Function at 0x415750
Capabilities:
Encode data using base64
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4e511e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x2dc
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
mov edi, ecx
mov dword [edi + 0xa8], eax
xor ebx, ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
xor ecx, ecx
mov dword [ebp + 8], ecx
mov dword [ebp - 0x14], ecx
mov dword [ebp - 4], 2
mov dword [ebp - 0x30], ecx
push 1
add eax, 0x2ad38
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x30]
call fcn.004baa70
xor eax, eax
lea ecx, [ebp - 0x30]
mov word [edi + 0xb0], ax
lea eax, [ebp - 0x2c]
push str.year
push eax
call fcn.004bb2b0
mov esi, eax
mov ecx, dword [esi]
test ecx, ecx
je 0x4157de
mov ebx, ecx
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 4], 5
mov ecx, dword [ebx]
push ebx
call dword [ecx + 4]
mov dword [ebp - 0x18], ebx
mov esi, dword [esi + 4]
test esi, esi
je 0x4157f5
mov dword [ebp + 8], esi
mov byte [ebp - 4], 7
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov dword [ebp - 0x14], esi
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x28]
test ecx, ecx
je 0x415806
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x2c]
test ecx, ecx
je 0x415817
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 4
test ebx, ebx
je 0x41583f
push 0x4fd990
lea ecx, [ebp - 0x18]
call fcn.004b8fd0
mov ebx, dword [ebp - 0x18]
mov word [edi + 0xb0], ax
mov eax, dword [ebp - 0x14]
mov dword [ebp + 8], eax
mov dword [ebp - 0x1c], ebx
xor eax, eax
lea ecx, [ebp - 0x30]
mov dword [edi + 0xac], eax
lea eax, [ebp - 0x24]
push str.week
push eax
call fcn.004bb2b0
mov dword [ebp - 0x28], eax
mov esi, dword [eax]
cmp ebx, esi
je 0x415887
mov byte [ebp - 4], 0xb
test esi, esi
je 0x41586f
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov ecx, ebx
mov ebx, esi
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
mov byte [ebp - 4], 0xc
test ecx, ecx
je 0x415887
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov esi, dword [ebp - 0x28]
mov eax, dword [ebp + 8]
mov esi, dword [esi + 4]
cmp eax, esi
je 0x4158bd
mov byte [ebp - 4], 0xd
test esi, esi
je 0x4158a5
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov eax, dword [ebp + 8]
mov ecx, eax
mov eax, esi
mov dword [ebp + 8], eax
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xe
test ecx, ecx
je 0x4158bd
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x4158ce
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x24]
test ecx, ecx
je 0x4158df
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 4
test ebx, ebx
je 0x41591b
push 0x4fd990
lea ecx, [ebp - 0x18]
call fcn.004b8fd0
push 0x4fd998
lea ecx, [ebp - 0x18]
mov word [edi + 0xac], ax
call fcn.004b8fd0
mov ebx, dword [ebp - 0x18]
mov word [edi + 0xae], ax
mov eax, dword [ebp - 0x14]
mov dword [ebp + 8], eax
mov dword [ebp - 0x1c], ebx
push str.cars
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x30]
call fcn.004bb2b0
mov dword [ebp - 0x28], eax
mov esi, dword [eax]
cmp ebx, esi
je 0x41595b
mov byte [ebp - 4], 0x11
test esi, esi
je 0x415943
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov ecx, ebx
mov ebx, esi
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
mov byte [ebp - 4], 0x12
test ecx, ecx
je 0x41595b
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov esi, dword [ebp - 0x28]
mov eax, dword [ebp + 8]
mov esi, dword [esi + 4]
cmp eax, esi
je 0x41598f
mov byte [ebp - 4], 0x13
test esi, esi
je 0x415979
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov eax, dword [ebp + 8]
mov ecx, eax
mov dword [ebp + 8], esi
mov dword [ebp - 0x14], esi
mov byte [ebp - 4], 0x14
test ecx, ecx
je 0x41598f
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x4159a0
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x24]
test ecx, ecx
je 0x4159b1
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
push 0
push 0xffffffffffffffff
mov byte [ebp - 4], 4
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push 0x186
push dword [edi + 0xd8]
mov dword [ebp - 0x34], 0
call esi
test ebx, ebx
je 0x4159f3
push 0x4fd990
lea ecx, [ebp - 0x18]
call fcn.004b8fd0
mov ebx, dword [ebp - 0x18]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp + 8], eax
mov dword [ebp - 0x1c], ebx
push 0
push 0
push 0x18b
push dword [edi + 0xd8]
call esi
test eax, eax
jle 0x415a4a
xor ebx, ebx
nop word [eax + eax]
mov ecx, ebx
mov eax, 1
shl eax, cl
and eax, dword [ebp - 0x34]
neg eax
push ebx
sbb eax, eax
neg eax
push eax
push 0x185
push dword [edi + 0xd8]
call esi
push 0
push 0
push 0x18b
push dword [edi + 0xd8]
inc ebx
call esi
cmp ebx, eax
jl 0x415a10
mov ebx, dword [ebp - 0x1c]
push str.radiosets
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x30]
call fcn.004bb2b0
mov dword [ebp - 0x28], eax
mov esi, dword [eax]
cmp ebx, esi
je 0x415a8a
mov byte [ebp - 4], 0x17
test esi, esi
je 0x415a72
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov ecx, ebx
mov ebx, esi
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
mov byte [ebp - 4], 0x18
test ecx, ecx
je 0x415a8a
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov esi, dword [ebp - 0x28]
mov eax, dword [ebp + 8]
mov esi, dword [esi + 4]
cmp eax, esi
je 0x415abe
mov byte [ebp - 4], 0x19
test esi, esi
je 0x415aa8
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov eax, dword [ebp + 8]
mov ecx, eax
mov dword [ebp + 8], esi
mov dword [ebp - 0x14], esi
mov byte [ebp - 4], 0x1a
test ecx, ecx
je 0x415abe
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 0x1b
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x415acf
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x24]
test ecx, ecx
je 0x415ae0
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
push 0
push 0xffffffffffffffff
mov byte [ebp - 4], 4
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push 0x186
push dword [edi + 0x158]
mov dword [ebp - 0x34], 0
call esi
test ebx, ebx
je 0x415b22
push 0x4fd990
lea ecx, [ebp - 0x18]
call fcn.004b8fd0
mov ebx, dword [ebp - 0x18]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp + 8], eax
mov dword [ebp - 0x1c], ebx
push 0
push 0
push 0x18b
push dword [edi + 0x158]
call esi
test eax, eax
jle 0x415b7a
xor ebx, ebx
nop dword [eax]
mov ecx, ebx
mov eax, 1
shl eax, cl
and eax, dword [ebp - 0x34]
neg eax
push ebx
sbb eax, eax
neg eax
push eax
push 0x185
push dword [edi + 0x158]
call esi
push 0
push 0
push 0x18b
push dword [edi + 0x158]
inc ebx
call esi
cmp ebx, eax
jl 0x415b40
mov ebx, dword [ebp - 0x1c]
push str.businessspend2014
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x30]
call fcn.004bb2b0
mov dword [ebp - 0x28], eax
mov esi, dword [eax]
cmp ebx, esi
je 0x415bba
mov byte [ebp - 4], 0x1d
test esi, esi
je 0x415ba2
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov ecx, ebx
mov ebx, esi
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
mov byte [ebp - 4], 0x1e
test ecx, ecx
je 0x415bba
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov esi, dword [ebp - 0x28]
mov eax, dword [ebp + 8]
mov esi, dword [esi + 4]
cmp eax, esi
je 0x415bee
mov byte [ebp - 4], 0x1f
test esi, esi
je 0x415bd8
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov eax, dword [ebp + 8]
mov ecx, eax
mov dword [ebp + 8], esi
mov dword [ebp - 0x14], esi
mov byte [ebp - 4], 0x20
test ecx, ecx
je 0x415bee
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 0x21
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x415bff
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 0x22
mov ecx, dword [ebp - 0x24]
test ecx, ecx
je 0x415c10
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
push 0
push 0xffffffffffffffff
mov byte [ebp - 4], 4
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push 0x186
push dword [edi + 0x1d8]
mov dword [ebp - 0x34], 0
call esi
test ebx, ebx
je 0x415c52
push 0x4fd990
lea ecx, [ebp - 0x18]
call fcn.004b8fd0
mov ebx, dword [ebp - 0x18]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp + 8], eax
mov dword [ebp - 0x1c], ebx
push 0
push 0
push 0x18b
push dword [edi + 0x1d8]
call esi
test eax, eax
jle 0x415caa
xor ebx, ebx
nop dword [eax]
mov ecx, ebx
mov eax, 1
shl eax, cl
and eax, dword [ebp - 0x34]
neg eax
push ebx
sbb eax, eax
neg eax
push eax
push 0x185
push dword [edi + 0x1d8]
call esi
push 0
push 0
push 0x18b
push dword [edi + 0x1d8]
inc ebx
call esi
cmp ebx, eax
jl 0x415c70
mov ebx, dword [ebp - 0x1c]
push str.businessinfluence
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x30]
call fcn.004bb2b0
mov dword [ebp - 0x28], eax
mov esi, dword [eax]
cmp ebx, esi
je 0x415cea
mov byte [ebp - 4], 0x23
test esi, esi
je 0x415cd2
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov ecx, ebx
mov ebx, esi
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
mov byte [ebp - 4], 0x24
test ecx, ecx
je 0x415cea
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov esi, dword [ebp - 0x28]
mov eax, dword [ebp + 8]
mov esi, dword [esi + 4]
cmp eax, esi
je 0x415d1e
mov byte [ebp - 4], 0x25
test esi, esi
je 0x415d08
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov eax, dword [ebp + 8]
mov ecx, eax
mov dword [ebp + 8], esi
mov dword [ebp - 0x14], esi
mov byte [ebp - 4], 0x26
test ecx, ecx
je 0x415d1e
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 0x27
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x415d2f
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 0x28
mov ecx, dword [ebp - 0x24]
test ecx, ecx
je 0x415d40
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
push 0
push 0xffffffffffffffff
mov byte [ebp - 4], 4
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push 0x186
push dword [edi + 0x258]
mov dword [ebp - 0x34], 0
call esi
test ebx, ebx
je 0x415d82
push 0x4fd990
lea ecx, [ebp - 0x18]
call fcn.004b8fd0
mov ebx, dword [ebp - 0x18]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp + 8], eax
mov dword [ebp - 0x1c], ebx
push 0
push 0
push 0x18b
push dword [edi + 0x258]
call esi
test eax, eax
jle 0x415dda
xor ebx, ebx
nop dword [eax]
mov ecx, ebx
mov eax, 1
shl eax, cl
and eax, dword [ebp - 0x34]
neg eax
push ebx
sbb eax, eax
neg eax
push eax
push 0x185
push dword [edi + 0x258]
call esi
push 0
push 0
push 0x18b
push dword [edi + 0x258]
inc ebx
call esi
cmp ebx, eax
jl 0x415da0
mov ebx, dword [ebp - 0x1c]
push str.mosaicuk6
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x30]
call fcn.004bb2b0
mov dword [ebp - 0x28], eax
mov esi, dword [eax]
cmp ebx, esi
je 0x415e1a
mov byte [ebp - 4], 0x29
test esi, esi
je 0x415e02
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov ecx, ebx
mov ebx, esi
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
mov byte [ebp - 4], 0x2a
test ecx, ecx
je 0x415e1a
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov esi, dword [ebp - 0x28]
mov eax, dword [ebp + 8]
mov esi, dword [esi + 4]
cmp eax, esi
je 0x415e4e
mov byte [ebp - 4], 0x2b
test esi, esi
je 0x415e38
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov eax, dword [ebp + 8]
mov ecx, eax
mov dword [ebp + 8], esi
mov dword [ebp - 0x14], esi
mov byte [ebp - 4], 0x2c
test ecx, ecx
je 0x415e4e
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 0x2d
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x415e5f
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 0x2e
mov ecx, dword [ebp - 0x24]
test ecx, ecx
je 0x415e70
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
push 0
push 0xffffffffffffffff
mov byte [ebp - 4], 4
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push 0x186
push dword [edi + 0x2d8]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x28], 0
call esi
test ebx, ebx
je 0x415ee0
push 0x4fd990
lea ecx, [ebp - 0x18]
call fcn.004b8fd0
push 0x4fd998
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x34], eax
call fcn.004b8fd0
push 0x4fdf60
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x20], eax
call fcn.004b8fd0
mov ebx, dword [ebp - 0x18]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp + 8], eax
mov dword [ebp - 0x1c], ebx
push 0
push 0
push 0x18b
push dword [edi + 0x2d8]
call esi
test eax, eax
jle 0x415f62
xor ebx, ebx
mov eax, 1
push ebx
cmp ebx, 0x20
jge 0x415f1d
mov ecx, ebx
shl eax, cl
and eax, dword [ebp - 0x34]
neg eax
sbb eax, eax
neg eax
push eax
push 0x185
push dword [edi + 0x2d8]
jmp 0x415f47
mov edx, dword [edi + 0x2d8]
lea ecx, [ebx - 0x40]
cmp ebx, 0x40
jge 0x415f35
add ecx, 0x20
shl eax, cl
and eax, dword [ebp - 0x20]
jmp 0x415f3a
shl eax, cl
and eax, dword [ebp - 0x28]
neg eax
sbb eax, eax
neg eax
push eax
push 0x185
push edx
call esi
push 0
push 0
push 0x18b
push dword [edi + 0x2d8]
inc ebx
call esi
cmp ebx, eax
jl 0x415ef7
mov ebx, dword [ebp - 0x1c]
push str.scottishmosaic14
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x30]
call fcn.004bb2b0
mov dword [ebp - 0x28], eax
mov esi, dword [eax]
cmp ebx, esi
je 0x415fa2
mov byte [ebp - 4], 0x2f
test esi, esi
je 0x415f8a
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov ecx, ebx
mov ebx, esi
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
mov byte [ebp - 4], 0x30
test ecx, ecx
je 0x415fa2
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov esi, dword [ebp - 0x28]
mov eax, dword [ebp + 8]
mov esi, dword [esi + 4]
cmp eax, esi
je 0x415fd6
mov byte [ebp - 4], 0x31
test esi, esi
je 0x415fc0
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov eax, dword [ebp + 8]
mov ecx, eax
mov dword [ebp + 8], esi
mov dword [ebp - 0x14], esi
mov byte [ebp - 4], 0x32
test ecx, ecx
je 0x415fd6
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 0x33
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x415fe7
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 0x34
mov ecx, dword [ebp - 0x24]
test ecx, ecx
je 0x415ff8
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
push 0
push 0xffffffffffffffff
mov byte [ebp - 4], 4
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push 0x186
push dword [edi + 0x358]
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x20], 0
call esi
test ebx, ebx
je 0x416051
push 0x4fd990
lea ecx, [ebp - 0x18]
call fcn.004b8fd0
push 0x4fd998
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x28], eax
call fcn.004b8fd0
mov ebx, dword [ebp - 0x18]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp + 8], eax
mov dword [ebp - 0x1c], ebx
push 0
push 0
push 0x18b
push dword [edi + 0x358]
call esi
test eax, eax
jle 0x4160ba
xor ebx, ebx
nop dword [eax + eax]
mov edx, dword [edi + 0x358]
mov eax, 1
push ebx
cmp ebx, 0x20
jge 0x41608a
mov ecx, ebx
shl eax, cl
and eax, dword [ebp - 0x28]
jmp 0x416092
lea ecx, [ebx - 0x20]
shl eax, cl
and eax, dword [ebp - 0x20]
neg eax
sbb eax, eax
neg eax
push eax
push 0x185
push edx
call esi
push 0
push 0
push 0x18b
push dword [edi + 0x358]
inc ebx
call esi
cmp ebx, eax
jl 0x416070
mov ebx, dword [ebp - 0x1c]
push str.acorn
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x30]
call fcn.004bb2b0
mov dword [ebp - 0x28], eax
mov esi, dword [eax]
cmp ebx, esi
je 0x4160fa
mov byte [ebp - 4], 0x35
test esi, esi
je 0x4160e2
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov ecx, ebx
mov ebx, esi
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
mov byte [ebp - 4], 0x36
test ecx, ecx
je 0x4160fa
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov esi, dword [ebp - 0x28]
mov eax, dword [ebp + 8]
mov esi, dword [esi + 4]
cmp eax, esi
je 0x41612e
mov byte [ebp - 4], 0x37
test esi, esi
je 0x416118
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov eax, dword [ebp + 8]
mov ecx, eax
mov dword [ebp + 8], esi
mov dword [ebp - 0x14], esi
mov byte [ebp - 4], 0x38
test ecx, ecx
je 0x41612e
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 0x39
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x41613f
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 0x3a
mov ecx, dword [ebp - 0x24]
test ecx, ecx
je 0x416150
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
push 0
push 0xffffffffffffffff
mov byte [ebp - 4], 4
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push 0x186
push dword [edi + 0x3d8]
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x20], 0
call esi
test ebx, ebx
je 0x4161a9
push 0x4fd990
lea ecx, [ebp - 0x18]
call fcn.004b8fd0
push 0x4fd998
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x28], eax
call fcn.004b8fd0
mov ebx, dword [ebp - 0x18]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp + 8], eax
mov dword [ebp - 0x1c], ebx
push 0
push 0
push 0x18b
push dword [edi + 0x3d8]
call esi
test eax, eax
jle 0x41620a
xor ebx, ebx
mov edx, dword [edi + 0x3d8]
mov eax, 1
push ebx
cmp ebx, 0x20
jge 0x4161da
mov ecx, ebx
shl eax, cl
and eax, dword [ebp - 0x28]
jmp 0x4161e2
lea ecx, [ebx - 0x20]
shl eax, cl
and eax, dword [ebp - 0x20]
neg eax
sbb eax, eax
neg eax
push eax
push 0x185
push edx
call esi
push 0
push 0
push 0x18b
push dword [edi + 0x3d8]
inc ebx
call esi
cmp ebx, eax
jl 0x4161c0
mov ebx, dword [ebp - 0x1c]
push str.cinema45custom
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x30]
call fcn.004bb2b0
mov dword [ebp - 0x28], eax
mov esi, dword [eax]
cmp ebx, esi
je 0x41624a
mov byte [ebp - 4], 0x3b
test esi, esi
je 0x416232
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov ecx, ebx
mov ebx, esi
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
mov byte [ebp - 4], 0x3c
test ecx, ecx
je 0x41624a
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov esi, dword [ebp - 0x28]
mov eax, dword [ebp + 8]
mov esi, dword [esi + 4]
cmp eax, esi
je 0x41627e
mov byte [ebp - 4], 0x3d
test esi, esi
je 0x416268
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov eax, dword [ebp + 8]
mov ecx, eax
mov dword [ebp + 8], esi
mov dword [ebp - 0x14], esi
mov byte [ebp - 4], 0x3e
test ecx, ecx
je 0x41627e
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 0x3f
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x41628f
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 0x40
mov ecx, dword [ebp - 0x24]
test ecx, ecx
je 0x4162a0
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
push 0
push 0xffffffffffffffff
mov byte [ebp - 4], 4
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push 0x186
push dword [edi + 0x458]
mov dword [ebp - 0x28], 0
call esi
test ebx, ebx
je 0x4162e2
push 0x4fd990
lea ecx, [ebp - 0x18]
call fcn.004b8fd0
mov ebx, dword [ebp - 0x18]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp + 8], eax
mov dword [ebp - 0x1c], ebx
push 0
push 0
push 0x18b
push dword [edi + 0x458]
call esi
test eax, eax
jle 0x41633a
xor ebx, ebx
nop dword [eax]
mov ecx, ebx
mov eax, 1
shl eax, cl
and eax, dword [ebp - 0x28]
neg eax
push ebx
sbb eax, eax
neg eax
push eax
push 0x185
push dword [edi + 0x458]
call esi
push 0
push 0
push 0x18b
push dword [edi + 0x458]
inc ebx
call esi
cmp ebx, eax
jl 0x416300
mov ebx, dword [ebp - 0x1c]
push str.havedisability
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x30]
call fcn.004bb2b0
mov dword [ebp - 0x28], eax
mov esi, dword [eax]
cmp ebx, esi
je 0x41637a
mov byte [ebp - 4], 0x41
test esi, esi
je 0x416362
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov ecx, ebx
mov ebx, esi
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
mov byte [ebp - 4], 0x42
test ecx, ecx
je 0x41637a
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov esi, dword [ebp - 0x28]
mov eax, dword [ebp + 8]
mov esi, dword [esi + 4]
cmp eax, esi
je 0x4163ae
mov byte [ebp - 4], 0x43
test esi, esi
je 0x416398
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov eax, dword [ebp + 8]
mov ecx, eax
mov dword [ebp + 8], esi
mov dword [ebp - 0x14], esi
mov byte [ebp - 4], 0x44
test ecx, ecx
je 0x4163ae
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 0x45
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x4163bf
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 0x46
mov ecx, dword [ebp - 0x24]
test ecx, ecx
je 0x4163d0
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
push 0
push 0xffffffffffffffff
mov byte [ebp - 4], 4
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push 0x186
push dword [edi + 0x4d8]
mov dword [ebp - 0x28], 0
call esi
test ebx, ebx
je 0x416412
push 0x4fd990
lea ecx, [ebp - 0x18]
call fcn.004b8fd0
mov ebx, dword [ebp - 0x18]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp + 8], eax
mov dword [ebp - 0x1c], ebx
push 0
push 0
push 0x18b
push dword [edi + 0x4d8]
call esi
test eax, eax
jle 0x41646a
xor ebx, ebx
nop dword [eax]
mov ecx, ebx
mov eax, 1
shl eax, cl
and eax, dword [ebp - 0x28]
neg eax
push ebx
sbb eax, eax
neg eax
push eax
push 0x185
push dword [edi + 0x4d8]
call esi
push 0
push 0
push 0x18b
push dword [edi + 0x4d8]
inc ebx
call esi
cmp ebx, eax
jl 0x416430
mov ebx, dword [ebp - 0x1c]
push str.disabilitytype
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x30]
call fcn.004bb2b0
mov dword [ebp - 0x28], eax
mov esi, dword [eax]
cmp ebx, esi
je 0x4164aa
mov byte [ebp - 4], 0x47
test esi, esi
je 0x416492
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov ecx, ebx
mov ebx, esi
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
mov byte [ebp - 4], 0x48
test ecx, ecx
je 0x4164aa
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov esi, dword [ebp - 0x28]
mov eax, dword [ebp + 8]
mov esi, dword [esi + 4]
cmp eax, esi
je 0x4164de
mov byte [ebp - 4], 0x49
test esi, esi
je 0x4164c8
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov eax, dword [ebp + 8]
mov ecx, eax
mov dword [ebp + 8], esi
mov dword [ebp - 0x14], esi
mov byte [ebp - 4], 0x4a
test ecx, ecx
je 0x4164de
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 0x4b
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x4164ef
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 0x4c
mov ecx, dword [ebp - 0x24]
test ecx, ecx
je 0x416500
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
push 0
push 0xffffffffffffffff
mov byte [ebp - 4], 4
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push 0x186
push dword [edi + 0x558]
mov dword [ebp - 0x28], 0
call esi
test ebx, ebx
je 0x416542
push 0x4fd990
lea ecx, [ebp - 0x18]
call fcn.004b8fd0
mov ebx, dword [ebp - 0x18]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp + 8], eax
mov dword [ebp - 0x1c], ebx
push 0
push 0
push 0x18b
push dword [edi + 0x558]
call esi
test eax, eax
jle 0x41659a
xor ebx, ebx
nop dword [eax]
mov ecx, ebx
mov eax, 1
shl eax, cl
and eax, dword [ebp - 0x28]
neg eax
push ebx
sbb eax, eax
neg eax
push eax
push 0x185
push dword [edi + 0x558]
call esi
push 0
push 0
push 0x18b
push dword [edi + 0x558]
inc ebx
call esi
cmp ebx, eax
jl 0x416560
mov ebx, dword [ebp - 0x1c]
push str.weekdaylimit
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x30]
call fcn.004bb2b0
mov dword [ebp - 0x28], eax
mov esi, dword [eax]
cmp ebx, esi
je 0x4165da
mov byte [ebp - 4], 0x4d
test esi, esi
je 0x4165c2
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov ecx, ebx
mov ebx, esi
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
mov byte [ebp - 4], 0x4e
test ecx, ecx
je 0x4165da
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov esi, dword [ebp - 0x28]
mov eax, dword [ebp + 8]
mov esi, dword [esi + 4]
cmp eax, esi
je 0x41660e
mov byte [ebp - 4], 0x4f
test esi, esi
je 0x4165f8
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov eax, dword [ebp + 8]
mov ecx, eax
mov dword [ebp + 8], esi
mov dword [ebp - 0x14], esi
mov byte [ebp - 4], 0x50
test ecx, ecx
je 0x41660e
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 0x51
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x41661f
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 0x52
mov ecx, dword [ebp - 0x24]
test ecx, ecx
je 0x416630
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
push 0
push 0xffffffffffffffff
mov byte [ebp - 4], 4
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push 0x186
push dword [edi + 0x5d8]
mov dword [ebp - 0x28], 0
call esi
test ebx, ebx
je 0x416672
push 0x4fd990
lea ecx, [ebp - 0x18]
call fcn.004b8fd0
mov ebx, dword [ebp - 0x18]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp + 8], eax
mov dword [ebp - 0x1c], ebx
push 0
push 0
push 0x18b
push dword [edi + 0x5d8]
call esi
test eax, eax
jle 0x4166ca
xor ebx, ebx
nop dword [eax]
mov ecx, ebx
mov eax, 1
shl eax, cl
and eax, dword [ebp - 0x28]
neg eax
push ebx
sbb eax, eax
neg eax
push eax
push 0x185
push dword [edi + 0x5d8]
call esi
push 0
push 0
push 0x18b
push dword [edi + 0x5d8]
inc ebx
call esi
cmp ebx, eax
jl 0x416690
mov ebx, dword [ebp - 0x1c]
lea ecx, [edi + 0x680]
mov dword [edi + 0x6a4], 0
push 0x4fd088
mov dword [edi + 0x63c], 0
mov dword [edi + 0x6c8], 0
call dword [sym.imp.mfc140.dll_Ordinal_1529]
push str.stationlistened
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x30]
call fcn.004bb2b0
mov dword [ebp - 0x28], eax
mov esi, dword [eax]
cmp ebx, esi
je 0x416736
mov byte [ebp - 4], 0x53
test esi, esi
je 0x416721
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov ecx, ebx
mov ebx, esi
mov dword [ebp - 0x18], ebx
mov byte [ebp - 4], 0x54
test ecx, ecx
je 0x416736
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov esi, dword [ebp - 0x28]
mov eax, dword [ebp + 8]
mov esi, dword [esi + 4]
cmp eax, esi
je 0x41676c
mov byte [ebp - 4], 0x55
test esi, esi
je 0x416754
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov eax, dword [ebp + 8]
mov ecx, eax
mov eax, esi
mov dword [ebp + 8], eax
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x56
test ecx, ecx
je 0x41676c
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 0x57
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x41677d
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 0x58
mov ecx, dword [ebp - 0x24]
test ecx, ecx
je 0x41678e
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 4
test ebx, ebx
je 0x41685f
push 0x4fd990
lea ecx, [ebp - 0x18]
mov dword [edi + 0x6a4], 1
call fcn.004b8fd0
push 0x4fd998
lea ecx, [ebp - 0x18]
mov dword [edi + 0x63c], eax
call fcn.004b8fd0
mov ebx, dword [edi + 0x63c]
xor ecx, ecx
cmp eax, 0xf4240
mov eax, dword [edi + 0x638]
setge cl
mov dword [edi + 0x6c8], ecx
mov eax, dword [eax + 0x614]
mov ecx, dword [eax + 0x2c0]
cmp ebx, 0x186a0
jge 0x416804
test ecx, ecx
je 0x416856
mov edx, dword [ecx + 8]
test edx, edx
je 0x416856
movzx eax, bx
jmp 0x41683a
mov eax, 0x14f8b589
imul ebx
sar edx, 0xd
mov esi, edx
shr esi, 0x1f
add esi, edx
test ecx, ecx
je 0x416856
nop dword [eax]
mov edx, dword [ecx + 8]
mov ecx, dword [ecx]
cmp dword [edx], esi
je 0x41682f
test ecx, ecx
jne 0x416820
jmp 0x416856
imul eax, esi, 0x7960
add eax, ebx
movzx eax, ax
push eax
mov ecx, edx
call fcn.004d6b20
test eax, eax
je 0x416856
add eax, 4
lea ecx, [edi + 0x680]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_1529]
mov eax, dword [ebp - 0x14]
mov ebx, dword [ebp - 0x18]
mov dword [ebp + 8], eax
lea ecx, [edi + 0x684]
mov dword [edi + 0x6a8], 0
push 0x4fd088
mov dword [edi + 0x640], 0
mov dword [edi + 0x6cc], 0
mov dword [edi + 0x644], 0
call dword [sym.imp.mfc140.dll_Ordinal_1529]
push str.stationweight
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x30]
call fcn.004bb2b0
mov dword [ebp - 0x28], eax
mov esi, dword [eax]
cmp ebx, esi
je 0x4168d5
mov byte [ebp - 4], 0x59
test esi, esi
je 0x4168c0
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov ecx, ebx
mov ebx, esi
mov dword [ebp - 0x18], ebx
mov byte [ebp - 4], 0x5a
test ecx, ecx
je 0x4168d5
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov esi, dword [ebp - 0x28]
mov eax, dword [ebp + 8]
mov esi, dword [esi + 4]
cmp eax, esi
je 0x41690b
mov byte [ebp - 4], 0x5b
test esi, esi
je 0x4168f3
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov eax, dword [ebp + 8]
mov ecx, eax
mov eax, esi
mov dword [ebp + 8], eax
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x5c
test ecx, ecx
je 0x41690b
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 0x5d
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x41691c
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 0x5e
mov ecx, dword [ebp - 0x24]
test ecx, ecx
je 0x41692d
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 4
test ebx, ebx
je 0x416a3b
push 0x4fd990
lea ecx, [ebp - 0x18]
mov dword [edi + 0x6a8], 1
call fcn.004b8fd0
push 0x4fd998
lea ecx, [ebp - 0x18]
mov dword [edi + 0x640], eax
call fcn.004b8fd0
xor ecx, ecx
cmp eax, 0xf4240
push 0x4fd998
setge cl
mov dword [edi + 0x6cc], ecx
lea ecx, [ebp - 0x18]
call fcn.004b8fd0
mov ecx, dword [edi + 0x6cc]
mov esi, eax
mov eax, dword [edi + 0x638]
neg ecx
mov ebx, dword [edi + 0x640]
sbb ecx, ecx
and ecx, 0xf4240
sub esi, ecx
mov dword [edi + 0x644], esi
mov eax, dword [eax + 0x614]
mov dword [ebp + 8], esi
mov ecx, dword [eax + 0x2c0]
cmp ebx, 0x186a0
jge 0x4169cd
test ecx, ecx
je 0x416a32
mov edx, dword [ecx + 8]
test edx, edx
je 0x416a32
movzx eax, bx
jmp 0x4169ff
mov eax, 0x14f8b589
imul ebx
sar edx, 0xd
mov esi, edx
shr esi, 0x1f
add esi, edx
test ecx, ecx
je 0x416a32
mov edx, dword [ecx + 8]
mov ecx, dword [ecx]
cmp dword [edx], esi
je 0x4169f1
test ecx, ecx
jne 0x4169e2
jmp 0x416a32
imul eax, esi, 0x7960
mov esi, dword [ebp + 8]
add eax, ebx
movzx eax, ax
push eax
mov ecx, edx
call fcn.004d6b20
mov ecx, eax
test ecx, ecx
je 0x416a32
mov eax, esi
add ecx, 4
cdq
mov esi, 0x3e8
idiv esi
push ecx
push edx
push eax
lea eax, [edi + 0x684]
push str._d__d____s
push eax
call dword [sym.imp.mfc140.dll_Ordinal_4807]
add esp, 0x14
mov eax, dword [ebp - 0x14]
mov ebx, dword [ebp - 0x18]
mov dword [ebp + 8], eax
lea ecx, [edi + 0x64c]
mov dword [edi + 0x6ac], 0
push 0x4fd088
mov dword [edi + 0x648], 0
mov dword [edi + 0x6d0], 0
call dword [sym.imp.mfc140.dll_Ordinal_1529]
lea ecx, [edi + 0x688]
push 0x4fd088
call dword [sym.imp.mfc140.dll_Ordinal_1529]
push str.stationprogramme
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x30]
call fcn.004bb2b0
mov dword [ebp - 0x28], eax
mov esi, dword [eax]
cmp ebx, esi
je 0x416ab8
mov byte [ebp - 4], 0x5f
test esi, esi
je 0x416aa3
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov ecx, ebx
mov ebx, esi
mov dword [ebp - 0x18], ebx
mov byte [ebp - 4], 0x60
test ecx, ecx
je 0x416ab8
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov esi, dword [ebp - 0x28]
mov eax, dword [ebp + 8]
mov esi, dword [esi + 4]
cmp eax, esi
je 0x416aee
mov byte [ebp - 4], 0x61
test esi, esi
je 0x416ad6
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov eax, dword [ebp + 8]
mov ecx, eax
mov eax, esi
mov dword [ebp + 8], eax
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x62
test ecx, ecx
je 0x416aee
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 0x63
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x416aff
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 0x64
mov ecx, dword [ebp - 0x24]
test ecx, ecx
je 0x416b10
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 4
test ebx, ebx
je 0x416d67
push 0x4fd990
lea ecx, [ebp - 0x18]
mov dword [edi + 0x6ac], 1
call fcn.004b8fd0
push 0x4fd998
lea ecx, [ebp - 0x18]
mov dword [edi + 0x648], eax
call fcn.004b8fd0
xor ecx, ecx
cmp eax, 0xf4240
push str.extra
setge cl
lea eax, [ebp + 8]
mov dword [edi + 0x6d0], ecx
lea ecx, [ebp - 0x18]
push eax
call fcn.004b93a0
push eax
lea ecx, [edi + 0x64c]
mov byte [ebp - 4], 0x65
call dword [sym.imp.mfc140.dll_Ordinal_1514]
mov byte [ebp - 4], 4
or ebx, 0xffffffff
mov edx, dword [ebp + 8]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x416b99
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00401bb0
mov ecx, eax
test ecx, ecx
je 0x417b5a
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x40], eax
call fcn.00401bb0
mov ecx, eax
test ecx, ecx
je 0x417b5a
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x3c], eax
call fcn.00401bb0
mov ecx, eax
test ecx, ecx
je 0x417b5a
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov byte [ebp - 0x44], 0
push 0x2a0
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x2e4]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov byte [ebp - 4], 0x66
mov ecx, dword [edi + 0x64c]
sub ecx, 0x10
call fcn.00401750
lea esi, [eax + 0x10]
mov dword [ebp + 8], esi
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x67
push eax
lea ecx, [ebp - 0x2e4]
call fcn.004bfac0
mov byte [ebp - 4], 0x66
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x416c47
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [edi + 0x638]
mov esi, dword [edi + 0x648]
mov eax, dword [eax + 0x614]
mov ecx, dword [eax + 0x2c0]
cmp esi, 0x186a0
jge 0x416c7f
test ecx, ecx
je 0x416d0c
mov edx, dword [ecx + 8]
test edx, edx
je 0x416d0c
movzx eax, si
jmp 0x416cb2
mov eax, 0x14f8b589
imul esi
sar edx, 0xd
mov esi, edx
shr esi, 0x1f
add esi, edx
test ecx, ecx
je 0x416d0c
mov edx, dword [ecx + 8]
mov ecx, dword [ecx]
cmp dword [edx], esi
je 0x416ca3
test ecx, ecx
jne 0x416c94
jmp 0x416d0c
imul eax, esi, 0x7960
add eax, dword [edi + 0x648]
movzx eax, ax
push eax
mov ecx, edx
call fcn.004d6b20
mov esi, eax
test esi, esi
je 0x416d0c
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x2e4]
call fcn.004bfba0
lea ecx, [esi + 4]
mov byte [ebp - 4], 0x68
push ecx
push dword [eax]
lea eax, [edi + 0x688]
push str._s____s
push eax
call dword [sym.imp.mfc140.dll_Ordinal_4807]
mov byte [ebp - 4], 0x66
add esp, 0x10
mov edx, dword [ebp + 8]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x416d0c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 4
mov eax, ebx
mov edx, dword [ebp - 0x38]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x416d2a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x3c]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x416d44
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x40]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x416d5e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x14]
mov ebx, dword [ebp - 0x18]
mov dword [ebp + 8], eax
lea ecx, [edi + 0x654]
mov dword [edi + 0x6b0], 0
push 0x4fd088
mov dword [edi + 0x650], 0
mov dword [edi + 0x6d4], 0
call dword [sym.imp.mfc140.dll_Ordinal_1529]
lea ecx, [edi + 0x68c]
push 0x4fd088
call dword [sym.imp.mfc140.dll_Ordinal_1529]
push str.stationprogramme2
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x30]
call fcn.004bb2b0
mov dword [ebp - 0x28], eax
mov esi, dword [eax]
cmp ebx, esi
je 0x416de4
mov byte [ebp - 4], 0x69
test esi, esi
je 0x416dcf
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov ecx, ebx
mov ebx, esi
mov dword [ebp - 0x18], ebx
mov byte [ebp - 4], 0x6a
test ecx, ecx
je 0x416de4
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov esi, dword [ebp - 0x28]
mov eax, dword [ebp + 8]
mov esi, dword [esi + 4]
cmp eax, esi
je 0x416e1a
mov byte [ebp - 4], 0x6b
test esi, esi
je 0x416e02
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov eax, dword [ebp + 8]
mov ecx, eax
mov eax, esi
mov dword [ebp + 8], eax
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x6c
test ecx, ecx
je 0x416e1a
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 0x6d
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x416e2b
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 0x6e
mov ecx, dword [ebp - 0x24]
test ecx, ecx
je 0x416e3c
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 4
test ebx, ebx
je 0x417093
push 0x4fd990
lea ecx, [ebp - 0x18]
mov dword [edi + 0x6b0], 1
call fcn.004b8fd0
push 0x4fd998
lea ecx, [ebp - 0x18]
mov dword [edi + 0x650], eax
call fcn.004b8fd0
xor ecx, ecx
cmp eax, 0xf4240
push str.extra
setge cl
lea eax, [ebp + 8]
mov dword [edi + 0x6d4], ecx
lea ecx, [ebp - 0x18]
push eax
call fcn.004b93a0
push eax
lea ecx, [edi + 0x654]
mov byte [ebp - 4], 0x6f
call dword [sym.imp.mfc140.dll_Ordinal_1514]
mov byte [ebp - 4], 4
or ebx, 0xffffffff
mov edx, dword [ebp + 8]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x416ec5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00401bb0
mov ecx, eax
test ecx, ecx
je 0x417b5a
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x40], eax
call fcn.00401bb0
mov ecx, eax
test ecx, ecx
je 0x417b5a
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x3c], eax
call fcn.00401bb0
mov ecx, eax
test ecx, ecx
je 0x417b5a
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov byte [ebp - 0x44], 0
push 0x2a0
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x2e4]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov byte [ebp - 4], 0x70
mov ecx, dword [edi + 0x654]
sub ecx, 0x10
call fcn.00401750
lea esi, [eax + 0x10]
mov dword [ebp + 8], esi
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x71
push eax
lea ecx, [ebp - 0x2e4]
call fcn.004bfac0
mov byte [ebp - 4], 0x70
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x416f73
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [edi + 0x638]
mov esi, dword [edi + 0x650]
mov eax, dword [eax + 0x614]
mov ecx, dword [eax + 0x2c0]
cmp esi, 0x186a0
jge 0x416fab
test ecx, ecx
je 0x417038
mov edx, dword [ecx + 8]
test edx, edx
je 0x417038
movzx eax, si
jmp 0x416fde
mov eax, 0x14f8b589
imul esi
sar edx, 0xd
mov esi, edx
shr esi, 0x1f
add esi, edx
test ecx, ecx
je 0x417038
mov edx, dword [ecx + 8]
mov ecx, dword [ecx]
cmp dword [edx], esi
je 0x416fcf
test ecx, ecx
jne 0x416fc0
jmp 0x417038
imul eax, esi, 0x7960
add eax, dword [edi + 0x650]
movzx eax, ax
push eax
mov ecx, edx
call fcn.004d6b20
mov esi, eax
test esi, esi
je 0x417038
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x2e4]
call fcn.004bfba0
lea ecx, [esi + 4]
mov byte [ebp - 4], 0x72
push ecx
push dword [eax]
lea eax, [edi + 0x68c]
push str._s____s
push eax
call dword [sym.imp.mfc140.dll_Ordinal_4807]
mov byte [ebp - 4], 0x70
add esp, 0x10
mov edx, dword [ebp + 8]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x417038
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 4
mov eax, ebx
mov edx, dword [ebp - 0x38]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x417056
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x3c]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x417070
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x40]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41708a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x14]
mov ebx, dword [ebp - 0x18]
mov dword [ebp + 8], eax
lea ecx, [edi + 0x65c]
mov dword [edi + 0x658], 0
push 0x4fd088
mov dword [edi + 0x6b4], 0
call dword [sym.imp.mfc140.dll_Ordinal_1529]
lea ecx, [edi + 0x690]
push 0x4fd088
call dword [sym.imp.mfc140.dll_Ordinal_1529]
push str.stationprogp1
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x30]
call fcn.004bb2b0
mov dword [ebp - 0x28], eax
mov esi, dword [eax]
cmp ebx, esi
je 0x417106
mov byte [ebp - 4], 0x73
test esi, esi
je 0x4170f1
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov ecx, ebx
mov ebx, esi
mov dword [ebp - 0x18], ebx
mov byte [ebp - 4], 0x74
test ecx, ecx
je 0x417106
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov esi, dword [ebp - 0x28]
mov eax, dword [ebp + 8]
mov esi, dword [esi + 4]
cmp eax, esi
je 0x41713c
mov byte [ebp - 4], 0x75
test esi, esi
je 0x417124
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov eax, dword [ebp + 8]
mov ecx, eax
mov eax, esi
mov dword [ebp + 8], eax
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x76
test ecx, ecx
je 0x41713c
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 0x77
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x41714d
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 0x78
mov ecx, dword [ebp - 0x24]
test ecx, ecx
je 0x41715e
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 4
test ebx, ebx
je 0x4173b3
push 0x4fd990
lea ecx, [ebp - 0x18]
mov dword [edi + 0x6b4], 1
call fcn.004b8fd0
push 0x4fd998
lea ecx, [ebp - 0x18]
mov dword [edi + 0x658], eax
call fcn.004b8fd0
xor ecx, ecx
cmp eax, 0xf4240
push str.extra
setge cl
lea eax, [ebp + 8]
mov dword [edi + 0x6b4], ecx
lea ecx, [ebp - 0x18]
push eax
call fcn.004b93a0
push eax
lea ecx, [edi + 0x65c]
mov byte [ebp - 4], 0x79
call dword [sym.imp.mfc140.dll_Ordinal_1514]
mov byte [ebp - 4], 4
or ebx, 0xffffffff
mov edx, dword [ebp + 8]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4171e7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00401bb0
mov ecx, eax
test ecx, ecx
je 0x417b5a
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x40], eax
call fcn.00401bb0
mov ecx, eax
test ecx, ecx
je 0x417b5a
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x3c], eax
call fcn.00401bb0
mov ecx, eax
test ecx, ecx
je 0x417b5a
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov byte [ebp - 0x44], 0
push 0x2a0
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x2e4]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov byte [ebp - 4], 0x7a
mov ecx, dword [edi + 0x65c]
sub ecx, 0x10
call fcn.00401750
lea esi, [eax + 0x10]
mov dword [ebp + 8], esi
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x7b
push eax
lea ecx, [ebp - 0x2e4]
call fcn.004bfac0
mov byte [ebp - 4], 0x7a
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x417295
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [edi + 0x638]
mov esi, dword [edi + 0x658]
mov eax, dword [eax + 0x614]
mov ecx, dword [eax + 0x2c0]
cmp esi, 0x186a0
jge 0x4172cd
test ecx, ecx
je 0x41735a
mov edx, dword [ecx + 8]
test edx, edx
je 0x41735a
movzx eax, si
jmp 0x417300
mov eax, 0x14f8b589
imul esi
sar edx, 0xd
mov esi, edx
shr esi, 0x1f
add esi, edx
test ecx, ecx
je 0x41735a
mov edx, dword [ecx + 8]
mov ecx, dword [ecx]
cmp dword [edx], esi
je 0x4172f1
test ecx, ecx
jne 0x4172e2
jmp 0x41735a
imul eax, esi, 0x7960
add eax, dword [edi + 0x658]
movzx eax, ax
push eax
mov ecx, edx
call fcn.004d6b20
mov esi, eax
test esi, esi
je 0x41735a
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x2e4]
call fcn.004bfba0
lea ecx, [esi + 4]
mov byte [ebp - 4], 0x7c
push ecx
push dword [eax]
lea eax, [edi + 0x690]
push str._s____s
push eax
call dword [sym.imp.mfc140.dll_Ordinal_4807]
mov byte [ebp - 4], 0x7a
add esp, 0x10
mov edx, dword [ebp + 8]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41735a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 4
mov eax, ebx
mov edx, dword [ebp - 0x38]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x417378
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x3c]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x417392
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x40]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x4173aa
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x14]
mov ebx, dword [ebp - 0x18]
mov dword [ebp + 8], eax
lea ecx, [edi + 0x694]
mov dword [edi + 0x6b8], 0
push 0x4fd088
mov dword [edi + 0x660], 0
mov dword [edi + 0x664], 0
mov dword [edi + 0x6dc], 0
call dword [sym.imp.mfc140.dll_Ordinal_1529]
push str.stationp1p2p3
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x30]
call fcn.004bb2b0
mov dword [ebp - 0x28], eax
mov esi, dword [eax]
cmp ebx, esi
je 0x417429
mov byte [ebp - 4], 0x7d
test esi, esi
je 0x417414
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov ecx, ebx
mov ebx, esi
mov dword [ebp - 0x18], ebx
mov byte [ebp - 4], 0x7e
test ecx, ecx
je 0x417429
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov esi, dword [ebp - 0x28]
mov eax, dword [ebp + 8]
mov esi, dword [esi + 4]
cmp eax, esi
je 0x41745f
mov byte [ebp - 4], 0x7f
test esi, esi
je 0x417447
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov eax, dword [ebp + 8]
mov ecx, eax
mov eax, esi
mov dword [ebp + 8], eax
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x80
test ecx, ecx
je 0x41745f
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 0x81
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x417470
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 0x82
mov ecx, dword [ebp - 0x24]
test ecx, ecx
je 0x417481
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 4
test ebx, ebx
je 0x417575
push 0x4fd990
lea ecx, [ebp - 0x18]
mov dword [edi + 0x6b8], 1
call fcn.004b8fd0
push 0x4fd998
lea ecx, [ebp - 0x18]
mov dword [edi + 0x660], eax
call fcn.004b8fd0
cdq
mov ecx, 0xa
idiv ecx
push 0x4fd998
lea ecx, [ebp - 0x18]
mov dword [edi + 0x664], edx
call fcn.004b8fd0
mov ebx, dword [edi + 0x660]
xor ecx, ecx
cmp eax, 0xf4240
mov eax, dword [edi + 0x638]
setge cl
mov dword [edi + 0x6dc], ecx
mov eax, dword [eax + 0x614]
mov ecx, dword [eax + 0x2c0]
cmp ebx, 0x186a0
jge 0x417512
test ecx, ecx
je 0x41756c
mov edx, dword [ecx + 8]
test edx, edx
je 0x41756c
movzx eax, bx
jmp 0x417541
mov eax, 0x14f8b589
imul ebx
sar edx, 0xd
mov esi, edx
shr esi, 0x1f
add esi, edx
test ecx, ecx
je 0x41756c
mov edx, dword [ecx + 8]
mov ecx, dword [ecx]
cmp dword [edx], esi
je 0x417536
test ecx, ecx
jne 0x417527
jmp 0x41756c
imul eax, esi, 0x7960
add eax, ebx
movzx eax, ax
push eax
mov ecx, edx
call fcn.004d6b20
test eax, eax
je 0x41756c
add eax, 4
push eax
push dword [edi + 0x664]
lea eax, [edi + 0x694]
push str.P_d____s
push eax
call dword [sym.imp.mfc140.dll_Ordinal_4807]
add esp, 0x10
mov eax, dword [ebp - 0x14]
mov ebx, dword [ebp - 0x18]
mov dword [ebp + 8], eax
lea ecx, [edi + 0x698]
mov dword [edi + 0x6bc], 0
push 0x4fd088
mov dword [edi + 0x668], 0
mov dword [edi + 0x6e0], 0
mov dword [edi + 0x66c], 0
call dword [sym.imp.mfc140.dll_Ordinal_1529]
push str.stationevents
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x30]
call fcn.004bb2b0
mov dword [ebp - 0x28], eax
mov esi, dword [eax]
cmp ebx, esi
je 0x4175eb
mov byte [ebp - 4], 0x83
test esi, esi
je 0x4175d6
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov ecx, ebx
mov ebx, esi
mov dword [ebp - 0x18], ebx
mov byte [ebp - 4], 0x84
test ecx, ecx
je 0x4175eb
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov esi, dword [ebp - 0x28]
mov eax, dword [ebp + 8]
mov esi, dword [esi + 4]
cmp eax, esi
je 0x417621
mov byte [ebp - 4], 0x85
test esi, esi
je 0x417609
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov eax, dword [ebp + 8]
mov ecx, eax
mov eax, esi
mov dword [ebp + 8], eax
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x86
test ecx, ecx
je 0x417621
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 0x87
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x417632
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 0x88
mov ecx, dword [ebp - 0x24]
test ecx, ecx
je 0x417643
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 4
test ebx, ebx
je 0x417751
push 0x4fd990
lea ecx, [ebp - 0x18]
mov dword [edi + 0x6bc], 1
call fcn.004b8fd0
push 0x4fd998
lea ecx, [ebp - 0x18]
mov dword [edi + 0x668], eax
call fcn.004b8fd0
xor ecx, ecx
cmp eax, 0xf4240
push 0x4fd998
setge cl
mov dword [edi + 0x6e0], ecx
lea ecx, [ebp - 0x18]
call fcn.004b8fd0
mov ecx, dword [edi + 0x6e0]
mov esi, eax
mov eax, dword [edi + 0x638]
neg ecx
mov ebx, dword [edi + 0x668]
sbb ecx, ecx
and ecx, 0xf4240
sub esi, ecx
mov dword [edi + 0x66c], esi
mov eax, dword [eax + 0x614]
mov dword [ebp + 8], esi
mov ecx, dword [eax + 0x2c0]
cmp ebx, 0x186a0
jge 0x4176e3
test ecx, ecx
je 0x417748
mov edx, dword [ecx + 8]
test edx, edx
je 0x417748
movzx eax, bx
jmp 0x417715
mov eax, 0x14f8b589
imul ebx
sar edx, 0xd
mov esi, edx
shr esi, 0x1f
add esi, edx
test ecx, ecx
je 0x417748
mov edx, dword [ecx + 8]
mov ecx, dword [ecx]
cmp dword [edx], esi
je 0x417707
test ecx, ecx
jne 0x4176f8
jmp 0x417748
imul eax, esi, 0x7960
mov esi, dword [ebp + 8]
add eax, ebx
movzx eax, ax
push eax
mov ecx, edx
call fcn.004d6b20
mov ecx, eax
test ecx, ecx
je 0x417748
mov eax, esi
mov ebx, 0x3e8
cdq
add ecx, 4
idiv ebx
push ecx
push edx
push eax
lea eax, [edi + 0x698]
push str._d__d____s
push eax
call dword [sym.imp.mfc140.dll_Ordinal_4807]
add esp, 0x14
mov eax, dword [ebp - 0x14]
mov ebx, dword [ebp - 0x18]
mov dword [ebp + 8], eax
lea ecx, [edi + 0x69c]
mov dword [edi + 0x6c0], 0
push 0x4fd088
mov dword [edi + 0x670], 0
mov dword [edi + 0x6e4], 0
mov dword [edi + 0x674], 0
call dword [sym.imp.mfc140.dll_Ordinal_1529]
push str.stationpercent
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x30]
call fcn.004bb2b0
mov dword [ebp - 0x28], eax
mov esi, dword [eax]
cmp ebx, esi
je 0x4177c7
mov byte [ebp - 4], 0x89
test esi, esi
je 0x4177b2
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov ecx, ebx
mov ebx, esi
mov dword [ebp - 0x18], ebx
mov byte [ebp - 4], 0x8a
test ecx, ecx
je 0x4177c7
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov esi, dword [ebp - 0x28]
mov eax, dword [ebp + 8]
mov esi, dword [esi + 4]
cmp eax, esi
je 0x4177fd
mov byte [ebp - 4], 0x8b
test esi, esi
je 0x4177e5
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov eax, dword [ebp + 8]
mov ecx, eax
mov eax, esi
mov dword [ebp + 8], eax
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x8c
test ecx, ecx
je 0x4177fd
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 0x8d
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x41780e
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 0x8e
mov ecx, dword [ebp - 0x24]
test ecx, ecx
je 0x41781f
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 4
test ebx, ebx
je 0x41792d
push 0x4fd990
lea ecx, [ebp - 0x18]
mov dword [edi + 0x6c0], 1
call fcn.004b8fd0
push 0x4fd998
lea ecx, [ebp - 0x18]
mov dword [edi + 0x670], eax
call fcn.004b8fd0
xor ecx, ecx
cmp eax, 0xf4240
push 0x4fd998
setge cl
mov dword [edi + 0x6e4], ecx
lea ecx, [ebp - 0x18]
call fcn.004b8fd0
mov ecx, dword [edi + 0x6e4]
mov esi, eax
mov eax, dword [edi + 0x638]
neg ecx
mov ebx, dword [edi + 0x670]
sbb ecx, ecx
and ecx, 0xf4240
sub esi, ecx
mov dword [edi + 0x674], esi
mov eax, dword [eax + 0x614]
mov dword [ebp + 8], esi
mov ecx, dword [eax + 0x2c0]
cmp ebx, 0x186a0
jge 0x4178bf
test ecx, ecx
je 0x417924
mov edx, dword [ecx + 8]
test edx, edx
je 0x417924
movzx eax, bx
jmp 0x4178f1
mov eax, 0x14f8b589
imul ebx
sar edx, 0xd
mov esi, edx
shr esi, 0x1f
add esi, edx
test ecx, ecx
je 0x417924
mov edx, dword [ecx + 8]
mov ecx, dword [ecx]
cmp dword [edx], esi
je 0x4178e3
test ecx, ecx
jne 0x4178d4
jmp 0x417924
imul eax, esi, 0x7960
mov esi, dword [ebp + 8]
add eax, ebx
movzx eax, ax
push eax
mov ecx, edx
call fcn.004d6b20
mov ecx, eax
test ecx, ecx
je 0x417924
mov eax, esi
mov ebx, 0x3e8
cdq
add ecx, 4
idiv ebx
push ecx
push edx
push eax
lea eax, [edi + 0x69c]
push str._d__d____s
push eax
call dword [sym.imp.mfc140.dll_Ordinal_4807]
add esp, 0x14
mov eax, dword [ebp - 0x14]
mov ebx, dword [ebp - 0x18]
mov dword [ebp + 8], eax
lea ecx, [edi + 0x6a0]
mov dword [edi + 0x6c4], 0
push 0x4fd088
mov dword [edi + 0x678], 0
mov dword [edi + 0x6e8], 0
mov dword [edi + 0x67c], 0
call dword [sym.imp.mfc140.dll_Ordinal_1529]
push str.stationplatform
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x30]
call fcn.004bb2b0
mov dword [ebp - 0x28], eax
mov esi, dword [eax]
cmp ebx, esi
je 0x4179a3
mov byte [ebp - 4], 0x8f
test esi, esi
je 0x41798e
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov ecx, ebx
mov ebx, esi
mov dword [ebp - 0x18], ebx
mov byte [ebp - 4], 0x90
test ecx, ecx
je 0x4179a3
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov esi, dword [ebp - 0x28]
mov eax, dword [ebp + 8]
mov esi, dword [esi + 4]
cmp eax, esi
je 0x4179d9
mov byte [ebp - 4], 0x91
test esi, esi
je 0x4179c1
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov eax, dword [ebp + 8]
mov ecx, eax
mov eax, esi
mov dword [ebp + 8], eax
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x92
test ecx, ecx
je 0x4179d9
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 0x93
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x4179ea
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 0x94
mov ecx, dword [ebp - 0x24]
test ecx, ecx
je 0x4179fb
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 4
test ebx, ebx
je 0x417af4
push 0x4fd990
lea ecx, [ebp - 0x18]
mov dword [edi + 0x6c4], 1
call fcn.004b8fd0
push 0x4fd998
lea ecx, [ebp - 0x18]
mov dword [edi + 0x678], eax
call fcn.004b8fd0
xor ecx, ecx
cmp eax, 0xf4240
push 0x4fd998
setge cl
mov dword [edi + 0x6e8], ecx
lea ecx, [ebp - 0x18]
call fcn.004b8fd0
mov ecx, dword [edi + 0x6e8]
mov ebx, dword [edi + 0x678]
neg ecx
sbb ecx, ecx
and ecx, 0xf4240
sub eax, ecx
mov dword [edi + 0x67c], eax
mov eax, dword [edi + 0x638]
mov eax, dword [eax + 0x614]
mov ecx, dword [eax + 0x2c0]
cmp ebx, 0x186a0
jge 0x417a96
test ecx, ecx
je 0x417abd
mov edx, dword [ecx + 8]
test edx, edx
je 0x417abd
movzx eax, bx
jmp 0x417ad0
mov eax, 0x14f8b589
imul ebx
sar edx, 0xd
mov esi, edx
shr esi, 0x1f
add esi, edx
test ecx, ecx
je 0x417abd
nop dword [eax + eax]
mov edx, dword [ecx + 8]
mov ecx, dword [ecx]
cmp dword [edx], esi
je 0x417ac5
test ecx, ecx
jne 0x417ab0
mov esi, dword [ebp - 0x14]
mov ebx, dword [ebp - 0x18]
jmp 0x417af7
imul eax, esi, 0x7960
add eax, ebx
movzx eax, ax
push eax
mov ecx, edx
call fcn.004d6b20
test eax, eax
je 0x417abd
add eax, 4
lea ecx, [edi + 0x6a0]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_1529]
mov esi, dword [ebp - 0x14]
mov ebx, dword [ebp - 0x18]
jmp 0x417af7
mov esi, dword [ebp + 8]
push 0
mov ecx, edi
call dword [sym.imp.mfc140.dll_Ordinal_14421]
mov byte [ebp - 4], 0x95
mov eax, dword [ebp - 0x30]
test eax, eax
je 0x417b17
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor eax, eax
mov dword [ebp - 0x30], eax
mov byte [ebp - 4], 0x97
test eax, eax
je 0x417b25
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x98
test esi, esi
je 0x417b36
mov eax, dword [esi]
push esi
call dword [eax + 8]
mov dword [ebp - 4], 0x99
test ebx, ebx
je 0x417b47
mov eax, dword [ebx]
push ebx
call dword [eax + 8]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 4
push 0x80004005
call fcn.00401f30
int3