov ecx, dword [ebp - 0x4c]
add edx, ecx
push edx
push eax
lea eax, [edi + 0xb4]
push ecx
push eax
call dword [sym.imp.USER32.dll_SetRect]
mov byte [ebp - 4], 0x5e
lea ecx, [ebp - 0x168]
call fcn.004a5f26
test edi, edi
je case.default.0x4386db
lea eax, [edi + 0xb4]
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x84]
push eax
call dword [sym.imp.USER32.dll_UnionRect]
push ecx
lea eax, [ebp - 0x24]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea eax, [ebp - 0x220]
lea ecx, [ebx + 0x118c]
push eax
call fcn.0041447c
push esi
mov byte [ebp - 4], 0x75
push dword [ebp - 0x220]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x439109
push ecx
add edi, 0xc8
mov ecx, esp
mov dword [ebp - 0x1c], esp
push edi
call fcn.004a5c9b
push ecx
lea eax, [ebp - 0x220]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
mov byte [ebp - 4], 0x76
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
mov byte [ebp - 4], 0x75
call fcn.00414862
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 0x5e
call fcn.004a5f26
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xa4]
jmp 0x43eae3
push 0xffffffffffffffff
push 0
lea ecx, [ebx + 0x1358]
call fcn.004a1e9d
and dword [ebx + 0x136c], 0
jmp 0x4395ea
push 0x4eea58
push dword [esi]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43eae8
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5c9b
lea eax, [ebp - 0x1f4]
mov ecx, ebx
push eax
call fcn.004421ad
push str._File_
mov byte [ebp - 4], 0x77
push dword [ebp - 0x1f4]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
jne 0x4391d4
push ecx
lea eax, [ebp - 0x1f4]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea eax, [ebp - 0x3e0]
push eax
call fcn.004311d6
pop ecx
pop ecx
mov edx, dword [ebx + 0x1360]
lea ecx, [ebx + 0x1358]
push eax
push edx
mov byte [ebp - 4], 0x78
call fcn.004a2012
lea ecx, [ebp - 0x3e0]
mov byte [ebp - 4], 0x77
call fcn.004a5f26
jmp 0x4391ed
mov eax, dword [ebx + 0x1360]
lea ecx, [ebx + 0x1358]
lea edx, [ebp - 0x1f4]
push edx
push eax
call fcn.004a2012
mov ecx, ebx
call fcn.00442054
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x1f4]
jmp 0x43eae3
lea eax, [ebp - 0x498]
push 6
push eax
mov ecx, esi
call fcn.004a0194
push 0x4de6c0
push dword [eax]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x439242
push 0x4eea58
push dword [esi]
call fcn.0048a850
test eax, eax
setne al
pop ecx
test al, al
pop ecx
je 0x439242
mov byte [ebp - 0x15], 1
jmp 0x439246
and byte [ebp - 0x15], 0
lea ecx, [ebp - 0x498]
call fcn.004a5f26
cmp byte [ebp - 0x15], 0
je 0x439269
test edi, edi
je 0x43eae8
cmp dword [edi + 0x38], 0x1d
jne 0x43eae8
mov eax, dword [0x4ea054]
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0x2c]
push ecx
mov esi, esp
mov dword [ebp - 0x1c], esp
push ecx
add eax, 0x10
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0x79
call fcn.004a5c9b
push esi
mov ecx, ebx
call fcn.004421ad
lea eax, [ebp - 0x3e8]
push eax
call fcn.004311d6
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x154]
mov byte [ebp - 4], 0x7a
call fcn.004a605f
lea ecx, [ebp - 0x3e8]
mov byte [ebp - 4], 0x79
call fcn.004a5f26
mov esi, 0x4eea58
push esi
push dword [ebp - 0x154]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
jne 0x439361
push eax
push str.M3L_Files__.m3l_.m3lAll_Files__._.
push 6
push esi
push 0x4e604c
push eax
lea ecx, [ebp - 0xd4c]
call fcn.004a07da
lea ecx, [ebp - 0xd4c]
mov byte [ebp - 4], 0x7b
call fcn.004a093c
cmp eax, 1
jne 0x4394e1
lea eax, [ebp - 0x4a0]
lea ecx, [ebp - 0xd4c]
push eax
call fcn.004a0a17
push eax
lea ecx, [ebp - 0x154]
mov byte [ebp - 4], 0x7c
call fcn.004a605f
lea ecx, [ebp - 0x4a0]
mov byte [ebp - 4], 0x7b
call fcn.004a5f26
lea ecx, [ebp - 0xca0]
mov byte [ebp - 4], 0x7e
call fcn.004a5f26
lea ecx, [ebp - 0xd4c]
mov byte [ebp - 4], 0x79
call fcn.004a66a3
lea ecx, [ebp - 0x5e0]
call fcn.004a74c4
xor esi, esi
lea ecx, [ebp - 0x6dc]
push esi
push 0xffffffffffffffff
push esi
mov byte [ebp - 4], 0x7f
call fcn.0043f300
lea eax, [ebp - 0x6dc]
lea ecx, [ebp - 0x5e0]
push eax
push 0x1001
push dword [ebp - 0x154]
mov byte [ebp - 4], 0x80
call fcn.004a75d6
test eax, eax
je 0x43957d
cmp edi, esi
je 0x439504
cmp dword [edi + 0x14], esi
je 0x439504
mov eax, dword [0x4ea054]
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x14c], eax
mov ecx, dword [edi + 0x14]
push esi
push 1
lea eax, [ebp - 0x14c]
push esi
push eax
mov byte [ebp - 4], 0x82
call fcn.00412f91
mov edi, eax
mov dword [ebp - 0x14], esi
cmp edi, esi
jle 0x4394be
push 1
lea ecx, [ebp - 0x14c]
call fcn.004a6414
mov esi, eax
test esi, esi
jle 0x43947f
push ecx
lea ecx, [ebp - 0x14c]
mov eax, esp
mov dword [ebp - 0x1c], esp
push esi
push 0
push eax
call fcn.004a0082
lea eax, [ebp - 0x3f0]
push eax
call fcn.004311d6
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x83
call fcn.004a605f
lea ecx, [ebp - 0x3f0]
mov byte [ebp - 4], 0x82
call fcn.004a5f26
lea eax, [edi - 1]
cmp dword [ebp - 0x14], eax
jge 0x43945d
push 0x4de268
lea ecx, [ebp - 0x178]
call fcn.004a6302
mov eax, dword [ebp - 0x178]
lea ecx, [ebp - 0x178]
mov eax, dword [eax - 8]
push eax
push eax
call fcn.004a6356
push eax
lea ecx, [ebp - 0x5e0]
call fcn.004a772d
inc esi
lea eax, [ebp - 0x4a8]
push esi
push eax
lea ecx, [ebp - 0x14c]
call fcn.004a005f
push eax
lea ecx, [ebp - 0x14c]
mov byte [ebp - 4], 0x84
call fcn.004a605f
lea ecx, [ebp - 0x4a8]
mov byte [ebp - 4], 0x82
call fcn.004a5f26
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x4393f0
lea ecx, [ebp - 0x14c]
mov byte [ebp - 4], 0x81
call fcn.004a5f26
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x80
call fcn.004a5f26
jmp 0x439572
lea ecx, [ebp - 0xca0]
mov byte [ebp - 4], 0x7d
call fcn.004a5f26
lea ecx, [ebp - 0xd4c]
mov byte [ebp - 4], 0x79
call fcn.004a66a3
jmp 0x43959b
mov edi, dword [ebx + 0x1360]
cmp edi, esi
jle 0x439572
lea eax, [ebp - 0x1d4]
push esi
push eax
lea ecx, [ebx + 0x1358]
call fcn.004168da
lea eax, [edi - 1]
mov byte [ebp - 4], 0x85
cmp esi, eax
jge 0x43953c
push 0x4de268
lea ecx, [ebp - 0x1d4]
call fcn.004a6302
mov eax, dword [ebp - 0x1d4]
lea ecx, [ebp - 0x1d4]
mov eax, dword [eax - 8]
push eax
push eax
call fcn.004a6356
push eax
lea ecx, [ebp - 0x5e0]
call fcn.004a772d
lea ecx, [ebp - 0x1d4]
mov byte [ebp - 4], 0x80
call fcn.004a5f26
inc esi
cmp esi, edi
jl 0x43950e
lea ecx, [ebp - 0x5e0]
call fcn.004a77f1
lea ecx, [ebp - 0x6dc]
mov byte [ebp - 4], 0x7f
call fcn.0040d722
lea ecx, [ebp - 0x5e0]
mov byte [ebp - 4], 0x79
call fcn.004a7519
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x154]
jmp 0x43eae3
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00413ff7
call fcn.0048aa60
dec eax
cmp eax, 0xffffffff
jle 0x43eae8
cmp eax, dword [ebx + 0x1360]
jge 0x43eae8
push 1
push eax
lea ecx, [ebx + 0x1358]
call fcn.004a203e
mov ecx, ebx
call fcn.00442054
jmp 0x43eae8
push 0x4eea58
push dword [esi]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43eae8
push ecx
mov edi, esp
mov dword [ebp - 0x1c], esp
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5c9b
push edi
mov ecx, ebx
call fcn.004421ad
lea eax, [ebp - 0x268]
push eax
call fcn.004311d6
mov eax, dword [ebp - 0x2c]
add esp, 4
mov esi, esp
mov dword [ebp - 0x1c], esp
push ecx
add eax, 0x10
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
mov byte [ebp - 4], 0x86
call fcn.004a5c9b
push esi
mov ecx, ebx
call fcn.004421ad
push ecx
lea eax, [ebp - 0x268]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
mov byte [ebp - 4], 0x87
call fcn.004a5c9b
mov ecx, ebx
mov byte [ebp - 4], 0x86
call fcn.004407ee
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x268]
jmp 0x43eae3
mov esi, dword [ebx + 0x1360]
test esi, esi
jle 0x43eae8
lea eax, [esi + esi]
mov dword [ebp - 0x14], esi
test eax, eax
jle 0x43eae8
fild dword [ebp - 0x14]
lea edi, [ebx + 0x1358]
mov dword [ebp - 0x50], eax
fstp qword [ebp - 0x180]
jmp 0x4396bb
mov esi, dword [ebp - 0x14]
call fcn.0048aa94
mov dword [ebp - 0x28], eax
fild dword [ebp - 0x28]
fmul qword [0x4b7a88]
fmul qword [ebp - 0x180]
call fcn.0048aa60
cmp eax, esi
mov dword [ebp - 0x28], eax
jl 0x4396e4
lea eax, [esi - 1]
mov dword [ebp - 0x28], eax
test eax, eax
jge 0x4396ec
and dword [ebp - 0x28], 0
call fcn.0048aa94
mov dword [ebp - 0x4c], eax
fild dword [ebp - 0x4c]
fmul qword [0x4b7a88]
fmul qword [ebp - 0x180]
call fcn.0048aa60
mov esi, eax
cmp esi, dword [ebp - 0x14]
jl 0x439715
mov eax, dword [ebp - 0x14]
lea esi, [eax - 1]
test esi, esi
jge 0x43971b
xor esi, esi
push dword [ebp - 0x28]
lea eax, [ebp - 0x25c]
mov ecx, edi
push eax
call fcn.004168da
lea eax, [ebp - 0x3f8]
push esi
push eax
mov ecx, edi
mov byte [ebp - 4], 0x88
call fcn.004168da
push eax
mov ecx, edi
push dword [ebp - 0x28]
mov byte [ebp - 4], 0x89
call fcn.0043f2c6
lea ecx, [ebp - 0x3f8]
mov byte [ebp - 4], 0x88
call fcn.004a5f26
lea eax, [ebp - 0x25c]
mov ecx, edi
push eax
push esi
call fcn.0043f2c6
lea ecx, [ebp - 0x25c]
mov byte [ebp - 4], 0xa
call fcn.004a5f26
dec dword [ebp - 0x50]
jne 0x4396b8
jmp 0x43eae8
push 0x4eea58
push dword [esi]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43eae8
push ecx
mov edi, esp
mov dword [ebp - 0x1c], esp
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5c9b
push edi
mov ecx, ebx
call fcn.004421ad
lea eax, [ebp - 0x290]
push eax
call fcn.004311d6
pop ecx
pop ecx
xor esi, esi
mov byte [ebp - 4], 0x8a
cmp dword [ebx + 0x158], esi
jne 0x439806
push 0x68
call fcn.004a64f5
pop ecx
mov dword [ebp - 0x1c], eax
cmp eax, esi
mov byte [ebp - 4], 0x8b
je 0x4397f2
push esi
mov ecx, eax
call fcn.0040da4a
jmp 0x4397f4
xor eax, eax
push ebx
mov ecx, eax
mov byte [ebp - 4], 0x8a
mov dword [ebx + 0x158], eax
call fcn.0040dcfd
push ecx
lea eax, [ebp - 0x290]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
mov ecx, dword [ebx + 0x158]
call fcn.0040dae2
cmp eax, esi
je 0x439873
mov ecx, dword [ebx + 0x158]
call fcn.0040de65
mov eax, dword [ebp - 0x2c]
push str.CENTER
push dword [eax + 0x10]
call fcn.0048a850
pop ecx
cmp eax, esi
pop ecx
jne 0x439854
mov ecx, dword [ebx + 0x158]
push esi
call fcn.004a4b76
mov eax, dword [ebx + 0x158]
push 1
push esi
push dword [eax + 0x1c]
call dword [sym.imp.USER32.dll_InvalidateRect]
mov ecx, dword [ebx + 0x158]
push 5
call fcn.004a568c
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x290]
jmp 0x43eae3
push 0x4eea58
push dword [esi]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43eae8
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x19c]
add eax, 0x10
push eax
call fcn.004a5c9b
push 0x4eea58
mov byte [ebp - 4], 0x8c
push dword [ebp - 0x19c]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x439953
push ecx
mov edi, esp
mov dword [ebp - 0x1c], esp
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5c9b
push edi
mov ecx, ebx
call fcn.004421ad
lea eax, [ebp - 0x254]
push eax
call fcn.004311d6
add esp, 4
lea eax, [ebp - 0x254]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0x8d
call fcn.004a5c9b
mov ecx, ebx
call fcn.004405e9
test eax, eax
je 0x439920
push ecx
push ecx
fld1
fstp qword [esp]
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
jmp 0x43992d
push ecx
push ecx
fldz
fstp qword [esp]
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
lea eax, [ebp - 0x19c]
push eax
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00419b0a
lea ecx, [ebp - 0x254]
mov byte [ebp - 4], 0x8c
call fcn.004a5f26
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x19c]
jmp 0x43eae3
xor edi, edi
lea ecx, [ebp - 0xa40]
push edi
call fcn.0044607d
mov esi, dword [ebx + 0x1360]
mov byte [ebp - 4], 0x8e
cmp esi, edi
jle 0x4399b5
lea eax, [ebp - 0x4b0]
push edi
push eax
lea ecx, [ebx + 0x1358]
call fcn.004168da
push eax
lea ecx, [ebp - 0x9a8]
mov byte [ebp - 4], 0x8f
call fcn.0043f2dc
lea ecx, [ebp - 0x4b0]
mov byte [ebp - 4], 0x8e
call fcn.004a5f26
inc edi
cmp edi, esi
jl 0x43997e
lea ecx, [ebp - 0xa40]
call fcn.004a6a62
cmp eax, 1
jne 0x439a26
mov esi, dword [ebp - 0x9a0]
lea edi, [ebx + 0x1358]
push 0xffffffffffffffff
push 0
mov ecx, edi
call fcn.004a1e9d
and dword [ebp - 0x14], 0
test esi, esi
jle 0x439a1c
push dword [ebp - 0x14]
lea eax, [ebp - 0x400]
lea ecx, [ebp - 0x9a8]
push eax
call fcn.004168da
push eax
mov ecx, edi
mov byte [ebp - 4], 0x90
call fcn.0043f2dc
lea ecx, [ebp - 0x400]
mov byte [ebp - 4], 0x8e
call fcn.004a5f26
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x4399e4
mov dword [ebx + 0x136c], 1
mov ecx, ebx
call fcn.00442054
lea ecx, [ebp - 0xa40]
mov byte [ebp - 4], 0xa
call fcn.0043f3bc
jmp 0x43eae8
test edi, edi
je 0x43eae8
cmp dword [edi + 0x38], 3
jne 0x43eae8
mov eax, dword [ebp - 0x2c]
push ecx
mov esi, esp
mov dword [ebp - 0x1c], esp
push ecx
add eax, 0x10
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
push esi
mov ecx, ebx
call fcn.004421ad
lea ecx, [ebx + 0x118c]
call fcn.00413ff7
fmul qword [0x4b8cb0]
push 1
lea eax, [ebp - 0x774]
pop esi
mov ecx, edi
push eax
fstp qword [edi + 0x200]
mov dword [edi + 0x208], esi
call fcn.004257c7
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x84]
push eax
call dword [sym.imp.USER32.dll_UnionRect]
push esi
lea eax, [ebp - 0x84]
push esi
push eax
call dword [sym.imp.USER32.dll_InflateRect]
lea eax, [ebp - 0x84]
push esi
push eax
jmp 0x439bae
test edi, edi
je 0x43eae8
mov eax, dword [ebp - 0x2c]
push 0x4eea58
push dword [eax + 0x10]
lea esi, [eax + 0x10]
call fcn.0048a850
pop ecx
pop ecx
xor ecx, ecx
cmp eax, ecx
jne 0x439bbc
mov esi, dword [edi + 0x1a0]
xor eax, eax
cmp esi, ecx
lea esi, [edi + 0x108]
setle al
dec eax
and eax, 0x1a
add eax, 4
mov dword [edi + 0x38], eax
mov eax, dword [esi]
cmp eax, ecx
je 0x439b25
push eax
call fcn.004a651e
pop ecx
xor ecx, ecx
mov dword [esi], ecx
lea esi, [edi + 0x114]
mov dword [edi + 0x110], ecx
mov dword [edi + 0x10c], ecx
mov eax, dword [esi]
cmp eax, ecx
je 0x439b48
push eax
call fcn.004a651e
pop ecx
xor ecx, ecx
mov dword [esi], ecx
lea esi, [edi + 0x120]
mov dword [edi + 0x11c], ecx
mov dword [edi + 0x118], ecx
mov eax, dword [esi]
cmp eax, ecx
je 0x439b6b
push eax
call fcn.004a651e
pop ecx
xor ecx, ecx
mov dword [esi], ecx
lea esi, [edi + 0x12c]
mov dword [edi + 0x128], ecx
mov dword [edi + 0x124], ecx
mov eax, dword [esi]
cmp eax, ecx
je 0x439b8e
push eax
call fcn.004a651e
pop ecx
xor ecx, ecx
cmp dword [ebp - 0x68], ecx
mov dword [esi], ecx
mov dword [edi + 0x134], ecx
mov dword [edi + 0x130], ecx
jne 0x43eae8
add edi, 0xb4
push 1
push edi
push dword [ebx + 0x1c]
call dword [sym.imp.USER32.dll_InvalidateRect]
jmp 0x43eae8
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5c9b
lea eax, [ebp - 0xf8]
mov ecx, ebx
push eax
call fcn.004421ad
push ecx
lea eax, [ebp - 0xf8]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0x91
call fcn.004a5c9b
lea eax, [ebp - 0x4b8]
push eax
call fcn.004311d6
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0xf8]
mov byte [ebp - 4], 0x92
call fcn.004a605f
lea ecx, [ebp - 0x4b8]
mov byte [ebp - 4], 0x91
call fcn.004a5f26
lea eax, [ebp - 0x208]
push 4
push eax
lea ecx, [ebp - 0xf8]
call fcn.004a0118
mov eax, dword [ebp - 0x38]
lea edi, [ebp - 0x664]
push str..BMP
mov byte [ebp - 4], 0x93
lea esi, [eax + 0xb4]
push dword [ebp - 0x208]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.0048be10
pop ecx
test eax, eax
pop ecx
lea eax, [ebp - 0x240]
push eax
lea eax, [ebp - 0x238]
push eax
push dword [ebp - 0xf8]
jne 0x439c75
call fcn.0044f080
jmp 0x439c7a
call fcn.0044e770
xor esi, esi
add esp, 0xc
cmp eax, esi
mov dword [ebp - 0x14], eax
je 0x439da8
push eax
call dword [sym.imp.KERNEL32.DLL_GlobalLock]
cmp eax, esi
mov dword [ebp - 0x28], eax
je 0x439ddd
mov eax, dword [ebp - 0x238]
mov esi, dword [ebp - 0x38]
imul eax, dword [ebp - 0x240]
lea edi, [eax + eax*2]
mov eax, dword [esi + 0x108]
test eax, eax
je 0x439cc0
push eax
call fcn.004a651e
pop ecx
and dword [esi + 0x110], 0
and dword [esi + 0x10c], 0
push edi
call fcn.004a64f5
test eax, eax
pop ecx
mov dword [esi + 0x108], eax
je 0x43ed88
push edi
push dword [ebp - 0x28]
push eax
call fcn.0048adb0
mov eax, dword [ebp - 0x238]
add esp, 0xc
mov dword [esi + 0x10c], eax
mov eax, dword [ebp - 0x240]
push dword [ebp - 0x14]
mov dword [esi + 0x110], eax
call dword [sym.imp.KERNEL32.DLL_GlobalUnlock]
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.DLL_GlobalFree]
mov eax, dword [esi + 0x38]
cmp eax, 4
je 0x439d27
cmp eax, 0x1e
jne 0x439d2e
mov dword [esi + 0x38], 3
cmp byte [esi + 0x251], 0
je 0x439d53
mov ecx, dword [ebp - 0x38]
sub esp, 0x10
mov edi, esp
lea esi, [ecx + 0xb4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004290ce
mov esi, dword [ebp - 0x38]
jmp 0x439d71
cmp byte [esi + 0x249], 0
je 0x439d64
mov eax, dword [esi + 0x278]
jmp 0x439d67
push 0x64
pop eax
push 0
push eax
mov ecx, esi
call fcn.0042a81c
lea eax, [ebp - 0x8e4]
mov ecx, esi
push eax
call fcn.004257c7
push eax
lea eax, [ebp - 0x664]
push eax
lea eax, [ebp - 0x664]
push eax
call dword [sym.imp.USER32.dll_UnionRect]
lea eax, [ebp - 0x664]
push 1
push eax
push dword [ebx + 0x1c]
call dword [sym.imp.USER32.dll_InvalidateRect]
jmp 0x439ddd
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0x408]
push str.Cannot_load_image:_n
push eax
call fcn.004a622f
mov eax, dword [eax]
push esi
push esi
push eax
mov byte [ebp - 4], 0x94
call fcn.004aacbc
lea ecx, [ebp - 0x408]
mov byte [ebp - 4], 0x93
call fcn.004a5f26
lea ecx, [ebp - 0x208]
mov byte [ebp - 4], 0x91
call fcn.004a5f26
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xf8]
jmp 0x43eae3
test edi, edi
je 0x43eae8
mov eax, dword [ebp - 0x2c]
push 0x4eea58
add eax, 0x10
push dword [eax]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43eae8
and dword [ebp - 0x28], 0
and dword [ebp - 0x14], 0
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5c9b
lea eax, [ebp - 0x170]
mov ecx, ebx
push eax
call fcn.004421ad
lea eax, [ebp - 0x170]
lea ecx, [ebp - 0x264]
push eax
mov byte [ebp - 4], 0x95
call fcn.004a5c9b
mov eax, dword [0x4ea054]
mov dword [ebp - 0xac], eax
mov dword [ebp - 0x150], eax
push 0x5b
lea ecx, [ebp - 0x170]
mov byte [ebp - 4], 0x98
call fcn.004a020c
mov esi, eax
cmp esi, 0xffffffff
jle 0x439fa8
lea eax, [ebp - 0x4c0]
push esi
push eax
lea ecx, [ebp - 0x170]
call fcn.004a0194
push eax
lea ecx, [ebp - 0x264]
mov byte [ebp - 4], 0x99
call fcn.004a605f
lea ecx, [ebp - 0x4c0]
mov byte [ebp - 4], 0x98
call fcn.004a5f26
inc esi
lea eax, [ebp - 0x410]
push esi
push eax
lea ecx, [ebp - 0x170]
call fcn.004a005f
push eax
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0x9a
call fcn.004a605f
lea ecx, [ebp - 0x410]
mov byte [ebp - 4], 0x98
call fcn.004a5f26
push 0x5d
lea ecx, [ebp - 0xac]
call fcn.004a020c
cmp eax, 0xffffffff
jle 0x439f2d
push eax
lea eax, [ebp - 0x4c8]
push eax
lea ecx, [ebp - 0xac]
call fcn.004a0194
push eax
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0x9b
call fcn.004a605f
lea ecx, [ebp - 0x4c8]
mov byte [ebp - 4], 0x98
call fcn.004a5f26
push 0x2c
lea ecx, [ebp - 0xac]
call fcn.004a020c
mov esi, eax
cmp esi, 0xffffffff
jle 0x439fa8
lea eax, [esi + 1]
lea ecx, [ebp - 0xac]
push eax
lea eax, [ebp - 0x418]
push eax
call fcn.004a005f
push eax
lea ecx, [ebp - 0x150]
mov byte [ebp - 4], 0x9c
call fcn.004a605f
lea ecx, [ebp - 0x418]
mov byte [ebp - 4], 0x98
call fcn.004a5f26
lea eax, [ebp - 0x4d0]
push esi
push eax
lea ecx, [ebp - 0xac]
call fcn.004a0194
push eax
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0x9d
call fcn.004a605f
lea ecx, [ebp - 0x4d0]
mov byte [ebp - 4], 0x98
call fcn.004a5f26
lea ecx, [ebp - 0x150]
call fcn.004a0698
lea ecx, [ebp - 0x150]
call fcn.004a0609
lea ecx, [ebp - 0xac]
call fcn.004a0698
lea ecx, [ebp - 0xac]
call fcn.004a0609
mov esi, 0x4eea58
push esi
push dword [ebp - 0xac]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43a010
push ecx
lea eax, [ebp - 0xac]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00413ff7
call fcn.0048aa60
mov dword [ebp - 0x28], eax
push esi
push dword [ebp - 0x150]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43a047
push ecx
lea eax, [ebp - 0x150]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00413ff7
call fcn.0048aa60
mov dword [ebp - 0x14], eax
mov esi, dword [ebp - 0x2c]
cmp dword [esi + 4], 0x4a
jne 0x43a09a
push ecx
lea eax, [esi + 0x10]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00413ff7
call fcn.0048aa60
push eax
mov ecx, edi
push dword [ebp - 0x14]
push dword [ebp - 0x28]
call fcn.00426655
add edi, 0xb4
lea eax, [ebp - 0x84]
push edi
push eax
lea eax, [ebp - 0x84]
push eax
call dword [sym.imp.USER32.dll_UnionRect]
jmp 0x43a0cc
push dword [ebp - 0x14]
mov ecx, edi
push dword [ebp - 0x28]
call fcn.0042673a
mov dword [ebp - 0x14], eax
push ecx
fild dword [ebp - 0x14]
push ecx
add esi, 0x10
fstp qword [esp]
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00419b0a
lea ecx, [ebp - 0x150]
mov byte [ebp - 4], 0x97
call fcn.004a5f26
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0x96
call fcn.004a5f26
lea ecx, [ebp - 0x264]
mov byte [ebp - 4], 0x95
call fcn.004a5f26
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x170]
jmp 0x43eae3
push 0x4eea58
push dword [esi]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43eae8
mov eax, dword [ebp - 0x2c]
push 0x4eea58
push dword [eax + 0x10]
lea edi, [eax + 0x10]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43eae8
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5c9b
lea eax, [ebp - 0x270]
mov ecx, ebx
push eax
call fcn.004421ad
push ecx
mov byte [ebp - 4], 0x9e
mov ecx, esp
mov dword [ebp - 0x1c], esp
push edi
call fcn.004a5c9b
lea eax, [ebp - 0x22c]
mov ecx, ebx
push eax
call fcn.004421ad
push 0
push ecx
lea eax, [ebp - 0x270]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0x9f
call fcn.004a5c9b
mov ecx, dword [ebx + 0x1200]
call fcn.0041ba98
mov esi, eax
test esi, esi
je 0x43a353
cmp dword [esi + 0x38], 0x15
jne 0x43a353
cmp dword [esi + 0x30], 0
je 0x43a353
mov eax, dword [ebp - 0x2c]
cmp dword [eax + 4], 0x4e
je 0x43a339
push str._File_
push dword [edi]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
jne 0x43a260
mov eax, dword [ebp - 0x2c]
cmp dword [eax + 4], 0x4c
jne 0x43a22b
call fcn.004ac071
mov eax, dword [eax + 4]
lea ecx, [ebp - 0x294]
add eax, 0xcc
push eax
call fcn.004a5c9b
push ecx
lea eax, [ebp - 0x294]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0xa0
call fcn.004a5c9b
mov ecx, dword [esi + 0x30]
call fcn.0042d53c
mov byte [ebp - 4], 0x9f
lea ecx, [ebp - 0x294]
call fcn.004a5f26
jmp 0x43a339
mov ecx, dword [esi + 0x30]
lea eax, [ebp - 0x420]
push eax
call fcn.0042d428
mov edi, eax
mov byte [ebp - 4], 0xa1
call fcn.004ac071
mov eax, dword [eax + 4]
push edi
lea ecx, [eax + 0xcc]
call fcn.004a605f
mov byte [ebp - 4], 0x9f
lea ecx, [ebp - 0x420]
jmp 0x43a221
push str._____
mov ecx, edi
call fcn.004a022e
test eax, eax
mov eax, dword [ebp - 0x2c]
jle 0x43a2e2
cmp dword [eax + 4], 0x4c
push ecx
jne 0x43a2b3
lea eax, [ebp - 0x22c]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
mov ecx, dword [esi + 0x30]
call fcn.0042d53c
lea eax, [esi + 0xb4]
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x84]
push eax
call dword [sym.imp.USER32.dll_UnionRect]
jmp 0x43a339
mov ecx, dword [esi + 0x30]
mov eax, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.0042d428
push ecx
mov byte [ebp - 4], 0xa2
mov ecx, esp
mov dword [ebp - 0x14], esp
push edi
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
mov byte [ebp - 4], 0x9f
call fcn.00414862
jmp 0x43a339
cmp dword [eax + 4], 0x4c
jne 0x43a30f
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push edi
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00413ff7
call fcn.0048aa60
mov ecx, dword [esi + 0x30]
push eax
call fcn.0042d39e
jmp 0x43a293
mov ecx, dword [esi + 0x30]
call fcn.0042d374
mov dword [ebp - 0x14], eax
push ecx
fild dword [ebp - 0x14]
push ecx
fstp qword [esp]
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push edi
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00419b0a
push ecx
lea eax, [ebp - 0x22c]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
mov ecx, dword [esi + 0x30]
call fcn.0042d5b6
lea ecx, [ebp - 0x22c]
mov byte [ebp - 4], 0x9e
call fcn.004a5f26
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x270]
jmp 0x43eae3
test edi, edi
jne 0x43a38b
push 0x4eea58
push dword [esi]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43eae8
mov eax, dword [ebp - 0x2c]
push 0x4eea58
push dword [eax + 0x10]
lea esi, [eax + 0x10]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43eae8
push esi
lea ecx, [ebp - 0xf4]
call fcn.004a5c9b
and dword [ebp - 0x14], 0
and dword [ebp - 0x28], 0
push str.FILE:
lea ecx, [ebp - 0xf4]
mov byte [ebp - 4], 0xa3
call fcn.004a022e
test eax, eax
jne 0x43a410
lea eax, [ebp - 0x4d8]
push 5
push eax
lea ecx, [ebp - 0xf4]
call fcn.004a005f
push eax
lea ecx, [ebp - 0xf4]
mov byte [ebp - 4], 0xa4
call fcn.004a605f
lea ecx, [ebp - 0x4d8]
mov byte [ebp - 4], 0xa3
call fcn.004a5f26
mov dword [ebp - 0x14], 1
jmp 0x43a45e
push str.STRING:
lea ecx, [ebp - 0xf4]
call fcn.004a022e
test eax, eax
jne 0x43a45e
lea eax, [ebp - 0x428]
push 7
push eax
lea ecx, [ebp - 0xf4]
call fcn.004a005f
push eax
lea ecx, [ebp - 0xf4]
mov byte [ebp - 4], 0xa5
call fcn.004a605f
lea ecx, [ebp - 0x428]
mov byte [ebp - 4], 0xa3
call fcn.004a5f26
mov dword [ebp - 0x28], 1
push ecx
lea eax, [ebp - 0xf4]
mov esi, esp
mov dword [ebp - 0x1c], esp
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
push esi
mov ecx, ebx
call fcn.004421ad
lea eax, [ebp - 0xc4]
push eax
call fcn.004311d6
add esp, 4
lea eax, [ebp - 0xc4]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0xa6
call fcn.004a5c9b
lea eax, [ebp - 0xe8]
mov ecx, ebx
push eax
call fcn.004421ad
push 0x4e601c
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 0xa7
call fcn.004a022e
cmp eax, 1
je 0x43a4cf
cmp dword [ebp - 0x14], 0
je 0x43a535
cmp dword [ebp - 0x28], 0
jne 0x43a535
push ecx
lea eax, [ebp - 0xc4]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
mov ecx, ebx
call fcn.004405e9
test eax, eax
je 0x43a725
push ecx
lea eax, [ebp - 0xc4]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea eax, [ebp - 0x4e0]
mov ecx, ebx
push eax
call fcn.0044190f
push eax
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 0xa8
call fcn.004a605f
mov byte [ebp - 4], 0xa7
lea ecx, [ebp - 0x4e0]
jmp 0x43a720
push 0x4de6c0
lea ecx, [ebp - 0xc4]
call fcn.004a022e
test eax, eax
je 0x43a561
push str._List_
lea ecx, [ebp - 0xc4]
call fcn.004a022e
test eax, eax
jne 0x43a725
mov eax, dword [ebp - 0xc4]
xor ecx, ecx
mov al, byte [eax + 5]
cmp al, 0x2b
lea eax, [ebp - 0x298]
sete cl
add ecx, 6
push ecx
push eax
lea ecx, [ebp - 0xc4]
call fcn.004a005f
push ecx
lea eax, [ebp - 0x298]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0xa9
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00413ff7
call fcn.0048aa60
mov esi, eax
dec esi
cmp esi, dword [ebx + 0x1360]
jge 0x43a706
cmp esi, 0xffffffff
jle 0x43a706
mov eax, dword [ebp - 0xc4]
cmp byte [eax + 5], 0x2b
je 0x43a5ee
lea eax, [ebp - 0x440]
push esi
push eax
lea ecx, [ebx + 0x1358]
call fcn.004168da
or dword [ebp - 0x40], 0x10
mov byte [ebp - 4], 0xaa
jmp 0x43a66c
test edi, edi
push 0x4de268
je 0x43a61a
lea eax, [edi + 0xc4]
push eax
lea eax, [ebp - 0x4f0]
push eax
call fcn.004a61bb
or dword [ebp - 0x40], 0x20
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 0xab
jmp 0x43a633
lea ecx, [ebp - 0x438]
call fcn.004a5f94
or dword [ebp - 0x40], 0x40
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 0xac
lea eax, [ebp - 0x4e8]
push esi
push eax
lea ecx, [ebx + 0x1358]
call fcn.004168da
or byte [ebp - 0x40], 0x80
push eax
lea eax, [ebp - 0x430]
push dword [ebp - 0x14]
mov dword [ebp - 4], 0xad
push eax
call fcn.004a6155
or byte [ebp - 0x3f], 1
mov dword [ebp - 4], 0xae
push eax
lea ecx, [ebp - 0xe8]
call fcn.004a605f
test byte [ebp - 0x3f], 1
mov dword [ebp - 4], 0xad
je 0x43a694
and byte [ebp - 0x3f], 0xfe
lea ecx, [ebp - 0x430]
call fcn.004a5f26
test byte [ebp - 0x40], 0x80
mov dword [ebp - 4], 0xac
je 0x43a6b0
and byte [ebp - 0x40], 0x7f
lea ecx, [ebp - 0x4e8]
call fcn.004a5f26
test byte [ebp - 0x40], 0x40
mov dword [ebp - 4], 0xab
je 0x43a6cc
and dword [ebp - 0x40], 0xffffffbf
lea ecx, [ebp - 0x438]
call fcn.004a5f26
test byte [ebp - 0x40], 0x20
mov dword [ebp - 4], 0xaa
je 0x43a6e8
and dword [ebp - 0x40], 0xffffffdf
lea ecx, [ebp - 0x4f0]
call fcn.004a5f26
test byte [ebp - 0x40], 0x10
mov dword [ebp - 4], 0xa9
je 0x43a716
and dword [ebp - 0x40], 0xffffffef
lea ecx, [ebp - 0x440]
call fcn.004a5f26
jmp 0x43a716
push 0x4eea58
lea ecx, [ebp - 0xe8]
call fcn.004a60af
mov byte [ebp - 4], 0xa7
lea ecx, [ebp - 0x298]
call fcn.004a5f26
test edi, edi
jne 0x43a8e9
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0xd4]
add eax, 0xc
push eax
call fcn.004a5c9b
push 0x4de5bc
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0xaf
call fcn.004a022e
push 0x4e6318
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0x14], eax
call fcn.004a022e
cmp dword [ebp - 0x14], 0xffffffff
jg 0x43a775
cmp eax, 0xffffffff
jle 0x43a89e
push 0x4de56c
lea ecx, [ebp - 0xd4]
call fcn.004a022e
push 0x4de568
lea ecx, [ebp - 0xd4]
mov edi, eax
call fcn.004a022e
mov esi, eax
lea eax, [ebp - 0xd4]
push eax
lea ecx, [ebp - 0x278]
call fcn.004a5c9b
mov eax, dword [0x4ea054]
mov dword [ebp - 0x1c4], eax
sub esi, edi
lea eax, [edi + 1]
dec esi
lea ecx, [ebp - 0xd4]
push esi
push eax
lea eax, [ebp - 0x4f8]
mov byte [ebp - 4], 0xb1
push eax
call fcn.004a0082
push eax
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 4], 0xb2
call fcn.004a605f
lea ecx, [ebp - 0x4f8]
mov byte [ebp - 4], 0xb1
call fcn.004a5f26
lea eax, [ebp - 0x618]
push eax
push ecx
lea eax, [ebp - 0x1c4]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00419bc0
test eax, eax
jne 0x43a82d
push dword [ebp - 0x1c4]
call fcn.0048cd8e
fstp qword [ebp - 0x618]
pop ecx
cmp dword [ebp - 0x14], 0xffffffff
jle 0x43a836
mov edi, dword [ebp - 0x14]
lea eax, [ebp - 0x448]
push edi
push eax
lea ecx, [ebp - 0x278]
call fcn.004a0194
mov esi, eax
fld qword [ebp - 0x618]
mov byte [ebp - 4], 0xb3
call fcn.0048aa60
push eax
lea eax, [ebp - 0xd4]
push dword [esi]
push 0x4de554
push eax
call fcn.004a05b4
add esp, 0x10
lea ecx, [ebp - 0x448]
mov byte [ebp - 4], 0xb1
call fcn.004a5f26
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 4], 0xb0
call fcn.004a5f26
lea ecx, [ebp - 0x278]
mov byte [ebp - 4], 0xaf
call fcn.004a5f26
push ecx
lea eax, [ebp - 0xe8]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
push ecx
lea eax, [ebp - 0xd4]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
mov byte [ebp - 4], 0xb4
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
mov byte [ebp - 4], 0xaf
call fcn.00414862
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0xa7
call fcn.004a5f26
jmp 0x43aa09
lea eax, [ebp - 0xe8]
lea ecx, [edi + 0xc4]
push eax
call fcn.004a605f
cmp dword [edi + 0x38], 0xf
jne 0x43a91b
mov ecx, dword [edi + 0xa4]
lea esi, [edi + 0xa4]
test ecx, ecx
je 0x43a91b
push 1
call fcn.0043f3a0
and dword [esi], 0
cmp dword [edi + 0x38], 0x16
jne 0x43a9cb
mov ecx, dword [edi + 0x34]
test ecx, ecx
je 0x43a937
push 1
call fcn.0043f403
and dword [edi + 0x34], 0
push ecx
lea eax, [ebp - 0xe8]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
push ecx
lea eax, [edi + 0x1c4]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
mov byte [ebp - 4], 0xb5
call fcn.004a5c9b
lea esi, [ebx + 0x118c]
mov byte [ebp - 4], 0xa7
mov ecx, esi
call fcn.00414862
mov eax, dword [edi + 0x1ec]
cmp eax, 1
jne 0x43a99e
push dword [ebp - 0xe8]
call fcn.0048cae6
mov dword [ebp - 0x14], eax
push ecx
fild dword [ebp - 0x14]
lea eax, [edi + 0x1c8]
fstp qword [esp]
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
jmp 0x43a9be
cmp eax, 2
jne 0x43a9cb
push dword [ebp - 0xe8]
call fcn.0048cd8e
push ecx
lea eax, [edi + 0x1c8]
fstp qword [esp]
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
mov ecx, esi
call fcn.00419b0a
lea eax, [edi + 0xb4]
mov esi, dword [sym.imp.USER32.dll_UnionRect]
mov dword [ebp - 0x14], eax
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x84]
push eax
call esi
mov ecx, edi
call fcn.0042a4a1
test al, al
je 0x43aa09
push dword [ebp - 0x14]
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x84]
push eax
call esi
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 0xa6
call fcn.004a5f26
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 0xa3
call fcn.004a5f26
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xf4]
jmp 0x43eae3
call fcn.004ac071
mov ecx, dword [eax + 4]
call fcn.004a5a52
push 0xffffffffffffffff
push 0
lea ecx, [ebx + 0x1358]
mov byte [ebp - 4], 0xb6
call fcn.004a1e9d
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5c9b
lea eax, [ebp - 0x108]
mov ecx, ebx
push eax
call fcn.004421ad
mov eax, dword [ebp - 0x2c]
push ecx
add eax, 0x10
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0xb7
call fcn.004a5c9b
lea eax, [ebp - 0x148]
mov ecx, ebx
push eax
call fcn.004421ad
lea ecx, [ebp - 0x108]
mov byte [ebp - 4], 0xb8
call fcn.004a0698
lea ecx, [ebp - 0x108]
call fcn.004a0609
lea ecx, [ebp - 0x148]
call fcn.004a0698
lea ecx, [ebp - 0x148]
call fcn.004a0609
mov esi, 0x4eea58
push esi
push dword [ebp - 0x108]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
jne 0x43aaeb
push str._SrcDir_
lea ecx, [ebp - 0x108]
call fcn.004a60af
push ecx
lea eax, [ebp - 0x108]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea eax, [ebp - 0x500]
push eax
call fcn.004311d6
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x108]
mov byte [ebp - 4], 0xb9
call fcn.004a605f
lea ecx, [ebp - 0x500]
mov byte [ebp - 4], 0xb8
call fcn.004a5f26
push esi
push dword [ebp - 0x148]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
jne 0x43ab4c
push str.mpg_mp1_mp2_ogg_wma_asf
lea ecx, [ebp - 0x148]
call fcn.004a60af
push ecx
lea eax, [ebp - 0x148]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
push ecx
lea eax, [ebp - 0x108]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
mov byte [ebp - 4], 0xba
call fcn.004a5c9b
mov ecx, ebx
mov byte [ebp - 4], 0xb8
call fcn.00441c72
mov ecx, ebx
mov dword [ebx + 0x136c], 1
call fcn.00442054
lea ecx, [ebp - 0x148]
mov byte [ebp - 4], 0xb7
call fcn.004a5f26
lea ecx, [ebp - 0x108]
mov byte [ebp - 4], 0xb6
call fcn.004a5f26
mov byte [ebp - 4], 0xa
call fcn.004ac071
mov ecx, dword [eax + 4]
call fcn.004a5a67
jmp 0x43eae8
push 0x4eea58
push dword [esi]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43eae8
push esi
lea ecx, [ebp - 0xe4]
call fcn.004a5c9b
lea ecx, [ebp - 0xe4]
mov byte [ebp - 4], 0xbb
call fcn.004a6481
mov esi, 0x4eea58
lea ecx, [ebp - 0xb8]
push esi
call fcn.004a5f94
push esi
lea ecx, [ebp - 0xb4]
mov byte [ebp - 4], 0xbc
call fcn.004a5f94
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0xec]
add eax, 0x10
mov byte [ebp - 4], 0xbd
push eax
call fcn.004a5c9b
push str.resizewindow
mov byte [ebp - 4], 0xbe
push dword [ebp - 0xe4]
call fcn.0048a850
xor esi, esi
pop ecx
cmp eax, esi
pop ecx
je 0x43ac62
push str.movewindow
push dword [ebp - 0xe4]
call fcn.0048a850
pop ecx
cmp eax, esi
pop ecx
jne 0x43ae39
push 0x4de5a8
lea ecx, [ebp - 0xec]
call fcn.004a022e
mov edi, eax
cmp edi, esi
jle 0x43acdf
lea eax, [ebp - 0x508]
push edi
push eax
lea ecx, [ebp - 0xec]
call fcn.004a0194
push eax
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0xbf
call fcn.004a605f
lea ecx, [ebp - 0x508]
mov byte [ebp - 4], 0xbe
call fcn.004a5f26
inc edi
lea eax, [ebp - 0x454]
push edi
push eax
lea ecx, [ebp - 0xec]
call fcn.004a005f
push eax
lea ecx, [ebp - 0xb4]
mov byte [ebp - 4], 0xc0
call fcn.004a605f
lea ecx, [ebp - 0x454]
mov byte [ebp - 4], 0xbe
call fcn.004a5f26
jmp 0x43acf1
lea eax, [ebp - 0xec]
lea ecx, [ebp - 0xb8]
push eax
call fcn.004a605f
cmp dword [ebp - 0xb8], esi
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x14], esi
je 0x43ad24
push ecx
lea eax, [ebp - 0xb8]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00413ff7
call fcn.0048aa60
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0xb4], esi
je 0x43ad51
push ecx
lea eax, [ebp - 0xb4]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00413ff7
call fcn.0048aa60
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x2d4]
push eax
push dword [ebx + 0x1c]
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [ebp - 0x640]
push eax
push dword [ebx + 0x1c]
call dword [sym.imp.USER32.dll_GetClientRect]
mov esi, dword [ebp - 0x2cc]
mov edi, dword [ebp - 0x63c]
sub esi, dword [ebp - 0x638]
sub edi, dword [ebp - 0x2d0]
push str.resizewindow
sub esi, dword [ebp - 0x2d4]
sub edi, dword [ebp - 0x634]
push dword [ebp - 0xe4]
add esi, dword [ebp - 0x640]
add edi, dword [ebp - 0x2c8]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
jne 0x43adf9
cmp dword [ebp - 0x28], 1
jge 0x43adce
mov eax, dword [ebp - 0x2cc]
sub eax, dword [ebp - 0x2d4]
mov dword [ebp - 0x28], eax
jmp 0x43add1
add dword [ebp - 0x28], esi
cmp dword [ebp - 0x14], 1
jge 0x43ade8
mov eax, dword [ebp - 0x2c8]
sub eax, dword [ebp - 0x2d0]
mov dword [ebp - 0x14], eax
jmp 0x43adeb
add dword [ebp - 0x14], edi
push 6
push dword [ebp - 0x14]
push dword [ebp - 0x28]
push 0
push 0
jmp 0x43ae1e
mov eax, dword [ebx + 0x1488]
lea esi, [ebx + 0x1488]
xor edi, edi
cmp eax, edi
je 0x43ae14
push eax
call fcn.004a651e
pop ecx
mov dword [esi], edi
push 5
push edi
push edi
push dword [ebp - 0x14]
push dword [ebp - 0x28]
push 0x504f68
mov ecx, ebx
call fcn.004a563d
push 1
push 0
push dword [ebx + 0x1c]
call dword [sym.imp.USER32.dll_InvalidateRect]
xor esi, esi
push str.centerwindow
push dword [ebp - 0xe4]
call fcn.0048a850
pop ecx
cmp eax, esi
pop ecx
jne 0x43ae70
mov eax, dword [ebx + 0x1488]
lea edi, [ebx + 0x1488]
cmp eax, esi
je 0x43ae68
push eax
call fcn.004a651e
pop ecx
mov dword [edi], esi
push esi
mov ecx, ebx
call fcn.004a4b76
push str.alwaysontop
push dword [ebp - 0xe4]
call fcn.0048a850
pop ecx
cmp eax, esi
pop ecx
jne 0x43ae98
push 0x13
push esi
push esi
push esi
push esi
push 0x504ee8
mov ecx, ebx
call fcn.004a563d
push str.notalwaysontop
push dword [ebp - 0xe4]
call fcn.0048a850
pop ecx
cmp eax, esi
pop ecx
jne 0x43aec0
push 0x13
push esi
push esi
push esi
push esi
push 0x504ea8
mov ecx, ebx
call fcn.004a563d
push str.copyfile
push dword [ebp - 0xe4]
call fcn.0048a850
pop ecx
cmp eax, esi
pop ecx
jne 0x43b0fd
push 0x4de5a8
lea ecx, [ebp - 0xec]
call fcn.004a022e
mov edi, eax
cmp edi, esi
jle 0x43af57
lea eax, [ebp - 0x504]
push edi
push eax
lea ecx, [ebp - 0xec]
call fcn.004a0194
push eax
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0xc1
call fcn.004a605f
lea ecx, [ebp - 0x504]
mov byte [ebp - 4], 0xbe
call fcn.004a5f26
inc edi
lea eax, [ebp - 0x45c]
push edi
push eax
lea ecx, [ebp - 0xec]
call fcn.004a005f
push eax
lea ecx, [ebp - 0xb4]
mov byte [ebp - 4], 0xc2
call fcn.004a605f
lea ecx, [ebp - 0x45c]
mov byte [ebp - 4], 0xbe
call fcn.004a5f26
jmp 0x43af69
lea eax, [ebp - 0xec]
lea ecx, [ebp - 0xb8]
push eax
call fcn.004a605f
push ecx
lea eax, [ebp - 0xb8]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea eax, [ebp - 0x564]
mov ecx, ebx
push eax
call fcn.004421ad
push eax
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0xc3
call fcn.004a605f
lea ecx, [ebp - 0x564]
mov byte [ebp - 4], 0xbe
call fcn.004a5f26
push ecx
lea eax, [ebp - 0xb4]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea eax, [ebp - 0x464]
mov ecx, ebx
push eax
call fcn.004421ad
push eax
lea ecx, [ebp - 0xb4]
mov byte [ebp - 4], 0xc4
call fcn.004a605f
lea ecx, [ebp - 0x464]
mov byte [ebp - 4], 0xbe
call fcn.004a5f26
push ecx
lea eax, [ebp - 0xb8]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea eax, [ebp - 0x50c]
push eax
call fcn.004311d6
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0xc5
call fcn.004a605f
lea ecx, [ebp - 0x50c]
mov byte [ebp - 4], 0xbe
call fcn.004a5f26
push ecx
lea eax, [ebp - 0xb4]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea eax, [ebp - 0x46c]
push eax
call fcn.004311d6
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0xb4]
mov byte [ebp - 4], 0xc6
call fcn.004a605f
lea ecx, [ebp - 0x46c]
mov byte [ebp - 4], 0xbe
call fcn.004a5f26
push ecx
lea eax, [ebp - 0xb4]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea eax, [ebp - 0x29c]
push eax
mov ecx, ebx
call fcn.004424d0
push ecx
lea eax, [ebp - 0x29c]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0xc7
call fcn.004a5c9b
mov ecx, ebx
call fcn.00442409
push esi
push dword [ebp - 0xb4]
push dword [ebp - 0xb8]
call dword [sym.imp.KERNEL32.DLL_CopyFileA]
test eax, eax
jne 0x43b0ee
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0x57c]
push str.Cant_copy_n
push eax
call fcn.004a622f
mov eax, dword [eax]
push esi
push esi
push eax
mov byte [ebp - 4], 0xc8
call fcn.004aacbc
lea ecx, [ebp - 0x57c]
mov byte [ebp - 4], 0xc7
call fcn.004a5f26
lea ecx, [ebp - 0x29c]
mov byte [ebp - 4], 0xbe
call fcn.004a5f26
lea ecx, [ebp - 0xec]
mov byte [ebp - 4], 0xbd
call fcn.004a5f26
lea ecx, [ebp - 0xb4]
mov byte [ebp - 4], 0xbc
call fcn.004a5f26
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0xbb
call fcn.004a5f26
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xe4]
jmp 0x43eae3
test edi, edi
je 0x43eae8
mov eax, dword [ebp - 0x2c]
push 0x4eea58
push dword [eax + 0x10]
lea esi, [eax + 0x10]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43eae8
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5c9b
lea eax, [ebp - 0x280]
mov ecx, ebx
push eax
call fcn.004421ad
push ecx
lea eax, [ebp - 0x280]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0xc9
call fcn.004a5c9b
push ebx
mov ecx, edi
call fcn.00426810
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x280]
jmp 0x43eae3
test edi, edi
je 0x43eae8
mov eax, dword [ebp - 0x2c]
push 0x4eea58
push dword [eax + 0x10]
lea esi, [eax + 0x10]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43eae8
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5c9b
lea eax, [ebp - 0x224]
mov ecx, ebx
push eax
call fcn.004421ad
lea eax, [ebp - 0x3c]
and byte [ebp - 0x1a4], 0
push eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x24]
push eax
push ecx
lea eax, [ebp - 0x224]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0xca
call fcn.004a5c9b
push 4
push ebx
call fcn.00434867
add esp, 0x1c
cmp eax, 2
jne 0x43b283
push ecx
lea eax, [ebp - 0x24]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea esi, [ebx + 0x118c]
mov ecx, esi
call fcn.00413ff7
call fcn.0048aa60
mov dword [ebp - 0x28], eax
push ecx
lea eax, [ebp - 0x30]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
mov ecx, esi
call fcn.00413ff7
call fcn.0048aa60
mov esi, dword [edi + 0xbc]
mov dword [ebp - 0x14], eax
mov eax, dword [edi + 0xc0]
sub esi, dword [edi + 0xb4]
sub eax, dword [edi + 0xb8]
mov dword [ebp - 0x50], eax
jmp 0x43b33b
cmp eax, 4
jne 0x43b40e
push ecx
lea eax, [ebp - 0x24]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea esi, [ebx + 0x118c]
mov ecx, esi
call fcn.00413ff7
call fcn.0048aa60
mov dword [ebp - 0x28], eax
push ecx
lea eax, [ebp - 0x30]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
mov ecx, esi
call fcn.00413ff7
call fcn.0048aa60
mov dword [ebp - 0x14], eax
push ecx
lea eax, [ebp - 0x34]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
mov ecx, esi
call fcn.00413ff7
call fcn.0048aa60
mov esi, eax
mov eax, dword [edi + 0xbc]
sub eax, dword [edi + 0xb4]
cmp esi, eax
je 0x43b302
mov byte [ebp - 0x1a4], 1
push ecx
lea eax, [ebp - 0x3c]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00413ff7
call fcn.0048aa60
mov ecx, dword [edi + 0xc0]
mov dword [ebp - 0x50], eax
sub ecx, dword [edi + 0xb8]
cmp eax, ecx
je 0x43b33b
mov byte [ebp - 0x1a4], 1
lea eax, [ebp - 0x794]
mov ecx, edi
push eax
call fcn.004257c7
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x84]
push eax
call dword [sym.imp.USER32.dll_UnionRect]
push 1
lea eax, [ebp - 0x84]
push 1
push eax
call dword [sym.imp.USER32.dll_InflateRect]
cmp dword [edi + 0x38], 0xa
je 0x43b3a7
mov eax, dword [ebp - 0x28]
mov edx, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x14]
add esi, eax
push dword [ebp - 0x1a4]
add edx, ecx
mov dword [edi + 0xbc], esi
mov dword [edi + 0xc0], edx
mov dword [edi + 0xb4], eax
mov dword [edi + 0xb8], ecx
mov ecx, dword [ebp - 0x68]
test ecx, ecx
jmp 0x43b3ae
mov ecx, dword [ebp - 0x68]
push 0
test ecx, ecx
push dword [ebp - 0x14]
push dword [ebp - 0x28]
push edi
jne 0x43b3bd
mov ecx, dword [ebx + 0x1200]
call fcn.0041ff39
cmp dword [edi + 0x38], 0xc
jne 0x43b3da
cmp dword [edi + 0x18], 0
je 0x43b3da
push 0
push ebx
push 0x11
mov ecx, edi
call fcn.00425932
lea eax, [ebp - 0x884]
mov ecx, edi
push eax
call fcn.004257c7
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x84]
push eax
call dword [sym.imp.USER32.dll_UnionRect]
push 1
lea eax, [ebp - 0x84]
push 1
push eax
call dword [sym.imp.USER32.dll_InflateRect]
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x224]
jmp 0x43eae3
test edi, edi
je 0x43eae8
mov eax, dword [ebp - 0x2c]
push 0x4eea58
add eax, 0x10
push dword [eax]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43eae8
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5c9b
lea eax, [ebp - 0x1ac]
mov ecx, ebx
push eax
call fcn.004421ad
mov eax, dword [ebp - 0x2c]
push ecx
add eax, 0x10
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0xcb
call fcn.004a5c9b
lea eax, [ebp - 0x190]
mov ecx, ebx
push eax
call fcn.004421ad
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 0xcc
push eax
push ecx
lea eax, [ebp - 0x190]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
push 1
push ebx
call fcn.00434867
add esp, 0x10
cmp eax, 1
jne 0x43b5d5
push eax
push ecx
lea eax, [ebp - 0x1ac]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
mov ecx, ebx
call fcn.00441536
mov esi, eax
test esi, esi
mov dword [ebp - 0x14], esi
je 0x43b5d5
push str.FRONT
push dword [ebp - 0x24]
call fcn.0048be10
pop ecx
test eax, eax
pop ecx
jne 0x43b4f5
mov ecx, dword [ebx + 0x1200]
push esi
call fcn.0041e9a0
jmp 0x43b556
push str.BACK
push dword [ebp - 0x24]
call fcn.0048be10
pop ecx
test eax, eax
pop ecx
jne 0x43b516
mov ecx, dword [ebx + 0x1200]
push esi
call fcn.0041ebc2
jmp 0x43b556
push str.FORWARD
push dword [ebp - 0x24]
call fcn.0048be10
pop ecx
test eax, eax
pop ecx
jne 0x43b537
mov ecx, dword [ebx + 0x1200]
push esi
call fcn.0041ead0
jmp 0x43b556
push str.BACKWARD
push dword [ebp - 0x24]
call fcn.0048be10
pop ecx
test eax, eax
pop ecx
jne 0x43b556
mov ecx, dword [ebx + 0x1200]
push esi
call fcn.0041e9d5
lea eax, [ebp - 0x7b4]
mov ecx, edi
push eax
call fcn.004257c7
mov esi, dword [sym.imp.USER32.dll_UnionRect]
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x84]
push eax
call esi
push 1
lea eax, [ebp - 0x84]
push 1
push eax
call dword [sym.imp.USER32.dll_InflateRect]
mov ecx, dword [ebp - 0x14]
lea eax, [ebp - 0x914]
push eax
call fcn.004257c7
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x84]
push eax
call esi
push 1
lea eax, [ebp - 0x84]
push 1
push eax
call dword [sym.imp.USER32.dll_InflateRect]
cmp dword [edi + 0x38], 0xc
jne 0x43b5d5
cmp dword [edi + 0x18], 0
je 0x43b5d5
push 0
push ebx
push 0x11
mov ecx, edi
call fcn.00425932
lea ecx, [ebp - 0x190]
mov byte [ebp - 4], 0xcb
call fcn.004a5f26
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x1ac]
jmp 0x43eae3
test edi, edi
je 0x43eae8
mov eax, dword [ebp - 0x2c]
push 0x4eea58
push dword [eax + 0x10]
lea esi, [eax + 0x10]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43eae8
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5c9b
lea eax, [ebp - 0x120]
mov ecx, ebx
push eax
call fcn.004421ad
lea eax, [ebp - 0x3c]
and dword [ebp - 0x50], 0
push eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x24]
push eax
push ecx
lea eax, [ebp - 0x120]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0xcd
mov dword [ebp - 0x28], 0x64
call fcn.004a5c9b
push 4
push ebx
call fcn.00434867
add esp, 0x1c
cmp eax, 2
mov dword [ebp - 0x14], eax
jl 0x43b982
push ecx
lea eax, [ebp - 0x24]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea esi, [ebx + 0x118c]
mov ecx, esi
call fcn.00413ff7
call fcn.0048aa60
mov dword [ebp - 0x68], eax
push ecx
lea eax, [ebp - 0x30]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
mov ecx, esi
call fcn.00413ff7
call fcn.0048aa60
cmp dword [ebp - 0x14], 2
mov dword [ebp - 0xa8], eax
jle 0x43b742
push ecx
lea eax, [ebp - 0x34]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
mov ecx, esi
call fcn.00413ff7
call fcn.0048aa60
cmp dword [ebp - 0x14], 3
mov dword [ebp - 0x28], eax
jle 0x43b735
lea ecx, [ebp - 0x3c]
call fcn.004a646f
lea ecx, [ebp - 0x3c]
call fcn.004a0698
lea ecx, [ebp - 0x3c]
call fcn.004a0609
push str.EASYTO
push dword [ebp - 0x3c]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
jne 0x43b71b
mov dword [ebp - 0x50], 1
push str.EASYFROM
push dword [ebp - 0x3c]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
jne 0x43b735
mov dword [ebp - 0x50], 2
cmp dword [ebp - 0x28], 0
jne 0x43b742
mov dword [ebp - 0x28], 0x64
mov eax, dword [edi + 0xb4]
mov edx, dword [ebp - 0x68]
fild dword [ebp - 0x28]
sub edx, eax
mov ecx, dword [edi + 0xb8]
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x4c], eax
fst qword [ebp - 0x180]
fild dword [ebp - 0x14]
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x1c], ecx
sub eax, ecx
mov ecx, edi
fdiv st(1)
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x7d4]
push eax
fstp qword [ebp - 0x654]
fild dword [ebp - 0x14]
fdiv st(1)
fstp qword [ebp - 0x18c]
fstp st(0)
call fcn.004257c7
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x84]
push eax
call dword [sym.imp.USER32.dll_UnionRect]
push 1
lea eax, [ebp - 0x84]
pop esi
push esi
push esi
push eax
call dword [sym.imp.USER32.dll_InflateRect]
fld qword [str.PERT]
fdiv qword [ebp - 0x180]
cmp dword [ebp - 0x28], esi
mov dword [ebp - 0x14], esi
fstp qword [ebp - 0x250]
jl 0x43b922
fild dword [ebp - 0x4c]
fstp qword [ebp - 0x2b4]
fild dword [ebp - 0x1c]
fstp qword [ebp - 0x20]
cmp dword [ebp - 0x50], 1
jne 0x43b80d
fild dword [ebp - 0x14]
push ecx
push ecx
fmul qword [ebp - 0x250]
fstp qword [esp]
call fcn.0048b104
fmul qword [ebp - 0x180]
pop ecx
pop ecx
jmp 0x43b834
cmp dword [ebp - 0x50], 2
jne 0x43b83b
fild dword [ebp - 0x14]
push ecx
push ecx
fmul qword [ebp - 0x250]
fstp qword [esp]
call fcn.0048a974
fmul qword [ebp - 0x180]
pop ecx
pop ecx
fsubr qword [ebp - 0x180]
call fcn.0048aa60
jmp 0x43b83e
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x4c], eax
fild dword [ebp - 0x4c]
fld st(0)
fmul qword [ebp - 0x654]
fadd qword [ebp - 0x2b4]
call fcn.0048aa60
fmul qword [ebp - 0x18c]
mov edi, eax
fadd qword [ebp - 0x20]
call fcn.0048aa60
mov ecx, dword [ebx + 0x1200]
push 0
push eax
push edi
push dword [ebp - 0x38]
call fcn.0041ff39
mov ecx, dword [ebp - 0x38]
lea eax, [ebp - 0x744]
push eax
call fcn.004257c7
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x84]
push eax
call dword [sym.imp.USER32.dll_UnionRect]
push 1
lea eax, [ebp - 0x84]
push 1
push eax
call dword [sym.imp.USER32.dll_InflateRect]
mov edi, dword [sym.imp.KERNEL32.DLL_GetTickCount]
call edi
mov esi, eax
cmp byte [ebx + 0xa0], 0
jne 0x43ee3e
mov ecx, ebx
call fcn.00430726
test al, al
je 0x43ee3e
push 0
call dword [sym.imp.KERNEL32.DLL_Sleep]
call edi
sub eax, esi
cmp eax, 5
jbe 0x43b8b8
cmp byte [ebx + 0xa0], 0
jne 0x43ee3e
mov ecx, ebx
call fcn.00430726
test al, al
je 0x43ee3e
lea eax, [ebp - 0x84]
push 1
push eax
push dword [ebx + 0x1c]
call dword [sym.imp.USER32.dll_InvalidateRect]
inc dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x28]
jle 0x43b7ea
push 0
mov ecx, dword [ebx + 0x1200]
push dword [ebp - 0xa8]
push dword [ebp - 0x68]
push dword [ebp - 0x38]
call fcn.0041ff39
mov ecx, dword [ebp - 0x38]
lea eax, [ebp - 0x7f4]
push eax
call fcn.004257c7
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x84]
push eax
call dword [sym.imp.USER32.dll_UnionRect]
push 1
lea eax, [ebp - 0x84]
push 1
push eax
call dword [sym.imp.USER32.dll_InflateRect]
lea eax, [ebp - 0x84]
push 1
push eax
push dword [ebx + 0x1c]
call dword [sym.imp.USER32.dll_InvalidateRect]
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x120]
jmp 0x43eae3
push 0x4eea58
push dword [esi]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43eae8
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00413ff7
call fcn.0048aa60
mov esi, dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov edi, eax
call esi
mov dword [ebp - 0x1c], eax
cmp byte [ebx + 0xa0], 0
jne 0x43ed7c
mov ecx, ebx
call fcn.00430726
test al, al
je 0x43ed7c
push 0
call dword [sym.imp.KERNEL32.DLL_Sleep]
call esi
sub eax, dword [ebp - 0x1c]
cmp eax, edi
jbe 0x43b9d0
jmp 0x43eae8
push str.FORCED
push dword [esi]
call fcn.0048be10
pop ecx
xor esi, esi
pop ecx
cmp eax, esi
push 1
jne 0x43ba1b
push esi
jmp 0x43ba33
lea eax, [ebp - 0x84]
push 1
push eax
call dword [sym.imp.USER32.dll_InflateRect]
lea eax, [ebp - 0x84]
push 1
push eax
push dword [ebx + 0x1c]
call dword [sym.imp.USER32.dll_InvalidateRect]
mov ecx, ebx
call fcn.00430726
test al, al
je 0x43ee54
jmp 0x43eae8
test edi, edi
je 0x43eae8
mov eax, dword [ebp - 0x2c]
push 0x4eea58
push dword [eax + 0x10]
lea esi, [eax + 0x10]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43eae8
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5c9b
lea eax, [ebp - 0xf0]
mov ecx, ebx
push eax
call fcn.004421ad
lea eax, [ebp - 0xf0]
lea ecx, [ebp - 0x2ac]
push eax
mov byte [ebp - 4], 0xce
call fcn.004a5c9b
lea ecx, [ebp - 0xf0]
mov byte [ebp - 4], 0xcf
call fcn.004a6481
cmp dword [edi + 0xc], 0
je 0x43bbaf
push str.back
push dword [ebp - 0xf0]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
jne 0x43bae1
mov ecx, dword [edi + 0xc]
call fcn.0041a542
jmp 0x43bbaf
push str.forward
push dword [ebp - 0xf0]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
jne 0x43bb04
mov ecx, dword [edi + 0xc]
call fcn.0041a557
jmp 0x43bbaf
push str.refresh
push dword [ebp - 0xf0]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
jne 0x43bb27
mov ecx, dword [edi + 0xc]
call fcn.0041a579
jmp 0x43bbaf
push 0x4de03c
push dword [ebp - 0xf0]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
jne 0x43bb47
mov ecx, dword [edi + 0xc]
call fcn.0041a56c
jmp 0x43bbaf
push str.print
push dword [ebp - 0xf0]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
jne 0x43bb67
mov ecx, dword [edi + 0xc]
call fcn.0041a7ff
jmp 0x43bbaf
push str.openfile
push dword [ebp - 0xf0]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
jne 0x43bb87
mov ecx, dword [edi + 0xc]
call fcn.0041a67c
jmp 0x43bbaf
push ecx
lea eax, [ebp - 0x2ac]
mov esi, esp
mov dword [ebp - 0x1c], esp
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
push esi
call fcn.004311d6
pop ecx
pop ecx
mov ecx, dword [edi + 0xc]
call fcn.0041a586
lea ecx, [ebp - 0x2ac]
mov byte [ebp - 4], 0xce
call fcn.004a5f26
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xf0]
jmp 0x43eae3
test edi, edi
je 0x43eae8
mov eax, dword [ebp - 0x2c]
push 0x4eea58
push dword [eax + 0x10]
lea esi, [eax + 0x10]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43eae8
cmp dword [edi + 0x38], 0x18
jne 0x43eae8
cmp dword [edi + 8], 0
je 0x43eae8
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5c9b
lea eax, [ebp - 0x210]
mov ecx, ebx
push eax
call fcn.004421ad
lea eax, [ebp - 0x34]
and dword [ebp - 0x14], 0
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x24]
push eax
push ecx
lea eax, [ebp - 0x210]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0xd0
call fcn.004a5c9b
push 3
push ebx
call fcn.00434867
add esp, 0x18
cmp eax, 3
jne 0x43bcb8
push ecx
lea eax, [ebp - 0x24]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea esi, [ebx + 0x118c]
mov ecx, esi
call fcn.00413ff7
call fcn.0048aa60
mov dword [ebp - 0x50], eax
push ecx
lea eax, [ebp - 0x30]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
mov ecx, esi
call fcn.00413ff7
call fcn.0048aa60
mov dword [ebp - 0x28], eax
push ecx
lea eax, [ebp - 0x34]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
mov ecx, esi
call fcn.00413ff7
call fcn.0048aa60
mov dword [ebp - 0x14], eax
jmp 0x43bcff
cmp eax, 2
jne 0x43bd10
push ecx
lea eax, [ebp - 0x24]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea esi, [ebx + 0x118c]
mov ecx, esi
call fcn.00413ff7
call fcn.0048aa60
mov dword [ebp - 0x50], eax
push ecx
lea eax, [ebp - 0x30]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
mov ecx, esi
call fcn.00413ff7
call fcn.0048aa60
mov dword [ebp - 0x28], eax
push dword [ebp - 0x14]
mov ecx, dword [edi + 8]
push dword [ebp - 0x28]
push dword [ebp - 0x50]
call fcn.00401c2d
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x210]
jmp 0x43eae3
push 0x4eea58
push dword [esi]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43eae8
mov eax, dword [ebp - 0x2c]
push 0x4eea58
push dword [eax + 0x10]
lea edi, [eax + 0x10]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43eae8
push esi
lea ecx, [ebp - 0xe0]
call fcn.004a5c9b
lea ecx, [ebp - 0xe0]
mov byte [ebp - 4], 0xd1
call fcn.004a6481
lea ecx, [ebp - 0xe0]
call fcn.004a0698
lea ecx, [ebp - 0xe0]
call fcn.004a0609
mov eax, dword [0x4ea054]
mov dword [ebp - 0xdc], eax
push str.send
mov byte [ebp - 4], 0xd2
push dword [ebp - 0xe0]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
jne 0x43befd
lea eax, [ebp - 0x514]
push 1
push eax
mov ecx, edi
call fcn.004a0118
push str._____
push dword [eax]
call fcn.0048a850
pop ecx
pop ecx
test eax, eax
lea ecx, [ebp - 0x514]
sete byte [ebp - 0xd]
call fcn.004a5f26
cmp byte [ebp - 0xd], 0
push ecx
mov ecx, esp
je 0x43be1c
mov dword [ebp - 0x1c], esp
push edi
call fcn.004a5c9b
lea eax, [ebp - 0x47c]
mov ecx, ebx
push eax
call fcn.004421ad
push eax
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0xd3
call fcn.004a605f
lea ecx, [ebp - 0x47c]
mov byte [ebp - 4], 0xd2
call fcn.004a5f26
jmp 0x43be4a
mov dword [ebp - 0x1c], esp
push edi
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00413ff7
call fcn.0048aa60
push eax
lea eax, [ebp - 0xdc]
push 0x4dde4c
push eax
call fcn.004a05b4
add esp, 0xc
push dword [ebx + 0x1c]
mov edi, dword [sym.imp.USER32.dll_OpenClipboard]
call edi
test eax, eax
jne 0x43beac
and dword [ebp - 0x14], eax
mov esi, dword [sym.imp.KERNEL32.DLL_GetTickCount]
call esi
mov dword [ebp - 0x1c], eax
cmp byte [ebx + 0xa0], 0
jne 0x43eed8
mov ecx, ebx
call fcn.00430726
test al, al
je 0x43eed8
push 0
call dword [sym.imp.KERNEL32.DLL_Sleep]
call esi
sub eax, dword [ebp - 0x1c]
cmp eax, 0x64
jbe 0x43be67
push dword [ebx + 0x1c]
call edi
test eax, eax
jne 0x43beac
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xa
jl 0x43be62
jmp 0x43c047
call dword [sym.imp.USER32.dll_EmptyClipboard]
push dword [ebp - 0xdc]
call fcn.0048c9e0
pop ecx
inc eax
push eax
push 0x2042
call dword [sym.imp.KERNEL32.DLL_GlobalAlloc]
push dword [ebp - 0xdc]
mov esi, eax
push esi
call dword [sym.imp.KERNEL32.DLL_GlobalLock]
push eax
call fcn.0048c040
pop ecx
pop ecx
push esi
call dword [sym.imp.KERNEL32.DLL_GlobalUnlock]
push esi
push 1
call dword [sym.imp.USER32.dll_SetClipboardData]
call dword [sym.imp.USER32.dll_CloseClipboard]
jmp 0x43c047
mov eax, dword [0x4ea054]
mov dword [ebp - 0x144], eax
push dword [ebx + 0x1c]
mov byte [ebp - 4], 0xd4
call dword [sym.imp.USER32.dll_OpenClipboard]
test eax, eax
jne 0x43bf70
and dword [ebp - 0x14], eax
mov esi, dword [sym.imp.KERNEL32.DLL_GetTickCount]
call esi
mov dword [ebp - 0x1c], eax
cmp byte [ebx + 0xa0], 0
jne 0x43eee1
mov ecx, ebx
call fcn.00430726
test al, al
je 0x43eee1
push 0
call dword [sym.imp.KERNEL32.DLL_Sleep]
call esi
sub eax, dword [ebp - 0x1c]
cmp eax, 0x64
jbe 0x43bf27
push dword [ebx + 0x1c]
call dword [sym.imp.USER32.dll_OpenClipboard]
test eax, eax
jne 0x43bf70
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xa
jl 0x43bf22
jmp 0x43c038
push 1
call dword [sym.imp.USER32.dll_IsClipboardFormatAvailable]
test eax, eax
je 0x43c032
push 1
call dword [sym.imp.USER32.dll_GetClipboardData]
mov esi, eax
push esi
call dword [sym.imp.KERNEL32.DLL_GlobalLock]
push eax
lea ecx, [ebp - 0x144]
call fcn.004a60af
push esi
call dword [sym.imp.KERNEL32.DLL_GlobalUnlock]
lea eax, [ebp - 0x540]
push 1
push eax
mov ecx, edi
call fcn.004a0118
push str._____
push dword [eax]
call fcn.0048a850
pop ecx
pop ecx
test eax, eax
lea ecx, [ebp - 0x540]
sete byte [ebp - 0xd]
call fcn.004a5f26
cmp byte [ebp - 0xd], 0
je 0x43c00c
push ecx
lea eax, [ebp - 0x144]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
push ecx
mov byte [ebp - 4], 0xd5
mov ecx, esp
mov dword [ebp - 0x14], esp
push edi
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
mov byte [ebp - 4], 0xd4
call fcn.00414862
jmp 0x43c032
push dword [ebp - 0x144]
call fcn.0048cd8e
push ecx
fstp qword [esp]
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push edi
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00419b0a
call dword [sym.imp.USER32.dll_CloseClipboard]
lea ecx, [ebp - 0x144]
mov byte [ebp - 4], 0xd2
call fcn.004a5f26
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0xd1
call fcn.004a5f26
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xe0]
jmp 0x43eae3
test edi, edi
je 0x43eae8
mov eax, dword [ebp - 0x2c]
push 0x4eea58
push dword [eax + 0x10]
lea esi, [eax + 0x10]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43eae8
cmp dword [edi + 0x10], 0
je 0x43eae8
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5c9b
lea eax, [ebp - 0x288]
mov ecx, ebx
push eax
call fcn.004421ad
push ecx
lea eax, [ebp - 0x288]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0xd6
call fcn.004a5c9b
mov ecx, dword [edi + 0x10]
call fcn.0040ea8a
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x288]
jmp 0x43eae3
test edi, edi
je 0x43eae8
mov eax, dword [ebp - 0x2c]
push 0x4eea58
push dword [eax + 0x10]
lea esi, [eax + 0x10]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43eae8
cmp dword [edi + 0x10], 0
je 0x43eae8
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5c9b
lea eax, [ebp - 0x204]
mov ecx, ebx
push eax
call fcn.004421ad
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0xd7
push eax
lea eax, [ebp - 0x24]
push eax
push ecx
lea eax, [ebp - 0x204]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
push 2
push ebx
call fcn.00434867
add esp, 0x14
cmp eax, 2
jne 0x43c18e
push ecx
lea eax, [ebp - 0x30]
mov esi, esp
mov dword [ebp - 0x1c], esp
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.004a5c9b
push esi
mov ecx, ebx
call fcn.004421ad
push ecx
lea eax, [ebp - 0x24]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
mov byte [ebp - 4], 0xd8
call fcn.004a5c9b
mov ecx, dword [edi + 0x10]
mov byte [ebp - 4], 0xd7
call fcn.0040ec57
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x204]
jmp 0x43eae3
test edi, edi
je 0x43eae8
mov eax, dword [ebp - 0x2c]
push 0x4eea58
push dword [eax + 0x10]
lea esi, [eax + 0x10]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43eae8
cmp dword [edi + 0x10], 0
je 0x43eae8
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5c9b
lea eax, [ebp - 0x20c]
mov ecx, ebx
push eax
call fcn.004421ad
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0xd9
push eax
lea eax, [ebp - 0x24]
push eax
push ecx
lea eax, [ebp - 0x20c]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
push 2
push ebx
call fcn.00434867
add esp, 0x14
cmp eax, 2
jne 0x43c2c2
push ecx
lea eax, [ebp - 0x24]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
mov ecx, dword [edi + 0x10]
lea eax, [ebp - 0x228]
push eax
call fcn.0040ecc2
lea eax, [ebp - 0x484]
mov byte [ebp - 4], 0xda
push eax
push 0x4e5f34
push dword [ebp - 0x228]
call fcn.0048df43
add esp, 0xc
test eax, eax
je 0x43c27f
fld dword [ebp - 0x484]
push ecx
push ecx
lea eax, [ebp - 0x30]
fstp qword [esp]
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00419b0a
jmp 0x43c2b3
push ecx
lea eax, [ebp - 0x228]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
push ecx
lea eax, [ebp - 0x30]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
mov byte [ebp - 4], 0xdb
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
mov byte [ebp - 4], 0xda
call fcn.00414862
lea ecx, [ebp - 0x228]
mov byte [ebp - 4], 0xd9
call fcn.004a5f26
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x20c]
jmp 0x43eae3
test edi, edi
je 0x43eae8
mov eax, dword [ebp - 0x2c]
push 0x4eea58
push dword [eax + 0x10]
lea esi, [eax + 0x10]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43eae8
cmp dword [edi + 0x10], 0
je 0x43eae8
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5c9b
lea eax, [ebp - 0x2a4]
mov ecx, ebx
push eax
call fcn.004421ad
push 0
lea ecx, [ebp - 0x2a4]
mov byte [ebp - 4], 0xdc
call fcn.004a6356
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5f94
lea ecx, [ebx + 0x118c]
call fcn.00413ff7
call fcn.0048aa60
mov ecx, dword [edi + 0x10]
push eax
call fcn.0040eca0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x2a4]
jmp 0x43eae3
test edi, edi
je 0x43eae8
mov eax, dword [ebp - 0x2c]
push 0x4eea58
push dword [eax + 0x10]
lea esi, [eax + 0x10]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43eae8
mov edi, dword [edi + 0x10]
test edi, edi
je 0x43eae8
mov ecx, edi
call fcn.0040ecb3
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x51c]
push 1
push eax
mov ecx, esi
call fcn.004a0118
push str._____
push dword [eax]
call fcn.0048a850
pop ecx
pop ecx
test eax, eax
lea ecx, [ebp - 0x51c]
sete byte [ebp - 0xd]
call fcn.004a5f26
cmp byte [ebp - 0xd], 0
je 0x43c416
lea eax, [ebp - 0x874]
push 0xa
push eax
push dword [ebp - 0x14]
call fcn.0048defe
pop ecx
lea eax, [ebp - 0x874]
pop ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5f94
push ecx
mov byte [ebp - 4], 0xdd
mov ecx, esp
mov dword [ebp - 0x14], esp
push esi
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
mov byte [ebp - 4], 0xa
call fcn.00414862
jmp 0x43eae8
fild dword [ebp - 0x14]
push ecx
push ecx
fstp qword [esp]
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00419b0a
jmp 0x43eae8
test edi, edi
je 0x43eae8
mov eax, dword [ebp - 0x2c]
push 0x4eea58
push dword [eax + 0x10]
lea esi, [eax + 0x10]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43eae8
cmp dword [edi + 0x10], 0
je 0x43eae8
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5c9b
lea eax, [ebp - 0x230]
mov ecx, ebx
push eax
call fcn.004421ad
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0xde
push eax
lea eax, [ebp - 0x24]
push eax
push ecx
lea eax, [ebp - 0x230]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
push 2
push ebx
call fcn.00434867
add esp, 0x14
cmp eax, 2
jne 0x43c516
push ecx
lea eax, [ebp - 0x24]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
mov ecx, dword [edi + 0x10]
lea eax, [ebp - 0x258]
push eax
call fcn.0040ed34
push ecx
lea eax, [ebp - 0x258]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0xdf
call fcn.004a5c9b
push ecx
lea eax, [ebp - 0x30]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
mov byte [ebp - 4], 0xe0
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
mov byte [ebp - 4], 0xdf
call fcn.00414862
lea ecx, [ebp - 0x258]
mov byte [ebp - 4], 0xde
call fcn.004a5f26
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x230]
jmp 0x43eae3
test edi, edi
je 0x43eae8
mov eax, dword [ebp - 0x2c]
push 0x4eea58
push dword [eax + 0x10]
lea esi, [eax + 0x10]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43eae8
cmp dword [edi + 0x14], 0
je 0x43eae8
mov eax, dword [0x4ea054]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x110], eax
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0x9c], eax
push ecx
mov byte [ebp - 4], 0xe4
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5c9b
lea eax, [ebp - 0x48c]
push eax
call fcn.004311d6
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0xe5
call fcn.004a605f
lea ecx, [ebp - 0x48c]
mov byte [ebp - 4], 0xe4
call fcn.004a5f26
lea eax, [ebp - 0x548]
push 5
push eax
lea ecx, [ebp - 0x9c]
call fcn.004a0194
push str.RESET
push dword [eax]
call fcn.0048a850
pop ecx
pop ecx
test eax, eax
lea ecx, [ebp - 0x548]
sete byte [ebp - 0xd]
call fcn.004a5f26
cmp byte [ebp - 0xd], 0
je 0x43c5f4
mov ecx, dword [edi + 0x14]
call fcn.004130c5
jmp 0x43cc40
lea eax, [ebp - 0x494]
push 9
push eax
lea ecx, [ebp - 0x9c]
call fcn.004a0194
push str.RANDOMIZE
push dword [eax]
call fcn.0048a850
pop ecx
pop ecx
test eax, eax
lea ecx, [ebp - 0x494]
sete byte [ebp - 0xd]
call fcn.004a5f26
cmp byte [ebp - 0xd], 0
jne 0x43cc40
lea eax, [ebp - 0x524]
push 6
push eax
lea ecx, [ebp - 0x9c]
call fcn.004a0194
push 0x4de6c0
push dword [eax]
call fcn.0048a850
pop ecx
pop ecx
test eax, eax
lea ecx, [ebp - 0x524]
sete byte [ebp - 0xd]
call fcn.004a5f26
cmp byte [ebp - 0xd], 0
je 0x43c86f
mov eax, dword [ebx + 0x1360]
mov dword [ebp - 0x28], eax
mov eax, dword [0x4ea054]
mov dword [ebp - 0x1cc], eax
mov dword [ebp - 0x214], eax
lea eax, [ebp - 0x260]
push 6
push eax
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0xe7
call fcn.004a005f
push ecx
lea eax, [ebp - 0x260]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0xe8
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00413ff7
call fcn.0048aa60
mov esi, eax
dec esi
cmp esi, 0xffffffff
jle 0x43c6d6
lea eax, [esi + 1]
mov dword [ebp - 0x28], eax
jmp 0x43c6d8
xor esi, esi
call fcn.004ac071
mov ecx, dword [eax + 4]
call fcn.004a5a52
cmp esi, dword [ebp - 0x28]
mov byte [ebp - 4], 0xe9
mov dword [ebp - 0x14], esi
jge 0x43c829
push dword [ebp - 0x14]
lea eax, [ebp - 0x49c]
lea ecx, [ebx + 0x1358]
push eax
call fcn.004168da
push eax
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0xea
call fcn.004a605f
lea ecx, [ebp - 0x49c]
mov byte [ebp - 4], 0xe9
call fcn.004a5f26
push 0x5c
lea ecx, [ebp - 0x98]
call fcn.004a020c
push 0x2e
lea ecx, [ebp - 0x98]
mov esi, eax
call fcn.004a020c
cmp esi, 0xffffffff
jle 0x43c788
cmp eax, 0xffffffff
jle 0x43c788
sub eax, esi
lea ecx, [ebp - 0x98]
dec eax
inc esi
push eax
lea eax, [ebp - 0x550]
push esi
push eax
call fcn.004a0082
push eax
lea ecx, [ebp - 0x1cc]
mov byte [ebp - 4], 0xeb
call fcn.004a605f
lea ecx, [ebp - 0x550]
mov byte [ebp - 4], 0xe9
call fcn.004a5f26
jmp 0x43c79a
lea eax, [ebp - 0x98]
lea ecx, [ebp - 0x1cc]
push eax
call fcn.004a605f
lea eax, [ebp - 0x214]
push str.unkn.
push eax
call fcn.004a05b4
pop ecx
lea eax, [ebp - 0x214]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
push ecx
lea eax, [ebp - 0x98]
mov ecx, esp
mov dword [ebp - 0x50], esp
push eax
mov byte [ebp - 4], 0xec
call fcn.004a5c9b
push ecx
lea eax, [ebp - 0x1cc]
mov ecx, esp
mov dword [ebp - 0x4c], esp
push eax
mov byte [ebp - 4], 0xed
call fcn.004a5c9b
mov ecx, dword [edi + 0x14]
mov byte [ebp - 4], 0xe9
call fcn.00412108
mov eax, dword [edi + 0x14]
cmp byte [eax + 0xcc], 0
je 0x43c81a
push 1
push 0
push dword [eax + 0x1c]
call dword [sym.imp.USER32.dll_InvalidateRect]
mov eax, dword [edi + 0x14]
push dword [eax + 0x1c]
call dword [sym.imp.USER32.dll_UpdateWindow]
inc dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x28]
jl 0x43c6f5
mov ecx, dword [edi + 0x14]
call fcn.00411dc7
mov byte [ebp - 4], 0xe8
call fcn.004ac071
mov ecx, dword [eax + 4]
call fcn.004a5a67
lea ecx, [ebp - 0x260]
mov byte [ebp - 4], 0xe7
call fcn.004a5f26
lea ecx, [ebp - 0x214]
mov byte [ebp - 4], 0xe6
call fcn.004a5f26
mov byte [ebp - 4], 0xe4
lea ecx, [ebp - 0x1cc]
jmp 0x43cc3b
lea eax, [ebp - 0x2dc]
push 3
push eax
lea ecx, [ebp - 0x9c]
call fcn.004a0118
push 0x4e5f1c
mov byte [ebp - 4], 0xee
push dword [eax]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43c8d8
lea eax, [ebp - 0x4a4]
push 3
push eax
lea ecx, [ebp - 0x9c]
call fcn.004a0118
push 0x4e5f18
push dword [eax]
call fcn.0048a850
pop ecx
pop ecx
test eax, eax
lea ecx, [ebp - 0x4a4]
sete byte [ebp - 0xd]
call fcn.004a5f26
cmp byte [ebp - 0xd], 0
jne 0x43c8d8
and byte [ebp - 0x15], 0
jmp 0x43c8dc
mov byte [ebp - 0x15], 1
lea ecx, [ebp - 0x2dc]
mov byte [ebp - 4], 0xe4
call fcn.004a5f26
cmp byte [ebp - 0x15], 0
je 0x43c9dc
mov eax, dword [ebp - 0x9c]
lea ecx, [ebp - 0x9c]
mov dword [ebp - 0x14], 1
mov eax, dword [eax - 8]
add eax, 0xfffffffd
push eax
lea eax, [ebp - 0x26c]
push eax
call fcn.004a0194
mov esi, 0x4eea58
lea ecx, [ebp - 0xd8]
push esi
mov byte [ebp - 4], 0xef
call fcn.004a60af
push esi
lea ecx, [ebp - 0x98]
call fcn.004a60af
mov eax, dword [ebp - 0x14]
inc dword [ebp - 0x14]
push eax
lea eax, [ebp - 0xd8]
push dword [ebp - 0x26c]
push 0x4de554
push eax
call fcn.004a05b4
add esp, 0xc
lea eax, [ebp - 0xd8]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea eax, [ebp - 0x2e4]
mov ecx, ebx
push eax
call fcn.004421ad
push eax
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0xf0
call fcn.004a605f
lea ecx, [ebp - 0x2e4]
mov byte [ebp - 4], 0xef
call fcn.004a5f26
push dword [ebp - 0x98]
push dword [ebp - 0xd8]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43c9c5
push dword [ebp - 0x98]
mov ecx, dword [edi + 0x14]
call fcn.00412089
jmp 0x43c93c
mov ecx, dword [edi + 0x14]
call fcn.00411dc7
mov byte [ebp - 4], 0xe4
lea ecx, [ebp - 0x26c]
jmp 0x43cc3b
lea eax, [ebp - 0x9c]
lea ecx, [ebp - 0x23c]
push eax
call fcn.004a5c9b
push 0x4de5a8
push 0
lea ecx, [ebp - 0x23c]
mov byte [ebp - 4], 0xf1
call fcn.004a6356
push eax
call fcn.0048d08f
mov esi, eax
pop ecx
test esi, esi
pop ecx
je 0x43cc31
push esi
lea ecx, [ebp - 0x1f8]
call fcn.004a5f94
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 0xf2
call fcn.004a0609
push 1
push 0x24
lea ecx, [ebp - 0x274]
call fcn.0049fd22
lea eax, [ebp - 0x2ec]
push 1
push eax
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 0xf3
call fcn.004a0118
push dword [ebp - 0x274]
push dword [eax]
call fcn.0048a850
pop ecx
pop ecx
test eax, eax
lea ecx, [ebp - 0x2ec]
sete byte [ebp - 0xd]
call fcn.004a5f26
lea ecx, [ebp - 0x274]
mov byte [ebp - 4], 0xf2
call fcn.004a5f26
cmp byte [ebp - 0xd], 0
je 0x43caa3
push 0x4de5a8
push 0
call fcn.0048d08f
pop ecx
test eax, eax
pop ecx
jne 0x43cb85
push ecx
lea eax, [ebp - 0x9c]
mov esi, esp
mov dword [ebp - 0x1c], esp
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
push esi
mov ecx, ebx
call fcn.004421ad
lea eax, [ebp - 0x138]
push eax
call fcn.004311d6
add esp, 4
lea eax, [ebp - 0x138]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0xf4
call fcn.004a5c9b
mov ecx, ebx
call fcn.004405e9
test eax, eax
jne 0x43cb57
push str.STRING:
lea ecx, [ebp - 0x138]
call fcn.004a022e
test eax, eax
jne 0x43cb47
push ecx
lea ecx, [ebp - 0x138]
mov eax, esp
mov dword [ebp - 0x1c], esp
push 7
push eax
call fcn.004a005f
lea eax, [ebp - 0x2f4]
mov ecx, ebx
push eax
call fcn.004421ad
push eax
lea ecx, [ebp - 0x138]
mov byte [ebp - 4], 0xf5
call fcn.004a605f
lea ecx, [ebp - 0x2f4]
mov byte [ebp - 4], 0xf4
call fcn.004a5f26
push dword [ebp - 0x138]
mov ecx, dword [edi + 0x14]
call fcn.00412089
jmp 0x43cb71
push ecx
lea eax, [ebp - 0x138]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
mov ecx, dword [edi + 0x14]
call fcn.00412290
lea ecx, [ebp - 0x138]
mov byte [ebp - 4], 0xf2
call fcn.004a5f26
jmp 0x43cc1a
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5f94
lea eax, [ebp - 0x2fc]
mov ecx, ebx
push eax
call fcn.004421ad
push eax
lea ecx, [ebp - 0x110]
mov byte [ebp - 4], 0xf6
call fcn.004a605f
lea ecx, [ebp - 0x2fc]
mov byte [ebp - 4], 0xf2
call fcn.004a5f26
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5f94
lea eax, [ebp - 0x304]
mov ecx, ebx
push eax
call fcn.004421ad
push eax
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0xf7
call fcn.004a605f
lea ecx, [ebp - 0x304]
mov byte [ebp - 4], 0xf2
call fcn.004a5f26
mov eax, dword [ebp - 0x110]
mov ecx, dword [edi + 0x14]
mov al, byte [eax]
mov byte [ebp - 0x30c], al
lea eax, [ebp - 0x98]
push dword [ebp - 0x30c]
push eax
call fcn.004121e9
mov ecx, dword [edi + 0x14]
call fcn.00411dc7
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 0xf1
call fcn.004a5f26
mov byte [ebp - 4], 0xe4
lea ecx, [ebp - 0x23c]
call fcn.004a5f26
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0xe3
call fcn.004a5f26
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0xe2
call fcn.004a5f26
lea ecx, [ebp - 0x110]
mov byte [ebp - 4], 0xe1
call fcn.004a5f26
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x98]
jmp 0x43eae3
test edi, edi
je 0x43eae8
mov eax, dword [ebp - 0x2c]
push 0x4eea58
push dword [eax + 0x10]
lea esi, [eax + 0x10]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43eae8
cmp dword [edi + 0x14], 0
je 0x43eae8
mov eax, dword [0x4ea054]
mov dword [ebp - 0x34c], eax
mov dword [ebp - 0x344], eax
mov dword [ebp - 0x130], eax
push ecx
mov byte [ebp - 4], 0xfa
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5c9b
lea eax, [ebp - 0x314]
push eax
call fcn.004311d6
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0xfb
call fcn.004a605f
lea ecx, [ebp - 0x314]
mov byte [ebp - 4], 0xfa
call fcn.004a5f26
lea eax, [ebp - 0x31c]
push 9
push eax
lea ecx, [ebp - 0x130]
call fcn.004a0194
push str.RANDOMIZE
push dword [eax]
call fcn.0048a850
pop ecx
pop ecx
test eax, eax
lea ecx, [ebp - 0x31c]
sete byte [ebp - 0xd]
call fcn.004a5f26
cmp byte [ebp - 0xd], 0
je 0x43cd45
mov ecx, dword [edi + 0x14]
call fcn.004130de
jmp 0x43ce42
lea eax, [ebp - 0x324]
push 4
push eax
lea ecx, [ebp - 0x130]
call fcn.004a0194
push str.NAME
push dword [eax]
call fcn.0048a850
pop ecx
pop ecx
test eax, eax
lea ecx, [ebp - 0x324]
sete byte [ebp - 0xd]
call fcn.004a5f26
cmp byte [ebp - 0xd], 0
je 0x43cd85
push 1
jmp 0x43ce3a
lea eax, [ebp - 0x32c]
push 4
push eax
lea ecx, [ebp - 0x130]
call fcn.004a0194
push str.TIME
push dword [eax]
call fcn.0048a850
pop ecx
pop ecx
test eax, eax
lea ecx, [ebp - 0x32c]
sete byte [ebp - 0xd]
call fcn.004a5f26
cmp byte [ebp - 0xd], 0
je 0x43cdc2
push 2
jmp 0x43ce3a
lea eax, [ebp - 0x334]
push 5
push eax
lea ecx, [ebp - 0x130]
call fcn.004a0194
push str.VALUE
push dword [eax]
call fcn.0048a850
pop ecx
pop ecx
test eax, eax
lea ecx, [ebp - 0x334]
sete byte [ebp - 0xd]
call fcn.004a5f26
cmp byte [ebp - 0xd], 0
je 0x43cdff
push 3
jmp 0x43ce3a
lea eax, [ebp - 0x33c]
push 7
push eax
lea ecx, [ebp - 0x130]
call fcn.004a0194
push str.REVERSE
push dword [eax]
call fcn.0048a850
pop ecx
pop ecx
test eax, eax
lea ecx, [ebp - 0x33c]
sete byte [ebp - 0xd]
call fcn.004a5f26
cmp byte [ebp - 0xd], 0
je 0x43ce42
push 0
mov ecx, dword [edi + 0x14]
call fcn.0041332c
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0xf9
call fcn.004a5f26
lea ecx, [ebp - 0x344]
mov byte [ebp - 4], 0xf8
call fcn.004a5f26
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x34c]
jmp 0x43eae3
test edi, edi
je 0x43eae8
mov eax, dword [ebp - 0x2c]
push 0x4eea58
push dword [eax + 0x10]
lea esi, [eax + 0x10]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43eae8
cmp dword [edi + 0x14], 0
je 0x43eae8
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00413ff7
call fcn.0048aa60
cmp eax, 0xffffffff
je 0x43cec7
test eax, eax
jle 0x43eae8
mov ecx, dword [ebp - 0x2c]
mov ecx, dword [ecx + 4]
cmp ecx, 0xcc
jne 0x43cee3
mov ecx, dword [edi + 0x14]
push eax
call fcn.00412805
jmp 0x43eae8
cmp ecx, 0xcd
jne 0x43ceef
push 0
jmp 0x43cef9
cmp ecx, 0xd0
jne 0x43cf07
push 1
mov ecx, dword [edi + 0x14]
push eax
call fcn.00412984
jmp 0x43eae8
cmp ecx, 0xe5
jne 0x43eae8
mov ecx, dword [edi + 0x14]
push eax
call fcn.00412b4d
jmp 0x43eae8
test edi, edi
je 0x43eae8
mov eax, dword [ebp - 0x2c]
push 0x4eea58
push dword [eax + 0x10]
lea esi, [eax + 0x10]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43eae8
cmp dword [edi + 0x14], 0
je 0x43eae8
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5c9b
lea eax, [ebp - 0x1bc]
mov ecx, ebx
push eax
call fcn.004421ad
lea eax, [ebp - 0x354]
push 6
push eax
lea ecx, [ebp - 0x1bc]
mov byte [ebp - 4], 0xfc
call fcn.004a0194
push 0x4de6c0
push dword [eax]
call fcn.0048a850
pop ecx
xor esi, esi
pop ecx
cmp eax, esi
lea ecx, [ebp - 0x354]
sete byte [ebp - 0xd]
call fcn.004a5f26
cmp byte [ebp - 0xd], 0
je 0x43d0ab
mov eax, dword [0x4ea054]
mov dword [ebp - 0x11c], eax
mov dword [ebp - 0x36c], eax
mov eax, dword [ebp - 0x2c]
mov byte [ebp - 4], 0xfe
cmp dword [eax + 4], 0xcf
jne 0x43cfd2
push 1
jmp 0x43cfd3
push esi
mov ecx, dword [edi + 0x14]
push 0x23
lea eax, [ebp - 0x11c]
push esi
push eax
call fcn.00412f91
cmp eax, esi
jle 0x43d086
mov dword [ebp - 0x14], eax
push 0x23
lea ecx, [ebp - 0x11c]
call fcn.004a6414
mov edi, eax
cmp edi, esi
jle 0x43d044
push ecx
lea ecx, [ebp - 0x11c]
mov eax, esp
mov dword [ebp - 0x1c], esp
push edi
push esi
push eax
call fcn.004a0082
lea eax, [ebp - 0x35c]
push eax
call fcn.004311d6
pop ecx
pop ecx
or byte [ebp - 4], 0xff
push eax
lea ecx, [ebx + 0x1358]
call fcn.0043f2dc
lea ecx, [ebp - 0x35c]
mov byte [ebp - 4], 0xfe
call fcn.004a5f26
inc edi
lea eax, [ebp - 0x364]
push edi
push eax
lea ecx, [ebp - 0x11c]
call fcn.004a005f
push eax
lea ecx, [ebp - 0x11c]
mov dword [ebp - 4], pe_nt_image_headers32
call fcn.004a605f
lea ecx, [ebp - 0x364]
mov dword [ebp - 4], 0xfe
call fcn.004a5f26
dec dword [ebp - 0x14]
jne 0x43cff0
mov ecx, ebx
call fcn.00442054
lea ecx, [ebp - 0x36c]
mov byte [ebp - 4], 0xfd
call fcn.004a5f26
mov byte [ebp - 4], 0xfc
lea ecx, [ebp - 0x11c]
jmp 0x43d24c
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x24]
push eax
push ecx
lea eax, [ebp - 0x1bc]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
push 4
push ebx
call fcn.00434867
add esp, 0x1c
cmp eax, esi
je 0x43d251
lea eax, [ebp - 0x24]
lea ecx, [ebp - 0x37c]
push eax
call fcn.004a5c9b
lea ecx, [ebp - 0x374]
push 1
push ecx
mov ecx, eax
mov dword [ebp - 4], 0x101
call fcn.004a0118
push str._____
push dword [eax]
call fcn.0048a850
pop ecx
cmp eax, esi
pop ecx
lea ecx, [ebp - 0x374]
setne byte [ebp - 0xd]
call fcn.004a5f26
mov esi, 0xfc
lea ecx, [ebp - 0x37c]
mov dword [ebp - 4], esi
call fcn.004a5f26
cmp byte [ebp - 0xd], 0
jne 0x43d251
push 0x4eea58
lea ecx, [ebp - 0x1dc]
call fcn.004a5f94
mov eax, dword [0x4ea054]
mov dword [ebp - 4], 0x102
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x2c]
mov byte [ebp - 4], 3
cmp dword [eax + 4], 0xcf
mov eax, dword [ebp - 0x34]
mov al, byte [eax]
jne 0x43d189
mov byte [ebp - 0x384], al
push 1
push dword [ebp - 0x384]
jmp 0x43d197
mov byte [ebp - 0x38c], al
push 0
push dword [ebp - 0x38c]
mov ecx, dword [edi + 0x14]
lea eax, [ebp - 0x1b4]
push eax
lea eax, [ebp - 0x1dc]
push eax
call fcn.00412f91
mov dword [ebp - 0x14], eax
push ecx
lea eax, [ebp - 0x1dc]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
push ecx
lea eax, [ebp - 0x24]
mov ecx, esp
mov dword [ebp - 0x28], esp
push eax
mov byte [ebp - 4], 4
call fcn.004a5c9b
lea edi, [ebx + 0x118c]
mov byte [ebp - 4], 3
mov ecx, edi
call fcn.00414862
push ecx
lea eax, [ebp - 0x1b4]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
push ecx
lea eax, [ebp - 0x30]
mov ecx, esp
mov dword [ebp - 0x28], esp
push eax
mov byte [ebp - 4], 5
call fcn.004a5c9b
mov ecx, edi
mov byte [ebp - 4], 3
call fcn.00414862
fild dword [ebp - 0x14]
push ecx
push ecx
lea eax, [ebp - 0x3c]
fstp qword [esp]
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
mov ecx, edi
call fcn.00419b0a
lea ecx, [ebp - 0x1b4]
mov byte [ebp - 4], 2
call fcn.004a5f26
mov dword [ebp - 4], esi
lea ecx, [ebp - 0x1dc]
call fcn.004a5f26
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x1bc]
jmp 0x43eae3
test edi, edi
je 0x43eae8
mov eax, dword [ebp - 0x2c]
push 0x4eea58
push dword [eax + 0x10]
lea esi, [eax + 0x10]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43eae8
cmp dword [edi + 0x14], 0
je 0x43eae8
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5c9b
lea eax, [ebp - 0x90]
mov ecx, ebx
push eax
call fcn.004421ad
mov eax, dword [0x4ea054]
mov dword [ebp - 4], 0x106
mov dword [ebp - 0x140], eax
push 0x4de7f8
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 7
call fcn.004a022e
mov esi, eax
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
lea eax, [esi + 1]
push eax
push ecx
lea ecx, [ebp - 0x90]
call fcn.004a005f
lea eax, [ebp - 0x394]
mov ecx, ebx
push eax
call fcn.004421ad
push eax
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 8
call fcn.004a605f
lea ecx, [ebp - 0x394]
mov byte [ebp - 4], 7
call fcn.004a5f26
lea ecx, [ebp - 0x140]
call fcn.004a0698
lea ecx, [ebp - 0x90]
call fcn.004a6481
lea ecx, [ebp - 0x90]
call fcn.004a0609
lea eax, [ebp - 0x39c]
push 9
push eax
lea ecx, [ebp - 0x90]
call fcn.004a0194
push str.dragdrop
push dword [eax]
call fcn.0048a850
pop ecx
pop ecx
test eax, eax
lea ecx, [ebp - 0x39c]
sete byte [ebp - 0xd]
call fcn.004a5f26
cmp byte [ebp - 0xd], 0
je 0x43d3c4
lea eax, [ebp - 0x3a4]
push 3
push eax
lea ecx, [ebp - 0x90]
call fcn.004a0118
push 0x4e5ee8
push dword [eax]
call fcn.0048a850
pop ecx
pop ecx
mov ecx, dword [edi + 0x14]
test eax, eax
setne al
mov byte [ecx + 0xcb], al
lea ecx, [ebp - 0x3a4]
call fcn.004a5f26
mov edi, dword [edi + 0x14]
xor eax, eax
mov ecx, edi
cmp byte [edi + 0xcb], al
setne al
push eax
call fcn.004a539a
jmp 0x43d80f
lea eax, [ebp - 0x3ac]
push 7
push eax
lea ecx, [ebp - 0x90]
call fcn.004a0194
push str.numbers
push dword [eax]
call fcn.0048a850
pop ecx
pop ecx
test eax, eax
lea ecx, [ebp - 0x3ac]
sete byte [ebp - 0xd]
call fcn.004a5f26
cmp byte [ebp - 0xd], 0
je 0x43d445
lea eax, [ebp - 0x3b4]
push 2
push eax
lea ecx, [ebp - 0x90]
call fcn.004a0118
push 0x4e6358
push dword [eax]
call fcn.0048a850
pop ecx
pop ecx
mov ecx, dword [edi + 0x14]
test eax, eax
setne al
mov byte [ecx + 0xca], al
lea ecx, [ebp - 0x3b4]
call fcn.004a5f26
mov ecx, dword [edi + 0x14]
call fcn.00411dc7
jmp 0x43d80f
lea eax, [ebp - 0x3bc]
push 5
push eax
lea ecx, [ebp - 0x90]
call fcn.004a0194
push str.times
push dword [eax]
call fcn.0048a850
pop ecx
pop ecx
test eax, eax
lea ecx, [ebp - 0x3bc]
sete byte [ebp - 0xd]
call fcn.004a5f26
cmp byte [ebp - 0xd], 0
je 0x43d4b9
lea eax, [ebp - 0x3c4]
push 2
push eax
lea ecx, [ebp - 0x90]
call fcn.004a0118
push 0x4e6358
push dword [eax]
call fcn.0048a850
pop ecx
pop ecx
mov ecx, dword [edi + 0x14]
test eax, eax
setne al
mov byte [ecx + 0xc9], al
lea ecx, [ebp - 0x3c4]
jmp 0x43d433
lea eax, [ebp - 0x3cc]
push 6
push eax
lea ecx, [ebp - 0x90]
call fcn.004a0194
push str.idtags
push dword [eax]
call fcn.0048a850
pop ecx
pop ecx
test eax, eax
lea ecx, [ebp - 0x3cc]
sete byte [ebp - 0xd]
call fcn.004a5f26
cmp byte [ebp - 0xd], 0
je 0x43d532
lea eax, [ebp - 0x3d4]
push 2
push eax
lea ecx, [ebp - 0x90]
call fcn.004a0118
push 0x4e6358
push dword [eax]
call fcn.0048a850
pop ecx
pop ecx
mov ecx, dword [edi + 0x14]
test eax, eax
sete al
mov byte [ecx + 0xcc], al
lea ecx, [ebp - 0x3d4]
call fcn.004a5f26
jmp 0x43d80f
lea eax, [ebp - 0x3dc]
push 0xc
push eax
lea ecx, [ebp - 0x90]
call fcn.004a0194
push str.mpegaccurate
push dword [eax]
call fcn.0048a850
pop ecx
pop ecx
test eax, eax
lea ecx, [ebp - 0x3dc]
sete byte [ebp - 0xd]
call fcn.004a5f26
cmp byte [ebp - 0xd], 0
je 0x43d5a3
lea eax, [ebp - 0x3e4]
push 2
push eax
lea ecx, [ebp - 0x90]
call fcn.004a0118
push 0x4e6358
push dword [eax]
call fcn.0048a850
pop ecx
pop ecx
mov ecx, dword [edi + 0x14]
test eax, eax
sete al
mov byte [ecx + 0xcd], al
lea ecx, [ebp - 0x3e4]
jmp 0x43d528
lea eax, [ebp - 0x3f4]
push 0xa
push eax
lea ecx, [ebp - 0x90]
call fcn.004a0194
mov edi, str.background
mov byte [ebp - 4], 9
push edi
push dword [eax]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43d607
lea eax, [ebp - 0x3ec]
push 4
push eax
lea ecx, [ebp - 0x90]
call fcn.004a0194
push str.text
push dword [eax]
call fcn.0048a850
pop ecx
pop ecx
test eax, eax
lea ecx, [ebp - 0x3ec]
sete byte [ebp - 0xd]
call fcn.004a5f26
cmp byte [ebp - 0xd], 0
je 0x43d617
cmp esi, 0xffffffff
setg al
test al, al
je 0x43d617
mov byte [ebp - 0x15], 1
jmp 0x43d61b
and byte [ebp - 0x15], 0
lea ecx, [ebp - 0x3f4]
mov byte [ebp - 4], 7
call fcn.004a5f26
cmp byte [ebp - 0x15], 0
je 0x43d80f
mov esi, str.CBK_SelColor
push esi
push dword [ebp - 0x140]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
jne 0x43d669
lea eax, [ebp - 0x140]
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5f94
lea ecx, [ebx + 0x118c]
call fcn.00414931
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x24]
push eax
push ecx
lea eax, [ebp - 0x140]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
push 3
push ebx
call fcn.00434867
add esp, 0x18
test eax, eax
je 0x43d80f
lea eax, [ebp - 0x3fc]
push 0xa
push eax
lea ecx, [ebp - 0x90]
call fcn.004a0194
push edi
push dword [eax]
call fcn.0048a850
pop ecx
pop ecx
test eax, eax
lea ecx, [ebp - 0x3fc]
sete byte [ebp - 0xd]
call fcn.004a5f26
cmp byte [ebp - 0xd], 0
push ecx
mov ecx, esp
je 0x43d76d
lea eax, [ebp - 0x24]
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea esi, [ebx + 0x118c]
mov ecx, esi
call fcn.00413ff7
fstp qword [ebp - 0x2b4]
push ecx
lea eax, [ebp - 0x30]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
mov ecx, esi
call fcn.00413ff7
fstp qword [ebp - 0x18c]
push ecx
lea eax, [ebp - 0x34]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
mov ecx, esi
call fcn.00413ff7
call fcn.0048aa60
fld qword [ebp - 0x18c]
xor edx, edx
mov dh, al
mov dword [ebp - 0x1c], edx
call fcn.0048aa60
mov edx, dword [ebp - 0x1c]
fld qword [ebp - 0x2b4]
mov dl, al
shl edx, 8
mov dword [ebp - 0x1c], edx
call fcn.0048aa60
mov ecx, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x38]
movzx eax, al
or ecx, eax
mov eax, dword [esi + 0x14]
mov dword [eax + 0xbc], ecx
jmp 0x43d7ff
lea eax, [ebp - 0x24]
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea esi, [ebx + 0x118c]
mov ecx, esi
call fcn.00413ff7
fstp qword [ebp - 0x2b4]
push ecx
lea eax, [ebp - 0x30]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
mov ecx, esi
call fcn.00413ff7
fstp qword [ebp - 0x18c]
push ecx
lea eax, [ebp - 0x34]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
mov ecx, esi
call fcn.00413ff7
call fcn.0048aa60
fld qword [ebp - 0x18c]
xor edx, edx
mov dh, al
mov dword [ebp - 0x1c], edx
call fcn.0048aa60
mov edx, dword [ebp - 0x1c]
fld qword [ebp - 0x2b4]
mov dl, al
shl edx, 8
mov dword [ebp - 0x1c], edx
call fcn.0048aa60
mov ecx, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x38]
movzx eax, al
or ecx, eax
mov eax, dword [esi + 0x14]
mov dword [eax + 0xc0], ecx
mov ecx, dword [esi + 0x14]
call fcn.00411c5f
mov ecx, dword [esi + 0x14]
call fcn.00411ca6
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 6
call fcn.004a5f26
mov dword [ebp - 4], 0xa
lea ecx, [ebp - 0x90]
jmp 0x43eae3
push ebx
push 0
push 0
lea ecx, [ebp - 0x994]
call fcn.004a13e5
push 0x4eea58
lea ecx, [ebp - 0x194]
mov dword [ebp - 4], 0x10a
call fcn.004a5f94
lea ecx, [ebp - 0x994]
mov byte [ebp - 4], 0xb
call fcn.004a1491
cmp eax, 1
jne 0x43d8a0
mov eax, dword [ebp - 0x92c]
shr eax, 0x10
movzx eax, al
push eax
xor eax, eax
mov al, byte [ebp - 0x92b]
movzx eax, al
push eax
movzx eax, byte [ebp - 0x92c]
push eax
lea eax, [ebp - 0x194]
push str._d__d__d
push eax
call fcn.004a05b4
add esp, 0x14
push ecx
lea eax, [ebp - 0x194]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
push ecx
mov esi, str.CBK_SelColor
mov ecx, esp
mov dword [ebp - 0x14], esp
push esi
mov byte [ebp - 4], 0xc
call fcn.004a5f94
lea ecx, [ebx + 0x118c]
mov byte [ebp - 4], 0xb
call fcn.00414862
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5f94
mov ecx, ebx
call fcn.00441536
mov esi, eax
test esi, esi
je 0x43d941
lea eax, [ebp - 0x194]
lea ecx, [esi + 0xc4]
push eax
call fcn.004a605f
lea eax, [esi + 0xb4]
mov edi, dword [sym.imp.USER32.dll_UnionRect]
mov dword [ebp - 0x1c], eax
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x84]
push eax
call edi
mov ecx, esi
call fcn.0042a4a1
test al, al
je 0x43d941
push dword [ebp - 0x1c]
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x84]
push eax
call edi
lea ecx, [ebp - 0x194]
mov byte [ebp - 4], 0xa
call fcn.004a5f26
lea ecx, [ebp - 0x994]
mov dword [ebp - 4], 0xa
call fcn.004a66a3
jmp 0x43eae8
mov esi, 0x4eea58
lea ecx, [ebp - 0x100]
push esi
call fcn.004a5f94
xor edi, edi
push 0x3c
lea eax, [ebp - 0x5c8]
push edi
push eax
mov dword [ebp - 4], 0x10d
call fcn.0048a7f0
add esp, 0xc
lea eax, [ebp - 0x100]
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push str.CBK_Font
call fcn.004a5f94
lea ecx, [ebx + 0x118c]
call fcn.00414931
cmp eax, edi
je 0x43dcd0
push esi
lea ecx, [ebp - 0x1a8]
call fcn.004a5f94
push esi
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 0xe
call fcn.004a5f94
push esi
lea ecx, [ebp - 0x1a0]
mov byte [ebp - 4], 0xf
call fcn.004a5f94
push esi
lea ecx, [ebp - 0x198]
mov byte [ebp - 4], 0x10
call fcn.004a5f94
push esi
lea ecx, [ebp - 0x12c]
mov byte [ebp - 4], 0x11
call fcn.004a5f94
push 0x7c
lea eax, [ebp - 0x1a8]
pop edi
mov byte [ebp - 4], 0x12
push edi
push 0
push dword [ebp - 0x100]
push eax
call fcn.004a70a2
push edi
push 1
push dword [ebp - 0x100]
lea eax, [ebp - 0x124]
push eax
call fcn.004a70a2
push edi
push 2
push dword [ebp - 0x100]
lea eax, [ebp - 0x1a0]
push eax
call fcn.004a70a2
push edi
push 3
push dword [ebp - 0x100]
lea eax, [ebp - 0x198]
push eax
call fcn.004a70a2
push edi
push 4
push dword [ebp - 0x100]
lea eax, [ebp - 0x12c]
push eax
call fcn.004a70a2
push esi
push dword [ebp - 0x12c]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43db08
push str.NONE
push dword [ebp - 0x12c]
call fcn.0048be10
pop ecx
test eax, eax
pop ecx
jne 0x43daaf
and byte [ebp - 0x5b3], al
and byte [ebp - 0x5b2], al
jmp 0x43db08
push str.UNDERLINE
push dword [ebp - 0x12c]
call fcn.0048be10
pop ecx
test eax, eax
pop ecx
jne 0x43dace
mov byte [ebp - 0x5b3], 1
jmp 0x43db08
push str.STRIKEOUT
push dword [ebp - 0x12c]
call fcn.0048be10
pop ecx
test eax, eax
pop ecx
je 0x43db01
push str.STRIKEUNDER
push dword [ebp - 0x12c]
call fcn.0048be10
pop ecx
test eax, eax
pop ecx
jne 0x43db08
mov byte [ebp - 0x5b3], 1
mov byte [ebp - 0x5b2], 1
push esi
push dword [ebp - 0x198]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43db2c
push dword [ebp - 0x198]
call fcn.0048cae6
pop ecx
mov byte [ebp - 0x5b1], al
push esi
push dword [ebp - 0x124]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43dbc6
push str.REGULAR
push dword [ebp - 0x124]
call fcn.0048be10
pop ecx
test eax, eax
pop ecx
jne 0x43db6a
and byte [ebp - 0x5b4], al
mov dword [ebp - 0x5b8], 0x190
jmp 0x43dbc6
push str.ITALIC
push dword [ebp - 0x124]
call fcn.0048be10
pop ecx
test eax, eax
pop ecx
jne 0x43db89
mov byte [ebp - 0x5b4], 1
jmp 0x43dbc6
push str.BOLD
push dword [ebp - 0x124]
call fcn.0048be10
pop ecx
test eax, eax
pop ecx
je 0x43dbbc
push str.BOLDITALIC
push dword [ebp - 0x124]
call fcn.0048be10
pop ecx
test eax, eax
pop ecx
jne 0x43dbc6
mov byte [ebp - 0x5b4], 1
mov dword [ebp - 0x5b8], 0x2bc
push esi
push dword [ebp - 0x1a0]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43dc5d
lea ecx, [ebp - 0x5f8]
call fcn.004a9152
push 0
mov byte [ebp - 4], 0x13
call dword [sym.imp.USER32.dll_GetDC]
push eax
lea ecx, [ebp - 0x5f8]
call fcn.004a9209
mov edi, dword [ebp - 0x1a0]
push 0x48
push 0x5a
push dword [ebp - 0x5f4]
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push eax
push edi
call fcn.0048cd8e
pop ecx
call fcn.0048aa60
push eax
call dword [sym.imp.KERNEL32.DLL_MulDiv]
neg eax
cmp dword [ebp - 0x5f4], 0
mov dword [ebp - 0x5c8], eax
je 0x43dc4e
lea ecx, [ebp - 0x5f8]
call fcn.004a9240
push eax
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
lea ecx, [ebp - 0x5f8]
mov byte [ebp - 4], 0x12
call fcn.004a9287
push esi
push dword [ebp - 0x1a8]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43dc83
push dword [ebp - 0x1a8]
lea eax, [ebp - 0x5ac]
push eax
call fcn.0048c040
pop ecx
pop ecx
lea ecx, [ebp - 0x12c]
mov byte [ebp - 4], 0x11
call fcn.004a5f26
lea ecx, [ebp - 0x198]
mov byte [ebp - 4], 0x10
call fcn.004a5f26
lea ecx, [ebp - 0x1a0]
mov byte [ebp - 4], 0xf
call fcn.004a5f26
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 0xe
call fcn.004a5f26
lea ecx, [ebp - 0x1a8]
mov byte [ebp - 4], 0xd
call fcn.004a5f26
xor edi, edi
push esi
push dword [ebp - 0x100]
call fcn.0048a850
pop ecx
pop ecx
neg eax
sbb eax, eax
lea ecx, [ebp - 0x5c8]
push edi
push edi
and eax, ecx
push 0x101
push eax
lea ecx, [ebp - 0xb54]
call fcn.0041a962
lea ecx, [ebp - 0xb54]
mov byte [ebp - 4], 0x14
call fcn.004a0ee5
cmp eax, 1
jne 0x43df08
mov eax, dword [0x4ea054]
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x234], eax
mov dword [ebp - 0x21c], eax
lea eax, [ebp - 0x5c8]
lea ecx, [ebp - 0xb54]
push eax
mov byte [ebp - 4], 0x17
call fcn.004a0f2d
lea eax, [ebp - 0x5ac]
lea ecx, [ebp - 0xa0]
push eax
call fcn.004a60af
push 0x4deb24
lea ecx, [ebp - 0xa0]
call fcn.004a6302
cmp dword [ebp - 0x5b8], 0x2bc
jne 0x43dd80
cmp byte [ebp - 0x5b4], 0
jne 0x43dd90
push 0x4e5e98
jmp 0x43dd9c
cmp byte [ebp - 0x5b4], 0
je 0x43dd97
push 0x4e5e90
jmp 0x43dd9c
push 0x4e5e84
jmp 0x43dd9c
push 0x4e5e78
lea ecx, [ebp - 0xa0]
call fcn.004a6302
lea ecx, [ebp - 0x610]
call fcn.004a9152
push edi
mov byte [ebp - 4], 0x18
call dword [sym.imp.USER32.dll_GetDC]
push eax
lea ecx, [ebp - 0x610]
call fcn.004a9209
push 0x5a
push dword [ebp - 0x60c]
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push eax
push 0x48
push dword [ebp - 0x5c8]
call dword [sym.imp.KERNEL32.DLL_MulDiv]
mov esi, eax
neg esi
cmp dword [ebp - 0x60c], edi
je 0x43de05
lea ecx, [ebp - 0x610]
call fcn.004a9240
push eax
push edi
call dword [sym.imp.USER32.dll_ReleaseDC]
push esi
mov esi, 0x4e5e74
lea eax, [ebp - 0x234]
push esi
push eax
call fcn.004a05b4
add esp, 0xc
lea eax, [ebp - 0x234]
lea ecx, [ebp - 0xa0]
push eax
call fcn.004a633e
movzx eax, byte [ebp - 0x5b1]
push eax
lea eax, [ebp - 0x21c]
push esi
push eax
call fcn.004a05b4
add esp, 0xc
lea eax, [ebp - 0x21c]
lea ecx, [ebp - 0xa0]
push eax
call fcn.004a633e
cmp byte [ebp - 0x5b3], 0
je 0x43de77
cmp byte [ebp - 0x5b2], 0
je 0x43de70
push 0x4e5e64
jmp 0x43de8c
push 0x4e5e58
jmp 0x43de8c
cmp byte [ebp - 0x5b2], 0
je 0x43de87
push 0x4e5e4c
jmp 0x43de8c
push 0x4e5e44
lea ecx, [ebp - 0xa0]
call fcn.004a6302
push ecx
lea eax, [ebp - 0xa0]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
push ecx
mov byte [ebp - 4], 0x19
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.CBK_Font
call fcn.004a5f94
lea ecx, [ebx + 0x118c]
mov byte [ebp - 4], 0x18
call fcn.00414862
lea ecx, [ebp - 0x610]
mov byte [ebp - 4], 0x17
call fcn.004a9287
lea ecx, [ebp - 0x21c]
mov byte [ebp - 4], 0x16
call fcn.004a5f26
lea ecx, [ebp - 0x234]
mov byte [ebp - 4], 0x15
call fcn.004a5f26
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x14
call fcn.004a5f26
lea ecx, [ebp - 0xb54]
mov byte [ebp - 4], 0xd
call fcn.004a66a3
mov dword [ebp - 4], 0xa
lea ecx, [ebp - 0x100]
jmp 0x43eae3
mov eax, dword [ebp - 0x2c]
push 0x4eea58
push dword [eax + 0x10]
lea esi, [eax + 0x10]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43eae8
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5c9b
lea esi, [ebx + 0x118c]
mov ecx, esi
call fcn.00413ff7
mov ecx, esi
fstp st(0)
call fcn.00419b06
test eax, eax
je 0x43eae8
lea eax, [ebx + 0x11ac]
push 0x4dd4ec
push eax
lea eax, [ebp - 0x40c]
push eax
call fcn.004a61bb
lea ecx, [ebx + 0x11b0]
mov dword [ebp - 4], 0x11a
push ecx
push eax
lea eax, [ebp - 0x404]
push eax
call fcn.004a6155
mov eax, dword [eax]
push 0
push 0
push eax
mov byte [ebp - 4], 0x1b
call fcn.004aacbc
lea ecx, [ebp - 0x404]
mov byte [ebp - 4], 0x1a
call fcn.004a5f26
mov dword [ebp - 4], 0xa
lea ecx, [ebp - 0x40c]
jmp 0x43eae3
mov eax, dword [ebp - 0x2c]
push 0x4eea58
push dword [eax + 0x10]
lea esi, [eax + 0x10]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43eae8
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004a5c9b
lea esi, [ebx + 0x118c]
mov ecx, esi
call fcn.00413f95
fstp qword [ebp - 0x18c]
mov ecx, esi
call fcn.00419b06
test eax, eax
je 0x43e07f
lea eax, [ebx + 0x11ac]
push 0x4dd4ec
push eax
lea eax, [ebp - 0x41c]
push eax
call fcn.004a61bb
lea ecx, [ebx + 0x11b0]
mov dword [ebp - 4], 0x11c
push ecx
push eax
lea eax, [ebp - 0x414]
push eax
call fcn.004a6155
mov eax, dword [eax]
push 0
push 0
push eax
mov byte [ebp - 4], 0x1d
call fcn.004aacbc
lea ecx, [ebp - 0x414]
mov byte [ebp - 4], 0x1c
call fcn.004a5f26
lea ecx, [ebp - 0x41c]
mov dword [ebp - 4], 0xa
call fcn.004a5f26
cmp dword [ebp - 0x94], 0x32
jge 0x43e0bb
fld qword [ebp - 0x18c]
fcomp qword [0x4b7aa8]
fnstsw ax
sahf
je 0x43e09e
push 1
pop eax
jmp 0x43e0a0
xor eax, eax
inc dword [ebp - 0x94]
mov ecx, dword [ebp - 0x94]
mov byte [ebp + ecx - 0x6c8], al
mov byte [ebp - 0x6d], al
jmp 0x43eae8
mov eax, dword [0x4ea054]
mov dword [ebp - 0x1fc], eax
push 0x32
lea eax, [ebp - 0x1fc]
push dword [0x4f6d5c]
mov dword [ebp - 4], 0x11e
push eax
call fcn.004a05b4
add esp, 0xc
push 0
push 0
push dword [ebp - 0x1fc]
call fcn.004aacbc
mov dword [ebp - 4], 0xa
lea ecx, [ebp - 0x1fc]
jmp 0x43eae3
cmp dword [ebp - 0x94], 0
jle 0x43eae8
dec dword [ebp - 0x94]
mov eax, dword [ebp - 0x94]
mov al, byte [ebp + eax - 0x6c8]
jmp 0x43e0b3
mov eax, dword [ebp - 0x94]
and byte [ebp + eax - 0x6c8], 0
and byte [ebp - 0x6d], 0
jmp 0x43eae8
mov eax, dword [ebp - 0x2c]
push 0x4eea58
push dword [eax + 0x10]
lea edi, [eax + 0x10]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43eae8
mov eax, dword [ebp - 0x2c]
push 0x4eea58
add eax, 0x14
mov dword [ebp - 0x28], eax
push dword [eax]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43eae8
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push edi
call fcn.004a5c9b
lea esi, [ebx + 0x118c]
mov ecx, esi
call fcn.00413ff7
call fcn.0048aa60
mov dword [ebp - 0x1c], eax
mov eax, dword [0x4ea054]
mov dword [ebp - 0x8c], eax
push 0x4eea58
lea ecx, [ebp - 0x8c]
mov dword [ebp - 4], 0x11f
call fcn.004a60af
push 0x4de7f8
mov ecx, edi
call fcn.004a022e
test eax, eax
jle 0x43e211
push eax
lea eax, [ebp - 0x424]
push eax
mov ecx, edi
call fcn.004a0194
push eax
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x20
call fcn.004a605f
lea ecx, [ebp - 0x424]
mov byte [ebp - 4], 0x1f
call fcn.004a5f26
lea ecx, [ebp - 0x8c]
call fcn.004a0698
lea ecx, [ebp - 0x8c]
call fcn.004a0609
mov edi, dword [ebp - 0x28]
and byte [ebp - 0x15], 0
and dword [ebp - 0x50], 0
push str.infinity
push dword [edi]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43e26f
push str.INFINITY
push dword [edi]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43e26f
push str.Infinity
push dword [edi]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43e26f
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push edi
call fcn.004a5c9b
mov ecx, esi
call fcn.00413ff7
call fcn.0048aa60
mov dword [ebp - 0x50], eax
jmp 0x43e273
mov byte [ebp - 0x15], 1
lea ecx, [ebp - 0x1f0]
call fcn.0042ef7b
and dword [ebp - 0x14], 0
cmp dword [ebp - 0x114], 0
mov byte [ebp - 4], 0x21
je 0x43e380
cmp dword [ebp - 0x14], 0
jne 0x43e3f6
cmp byte [ebx + 0xa0], 0
jne 0x43ef15
cmp dword [ebx + 0x1350], 0
je 0x43e2c9
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
lea eax, [ebp - 0x114]
push eax
call fcn.0043f2f0
mov edi, dword [eax]
jmp 0x43e2cb
xor edi, edi
test edi, edi
je 0x43e36d
cmp dword [edi + 4], 0x67
jne 0x43e335
lea eax, [edi + 0x10]
lea ecx, [ebp - 0x1b0]
push eax
call fcn.004a5c9b
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 4], 0x22
call fcn.004a0698
lea ecx, [ebp - 0x1b0]
call fcn.004a0609
push dword [ebp - 0x8c]
push dword [ebp - 0x1b0]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
jne 0x43e320
mov dword [ebp - 0x14], 1
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 4], 0x21
call fcn.004a5f26
cmp dword [ebp - 0x14], 0
jne 0x43e36d
push 0x38
call fcn.004a64f5
pop ecx
mov dword [ebp - 0x4c], eax
test eax, eax
mov byte [ebp - 4], 0x23
je 0x43e353
mov ecx, eax
call fcn.0042e2c6
mov esi, eax
jmp 0x43e355
xor esi, esi
push edi
mov ecx, esi
mov byte [ebp - 4], 0x21
call fcn.0042ef24
push esi
lea ecx, [ebp - 0x1f0]
call fcn.0042f583
cmp dword [ebp - 0x114], 0
jne 0x43e293
cmp dword [ebp - 0x14], 0
jne 0x43e3f6
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x434]
push str.Script_Error:_Cannot_find_next_for_identifier_
push eax
call fcn.004a622f
push str._nDo_you_want_to_continue_
push eax
lea eax, [ebp - 0x42c]
mov byte [ebp - 4], 0x24
push eax
call fcn.004a61bb
mov eax, dword [eax]
push 0
push 4
push eax
mov byte [ebp - 4], 0x25
call fcn.004aacbc
lea ecx, [ebp - 0x42c]
mov esi, eax
mov byte [ebp - 4], 0x24
call fcn.004a5f26
lea ecx, [ebp - 0x434]
mov byte [ebp - 4], 0x21
call fcn.004a5f26
cmp esi, 7
jne 0x43e5d2
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0xc4]
jmp 0x43e5d2
cmp byte [ebp - 0x15], 0
je 0x43e475
mov al, byte [ebx + 0xa0]
test al, al
jne 0x43e5d2
test al, al
jne 0x43ef15
push 0x4eea58
lea ecx, [ebp - 0x1e4]
call fcn.004a60af
lea eax, [ebp - 0x1f0]
mov ecx, ebx
push eax
call fcn.004348ef
test eax, eax
je 0x43ef15
push 1
push 0
push dword [ebx + 0x1c]
call dword [sym.imp.USER32.dll_InvalidateRect]
mov ecx, ebx
call fcn.00430726
test al, al
je 0x43ef15
mov al, byte [ebx + 0xa0]
test al, al
jne 0x43ef15
cmp byte [ebx + 0x134a], al
je 0x43e40a
and byte [ebx + 0x134a], al
jmp 0x43e5d2
mov eax, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x50]
cmp eax, esi
jle 0x43e52d
mov dword [ebp - 0x14], eax
fild dword [ebp - 0x14]
push ecx
push ecx
lea eax, [ebp - 0x8c]
fstp qword [esp]
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea edi, [ebx + 0x118c]
mov ecx, edi
call fcn.00419b0a
cmp byte [ebx + 0xa0], 0
jne 0x43ef15
push 0x4eea58
lea ecx, [ebp - 0x1e4]
call fcn.004a60af
lea eax, [ebp - 0x1f0]
mov ecx, ebx
push eax
call fcn.004348ef
test eax, eax
je 0x43ef15
cmp byte [ebx + 0x134a], 0
je 0x43e4f3
and byte [ebx + 0x134a], 0
mov dword [ebp - 0x14], esi
cmp byte [ebx + 0xa0], 0
jne 0x43ef15
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push dword [ebp - 0x28]
call fcn.004a5c9b
mov ecx, edi
call fcn.00413ff7
call fcn.0048aa60
dec dword [ebp - 0x14]
mov esi, eax
cmp dword [ebp - 0x14], esi
jge 0x43e486
jmp 0x43e5d2
mov dword [ebp - 0x14], eax
fild dword [ebp - 0x14]
push ecx
push ecx
lea eax, [ebp - 0x8c]
fstp qword [esp]
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea edi, [ebx + 0x118c]
mov ecx, edi
call fcn.00419b0a
cmp byte [ebx + 0xa0], 0
jne 0x43ef15
push 0x4eea58
lea ecx, [ebp - 0x1e4]
call fcn.004a60af
lea eax, [ebp - 0x1f0]
mov ecx, ebx
push eax
call fcn.004348ef
test eax, eax
je 0x43ef15
cmp byte [ebx + 0x134a], 0
je 0x43e59d
and byte [ebx + 0x134a], 0
mov dword [ebp - 0x14], esi
cmp byte [ebx + 0xa0], 0
jne 0x43ef15
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push dword [ebp - 0x28]
call fcn.004a5c9b
mov ecx, edi
call fcn.00413ff7
call fcn.0048aa60
inc dword [ebp - 0x14]
mov esi, eax
cmp dword [ebp - 0x14], esi
jle 0x43e530
lea ecx, [ebp - 0x1f0]
mov byte [ebp - 4], 0x1f
call fcn.0042f00f
mov dword [ebp - 4], 0xa
lea ecx, [ebp - 0x8c]
jmp 0x43eae3
mov eax, dword [ebp - 0x2c]
push 0x4eea58
push dword [eax + 0x10]
lea esi, [eax + 0x10]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
je 0x43eae8
push esi
lea eax, [ebp - 0x43c]
push str.Script_Error:_Unused_next_nnext
push eax
call fcn.004a622f
mov eax, dword [eax]
push 0
push 0
push eax
mov dword [ebp - 4], 0x126
call fcn.004aacbc
mov dword [ebp - 4], 0xa
lea ecx, [ebp - 0x43c]
jmp 0x43eae3
test edi, edi
je 0x43eae8
mov esi, dword [ebp - 0x2c]
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
lea eax, [esi + 0x10]
push eax
call fcn.004a5c9b
lea eax, [ebp - 0x15c]
mov ecx, ebx
push eax
call fcn.004421ad
lea ecx, [ebp - 0x15c]
mov dword [ebp - 4], 0x127
call fcn.004a0698
push str.CBK_SelColor
push dword [ebp - 0x15c]
call fcn.0048a850
pop ecx
test eax, eax
pop ecx
jne 0x43e6b9
lea eax, [ebp - 0x15c]
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push str.CBK_SelColor
call fcn.004a5f94
lea ecx, [ebx + 0x118c]
call fcn.00414931
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x24]
push eax
push ecx
lea eax, [ebp - 0x15c]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
push 3
push ebx
call fcn.00434867
mov ecx, dword [esi + 4]
add esp, 0x18
add ecx, 0xffffff26
cmp ecx, 0x10
ja case.0x43e6fb.223
movzx ecx, byte [ecx + 0x43f2b5]
jmp dword [ecx*4 + 0x43f28d]
cmp eax, 1
jne case.0x43e6fb.223
push ecx
lea eax, [ebp - 0x24]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00413ff7
fcomp qword [0x4b7aa8]
fnstsw ax
sahf
je 0x43e735
push 1
pop eax
jmp 0x43e737
xor eax, eax
mov byte [edi + 0x274], al
lea eax, [ebp - 0x904]
jmp 0x43ea05
cmp eax, 3
jne case.0x43e6fb.223
push ecx
lea eax, [ebp - 0x24]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea esi, [ebx + 0x118c]
mov ecx, esi
call fcn.00413ff7
call fcn.0048aa60
mov byte [ebp - 0x15], al
push ecx
lea eax, [ebp - 0x30]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
mov ecx, esi
call fcn.00413ff7
call fcn.0048aa60
mov byte [ebp - 0xd], al
push ecx
lea eax, [ebp - 0x34]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
mov ecx, esi
call fcn.00413ff7
call fcn.0048aa60
xor ecx, ecx
mov ch, al
mov cl, byte [ebp - 0xd]
movzx eax, byte [ebp - 0x15]
shl ecx, 8
or ecx, eax
lea eax, [ebp - 0x814]
mov dword [edi + 0x24c], ecx
jmp 0x43ea05
cmp eax, 2
jne case.0x43e6fb.223
push ecx
lea eax, [ebp - 0x24]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea esi, [ebx + 0x118c]
mov ecx, esi
call fcn.00413ff7
call fcn.0048aa60
mov dword [ebp - 0x1c], eax
push ecx
lea eax, [ebp - 0x30]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.004a5c9b
mov ecx, esi
call fcn.00413ff7
call fcn.0048aa60
push eax
mov ecx, edi
push dword [ebp - 0x1c]
call fcn.00429d3c
jmp case.0x43e6fb.223
cmp eax, 2
jne case.0x43e6fb.223
push ecx
lea eax, [ebp - 0x24]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea esi, [ebx + 0x118c]
mov ecx, esi
call fcn.00413ff7
call fcn.0048aa60
mov dword [ebp - 0x14], eax
push ecx
lea eax, [ebp - 0x30]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
mov ecx, esi
call fcn.00413ff7
call fcn.0048aa60
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x8c4]
push eax
mov ecx, edi
call fcn.004257c7
mov esi, dword [sym.imp.USER32.dll_UnionRect]
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x84]
push eax
call esi
push dword [ebp - 0x1c]
mov ecx, edi
push dword [ebp - 0x14]
call fcn.00428ffc
lea eax, [ebp - 0x834]
jmp 0x43eabd
cmp eax, 1
jne case.0x43e6fb.223
cmp byte [edi + 0x251], 0
je case.0x43e6fb.223
push ecx
lea eax, [ebp - 0x24]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00413ff7
fstp qword [ebp - 0x18c]
lea eax, [ebp - 0x8f4]
mov ecx, edi
push eax
call fcn.004257c7
mov esi, dword [sym.imp.USER32.dll_UnionRect]
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x84]
push eax
call esi
fld qword [ebp - 0x18c]
push ecx
push ecx
mov ecx, edi
fstp qword [esp]
call fcn.004292ec
lea eax, [ebp - 0x754]
jmp 0x43eabd
cmp eax, 1
jne case.0x43e6fb.223
cmp byte [edi + 0x251], 0
je case.0x43e6fb.223
push ecx
lea eax, [ebp - 0x24]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00413ff7
fstp qword [ebp - 0x18c]
lea eax, [ebp - 0x764]
mov ecx, edi
push eax
call fcn.004257c7
mov esi, dword [sym.imp.USER32.dll_UnionRect]
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x84]
push eax
call esi
fld qword [ebp - 0x18c]
push ecx
push ecx
mov ecx, edi
fstp qword [esp]
call fcn.00429366
lea eax, [ebp - 0x784]
jmp 0x43eabd
cmp eax, 2
jne case.0x43e6fb.223
cmp byte [edi + 0x251], 0
jne case.0x43e6fb.223
push ecx
lea eax, [ebp - 0x24]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea esi, [ebx + 0x118c]
mov ecx, esi
call fcn.00413ff7
call fcn.0048aa60
mov dword [ebp - 0x1c], eax
push ecx
lea eax, [ebp - 0x30]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.004a5c9b
mov ecx, esi
call fcn.00413ff7
call fcn.0048aa60
push eax
mov ecx, edi
push dword [ebp - 0x1c]
call fcn.00429b98
lea eax, [ebp - 0x7a4]
push eax
mov ecx, edi
call fcn.004257c7
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x84]
push eax
call dword [sym.imp.USER32.dll_UnionRect]
jmp case.0x43e6fb.223
cmp eax, 1
jne case.0x43e6fb.223
push ecx
lea eax, [ebp - 0x24]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004a5c9b
lea ecx, [ebx + 0x118c]
call fcn.00413ff7
call fcn.0048aa60
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x7c4]
push eax
mov ecx, edi
call fcn.004257c7
mov esi, dword [sym.imp.USER32.dll_UnionRect]
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x84]
push eax
call esi
push 0
mov ecx, edi
push dword [ebp - 0x1c]
call fcn.0042a81c
lea eax, [ebp - 0x7e4]
jmp 0x43eabd
lea eax, [ebp - 0x804]
mov ecx, edi
push eax
call fcn.004257c7
mov esi, dword [sym.imp.USER32.dll_UnionRect]
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x84]
push eax
call esi
mov ecx, edi
call fcn.00429267
lea eax, [ebp - 0x824]
push eax
mov ecx, edi
call fcn.004257c7
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x84]
push eax
call esi
mov dword [ebp - 4], 0xa
lea ecx, [ebp - 0x15c]
call fcn.004a5f26
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 9
call fcn.004a5f26
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 8
call fcn.004a5f26
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 7
call fcn.004a5f26
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 6
call fcn.004a5f26
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 5
call fcn.004a5f26
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 4
call fcn.004a5f26
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 3
call fcn.004a5f26
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 2
call fcn.004a5f26
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 1
call fcn.004a5f26
and byte [ebp - 4], 0
lea ecx, [ebp - 0x64]
call fcn.004a5f26
mov edi, dword [ebp - 0x2c]
xor esi, esi
jmp 0x43ec26
mov eax, dword [edi + 4]
sub eax, 0x64
je 0x43ebc3
dec eax
je 0x43eba3
sub eax, 3
jne 0x43ec26
mov eax, dword [ebp - 0x94]
cmp byte [ebp + eax - 0x6c9], 0
je 0x43ec26
mov byte [ebp + eax - 0x6c8], 1
mov byte [ebp - 0x6d], 1
jmp 0x43ec26
cmp dword [ebp - 0x94], esi
jle 0x43ec26
dec dword [ebp - 0x94]
mov eax, dword [ebp - 0x94]
mov al, byte [ebp + eax - 0x6c8]
mov byte [ebp - 0x6d], al
jmp 0x43ec26
cmp dword [ebp - 0x94], 0x32
jge 0x43ebe2
inc dword [ebp - 0x94]
mov eax, dword [ebp - 0x94]
and byte [ebp + eax - 0x6c8], 0
jmp 0x43ec26
mov eax, dword [0x4ea054]
mov dword [ebp - 0x200], eax
push 0x32
lea eax, [ebp - 0x200]
push dword [0x4f6d5c]
mov dword [ebp - 4], 0x128
push eax
call fcn.004a05b4
add esp, 0xc
push esi
push esi
push dword [ebp - 0x200]
call fcn.004aacbc
lea ecx, [ebp - 0x200]
mov dword [ebp - 4], esi
call fcn.004a5f26
cmp dword [ebp - 0x114], esi
je 0x43ef3d
cmp edi, esi
je 0x434a27
cmp dword [ebx + 0x1350], esi
je 0x434a27
mov eax, dword [ebp - 0x444]
cmp dword [eax + 8], edi
jne 0x43ef3d
jmp 0x434a27
and byte [ebx + 0x1349], 0
jmp 0x43ef77
mov eax, dword [ebx + 0x1200]
lea ecx, [eax + 0x40]
push ecx
lea ecx, [eax + 0x60]
call fcn.004a605f
mov eax, dword [ebx + 0x1200]
mov ecx, ebx
add eax, 0x54
push eax
call fcn.004348ef
mov ecx, ebx
call fcn.0044257d
lea eax, [ebp - 0x1b8]
lea ecx, [ebx + 0x134c]
push eax
call fcn.004a605f
lea eax, [ebp - 0x118]
lea ecx, [ebx + 0x1354]
push eax
call fcn.004a605f
and byte [ebx + 0x1349], 0
push 0
push 0x64
push 0x3e7
push dword [ebx + 0x1c]
call dword [sym.imp.USER32.dll_SetTimer]
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 0x10
call fcn.004a5f26
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x1b8]
call fcn.004a5f26
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 9
call fcn.004a5f26
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 8
call fcn.004a5f26
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 7
call fcn.004a5f26
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 6
call fcn.004a5f26
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 5
call fcn.004a5f26
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 4
call fcn.004a5f26
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 3
call fcn.004a5f26
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 2
call fcn.004a5f26
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 1
call fcn.004a5f26
and byte [ebp - 4], 0
lea ecx, [ebp - 0x64]
call fcn.004a5f26
xor esi, esi
jmp 0x43ef77
lea eax, [ebp - 0x84]
push 1
push eax
push dword [ebx + 0x1c]
call dword [sym.imp.USER32.dll_InvalidateRect]
and byte [ebx + 0x1349], 0
jmp 0x43eceb
call fcn.004ac071
mov eax, dword [eax + 4]
push 0xffffffffffffffff
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x90]
and byte [ebx + 0x1349], 0
lea ecx, [ebp - 0x208]
mov byte [ebp - 4], 0x91
call fcn.004a5f26
lea ecx, [ebp - 0xf8]
mov byte [ebp - 4], 0xa
call fcn.004a5f26
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 9
call fcn.004a5f26
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 8
call fcn.004a5f26
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 7
call fcn.004a5f26
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 6
call fcn.004a5f26
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 5
call fcn.004a5f26
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 4
call fcn.004a5f26
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 3
call fcn.004a5f26
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 2
call fcn.004a5f26
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 1
call fcn.004a5f26
and byte [ebp - 4], 0
lea ecx, [ebp - 0x64]
call fcn.004a5f26
jmp 0x43ef74
and byte [ebx + 0x1349], 0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x120]
jmp 0x43ece6
and byte [ebx + 0x1349], 0
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 9
call fcn.004a5f26
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 8
call fcn.004a5f26
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 7
call fcn.004a5f26
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 6
call fcn.004a5f26
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 5
call fcn.004a5f26
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 4
call fcn.004a5f26
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 3
call fcn.004a5f26
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 2
call fcn.004a5f26
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 1
call fcn.004a5f26
and byte [ebp - 4], 0
lea ecx, [ebp - 0x64]
call fcn.004a5f26
jmp 0x43ef77
and byte [ebx + 0x1349], 0
jmp 0x43eef7
and byte [ebx + 0x1349], 0
lea ecx, [ebp - 0x144]
mov byte [ebp - 4], 0xd2
call fcn.004a5f26
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0xd1
call fcn.004a5f26
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xe0]
jmp 0x43ece6
and byte [ebx + 0x1349], 0
lea ecx, [ebp - 0x1f0]
mov byte [ebp - 4], 0x1f
call fcn.0042f00f
mov dword [ebp - 4], 0xa
lea ecx, [ebp - 0x8c]
jmp 0x43ece6
mov eax, dword [ebp - 0x7c]
sub eax, dword [ebp - 0x84]
test eax, eax
jle 0x43ef6d
push 1
lea eax, [ebp - 0x84]
push 1
push eax
call dword [sym.imp.USER32.dll_InflateRect]
lea eax, [ebp - 0x84]
push 1
push eax
push dword [ebx + 0x1c]
call dword [sym.imp.USER32.dll_InvalidateRect]
and byte [ebx + 0x1349], 0
push 1
pop esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.004a5f26
mov eax, esi
jmp 0x43ef8c
xor eax, eax
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret 4