Function at 0x47495a
Capabilities:
Create process on windows
Read .ini file

Disassembly:
mov eax, 0x51b5c3
call fcn.004edf30
sub esp, 0x5b0
mov eax, dword [ebp + 8]
push ebx
push esi
cmp eax, 0x85
push edi
mov esi, ecx
je 0x476455
cmp eax, 0xf
jne 0x4749a7
lea eax, [ebp - 0x1b4]
push eax
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_BeginPaint]
lea eax, [ebp - 0x1b4]
push eax
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_EndPaint]
jmp 0x476455
cmp eax, 0x14
jne 0x4749b4
push 1
pop eax
jmp 0x476c35
mov edi, dword [ebp + 0x10]
mov ecx, dword [ebp + 0xc]
cmp eax, 0x111
jne 0x474a6c
push 1
pop edi
cmp ecx, edi
jne 0x4749e6
cmp dword [esi + 0x8b2d4], 0
je 0x474a65
lea ecx, [esi + 0x7e8]
call fcn.00437870
jmp 0x474a65
cmp ecx, 2
jne 0x474a59
xor ebx, ebx
cmp dword [esi + 0x1b59c], ebx
je 0x474a09
push ebx
lea ecx, [esi + 0x1b53c]
call sub.MFC42.DLL_CWnd::ShowWindow
lea ecx, [esi + 0x7e8]
jmp 0x474a47
cmp dword [esi + 0x46740], ebx
je 0x474a1f
push ebx
lea ecx, [esi + 0x466e0]
call sub.MFC42.DLL_CWnd::ShowWindow
jmp 0x474a65
cmp dword [esi + 0x4b350], ebx
je 0x474a34
push edi
mov ecx, 0x56f1a4
call fcn.004bd3d3
jmp 0x474a65
lea ebx, [esi + 0x7e8]
mov ecx, ebx
call fcn.00437221
test eax, eax
je 0x474a4e
mov ecx, ebx
call fcn.00437093
jmp 0x474a65
push 2
mov ecx, esi
call fcn.00476fde
jmp 0x474a65
cmp ecx, 0xe146
jne case.0x474ac1.1011
mov eax, edi
jmp 0x476c35
cmp eax, 0x115
jne 0x474a9c
call fcn.0045f70c
mov ecx, eax
call fcn.004cc09e
mov edi, eax
lea ecx, [esi + 0x8b6a4]
inc edi
inc edi
call fcn.0047dd25
cdq
idiv edi
inc eax
mov dword [0x5692ec], eax
jmp case.0x474ac1.1011
cmp eax, 0x1c
je case.0x474ac1.1011
cmp eax, 0x464
jne case.0x474ac1.1011
lea eax, [ecx - 0x3eb]
cmp eax, 0xcf
ja case.0x474ac1.1011
jmp dword [eax*4 + 0x476c46]
xor ebx, ebx
cmp edi, ebx
je case.0x474ac1.1011
push ebx
push edi
push 0x29
lea ecx, [esi + 0x6c838]
call fcn.0041ccc2
push edi
jmp 0x4766be
xor ebx, ebx
push ebx
push ebx
push 0x21
jmp 0x476557
push edi
mov ecx, 0x56ece0
call fcn.004bc252
xor ebx, ebx
mov dword [ebp - 0x10], eax
cmp eax, ebx
je case.0x474ac1.1011
push eax
call fcn.004cf1a2
mov ecx, eax
call fcn.004cf207
cmp eax, 0x564
mov dword [ebp - 0x20], eax
jl 0x474b65
mov ecx, dword [ebp - 0x10]
call fcn.004b235c
mov ecx, eax
mov eax, dword [ebp - 0x20]
cdq
idiv ecx
cmp eax, 5
jl 0x474b65
push dword [0x56ece4]
mov ecx, 0x56b070
call fcn.004bf6ca
test eax, eax
jne 0x474b65
call dword [sym.imp.GraphicData.dll_GameDataSetQuery]
mov edx, dword [eax]
push edi
push 0x2b9c
mov ecx, eax
call dword [edx + 0x3c]
push eax
push 0x27
jmp 0x476557
push edi
push ebx
push 0x20
jmp 0x476557
mov ecx, 0x56b070
call fcn.004af739
jmp case.0x474ac1.1011
test edi, edi
je case.0x474ac1.1011
push edi
mov ecx, 0x56b070
call fcn.004ad9a8
jmp case.0x474ac1.1011
xor ebx, ebx
cmp edi, ebx
jl case.0x474ac1.1011
cmp edi, 1
jle 0x474bf9
cmp edi, 2
jne case.0x474ac1.1011
cmp dword [esi + 0x1be0], ebx
je 0x474bc5
lea ecx, [esi + 0x1b74]
call fcn.0040cb67
jmp case.0x474ac1.1011
cmp dword [esi + 0xa6c], ebx
je 0x474bdd
lea ecx, [esi + 0xa00]
call fcn.0040d43d
jmp case.0x474ac1.1011
cmp dword [esi + 0x3080], ebx
je case.0x474ac1.1011
lea ecx, [esi + 0x3014]
call fcn.0041030c
jmp case.0x474ac1.1011
lea ecx, [esi + 0x984]
call fcn.0040e4e7
jmp case.0x474ac1.1011
lea eax, [esi + 0x8b4d0]
xor ebx, ebx
cmp dword [eax], ebx
je 0x474c17
mov dword [eax], ebx
push ebx
push ebx
push 0x1e
jmp 0x476557
xor ebx, ebx
sub edi, ebx
je 0x474cab
sub edi, 3
je 0x474c9b
dec edi
je 0x474c6f
dec edi
je 0x474c4f
dec edi
jne case.0x474ac1.1011
mov ecx, 0x56b070
call fcn.004aa100
push eax
push ebx
push 0x1b
jmp 0x476557
mov ecx, 0x56b070
call fcn.004aa100
push eax
push 0x79
push 0x464
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_PostMessageA]
jmp case.0x474ac1.1011
call dword [sym.imp.GraphicData.dll_GameDataSetQuery]
mov edx, dword [eax]
push ebx
push 0x2af9
mov ecx, eax
call dword [edx + 0x3c]
push eax
push 0x1c
lea ecx, [esi + 0x6c838]
call fcn.0041ccc2
mov dword [esi + 0x8b4d0], ebx
jmp case.0x474ac1.1011
lea ecx, [esi + 0x52a40]
call fcn.00444dc0
jmp case.0x474ac1.1011
mov ecx, 0x56b070
call fcn.004aa114
push eax
lea ecx, [esi + 0x524a8]
call fcn.0041e29b
jmp case.0x474ac1.1011
lea ecx, [esi + 0x1b53c]
call fcn.0043b6a1
mov ecx, esi
call fcn.00477cf6
jmp case.0x474ac1.1011
lea ecx, [esi + 0x13c10]
call fcn.0044c807
lea ecx, [esi + 0x10af8]
call fcn.0044dc41
jmp case.0x474ac1.1011
xor ebx, ebx
cmp dword [esi + 0x1d6c8], ebx
jne case.0x474ac1.1011
mov ecx, 0x56b070
call fcn.004bcc8f
push eax
lea eax, [ebp - 0x1c]
push eax
call sub.MSVCRT.dll_strcpy
pop ecx
lea eax, [ebp - 0x1c]
pop ecx
push ebx
push eax
push ebx
jmp 0x476557
xor ebx, ebx
cmp edi, ebx
je case.0x474ac1.1011
push ebx
push edi
push 0x22
jmp 0x474ad6
xor ebx, ebx
cmp edi, ebx
je case.0x474ac1.1011
lea ecx, [esi + 0x861ec]
push edi
call fcn.0045dbf1
cmp dword [esi + 0x86264], ebx
jne 0x474ae1
lea ebx, [esi + 0x861ec]
mov ecx, ebx
call fcn.0045dc53
push 5
mov ecx, ebx
call sub.MFC42.DLL_CWnd::ShowWindow
jmp 0x474ae1
lea ecx, [esi + 0x53eb8]
call fcn.00417c0d
jmp case.0x474ac1.1011
push edi
push 0x568b08
push 0x31
jmp 0x476557
xor ebx, ebx
push ebx
push ebx
jmp 0x474da7
push 1
mov ecx, 0x56b070
call fcn.004bc77e
push eax
push edi
lea ecx, [esi + 0x86fc8]
call fcn.00428dae
jmp case.0x474ac1.1011
push 5
lea ecx, [esi + 0x560c8]
jmp 0x476986
call dword [sym.imp.GraphicData.dll_GameDataSetQuery]
mov edx, dword [eax]
push edi
push 0x2bc0
mov ecx, eax
call dword [edx + 0x3c]
push eax
lea eax, [ebp - 0x174]
push 0x100
push eax
call dword [sym.imp.MSVCRT.dll__snprintf]
add esp, 0x10
xor ebx, ebx
lea eax, [ebp - 0x174]
mov byte [ebp - 0x75], bl
push ebx
push eax
push 0x34
jmp 0x476557
xor ebx, ebx
cmp edi, ebx
je case.0x474ac1.1011
mov al, byte [0x568b08]
push 0x3f
mov byte [ebp - 0x174], al
pop ecx
xor eax, eax
lea edi, [ebp - 0x173]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], ebx
push eax
lea eax, [ebp - 0x174]
push eax
push str._s_u
push dword [ebp + 0x10]
mov byte [ebp - 0x75], bl
call dword [sym.imp.MSVCRT.dll_sscanf]
add esp, 0x10
lea eax, [ebp - 0x174]
lea edi, [esi + 0x86490]
push dword [ebp - 0x10]
push eax
push ebx
mov ecx, edi
call fcn.0045e008
cmp dword [esi + 0x8651c], ebx
jne 0x474e79
mov ecx, edi
call fcn.0045e157
push 5
mov ecx, edi
call sub.MFC42.DLL_CWnd::ShowWindow
push dword [ebp + 0x10]
jmp 0x4766be
xor ebx, ebx
cmp edi, ebx
je case.0x474ac1.1011
mov al, byte [0x568b08]
push 0x3f
mov byte [ebp - 0x174], al
pop ecx
xor eax, eax
lea edi, [ebp - 0x173]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], ebx
push eax
lea eax, [ebp - 0x174]
push eax
push str._s_u
push dword [ebp + 0x10]
mov byte [ebp - 0x75], bl
call dword [sym.imp.MSVCRT.dll_sscanf]
add esp, 0x10
lea eax, [ebp - 0x174]
lea edi, [esi + 0x86490]
push dword [ebp - 0x10]
push eax
push 1
jmp 0x474e5a
xor ebx, ebx
cmp edi, ebx
je case.0x474ac1.1011
mov al, byte [0x568b08]
push 0x3f
mov byte [ebp - 0x174], al
pop ecx
xor eax, eax
lea edi, [ebp - 0x173]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], ebx
push eax
lea eax, [ebp - 0x174]
push eax
push str._s_u
push dword [ebp + 0x10]
mov byte [ebp - 0x75], bl
call dword [sym.imp.MSVCRT.dll_sscanf]
add esp, 0x10
lea eax, [ebp - 0x174]
lea edi, [esi + 0x86490]
push dword [ebp - 0x10]
push eax
push 2
jmp 0x474e5a
xor ebx, ebx
cmp edi, ebx
je case.0x474ac1.1011
mov al, byte [0x568b08]
push 0x3f
mov byte [ebp - 0x174], al
pop ecx
xor eax, eax
lea edi, [ebp - 0x173]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], ebx
push eax
lea eax, [ebp - 0x174]
push eax
push str._s_u
push dword [ebp + 0x10]
mov byte [ebp - 0x75], bl
call dword [sym.imp.MSVCRT.dll_sscanf]
add esp, 0x10
lea eax, [ebp - 0x174]
lea edi, [esi + 0x86490]
push dword [ebp - 0x10]
push eax
push 3
jmp 0x474e5a
push edi
push 0
jmp 0x476b9e
push edi
push 0
jmp 0x476bae
sub edi, 0
je 0x474fc9
dec edi
jne case.0x474ac1.1011
push 2
lea ecx, [esi + 0x71318]
call fcn.00451843
jmp case.0x474ac1.1011
push 1
lea ecx, [esi + 0x71318]
call fcn.00451843
push 1
lea ecx, [esi + 0x6d784]
call fcn.004168a2
jmp case.0x474ac1.1011
lea ebx, [esi + 0x6d784]
mov ecx, ebx
call fcn.00416863
test al, al
je case.0x474ac1.1011
push edi
mov ecx, ebx
call fcn.00416d82
cmp dword [esi + 0x6d7fc], 0
jne case.0x474ac1.1011
push 5
mov ecx, ebx
jmp 0x476986
lea ebx, [esi + 0x6d784]
mov ecx, ebx
call fcn.00416863
test al, al
je case.0x474ac1.1011
push edi
mov ecx, ebx
call fcn.00416a4a
jmp case.0x474ac1.1011
xor ebx, ebx
sub edi, ebx
je 0x475087
dec edi
je 0x47505e
dec edi
dec edi
jne case.0x474ac1.1011
lea ecx, [esi + 0x7e8]
call fcn.00438c4c
jmp case.0x474ac1.1011
cmp dword [esi + 0x5bc0], ebx
je 0x475072
push ebx
lea ecx, [esi + 0x5b54]
call sub.MFC42.DLL_CWnd::ShowWindow
lea edi, [esi + 0xcaac]
mov ecx, edi
call fcn.00442e97
cmp dword [esi + 0xcb18], ebx
jmp 0x4750ae
cmp dword [esi + 0xcb18], ebx
je 0x47509b
push ebx
lea ecx, [esi + 0xcaac]
call sub.MFC42.DLL_CWnd::ShowWindow
lea edi, [esi + 0x5b54]
mov ecx, edi
call fcn.0044165a
cmp dword [esi + 0x5bc0], ebx
jne case.0x474ac1.1011
push 5
mov ecx, edi
jmp 0x476986
sub edi, 0
je 0x4750d9
dec edi
jne case.0x474ac1.1011
lea ecx, [esi + 0xcaac]
call fcn.00442e97
jmp case.0x474ac1.1011
lea ecx, [esi + 0x5b54]
call fcn.0044165a
jmp case.0x474ac1.1011
xor ebx, ebx
push ebx
push ebx
push 0x17
jmp 0x476557
lea ecx, [esi + 0x7e8]
call fcn.00437093
xor ebx, ebx
mov dword [esi + 0x980], 0xe
cmp dword [esi + 0x25498], ebx
je 0x47511f
push ebx
lea ecx, [esi + 0x25438]
call sub.MFC42.DLL_CWnd::ShowWindow
cmp dword [esi + 0x52aa8], ebx
je 0x47515c
push ebx
lea ecx, [esi + 0x52a40]
call sub.MFC42.DLL_CWnd::ShowWindow
call dword [sym.imp.GraphicData.dll_GameDataSetQuery]
mov edx, dword [eax]
push ebx
push ebx
push 0xff0000
push 0x7d5
push 0x2afb
mov ecx, eax
call dword [edx + 0x3c]
push eax
mov ecx, 0x568f20
call fcn.0047cb64
cmp dword [esi + 0x60f98], ebx
je 0x475170
push ebx
lea ecx, [esi + 0x5eeac]
call sub.MFC42.DLL_CWnd::ShowWindow
push 5
lea ecx, [esi + 0x1d668]
call sub.MFC42.DLL_CWnd::ShowWindow
cmp dword [esi + 0x1b59c], ebx
jne case.0x474ac1.1011
push 5
lea ecx, [esi + 0x1b53c]
jmp 0x476986
lea ecx, [esi + 0x1d668]
call fcn.0045aae2
jmp case.0x474ac1.1011
lea ecx, [esi + 0x1d668]
call fcn.0045ac85
jmp case.0x474ac1.1011
xor ebx, ebx
cmp edi, ebx
je 0x4751e0
cmp edi, 0xff
je 0x4751cb
push edi
push 1
push 2
jmp 0x4751d0
push ebx
push 2
push 3
lea ecx, [esi + 0x8580c]
call fcn.0045d7dc
jmp case.0x474ac1.1011
push ebx
push ebx
push 1
jmp 0x4751d0
xor ebx, ebx
push ebx
push ebx
push 0x35
jmp 0x476557
lea edi, [esi + 0x8580c]
mov ecx, edi
call fcn.004c31fd
cmp eax, 2
jl case.0x474ac1.1011
cmp eax, 3
jg case.0x474ac1.1011
mov ecx, edi
call fcn.0045d935
xor ebx, ebx
push ebx
push ebx
push 0x36
jmp 0x476557
lea edi, [esi + 0x1d668]
mov ecx, edi
call fcn.0045aed3
mov ecx, edi
call fcn.0045af36
jmp case.0x474ac1.1011
call dword [sym.imp.GraphicData.dll_GameDataSetQuery]
mov edx, dword [eax]
xor ebx, ebx
push ebx
push ebx
push 0xff0000
push 0x7d5
push 0x277c
mov ecx, eax
call dword [edx + 0x3c]
push eax
mov ecx, 0x568f20
call fcn.0047cb64
push 1
lea ecx, [esi + 0x221c0]
call fcn.0047e914
jmp case.0x474ac1.1011
mov ecx, 0x56b070
call fcn.004bc72a
xor ebx, ebx
test eax, eax
je 0x4752b1
call dword [sym.imp.GraphicData.dll_GameDataSetQuery]
mov edx, dword [eax]
push ebx
push ebx
push 0xff0000
push 0x7d5
push 0x277d
mov ecx, eax
call dword [edx + 0x3c]
push eax
mov ecx, 0x568f20
call fcn.0047cb64
push 0x3c
mov ecx, esi
call fcn.00472c38
push ebx
lea ecx, [esi + 0x1d668]
call sub.MFC42.DLL_CWnd::ShowWindow
lea ecx, [esi + 0x1b53c]
call fcn.0043b6a1
jmp case.0x474ac1.1011
push 0
lea ecx, [esi + 0x1d668]
jmp 0x476986
lea ecx, [esi + 0x2a650]
call fcn.004236ac
jmp case.0x474ac1.1011
cmp dword [esi + 0x25498], 0
je 0x475307
lea ecx, [esi + 0x25438]
call fcn.004138a6
lea ecx, [esi + 0x2a650]
call fcn.0042388b
jmp case.0x474ac1.1011
lea ecx, [esi + 0x19b80]
call fcn.0042a1dc
jmp case.0x474ac1.1011
lea ecx, [esi + 0x19b80]
call fcn.0042a2d5
jmp case.0x474ac1.1011
lea ecx, [esi + 0x24404]
call fcn.0042bae4
jmp case.0x474ac1.1011
mov edi, 0x56b070
mov ecx, edi
call fcn.004c1f44
test al, al
mov ecx, edi
je 0x475363
call fcn.004c17b6
jmp case.0x474ac1.1011
call fcn.004c1e51
push eax
lea eax, [ebp - 0x1c]
push eax
call sub.MSVCRT.dll_strcpy
pop ecx
lea eax, [ebp - 0x1c]
pop ecx
push 0
push eax
push 2
jmp 0x476557
mov edi, 0x56b070
mov ecx, edi
call fcn.004c1f58
test al, al
mov ecx, edi
je 0x47539d
call fcn.004c1c47
jmp case.0x474ac1.1011
call fcn.004c1e51
push eax
lea eax, [ebp - 0x1c]
push eax
call sub.MSVCRT.dll_strcpy
pop ecx
lea eax, [ebp - 0x1c]
pop ecx
push 0
push eax
push 1
jmp 0x476557
lea ecx, [esi + 0x129d4]
call fcn.0044fcf1
jmp case.0x474ac1.1011
mov eax, dword [0x56c23c]
xor ebx, ebx
sub eax, ebx
je 0x4753f4
dec eax
je 0x4753ed
dec eax
je 0x4753e6
dec eax
jne 0x47540e
push str.Button412
jmp 0x475403
push str.Button48
jmp 0x475403
push str.Button49
jmp 0x475403
mov dword [esi + 0x854], 1
push str.Button47
lea ecx, [esi + 0x6bfc4]
call fcn.00460441
push 0x56b0dc
lea eax, [ebp - 0x54]
push str._sRecord
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
mov edi, dword [sym.imp.MSVCRT.dll_strchr]
lea eax, [ebp - 0x54]
push 0x5b
push eax
call edi
add esp, 0x14
cmp eax, ebx
je 0x475448
push 1
push 0x55aa2c
push eax
call dword [sym.imp.MSVCRT.dll_strncpy]
add esp, 0xc
lea eax, [ebp - 0x54]
push 0x5d
push eax
call edi
pop ecx
cmp eax, ebx
pop ecx
je 0x475467
push 1
push 0x55aa28
push eax
call dword [sym.imp.MSVCRT.dll_strncpy]
add esp, 0xc
lea eax, [ebp - 0x1c]
push 0xa
push eax
push dword [0x56c23c]
call dword [sym.imp.MSVCRT.dll__itoa]
add esp, 0xc
lea eax, [esi + 0x8b434]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x54]
push str.PkModeRecord
push eax
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
jmp case.0x474ac1.1011
lea eax, [ebp - 0x1b4]
push 0xa
push eax
push 0x56b0dc
call fcn.004c48e4
pop ecx
xor ebx, ebx
push ebx
push eax
call dword [sym.imp.MSVCRT.dll__i64toa]
mov edi, dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
lea ecx, [ebp - 0x1b4]
lea eax, [esi + 0x8b434]
push ecx
push 0x56f64c
push str.Log__s__s_Setup.ini
push eax
call edi
add esp, 0x10
lea eax, [ebp - 0x54]
push 0x56b0dc
push str._sRecord
push eax
call edi
lea eax, [ebp - 0x54]
push 0x5b
push eax
call dword [sym.imp.MSVCRT.dll_strchr]
add esp, 0x14
cmp eax, ebx
je 0x475513
push 1
push 0x55aa2c
push eax
call dword [sym.imp.MSVCRT.dll_strncpy]
add esp, 0xc
lea eax, [ebp - 0x54]
push 0x5d
push eax
call dword [sym.imp.MSVCRT.dll_strchr]
pop ecx
cmp eax, ebx
pop ecx
je 0x475536
push 1
push 0x55aa28
push eax
call dword [sym.imp.MSVCRT.dll_strncpy]
add esp, 0xc
lea eax, [esi + 0x8b434]
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x54]
push str.RecordAmount
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
cmp eax, 0xffffffff
jne 0x4755c7
push 0x56b0dc
push 0x56f64c
lea eax, [esi + 0x8b434]
push str.Log__s__s_Setup.ini
push eax
call edi
add esp, 0x10
lea eax, [esi + 0x8b434]
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x54]
push str.RecordAmount
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
cmp eax, 0xffffffff
jne 0x4755c7
lea eax, [ebp - 0x1b4]
push 0xa
push eax
push 0x56b0dc
call fcn.004c48e4
pop ecx
push ebx
push eax
call dword [sym.imp.MSVCRT.dll__i64toa]
add esp, 0x10
lea eax, [ebp - 0x1b4]
push eax
push 0x56f64c
lea eax, [esi + 0x8b434]
push str.Log__s__s_Setup.ini
push eax
call edi
add esp, 0x10
lea eax, [esi + 0x8b434]
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x54]
push str.LineRecord
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
cmp eax, 0xffffffff
mov dword [ebp - 0x10], eax
je 0x475611
push eax
lea ecx, [esi + 0x8b6a4]
call fcn.0047de33
call fcn.0045f70c
mov ecx, eax
call fcn.004cc09e
mov ecx, eax
mov eax, dword [ebp - 0x10]
inc ecx
cdq
inc ecx
idiv ecx
inc eax
mov dword [0x5692ec], eax
jmp 0x475638
call fcn.0045f70c
mov ecx, eax
call fcn.004cc09e
inc eax
lea ecx, [esi + 0x8b6a4]
inc eax
lea eax, [eax + eax*4]
push eax
call fcn.0047de33
mov dword [0x5692ec], 6
lea eax, [esi + 0x8b434]
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x54]
push str.LogRecord
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
cmp eax, ebx
jne 0x47565c
mov dword [0x5694a4], ebx
jmp 0x475679
cmp eax, 1
jne 0x475679
push ebx
push eax
push 0xf1
mov dword [0x5694a4], eax
push dword [esi + 0x8b234]
call dword [sym.imp.USER32.dll_SendMessageA]
mov dword [ebp - 0x10], ebx
mov eax, 0x5694b4
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x20], eax
push dword [ebp - 0x28]
lea eax, [ebp - 0x74]
push dword [ebp - 0x10]
push str.HotKey_d_d
push eax
call edi
add esp, 0x10
lea eax, [esi + 0x8b434]
push eax
lea eax, [ebp - 0x74]
push 0xffffffffffffffff
push eax
lea eax, [ebp - 0x54]
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x20]
inc dword [ebp - 0x28]
add dword [ebp - 0x20], 4
cmp dword [ebp - 0x28], 0xa
mov dword [ecx], eax
jl 0x475687
mov eax, dword [ebp - 0x20]
inc dword [ebp - 0x10]
cmp eax, 0x5695cc
jl 0x475681
lea edi, [esi + 0x8b434]
lea eax, [ebp - 0x54]
push edi
push 0xffffffffffffffff
push str.FacWordRecord
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
push edi
lea ecx, [esi + 0x7e8]
mov dword [esi + 0x8b4b8], eax
call fcn.004380ea
mov ecx, esi
call fcn.00477cf6
lea ecx, [esi + 0x10af8]
call fcn.0044dc41
mov ecx, esi
call fcn.00478c1e
jmp case.0x474ac1.1011
cmp dword [esi + 0x87e0c], 0
jne case.0x474ac1.1011
push 5
lea ecx, [esi + 0x87dac]
jmp 0x476986
lea ecx, [esi + 0x1491c]
call fcn.0044edf6
jmp case.0x474ac1.1011
lea ecx, [esi + 0x1491c]
call fcn.00495b61
jmp case.0x474ac1.1011
lea ecx, [esi + 0x31300]
call fcn.0044b0af
jmp case.0x474ac1.1011
lea ecx, [esi + 0x31300]
call fcn.0044b90a
xor ebx, ebx
cmp dword [esi + 0x850], ebx
jne case.0x474ac1.1011
cmp dword [esi + 0x31360], ebx
jne case.0x474ac1.1011
cmp byte [0x55bd68], bl
je 0x47581b
mov ecx, 0x56b070
mov byte [0x55bd68], bl
xor edi, edi
call fcn.004c632c
push eax
lea eax, [ebp - 0x174]
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x174]
push str.NULL
push eax
call sub.MSVCRT.dll_strcmp
add esp, 0x10
test eax, eax
je case.0x474ac1.1011
cmp byte [ebp - 0x174], bl
je case.0x474ac1.1011
lea eax, [ebp - 0x174]
push eax
call sub.MSVCRT.dll_strlen
test eax, eax
pop ecx
jle 0x47580f
movsx eax, byte [ebp + ebx - 0x174]
push eax
call sub.MSVCRT.dll_abs
add edi, eax
lea eax, [ebp - 0x174]
push eax
inc ebx
call sub.MSVCRT.dll_strlen
pop ecx
cmp ebx, eax
pop ecx
jl 0x4757ec
cmp edi, dword [esi + 0x8b4b8]
je case.0x474ac1.1011
mov dword [esi + 0x850], 1
jmp case.0x474ac1.1011
mov ecx, 0x56b070
call fcn.004c61c8
push eax
mov ecx, 0x56f7f8
call fcn.004c8a72
push eax
lea eax, [ebp - 0x1c]
push eax
call sub.MSVCRT.dll_strcpy
pop ecx
lea eax, [ebp - 0x1c]
pop ecx
push 0
push eax
push 4
jmp 0x476557
mov eax, dword [0x56ce74]
xor ebx, ebx
push ebx
push eax
mov ecx, 0x56f7f8
call fcn.004c829b
cmp eax, ebx
je case.0x474ac1.1011
add eax, 0x6c
push eax
lea eax, [ebp - 0x1c]
push eax
call sub.MSVCRT.dll_strcpy
pop ecx
lea eax, [ebp - 0x1c]
pop ecx
push ebx
push eax
push 3
jmp 0x476557
push 1
jmp 0x475894
push 0
lea ecx, [esi + 0x6bb04]
call fcn.00467140
jmp case.0x474ac1.1011
test byte [0x56b07c], 0x20
jne case.0x474ac1.1011
lea ecx, [esi + 0x7e8]
call fcn.00438815
jmp case.0x474ac1.1011
xor ebx, ebx
lea ecx, [esi + 0x6ba48]
push ebx
call fcn.00467140
push ebx
lea ecx, [esi + 0x2dabc]
call sub.MFC42.DLL_CWnd::ShowWindow
mov dword [esi + 0x8b42c], 1
mov eax, dword [esi + 0x8b420]
cmp eax, ebx
je 0x47591d
push eax
lea eax, [ebp - 0x74]
push str.MagicSkillType_d
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
lea eax, [ebp - 0x74]
push ebx
push dword [esi + 0x8b420]
push eax
lea ecx, [esi + 0x6c714]
call fcn.00464d82
jmp case.0x474ac1.1011
push ebx
lea eax, [ebp - 0x74]
push str.Magic_d
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
lea eax, [ebp - 0x74]
push ebx
push ebx
jmp 0x47590c
cmp dword [0x56b8dc], 0x64
jae case.0x474ac1.1011
lea ecx, [esi + 0x7e8]
call fcn.004388ea
jmp case.0x474ac1.1011
lea ecx, [esi + 0x7e8]
call fcn.004388fc
jmp case.0x474ac1.1011
lea ecx, [esi + 0x7e8]
call fcn.00438958
jmp case.0x474ac1.1011
push 0
jmp 0x47598a
push dword [esi + 0x8af80]
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x47599a
push 1
lea ecx, [esi + 0x8af60]
call fcn.004306b8
jmp case.0x474ac1.1011
lea edi, [esi + 0x8afc8]
xor ebx, ebx
cmp dword [edi], ebx
je case.0x474ac1.1011
push 1
lea ecx, [esi + 0x8af60]
call fcn.004306b8
mov dword [edi], ebx
jmp case.0x474ac1.1011
lea ecx, [esi + 0x3c710]
call fcn.0043bd7c
jmp case.0x474ac1.1011
cmp dword [esi + 0x84c], 0
lea eax, [esi + 0x84c]
jne case.0x474ac1.1011
mov dword [eax], 1
jmp case.0x474ac1.1011
lea ecx, [esi + 0x3f5e0]
call fcn.0043cf95
jmp case.0x474ac1.1011
lea ecx, [esi + 0x3cfb4]
call fcn.0043aace
jmp case.0x474ac1.1011
cmp dword [esi + 0x43df0], 0
je case.0x474ac1.1011
lea ecx, [esi + 0x43d90]
call fcn.0042fc00
jmp case.0x474ac1.1011
cmp dword [esi + 0x43df0], 0
je case.0x474ac1.1011
lea ecx, [esi + 0x43d90]
call fcn.0042fc86
jmp case.0x474ac1.1011
cmp dword [esi + 0x44fd4], 0
jne case.0x474ac1.1011
lea ecx, [esi + 0x7e8]
call fcn.00438fe2
jmp case.0x474ac1.1011
mov dword [esi + 0x8b4e4], 0x11
jmp case.0x474ac1.1011
cmp dword [esi + 0x45c8c], 0
jne case.0x474ac1.1011
lea ecx, [esi + 0x7e8]
call fcn.00439003
jmp case.0x474ac1.1011
mov dword [esi + 0x8b4e4], 0x12
jmp case.0x474ac1.1011
xor ebx, ebx
mov ecx, 0x56f7f8
push ebx
push edi
call fcn.004c829b
cmp eax, ebx
je case.0x474ac1.1011
add eax, 0x6c
push edi
push eax
push 0xe
jmp 0x476557
lea ecx, [esi + 0x31300]
call fcn.0044b955
jmp case.0x474ac1.1011
lea ecx, [esi + 0x31300]
call fcn.0044bc36
jmp case.0x474ac1.1011
push dword [esi + 0x8b420]
mov edi, 0x56b070
mov ecx, edi
call fcn.004c3f50
xor ebx, ebx
cmp eax, ebx
je 0x475b50
mov ecx, eax
call fcn.004c31ea
test eax, eax
je 0x475b33
push dword [esi + 0x8b420]
lea eax, [ebp - 0x74]
push str.MagicSkillType_d
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
lea eax, [ebp - 0x74]
lea ecx, [esi + 0x6c714]
push ebx
push dword [esi + 0x8b420]
push eax
call fcn.00464d82
jmp 0x475b50
lea ecx, [esi + 0x6c714]
call fcn.00464e5e
mov eax, dword [esi + 0x8b420]
mov dword [esi + 0x8b424], eax
mov dword [esi + 0x8b420], ebx
mov eax, dword [esi + 0x8b424]
cmp eax, ebx
je 0x475bb1
push eax
mov ecx, edi
call fcn.004c3f50
cmp eax, ebx
je 0x475bb1
mov ecx, eax
call fcn.004c31ea
test eax, eax
je 0x475bb1
push dword [esi + 0x8b424]
lea eax, [ebp - 0x74]
push str.MagicSkillType_d
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
lea eax, [ebp - 0x74]
lea ecx, [esi + 0x6c714]
push ebx
push dword [esi + 0x8b424]
push eax
call fcn.00464d82
mov eax, dword [esi + 0x8b424]
mov dword [esi + 0x8b420], eax
mov dword [esi + 0x8b424], ebx
cmp dword [esi + 0x2ccd8], ebx
je 0x475bc4
lea ecx, [esi + 0x2cc78]
call fcn.004343d2
cmp dword [esi + 0x2e9b0], ebx
je 0x475bd7
lea ecx, [esi + 0x2e950]
call fcn.0042e993
cmp dword [esi + 0x2db1c], ebx
je case.0x474ac1.1011
cmp byte [esi + 0x2db20], 2
je case.0x474ac1.1011
cmp dword [esi + 0x2db28], ebx
jne case.0x474ac1.1011
cmp dword [esi + 0x2db2c], ebx
jne case.0x474ac1.1011
lea ecx, [esi + 0x2dabc]
call fcn.0045ebc8
jmp case.0x474ac1.1011
mov ecx, 0x56de60
call fcn.004acca6
lea ecx, [esi + 0x466e0]
call fcn.0043ecb0
cmp dword [esi + 0x467dc], 0
je case.0x474ac1.1011
push 0x56de60
lea ecx, [esi + 0x46760]
jmp 0x475e4c
cmp byte [0x56ce50], 0
je case.0x474ac1.1011
push 1
jmp 0x475c6a
xor ebx, ebx
cmp byte [0x56ce50], bl
je case.0x474ac1.1011
push ebx
lea ecx, [esi + 0x2dabc]
call fcn.0045f4ee
jmp case.0x474ac1.1011
push 1
jmp 0x475c80
push 0
lea ecx, [esi + 0x7e8]
call fcn.004390b1
jmp case.0x474ac1.1011
lea ecx, [esi + 0x4d670]
call fcn.00425619
jmp case.0x474ac1.1011
lea ecx, [esi + 0x4b2f0]
call fcn.004252bc
jmp case.0x474ac1.1011
lea ecx, [esi + 0x4da24]
call fcn.0042790b
jmp case.0x474ac1.1011
lea ecx, [esi + 0x4da24]
call fcn.00427a04
jmp case.0x474ac1.1011
mov edi, dword [sym.imp.GraphicData.dll_GameDataSetQuery]
call edi
mov ebx, eax
call edi
mov edi, eax
mov eax, dword [ebx]
push 0x10
push 0x2785
mov ecx, ebx
call dword [eax + 0x3c]
push eax
mov eax, dword [edi]
push 0
push 0x289f
jmp 0x476b2a
lea ecx, [esi + 0x7e8]
call fcn.00437093
xor ebx, ebx
cmp dword [esi + 0x1b59c], ebx
je 0x475d1c
push ebx
lea ecx, [esi + 0x1b53c]
call sub.MFC42.DLL_CWnd::ShowWindow
lea ecx, [esi + 0x1491c]
call fcn.0044fd4c
jmp case.0x474ac1.1011
lea ecx, [esi + 0x22658]
call fcn.00455454
xor ebx, ebx
push ebx
push ebx
push 0x15
jmp 0x476557
lea ecx, [esi + 0x7e8]
call fcn.00438aa3
jmp case.0x474ac1.1011
xor ebx, ebx
cmp edi, ebx
je case.0x474ac1.1011
push 5
push ebx
push ebx
push edi
push ebx
push dword [esi + 0x20]
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp 0x474ae1
lea ecx, [esi + 0x7e8]
call fcn.00437093
cmp dword [esi + 0x1b59c], 0
jne 0x475d91
push 5
lea ecx, [esi + 0x1b53c]
call sub.MFC42.DLL_CWnd::ShowWindow
push dword [esi + 0x8b4d8]
mov dword [esi + 0x980], 0x2b
push 1
jmp 0x475dd8
lea ecx, [esi + 0x7e8]
call fcn.00437093
cmp dword [esi + 0x1b59c], 0
jne 0x475dc6
push 5
lea ecx, [esi + 0x1b53c]
call sub.MFC42.DLL_CWnd::ShowWindow
push dword [esi + 0x8b4d8]
mov dword [esi + 0x980], 0x2b
push 2
lea ecx, [esi + 0x502d0]
call fcn.0042ae42
jmp case.0x474ac1.1011
xor ebx, ebx
cmp dword [esi + 0x28764], ebx
jne case.0x474ac1.1011
cmp dword [esi + 0x2a6b0], ebx
jne case.0x474ac1.1011
push dword [esi + 0x8b4d8]
lea ecx, [esi + 0x7e8]
push 3
call fcn.004377f5
jmp case.0x474ac1.1011
cmp dword [esi + 0x301c8], 0
jne case.0x474ac1.1011
lea ecx, [esi + 0x7e8]
call fcn.004389bc
jmp case.0x474ac1.1011
xor ebx, ebx
cmp dword [esi + 0x15bd4], ebx
je case.0x474ac1.1011
push ebx
lea ecx, [esi + 0x15b58]
call fcn.0041584c
jmp case.0x474ac1.1011
cmp dword [esi + 0x15c3c], 0
je case.0x474ac1.1011
lea ecx, [esi + 0x15bd8]
call fcn.0041451a
jmp case.0x474ac1.1011
xor ebx, ebx
cmp dword [esi + 0x15bd4], ebx
je case.0x474ac1.1011
push ebx
lea ecx, [esi + 0x15b58]
jmp 0x476986
xor ebx, ebx
cmp dword [esi + 0x467dc], ebx
je case.0x474ac1.1011
push ebx
lea ecx, [esi + 0x46760]
jmp 0x476986
xor ebx, ebx
cmp dword [esi + 0x46740], ebx
je 0x475ebd
push ebx
lea ecx, [esi + 0x466e0]
call sub.MFC42.DLL_CWnd::ShowWindow
cmp dword [esi + 0x1b59c], ebx
je case.0x474ac1.1011
push ebx
jmp 0x47518b
xor ebx, ebx
cmp dword [esi + 0x15c3c], ebx
je case.0x474ac1.1011
push ebx
lea ecx, [esi + 0x15bd8]
jmp 0x476986
xor ebx, ebx
cmp dword [esi + 0x28764], ebx
je 0x475f0d
push ebx
lea ecx, [esi + 0x28704]
call sub.MFC42.DLL_CWnd::ShowWindow
push ebx
push 0x16
call fcn.004a2911
pop ecx
jmp 0x4766c3
cmp dword [esi + 0x2a6b0], ebx
jne case.0x474ac1.1011
push 0xb48
jmp 0x4763a9
cmp dword [esi + 0x55ff4], 0
jne case.0x474ac1.1011
push 5
lea ecx, [esi + 0x55f88]
jmp 0x476986
xor ebx, ebx
cmp dword [esi + 0x55ff4], ebx
je case.0x474ac1.1011
push ebx
jmp 0x475f32
lea ecx, [esi + 0x57c40]
mov dword [esi + 0x57ca4], edi
call fcn.00447976
jmp case.0x474ac1.1011
mov ecx, esi
call fcn.00478df1
jmp case.0x474ac1.1011
lea ecx, [esi + 0x57c40]
call fcn.0044864c
jmp case.0x474ac1.1011
lea ecx, [esi + 0x57c40]
call fcn.00448712
jmp case.0x474ac1.1011
push dword [esi + 0x57c60]
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x475fa4
push 0
jmp 0x475fa6
push 5
lea ecx, [esi + 0x57c40]
jmp 0x476986
lea eax, [esi + 0x7e8]
xor ebx, ebx
cmp eax, ebx
je case.0x474ac1.1011
cmp dword [eax + 0x20], ebx
je case.0x474ac1.1011
push ebx
jmp 0x475fa6
lea eax, [esi + 0x860e8]
lea ecx, [esi + 0x27fdc]
push eax
call sub.MFC42.DLL_CWnd::SetWindowTextA
jmp case.0x474ac1.1011
push dword [esi + 0x57ef0]
lea ecx, [esi + 0x27fdc]
call sub.MFC42.DLL_CWnd::SetWindowTextA
push 0x138a
lea ecx, [esi + 0x27034]
call fcn.00457878
jmp case.0x474ac1.1011
push 0
mov ecx, 0x56b070
call fcn.004aa7e0
push eax
push 0x3a
jmp 0x476bd3
xor ebx, ebx
cmp dword [esi + 0x56290], ebx
jne case.0x474ac1.1011
push edi
mov ecx, 0x56f750
call fcn.004bbf4e
cmp eax, ebx
mov dword [ebp - 0x10], eax
je case.0x474ac1.1011
mov al, byte [0x568b08]
push 0x3f
mov byte [ebp - 0x174], al
pop ecx
xor eax, eax
lea edi, [ebp - 0x173]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, dword [ebp - 0x10]
mov edi, dword [sym.imp.GraphicData.dll_GameDataSetQuery]
mov eax, dword [eax + 0x5c]
mov dword [ebp - 0x20], eax
call edi
mov ecx, dword [ebp - 0x10]
mov edx, dword [eax]
add ecx, 0x10
push ecx
mov ecx, eax
push dword [ebp - 0x20]
push 0x28f2
call dword [edx + 0x3c]
push eax
lea eax, [ebp - 0x174]
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
mov ecx, 0x56c080
call fcn.004d7ef7
push 0x28
pop ecx
sub ecx, eax
mov dword [ebp - 0x20], ecx
jne 0x4760c3
call edi
mov edx, dword [eax]
push ebx
push ebx
push 0xff0000
push 0x7d5
push 0x2909
jmp 0x47637b
mov ecx, dword [ebp - 0x10]
mov eax, dword [0x56be80]
xor edx, edx
div dword [ecx + 0x5c]
cmp eax, ebx
jne 0x4760ee
call edi
mov edx, dword [eax]
push ebx
push ebx
push 0xff0000
push 0x7d5
push 0x290a
jmp 0x47637b
cmp dword [ebp - 0x20], eax
jge 0x476108
push ebx
push dword [ebp - 0x20]
push ecx
lea ecx, [esi + 0x56208]
call fcn.00419032
jmp case.0x474ac1.1011
push 1
push eax
jmp 0x4760f7
mov al, byte [0x568b08]
lea edi, [ebp - 0x33]
mov byte [ebp - 0x34], al
xor eax, eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
cmp dword [ebp + 0x10], 0
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
je case.0x474ac1.1011
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x34]
push eax
push str._s__u__d
push dword [ebp + 0x10]
call dword [sym.imp.MSVCRT.dll_sscanf]
add esp, 0x14
cmp eax, 3
jne 0x474e79
push dword [ebp - 0x10]
lea eax, [ebp - 0x34]
push dword [ebp - 0x20]
push eax
call fcn.00408fcc
mov ecx, eax
call fcn.004086a8
jmp 0x474e79
call fcn.00408fcc
mov ecx, eax
call fcn.00408885
mov eax, dword [0x56b0f4]
mov edi, dword [0x56b0b6]
push eax
mov ecx, 0x56b070
call fcn.004b7f45
push eax
movzx eax, di
push eax
push 0x56b0dc
call fcn.004a270a
mov ecx, eax
call fcn.004a28a9
jmp case.0x474ac1.1011
push dword [ebp + 0x10]
mov ecx, 0x568f58
call fcn.004cbbd8
mov cl, byte [0x568b08]
mov edx, eax
xor eax, eax
lea edi, [ebp - 0x1b]
mov byte [ebp - 0x1c], cl
push 0x3f
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 0x174], cl
pop ecx
xor eax, eax
lea edi, [ebp - 0x173]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x1c]
push eax
push 0x559bc0
push edx
call dword [sym.imp.MSVCRT.dll_sscanf]
add esp, 0xc
call dword [sym.imp.GraphicData.dll_GameDataSetQuery]
mov edx, dword [eax]
lea ecx, [ebp - 0x1c]
push ecx
push 0x2b0e
mov ecx, eax
call dword [edx + 0x3c]
push eax
lea eax, [ebp - 0x174]
push 0x100
push eax
call dword [sym.imp.MSVCRT.dll__snprintf]
add esp, 0x10
lea eax, [ebp - 0x174]
lea ecx, [esi + 0x86818]
push dword [ebp + 0x10]
push eax
call fcn.00433ebb
jmp case.0x474ac1.1011
lea ecx, [esi + 0x85df4]
call fcn.00455e12
jmp case.0x474ac1.1011
xor ebx, ebx
lea edi, [esi + 0x5e820]
cmp dword [esi + 0x5e880], ebx
je 0x47626f
push ebx
mov ecx, edi
call sub.MFC42.DLL_CWnd::ShowWindow
push ebx
mov ecx, edi
call sub.MFC42.DLL_CWnd::EnableWindow
jmp case.0x474ac1.1011
push 5
mov ecx, edi
call sub.MFC42.DLL_CWnd::ShowWindow
push 1
jmp 0x476263
lea edi, [esi + 0x5e820]
xor ebx, ebx
push ebx
mov ecx, edi
call sub.MFC42.DLL_CWnd::ShowWindow
push ebx
mov ecx, edi
call sub.MFC42.DLL_CWnd::EnableWindow
mov edi, 0x56b070
mov ecx, edi
call fcn.004aa2ea
test al, al
je case.0x474ac1.1011
mov ecx, edi
call fcn.004aa34c
jmp case.0x474ac1.1011
mov edi, 0x56b070
mov ecx, edi
call fcn.004aa2fe
xor ebx, ebx
mov ecx, 0x56f7f8
push ebx
push eax
call fcn.004c829b
cmp eax, ebx
mov dword [ebp - 0x28], eax
je 0x476612
mov ecx, dword [eax + 0x3c]
cmp ecx, 0xf423f
ja 0x476612
mov eax, dword [eax + 0x3b4]
cmp eax, 0xf
jg 0x476494
je 0x4764db
cmp eax, 5
jg 0x4763d7
je 0x4763bb
cmp eax, 1
je 0x476390
cmp eax, 2
je 0x47632a
jle case.0x474ac1.1011
cmp eax, 4
jle 0x4764b6
jmp case.0x474ac1.1011
mov ecx, edi
call fcn.004aaaf5
test eax, eax
je 0x476362
mov ecx, edi
call fcn.004aaaf5
cmp eax, 0x32
je 0x476362
cmp dword [esi + 0x87e0c], ebx
jne case.0x474ac1.1011
mov ebx, dword [ebp - 0x28]
mov ecx, edi
push dword [ebx + 0x3c]
call fcn.004ca757
mov eax, dword [ebx + 0x3c]
jmp 0x4764d0
call dword [sym.imp.GraphicData.dll_GameDataSetQuery]
mov edx, dword [eax]
push ebx
push ebx
push 0xff0000
push 0x7d5
push 0x2bad
mov ecx, eax
call dword [edx + 0x3c]
push eax
mov ecx, 0x568f20
call fcn.0047cb64
jmp case.0x474ac1.1011
cmp dword [esi + 0x28764], ebx
jne case.0x474ac1.1011
cmp dword [esi + 0x2a6b0], ebx
jne case.0x474ac1.1011
push ecx
push 1
lea ecx, [esi + 0x7e8]
call fcn.00437742
jmp case.0x474ac1.1011
cmp dword [esi + 0x307e8], ebx
jne case.0x474ac1.1011
lea ecx, [esi + 0x7e8]
call fcn.00438a12
jmp case.0x474ac1.1011
sub eax, 6
je 0x476478
dec eax
je 0x47645c
sub eax, 7
jne case.0x474ac1.1011
cmp ecx, dword [0x56ed34]
jne 0x4763f8
push 1
jmp 0x47641c
cmp dword [esi + 0x1d6c8], ebx
jne 0x47642c
cmp dword [esi + 0x3f640], ebx
je 0x476410
cmp ecx, dword [0x56ece4]
je 0x47642c
push ecx
mov ecx, 0x56ece0
call fcn.004bc292
push ebx
lea ecx, [esi + 0x7e8]
call fcn.00438f44
jmp case.0x474ac1.1011
call dword [sym.imp.GraphicData.dll_GameDataSetQuery]
mov edx, dword [eax]
push ebx
push ebx
push 0xff0000
push 0x7d5
push 0x289e
mov ecx, eax
call dword [edx + 0x3c]
push eax
mov ecx, 0x568f20
call fcn.0047cb64
xor eax, eax
jmp 0x476c35
cmp dword [esi + 0x3aa84], ebx
jne case.0x474ac1.1011
lea ecx, [esi + 0x7e8]
call fcn.00438a4d
jmp case.0x474ac1.1011
cmp dword [esi + 0x2fba4], ebx
jne case.0x474ac1.1011
lea ecx, [esi + 0x7e8]
call fcn.00438966
jmp case.0x474ac1.1011
sub eax, 0x10
je 0x476525
sub eax, 5
je 0x476512
dec eax
je 0x4764f4
dec eax
dec eax
je 0x476512
sub eax, 3
je 0x4764db
dec eax
dec eax
jne case.0x474ac1.1011
cmp dword [esi + 0x87e0c], ebx
jne case.0x474ac1.1011
push ecx
mov ecx, edi
call fcn.004ca757
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x3c]
mov dword [esi + 0x8b4d8], eax
jmp case.0x474ac1.1011
cmp dword [esi + 0x87e0c], ebx
jne case.0x474ac1.1011
push ecx
mov ecx, edi
call fcn.004ca757
jmp case.0x474ac1.1011
call dword [sym.imp.GraphicData.dll_GameDataSetQuery]
mov edx, dword [eax]
push ebx
push ebx
push 0xff0000
push 0x7d5
push 0x2872
jmp 0x47637b
push 1
push 1
push dword [ebp - 0x28]
mov ecx, edi
call fcn.004a6855
jmp case.0x474ac1.1011
mov ecx, edi
call fcn.004aaaf5
test eax, eax
je 0x476567
mov ecx, edi
call fcn.004aaaf5
cmp eax, 0x32
je 0x476567
push dword [ebp - 0x28]
mov ecx, edi
call fcn.004a6b8e
test eax, eax
je case.0x474ac1.1011
mov eax, dword [ebp - 0x28]
push dword [eax + 0x3c]
push ebx
push 0xd
lea ecx, [esi + 0x6c838]
call fcn.0041ccc2
jmp case.0x474ac1.1011
call dword [sym.imp.GraphicData.dll_GameDataSetQuery]
mov edx, dword [eax]
push ebx
push ebx
push 0xff0000
push 0x7d5
push 0x2bae
jmp 0x47637b
xor ebx, ebx
cmp edi, ebx
jne case.0x474ac1.1011
movzx eax, word [edi]
mov dword [ebp - 0x14], eax
mov edi, 0x56b070
movzx eax, word [2]
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x24]
push eax
mov ecx, edi
call fcn.004aa312
lea eax, [ebp - 0x14]
push ebx
push eax
mov ecx, edi
call fcn.004aa32a
cmp dword [0x56ed38], ebx
je 0x4765ee
call dword [sym.imp.GraphicData.dll_GameDataSetQuery]
mov edx, dword [eax]
push ebx
push ebx
push 0xff0000
push 0x7d5
push 0x2b74
mov ecx, eax
call dword [edx + 0x3c]
push eax
mov ecx, 0x568f20
call fcn.0047cb64
jmp 0x476612
mov ecx, 0x56b294
call fcn.004cb2b8
mov ecx, 0x56b358
mov dword [ebp - 0x2c], eax
call fcn.004cb2b8
mov ecx, dword [ebp - 0x2c]
cmp ecx, dword [ebp - 0x14]
jne 0x47661a
cmp eax, dword [ebp - 0x10]
jne 0x47661a
or eax, 0xffffffff
jmp 0x476c35
mov ecx, edi
call fcn.004aa2ea
test al, al
je 0x476684
mov ecx, dword [ebp - 0x24]
cmp ecx, ebx
je 0x4766a3
mov eax, dword [ebp - 0x20]
cmp eax, ebx
je 0x4766a3
cmp ecx, dword [ebp - 0x14]
jne 0x47663d
cmp eax, dword [ebp - 0x10]
je 0x4766a3
call dword [sym.imp.GraphicData.dll_GameDataSetQuery]
mov edx, dword [eax]
push 0x2b75
mov ecx, eax
call dword [edx + 0x3c]
push eax
lea eax, [ebp - 0x174]
push 0x100
push eax
call dword [sym.imp.MSVCRT.dll__snprintf]
add esp, 0xc
lea eax, [ebp - 0x174]
mov ecx, 0x568f20
push ebx
push ebx
push 0xff0000
push 0x7d5
push eax
call fcn.0047cb64
jmp 0x4766a3
push 1
mov ecx, edi
call fcn.004aa2f1
mov ecx, dword [0x56b8a4]
cmp ecx, ebx
je 0x4766a3
mov eax, dword [ecx]
push 1
push str.autorun
call dword [eax + 0x10]
push dword [4]
mov ecx, edi
call fcn.004aa305
push dword [ebp - 0x10]
mov ecx, edi
push dword [ebp - 0x14]
call fcn.004a5806
push ebx
call sub.MFC42.DLL_operatordelete
pop ecx
jmp case.0x474ac1.1011
call dword [sym.imp.GraphicData.dll_GameDataSetQuery]
mov edx, dword [eax]
push 0
push 0x2b72
mov ecx, eax
call dword [edx + 0x3c]
push eax
push 0x1f
jmp 0x476557
lea edi, [esi + 0x6c838]
mov ecx, edi
call fcn.0041d9d7
cmp eax, 0x1f
jne case.0x474ac1.1011
push 0
mov ecx, edi
call sub.MFC42.DLL_CWnd::ShowWindow
cmp dword [esi + 0x8b418], 0xd
jne case.0x474ac1.1011
cmp dword [0x55bd64], 0xffffffff
je case.0x474ac1.1011
mov dword [esi + 0x8b3f8], 1
jmp case.0x474ac1.1011
call dword [sym.imp.GraphicData.dll_GameDataSetQuery]
mov edx, dword [eax]
push 0x2b36
jmp 0x476767
call dword [sym.imp.GraphicData.dll_GameDataSetQuery]
mov edx, dword [eax]
push 0x2b37
jmp 0x476767
call dword [sym.imp.GraphicData.dll_GameDataSetQuery]
mov edx, dword [eax]
push 0x2b38
jmp 0x476767
call dword [sym.imp.GraphicData.dll_GameDataSetQuery]
mov edx, dword [eax]
push 0x2b39
mov ecx, eax
call dword [edx + 0x3c]
push eax
lea ecx, [esi + 0x87348]
call fcn.00428797
jmp case.0x474ac1.1011
call dword [sym.imp.GraphicData.dll_GameDataSetQuery]
mov edx, dword [eax]
push 0x2b34
jmp 0x476799
call dword [sym.imp.GraphicData.dll_GameDataSetQuery]
mov edx, dword [eax]
push 0x2b35
mov ecx, eax
call dword [edx + 0x3c]
push eax
lea ecx, [esi + 0x87348]
call fcn.00428797
call sub.WINMM.dll_timeGetTime
push eax
mov ecx, 0x56b070
call fcn.004aaa2e
jmp case.0x474ac1.1011
mov byte [esi + 0x8b760], 1
jmp case.0x474ac1.1011
mov dword [esi + 0x8b754], 1
jmp case.0x474ac1.1011
xor ebx, ebx
mov dword [esi + 0x8b754], ebx
mov byte [esi + 0x8b760], bl
jmp case.0x474ac1.1011
mov ecx, 0x56f630
call fcn.004b98f2
mov ecx, 0x568f20
call fcn.0047d011
lea ecx, [esi + 0x568]
call fcn.00454171
lea edi, [esi + 0x60]
push 5
mov ecx, edi
call sub.MFC42.DLL_CWnd::ShowWindow
push 0x5594a8
push str.GOLOGIN
mov ecx, edi
call fcn.00431f31
jmp case.0x474ac1.1011
xor ebx, ebx
cmp dword [esi + 0x8b758], ebx
jle case.0x474ac1.1011
cmp dword [esi + 0x8b75c], ebx
jle case.0x474ac1.1011
push 1
call dword [sym.imp.graphic.dll_public:_static_int___cdecl_CMyBitmap::GetScreenHeight_void_]
mov edi, dword [sym.imp.graphic.dll_public:_static_int___cdecl_CMyBitmap::GetScreenWidth_void_]
push eax
call edi
mov ecx, dword [0x568f0c]
push eax
push ebx
push ebx
call sub.MFC42.DLL_CWnd::MoveWindow
push 1
call dword [sym.imp.graphic.dll_public:_static_int___cdecl_CMyBitmap::GetScreenHeight_void_]
push eax
call edi
push eax
push ebx
push ebx
mov ecx, esi
call sub.MFC42.DLL_CWnd::MoveWindow
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_GetParent]
push eax
call sub.MFC42.DLL_CWnd::FromHandle
push ebx
mov ecx, eax
call sub.MFC42.DLL_CWnd::CenterWindow
lea eax, [ebp - 0x1c]
push eax
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_GetWindowRect]
push 1
push 0x14
call edi
push eax
mov eax, dword [ebp - 0x18]
add eax, 0xffffffec
lea edi, [esi + 0x8ad1c]
push eax
mov ecx, edi
push dword [ebp - 0x1c]
call sub.MFC42.DLL_CWnd::MoveWindow
push ebx
mov ecx, edi
call fcn.004594c4
lea ecx, [esi + 0x60]
call fcn.00433886
lea ecx, [esi + 0x568]
call fcn.004542cc
mov byte [esi + 0x8b761], 1
jmp case.0x474ac1.1011
lea ecx, [esi + 0x61e88]
call fcn.004209cf
lea ecx, [esi + 0x67448]
call fcn.0041f01a
jmp case.0x474ac1.1011
xor ebx, ebx
push ebx
push ebx
push ebx
jmp 0x47690d
xor ebx, ebx
push ebx
push ebx
push 1
lea ecx, [esi + 0x875e8]
call fcn.0041e640
jmp case.0x474ac1.1011
mov ecx, 0x56b070
call fcn.004aaa3b
sub eax, 0x35
je 0x476943
dec eax
jne case.0x474ac1.1011
lea ecx, [esi + 0x68eb8]
call fcn.00422586
jmp case.0x474ac1.1011
lea ecx, [esi + 0x61e88]
call fcn.00421265
jmp case.0x474ac1.1011
xor ebx, ebx
cmp edi, ebx
jne case.0x474ac1.1011
cmp dword [0x56bc00], 0x46
push ebx
mov ecx, 0x56b070
jb 0x476990
call fcn.004b7d75
push 5
lea ecx, [esi + 0x68eb8]
call sub.MFC42.DLL_CWnd::ShowWindow
push 5
lea ecx, [esi + 0x67448]
call sub.MFC42.DLL_CWnd::ShowWindow
jmp case.0x474ac1.1011
call fcn.004b7d75
push 5
lea ecx, [esi + 0x61e88]
jmp 0x476986
push 0
lea ecx, [esi + 0x68eb8]
call sub.MFC42.DLL_CWnd::ShowWindow
jmp 0x476995
push 0
jmp 0x476980
xor ebx, ebx
cmp dword [esi + 0x68eb0], ebx
je 0x4769c8
push ebx
lea ecx, [esi + 0x67448]
call sub.MFC42.DLL_CWnd::ShowWindow
cmp dword [esi + 0x69c88], ebx
je 0x4769dc
push ebx
lea ecx, [esi + 0x68eb8]
call sub.MFC42.DLL_CWnd::ShowWindow
cmp dword [esi + 0x67444], ebx
je case.0x474ac1.1011
push ebx
jmp 0x476997
sub edi, 0xc
je 0x476a09
dec edi
jne case.0x474ac1.1011
push 0
lea ecx, [esi + 0x19c04]
call fcn.004299ed
jmp case.0x474ac1.1011
push 1
jmp 0x4769f9
sub edi, 0x10
je 0x476a2b
dec edi
jne case.0x474ac1.1011
push 0
lea ecx, [esi + 0x4daa4]
call fcn.004284cf
jmp case.0x474ac1.1011
push 1
jmp 0x476a1b
call dword [sym.imp.GraphicData.dll_GameDataSetQuery]
mov edx, dword [eax]
push 0
push 0x2b9e
mov ecx, eax
call dword [edx + 0x3c]
push eax
push 0x28
jmp 0x476557
lea ecx, [esi + 0x24404]
call fcn.0042bf5f
jmp case.0x474ac1.1011
push 0x3f
xor ebx, ebx
pop ecx
xor eax, eax
lea edi, [ebp - 0x173]
mov byte [ebp - 0x174], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
call dword [sym.imp.GraphicData.dll_GameDataSetQuery]
mov edx, dword [eax]
push 0x2b8e
mov ecx, eax
call dword [edx + 0x3c]
mov edi, 0x56b070
mov dword [ebp - 0x10], eax
mov ecx, edi
call fcn.004bf870
push eax
call sub.MSVCRT.dll_strlen
test eax, eax
pop ecx
jbe case.0x474ac1.1011
mov ecx, edi
call fcn.004bf870
push eax
lea eax, [ebp - 0x174]
push dword [ebp - 0x10]
push 0xff
push eax
call dword [sym.imp.MSVCRT.dll__snprintf]
add esp, 0x10
lea eax, [ebp - 0x174]
push ebx
push eax
push 0x25
jmp 0x476557
lea ecx, [esi + 0x5eeac]
call fcn.0045c89f
xor ebx, ebx
cmp dword [esi + 0x7139c], ebx
je case.0x474ac1.1011
cmp edi, ebx
je case.0x474ac1.1011
push edi
lea ecx, [esi + 0x71318]
call fcn.004518e9
jmp case.0x474ac1.1011
mov edi, dword [sym.imp.GraphicData.dll_GameDataSetQuery]
call edi
mov ebx, eax
call edi
mov edi, eax
mov eax, dword [ebx]
push 0x10
push 0x2785
mov ecx, ebx
call dword [eax + 0x3c]
push eax
mov eax, dword [edi]
push 0
push 0x277e
mov ecx, edi
call dword [eax + 0x3c]
push eax
call fcn.00468288
pop ecx
pop ecx
push eax
mov ecx, esi
call sub.MFC42.DLL_CWnd::MessageBoxA
jmp case.0x474ac1.1011
xor ebx, ebx
cmp dword [esi + 0x61e84], ebx
je case.0x474ac1.1011
lea ecx, [esi + 0x60f9c]
call fcn.0045d334
cmp eax, edi
jne case.0x474ac1.1011
push ebx
lea ecx, [esi + 0x60f9c]
jmp 0x476986
xor ebx, ebx
cmp dword [esi + 0x60f98], ebx
je case.0x474ac1.1011
push ebx
lea ecx, [esi + 0x5eeac]
jmp 0x476986
lea ecx, [esi + 0x5eeac]
call fcn.0045c77c
jmp case.0x474ac1.1011
push edi
push 1
lea ecx, [esi + 0x71318]
call fcn.00452362
jmp case.0x474ac1.1011
push edi
push 1
lea ecx, [esi + 0x71318]
call fcn.00451af0
jmp case.0x474ac1.1011
call dword [sym.imp.GraphicData.dll_GameDataSetQuery]
mov edx, dword [eax]
push edi
mov ecx, eax
call dword [edx + 0x3c]
xor ebx, ebx
cmp eax, ebx
je case.0x474ac1.1011
push ebx
push eax
push 0x3b
lea ecx, [esi + 0x70c24]
call fcn.004458ae
jmp case.0x474ac1.1011
lea ecx, [ebp - 0x5bc]
call fcn.004d0355
and dword [ebp - 4], 0
push 0xe
mov ecx, 0x56b070
call fcn.004c1fd8
push eax
lea ecx, [ebp - 0x5bc]
call fcn.004d0404
test eax, eax
je 0x476c16
lea ecx, [ebp - 0x5bc]
call fcn.004b9b9d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5bc]
call fcn.004d03b0
push dword [ebp + 0x10]
mov ecx, esi
push dword [ebp + 0xc]
push dword [ebp + 8]
call sub.MFC42.DLL_CWnd::WindowProc
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 0xc