Function at 0x43bc68
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
mov edx, 0x3a
sub esp, 4
mov dword [esp], 0
dec edx
jne 0x43bc70
call fcn.005b13d0
call fcn.005954fa
push edx
push eax
pop dword [esp + 4]
pop dword [esp + 4]
cmp dword [0x7c1b28], 0
je 0x43bcb0
push dword [0x7c3458]
call fcn.005a9e97
and eax, eax
je 0x43bcb0
mov eax, 1
jmp 0x43bcb2
xor eax, eax
and eax, eax
je 0x4408b2
push dword [0x7c1b28]
push dword [0x7c3458]
call fcn.005a9e1f
mov ebx, dword [0x7c2420]
cmp ebx, 1
jne 0x43bce2
mov dword [0x7c2234], 8
jmp 0x43bcec
mov dword [0x7c2234], 0
mov ebp, dword [0x7c345c]
mov ebx, dword [ebp + 0x21]
mov eax, str.PB_Window_SystemMenu
push eax
call fcn.004efb97
and ebx, eax
and ebx, ebx
jne 0x43bd22
mov ebp, dword [0x7c345c]
mov ebx, dword [ebp + 0x21]
mov eax, str.PB_Window_TitleBar
push eax
call fcn.004efb97
and ebx, eax
and ebx, ebx
jne 0x43bd22
jmp 0x43bd29
mov eax, 1
jmp 0x43bd2b
xor eax, eax
and eax, eax
je 0x43bd3b
mov eax, dword [0x7c1a7c]
mov dword [0x7c218c], eax
jmp 0x43bd5c
mov ebx, dword [0x7c2420]
cmp ebx, 1
jne 0x43bd52
mov dword [0x7c218c], 8
jmp 0x43bd5c
mov dword [0x7c218c], 0
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x6f]
call fcn.005a9e97
and eax, eax
jne 0x43bd82
mov ebp, dword [0x7c345c]
cmp byte [ebp + 0x87], 0
jne 0x43bd82
jmp 0x43bd89
mov eax, 1
jmp 0x43bd8b
xor eax, eax
and eax, eax
je 0x43bd9b
mov eax, dword [0x7c1a74]
mov dword [0x7c1a80], eax
jmp 0x43bda5
mov dword [0x7c1a80], 0
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x45]
call fcn.005a9e97
and eax, eax
jne 0x43bdc8
mov ebp, dword [0x7c345c]
cmp byte [ebp + 0x65], 0
jne 0x43bdc8
jmp 0x43bdcf
mov eax, 1
jmp 0x43bdd1
xor eax, eax
and eax, eax
je 0x43bde1
mov eax, dword [0x7c2320]
mov dword [0x7c1a68], eax
jmp 0x43bdeb
mov dword [0x7c1a68], 0
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x5e]
call fcn.005a9e97
and eax, eax
jne 0x43be0e
mov ebp, dword [0x7c345c]
cmp byte [ebp + 0x76], 0
jne 0x43be0e
jmp 0x43be15
mov eax, 1
jmp 0x43be17
xor eax, eax
and eax, eax
je 0x43be42
mov dword [0x7c2428], 0x10
mov ebx, dword [0x7c2420]
cmp ebx, 4
jne 0x43be39
add dword [0x7c2428], 8
jmp 0x43be40
add dword [0x7c2428], 6
jmp 0x43be4c
mov dword [0x7c2428], 0
push 0xad
call fcn.005a8d98
push eax
call fcn.0059f665
push 1
call fcn.0059f6ca
push 0x96
push 0x96
push 0x96
call fcn.0059f89e
push eax
call fcn.0059f8fe
push eax
call fcn.0059f728
push eax
push 0
push 0
call fcn.0059f8b3
push dword [0x7c2420]
mov ebx, 4
cmp ebx, dword [esp]
jne 0x43bfd8
push 1
call fcn.0059f6ca
push 0xed
push 0xed
push 0xed
call fcn.0059f89e
mov dword [esp + 0xc], eax
mov ebp, dword [0x7c345c]
mov ebx, dword [ebp + 0x26]
cmp ebx, 0xffffffff
jle 0x43bee7
mov ebp, dword [0x7c345c]
mov eax, dword [ebp + 0x26]
mov dword [esp + 0xc], eax
push dword [esp + 0xc]
push 4
push 4
mov ebp, dword [0x7c345c]
mov ebx, dword [ebp + 0x14]
add ebx, dword [0x7c218c]
add ebx, dword [0x7c2428]
add ebx, 2
push ebx
mov ebx, dword [ebp + 0x10]
add ebx, 2
push ebx
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, dword [0x7c1a68]
add ebx, 9
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 9
push ebx
call fcn.0059fb2b
push 4
call fcn.0059f6ca
push 0xb8
push 0xb8
push 0xb8
call fcn.0059f89e
push eax
push 4
push 4
mov ebx, dword [ebp + 0x14]
add ebx, dword [0x7c218c]
add ebx, dword [0x7c2428]
add ebx, 2
push ebx
mov ebx, dword [ebp + 0x10]
add ebx, 2
push ebx
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, dword [0x7c1a68]
add ebx, 9
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 9
push ebx
call fcn.0059fb2b
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, dword [ebp + 0x14]
add ebx, dword [0x7c1a68]
add ebx, dword [0x7c2428]
add ebx, dword [0x7c218c]
add ebx, 0xc
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, dword [ebp + 0x10]
add ebx, 0xc
push ebx
call fcn.004f6aec
jmp 0x43c49d
mov ebx, 1
cmp ebx, dword [esp]
jne 0x43c34a
push 1
call fcn.0059f6ca
push 0xf0
push 0xf0
push 0xf0
call fcn.0059f89e
mov dword [esp + 0xc], eax
mov ebp, dword [0x7c345c]
mov ebx, dword [ebp + 0x26]
cmp ebx, 0xffffffff
jle 0x43c023
mov ebp, dword [0x7c345c]
mov eax, dword [ebp + 0x26]
mov dword [esp + 0xc], eax
push dword [0x7c20e8]
mov ebx, 7
cmp ebx, dword [esp]
jne 0x43c1ee
push 0x40
call fcn.0059f6ca
push 0xe8
push 0xe8
push 0xd2
call fcn.0059f89e
push eax
call fcn.0059fbcc
push 0xfa
push 0xdc
push 0xb8
call fcn.0059f89e
push eax
push 0x3f000000
call fcn.0059fbe5
push 0xe8
push 0xe8
push 0xd2
call fcn.0059f89e
push eax
call fcn.0059f6e1
mov ebp, dword [0x7c345c]
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, 9
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
mov edi, dword [ebp + 0x10]
add edi, 0x10
add ebx, edi
add ebx, 0xa
push ebx
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, 9
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 0xa
push ebx
call fcn.0059ff18
push 4
push 4
mov ebx, dword [ebp + 0x14]
add ebx, dword [0x7c218c]
add ebx, 8
push ebx
mov ebx, dword [ebp + 0x10]
add ebx, 0x10
push ebx
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, 9
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 0xa
push ebx
call fcn.005a015b
push 4
call fcn.0059f6ca
push 0x25
push 0x25
push 0x25
call fcn.0059f89e
push eax
push 4
push 4
mov ebx, dword [ebp + 0x14]
add ebx, dword [0x7c218c]
add ebx, 8
push ebx
mov ebx, dword [ebp + 0x10]
add ebx, 0x10
push ebx
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, 9
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 0xa
push ebx
call fcn.0059fb2b
push 0x7a
push 0x6c
push 0x5d
call fcn.0059f89e
push eax
mov ebx, dword [ebp + 0x14]
add ebx, 2
push ebx
mov ebx, dword [ebp + 0x10]
add ebx, 2
push ebx
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, dword [0x7c218c]
add ebx, 9
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 0x11
push ebx
call fcn.0059f8b3
push 1
call fcn.0059f6ca
push dword [esp + 0x10]
push dword [ebp + 0x14]
push dword [ebp + 0x10]
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, dword [0x7c218c]
add ebx, 0xa
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 0x12
push ebx
call fcn.0059f8b3
jmp 0x43c315
mov ebx, 8
cmp ebx, dword [esp]
jne 0x43c315
push 0xf6
push 0xad
push 0x6b
call fcn.0059f89e
push eax
mov ebp, dword [0x7c345c]
mov ebx, dword [ebp + 0x14]
add ebx, dword [0x7c218c]
add ebx, 8
push ebx
mov ebx, dword [ebp + 0x10]
add ebx, 0x10
push ebx
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, 9
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 0xa
push ebx
call fcn.0059f8b3
push 4
call fcn.0059f6ca
push 0xbc
push 0x84
push 0x52
call fcn.0059f89e
push eax
mov ebx, dword [ebp + 0x14]
add ebx, dword [0x7c218c]
add ebx, 8
push ebx
mov ebx, dword [ebp + 0x10]
add ebx, 0x10
push ebx
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, 9
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 0xa
push ebx
call fcn.0059f8b3
push 0xd1
push 0x93
push 0x5b
call fcn.0059f89e
push eax
mov ebx, dword [ebp + 0x14]
add ebx, 2
push ebx
mov ebx, dword [ebp + 0x10]
add ebx, 2
push ebx
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, dword [0x7c218c]
add ebx, 9
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 0x11
push ebx
call fcn.0059f8b3
push 1
call fcn.0059f6ca
push dword [esp + 0x10]
push dword [ebp + 0x14]
push dword [ebp + 0x10]
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, dword [0x7c218c]
add ebx, 0xa
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 0x12
push ebx
call fcn.0059f8b3
pop eax
mov ebp, dword [0x7c345c]
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, dword [ebp + 0x14]
add ebx, dword [0x7c218c]
add ebx, 0x14
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, dword [ebp + 0x10]
add ebx, 0x1c
push ebx
call fcn.004f6aec
jmp 0x43c49d
mov ebx, 2
cmp ebx, dword [esp]
jne 0x43c49d
push 1
call fcn.0059f6ca
push 0xf0
push 0xf1
push 0xf2
call fcn.0059f89e
mov dword [esp + 0xc], eax
mov ebp, dword [0x7c345c]
mov ebx, dword [ebp + 0x26]
cmp ebx, 0xffffffff
jle 0x43c395
mov ebp, dword [0x7c345c]
mov eax, dword [ebp + 0x26]
mov dword [esp + 0xc], eax
cmp dword [0x7c218c], 0
je 0x43c3e1
push dword [esp + 0xc]
push 6
push 6
mov ebp, dword [0x7c345c]
mov ebx, dword [ebp + 0x14]
add ebx, dword [0x7c218c]
inc ebx
push ebx
mov ebx, dword [ebp + 0x10]
add ebx, 2
push ebx
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, 9
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 9
push ebx
call fcn.0059fb2b
push dword [esp + 0xc]
mov ebp, dword [0x7c345c]
mov ebx, dword [ebp + 0x14]
inc ebx
push ebx
mov ebx, dword [ebp + 0x10]
add ebx, 2
push ebx
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, dword [0x7c218c]
add ebx, 9
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 9
push ebx
call fcn.0059f8b3
push 4
call fcn.0059f6ca
push 0x46
push 0x46
push 0x46
call fcn.0059f89e
push eax
mov ebx, dword [ebp + 0x14]
add ebx, 2
push ebx
mov ebx, dword [ebp + 0x10]
add ebx, 2
push ebx
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, dword [0x7c218c]
add ebx, 9
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 9
push ebx
call fcn.0059f8b3
push 1
call fcn.0059f6ca
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, dword [ebp + 0x14]
add ebx, dword [0x7c218c]
add ebx, 0xc
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, dword [ebp + 0x10]
add ebx, 0xc
push ebx
call fcn.004f6aec
pop eax
cmp dword [0x7c22b4], 0
je 0x43c612
mov dword [esp + 0xc], 0
push dword [0x7c2420]
mov ebx, 4
cmp ebx, dword [esp]
jne 0x43c4f6
mov ebp, dword [0x7c345c]
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, dword [0x7c218c]
add ebx, dword [0x7c1a68]
add ebx, dword [0x7c2428]
add ebx, 0xa
mov dword [esp + 0x14], ebx
mov eax, dword [ebp + 0x14]
mov dword [esp + 0x18], eax
jmp 0x43c584
mov ebx, 1
cmp ebx, dword [esp]
jne 0x43c53e
mov ebp, dword [0x7c345c]
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, dword [0x7c218c]
add ebx, dword [0x7c1a68]
add ebx, dword [0x7c2428]
add ebx, 0xa
mov dword [esp + 0x14], ebx
mov ebx, dword [ebp + 0x14]
mov edi, dword [0x7c1a68]
add edi, dword [0x7c2428]
sub ebx, edi
mov dword [esp + 0x18], ebx
jmp 0x43c584
mov ebx, 2
cmp ebx, dword [esp]
jne 0x43c584
mov ebp, dword [0x7c345c]
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, dword [0x7c218c]
add ebx, dword [0x7c1a68]
add ebx, dword [0x7c2428]
add ebx, 0xa
mov dword [esp + 0x14], ebx
mov ebx, dword [ebp + 0x14]
mov edi, dword [0x7c1a68]
add edi, dword [0x7c2428]
sub ebx, edi
mov dword [esp + 0x18], ebx
pop eax
mov ebx, dword [esp + 0xc]
mov ebp, dword [0x7c345c]
cmp ebx, dword [ebp + 0x10]
jge 0x43c612
mov dword [esp + 0x18], 0
mov ebx, dword [esp + 0x18]
cmp ebx, dword [esp + 0x14]
jge 0x43c5ff
push 0x1e
push 0x1e
push 0x1e
call fcn.0059f89e
push eax
push 1
push 1
mov ebx, dword [esp + 0x1c]
add ebx, dword [esp + 0x24]
push ebx
mov ebp, dword [0x7c345c]
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, dword [0x7c2234]
add ebx, dword [esp + 0x1c]
add ebx, 0xa
push ebx
call fcn.0059f8b3
mov ebx, dword [esp + 0x18]
add ebx, dword [0x7c1a2c]
mov dword [esp + 0x18], ebx
jmp 0x43c59c
mov ebx, dword [esp + 0xc]
add ebx, dword [0x7c1a2c]
mov dword [esp + 0xc], ebx
jmp 0x43c585
mov ebp, dword [0x7c345c]
mov ebx, dword [ebp + 0x21]
mov eax, str.PB_Window_SystemMenu
push eax
call fcn.004efb97
and ebx, eax
and ebx, ebx
jne 0x43c648
mov ebp, dword [0x7c345c]
mov ebx, dword [ebp + 0x21]
mov eax, str.PB_Window_TitleBar
push eax
call fcn.004efb97
and ebx, eax
and ebx, ebx
jne 0x43c648
jmp 0x43c64f
mov eax, 1
jmp 0x43c651
xor eax, eax
and eax, eax
je 0x43cfb4
push dword [0x7c2420]
mov ebx, 4
cmp ebx, dword [esp]
jne 0x43ca4a
push 4
call fcn.0059f6ca
push 0xb8
push 0xb8
push 0xb8
call fcn.0059f89e
push eax
push 1
mov ebp, dword [0x7c345c]
mov ebx, dword [ebp + 0x10]
add ebx, 2
push ebx
mov ebx, dword [0x7c1a68]
sub ebx, dword [ebp + 0x98]
add ebx, 0x1f
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 9
push ebx
call fcn.0059f824
push 0x40
call fcn.0059f6ca
push 0xe4
push 0xe4
push 0xe4
call fcn.0059f89e
push eax
call fcn.0059fbcc
mov ebx, dword [0x7c2428]
and ebx, ebx
jne 0x43c750
push 0xb7
push 0xb7
push 0xb7
call fcn.0059f89e
push eax
call fcn.0059f6e1
mov ebp, dword [0x7c345c]
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, dword [0x7c1a68]
add ebx, 0x1e
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 0xa
push ebx
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, dword [0x7c1a68]
add ebx, 9
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 0xa
push ebx
call fcn.0059ff18
jmp 0x43c7b1
push 0xaf
push 0xaf
push 0xaf
call fcn.0059f89e
push eax
call fcn.0059f6e1
mov ebp, dword [0x7c345c]
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, dword [0x7c1a68]
add ebx, 0x63
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 0xa
push ebx
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, dword [0x7c1a68]
add ebx, 9
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 0xa
push ebx
call fcn.0059ff18
push 0xb8
push 0xb8
push 0xb8
call fcn.0059f89e
push eax
mov ebp, dword [0x7c345c]
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, dword [0x7c1a68]
add ebx, 0x1e
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 0xd
push ebx
call fcn.0059f9fe
push 1
call fcn.0059f6ca
mov ebx, dword [0x7c2428]
and ebx, ebx
jne 0x43c84d
push 0x69
push 0x69
push 0x69
call fcn.0059f89e
push eax
push 1
mov ebp, dword [0x7c345c]
mov ebx, dword [ebp + 0x10]
add ebx, 2
push ebx
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, dword [0x7c1a68]
add ebx, 0x1f
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 9
push ebx
call fcn.0059f824
mov ebp, dword [0x7c345c]
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, dword [0x7c1a68]
add ebx, 0xf
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 0x13
push ebx
push 0x88
call fcn.005a8f63
push eax
call fcn.005a01fe
mov ebx, dword [ebp + 0x21]
mov eax, str.PB_Window_MinimizeGadget
push eax
call fcn.004efb97
and ebx, eax
and ebx, ebx
je 0x43c8cb
mov ebp, dword [0x7c345c]
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, dword [0x7c1a68]
add ebx, 0xf
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 0x28
push ebx
push 0x89
call fcn.005a8f63
push eax
call fcn.005a01fe
jmp 0x43c8ff
mov ebp, dword [0x7c345c]
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, dword [0x7c1a68]
add ebx, 0xf
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 0x28
push ebx
push 0x87
call fcn.005a8f63
push eax
call fcn.005a01fe
mov ebp, dword [0x7c345c]
mov ebx, dword [ebp + 0x21]
mov eax, str.PB_Window_MaximizeGadget
push eax
call fcn.004efb97
and ebx, eax
and ebx, ebx
je 0x43c94f
mov ebp, dword [0x7c345c]
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, dword [0x7c1a68]
add ebx, 0xf
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 0x3d
push ebx
push 0x8a
call fcn.005a8f63
push eax
call fcn.005a01fe
jmp 0x43c983
mov ebp, dword [0x7c345c]
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, dword [0x7c1a68]
add ebx, 0xf
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 0x3d
push ebx
push 0x87
call fcn.005a8f63
push eax
call fcn.005a01fe
push 0x74
call fcn.005b0639
push eax
call fcn.0059f6fa
push 0xff
push 0xff
push 0xff
call fcn.0059f89e
push eax
mov ebp, dword [0x7c345c]
push dword [ebp + 0x1c]
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, dword [0x7c1a68]
add ebx, 0xf
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
mov edi, dword [ebp + 0x10]
push dword [ebp + 0x1c]
call fcn.0059f711
sub edi, eax
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
add ebx, edi
add ebx, 0xa
push ebx
call fcn.0059fa75
push 0x36
push 0x36
push 0x36
call fcn.0059f89e
push eax
push dword [ebp + 0x1c]
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, dword [0x7c1a68]
add ebx, 0xe
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
mov edi, dword [ebp + 0x10]
push dword [ebp + 0x1c]
call fcn.0059f711
sub edi, eax
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
add ebx, edi
add ebx, 0xa
push ebx
call fcn.0059fa75
jmp 0x43cfb3
mov ebx, 1
cmp ebx, dword [esp]
jne 0x43cde7
push dword [0x7c20e8]
mov ebx, 7
cmp ebx, dword [esp]
jne 0x43cc3f
mov ebp, dword [0x7c345c]
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, 0x12
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 0x12
push ebx
push 0xa7
call fcn.005a8f63
push eax
call fcn.005a01fe
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, 9
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, dword [ebp + 0x10]
add ebx, 0xffffffe3
push ebx
push 0x8e
call fcn.005a8f63
push eax
call fcn.005a01fe
mov ebx, dword [ebp + 0x21]
mov eax, str.PB_Window_MinimizeGadget
push eax
call fcn.004efb97
and ebx, eax
and ebx, ebx
je 0x43cb0c
mov ebp, dword [0x7c345c]
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, 9
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, dword [ebp + 0x10]
add ebx, 0xffffffac
push ebx
push 0x8f
call fcn.005a8f63
push eax
call fcn.005a01fe
jmp 0x43cb57
mov ebp, dword [0x7c345c]
mov ebx, dword [ebp + 0x21]
mov eax, str.PB_Window_MaximizeGadget
push eax
call fcn.004efb97
and ebx, eax
and ebx, ebx
je 0x43cb57
mov ebp, dword [0x7c345c]
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, 9
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, dword [ebp + 0x10]
add ebx, 0xffffffac
push ebx
push 0x8c
call fcn.005a8f63
push eax
call fcn.005a01fe
mov ebp, dword [0x7c345c]
mov ebx, dword [ebp + 0x21]
mov eax, str.PB_Window_MaximizeGadget
push eax
call fcn.004efb97
and ebx, eax
and ebx, ebx
je 0x43cba4
mov ebp, dword [0x7c345c]
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, 9
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, dword [ebp + 0x10]
add ebx, 0xffffffc9
push ebx
push 0x90
call fcn.005a8f63
push eax
call fcn.005a01fe
jmp 0x43cbef
mov ebp, dword [0x7c345c]
mov ebx, dword [ebp + 0x21]
mov eax, str.PB_Window_MinimizeGadget
push eax
call fcn.004efb97
and ebx, eax
and ebx, ebx
je 0x43cbef
mov ebp, dword [0x7c345c]
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, 9
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, dword [ebp + 0x10]
add ebx, 0xffffffc9
push ebx
push 0x8d
call fcn.005a8f63
push eax
call fcn.005a01fe
push 0x74
call fcn.005b0639
push eax
call fcn.0059f6fa
push 0
push 0
push 0
call fcn.0059f89e
push eax
mov ebp, dword [0x7c345c]
push dword [ebp + 0x1c]
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, 0x12
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 0x27
push ebx
call fcn.0059fa75
jmp 0x43cde1
mov ebx, 8
cmp ebx, dword [esp]
jne 0x43cde1
mov ebp, dword [0x7c345c]
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, 0x12
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 0x12
push ebx
push 0xa7
call fcn.005a8f63
push eax
call fcn.005a01fe
mov ebx, dword [ebp + 0x94]
neg ebx
push 0xa7
call fcn.005a8ccd
add ebx, eax
add ebx, 0x12
mov dword [esp + 0x24], ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, dword [ebp + 0x10]
push 0x97
call fcn.005a8ccd
sub ebx, eax
add ebx, 0x12
mov dword [esp + 0x28], ebx
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, 0xa
push ebx
push dword [esp + 0x2c]
push 0x97
call fcn.005a8f63
push eax
call fcn.005a01fe
mov ebx, dword [ebp + 0x21]
mov eax, str.PB_Window_MaximizeGadget
push eax
call fcn.004efb97
and ebx, eax
and ebx, ebx
je 0x43cd22
mov ebx, dword [esp + 0x28]
push 0x99
call fcn.005a8ccd
sub ebx, eax
mov dword [esp + 0x28], ebx
mov ebp, dword [0x7c345c]
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, 0xa
push ebx
push dword [esp + 0x2c]
push 0x99
call fcn.005a8f63
push eax
call fcn.005a01fe
mov ebp, dword [0x7c345c]
mov ebx, dword [ebp + 0x21]
mov eax, str.PB_Window_MinimizeGadget
push eax
call fcn.004efb97
and ebx, eax
and ebx, ebx
je 0x43cd76
mov ebx, dword [esp + 0x28]
push 0x98
call fcn.005a8ccd
sub ebx, eax
mov dword [esp + 0x28], ebx
mov ebp, dword [0x7c345c]
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, 0xa
push ebx
push dword [esp + 0x2c]
push 0x98
call fcn.005a8f63
push eax
call fcn.005a01fe
push 0x74
call fcn.005b0639
push eax
call fcn.0059f6fa
mov ebx, dword [esp + 0x24]
mov edi, dword [esp + 0x28]
sub edi, dword [esp + 0x24]
mov ebp, dword [0x7c345c]
push dword [ebp + 0x1c]
call fcn.0059f711
sub edi, eax
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
add ebx, edi
mov dword [esp + 0x28], ebx
push 0
push 0
push 0
call fcn.0059f89e
push eax
push dword [ebp + 0x1c]
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, 0x12
push ebx
push dword [esp + 0x34]
call fcn.0059fa75
pop eax
jmp 0x43cfb3
mov ebx, 2
cmp ebx, dword [esp]
jne 0x43cfb3
push 1
call fcn.0059f6ca
push 0x46
push 0x46
push 0x46
call fcn.0059f89e
mov dword [esp + 0xc], eax
push dword [esp + 0xc]
push 6
push 6
push dword [0x7c1a7c]
mov ebp, dword [0x7c345c]
mov ebx, dword [ebp + 0x10]
add ebx, 2
push ebx
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, 9
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 9
push ebx
call fcn.0059fb2b
push dword [esp + 0xc]
mov ebx, dword [0x7c1a7c]
add ebx, 0xfffffffa
push ebx
mov ebx, dword [ebp + 0x10]
add ebx, 2
push ebx
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, 0xf
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 9
push ebx
call fcn.0059f8b3
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, 0xe
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 0x15
push ebx
push 0xa4
call fcn.005a8f63
push eax
call fcn.005a01fe
mov ebx, dword [ebp + 0x94]
neg ebx
push 0xa4
call fcn.005a8ccd
add ebx, eax
add ebx, 0x15
mov dword [esp + 0x24], ebx
mov ebx, dword [ebp + 0x21]
mov eax, str.PB_Window_MinimizeGadget
push eax
call fcn.004efb97
and ebx, eax
and ebx, ebx
je 0x43cf18
mov ebp, dword [0x7c345c]
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, 0xe
push ebx
push dword [esp + 0x28]
push 0xa5
call fcn.005a8f63
push eax
call fcn.005a01fe
mov ebx, dword [esp + 0x24]
push 0xa5
call fcn.005a8ccd
add ebx, eax
mov dword [esp + 0x24], ebx
mov ebp, dword [0x7c345c]
mov ebx, dword [ebp + 0x21]
mov eax, str.PB_Window_MaximizeGadget
push eax
call fcn.004efb97
and ebx, eax
and ebx, ebx
je 0x43cf6c
mov ebp, dword [0x7c345c]
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, 0xe
push ebx
push dword [esp + 0x28]
push 0xa6
call fcn.005a8f63
push eax
call fcn.005a01fe
mov ebx, dword [esp + 0x24]
push 0xa6
call fcn.005a8ccd
add ebx, eax
mov dword [esp + 0x24], ebx
push 0x74
call fcn.005b0639
push eax
call fcn.0059f6fa
push 0xff
push 0xff
push 0xff
call fcn.0059f89e
push eax
mov ebp, dword [0x7c345c]
push dword [ebp + 0x1c]
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, 0x10
push ebx
mov ebx, dword [esp + 0x30]
add ebx, 0xc
push ebx
call fcn.0059fa75
pop eax
cmp dword [0x7c2428], 0
je 0x43d6c6
push dword [0x7c2420]
mov ebx, 4
cmp ebx, dword [esp]
jne 0x43d111
push 0x40
call fcn.0059f6ca
push 0xe4
push 0xe4
push 0xe4
call fcn.0059f89e
push eax
call fcn.0059fbcc
push 0xaf
push 0xaf
push 0xaf
call fcn.0059f89e
push eax
call fcn.0059f6e1
mov ebp, dword [0x7c345c]
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, dword [0x7c1a68]
add ebx, 0x64
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 0xa
push ebx
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, dword [0x7c1a68]
add ebx, 0xa
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 0xa
push ebx
call fcn.0059ff18
push dword [0x7c2428]
push dword [ebp + 0x10]
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, dword [0x7c1a68]
add ebx, dword [0x7c218c]
add ebx, 0xa
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 0xa
push ebx
call fcn.005a0256
push 1
call fcn.0059f6ca
push 0x69
push 0x69
push 0x69
call fcn.0059f89e
push eax
push 1
push dword [ebp + 0x10]
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, dword [0x7c1a68]
add ebx, dword [0x7c218c]
add ebx, dword [0x7c2428]
add ebx, 0xa
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 0xa
push ebx
call fcn.0059f824
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 0x11
mov dword [esp + 0x28], ebx
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, dword [0x7c1a68]
add ebx, dword [0x7c218c]
add ebx, 0xd
mov dword [esp + 0x2c], ebx
jmp 0x43d234
mov ebx, 1
cmp ebx, dword [esp]
jne 0x43d1a5
push 1
call fcn.0059f6ca
push 0xf0
push 0xf0
push 0xf0
call fcn.0059f89e
push eax
push dword [0x7c2428]
mov ebp, dword [0x7c345c]
push dword [ebp + 0x10]
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, dword [0x7c1a68]
add ebx, dword [0x7c218c]
add ebx, 0xa
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 0x12
push ebx
call fcn.0059f8b3
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 0x17
mov dword [esp + 0x28], ebx
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, dword [0x7c1a68]
add ebx, dword [0x7c218c]
add ebx, 0xd
mov dword [esp + 0x2c], ebx
jmp 0x43d234
mov ebx, 2
cmp ebx, dword [esp]
jne 0x43d234
push 1
call fcn.0059f6ca
push 0xf0
push 0xf1
push 0xf2
call fcn.0059f89e
push eax
push dword [0x7c2428]
mov ebp, dword [0x7c345c]
push dword [ebp + 0x10]
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, dword [0x7c1a68]
add ebx, dword [0x7c218c]
add ebx, 0xa
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 0xa
push ebx
call fcn.0059f8b3
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 0x17
mov dword [esp + 0x28], ebx
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, dword [0x7c1a68]
add ebx, dword [0x7c218c]
add ebx, 0xd
mov dword [esp + 0x2c], ebx
pop eax
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x5e]
call fcn.005a9d3a
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x5e]
call fcn.005a9d4f
or eax, eax
je 0x43d686
cmp dword [0x7c217c], 0
je 0x43d3b4
mov dword [esp + 0x2c], 5
mov ebx, dword [0x7c217c]
mov edi, dword [esp + 0x24]
sub edi, dword [esp + 0x2c]
cmp ebx, edi
jle 0x43d29f
mov ebx, dword [0x7c217c]
mov edi, dword [esp + 0x24]
add edi, dword [esp + 0x2c]
cmp ebx, edi
jge 0x43d29f
mov eax, 1
jmp 0x43d2a1
xor eax, eax
and eax, eax
je 0x43d30a
push 0xff
push 0
push 0
call fcn.0059f89e
push eax
push 0x10
push 1
push dword [esp + 0x34]
mov ebx, dword [esp + 0x34]
add ebx, 0xfffffffd
push ebx
call fcn.0059f824
push 0xff
push 0
push 0
call fcn.0059f89e
push eax
push 0x10
push 1
push dword [esp + 0x34]
mov ebx, dword [esp + 0x34]
add ebx, 0xfffffffe
push ebx
call fcn.0059f824
jmp 0x43d3b4
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x5e]
call fcn.005a9ea1
mov ebx, eax
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x5e]
call fcn.005a9e97
mov edi, eax
dec edi
cmp ebx, edi
jne 0x43d34e
mov ebx, dword [0x7c217c]
mov edi, dword [esp + 0x24]
add edi, dword [esp + 0x2c]
cmp ebx, edi
jle 0x43d34e
mov eax, 1
jmp 0x43d350
xor eax, eax
and eax, eax
je 0x43d3b4
push 0xff
push 0
push 0
call fcn.0059f89e
push eax
push 0x10
push 1
push dword [esp + 0x34]
mov ebx, dword [esp + 0x34]
add ebx, 0x10
push ebx
call fcn.0059f824
push 0xff
push 0
push 0
call fcn.0059f89e
push eax
push 0x10
push 1
push dword [esp + 0x34]
mov ebx, dword [esp + 0x34]
add ebx, 0x11
push ebx
call fcn.0059f824
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x62]
mov ebx, dword [ebp + 0x18]
cmp ebx, 1
jne 0x43d511
mov ebx, dword [0x7c1e98]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x62]
lea eax, [ebp + 8]
cmp ebx, eax
jne 0x43d429
push 4
call fcn.0059f6ca
push 0
push 0
push 0
call fcn.0059f89e
push eax
push 0x12
push 8
mov ebx, dword [esp + 0x34]
dec ebx
push ebx
mov ebx, dword [esp + 0x34]
dec ebx
push ebx
call fcn.0059f8b3
push 1
call fcn.0059f6ca
push dword [0x7c2420]
mov ebx, 1
cmp ebx, dword [esp]
je 0x43d443
mov ebx, 2
cmp ebx, dword [esp]
jne 0x43d4bc
push 0x84
push 0x84
push 0x84
call fcn.0059f89e
push eax
push 0xe
push 1
mov ebx, dword [esp + 0x38]
inc ebx
push ebx
mov ebx, dword [esp + 0x38]
add ebx, 2
push ebx
call fcn.0059f824
push dword [esp + 0x28]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x62]
pop eax
mov dword [ebp + 0x21], eax
mov ebx, dword [esp + 0x28]
add ebx, 0xa
push ebx
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x62]
pop eax
mov dword [ebp + 0x25], eax
push dword [esp + 0x2c]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x62]
pop eax
mov dword [ebp + 0x29], eax
add dword [esp + 0x28], 0xa
jmp 0x43d50b
mov ebx, 4
cmp ebx, dword [esp]
jne 0x43d50b
push dword [esp + 0x28]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x62]
pop eax
mov dword [ebp + 0x21], eax
mov ebx, dword [esp + 0x28]
add ebx, 0xa
push ebx
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x62]
pop eax
mov dword [ebp + 0x25], eax
push dword [esp + 0x2c]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x62]
pop eax
mov dword [ebp + 0x29], eax
add dword [esp + 0x28], 0xa
pop eax
jmp 0x43d681
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x62]
lea eax, [ebp + 0xc]
push dword [eax + 4]
push dword [eax]
pop ebx
pop edi
cmp ebx, 0
jne 0x43d535
cmp edi, 0
jne 0x43d535
xor eax, eax
jmp 0x43d53a
mov eax, 1
or eax, eax
je 0x43d579
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x62]
mov eax, dword [ebp + 0xc]
push eax
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x35]
call fcn.005a9e1f
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x39]
push dword [ebp + 0xc]
call fcn.00536de7
mov dword [esp + 0x30], eax
jmp 0x43d581
mov dword [esp + 0x30], 0x67
push dword [esp + 0x30]
call fcn.005a8f7f
and eax, eax
je 0x43d5df
push dword [esp + 0x30]
call fcn.005a92e3
mov ebx, eax
cmp ebx, 0x20
jne 0x43d5aa
push 0x11
call fcn.0059f6ca
jmp 0x43d5b4
push 1
call fcn.0059f6ca
push 0x10
push 0x10
push dword [esp + 0x30]
push dword [esp + 0x30]
push dword [esp + 0x40]
call fcn.005a8f63
push eax
call fcn.005a02a4
push 1
call fcn.0059f6ca
mov ebx, dword [0x7c1e98]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x62]
lea eax, [ebp + 8]
cmp ebx, eax
jne 0x43d63c
push 4
call fcn.0059f6ca
push 0
push 0
push 0
call fcn.0059f89e
push eax
push 0x12
push 0x12
mov ebx, dword [esp + 0x34]
dec ebx
push ebx
mov ebx, dword [esp + 0x34]
dec ebx
push ebx
call fcn.0059f8b3
push 1
call fcn.0059f6ca
push dword [esp + 0x24]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x62]
pop eax
mov dword [ebp + 0x21], eax
mov ebx, dword [esp + 0x24]
add ebx, 0x10
push ebx
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x62]
pop eax
mov dword [ebp + 0x25], eax
push dword [esp + 0x28]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x62]
pop eax
mov dword [ebp + 0x29], eax
add dword [esp + 0x24], 0x16
jmp 0x43d246
push dword [esp + 0x24]
mov ebp, dword [0x7c345c]
pop dword [ebp + 0x6e]
mov eax, dword [esp + 0x28]
mov dword [ebp + 0x72], eax
push 0x11
call fcn.0059f6ca
push dword [esp + 0x28]
push dword [esp + 0x28]
push 0xac
call fcn.005a8f63
push eax
call fcn.0059fa48
push 1
call fcn.0059f6ca
cmp dword [0x7c1a80], 0
je 0x43e223
push dword [0x7c2420]
mov ebx, 4
cmp ebx, dword [esp]
jne 0x43d823
mov ebp, dword [0x7c345c]
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 0x11
mov dword [esp + 0x38], ebx
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, dword [0x7c1a68]
add ebx, dword [0x7c218c]
add ebx, dword [0x7c2428]
add ebx, dword [ebp + 0x14]
sub ebx, dword [0x7c1a80]
add ebx, 0xa
mov dword [esp + 0x3c], ebx
push 1
call fcn.0059f6ca
push 0xb8
push 0xb8
push 0xb8
call fcn.0059f89e
push eax
push 1
push dword [ebp + 0x10]
push dword [esp + 0x48]
mov ebx, dword [esp + 0x48]
add ebx, 0xfffffff9
push ebx
call fcn.0059f824
push 0x40
call fcn.0059f6ca
push 0xd3
push 0xd3
push 0xd3
call fcn.0059f89e
push eax
call fcn.0059fbcc
push 0xab
push 0xab
push 0x493
call fcn.0059f89e
push eax
call fcn.0059f6e1
mov ebx, dword [esp + 0x3c]
add ebx, 0x17
push ebx
push dword [esp + 0x3c]
push dword [esp + 0x44]
push dword [esp + 0x44]
call fcn.0059ff18
push 3
push 3
push dword [0x7c1a80]
push dword [ebp + 0x10]
push dword [esp + 0x4c]
push 0xa
call fcn.005a015b
push 1
call fcn.0059f6ca
push 0x76
push 0x76
push 0x76
call fcn.0059f89e
push eax
push 1
push dword [ebp + 0x10]
push dword [esp + 0x48]
mov ebx, dword [esp + 0x48]
add ebx, 0xfffffff9
push ebx
call fcn.0059f824
push 0x74
call fcn.005b0639
push eax
call fcn.0059f6fa
jmp 0x43d90f
mov ebx, 1
cmp ebx, dword [esp]
jne 0x43d89a
mov ebp, dword [0x7c345c]
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 0x19
mov dword [esp + 0x38], ebx
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, dword [0x7c218c]
add ebx, dword [ebp + 0x14]
sub ebx, dword [0x7c1a80]
add ebx, 0xa
mov dword [esp + 0x3c], ebx
push 1
call fcn.0059f6ca
push 0x91
push 0x91
push 0x91
call fcn.0059f89e
push eax
push 1
push dword [ebp + 0x10]
push dword [esp + 0x48]
mov ebx, dword [esp + 0x48]
add ebx, 0xfffffff9
push ebx
call fcn.0059f824
jmp 0x43d90f
mov ebx, 2
cmp ebx, dword [esp]
jne 0x43d90f
mov ebp, dword [0x7c345c]
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 0x19
mov dword [esp + 0x38], ebx
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, dword [0x7c218c]
add ebx, dword [ebp + 0x14]
sub ebx, dword [0x7c1a80]
add ebx, 0xa
mov dword [esp + 0x3c], ebx
push 1
call fcn.0059f6ca
push 0x91
push 0x91
push 0x91
call fcn.0059f89e
push eax
push 1
push dword [ebp + 0x10]
push dword [esp + 0x48]
mov ebx, dword [esp + 0x48]
add ebx, 0xfffffff1
push ebx
call fcn.0059f824
pop eax
mov dword [esp + 0x3c], 0
mov dword [esp + 0x40], 0
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x6f]
call fcn.005a9d3a
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x6f]
call fcn.005a9d4f
or eax, eax
je 0x43d979
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x73]
mov ebx, dword [ebp + 8]
cmp ebx, 0xffffffff
jne 0x43d960
inc dword [esp + 0x3c]
jmp 0x43d977
mov ebx, dword [esp + 0x40]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x73]
add ebx, dword [ebp + 8]
mov dword [esp + 0x40], ebx
jmp 0x43d931
mov ebp, dword [0x7c345c]
mov ebx, dword [ebp + 0x10]
sub ebx, dword [esp + 0x40]
add ebx, 0xfffffff2
mov dword [esp + 0x44], ebx
add ebp, 8
push dword [ebp + 0x6f]
call fcn.005a9d3a
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x6f]
call fcn.005a9d4f
or eax, eax
je 0x43e1dc
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x73]
mov ebx, dword [ebp + 8]
cmp ebx, 0xffffffff
jle 0x43d9da
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x73]
mov eax, dword [ebp + 8]
mov dword [esp + 0x48], eax
jmp 0x43d9ee
mov ebx, dword [esp + 0x44]
push dword [esp + 0x3c]
mov eax, ebx
pop ecx
cdq
idiv ecx
mov ebx, eax
mov dword [esp + 0x48], ebx
mov ebx, dword [0x7c22bc]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x73]
lea eax, [ebp + 8]
cmp ebx, eax
jne 0x43da47
push 4
call fcn.0059f6ca
push 0
push 0
push 0
call fcn.0059f89e
push eax
push dword [0x7c1a80]
push dword [esp + 0x50]
push dword [esp + 0x44]
push dword [esp + 0x44]
call fcn.0059f8b3
push 1
call fcn.0059f6ca
cmp dword [0x7c19a4], 0
je 0x43dbaa
mov ebx, dword [0x7c19a4]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x73]
mov edi, dword [ebp + 0x20]
add edi, 0xfffffffb
cmp ebx, edi
jle 0x43da93
mov ebx, dword [0x7c19a4]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x73]
mov edi, dword [ebp + 0x24]
add edi, 0xfffffffb
cmp ebx, edi
jge 0x43da93
mov eax, 1
jmp 0x43da95
xor eax, eax
and eax, eax
je 0x43daf8
push 0xff
push 0
push 0
call fcn.0059f89e
push eax
push 0x10
push 1
push dword [esp + 0x44]
mov ebx, dword [esp + 0x44]
dec ebx
push ebx
call fcn.0059f824
push 0xff
push 0
push 0
call fcn.0059f89e
push eax
push 0x10
push 1
push dword [esp + 0x44]
push dword [esp + 0x44]
call fcn.0059f824
jmp 0x43dbaa
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x6f]
call fcn.005a9ea1
mov ebx, eax
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x6f]
call fcn.005a9e97
mov edi, eax
dec edi
cmp ebx, edi
jne 0x43db41
mov ebx, dword [0x7c19a4]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x73]
cmp ebx, dword [ebp + 0x20]
jle 0x43db41
mov eax, 1
jmp 0x43db43
xor eax, eax
and eax, eax
je 0x43dbaa
push 0xff
push 0
push 0
call fcn.0059f89e
push eax
push 0x10
push 1
push dword [esp + 0x44]
mov ebx, dword [esp + 0x44]
add ebx, dword [esp + 0x58]
push ebx
call fcn.0059f824
push 0xff
push 0
push 0
call fcn.0059f89e
push eax
push 0x10
push 1
push dword [esp + 0x44]
mov ebx, dword [esp + 0x44]
add ebx, dword [esp + 0x58]
inc ebx
push ebx
call fcn.0059f824
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x73]
push dword [ebp + 0xc]
mov edx, 0x72b0ec
pop ecx
call fcn.0054d570
jne 0x43dd03
push 1
call fcn.0059f6ca
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x73]
mov ebx, dword [ebp + 0x18]
mov eax, str.PB_StatusBar_Center
push eax
call fcn.004efb97
and ebx, eax
and ebx, ebx
je 0x43dc57
push 0
push 0
push 0
call fcn.0059f89e
push eax
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x73]
push dword [ebp + 0xc]
mov ebx, dword [esp + 0x40]
add ebx, 4
push ebx
mov ebx, dword [esp + 0x40]
mov edi, dword [esp + 0x54]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x73]
push dword [ebp + 0xc]
call fcn.0059f711
sub edi, eax
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
add ebx, edi
push ebx
call fcn.0059fa75
jmp 0x43dcfe
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x73]
mov ebx, dword [ebp + 0x18]
mov eax, str.PB_StatusBar_Right
push eax
call fcn.004efb97
and ebx, eax
and ebx, ebx
je 0x43dcc9
push 0
push 0
push 0
call fcn.0059f89e
push eax
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x73]
push dword [ebp + 0xc]
mov ebx, dword [esp + 0x40]
add ebx, 4
push ebx
mov ebx, dword [esp + 0x40]
add ebx, dword [esp + 0x54]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x73]
push dword [ebp + 0xc]
call fcn.0059f711
sub ebx, eax
push ebx
call fcn.0059fa75
jmp 0x43dcfe
push 0
push 0
push 0
call fcn.0059f89e
push eax
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x73]
push dword [ebp + 0xc]
mov ebx, dword [esp + 0x40]
add ebx, 4
push ebx
push dword [esp + 0x40]
call fcn.0059fa75
jmp 0x43e0bc
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x73]
cmp dword [ebp + 0x1c], 0
je 0x43df4b
mov eax, dword [esp + 0x34]
mov dword [esp + 0x4c], eax
mov ebx, dword [esp + 0x38]
add ebx, 5
mov dword [esp + 0x50], ebx
mov ebx, dword [esp + 0x34]
add ebx, dword [esp + 0x48]
mov dword [esp + 0x54], ebx
mov ebx, dword [esp + 0x38]
add ebx, 0x12
mov dword [esp + 0x58], ebx
push 1
call fcn.0059f6ca
mov ebx, dword [0x7c2420]
cmp ebx, 1
jne 0x43dd6a
mov ebx, dword [0x7c20e8]
cmp ebx, 8
jne 0x43dd6a
mov eax, 1
jmp 0x43dd6c
xor eax, eax
and eax, eax
je 0x43dd8a
push 0xe6
push 0xe6
push 0xe6
call fcn.0059f89e
mov dword [esp + 8], eax
jmp 0x43dda2
push 0xdc
push 0xdc
push 0xdc
call fcn.0059f89e
mov dword [esp + 8], eax
mov ebx, dword [0x7c2420]
cmp ebx, 1
jne 0x43ddbf
mov ebx, dword [0x7c20e8]
cmp ebx, 8
jne 0x43ddbf
mov eax, 1
jmp 0x43ddc1
xor eax, eax
and eax, eax
je 0x43ddea
push dword [esp + 8]
mov ebx, dword [esp + 0x5c]
sub ebx, dword [esp + 0x54]
push ebx
mov ebx, dword [esp + 0x5c]
sub ebx, dword [esp + 0x54]
push ebx
push dword [esp + 0x5c]
push dword [esp + 0x5c]
call fcn.0059f8b3
jmp 0x43de17
push dword [esp + 8]
push 3
push 3
mov ebx, dword [esp + 0x64]
sub ebx, dword [esp + 0x5c]
push ebx
mov ebx, dword [esp + 0x64]
sub ebx, dword [esp + 0x5c]
push ebx
push dword [esp + 0x64]
push dword [esp + 0x64]
call fcn.0059fb2b
mov ebx, dword [0x7c2420]
cmp ebx, 1
jne 0x43de34
mov ebx, dword [0x7c20e8]
cmp ebx, 8
jne 0x43de34
mov eax, 1
jmp 0x43de36
xor eax, eax
and eax, eax
je 0x43de54
push 0x25
push 0xb0
push 6
call fcn.0059f89e
mov dword [esp + 8], eax
jmp 0x43de6c
push 0xf4
push 0xce
push 0x86
call fcn.0059f89e
mov dword [esp + 8], eax
push dword [esp + 8]
mov ebx, dword [esp + 0x5c]
sub ebx, dword [esp + 0x54]
add ebx, 0xfffffffe
push ebx
mov ebx, dword [esp + 0x5c]
sub ebx, dword [esp + 0x54]
mov eax, ebx
mov ecx, 2
cdq
idiv ecx
mov ebx, eax
add ebx, 0xfffffffe
push ebx
mov ebx, dword [esp + 0x5c]
inc ebx
push ebx
mov ebx, dword [esp + 0x5c]
inc ebx
push ebx
call fcn.0059f8b3
push 4
call fcn.0059f6ca
mov ebx, dword [0x7c2420]
cmp ebx, 1
jne 0x43decc
mov ebx, dword [0x7c20e8]
cmp ebx, 8
jne 0x43decc
mov eax, 1
jmp 0x43dece
xor eax, eax
and eax, eax
je 0x43df08
push 0xbc
push 0xbc
push 0xbc
call fcn.0059f89e
push eax
mov ebx, dword [esp + 0x5c]
sub ebx, dword [esp + 0x54]
push ebx
mov ebx, dword [esp + 0x5c]
sub ebx, dword [esp + 0x54]
push ebx
push dword [esp + 0x5c]
push dword [esp + 0x5c]
call fcn.0059f8b3
jmp 0x43df46
push 0x98
push 0x98
push 0x98
call fcn.0059f89e
push eax
push 3
push 3
mov ebx, dword [esp + 0x64]
sub ebx, dword [esp + 0x5c]
push ebx
mov ebx, dword [esp + 0x64]
sub ebx, dword [esp + 0x5c]
push ebx
push dword [esp + 0x64]
push dword [esp + 0x64]
call fcn.0059fb2b
jmp 0x43e0bc
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x73]
lea eax, [ebp + 0x10]
push dword [eax + 4]
push dword [eax]
pop ebx
pop edi
cmp ebx, 0
jne 0x43df6f
cmp edi, 0
jne 0x43df6f
xor eax, eax
jmp 0x43df74
mov eax, 1
or eax, eax
je 0x43dfb3
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x73]
mov eax, dword [ebp + 0x10]
push eax
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x35]
call fcn.005a9e1f
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x39]
push dword [ebp + 0xc]
call fcn.00536de7
mov dword [esp + 0x30], eax
jmp 0x43dfbb
mov dword [esp + 0x30], 0x67
push dword [esp + 0x30]
call fcn.005a8f7f
and eax, eax
je 0x43e0bc
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x73]
mov ebx, dword [ebp + 0x18]
mov eax, str.PB_StatusBar_Center
push eax
call fcn.004efb97
and ebx, eax
and ebx, ebx
je 0x43e01e
mov ebx, dword [esp + 0x34]
mov edi, dword [esp + 0x48]
push dword [esp + 0x30]
call fcn.005a8ccd
sub edi, eax
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
add ebx, edi
mov dword [esp + 0x24], ebx
mov ebx, dword [esp + 0x38]
add ebx, 4
mov dword [esp + 0x28], ebx
jmp 0x43e075
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x73]
mov ebx, dword [ebp + 0x18]
mov eax, str.PB_StatusBar_Right
push eax
call fcn.004efb97
and ebx, eax
and ebx, ebx
je 0x43e062
mov ebx, dword [esp + 0x34]
add ebx, dword [esp + 0x48]
push dword [esp + 0x30]
call fcn.005a8ccd
sub ebx, eax
mov dword [esp + 0x24], ebx
mov ebx, dword [esp + 0x38]
add ebx, 4
mov dword [esp + 0x28], ebx
jmp 0x43e075
mov eax, dword [esp + 0x34]
mov dword [esp + 0x24], eax
mov ebx, dword [esp + 0x38]
add ebx, 4
mov dword [esp + 0x28], ebx
push dword [esp + 0x30]
call fcn.005a92e3
mov ebx, eax
cmp ebx, 0x20
jne 0x43e091
push 0x11
call fcn.0059f6ca
jmp 0x43e09b
push 1
call fcn.0059f6ca
push dword [esp + 0x28]
push dword [esp + 0x28]
push dword [esp + 0x38]
call fcn.005a8f63
push eax
call fcn.0059fa48
push 1
call fcn.0059f6ca
push dword [esp + 0x34]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x73]
pop eax
mov dword [ebp + 0x20], eax
mov ebx, dword [esp + 0x34]
add ebx, dword [esp + 0x48]
push ebx
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x73]
pop eax
mov dword [ebp + 0x24], eax
push dword [esp + 0x38]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x73]
pop eax
mov dword [ebp + 0x28], eax
mov ebx, dword [esp + 0x34]
add ebx, dword [esp + 0x48]
mov dword [esp + 0x34], ebx
mov ebx, dword [0x7c2420]
cmp ebx, 1
jne 0x43e170
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x6f]
call fcn.005a9ea1
mov ebx, eax
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x6f]
call fcn.005a9e97
mov edi, eax
dec edi
cmp ebx, edi
jge 0x43e170
push 0xd7
push 0xd7
push 0xd7
call fcn.0059f89e
push eax
mov ebx, dword [0x7c1a80]
dec ebx
push ebx
push 1
mov ebx, dword [esp + 0x44]
inc ebx
push ebx
push dword [esp + 0x44]
call fcn.0059f824
mov ebx, dword [0x7c2420]
cmp ebx, 2
jne 0x43e1d7
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x6f]
call fcn.005a9ea1
mov ebx, eax
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x6f]
call fcn.005a9e97
mov edi, eax
dec edi
cmp ebx, edi
jge 0x43e1d7
push 0xd7
push 0xd7
push 0xd7
call fcn.0059f89e
push eax
mov ebx, dword [0x7c1a80]
dec ebx
push ebx
push 1
mov ebx, dword [esp + 0x44]
inc ebx
push ebx
push dword [esp + 0x44]
call fcn.0059f824
jmp 0x43d998
push 0x11
call fcn.0059f6ca
mov ebx, dword [esp + 0x38]
add ebx, 4
push ebx
push dword [esp + 0x38]
push 0xac
call fcn.005a8f63
push eax
call fcn.0059fa48
push 1
call fcn.0059f6ca
push dword [esp + 0x34]
mov ebp, dword [0x7c345c]
pop dword [ebp + 0x7f]
mov eax, dword [esp + 0x38]
mov dword [ebp + 0x83], eax
mov ebx, dword [0x7c2420]
cmp ebx, 4
jne 0x43e2a4
push 4
call fcn.0059f6ca
push 0x76
push 0x76
push 0x76
call fcn.0059f89e
push eax
push 4
push 4
mov ebp, dword [0x7c345c]
mov ebx, dword [ebp + 0x14]
add ebx, dword [0x7c218c]
add ebx, dword [0x7c2428]
add ebx, 2
push ebx
mov ebx, dword [ebp + 0x10]
add ebx, 2
push ebx
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, dword [0x7c1a68]
add ebx, 9
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 9
push ebx
call fcn.0059fb2b
push 1
call fcn.0059f6ca
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x3d]
call fcn.005a9d3a
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x3d]
call fcn.005a9d4f
or eax, eax
je 0x43ec53
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x41]
cmp byte [ebp + 0x92], 0
je 0x43e2e7
xor eax, eax
jmp 0x43e2ec
mov eax, 1
and eax, eax
je 0x43ec4e
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x41]
mov eax, dword [ebp + 0x74]
mov dword [esp + 0x5c], eax
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x41]
mov eax, dword [ebp + 0x7c]
mov dword [esp + 0x60], eax
mov dword [esp + 0x4c], 0
mov dword [esp + 0x54], 0
mov dword [esp + 0x50], 0
mov dword [esp + 0x58], 0
mov dword [0x7c1eec], 0
mov ebp, dword [0x7c345c]
mov eax, dword [ebp + 0x10]
mov dword [0x7c1914], eax
mov dword [0x7c2118], 0
mov eax, dword [ebp + 0x14]
mov dword [0x7c1b90], eax
mov dword [esp + 0x64], 0
mov dword [esp + 0x68], 0
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], 0
mov ebx, dword [esp + 0x5c]
and ebx, ebx
je 0x43e5ee
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x3d]
call fcn.005a9fd9
push dword [esp + 0x5c]
call fcn.00517b45
mov ebx, dword [esp + 0x4c]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x41]
add ebx, dword [ebp + 0xc]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x41]
sub ebx, dword [ebp + 0xa7]
mov dword [esp + 0x4c], ebx
mov ebx, dword [esp + 0x54]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x41]
add ebx, dword [ebp + 0xc]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x41]
sub ebx, dword [ebp + 0xa7]
mov dword [esp + 0x54], ebx
mov ebx, dword [esp + 0x50]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x41]
add ebx, dword [ebp + 0x14]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x41]
sub ebx, dword [ebp + 0xab]
mov dword [esp + 0x50], ebx
mov ebx, dword [esp + 0x58]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x41]
add ebx, dword [ebp + 0x14]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x41]
sub ebx, dword [ebp + 0xab]
mov dword [esp + 0x58], ebx
mov ebx, dword [esp + 0x5c]
cmp ebx, dword [esp + 0x6c]
je 0x43e48c
mov ebx, dword [esp + 0x64]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x41]
add ebx, dword [ebp + 0xa7]
mov dword [esp + 0x64], ebx
mov ebx, dword [esp + 0x68]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x41]
add ebx, dword [ebp + 0xab]
mov dword [esp + 0x68], ebx
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x41]
mov ebx, dword [ebp + 0xc]
and ebx, ebx
jle 0x43e4ba
mov ebx, dword [0x7c1eec]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x41]
add ebx, dword [ebp + 0xc]
mov dword [0x7c1eec], ebx
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x41]
mov ebx, dword [ebp + 0x54]
cmp ebx, 0x4f
jne 0x43e4ee
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x41]
mov ebx, dword [ebp + 0x14]
add ebx, dword [0x7c1e90]
and ebx, ebx
jle 0x43e4ee
mov eax, 1
jmp 0x43e4f0
xor eax, eax
and eax, eax
je 0x43e517
mov ebx, dword [0x7c2118]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x41]
add ebx, dword [ebp + 0x14]
add ebx, dword [0x7c1e90]
mov dword [0x7c2118], ebx
jmp 0x43e545
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x41]
mov ebx, dword [ebp + 0x14]
and ebx, ebx
jle 0x43e545
mov ebx, dword [0x7c2118]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x41]
add ebx, dword [ebp + 0x14]
mov dword [0x7c2118], ebx
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x41]
cmp byte [ebp + 0x92], 0
je 0x43e562
mov dword [esp + 0x70], 1
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x41]
mov ebx, dword [ebp + 0x54]
cmp ebx, 0x4f
jne 0x43e5b2
mov ebx, dword [esp + 0x50]
add ebx, dword [0x7c1e90]
mov dword [esp + 0x50], ebx
mov ebx, dword [esp + 0x58]
add ebx, dword [0x7c1e90]
mov dword [esp + 0x58], ebx
mov ebx, dword [esp + 0x60]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x41]
cmp ebx, dword [ebp + 0x80]
je 0x43e5b2
mov dword [esp + 0x70], 1
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x41]
mov eax, dword [ebp + 0x74]
mov dword [esp + 0x5c], eax
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x41]
mov eax, dword [ebp + 0x7c]
mov dword [esp + 0x60], eax
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x3d]
call fcn.005a9f9f
jmp 0x43e384
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x41]
lea eax, [ebp + 0x74]
push dword [eax + 4]
push dword [eax]
pop ebx
pop edi
cmp ebx, 0
jne 0x43e612
cmp edi, 0
jne 0x43e612
xor eax, eax
jmp 0x43e617
mov eax, 1
or eax, eax
je 0x43e756
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x3d]
call fcn.005a9fd9
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x41]
mov eax, dword [ebp + 0x74]
push eax
call fcn.00517b45
mov ebx, dword [0x7c1914]
add ebx, dword [0x7c1eec]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x41]
add ebx, dword [ebp + 0x10]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x41]
sub ebx, dword [ebp + 0xc]
mov dword [0x7c1914], ebx
mov ebx, dword [esp + 0x4c]
sub ebx, dword [0x7c1eec]
and ebx, ebx
jge 0x43e699
mov ebx, dword [0x7c1914]
add ebx, dword [esp + 0x4c]
sub ebx, dword [0x7c1eec]
mov dword [0x7c1914], ebx
mov ebx, dword [0x7c1b90]
add ebx, dword [0x7c2118]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x41]
add ebx, dword [ebp + 0x18]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x41]
sub ebx, dword [ebp + 0x14]
mov dword [0x7c1b90], ebx
mov ebx, dword [esp + 0x50]
sub ebx, dword [0x7c2118]
and ebx, ebx
jge 0x43e6ed
mov ebx, dword [0x7c1b90]
add ebx, dword [esp + 0x50]
sub ebx, dword [0x7c2118]
mov dword [0x7c1b90], ebx
mov ebx, dword [0x7c2118]
sub ebx, dword [esp + 0x68]
mov dword [0x7c2118], ebx
mov ebx, dword [0x7c1eec]
sub ebx, dword [esp + 0x64]
mov dword [0x7c1eec], ebx
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x41]
mov ebx, dword [ebp + 0x54]
cmp ebx, 0x4c
jne 0x43e745
mov ebx, dword [0x7c1914]
sub ebx, dword [0x7c2114]
mov dword [0x7c1914], ebx
mov ebx, dword [0x7c1b90]
sub ebx, dword [0x7c2114]
mov dword [0x7c1b90], ebx
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x3d]
call fcn.005a9f9f
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x41]
mov eax, dword [ebp + 0x74]
mov dword [esp + 0x5c], eax
mov ebx, dword [esp + 0x5c]
and ebx, ebx
je 0x43e85d
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x3d]
call fcn.005a9fd9
push dword [esp + 0x5c]
call fcn.00517b45
push 2
push dword [esp + 0x60]
call fcn.0050da2f
mov dword [esp + 0x74], eax
push 3
push dword [esp + 0x60]
call fcn.0050da2f
mov dword [esp + 0x78], eax
push 0
push dword [esp + 0x60]
call fcn.0050da2f
mov dword [esp + 0x7c], eax
push 1
push dword [esp + 0x60]
call fcn.0050da2f
mov dword [esp + 0x80], eax
mov ebx, dword [0x7c2118]
cmp ebx, dword [esp + 0x78]
jge 0x43e7ef
mov eax, dword [esp + 0x78]
mov dword [0x7c2118], eax
mov ebx, dword [0x7c1eec]
cmp ebx, dword [esp + 0x74]
jge 0x43e804
mov eax, dword [esp + 0x74]
mov dword [0x7c1eec], eax
mov ebx, dword [0x7c1914]
cmp ebx, dword [esp + 0x7c]
jle 0x43e819
mov eax, dword [esp + 0x7c]
mov dword [0x7c1914], eax
mov ebx, dword [0x7c1b90]
cmp ebx, dword [esp + 0x80]
jle 0x43e834
mov eax, dword [esp + 0x80]
mov dword [0x7c1b90], eax
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x41]
mov eax, dword [ebp + 0x74]
mov dword [esp + 0x5c], eax
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x3d]
call fcn.005a9f9f
jmp 0x43e769
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x41]
lea eax, [ebp + 0x74]
push dword [eax + 4]
push dword [eax]
pop ebx
pop edi
cmp ebx, 0
jne 0x43e881
cmp edi, 0
jne 0x43e881
xor eax, eax
jmp 0x43e886
mov eax, 1
or eax, eax
je 0x43e8f9
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x3d]
call fcn.005a9fd9
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x41]
mov eax, dword [ebp + 0x74]
push eax
call fcn.00517b45
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x41]
mov ebx, dword [ebp + 0x54]
cmp ebx, 0x4c
jne 0x43e8e8
mov ebx, dword [0x7c1914]
sub ebx, dword [0x7c2114]
mov dword [0x7c1914], ebx
mov ebx, dword [0x7c1b90]
sub ebx, dword [0x7c2114]
mov dword [0x7c1b90], ebx
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x3d]
call fcn.005a9f9f
cmp dword [esp + 0x70], 0
je 0x43e904
xor eax, eax
jmp 0x43e909
mov eax, 1
and eax, eax
je 0x43ec4e
mov ebx, dword [esp + 0x4c]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x41]
add ebx, dword [ebp + 0xc]
mov ebp, dword [0x7c345c]
sub ebx, dword [ebp + 0x94]
add ebx, dword [0x7c2234]
add ebx, 0xa
mov dword [esp + 0x4c], ebx
mov ebx, dword [esp + 0x54]
add ebp, 8
mov ebp, dword [ebp + 0x41]
add ebx, dword [ebp + 0x10]
mov ebp, dword [0x7c345c]
sub ebx, dword [ebp + 0x94]
add ebx, dword [0x7c2234]
add ebx, 0xa
mov dword [esp + 0x54], ebx
mov ebx, dword [esp + 0x50]
add ebp, 8
mov ebp, dword [ebp + 0x41]
add ebx, dword [ebp + 0x14]
mov ebp, dword [0x7c345c]
sub ebx, dword [ebp + 0x98]
add ebx, dword [0x7c218c]
add ebx, dword [0x7c2428]
add ebx, dword [0x7c1a68]
add ebx, 0xa
mov dword [esp + 0x50], ebx
mov ebx, dword [esp + 0x58]
add ebp, 8
mov ebp, dword [ebp + 0x41]
add ebx, dword [ebp + 0x18]
mov ebp, dword [0x7c345c]
sub ebx, dword [ebp + 0x98]
add ebx, dword [0x7c218c]
add ebx, dword [0x7c2428]
add ebx, dword [0x7c1a68]
add ebx, 0xa
mov dword [esp + 0x58], ebx
mov ebx, dword [0x7c1eec]
sub ebx, dword [ebp + 0x94]
add ebx, dword [0x7c2234]
add ebx, 0xa
mov dword [0x7c1eec], ebx
mov ebx, dword [0x7c1914]
sub ebx, dword [ebp + 0x94]
add ebx, dword [0x7c2234]
add ebx, 0xa
mov dword [0x7c1914], ebx
mov ebx, dword [0x7c2118]
sub ebx, dword [ebp + 0x98]
add ebx, dword [0x7c218c]
add ebx, dword [0x7c2428]
add ebx, dword [0x7c1a68]
add ebx, 0xa
mov dword [0x7c2118], ebx
mov ebx, dword [0x7c1b90]
sub ebx, dword [ebp + 0x98]
add ebx, dword [0x7c218c]
add ebx, dword [0x7c2428]
add ebx, dword [0x7c1a68]
add ebx, 0xa
mov dword [0x7c1b90], ebx
add ebp, 8
mov ebp, dword [ebp + 0x41]
lea eax, [ebp + 8]
push eax
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x41]
add ebp, 8
push dword [ebp + 0xa7]
call fcn.005a9e97
push eax
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x41]
push dword [ebp + 0x4c]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x41]
push dword [ebp + 0x50]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x41]
push dword [ebp + 0x32]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x41]
push dword [ebp + 0x54]
push dword [esp + 0x70]
push dword [esp + 0x70]
push dword [esp + 0x70]
push dword [esp + 0x70]
call fcn.00444bd6
and eax, eax
je 0x43ec4e
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x41]
cmp byte [ebp + 0x29], 0
je 0x43ec4e
push 4
call fcn.0059f6ca
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x41]
cmp dword [ebp + 0x8c], 0
je 0x43eb3e
push 0xe6
push 0x79
push 0x6c
call fcn.0059f89e
push eax
mov ebx, dword [esp + 0x5c]
sub ebx, dword [esp + 0x54]
add ebx, 0xfffffffe
push ebx
mov ebx, dword [esp + 0x5c]
sub ebx, dword [esp + 0x54]
add ebx, 0xfffffffe
push ebx
mov ebx, dword [esp + 0x5c]
inc ebx
push ebx
mov ebx, dword [esp + 0x5c]
inc ebx
push ebx
call fcn.0059f8b3
jmp 0x43eb72
push 0
push 0
push 0
call fcn.0059f89e
push eax
mov ebx, dword [esp + 0x5c]
sub ebx, dword [esp + 0x54]
push ebx
mov ebx, dword [esp + 0x5c]
sub ebx, dword [esp + 0x54]
push ebx
push dword [esp + 0x5c]
push dword [esp + 0x5c]
call fcn.0059f8b3
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x41]
cmp dword [ebp + 0x8c], 0
je 0x43eb8b
xor eax, eax
jmp 0x43eb90
mov eax, 1
and eax, eax
je 0x43ec4e
push 1
call fcn.0059f6ca
push dword [esp + 0x50]
push dword [esp + 0x50]
call fcn.004f6aec
push dword [esp + 0x50]
push dword [esp + 0x58]
call fcn.004f6aec
push dword [esp + 0x58]
push dword [esp + 0x50]
call fcn.004f6aec
push dword [esp + 0x58]
push dword [esp + 0x58]
call fcn.004f6aec
push dword [esp + 0x50]
mov ebx, dword [esp + 0x50]
add ebx, dword [esp + 0x58]
mov eax, ebx
mov ecx, 2
cdq
idiv ecx
mov ebx, eax
push ebx
call fcn.004f6aec
push dword [esp + 0x58]
mov ebx, dword [esp + 0x50]
add ebx, dword [esp + 0x58]
mov eax, ebx
mov ecx, 2
cdq
idiv ecx
mov ebx, eax
push ebx
call fcn.004f6aec
mov ebx, dword [esp + 0x50]
add ebx, dword [esp + 0x58]
mov eax, ebx
mov ecx, 2
cdq
idiv ecx
mov ebx, eax
push ebx
push dword [esp + 0x50]
call fcn.004f6aec
mov ebx, dword [esp + 0x50]
add ebx, dword [esp + 0x58]
mov eax, ebx
mov ecx, 2
cdq
idiv ecx
mov ebx, eax
push ebx
push dword [esp + 0x58]
call fcn.004f6aec
jmp 0x43e2b5
cmp byte [0x7c2458], 0
je 0x43ec71
mov ebx, dword [0x7c1d60]
cmp ebx, dword [0x7c1d58]
jle 0x43ec71
mov eax, 1
jmp 0x43ec73
xor eax, eax
and eax, eax
je 0x43ec8c
mov ebx, dword [0x7c1e24]
cmp ebx, dword [0x7c1e1c]
jle 0x43ec8c
mov eax, 1
jmp 0x43ec8e
xor eax, eax
and eax, eax
je 0x43ef56
mov dword [0x7c1eec], 0
mov dword [0x7c1914], 0x270f
mov dword [0x7c2118], 0
mov dword [0x7c1b90], 0x270f
push dword [0x7c2420]
mov ebx, 4
cmp ebx, dword [esp]
jne 0x43ed6c
push 0
push 0
push 0xffffffff
push 0
push 0x72b0ec
push dword [0x7c1ecc]
mov ebx, dword [0x7c1e24]
mov ebp, dword [0x7c345c]
sub ebx, dword [ebp + 0x98]
add ebx, dword [0x7c218c]
add ebx, dword [0x7c2428]
add ebx, dword [0x7c1a68]
add ebx, 0xa
push ebx
mov ebx, dword [0x7c1d60]
sub ebx, dword [ebp + 0x94]
add ebx, 0xa
push ebx
mov ebx, dword [0x7c1e1c]
sub ebx, dword [ebp + 0x98]
add ebx, dword [0x7c218c]
add ebx, dword [0x7c2428]
add ebx, dword [0x7c1a68]
add ebx, 0xa
push ebx
mov ebx, dword [0x7c1d58]
sub ebx, dword [ebp + 0x94]
add ebx, 0xa
push ebx
call fcn.00444bd6
mov dword [esp + 0x88], eax
jmp 0x43eecf
mov ebx, 1
cmp ebx, dword [esp]
jne 0x43ee20
push 0
push 0
push 0xffffffff
push 0
push 0x72b0ec
push dword [0x7c1ecc]
mov ebx, dword [0x7c1e24]
mov ebp, dword [0x7c345c]
sub ebx, dword [ebp + 0x98]
add ebx, dword [0x7c218c]
add ebx, dword [0x7c2428]
add ebx, dword [0x7c1a68]
add ebx, 0xa
push ebx
mov ebx, dword [0x7c1d60]
sub ebx, dword [ebp + 0x94]
add ebx, dword [0x7c2234]
add ebx, 0xa
push ebx
mov ebx, dword [0x7c1e1c]
sub ebx, dword [ebp + 0x98]
add ebx, dword [0x7c218c]
add ebx, dword [0x7c2428]
add ebx, dword [0x7c1a68]
add ebx, 0xa
push ebx
mov ebx, dword [0x7c1d58]
add ebx, dword [0x7c2234]
sub ebx, dword [ebp + 0x94]
add ebx, 0xa
push ebx
call fcn.00444bd6
mov dword [esp + 0x88], eax
jmp 0x43eecf
mov ebx, 2
cmp ebx, dword [esp]
jne 0x43eecf
push 0
push 0
push 0xffffffff
push 0
push 0x72b0ec
push dword [0x7c1ecc]
mov ebx, dword [0x7c1e24]
mov ebp, dword [0x7c345c]
sub ebx, dword [ebp + 0x98]
add ebx, dword [0x7c218c]
add ebx, dword [0x7c2428]
add ebx, dword [0x7c1a68]
add ebx, 0xa
push ebx
mov ebx, dword [0x7c1d60]
sub ebx, dword [ebp + 0x94]
add ebx, dword [0x7c2234]
add ebx, 0xa
push ebx
mov ebx, dword [0x7c1e1c]
sub ebx, dword [ebp + 0x98]
add ebx, dword [0x7c218c]
add ebx, dword [0x7c2428]
add ebx, dword [0x7c1a68]
add ebx, 0xa
push ebx
mov ebx, dword [0x7c1d58]
add ebx, dword [0x7c2234]
sub ebx, dword [ebp + 0x94]
add ebx, 0xa
push ebx
call fcn.00444bd6
mov dword [esp + 0x88], eax
pop eax
cmp dword [esp + 0x84], 0
je 0x43ef56
push 4
call fcn.0059f6ca
push 0
push 0
push 0
call fcn.0059f89e
push eax
mov ebx, dword [0x7c1e24]
sub ebx, dword [0x7c1e1c]
push ebx
mov ebx, dword [0x7c1d60]
sub ebx, dword [0x7c1d58]
push ebx
mov ebx, dword [0x7c1e1c]
mov ebp, dword [0x7c345c]
sub ebx, dword [ebp + 0x98]
add ebx, dword [0x7c218c]
add ebx, dword [0x7c2428]
add ebx, dword [0x7c1a68]
add ebx, 0xa
push ebx
mov ebx, dword [0x7c1d58]
add ebx, dword [0x7c2234]
sub ebx, dword [ebp + 0x94]
add ebx, 0xa
push ebx
call fcn.0059f8b3
push dword [0x7c2420]
mov ebx, 4
cmp ebx, dword [esp]
jne 0x43f0a7
push 1
call fcn.0059f6ca
push 0x55
push 0x55
push 0x55
call fcn.0059f89e
push eax
push 1
call fcn.0059f728
push eax
push 0
push 0
call fcn.0059f824
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x45]
call fcn.005a9e97
and eax, eax
jne 0x43efc6
mov ebp, dword [0x7c345c]
cmp byte [ebp + 0x65], 0
jne 0x43efc6
jmp 0x43efcd
mov eax, 1
jmp 0x43efcf
xor eax, eax
and eax, eax
je 0x43f0a2
push 0x40
call fcn.0059f6ca
push 0xfb
push 0xfb
push 0xfb
call fcn.0059f89e
push eax
call fcn.0059fbcc
push 0xda
push 0xda
push 0xda
call fcn.0059f89e
push eax
call fcn.0059f6e1
push 0x16
push 0
push 1
push 0
call fcn.0059ff18
push 0x15
call fcn.0059f728
push eax
push 1
push 0
call fcn.005a0256
push 1
call fcn.0059f6ca
push 0x76
push 0x76
push 0x76
call fcn.0059f89e
push eax
push 1
call fcn.0059f728
push eax
push 0x16
push 0
call fcn.0059f824
mov dword [esp + 0x8c], 0x14
mov dword [esp + 0x90], 4
mov dword [esp + 0x94], 0x14
jmp 0x43f437
mov ebx, 1
cmp ebx, dword [esp]
jne 0x43f327
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x45]
call fcn.005a9e97
and eax, eax
jne 0x43f0d8
mov ebp, dword [0x7c345c]
cmp byte [ebp + 0x65], 0
jne 0x43f0d8
jmp 0x43f0df
mov eax, 1
jmp 0x43f0e1
xor eax, eax
and eax, eax
je 0x43f322
push 1
call fcn.0059f6ca
push dword [0x7c20e8]
mov ebx, 7
cmp ebx, dword [esp]
jne 0x43f252
push 0xf5
push 0xf5
push 0xf5
call fcn.0059f89e
push eax
push 7
mov ebp, dword [0x7c345c]
push dword [ebp + 0x10]
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, dword [0x7c218c]
add ebx, 0xa
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 0x12
push ebx
call fcn.0059f8b3
push 0xf1
push 0xe0
push 0xda
call fcn.0059f89e
push eax
push 0xb
push dword [ebp + 0x10]
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, dword [0x7c218c]
add ebx, 0x11
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 0x12
push ebx
call fcn.0059f8b3
push 0xcc
push 0xbc
push 0xb6
call fcn.0059f89e
push eax
push 1
push dword [ebp + 0x10]
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, dword [0x7c218c]
add ebx, 0x1d
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 0x12
push ebx
call fcn.0059f824
push 0xf0
push 0xf0
push 0xf0
call fcn.0059f89e
push eax
push 1
push dword [ebp + 0x10]
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, dword [0x7c218c]
add ebx, 0x1e
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 0x12
push ebx
call fcn.0059f824
push 0xa0
push 0xa0
push 0xa0
call fcn.0059f89e
push eax
push 1
push dword [ebp + 0x10]
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, dword [0x7c218c]
add ebx, 0x1f
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 0x12
push ebx
call fcn.0059f824
jmp 0x43f2e6
mov ebx, 8
cmp ebx, dword [esp]
jne 0x43f2e6
push 0xf7
push 0xf6
push 0xf5
call fcn.0059f89e
push eax
push 0x15
mov ebp, dword [0x7c345c]
push dword [ebp + 0x10]
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, dword [0x7c218c]
add ebx, 0xa
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 0x12
push ebx
call fcn.0059f8b3
push 0xea
push 0xe9
push 0xe8
call fcn.0059f89e
push eax
push 1
push dword [ebp + 0x10]
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, dword [0x7c218c]
add ebx, 0x1f
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 0x12
push ebx
call fcn.0059f824
pop eax
mov ebp, dword [0x7c345c]
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 0x19
mov dword [esp + 0x8c], ebx
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, dword [0x7c218c]
add ebx, 0xc
mov dword [esp + 0x90], ebx
mov dword [esp + 0x94], 7
jmp 0x43f437
mov ebx, 2
cmp ebx, dword [esp]
jne 0x43f437
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x45]
call fcn.005a9e97
and eax, eax
jne 0x43f358
mov ebp, dword [0x7c345c]
cmp byte [ebp + 0x65], 0
jne 0x43f358
jmp 0x43f35f
mov eax, 1
jmp 0x43f361
xor eax, eax
and eax, eax
je 0x43f437
push 1
call fcn.0059f6ca
push 0xf7
push 0xf6
push 0xf5
call fcn.0059f89e
push eax
mov ebx, dword [0x7c1a68]
dec ebx
push ebx
mov ebp, dword [0x7c345c]
push dword [ebp + 0x10]
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, dword [0x7c218c]
add ebx, 0xa
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 0xa
push ebx
call fcn.0059f8b3
push 0xea
push 0xe9
push 0xe8
call fcn.0059f89e
push eax
push 1
push dword [ebp + 0x10]
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, dword [0x7c218c]
add ebx, dword [0x7c1a68]
add ebx, 9
push ebx
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 0xa
push ebx
call fcn.0059f824
mov ebx, dword [ebp + 0x94]
neg ebx
add ebx, 0x19
mov dword [esp + 0x8c], ebx
mov ebx, dword [ebp + 0x98]
neg ebx
add ebx, dword [0x7c218c]
add ebx, 0xc
mov dword [esp + 0x90], ebx
mov dword [esp + 0x94], 7
pop eax
push 1
call fcn.0059f6ca
push 0x76
call fcn.005b0639
push eax
call fcn.0059f6fa
cmp dword [0x7c1b68], 0
je 0x43f547
push 0x15
xor eax, eax
push eax
lea eax, [esp + 0x9c]
push eax
push 4
call fcn.005a9c0a
push dword [0x7c1b68]
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x45]
call fcn.005a9e1f
push dword [esp + 0x94]
call fcn.005a9c9c
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
lea eax, [ebp + 8]
mov ebp, dword [esp + 0x98]
mov dword [ebp + 8], eax
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
movsx eax, byte [ebp + 8]
mov dword [esp + 0x9c], eax
cmp dword [esp + 0x9c], 0
je 0x43f547
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x45]
call fcn.005aa165
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
movsx ebx, byte [ebp + 8]
cmp ebx, dword [esp + 0x9c]
jge 0x43f53c
push dword [esp + 0x94]
call fcn.005a9c9c
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
lea eax, [ebp + 8]
mov ebp, dword [esp + 0x98]
mov dword [ebp + 8], eax
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
movsx eax, byte [ebp + 8]
mov dword [esp + 0x9c], eax
mov ebx, dword [esp + 0x9c]
and ebx, ebx
jne 0x43f4d6
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x45]
call fcn.005a9d3a
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x45]
call fcn.005a9d4f
or eax, eax
je 0x43f5bb
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
mov dword [ebp + 0x22], 0
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
mov dword [ebp + 0x26], 0
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
mov dword [ebp + 0x2a], 0
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
mov dword [ebp + 0x2e], 0
jmp 0x43f558
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x4d]
call fcn.005a9e39
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x45]
call fcn.005a9d3a
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x45]
call fcn.005a9d4f
or eax, eax
je 0x43f787
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
movsx ebx, byte [ebp + 8]
and ebx, ebx
jne 0x43f782
push dword [esp + 0x88]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
pop eax
mov dword [ebp + 0x22], eax
push dword [esp + 0x8c]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
pop eax
mov dword [ebp + 0x2a], eax
push 0
push 0
push 0
call fcn.0059f89e
push eax
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
push dword [ebp + 0xe]
push dword [esp + 0x94]
push dword [esp + 0x94]
call fcn.0059fa75
mov dword [esp + 0x88], eax
mov ebx, dword [esp + 0x88]
add ebx, dword [esp + 0x90]
mov dword [esp + 0x88], ebx
mov ebx, dword [esp + 0x8c]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
push dword [ebp + 0xe]
call fcn.0059f79d
add ebx, eax
push ebx
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
pop eax
mov dword [ebp + 0x2e], eax
push dword [esp + 0x88]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
pop eax
mov dword [ebp + 0x26], eax
mov ebx, dword [0x7c1b68]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
lea eax, [ebp + 8]
cmp ebx, eax
jne 0x43f782
push 4
call fcn.0059f6ca
push 0
push 0
push 0
call fcn.0059f89e
push eax
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
mov ebx, dword [ebp + 0x2e]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
sub ebx, dword [ebp + 0x2a]
add ebx, 2
push ebx
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
mov ebx, dword [ebp + 0x26]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
sub ebx, dword [ebp + 0x22]
push ebx
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
mov ebx, dword [ebp + 0x2a]
dec ebx
push ebx
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
mov ebx, dword [ebp + 0x22]
dec ebx
push ebx
call fcn.0059f8b3
push 1
call fcn.0059f6ca
jmp 0x43f5dd
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x45]
call fcn.005a9e97
and eax, eax
jne 0x43f7aa
mov ebp, dword [0x7c345c]
cmp byte [ebp + 0x65], 0
jne 0x43f7aa
jmp 0x43f7b1
mov eax, 1
jmp 0x43f7b3
xor eax, eax
and eax, eax
je 0x43f803
push dword [esp + 0x88]
mov ebp, dword [0x7c345c]
pop dword [ebp + 0x5d]
mov eax, dword [esp + 0x8c]
mov dword [ebp + 0x61], eax
push 0x11
call fcn.0059f6ca
push dword [esp + 0x8c]
push dword [esp + 0x8c]
push 0xac
call fcn.005a8f63
push eax
call fcn.0059fa48
push 1
call fcn.0059f6ca
cmp dword [0x7c1b68], 0
je 0x43f826
push dword [esp + 0x94]
call fcn.005a9e97
mov ebx, eax
cmp ebx, 1
jl 0x43f826
mov eax, 1
jmp 0x43f828
xor eax, eax
and eax, eax
je 0x4401ff
push dword [esp + 0x94]
call fcn.005aa09a
mov ebp, dword [esp + 0x98]
push dword [ebp + 8]
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x45]
call fcn.005a9e1f
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
movsx ebx, byte [ebp + 8]
inc ebx
mov dword [esp + 0x9c], ebx
mov dword [esp + 0xa0], 0x14
mov dword [esp + 0xa4], 0
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x45]
call fcn.005a9d4f
mov dword [esp + 0xa8], eax
cmp dword [esp + 0xa8], 0
je 0x43f8ab
xor eax, eax
jmp 0x43f8b0
mov eax, 1
and eax, eax
je 0x43f8b9
jmp 0x43f994
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
movsx ebx, byte [ebp + 8]
cmp ebx, dword [esp + 0x9c]
jne 0x43f977
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
push dword [ebp + 0xe]
call fcn.0059f711
mov dword [esp + 0xac], eax
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
mov edx, dword [ebp + 0x12]
xor ecx, ecx
call fcn.0054d570
jne 0x43f92d
mov ebx, dword [esp + 0xac]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
push dword [ebp + 0x12]
call fcn.0059f711
add ebx, eax
mov dword [esp + 0xac], ebx
add dword [esp + 0xac], 0x18
mov ebx, dword [esp + 0xac]
cmp ebx, dword [esp + 0xa4]
jle 0x43f953
mov eax, dword [esp + 0xac]
mov dword [esp + 0xa4], eax
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
cmp byte [ebp + 9], 0
je 0x43f96f
add dword [esp + 0xa0], 0xc
jmp 0x43f977
add dword [esp + 0xa0], 0x14
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
movsx ebx, byte [ebp + 8]
cmp ebx, dword [esp + 0x9c]
jge 0x43f885
add dword [esp + 0xa4], 0x28
mov ebx, dword [esp + 0xa4]
cmp ebx, 0x64
jge 0x43f9b3
mov dword [esp + 0xa4], 0x64
mov ebp, dword [esp + 0x98]
push dword [ebp + 8]
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x45]
call fcn.005a9e1f
push dword [esp + 0x94]
call fcn.005a9ea1
mov ebx, eax
push dword [esp + 0x94]
call fcn.005a9e97
mov edi, eax
dec edi
cmp ebx, edi
jne 0x43fa42
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
mov eax, dword [ebp + 0x22]
mov dword [esp + 0xb0], eax
mov ebx, dword [0x7c2420]
cmp ebx, 4
jne 0x43fa29
mov ebx, dword [esp + 0x8c]
add ebx, dword [0x7c1a68]
add ebx, 0xfffffffc
mov dword [esp + 0xb4], ebx
jmp 0x43fa40
mov ebx, dword [esp + 0x8c]
add ebx, dword [0x7c1a68]
add ebx, 0xfffffffe
mov dword [esp + 0xb4], ebx
jmp 0x43fa5e
mov eax, dword [esp + 0xb8]
mov dword [esp + 0xb0], eax
mov eax, dword [esp + 0xbc]
mov dword [esp + 0xb4], eax
mov ebx, dword [esp + 0xb0]
add ebx, dword [esp + 0xa4]
mov dword [esp + 0xb8], ebx
mov eax, dword [esp + 0xb4]
mov dword [esp + 0xbc], eax
push dword [esp + 0x94]
call fcn.005a9fd9
mov ebp, dword [esp + 0x98]
mov eax, dword [ebp + 8]
mov dword [esp + 0xc0], eax
push dword [esp + 0x94]
call fcn.005aa165
and eax, eax
je 0x43fac1
mov ebp, dword [esp + 0x98]
mov eax, dword [ebp + 8]
mov dword [esp + 0xc0], eax
jmp 0x43facc
mov dword [esp + 0xc0], 0xffffffff
push dword [esp + 0x94]
call fcn.005a9f9f
mov ebp, dword [esp + 0x98]
push dword [ebp + 8]
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x45]
call fcn.005a9e1f
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
cmp byte [ebp + 9], 0
je 0x43fb0a
jmp 0x4401ff
push 1
call fcn.0059f6ca
push 0xff
push 0xff
push 0xff
call fcn.0059f89e
push eax
push dword [esp + 0xa4]
push dword [esp + 0xac]
push dword [esp + 0xc0]
push dword [esp + 0xc0]
call fcn.0059f8b3
push 4
call fcn.0059f6ca
push 0xc8
push 0xc8
push 0xc8
call fcn.0059f89e
push eax
push dword [esp + 0xa4]
push dword [esp + 0xac]
push dword [esp + 0xc0]
push dword [esp + 0xc0]
call fcn.0059f8b3
push 1
call fcn.0059f6ca
mov ebp, dword [esp + 0x98]
push dword [ebp + 8]
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x45]
call fcn.005a9e1f
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
movsx ebx, byte [ebp + 8]
inc ebx
mov dword [esp + 0x9c], ebx
mov eax, dword [esp + 0xb4]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc8], 0
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
lea eax, [ebp + 8]
mov dword [esp + 0xcc], eax
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x45]
call fcn.005a9d4f
mov dword [esp + 0xa8], eax
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
lea eax, [ebp + 8]
mov ebx, eax
cmp ebx, dword [esp + 0xc0]
jne 0x43fc5e
mov eax, dword [esp + 0xc4]
mov dword [esp + 0xbc], eax
cmp dword [esp + 0xa8], 0
je 0x43fc44
xor eax, eax
jmp 0x43fc49
mov eax, 1
and eax, eax
je 0x43fc5e
mov ebx, dword [esp + 0xbc]
add ebx, 0xffffffec
mov dword [esp + 0xbc], ebx
cmp dword [esp + 0xa8], 0
je 0x440097
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
movsx ebx, byte [ebp + 8]
cmp ebx, dword [esp + 0x9c]
jne 0x440095
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
cmp byte [ebp + 9], 0
je 0x43fd4c
push 0xc8
push 0xc8
push 0xc8
call fcn.0059f89e
push eax
push 1
push dword [esp + 0xac]
mov ebx, dword [esp + 0xd0]
add ebx, 6
push ebx
push dword [esp + 0xc0]
call fcn.0059f824
push dword [esp + 0xb0]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
pop eax
mov dword [ebp + 0x22], eax
mov ebx, dword [esp + 0xb0]
add ebx, dword [esp + 0xa4]
push ebx
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
pop eax
mov dword [ebp + 0x26], eax
push dword [esp + 0xc4]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
pop eax
mov dword [ebp + 0x2a], eax
mov ebx, dword [esp + 0xc4]
add ebx, 0xc
push ebx
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
pop eax
mov dword [ebp + 0x2e], eax
add dword [esp + 0xc4], 0xc
jmp 0x43ffee
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
lea eax, [ebp + 0x16]
push dword [eax + 4]
push dword [eax]
pop ebx
pop edi
cmp ebx, 0
jne 0x43fd70
cmp edi, 0
jne 0x43fd70
xor eax, eax
jmp 0x43fd75
mov eax, 1
or eax, eax
je 0x43fe22
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
mov eax, dword [ebp + 0x16]
push eax
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x35]
call fcn.005a9e1f
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x39]
push dword [ebp + 0xc]
call fcn.00536de7
mov dword [esp + 0x30], eax
push dword [esp + 0x30]
call fcn.005a8f7f
and eax, eax
je 0x43fe22
push dword [esp + 0x30]
call fcn.005a92e3
mov ebx, eax
cmp ebx, 0x20
jne 0x43fddf
push 0x11
call fcn.0059f6ca
jmp 0x43fde9
push 1
call fcn.0059f6ca
push 0x10
push 0x10
mov ebx, dword [esp + 0xcc]
add ebx, 2
push ebx
mov ebx, dword [esp + 0xbc]
add ebx, 3
push ebx
push dword [esp + 0x40]
call fcn.005a8f63
push eax
call fcn.005a02a4
push 1
call fcn.0059f6ca
push 0
push 0
push 0
call fcn.0059f89e
push eax
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
push dword [ebp + 0xe]
push dword [esp + 0xcc]
mov ebx, dword [esp + 0xbc]
add ebx, 0x18
push ebx
call fcn.0059fa75
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
mov edx, dword [ebp + 0x12]
xor ecx, ecx
call fcn.0054d570
jne 0x43fecd
push 0
push 0
push 0
call fcn.0059f89e
push eax
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
push dword [ebp + 0x12]
push dword [esp + 0xcc]
mov ebx, dword [esp + 0xbc]
add ebx, dword [esp + 0xb0]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
push dword [ebp + 0x12]
call fcn.0059f711
sub ebx, eax
add ebx, 0xfffffff6
push ebx
call fcn.0059fa75
push dword [esp + 0xb0]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
pop eax
mov dword [ebp + 0x22], eax
mov ebx, dword [esp + 0xb0]
add ebx, dword [esp + 0xa4]
push ebx
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
pop eax
mov dword [ebp + 0x26], eax
push dword [esp + 0xc4]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
pop eax
mov dword [ebp + 0x2a], eax
mov ebx, dword [esp + 0xc4]
add ebx, 0x14
push ebx
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
pop eax
mov dword [ebp + 0x2e], eax
mov dword [esp + 0xd0], 0
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x45]
call fcn.005a9fd9
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x45]
call fcn.005a9d4f
and eax, eax
je 0x43ff8a
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
movsx ebx, byte [ebp + 8]
cmp ebx, dword [esp + 0x9c]
jle 0x43ff8a
mov dword [esp + 0xd0], 1
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x45]
call fcn.005a9f9f
cmp dword [esp + 0xd0], 0
je 0x43ffe6
push 0x11
call fcn.0059f6ca
mov ebx, dword [esp + 0xc4]
add ebx, 4
push ebx
mov ebx, dword [esp + 0xb4]
add ebx, dword [esp + 0xa8]
add ebx, 0xffffffec
push ebx
push 0x8b
call fcn.005a8f63
push eax
call fcn.0059fa48
push 1
call fcn.0059f6ca
add dword [esp + 0xc4], 0x14
mov ebx, dword [0x7c1b68]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
lea eax, [ebp + 8]
cmp ebx, eax
jne 0x440095
push 4
call fcn.0059f6ca
push 0
push 0
push 0
call fcn.0059f89e
push eax
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
mov ebx, dword [ebp + 0x2e]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
sub ebx, dword [ebp + 0x2a]
push ebx
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
mov ebx, dword [ebp + 0x26]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
sub ebx, dword [ebp + 0x22]
push ebx
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
push dword [ebp + 0x2a]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
push dword [ebp + 0x22]
call fcn.0059f8b3
push 1
call fcn.0059f6ca
jmp 0x440099
jmp 0x4400bd
inc dword [esp + 0xc8]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
movsx ebx, byte [ebp + 8]
cmp ebx, dword [esp + 0x9c]
jge 0x43fbe0
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x4d]
call fcn.005a9c9c
push dword [esp + 0xb0]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x51]
pop eax
mov dword [ebp + 0xd], eax
mov ebx, dword [esp + 0xb0]
add ebx, dword [esp + 0xa4]
push ebx
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x51]
pop eax
mov dword [ebp + 0x15], eax
push dword [esp + 0xc4]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x51]
pop eax
mov dword [ebp + 0x11], eax
mov ebx, dword [esp + 0xc4]
add ebx, 0x14
push ebx
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x51]
pop eax
mov dword [ebp + 0x19], eax
push dword [esp + 0x94]
call fcn.005a9e97
mov ebx, eax
push dword [esp + 0x94]
call fcn.005a9ea1
sub ebx, eax
push ebx
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x51]
pop eax
mov byte [ebp + 0xc], al
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
movsx ebx, byte [ebp + 8]
and ebx, ebx
jle 0x440189
mov ebx, dword [esp + 0xc8]
and ebx, ebx
jne 0x440189
mov eax, 1
jmp 0x44018b
xor eax, eax
and eax, eax
je 0x4401a0
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x45]
call fcn.005aa165
push dword [esp + 0xcc]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x51]
pop eax
mov dword [ebp + 8], eax
push 0
push 0
push 0
call fcn.0059f89e
push eax
mov eax, str.Add_Item...
push eax
push dword [esp + 0xcc]
mov ebx, dword [esp + 0xbc]
add ebx, 5
push ebx
call fcn.0059fa75
push dword [esp + 0x94]
call fcn.005aa165
mov ebx, eax
and ebx, ebx
jne 0x43f83c
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x45]
call fcn.005a9e97
and eax, eax
je 0x440870
mov dword [esp + 0x9c], 0
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x45]
call fcn.005aa073
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
mov eax, dword [ebp + 0x2e]
mov dword [esp + 0xd4], eax
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x45]
call fcn.005a9d3a
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x45]
call fcn.005a9d4f
or eax, eax
je 0x440870
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x45]
call fcn.005a9ea1
mov ebx, eax
and ebx, ebx
jne 0x4402a9
mov ebx, dword [0x7c20a8]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
cmp ebx, dword [ebp + 0x22]
jg 0x4402a9
mov eax, 1
jmp 0x4402ab
xor eax, eax
and eax, eax
je 0x4402cd
mov ebx, dword [0x7c20ac]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
cmp ebx, dword [ebp + 0x2a]
jl 0x4402cd
mov eax, 1
jmp 0x4402cf
xor eax, eax
and eax, eax
je 0x4402f1
mov ebx, dword [0x7c20ac]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
cmp ebx, dword [ebp + 0x2e]
jge 0x4402f1
mov eax, 1
jmp 0x4402f3
xor eax, eax
and eax, eax
je 0x440381
push 0xff
push 0
push 0
call fcn.0059f89e
push eax
push 0x10
push 1
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
push dword [ebp + 0x2a]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
mov ebx, dword [ebp + 0x22]
dec ebx
push ebx
call fcn.0059f824
push 0xff
push 0
push 0
call fcn.0059f89e
push eax
push 0x10
push 1
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
push dword [ebp + 0x2a]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
push dword [ebp + 0x22]
call fcn.0059f824
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
movsx ebx, byte [ebp + 8]
cmp ebx, dword [esp + 0x9c]
jle 0x4403bb
mov ebx, dword [0x7c20ac]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
mov edi, dword [ebp + 0x2a]
dec edi
cmp ebx, edi
jl 0x4403bb
mov eax, 1
jmp 0x4403bd
xor eax, eax
and eax, eax
je 0x4403e2
mov ebx, dword [0x7c20ac]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
mov edi, dword [ebp + 0x2a]
inc edi
cmp ebx, edi
jge 0x4403e2
mov eax, 1
jmp 0x4403e4
xor eax, eax
and eax, eax
je 0x440406
mov ebx, dword [0x7c20a8]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
cmp ebx, dword [ebp + 0x22]
jle 0x440406
mov eax, 1
jmp 0x440408
xor eax, eax
and eax, eax
je 0x44042a
mov ebx, dword [0x7c20a8]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
cmp ebx, dword [ebp + 0x26]
jg 0x44042a
mov eax, 1
jmp 0x44042c
xor eax, eax
and eax, eax
je 0x4404ee
push 0xff
push 0
push 0
call fcn.0059f89e
push eax
push 1
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
mov ebx, dword [ebp + 0x26]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
sub ebx, dword [ebp + 0x22]
push ebx
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
mov ebx, dword [ebp + 0x2a]
dec ebx
push ebx
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
push dword [ebp + 0x22]
call fcn.0059f824
push 0xff
push 0
push 0
call fcn.0059f89e
push eax
push 1
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
mov ebx, dword [ebp + 0x26]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
sub ebx, dword [ebp + 0x22]
push ebx
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
push dword [ebp + 0x2a]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
push dword [ebp + 0x22]
call fcn.0059f824
mov ebx, dword [0x7c20a8]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
cmp ebx, dword [ebp + 0x22]
jle 0x440523
mov ebx, dword [0x7c20a8]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
cmp ebx, dword [ebp + 0x26]
jg 0x440523
mov eax, 1
jmp 0x440525
xor eax, eax
and eax, eax
je 0x44054a
mov ebx, dword [0x7c20ac]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
mov edi, dword [ebp + 0x2a]
inc edi
cmp ebx, edi
jle 0x44054a
mov eax, 1
jmp 0x44054c
xor eax, eax
and eax, eax
je 0x44056e
mov ebx, dword [0x7c20ac]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
cmp ebx, dword [ebp + 0x2e]
jg 0x44056e
mov eax, 1
jmp 0x440570
xor eax, eax
and eax, eax
je 0x4406d5
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
movsx ebx, byte [ebp + 8]
and ebx, ebx
jne 0x44061b
push 0xff
push 0
push 0
call fcn.0059f89e
push eax
push 0x10
push 1
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
push dword [ebp + 0x2a]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
push dword [ebp + 0x26]
call fcn.0059f824
push 0xff
push 0
push 0
call fcn.0059f89e
push eax
push 0x10
push 1
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
push dword [ebp + 0x2a]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
mov ebx, dword [ebp + 0x26]
inc ebx
push ebx
call fcn.0059f824
jmp 0x4406d5
push 0xff
push 0
push 0
call fcn.0059f89e
push eax
push 1
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
mov ebx, dword [ebp + 0x26]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
sub ebx, dword [ebp + 0x22]
push ebx
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
push dword [ebp + 0x2e]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
push dword [ebp + 0x22]
call fcn.0059f824
push 0xff
push 0
push 0
call fcn.0059f89e
push eax
push 1
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
mov ebx, dword [ebp + 0x26]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
sub ebx, dword [ebp + 0x22]
push ebx
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
mov ebx, dword [ebp + 0x2e]
inc ebx
push ebx
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
push dword [ebp + 0x22]
call fcn.0059f824
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
lea eax, [ebp + 8]
mov ebx, eax
cmp ebx, dword [0x7c1b68]
jne 0x440854
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
movsx eax, byte [ebp + 8]
mov dword [esp + 0xd8], eax
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x45]
call fcn.005a9fd9
mov dword [esp + 0xdc], 0
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x45]
call fcn.005a9d4f
and eax, eax
je 0x44076f
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
movsx ebx, byte [ebp + 8]
cmp ebx, dword [esp + 0xd8]
jg 0x44076f
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x45]
call fcn.005aa165
mov dword [esp + 0xdc], 1
cmp dword [esp + 0xdc], 0
je 0x440797
mov ebx, dword [0x7c20a8]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
cmp ebx, dword [ebp + 0x26]
jle 0x440797
mov eax, 1
jmp 0x440799
xor eax, eax
and eax, eax
je 0x4407b3
mov ebx, dword [0x7c20ac]
cmp ebx, dword [esp + 0xd4]
jle 0x4407b3
mov eax, 1
jmp 0x4407b5
xor eax, eax
and eax, eax
je 0x440843
push 0xff
push 0
push 0
call fcn.0059f89e
push eax
push 1
push 0x64
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
push dword [ebp + 0x2a]
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
push dword [ebp + 0x26]
call fcn.0059f824
push 0xff
push 0
push 0
call fcn.0059f89e
push eax
push 1
push 0x64
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
mov ebx, dword [ebp + 0x2a]
inc ebx
push ebx
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
push dword [ebp + 0x26]
call fcn.0059f824
mov ebp, dword [0x7c345c]
add ebp, 8
push dword [ebp + 0x45]
call fcn.005a9f9f
mov ebp, dword [0x7c345c]
add ebp, 8
mov ebp, dword [ebp + 0x49]
movsx eax, byte [ebp + 8]
mov dword [esp + 0x9c], eax
jmp 0x44025b
call fcn.0059f7dc
push 0x14
call fcn.005860b6
push eax
call fcn.0059f665
and eax, eax
je 0x4408b2
push 1
call fcn.0059f6ca
push 0
push 0
push 0xad
call fcn.005a8f63
push eax
call fcn.0059fa48
call fcn.0059f7dc
call fcn.005954fa
push edx
push eax
lea eax, [esp + 8]
mov edx, dword [eax]
sub dword [esp], edx
mov edx, dword [eax + 4]
sbb dword [esp + 4], edx
pop dword [esp + 0xe4]
pop dword [esp + 0xe4]
push dword [esp + 0xe4]
push dword [esp + 0xe4]
pop ebx
pop edi
cmp edi, 0
jl 0x4408f7
jg 0x4408f3
cmp ebx, 0x23
jb 0x4408f7
xor eax, eax
jmp 0x4408fc
mov eax, 1
or eax, eax
je 0x44090a
push 0xf
call fcn.0059559b
xor eax, eax
push eax
push dword [esp + 0x98]
call fcn.005aa00a
pop eax
add esp, 0xe8
pop edi
pop ebx
pop ebp
ret