Function at 0x41cd50
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x459f81
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xf20
push ebx
push esi
push edi
push 4
push 0x4a1498
push 0x458e704
call fcn.004042b0
push 4
push 0x4a1494
push 0x458e6fc
call fcn.004042b0
mov ebx, dword [ebp + 8]
mov esi, 5
push esi
push 0x45e8b4
push ebx
call fcn.0044cfd0
add esp, 0x24
test eax, eax
jne 0x41ce7e
mov cl, byte [ebx + 5]
cmp cl, 0x20
lea eax, [ebx + 5]
jne 0x41cdc9
mov cl, byte [eax + 1]
inc eax
cmp cl, 0x20
je 0x41cdc0
lea ecx, [esp + 0x14c]
push ecx
lea edx, [esp + 0x28]
push edx
lea ecx, [esp + 0x20]
push ecx
push 0x45c740
push eax
call fcn.0044d009
add esp, 0x14
xor edi, edi
jmp 0x41cdf0
mov esi, dword [edi*4 + 0x4663a0]
lea eax, [esp + 0x14c]
mov edi, edi
mov dl, byte [eax]
mov bl, byte [esi]
mov cl, dl
cmp dl, bl
jne 0x41ce28
test cl, cl
je 0x41ce24
mov dl, byte [eax + 1]
mov bl, byte [esi + 1]
mov cl, dl
cmp dl, bl
jne 0x41ce28
add eax, 2
add esi, 2
test cl, cl
jne 0x41ce00
xor eax, eax
jmp 0x41ce2d
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x41ce76
inc edi
cmp edi, 8
jl 0x41cdf0
mov edx, dword [0x49d418]
push edx
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x1c]
push eax
push ecx
call fcn.0040cc50
add esp, 0xc
mov eax, dword [0x498d4c]
lea edx, [eax + eax*4]
shl edx, 1
push edx
call dword [sym.imp.kernel32.dll_Sleep]
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp edi, 0xffffffff
je 0x41ce37
push edi
jmp 0x41ce3e
push 9
push 0x45e8a8
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x41cfc2
push 1
add ebx, 9
push 0x2c
mov dword [esp + 0x48], eax
mov ecx, 0x17
lea edi, [esp + 0x4c]
push ebx
rep stosd dword es:[edi], eax
call fcn.00410490
add esp, 0xc
mov edi, eax
dec edi
cmp edi, 0xffffffff
jne 0x41cef0
mov edx, dword [0x49d4cc]
mov esi, dword [0x49d4b0]
xor eax, eax
mov ecx, 0x49c20c
cmp dword [ecx], 1
jne 0x41cedd
cmp eax, esi
je 0x41cedd
cmp eax, edx
jne 0x41ceee
add ecx, 0x3b0
inc eax
cmp ecx, 0x49d47c
jl 0x41ced0
jmp 0x41cef0
mov edi, eax
lea eax, [esp + 0x428]
push eax
push 0x64
push 2
push 0x2c
push ebx
call fcn.00410320
lea ecx, [esp + 0x54]
push ecx
lea edx, [esp + 0x440]
push edx
call fcn.0041b2e0
add esp, 0x1c
or esi, 0xffffffff
mov ecx, 9
mov eax, 0x49df14
mov edx, 1
jmp 0x41cf30
cmp dword [esp + ecx*4 + 0x40], edx
jne 0x41cf3a
cmp dword [eax], edx
je 0x41cf49
add eax, 0x124
inc ecx
cmp eax, 0x49f030
jl 0x41cf30
jmp 0x41cf4b
mov esi, ecx
push 3
push 0x2c
push ebx
call fcn.00410490
add esp, 0xc
dec eax
cmp edi, 5
jae 0x422410
cmp eax, 0x50
jae 0x422410
cmp esi, 9
jb 0x422410
cmp esi, 0x18
jae 0x422410
mov ecx, eax
shl ecx, 6
cmp dword [ecx + 0x49ac98], 1
jne 0x422410
mov edx, dword [ecx + 0x49ac9c]
test edx, edx
je 0x422410
push 0x45e89c
push esi
push edi
push eax
call fcn.00402b00
add esp, 0x10
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0xc
push 0x45e88c
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x41d0b4
xor ebx, ebx
mov ecx, 0x7d
lea edi, [esp + 0x428]
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], 1
mov dword [esp + 0x48], 2
mov dword [esp + 0x4c], 3
mov dword [esp + 0x50], 4
mov dword [esp + 0x54], esi
mov dword [esp + 0x58], 6
mov dword [esp + 0x5c], 7
mov dword [esp + 0x60], esi
rep stosd dword es:[edi], eax
jmp 0x41d030
mov eax, dword [esp + ebx*4 + 0x40]
mov ecx, dword [0x4a1494]
mov edx, dword [0x4a1498]
push eax
push ecx
push edx
lea eax, [esp + 0x16c]
push eax
call fcn.004248c0
lea eax, [esp + 0x170]
add esp, 0x10
mov edx, eax
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41d060
lea edi, [esp + 0x428]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x41d071
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
inc ebx
cmp ebx, 9
rep movsb byte es:[edi], byte [esi]
jl 0x41d030
lea ecx, [esp + 0x428]
push ecx
call fcn.00402900
add esp, 4
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 9
push 0x45e880
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x41d2df
cmp dword [0x49d4c4], 0xf
jge 0x422410
mov edx, dword [0x4a1494]
mov eax, dword [0x4a1498]
push esi
push 0
push 0x45e878
push edx
push eax
lea ecx, [esp + 0x43c]
push ecx
call fcn.00424c50
push 1
push 0
push 0
lea edx, [esp + 0x44c]
push 0
push edx
call fcn.00402ce0
mov eax, dword [0x4a1444]
add esp, 0x2c
cmp eax, 7
jne 0x422410
mov eax, dword [0x4a1770]
test eax, eax
jbe 0x422410
add ebx, 9
mov esi, 1
mov dword [esp + 0x10], ebx
lea ebx, [ebx]
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0x428]
push eax
push 0x64
push esi
push 0x3b
push ecx
call fcn.00410320
add esp, 0x14
mov dword [esp + 0x28], eax
mov al, byte [esp + 0x428]
inc esi
test al, al
je 0x41d2be
lea edx, [esp + 0x160]
push edx
push 0x32
push 1
lea eax, [esp + 0x434]
push 0x2c
push eax
or ebx, 0xffffffff
call fcn.00410320
mov al, byte [esp + 0x174]
add esp, 0x14
test al, al
je 0x41d2be
cmp al, 0x31
jl 0x41d1ba
cmp al, 0x39
jg 0x41d1ba
lea ecx, [esp + 0x160]
push ecx
call fcn.0044c55e
add esp, 4
mov ebx, eax
jmp 0x41d228
mov eax, dword [0x4a1770]
xor edi, edi
test eax, eax
jbe 0x41d228
lea edx, [esp + 0x160]
push edx
push edi
mov ecx, 0x4a176c
call fcn.0041b700
add eax, 4
push eax
call fcn.0044c450
add esp, 8
test eax, eax
jne 0x41d217
lea eax, [esp + 0x160]
push eax
push edi
mov ecx, 0x4a176c
call fcn.0041b700
add eax, 0x6c
push eax
call fcn.0044c450
add esp, 8
test eax, eax
jne 0x41d217
mov eax, dword [0x4a1770]
inc edi
cmp edi, eax
jb 0x41d1c5
jmp 0x41d228
push edi
mov ecx, 0x4a176c
call fcn.0041b700
mov ebx, dword [eax + 0x120]
push 2
lea ecx, [esp + 0x42c]
push 0x2c
push ecx
call fcn.00410490
add esp, 0xc
test eax, eax
jg 0x41d245
mov eax, 1
test ebx, ebx
jle 0x41d2be
test eax, eax
jle 0x41d2be
mov edi, dword [0x49d4c4]
mov ecx, 0xf
sub ecx, edi
cmp eax, ecx
jle 0x41d260
mov eax, ecx
push eax
push ebx
lea edx, [esp + 0x168]
push 0x45e870
push edx
call fcn.0044c952
mov ecx, dword [0x4a1438]
mov edx, dword [0x4a143c]
lea eax, [esp + 0x170]
push eax
mov eax, dword [0x4a1494]
push 0
push ecx
mov ecx, dword [0x4a1498]
push edx
push eax
push ecx
lea edx, [esp + 0x450]
push edx
call fcn.004250c0
push 2
push 0
push 0
lea eax, [esp + 0x460]
push 0
push eax
call fcn.00402ce0
add esp, 0x40
mov eax, dword [esp + 0x28]
test eax, eax
je 0x41d140
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 9
push 0x45e864
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
push esi
jne 0x41d58b
mov ecx, dword [0x4a1494]
mov edx, dword [0x4a1498]
push eax
push 0x45e85c
push ecx
push edx
lea eax, [esp + 0x43c]
push eax
call fcn.00424c50
push 1
push 0
push 0
lea ecx, [esp + 0x44c]
push 0
push ecx
call fcn.00402ce0
mov eax, dword [0x4a1444]
add esp, 0x2c
cmp eax, 7
jne 0x422410
mov eax, dword [0x4a1760]
test eax, eax
jbe 0x422410
add ebx, 9
mov esi, 1
mov dword [esp + 0x10], ebx
jmp 0x41d360
mov esi, dword [esp + 0x28]
mov edi, edi
mov eax, dword [esp + 0x10]
lea edx, [esp + 0x428]
push edx
push 0x64
push esi
push 0x3b
push eax
call fcn.00410320
add esp, 0x14
mov dword [esp + 0x14], eax
mov al, byte [esp + 0x428]
inc esi
test al, al
mov dword [esp + 0x28], esi
je 0x41d56a
xor eax, eax
mov ecx, 0x18
lea edi, [esp + 0xa0]
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x160]
push ecx
push 0xc8
push 1
lea edx, [esp + 0x434]
push 0x2c
push edx
call fcn.00410320
mov al, byte [esp + 0x174]
add esp, 0x14
test al, al
je 0x41d56a
push 2
lea eax, [esp + 0x42c]
push 0x2c
push eax
call fcn.00410490
add esp, 0xc
test eax, eax
mov dword [esp + 0x20], eax
jg 0x41d3f6
mov dword [esp + 0x20], 1
lea ecx, [esp + 0xa0]
push ecx
lea edx, [esp + 0x164]
push edx
call fcn.0041b2e0
add esp, 8
mov esi, 9
mov dword [esp + 0x1c], 0
mov dword [esp + 0xc], 0x49df14
jmp 0x41d430
mov eax, dword [esp + 0x1c]
cmp eax, dword [esp + 0x20]
jge 0x41d56a
cmp dword [esp + esi*4 + 0xa0], 1
jne 0x41d551
mov ecx, dword [esp + 0xc]
cmp dword [ecx], 1
jne 0x41d551
mov eax, dword [0x4a1760]
xor edi, edi
test eax, eax
jbe 0x41d551
jmp 0x41d470
push edi
mov ecx, 0x4a175c
call fcn.0041b700
cmp dword [eax + 0x120], esi
je 0x41d492
mov eax, dword [0x4a1760]
inc edi
cmp edi, eax
jb 0x41d470
jmp 0x41d551
push edi
mov ecx, 0x4a175c
call fcn.0041b700
mov ebx, dword [eax + 0xec]
mov eax, dword [esp + 0x20]
cmp ebx, eax
jle 0x41d4ad
mov ebx, eax
push ebx
push esi
lea edx, [esp + 0x168]
push 0x45e870
push edx
call fcn.0044c952
mov ecx, dword [0x4a1438]
mov edx, dword [0x4a143c]
lea eax, [esp + 0x170]
push eax
mov eax, dword [0x4a1494]
push 0
push ecx
mov ecx, dword [0x4a1498]
push edx
push eax
push ecx
lea edx, [esp + 0x450]
push edx
call fcn.004250c0
push 1
push 0
push 0
lea eax, [esp + 0x460]
push 0
push eax
call fcn.00402ce0
mov eax, dword [esp + 0x5c]
add esp, 0x40
add eax, ebx
push edi
mov ecx, 0x4a175c
mov dword [esp + 0x20], eax
call fcn.0041b700
mov ecx, dword [eax + 0xec]
add eax, 0xec
sub ecx, ebx
mov dword [eax], ecx
push edi
mov ecx, 0x4a175c
call fcn.0041b700
mov ecx, dword [eax + 0xec]
test ecx, ecx
jg 0x41d551
push 1
push edi
mov ecx, 0x4a175c
call fcn.0041b8f0
mov eax, dword [esp + 0xc]
add eax, 0x124
inc esi
cmp eax, 0x49f030
mov dword [esp + 0xc], eax
jl 0x41d430
mov eax, dword [esp + 0x14]
test eax, eax
je 0x41d35a
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0x45e854
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x41d782
cmp dword [0x4a1444], 7
jne 0x422410
mov eax, dword [0x4a1770]
test eax, eax
jbe 0x422410
cmp dword [0x49d4c4], 0xf
jge 0x422410
add ebx, 5
mov esi, 1
mov dword [esp + 0xc], ebx
mov edx, dword [esp + 0xc]
lea ecx, [esp + 0x428]
push ecx
push 0x64
push esi
push 0x3b
push edx
call fcn.00410320
add esp, 0x14
mov dword [esp + 0x14], eax
mov al, byte [esp + 0x428]
inc esi
test al, al
je 0x41d761
lea eax, [esp + 0x160]
push eax
push 0x32
push 1
lea ecx, [esp + 0x434]
push 0x2c
push ecx
or ebx, 0xffffffff
call fcn.00410320
mov al, byte [esp + 0x174]
add esp, 0x14
test al, al
je 0x41d761
cmp al, 0x31
jl 0x41d651
cmp al, 0x39
jg 0x41d651
lea edx, [esp + 0x160]
push edx
call fcn.0044c55e
add esp, 4
mov ebx, eax
jmp 0x41d6c3
mov eax, dword [0x4a1770]
xor edi, edi
test eax, eax
jbe 0x41d6c3
lea eax, [esp + 0x160]
push eax
push edi
mov ecx, 0x4a176c
call fcn.0041b700
add eax, 4
push eax
call fcn.0044c450
add esp, 8
test eax, eax
jne 0x41d6b2
lea ecx, [esp + 0x160]
push ecx
push edi
mov ecx, 0x4a176c
call fcn.0041b700
add eax, 0x6c
push eax
call fcn.0044c450
add esp, 8
test eax, eax
jne 0x41d6b2
mov eax, dword [0x4a1770]
inc edi
cmp edi, eax
jb 0x41d660
jmp 0x41d6c3
push edi
mov ecx, 0x4a176c
call fcn.0041b700
mov ebx, dword [eax + 0x120]
push 2
lea edx, [esp + 0x42c]
push 0x2c
push edx
call fcn.00410490
add esp, 0xc
test eax, eax
jg 0x41d6e0
mov eax, 1
test ebx, ebx
jle 0x41d761
test eax, eax
jle 0x41d761
mov edi, dword [0x49d4c4]
mov ecx, 0xf
sub ecx, edi
cmp eax, ecx
jle 0x41d703
mov eax, ecx
push eax
push ebx
lea eax, [esp + 0x168]
push 0x45e870
push eax
call fcn.0044c952
mov edx, dword [0x4a1438]
mov eax, dword [0x4a143c]
lea ecx, [esp + 0x170]
push ecx
mov ecx, dword [0x4a1494]
push 0
push edx
mov edx, dword [0x4a1498]
push eax
push ecx
push edx
lea eax, [esp + 0x450]
push eax
call fcn.004250c0
push 2
push 0
push 0
lea ecx, [esp + 0x460]
push 0
push ecx
call fcn.00402ce0
add esp, 0x40
mov eax, dword [esp + 0x14]
test eax, eax
je 0x41d5d4
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push esi
push 0x45e84c
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x41d9fb
cmp dword [0x4a1444], 7
jne 0x422410
mov eax, dword [0x4a1760]
test eax, eax
jbe 0x422410
add ebx, 5
mov esi, 1
mov dword [esp + 0xc], ebx
jmp 0x41d7d0
mov esi, dword [esp + 0x14]
jmp 0x41d7d0
mov eax, dword [esp + 0xc]
lea edx, [esp + 0x428]
push edx
push 0x64
push esi
push 0x3b
push eax
call fcn.00410320
add esp, 0x14
mov dword [esp + 0x28], eax
mov al, byte [esp + 0x428]
inc esi
test al, al
mov dword [esp + 0x14], esi
je 0x41d9da
xor eax, eax
mov ecx, 0x18
lea edi, [esp + 0xa0]
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x160]
push ecx
push 0xc8
push 1
lea edx, [esp + 0x434]
push 0x2c
push edx
call fcn.00410320
mov al, byte [esp + 0x174]
add esp, 0x14
test al, al
je 0x41d9da
push 2
lea eax, [esp + 0x42c]
push 0x2c
push eax
call fcn.00410490
add esp, 0xc
test eax, eax
mov dword [esp + 0x20], eax
jg 0x41d866
mov dword [esp + 0x20], 1
lea ecx, [esp + 0xa0]
push ecx
lea edx, [esp + 0x164]
push edx
call fcn.0041b2e0
add esp, 8
mov esi, 9
mov dword [esp + 0x1c], 0
mov dword [esp + 0x10], 0x49df14
jmp 0x41d8a0
mov eax, dword [esp + 0x1c]
cmp eax, dword [esp + 0x20]
jge 0x41d9da
cmp dword [esp + esi*4 + 0xa0], 1
jne 0x41d9c1
mov ecx, dword [esp + 0x10]
cmp dword [ecx], 1
jne 0x41d9c1
mov eax, dword [0x4a1760]
xor edi, edi
test eax, eax
jbe 0x41d9c1
jmp 0x41d8e0
push edi
mov ecx, 0x4a175c
call fcn.0041b700
cmp dword [eax + 0x120], esi
je 0x41d902
mov eax, dword [0x4a1760]
inc edi
cmp edi, eax
jb 0x41d8e0
jmp 0x41d9c1
push edi
mov ecx, 0x4a175c
call fcn.0041b700
mov ebx, dword [eax + 0xec]
mov eax, dword [esp + 0x20]
cmp ebx, eax
jle 0x41d91d
mov ebx, eax
push ebx
push esi
lea edx, [esp + 0x168]
push 0x45e870
push edx
call fcn.0044c952
mov ecx, dword [0x4a1438]
mov edx, dword [0x4a143c]
lea eax, [esp + 0x170]
push eax
mov eax, dword [0x4a1494]
push 0
push ecx
mov ecx, dword [0x4a1498]
push edx
push eax
push ecx
lea edx, [esp + 0x450]
push edx
call fcn.004250c0
push 1
push 0
push 0
lea eax, [esp + 0x460]
push 0
push eax
call fcn.00402ce0
mov eax, dword [esp + 0x5c]
add esp, 0x40
add eax, ebx
push edi
mov ecx, 0x4a175c
mov dword [esp + 0x20], eax
call fcn.0041b700
mov ecx, dword [eax + 0xec]
add eax, 0xec
sub ecx, ebx
mov dword [eax], ecx
push edi
mov ecx, 0x4a175c
call fcn.0041b700
mov ecx, dword [eax + 0xec]
test ecx, ecx
jg 0x41d9c1
push 1
push edi
mov ecx, 0x4a175c
call fcn.0041b8f0
mov eax, dword [esp + 0x10]
add eax, 0x124
inc esi
cmp eax, 0x49f030
mov dword [esp + 0x10], eax
jl 0x41d8a0
mov eax, dword [esp + 0x28]
test eax, eax
je 0x41d7c1
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 9
push 0x45e840
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x41de6e
mov ecx, dword [0x4a1494]
mov edx, dword [0x4a1498]
push esi
push eax
push 0x45e838
push ecx
push edx
lea eax, [esp + 0x43c]
push eax
mov dword [0x49fc1c], 0xffffffff
call fcn.00424c50
push 1
push 0
push 0
lea ecx, [esp + 0x44c]
push 0
push ecx
call fcn.00402ce0
mov edx, dword [0x4a1758]
push 0x45e82c
push edx
call fcn.0044c450
add esp, 0x34
test eax, eax
je 0x422410
add ebx, 9
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], ebx
nop
mov esi, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0xa0]
push eax
push 0x63
push esi
push 0x3b
push ecx
call fcn.00410320
add esp, 0x14
mov dword [esp + 0x14], eax
mov al, byte [esp + 0xa0]
inc esi
test al, al
mov dword [esp + 0xc], esi
je 0x41dd8f
mov edx, dword [0x4a1438]
mov eax, dword [0x4a1494]
mov ecx, dword [0x4a1498]
push 0x45e828
push 0
push edx
push 0x105
push eax
push ecx
lea edx, [esp + 0x440]
push edx
call fcn.004250c0
push 1
push 0
push 0
lea eax, [esp + 0x450]
push 0
push eax
call fcn.00402ce0
add esp, 0x30
test eax, eax
je 0x422410
mov eax, dword [0x4a143c]
cmp eax, 0x10d
je 0x41ddba
cmp eax, 0x10b
jne 0x41db66
xor eax, eax
mov ecx, 0x7d
lea edi, [esp + 0xc60]
rep stosd dword es:[edi], eax
mov edi, 4
xor ebx, ebx
lea esi, [esp + 0xc60]
jmp 0x41db40
mov ecx, dword [0x4a1758]
push esi
mov eax, edi
push 0x63
push eax
push 0xa
push ecx
inc edi
call fcn.00410320
add esp, 0x14
cmp eax, 1
je 0x41db66
inc ebx
add esi, 0x64
cmp ebx, 5
jl 0x41db40
test byte [0x4a1440], 0x22
je 0x41dc69
mov dword [esp + 0x1c], 0
jmp 0x41db80
xor edi, edi
lea esi, [esp + 0xc60]
lea esp, [esp]
lea edx, [esp + 0xa0]
push edx
push esi
call fcn.0044c450
add esp, 8
inc edi
test eax, eax
jne 0x41dbb0
add esi, 0x64
cmp edi, 5
jl 0x41db90
jmp 0x41dbb9
cmp edi, 0xffffffff
jne 0x41dcb3
test byte [0x4a1440], 0x20
je 0x41dc69
mov eax, dword [0x4a1438]
mov ecx, dword [0x4a1494]
mov edx, dword [0x4a1498]
push 0x45d794
push 0x20
push eax
push 0x10b
push ecx
push edx
lea eax, [esp + 0x440]
push eax
call fcn.004250c0
push 1
push 1
push 0
lea ecx, [esp + 0x450]
push 0
push ecx
call fcn.00402ce0
add esp, 0x30
test eax, eax
je 0x41de14
xor eax, eax
mov ecx, 0x7d
lea edi, [esp + 0xc60]
rep stosd dword es:[edi], eax
mov ebx, 4
xor esi, esi
lea edi, [esp + 0xc60]
mov edx, dword [0x4a1758]
push edi
mov eax, ebx
push 0x63
push eax
push 0xa
push edx
inc ebx
call fcn.00410320
add esp, 0x14
cmp eax, 1
je 0x41dc57
inc esi
add edi, 0x64
cmp esi, 5
jl 0x41dc31
mov eax, dword [esp + 0x1c]
inc eax
cmp eax, 5
mov dword [esp + 0x1c], eax
jl 0x41db80
mov eax, dword [0x4a1438]
mov ecx, dword [0x4a1494]
mov edx, dword [0x4a1498]
push 0x45d794
push 2
push eax
push 0x10b
push ecx
push edx
lea eax, [esp + 0x440]
push eax
call fcn.004250c0
push 1
push 0
push 0
lea ecx, [esp + 0x450]
push 0
push ecx
call fcn.00402ce0
add esp, 0x30
jmp 0x41dd8f
push edi
lea edx, [esp + 0x34]
push 0x45c5f4
push edx
call fcn.0044c952
mov ecx, dword [0x4a1438]
mov edx, dword [0x4a1494]
lea eax, [esp + 0x3c]
push eax
mov eax, dword [0x4a1498]
push 0
push ecx
push 0x10b
push edx
push eax
lea ecx, [esp + 0x44c]
push ecx
call fcn.004250c0
push 1
push 0
push 0
lea edx, [esp + 0x45c]
push 0
push edx
call fcn.00402ce0
mov eax, dword [0x4a1438]
mov ecx, dword [0x4a1494]
mov edx, dword [0x4a1498]
push 0x45c544
push 4
push eax
push 0x10c
push ecx
push edx
lea eax, [esp + 0x47c]
push eax
call fcn.004250c0
add esp, 0x58
push 1
push 0
push 0
lea ecx, [esp + 0x434]
push 0
push ecx
call fcn.00402ce0
mov edx, dword [0x4a1438]
mov eax, dword [0x4a1494]
mov ecx, dword [0x4a1498]
push 0x45c544
push 1
push edx
push 0x10d
push eax
push ecx
lea edx, [esp + 0x454]
push edx
call fcn.004250c0
push 1
push 0
push 0
lea eax, [esp + 0x464]
push 0
push eax
call fcn.00402ce0
add esp, 0x44
mov eax, dword [esp + 0x14]
test eax, eax
je 0x41da80
mov dword [0x49fc1c], 1
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [0x4a1438]
mov edx, dword [0x4a1494]
mov eax, dword [0x4a1498]
push 0x45c544
push 1
push ecx
push 0x10d
push edx
push eax
lea ecx, [esp + 0x440]
push ecx
call fcn.004250c0
push 1
push 0
push 0
lea edx, [esp + 0x450]
push 0
push edx
call fcn.00402ce0
add esp, 0x30
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [0x4a1438]
push 0x45d794
push 2
push eax
push 0x10b
mov ecx, dword [0x4a1494]
mov edx, dword [0x4a1498]
push ecx
push edx
lea eax, [esp + 0x440]
push eax
call fcn.004250c0
push 1
push 0
push 0
lea ecx, [esp + 0x450]
push 0
push ecx
call fcn.00402ce0
add esp, 0x30
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 9
push 0x45e81c
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x41e139
mov edx, dword [0x4a1494]
push esi
push eax
mov eax, dword [0x4a1498]
push 0x45e838
push edx
push eax
lea ecx, [esp + 0x43c]
push ecx
mov dword [0x49fc1c], 0xffffffff
call fcn.00424c50
push 1
push 0
push 0
lea edx, [esp + 0x44c]
push 0
push edx
call fcn.00402ce0
mov eax, dword [0x4a1758]
push 0x45e810
push eax
call fcn.0044c450
add esp, 0x34
test eax, eax
je 0x422410
add ebx, 9
mov esi, 1
mov dword [esp + 0x10], ebx
lea ecx, [ecx]
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0xa0]
push ecx
push 0x63
push esi
push 0x3b
push edx
call fcn.00410320
add esp, 0x14
mov dword [esp + 0x14], eax
mov al, byte [esp + 0xa0]
inc esi
test al, al
je 0x41e0f7
cmp al, 0x31
jl 0x41df31
cmp al, 0x35
jg 0x41df31
movsx edi, al
sub edi, 0x30
jmp 0x41dfb5
xor ebx, ebx
mov edi, 0x49c1f9
cmp dword [edi + 0x13], 1
jne 0x41df53
lea eax, [esp + 0xa0]
push eax
push edi
call fcn.0044c450
add esp, 8
test eax, eax
jne 0x41df64
add edi, 0x3b0
inc ebx
cmp edi, 0x49d469
jl 0x41df38
jmp 0x41df6c
lea edi, [ebx + 1]
cmp edi, 0xffffffff
jne 0x41dfbe
xor ebx, ebx
mov edi, 0x49c1e8
cmp dword [edi + 0x24], 1
jne 0x41df8e
lea ecx, [esp + 0xa0]
push ecx
push edi
call fcn.0044c450
add esp, 8
test eax, eax
jne 0x41dfb2
add edi, 0x3b0
inc ebx
cmp edi, 0x49d458
jl 0x41df73
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea edi, [ebx + 1]
cmp edi, 0xffffffff
je 0x422410
mov edx, dword [0x4a1438]
mov eax, dword [0x4a1494]
mov ecx, dword [0x4a1498]
push 0x45d7a0
push 0
push edx
push 0x105
push eax
push ecx
lea edx, [esp + 0x440]
push edx
call fcn.004250c0
push 1
push 0
push 0
lea eax, [esp + 0x450]
push 0
push eax
call fcn.00402ce0
add esp, 0x30
test eax, eax
je 0x422410
cmp dword [0x4a143c], 0x10d
je 0x41e122
push edi
lea ecx, [esp + 0x34]
push 0x45c5f4
push ecx
call fcn.0044c952
mov eax, dword [0x4a1438]
mov ecx, dword [0x4a1494]
lea edx, [esp + 0x3c]
push edx
mov edx, dword [0x4a1498]
push 0
push eax
push 0x109
push ecx
push edx
lea eax, [esp + 0x44c]
push eax
call fcn.004250c0
push 1
push 0
push 0
lea ecx, [esp + 0x45c]
push 0
push ecx
call fcn.00402ce0
mov edx, dword [0x4a1438]
mov eax, dword [0x4a1494]
mov ecx, dword [0x4a1498]
push 0x45c544
push 4
push edx
push 0x10a
push eax
push ecx
lea edx, [esp + 0x47c]
push edx
call fcn.004250c0
add esp, 0x58
push 1
push 0
push 0
lea eax, [esp + 0x434]
push 0
push eax
call fcn.00402ce0
mov ecx, dword [0x4a1438]
mov edx, dword [0x4a1494]
mov eax, dword [0x4a1498]
push 0x45c544
push 1
push ecx
push 0x10d
push edx
push eax
lea ecx, [esp + 0x454]
push ecx
call fcn.004250c0
push 1
push 0
push 0
lea edx, [esp + 0x464]
push 0
push edx
call fcn.00402ce0
add esp, 0x44
mov eax, dword [esp + 0x14]
test eax, eax
je 0x41def0
mov dword [0x49fc1c], 1
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [0x4a1438]
push 0x45c544
push 1
push eax
push 0x10d
jmp 0x41de26
push 9
push 0x45e804
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x41e5aa
mov edx, dword [0x4a1494]
mov eax, dword [0x4a1498]
push 5
xor esi, esi
push esi
push 0x45e838
push edx
push eax
lea ecx, [esp + 0x43c]
push ecx
call fcn.00424c50
push 1
push esi
push esi
lea edx, [esp + 0x44c]
push esi
push edx
call fcn.00402ce0
mov eax, dword [0x4a1758]
push 0x45e7f8
push eax
call fcn.0044c450
add esp, 0x34
test eax, eax
je 0x422410
mov dword [0x49fc1c], 0xffffffff
xor ecx, ecx
mov eax, 0x49e038
cmp dword [eax - 0x124], esi
jne 0x41e1bc
inc ecx
cmp dword [eax], esi
jne 0x41e1c1
inc ecx
cmp dword [eax + 0x124], esi
jne 0x41e1ca
inc ecx
cmp dword [eax + 0x248], esi
jne 0x41e1d3
inc ecx
cmp dword [eax + 0x36c], esi
jne 0x41e1dc
inc ecx
add eax, 0x5b4
cmp eax, 0x49f154
jl 0x41e1b3
cmp ecx, esi
jle 0x422410
xor edi, edi
mov dword [esp + 0x40], esi
mov dword [esp + 0x44], edi
mov dword [esp + 0x48], esi
mov dword [esp + 0x4c], esi
add ebx, 9
mov dword [esp + 0xf34], esi
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], ebx
jmp 0x41e220
mov esi, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0xa0]
push ecx
push 0x63
push esi
push 0x3b
push edx
call fcn.00410320
add esp, 0x14
mov ebx, eax
mov al, byte [esp + 0xa0]
inc esi
test al, al
mov dword [esp + 0xc], esi
je 0x41e51e
mov eax, dword [0x4a1438]
mov ecx, dword [0x4a1494]
mov edx, dword [0x4a1498]
push 0x45e828
push 0
push eax
push 0x122
push ecx
push edx
lea eax, [esp + 0x440]
push eax
call fcn.004250c0
push 1
push 1
push 0
lea ecx, [esp + 0x450]
push 0
push ecx
call fcn.00402ce0
add esp, 0x30
test eax, eax
je 0x41e580
mov eax, dword [0x4a143c]
cmp eax, 0x126
je 0x41e53b
cmp eax, 0x124
jne 0x41e3ce
lea ecx, [esp + 0x40]
call fcn.00412940
mov esi, 6
lea ebx, [ebx]
lea edx, [esp + 0xc64]
push edx
push 0x2e
xor eax, eax
mov ecx, 0x49
lea edi, [esp + 0xc68]
push esi
rep stosd dword es:[edi], eax
mov eax, dword [0x4a1758]
push 0x7c
push eax
call fcn.00410320
mov ecx, dword [0x4a1758]
inc esi
push esi
push 0x7c
push ecx
call fcn.00410490
mov edx, dword [0x4a1758]
inc esi
push esi
push 0x7c
push edx
mov dword [esp + 0xd48], eax
call fcn.00410490
inc esi
push esi
mov dword [esp + 0xd48], eax
mov eax, dword [0x4a1758]
push 0x7c
push eax
call fcn.00410490
mov ecx, dword [0x4a1758]
inc esi
push esi
push 0x7c
push ecx
mov dword [esp + 0xd64], eax
call fcn.00410490
add esp, 0x44
lea edx, [esp + 0xccc]
push edx
push 0x3c
inc esi
push esi
mov dword [esp + 0xd18], eax
mov eax, dword [0x4a1758]
push 0x7c
push eax
call fcn.00410320
mov ecx, dword [0x4a1758]
inc esi
push esi
push 0x7c
push ecx
call fcn.00410490
add esp, 0x20
lea edx, [esp + 0xc60]
push edx
lea ecx, [esp + 0x44]
mov dword [esp + 0xd50], eax
inc esi
mov dword [esp + 0xc64], 1
call fcn.004128f0
mov ecx, dword [0x4a1758]
lea eax, [esp + 0x428]
push eax
push 9
push esi
push 0x7c
push ecx
call fcn.00410320
add esp, 0x14
test eax, eax
je 0x41e2d0
mov edi, dword [esp + 0x44]
xor esi, esi
test edi, edi
jbe 0x41e442
jmp 0x41e3e0
push esi
lea ecx, [esp + 0x44]
call fcn.0041b700
cmp dword [eax], 1
jne 0x41e433
lea edx, [esp + 0xa0]
push edx
push esi
lea ecx, [esp + 0x48]
call fcn.0041b700
add eax, 4
push eax
call fcn.0044c450
add esp, 8
test eax, eax
jne 0x41e43a
lea eax, [esp + 0xa0]
push eax
push esi
lea ecx, [esp + 0x48]
call fcn.0041b700
add eax, 0x6c
push eax
call fcn.0044c450
add esp, 8
test eax, eax
jne 0x41e43a
inc esi
cmp esi, edi
jb 0x41e3e0
jmp 0x41e442
lea eax, [esi + 1]
cmp eax, 0xffffffff
jne 0x41e48c
mov ecx, dword [0x4a1438]
mov edx, dword [0x4a1494]
mov eax, dword [0x4a1498]
push 0x45d794
push 0
push ecx
push 0x124
push edx
push eax
lea ecx, [esp + 0x440]
push ecx
call fcn.004250c0
push 1
push 0
push 0
lea edx, [esp + 0x450]
push 0
push edx
call fcn.00402ce0
add esp, 0x30
jmp 0x41e51e
push eax
lea eax, [esp + 0x34]
push 0x45c5f4
push eax
call fcn.0044c952
mov edx, dword [0x4a1438]
mov eax, dword [0x4a1494]
lea ecx, [esp + 0x3c]
push ecx
mov ecx, dword [0x4a1498]
push 0
push edx
push 0x124
push eax
push ecx
lea edx, [esp + 0x44c]
push edx
call fcn.004250c0
lea eax, [esp + 0x450]
push eax
call fcn.00402900
mov ecx, dword [0x4a1438]
mov edx, dword [0x4a1494]
mov eax, dword [0x4a1498]
push 0x45c544
push 0
push ecx
push 0x124
push edx
push eax
lea ecx, [esp + 0x46c]
push ecx
call fcn.004250c0
add esp, 0x48
push 1
push 0
push 0
lea edx, [esp + 0x434]
push 0
push edx
call fcn.00402ce0
add esp, 0x14
test ebx, ebx
je 0x41e220
lea ecx, [esp + 0x40]
mov dword [0x49fc1c], 1
call fcn.00412940
jmp 0x41e580
mov eax, dword [0x4a1438]
push 0x45c544
push 1
push eax
push 0x126
mov ecx, dword [0x4a1494]
mov edx, dword [0x4a1498]
push ecx
push edx
lea eax, [esp + 0x440]
push eax
call fcn.004250c0
push 1
push 0
push 0
lea ecx, [esp + 0x450]
push 0
push ecx
call fcn.00402ce0
add esp, 0x30
mov eax, dword [esp + 0x40]
test eax, eax
je 0x422410
push eax
call fcn.0044c8e1
add esp, 4
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 9
push 0x45e7ec
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x41ea18
mov edx, dword [0x4a1494]
mov eax, dword [0x4a1498]
push 5
xor esi, esi
push esi
push 0x45e838
push edx
push eax
lea ecx, [esp + 0x43c]
push ecx
call fcn.00424c50
mov edi, 1
push edi
push esi
push esi
lea edx, [esp + 0x44c]
push esi
push edx
call fcn.00402ce0
mov eax, dword [0x4a1758]
push 0x45e7e0
push eax
call fcn.0044c450
add esp, 0x34
test eax, eax
je 0x422410
mov dword [0x49fc1c], 0xffffffff
mov dword [esp + 0x1c], esi
mov dword [esp + 0x40], esi
mov dword [esp + 0x44], esi
mov dword [esp + 0x48], esi
mov dword [esp + 0x4c], esi
add ebx, 9
mov dword [esp + 0xf34], edi
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ebx
jmp 0x41e650
mov esi, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0xa0]
push ecx
push 0x63
push esi
push 0x3b
push edx
call fcn.00410320
add esp, 0x14
mov ebx, eax
mov al, byte [esp + 0xa0]
inc esi
test al, al
mov dword [esp + 0xc], esi
je 0x41e985
mov eax, dword [0x4a1438]
mov ecx, dword [0x4a1494]
mov edx, dword [0x4a1498]
push 0x45d7a0
push 0
push eax
push 0x122
push ecx
push edx
lea eax, [esp + 0x440]
push eax
call fcn.004250c0
push 1
push 1
push 0
lea ecx, [esp + 0x450]
push 0
push ecx
call fcn.00402ce0
add esp, 0x30
test eax, eax
je 0x41e580
mov eax, dword [0x4a143c]
cmp eax, 0x125
je 0x41e992
cmp eax, 0x123
jne 0x41e80c
lea ecx, [esp + 0x40]
call fcn.00412940
mov edx, dword [0x4a1758]
push 2
push 0x7c
push edx
call fcn.00410490
add esp, 0xc
mov dword [esp + 0x1c], eax
mov esi, 7
xor eax, eax
mov ecx, 0x49
lea edi, [esp + 0xc60]
rep stosd dword es:[edi], eax
mov ecx, dword [0x4a1758]
lea eax, [esp + 0xc64]
push eax
push 0x2e
push esi
push 0x7c
push ecx
call fcn.00410320
mov edx, dword [0x4a1758]
inc esi
push esi
push 0x7c
push edx
call fcn.00410490
inc esi
push esi
mov dword [esp + 0xd40], eax
mov eax, dword [0x4a1758]
push 0x7c
push eax
call fcn.00410490
mov ecx, dword [0x4a1758]
inc esi
push esi
push 0x7c
push ecx
mov dword [esp + 0xd58], eax
call fcn.00410490
lea edx, [esp + 0xd04]
push edx
push 0x3c
inc esi
push esi
mov dword [esp + 0xd50], eax
mov eax, dword [0x4a1758]
push 0x7c
push eax
call fcn.00410320
mov ecx, dword [0x4a1758]
add esp, 0x4c
inc esi
push esi
push 0x7c
push ecx
call fcn.00410490
mov edx, dword [0x4a1758]
inc esi
push esi
push 0x7c
push edx
mov dword [esp + 0xd64], eax
call fcn.00410490
add esp, 0x18
mov dword [esp + 0xd80], eax
lea eax, [esp + 0xc60]
push eax
lea ecx, [esp + 0x44]
inc esi
mov dword [esp + 0xc64], 1
call fcn.004128f0
mov edx, dword [0x4a1758]
lea ecx, [esp + 0x140]
push ecx
push 9
push esi
push 0x7c
push edx
call fcn.00410320
add esp, 0x14
test eax, eax
je 0x41e711
mov eax, dword [esp + 0x1c]
test eax, eax
jle 0x41ea01
mov edi, dword [esp + 0x44]
xor esi, esi
test edi, edi
jbe 0x41e8a9
push esi
lea ecx, [esp + 0x44]
call fcn.0041b700
cmp dword [eax], 1
jne 0x41e88d
push esi
lea ecx, [esp + 0x44]
call fcn.0041b700
mov ecx, dword [eax + 0xbc]
test ecx, ecx
jne 0x41e88d
lea eax, [esp + 0xa0]
push eax
push esi
lea ecx, [esp + 0x48]
call fcn.0041b700
add eax, 4
push eax
call fcn.0044c450
add esp, 8
test eax, eax
jne 0x41e894
lea ecx, [esp + 0xa0]
push ecx
push esi
lea ecx, [esp + 0x48]
call fcn.0041b700
add eax, 0x6c
push eax
call fcn.0044c450
add esp, 8
test eax, eax
jne 0x41e894
inc esi
cmp esi, edi
jb 0x41e826
jmp 0x41e8a9
push esi
lea ecx, [esp + 0x44]
call fcn.0041b700
mov eax, dword [eax + 0x120]
cmp eax, 0xffffffff
jne 0x41e8f3
mov edx, dword [0x4a1438]
mov eax, dword [0x4a1494]
mov ecx, dword [0x4a1498]
push 0x45d794
push 0
push edx
push 0x123
push eax
push ecx
lea edx, [esp + 0x440]
push edx
call fcn.004250c0
push 1
push 0
push 0
lea eax, [esp + 0x450]
push 0
push eax
call fcn.00402ce0
add esp, 0x30
jmp 0x41e985
push eax
lea ecx, [esp + 0x34]
push 0x45c5f4
push ecx
call fcn.0044c952
mov eax, dword [0x4a1438]
mov ecx, dword [0x4a1494]
lea edx, [esp + 0x3c]
push edx
mov edx, dword [0x4a1498]
push 0
push eax
push 0x123
push ecx
push edx
lea eax, [esp + 0x44c]
push eax
call fcn.004250c0
lea ecx, [esp + 0x450]
push ecx
call fcn.00402900
mov edx, dword [0x4a1438]
mov eax, dword [0x4a1494]
mov ecx, dword [0x4a1498]
push 0x45c544
push 0
push edx
push 0x123
push eax
push ecx
lea edx, [esp + 0x46c]
push edx
call fcn.004250c0
add esp, 0x48
push 1
push 0
push 0
lea eax, [esp + 0x434]
push 0
push eax
call fcn.00402ce0
add esp, 0x14
test ebx, ebx
je 0x41e650
jmp 0x41e526
mov ecx, dword [0x4a1438]
mov edx, dword [0x4a1494]
mov eax, dword [0x4a1498]
push 0x45c544
push 1
push ecx
push 0x125
push edx
push eax
lea ecx, [esp + 0x440]
push ecx
call fcn.004250c0
push 1
push 0
push 0
lea edx, [esp + 0x450]
push 0
push edx
call fcn.00402ce0
mov eax, dword [esp + 0x70]
add esp, 0x30
test eax, eax
je 0x422410
push eax
call fcn.0044c8e1
add esp, 4
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [0x4a1438]
push 0x45d794
push 0
push eax
push 0x123
jmp 0x41e54d
push 9
push 0x45e7d4
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x41eb43
push 0x45e7d0
add ebx, 9
push ebx
call fcn.0044e72a
mov edi, eax
add esp, 8
test edi, edi
je 0x422410
jmp 0x41ea50
push 4
push 0x45e7c8
push edi
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x41ea82
lea edx, [esp + 0x10]
push edx
push 0x45e7c0
push edi
call fcn.0044d009
mov eax, dword [esp + 0x1c]
mov dword [0x466220], eax
jmp 0x41eb12
push 6
push 0x45e7b8
push edi
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x41eab5
lea ecx, [esp + 0x10]
push ecx
push 0x45e7ac
push edi
call fcn.0044d009
mov edx, dword [esp + 0x1c]
mov dword [0x466224], edx
jmp 0x41eb12
push 4
push 0x45e7a4
push edi
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x41eae5
lea eax, [esp + 0x10]
push eax
push 0x45e79c
push edi
call fcn.0044d009
mov ecx, dword [esp + 0x1c]
mov dword [0x466228], ecx
jmp 0x41eb12
push 4
push 0x45e794
push edi
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x41eb15
lea edx, [esp + 0x10]
push edx
push 0x45e78c
push edi
call fcn.0044d009
mov eax, dword [esp + 0x1c]
mov dword [0x46621c], eax
add esp, 0xc
push 0x45e7d0
push 0
call fcn.0044e72a
mov edi, eax
add esp, 8
test edi, edi
jne 0x41ea50
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push esi
push 0x45e784
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x41edd9
push 0x45e7d0
add ebx, 5
push ebx
call fcn.0044e72a
add esp, 8
test eax, eax
je 0x422410
mov ebx, dword [sym.imp.USER32.dll_CheckDlgButton]
lea esp, [esp]
mov edi, 0x45e778
mov esi, eax
mov ecx, 9
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x41ebc4
mov eax, dword [0x4a1524]
test eax, eax
mov dword [0x4a1434], 2
je 0x41edad
push 0x3f1
push 0x3f2
push 0x3f0
push eax
call dword [sym.imp.USER32.dll_CheckRadioButton]
jmp 0x41edad
mov edi, 0x45e76c
mov esi, eax
mov ecx, 9
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x41ebfe
mov eax, dword [0x4a1524]
push 1
push 0x5b8
push eax
call ebx
push 1
mov dword [0x4a1414], 1
call fcn.00404360
add esp, 4
jmp 0x41edad
mov edi, 0x45cfc0
mov esi, eax
mov ecx, 9
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x41ec2e
mov eax, dword [0x4a1524]
push 1
push 0x5ad
push eax
call ebx
mov dword [0x4a15b4], 1
jmp 0x41edad
mov edi, 0x45e760
mov esi, eax
mov ecx, 9
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x41ec5e
mov eax, dword [0x4a1524]
push 1
push 0x3f8
push eax
call ebx
mov dword [0x4a15b8], 1
jmp 0x41edad
mov edi, 0x45e754
mov esi, eax
mov ecx, 9
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x41ec8e
mov eax, dword [0x4a1524]
push 1
push 0x3fc
push eax
call ebx
mov dword [0x4a15b0], 1
jmp 0x41edad
mov edi, 0x45e748
mov esi, eax
mov ecx, 9
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x41ecc8
mov eax, dword [0x4a1524]
push 1
push 0x55d
push eax
call ebx
push 1
mov dword [0x4a141c], 1
call fcn.00404320
add esp, 4
jmp 0x41edad
mov edi, 0x45e73c
mov esi, eax
mov ecx, 9
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x41ecf8
mov eax, dword [0x4a1524]
push 1
push 0x5bb
push eax
call ebx
mov dword [0x498d54], 1
jmp 0x41edad
mov edi, 0x45e730
mov esi, eax
mov ecx, 9
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x41ed28
mov eax, dword [0x4a1528]
push 1
push 0x5dd
push eax
mov dword [0x498d50], 1
call ebx
jmp 0x41edad
mov edi, 0x45e724
mov esi, eax
mov ecx, 9
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x41ed5f
push 1
mov dword [0x4a1418], 1
call fcn.004056f0
mov eax, dword [0x4a1524]
add esp, 4
push 1
push 0x5b9
push eax
call ebx
jmp 0x41edad
mov edi, 0x45e718
mov esi, eax
mov ecx, 9
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x41ed8c
mov eax, dword [0x4a1524]
push 1
push 0x55e
push eax
mov dword [0x499914], 1
call ebx
jmp 0x41edad
mov edi, 0x45e70c
mov esi, eax
mov ecx, 9
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x41edad
mov dword [0x499944], 1
call fcn.0040c1d0
push 0x45e7d0
push 0
call fcn.0044e72a
add esp, 8
test eax, eax
jne 0x41eb80
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 9
push 0x45e700
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x41eeaa
mov eax, dword [0x49d4cc]
cmp eax, esi
jae 0x422410
imul eax, eax, 0x3b0
cmp dword [eax + 0x49c20c], 1
jne 0x422410
mov dword [esp + 0xc], 0
lea ecx, [eax + 0x49c224]
nop
cmp dword [ecx - 0x10], 1
jne 0x41ee5d
lea edi, [ebx + 9]
mov esi, ecx
jmp 0x41ee30
mov dl, byte [esi]
mov al, dl
cmp dl, byte [edi]
jne 0x41ee54
test al, al
je 0x41ee50
mov dl, byte [esi + 1]
mov al, dl
cmp dl, byte [edi + 1]
jne 0x41ee54
add esi, 2
add edi, 2
test al, al
jne 0x41ee30
xor eax, eax
jmp 0x41ee59
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x41ee83
mov eax, dword [esp + 0xc]
inc eax
add ecx, 0x74
cmp eax, 7
mov dword [esp + 0xc], eax
jl 0x41ee20
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [esp + 0xc]
cmp eax, 0xffffffff
je 0x422410
mov dword [0x499534], eax
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 9
push 0x45e6f4
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x41f098
push 0x45c8b4
add ebx, 9
push ebx
mov dword [esp + 0x48], 0x45e6ec
mov dword [esp + 0x4c], 0x45e6e4
mov dword [esp + 0x50], 0x45e6d8
mov dword [esp + 0x54], 0x45e6cc
mov dword [esp + 0x58], 0x45e6c4
call fcn.0044e72a
push 0x45c8b4
push 0
mov ebx, eax
call fcn.0044e72a
add esp, 0x10
test ebx, ebx
mov dword [esp + 0x20], eax
je 0x422410
xor esi, esi
mov eax, dword [esp + esi*4 + 0x40]
mov edi, ebx
lea ecx, [ecx]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [edi]
jne 0x41ef44
test cl, cl
je 0x41ef40
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [edi + 1]
jne 0x41ef44
add eax, 2
add edi, 2
test cl, cl
jne 0x41ef20
xor eax, eax
jmp 0x41ef49
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x41ef68
inc esi
cmp esi, 5
jb 0x41ef17
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp esi, 0xffffffff
je 0x422410
cmp esi, 2
jne 0x41eff3
mov eax, dword [esp + 0x20]
test eax, eax
je 0x422410
xor edi, edi
mov esi, 0x49aa60
mov ebx, eax
nop
cmp dword [esi - 0x10], 1
jne 0x41efa4
push ebx
push esi
call fcn.0044c450
add esp, 8
test eax, eax
jne 0x41efc5
add esi, 0x74
inc edi
cmp esi, 0x49aca4
jl 0x41ef90
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp edi, 0xffffffff
je 0x422410
mov dword [0x498e78], 2
mov dword [0x498e7c], edi
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp esi, 3
jne 0x41f07d
mov eax, dword [esp + 0x20]
test eax, eax
je 0x422410
xor edi, edi
mov esi, 0x4999f0
mov ebx, 1
cmp dword [esi - 0x20], ebx
jne 0x41f02b
mov eax, dword [esp + 0x20]
push eax
push esi
call fcn.0044c450
add esp, 8
test eax, eax
jne 0x41f04f
add esi, 0x84
inc edi
cmp esi, 0x49aa70
jl 0x41f014
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp edi, 0xffffffff
je 0x422410
mov dword [0x498e78], 3
mov dword [0x498e7c], edi
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [0x498e78], esi
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push esi
push 0x45e6bc
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x41f1e1
xor edi, edi
mov dword [esp + 0x10c], 0x45e6ec
mov dword [esp + 0x110], 0x45e6b4
mov dword [esp + 0x114], 0x45e6ac
mov dword [esp + 0x118], 0x45e6a4
mov dword [esp + 0x11c], 0x45e69c
mov dword [esp + 0x120], 0x45e694
mov dword [esp + 0x124], 0x45e68c
mov dword [esp + 0x128], 0x45e684
mov dword [esp + 0x12c], 0x45e67c
mov dword [esp + 0x130], 0x45e674
mov dword [esp + 0x134], 0x45e6e4
mov dword [esp + 0x138], 0x45e66c
mov dword [esp + 0x13c], 0x45e664
add ebx, 5
mov eax, dword [esp + edi*4 + 0x10c]
mov esi, ebx
lea esp, [esp]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x41f174
test cl, cl
je 0x41f170
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x41f174
add eax, 2
add esi, 2
test cl, cl
jne 0x41f150
xor eax, eax
jmp 0x41f179
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x41f198
inc edi
cmp edi, 0xd
jb 0x41f143
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp edi, 0xffffffff
je 0x422410
mov eax, dword [0x4a1494]
mov ecx, dword [0x4a1498]
push edi
push eax
push ecx
lea edx, [esp + 0xc04]
push edx
call fcn.00424e10
lea eax, [esp + 0xc08]
push eax
call fcn.00402900
add esp, 0x14
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 9
push 0x45e658
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x41f296
mov ecx, 0x19
lea edi, [esp + 0x3c0]
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x3c0]
push ecx
lea edx, [esp + 0x10]
push edx
push 0x45d3f4
add ebx, 9
push ebx
mov dword [esp + 0x1c], 1
call fcn.0044d009
push 0x31
lea eax, [esp + 0x3d4]
push eax
push 0x499548
call fcn.0044c9d0
mov edx, dword [esp + 0x28]
lea eax, [esp + 0x3dc]
add esp, 0x1c
mov byte [0x499579], 0
mov dword [0x499540], edx
lea esi, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41f260
sub eax, esi
xor ecx, ecx
cmp ecx, eax
sbb eax, eax
neg eax
test edx, edx
setne cl
mov dword [0x499544], eax
mov dword [0x49953c], ecx
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push esi
push 0x45e650
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x41f3c4
mov edi, 0x45e648
mov esi, ebx
mov ecx, 5
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x41f337
call dword [sym.imp.WINMM.dll_timeGetTime]
mov esi, eax
mov eax, dword [0x466228]
push eax
push esi
call fcn.00410150
mov ebx, 1
add esp, 8
cmp eax, ebx
je 0x422410
mov edi, dword [sym.imp.kernel32.dll_Sleep]
lea ecx, [ecx]
cmp word [0x4a1488], 0xa
je 0x422410
cmp dword [0x49fc80], ebx
je 0x422410
push 0x14
call edi
mov ecx, dword [0x466228]
push ecx
push esi
call fcn.00410150
add esp, 8
cmp eax, ebx
jne 0x41f2f0
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edi, 0x45e640
mov esi, ebx
mov ecx, 5
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x422410
call dword [sym.imp.WINMM.dll_timeGetTime]
mov esi, eax
mov eax, dword [0x466228]
push eax
push esi
call fcn.00410150
add esp, 8
cmp eax, 1
je 0x422410
mov edi, dword [sym.imp.kernel32.dll_Sleep]
mov ebx, 9
jmp 0x41f380
cmp word [0x4a1488], bx
jne 0x41f396
mov eax, dword [0x49fc80]
test eax, eax
je 0x422410
push 0x14
call edi
mov ecx, dword [0x466228]
push ecx
push esi
call fcn.00410150
add esp, 8
cmp eax, 1
jne 0x41f380
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push esi
push 0x45e638
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x41f637
push 0x45e7d0
add ebx, 5
push ebx
call fcn.0044e72a
add esp, 8
test eax, eax
je 0x422410
mov ebx, dword [sym.imp.USER32.dll_CheckDlgButton]
lea ebx, [ebx]
mov edi, 0x45e778
mov esi, eax
mov ecx, 9
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x41f440
mov eax, dword [0x4a1524]
test eax, eax
je 0x41f431
push 0x3f0
push 0x3f2
push 0x3f0
push eax
call dword [sym.imp.USER32.dll_CheckRadioButton]
mov dword [0x4a1434], 1
jmp 0x41f60b
mov edi, 0x45e76c
mov esi, eax
mov ecx, 9
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x41f479
mov eax, dword [0x4a1524]
push edx
push 0x5b8
push eax
call ebx
push 0
mov dword [0x4a1414], 0
call fcn.00404360
add esp, 4
jmp 0x41f60b
mov edi, 0x45cfc0
mov esi, eax
mov ecx, 9
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x41f4a8
mov eax, dword [0x4a1524]
push edx
push 0x5ad
push eax
call ebx
mov dword [0x4a15b4], 0
jmp 0x41f60b
mov edi, 0x45e760
mov esi, eax
mov ecx, 9
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x41f4d7
mov eax, dword [0x4a1524]
push edx
push 0x3f8
push eax
call ebx
mov dword [0x4a15b8], 0
jmp 0x41f60b
mov edi, 0x45e754
mov esi, eax
mov ecx, 9
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x41f506
mov eax, dword [0x4a1524]
push edx
push 0x3fc
push eax
call ebx
mov dword [0x4a15b0], 0
jmp 0x41f60b
mov edi, 0x45e748
mov esi, eax
mov ecx, 9
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x41f53f
mov eax, dword [0x4a1524]
push edx
push 0x55d
push eax
call ebx
push 0
mov dword [0x4a141c], 0
call fcn.00404320
add esp, 4
jmp 0x41f60b
mov edi, 0x45e73c
mov esi, eax
mov ecx, 9
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x41f56e
mov eax, dword [0x4a1524]
push edx
push 0x5bb
push eax
call ebx
mov dword [0x498d54], 0
jmp 0x41f60b
mov edi, 0x45e730
mov esi, eax
mov ecx, 9
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x41f599
mov eax, dword [0x4a1528]
push edx
push 0x5dd
push eax
mov dword [0x498d50], edx
call ebx
jmp 0x41f60b
mov edi, 0x45e724
mov esi, eax
mov ecx, 9
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x41f5cb
push edx
mov dword [0x4a1418], edx
call fcn.004056f0
mov eax, dword [0x4a1524]
add esp, 4
push 0
push 0x5b9
push eax
call ebx
jmp 0x41f60b
mov edi, 0x45e718
mov esi, eax
mov ecx, 9
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x41f5f3
mov eax, dword [0x4a1524]
push edx
push 0x55e
push eax
mov dword [0x499914], edx
call ebx
jmp 0x41f60b
mov edi, 0x45e70c
mov esi, eax
mov ecx, 9
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x41f60b
mov dword [0x499944], edx
push 0x45e7d0
push 0
call fcn.0044e72a
add esp, 8
test eax, eax
jne 0x41f400
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 4
push 0x45e630
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x41f71a
cmp byte [ebx + 4], 0x20
jne 0x41f6e7
add ebx, 5
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41f661
sub eax, edx
cmp eax, 2
jbe 0x41f6e7
mov eax, dword [0x4a152c]
push 1
push 0x5b6
push eax
call dword [sym.imp.USER32.dll_CheckDlgButton]
push 0x45e7d0
push ebx
mov dword [0x498d34], 1
call fcn.0044e72a
add esp, 8
mov ecx, 0x4a1734
mov esi, eax
call fcn.0041cb00
test esi, esi
je 0x422410
push esi
mov ecx, 0x4a1734
call fcn.0040ae80
push 0x45e7d0
push 0
call fcn.0044e72a
mov esi, eax
add esp, 8
test esi, esi
jne 0x41f6b2
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [0x4a152c]
push 0
push 0x5b6
push ecx
call dword [sym.imp.USER32.dll_CheckDlgButton]
mov dword [0x498d34], 0
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push esi
push 0x45e628
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x41f935
add ebx, 5
mov edi, 1
lea esp, [esp]
push edi
push 0x2c
push ebx
call fcn.00410490
add esp, 0xc
mov esi, eax
dec esi
cmp esi, 5
jae 0x41f8f3
mov eax, esi
imul eax, eax, 0x3b0
cmp dword [eax + 0x49c20c], 1
jne 0x41f8f3
cmp esi, dword [0x49d4b0]
je 0x41f8f3
cmp esi, dword [0x49d4cc]
je 0x41f8f3
cmp dword [eax + 0x49c1bc], 0x64
jge 0x41f8f3
cmp dword [0x4a14f0], 0xd4b
jne 0x41f7c8
mov edx, dword [0x4a1438]
mov eax, dword [0x4a1494]
mov ecx, dword [0x4a1498]
push 0x45e828
push 0
push edx
push 0x105
push eax
push ecx
lea edx, [esp + 0x440]
push edx
jmp 0x41f7f0
mov eax, dword [0x4a1438]
mov ecx, dword [0x4a1494]
mov edx, dword [0x4a1498]
push 0x45e624
push 0
push eax
push 0x105
push ecx
push edx
lea eax, [esp + 0x440]
push eax
call fcn.004250c0
add esp, 0x1c
push 1
push 0
push 0
lea ecx, [esp + 0x434]
push 0
push ecx
call fcn.00402ce0
inc esi
push esi
lea edx, [esp + 0x178]
push 0x45c5f4
push edx
call fcn.0044c952
mov ecx, dword [0x4a1438]
mov edx, dword [0x4a1494]
lea eax, [esp + 0x180]
push eax
mov eax, dword [0x4a1498]
push 0
push ecx
push 0x106
push edx
push eax
lea ecx, [esp + 0x460]
push ecx
call fcn.004250c0
push 1
push 0
push 0
lea edx, [esp + 0x470]
push 0
push edx
call fcn.00402ce0
mov eax, dword [0x4a1438]
mov ecx, dword [0x4a1494]
mov edx, dword [0x4a1498]
add esp, 0x50
push 0x45c544
push 4
push eax
push 0x107
push ecx
push edx
lea eax, [esp + 0x440]
push eax
call fcn.004250c0
push 1
push 0
push 0
lea ecx, [esp + 0x450]
push 0
push ecx
call fcn.00402ce0
mov edx, dword [0x4a1438]
mov eax, dword [0x4a1494]
mov ecx, dword [0x4a1498]
push 0x45c544
push 1
push edx
push 0x10d
push eax
push ecx
lea edx, [esp + 0x470]
push edx
call fcn.004250c0
add esp, 0x4c
push 1
push 0
push 0
lea eax, [esp + 0x434]
push 0
push eax
call fcn.00402ce0
add esp, 0x14
lea ecx, [esp + 0x140]
push ecx
push 9
push edi
push 0x2c
push ebx
call fcn.00410320
add esp, 0x14
cmp eax, 1
je 0x41f918
inc edi
cmp edi, 6
jl 0x41f740
push 0x32
call dword [sym.imp.kernel32.dll_Sleep]
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push esi
push 0x45e238
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x41f987
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x1c]
push eax
push 0x45e61c
add ebx, 5
push ebx
call fcn.0044d009
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x28]
push ecx
push edx
call fcn.0041bad0
add esp, 0x18
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 9
push 0x45e610
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x41f9e5
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x1c]
push ecx
push 0x45e61c
add ebx, 9
push ebx
call fcn.0044d009
add esp, 0x10
push 0x32
call dword [sym.imp.kernel32.dll_Sleep]
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x18]
push edx
push eax
call fcn.0041bad0
add esp, 8
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push esi
push 0x45e608
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x41fa71
lea ecx, [esp + 0x18]
push ecx
push 0x45c5f4
add ebx, 5
push ebx
call fcn.0044d009
mov edx, dword [esp + 0x24]
push edx
lea eax, [esp + 0x170]
push 0x45c5ec
push eax
call fcn.0044c952
lea ecx, [esp + 0x178]
push ecx
lea edx, [esp + 0x444]
push edx
call fcn.004251d0
lea eax, [esp + 0x448]
push eax
call fcn.00402900
mov eax, dword [0x498d4c]
lea ecx, [eax + eax*4]
add esp, 0x24
shl ecx, 1
push ecx
call dword [sym.imp.kernel32.dll_Sleep]
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push esi
push 0x45e600
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x41fad8
lea edx, [esp + 0x18]
push edx
push 0x45c5f4
add ebx, 5
push ebx
call fcn.0044d009
mov eax, dword [esp + 0x24]
push eax
lea ecx, [esp + 0x170]
push 0x45c5dc
push ecx
call fcn.0044c952
lea edx, [esp + 0x178]
push edx
lea eax, [esp + 0x444]
push eax
call fcn.004251d0
lea ecx, [esp + 0x448]
push ecx
call fcn.00402900
add esp, 0x24
jmp 0x41ce50
push 7
push 0x45e5f8
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x41fb5e
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x1c]
push ecx
push 0x45e5ec
add ebx, 7
push ebx
call fcn.0044d009
mov edx, dword [0x49d46c]
mov eax, dword [esp + 0x28]
add esp, 0x10
cmp edx, eax
jle 0x422410
mov eax, dword [esp + 0x24]
push eax
lea ecx, [esp + 0x164]
push 0x45c5dc
push ecx
call fcn.0044c952
lea edx, [esp + 0x16c]
push edx
lea eax, [esp + 0x438]
push eax
call fcn.004251d0
lea ecx, [esp + 0x43c]
push ecx
call fcn.00402900
add esp, 0x18
jmp 0x41ce50
push esi
push 0x45e5e4
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x41fc09
push 0x45c8b4
add ebx, 5
push ebx
call fcn.0044e72a
push 0x45c8b4
push 0
mov ebx, eax
call fcn.0044e72a
lea ecx, [esp + 0x1c]
push ecx
push 0x45c5f4
push eax
call fcn.0044d009
add esp, 0x1c
mov edi, 0x45e5dc
mov esi, ebx
mov ecx, 5
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x41fbc2
mov eax, dword [esp + 0xc]
push eax
push 0x45c5dc
jmp 0x41fbe2
mov edi, 0x45e5d4
mov esi, ebx
mov ecx, 5
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x422410
mov eax, dword [esp + 0xc]
push eax
push 0x45c5b4
lea ecx, [esp + 0x168]
push ecx
call fcn.0044c952
lea edx, [esp + 0x16c]
push edx
lea eax, [esp + 0x438]
push eax
call fcn.004251d0
jmp 0x422400
push 4
push 0x45e5cc
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x41fc5b
mov edx, dword [0x4a1588]
push eax
push 0x2e
push pe_nt_image_headers32
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, 0x4a16a0
call fcn.0041cb00
mov ecx, 0x4a16b0
call fcn.0041cb00
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 9
push 0x45e5c0
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x41fd54
mov ecx, 0x18
lea edi, [esp + 0xa0]
rep stosd dword es:[edi], eax
lea eax, [esp + 0x428]
push eax
push 0xc8
mov edi, 1
push edi
add ebx, 9
push 0x2c
push ebx
call fcn.00410320
push 2
push 0x2c
push ebx
call fcn.00410490
mov ebx, eax
lea eax, [esp + 0x448]
add esp, 0x20
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41fcb8
sub eax, edx
mov dword [esp + 0x14], eax
je 0x422410
test ebx, ebx
je 0x422410
lea ecx, [esp + 0xa0]
push ecx
lea edx, [esp + 0x42c]
push edx
call fcn.0041b2e0
add esp, 8
cmp ebx, edi
jl 0x41fcf9
cmp ebx, 0xf
jg 0x41fcf9
add ebx, 8
jmp 0x41fd06
cmp ebx, 0x65
jl 0x41fd06
cmp ebx, 0x6d
jg 0x41fd06
sub ebx, 0x65
xor esi, esi
jmp 0x41fd10
cmp dword [esp + esi*4 + 0xa0], edi
jne 0x41fd39
push ebx
lea eax, [esp + 0x42c]
push esi
push eax
call fcn.00424ac0
lea ecx, [esp + 0x434]
push ecx
call fcn.00402900
add esp, 0x10
inc ebx
inc esi
cmp esi, 0x18
jl 0x41fd10
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 9
push 0x45e33c
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x41fe90
lea eax, [esp + 0x428]
push eax
xor edx, edx
push 0xc8
mov dword [esp + 0x4c], edx
push 1
mov dword [esp + 0x54], edx
mov dword [esp + 0x58], edx
add ebx, 9
push 0x2c
xor esi, esi
push ebx
mov dword [esp + 0x54], esi
mov dword [esp + 0x64], edx
call fcn.00410320
lea eax, [esp + 0x43c]
add esp, 0x14
lea edx, [eax + 1]
jmp 0x41fdb0
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41fdb0
sub eax, edx
mov dword [esp + 0x14], eax
je 0x422410
lea ecx, [esp + 0x40]
push ecx
lea edx, [esp + 0x42c]
push edx
call fcn.0041b4c0
push 2
push 0x2c
push ebx
call fcn.00410490
add esp, 0x14
cmp eax, esi
mov dword [esp + 0xc], eax
jle 0x41fdef
cmp eax, 5
jle 0x41fdf7
mov dword [esp + 0xc], 1
xor edi, edi
mov ebx, 0x49c1f9
mov edi, edi
cmp edi, dword [esp + 0xc]
jge 0x422410
mov ecx, dword [esp + esi*4 + 0x40]
mov eax, 1
cmp ecx, eax
jne 0x41fe6c
cmp dword [ebx + 0x13], eax
jne 0x41fe6c
cmp esi, dword [0x49d4b0]
je 0x41fe6c
cmp esi, dword [0x49d4cc]
je 0x41fe6c
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41fe31
sub eax, edx
mov dword [esp + 0x14], eax
jne 0x41fe6c
mov eax, dword [0x4a1494]
mov ecx, dword [0x4a1498]
push esi
push eax
push ecx
lea edx, [esp + 0x434]
push edx
inc edi
call fcn.00424a40
lea eax, [esp + 0x438]
push eax
call fcn.00402900
add esp, 0x14
add ebx, 0x3b0
inc esi
cmp ebx, 0x49d469
jl 0x41fe00
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 9
push 0x45e380
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x41ff9b
mov ecx, 0x18
lea edi, [esp + 0xa0]
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x428]
push ecx
push 0xc8
push 1
lea esi, [ebx + 9]
push 0x2c
push esi
call fcn.00410320
lea eax, [esp + 0x43c]
add esp, 0x14
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41fee0
sub eax, edx
mov dword [esp + 0x14], eax
je 0x422410
lea edx, [esp + 0xa0]
push edx
lea eax, [esp + 0x42c]
push eax
call fcn.0041b2e0
push 2
push 0x2c
push esi
call fcn.00410490
add esp, 0x14
test eax, eax
mov dword [esp + 0xc], eax
jg 0x41ff25
mov dword [esp + 0xc], 1
mov edi, 9
xor ebx, ebx
mov esi, 0x49df14
cmp ebx, dword [esp + 0xc]
jge 0x422410
cmp dword [esp + edi*4 + 0xa0], 1
jne 0x41ff77
cmp dword [esi], 1
jne 0x41ff77
mov ecx, dword [0x4a1494]
mov edx, dword [0x4a1498]
push edi
push ecx
push edx
lea eax, [esp + 0x434]
push eax
call fcn.00424940
lea ecx, [esp + 0x438]
push ecx
call fcn.00402900
add esp, 0x14
inc ebx
add esi, 0x124
inc edi
cmp esi, 0x49f030
jl 0x41ff31
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 7
push 0x45e5b8
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x4200f0
lea edx, [esp + 0x428]
push edx
push 0xc8
mov esi, 1
push esi
add ebx, 7
push 0x2c
mov ecx, 0x18
lea edi, [esp + 0xb0]
push ebx
rep stosd dword es:[edi], eax
call fcn.00410320
lea eax, [esp + 0x44]
push eax
push 9
push 2
push 0x2c
push ebx
call fcn.00410320
push 3
push 0x2c
push ebx
call fcn.00410490
mov edi, eax
lea eax, [esp + 0x45c]
add esp, 0x34
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x420010
sub eax, edx
mov dword [esp + 0x14], eax
je 0x42085b
lea eax, [esp + 0x30]
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x420030
sub eax, edx
mov dword [esp + 0x14], eax
je 0x42085b
lea ecx, [esp + 0xa0]
push ecx
lea edx, [esp + 0x42c]
push edx
call fcn.0041b2e0
add esp, 8
xor ecx, ecx
lea edx, [esp + 0xa4]
mov eax, 0x49d5bc
lea esp, [esp]
cmp dword [edx - 4], esi
jne 0x42007f
cmp dword [eax - 0xec], esi
jne 0x42007f
add ecx, dword [eax]
cmp dword [edx], esi
jne 0x42008e
cmp dword [eax + 0x38], esi
jne 0x42008e
add ecx, dword [eax + 0x124]
cmp dword [edx + 4], esi
jne 0x4200a1
cmp dword [eax + 0x15c], esi
jne 0x4200a1
add ecx, dword [eax + 0x248]
cmp dword [edx + 8], esi
jne 0x4200b4
cmp dword [eax + 0x280], esi
jne 0x4200b4
add ecx, dword [eax + 0x36c]
cmp dword [edx + 0xc], esi
jne 0x4200c7
cmp dword [eax + 0x3a4], esi
jne 0x4200c7
add ecx, dword [eax + 0x490]
cmp dword [edx + 0x10], esi
jne 0x4200da
cmp dword [eax + 0x4c8], esi
jne 0x4200da
add ecx, dword [eax + 0x5b4]
add eax, 0x6d8
add edx, 0x18
cmp eax, 0x49f11c
jl 0x420070
push edi
push ecx
jmp 0x420f1b
push 7
push 0x45e5b0
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x42015f
lea ecx, [esp + 0x30]
push ecx
push 9
push 1
add ebx, 7
push 0x2c
push ebx
call fcn.00410320
push 2
push 0x2c
push ebx
call fcn.00410490
add esp, 0x20
cmp word [0x4a14f4], 1
jne 0x42085b
lea ecx, [esp + 0x30]
lea esi, [ecx + 1]
lea ebx, [ebx]
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x420140
sub ecx, esi
mov dword [esp + 0x14], ecx
je 0x42085b
mov edx, dword [0x4a1450]
push eax
jmp 0x420f1a
push 7
push 0x45e5a8
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x420254
xor ecx, ecx
mov dword [esp + 0x44], ecx
mov dword [esp + 0x48], ecx
mov dword [esp + 0x4c], ecx
push 0x45c8b4
add ebx, 7
push ebx
mov dword [esp + 0x48], eax
mov dword [esp + 0x58], ecx
call fcn.0044e72a
push 0x45c8b4
push 0
mov edi, eax
call fcn.0044e72a
add esp, 0x10
test edi, edi
mov esi, eax
mov dword [esp + 0xc], 0
je 0x42085b
lea edx, [esp + 0x40]
push edx
push edi
call fcn.0041b4c0
add esp, 8
mov edi, 0x49c1e8
lea ebx, [esp + 0x40]
mov eax, 1
lea ebx, [ebx]
cmp dword [ebx], eax
jne 0x42021f
cmp dword [edi + 0x24], eax
jne 0x42021f
test esi, esi
jne 0x4201f3
mov dword [esp + 0xc], eax
jmp 0x42021f
push esi
push edi
call fcn.0044c450
add esp, 8
test eax, eax
jne 0x420212
lea eax, [edi + 0x11]
push esi
push eax
call fcn.0044c450
add esp, 8
test eax, eax
je 0x42021a
mov dword [esp + 0xc], 1
mov eax, 1
add edi, 0x3b0
add ebx, 4
cmp edi, 0x49d458
jl 0x4201e0
cmp dword [esp + 0xc], eax
jne 0x42085b
mov dword [0x49fc1c], eax
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push esi
push 0x45e5a0
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x42033a
push 1
push 0x2c
add ebx, 5
push ebx
call fcn.00410490
add esp, 0xc
mov edi, eax
dec edi
cmp edi, esi
jae 0x4202fe
lea ecx, [esp + 0xa0]
push 0xffffffffffffffff
push ecx
call fcn.00424dc0
lea edx, [esp + 0x430]
push edi
push edx
call fcn.00424dc0
lea eax, [esp + 0x438]
add esp, 0x10
mov edx, eax
jmp 0x4202b0
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4202b0
lea edi, [esp + 0xa0]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x4202c1
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
lea eax, [esp + 0xa0]
and ecx, 3
push eax
rep movsb byte es:[edi], byte [esi]
call fcn.00402900
add esp, 4
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp edi, 0xffffffff
jne 0x422410
lea ecx, [esp + 0x428]
push edi
push ecx
call fcn.00424dc0
lea edx, [esp + 0x430]
push edx
call fcn.00402900
add esp, 0xc
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 7
push 0x45e598
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x420421
lea eax, [esp + 0x428]
push eax
push 0xc8
push 1
add ebx, 7
push 0x2c
push ebx
call fcn.00410320
lea ecx, [esp + 0x44]
push ecx
push 9
push 2
push 0x2c
push ebx
call fcn.00410320
push 3
push 0x2c
push ebx
call fcn.00410490
mov esi, eax
lea eax, [esp + 0x45c]
add esp, 0x34
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x420396
sub eax, edx
mov dword [esp + 0x14], eax
je 0x42085b
lea eax, [esp + 0x30]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4203b0
sub eax, edx
mov dword [esp + 0x14], eax
je 0x42085b
xor edx, edx
mov dword [esp + 0x44], edx
lea eax, [esp + 0x40]
mov dword [esp + 0x48], edx
push eax
lea ecx, [esp + 0x42c]
mov dword [esp + 0x50], edx
push ecx
mov dword [esp + 0x48], 0
mov dword [esp + 0x58], edx
call fcn.0041b4c0
push esi
push eax
lea edx, [esp + 0x40]
push edx
call fcn.0041b240
add esp, 0x14
dec eax
neg eax
sbb eax, eax
and eax, 0xfffffffe
inc eax
mov dword [0x49fc1c], eax
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 8
push 0x45e58c
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x420491
cmp word [0x4a1488], 9
jne 0x422410
mov eax, dword [0x49fc80]
test eax, eax
jne 0x422410
cmp word [0x4a14f4], 0
jne 0x422410
mov eax, dword [0x4a1494]
mov ecx, dword [0x4a1498]
push 1
push eax
push ecx
lea edx, [esp + 0x434]
push edx
call fcn.00424d40
lea eax, [esp + 0x438]
push eax
call fcn.00402900
add esp, 0x14
push 0x32
jmp 0x41ce5b
push 8
push 0x45e580
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x4204d8
mov ecx, dword [0x4a1494]
mov edx, dword [0x4a1498]
push eax
push ecx
push edx
lea eax, [esp + 0x434]
push eax
call fcn.00424d40
lea ecx, [esp + 0x438]
push ecx
call fcn.00402900
add esp, 0x14
push 0x32
jmp 0x41ce5b
push esi
push 0x45e578
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
je 0x422410
push 9
push 0x45e56c
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x4205af
add ebx, 9
mov edi, 0x45e564
mov esi, ebx
mov ecx, 5
xor edx, edx
mov dword [0x49fc1c], 0xffffffff
repe cmpsb byte [esi], byte es:[edi]
jne 0x420560
cmp word [0x4a1488], 9
jne 0x422410
mov eax, dword [0x49fc80]
test eax, eax
jne 0x422410
mov dword [0x49fc1c], 1
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edi, 0x45e7a4
mov esi, ebx
mov ecx, 5
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x422410
cmp word [0x4a1488], 0xa
mov eax, 1
je 0x420f31
cmp dword [0x49fc80], eax
jne 0x422410
mov dword [0x49fc1c], eax
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 9
push 0x45e558
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x42087a
add ebx, 9
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x14]
mov dword [0x49fc1c], eax
mov esi, 1
lea esp, [esp]
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x428]
push ecx
push 0x64
push esi
push 0x3b
push edx
call fcn.00410320
add esp, 0x14
mov dword [esp + 0x28], eax
mov al, byte [esp + 0x428]
inc esi
test al, al
mov dword [esp + 0x14], esi
je 0x420842
lea eax, [esp + 0x160]
push eax
push 0x64
push 1
lea ecx, [esp + 0x434]
push 0x2c
push ecx
call fcn.00410320
lea edx, [esp + 0x44]
push edx
push 9
push 2
lea eax, [esp + 0x448]
push 0x2c
push eax
call fcn.00410320
push 3
lea ecx, [esp + 0x454]
push 0x2c
push ecx
call fcn.00410490
mov cl, byte [esp + 0x194]
add esp, 0x34
test cl, cl
je 0x420842
mov cl, byte [esp + 0x30]
test cl, cl
je 0x420842
mov edi, 0x45e554
lea esi, [esp + 0x160]
mov ecx, 3
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x420696
mov ebx, dword [0x49d444]
jmp 0x420821
mov edi, 0x45e550
lea esi, [esp + 0x160]
mov ecx, 3
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x4206b8
mov ebx, dword [0x49d41c]
jmp 0x420821
mov edi, 0x45e54c
lea esi, [esp + 0x160]
mov ecx, 3
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x4206da
mov ebx, dword [0x49d424]
jmp 0x420821
mov edi, 0x45e544
lea esi, [esp + 0x160]
mov ecx, 5
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x4206fc
mov ebx, dword [0x49d46c]
jmp 0x420821
mov edi, 0x45e6ec
lea esi, [esp + 0x160]
mov ecx, 5
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x42071e
mov ebx, dword [0x49d448]
jmp 0x420821
mov edi, 0x45e6e4
lea esi, [esp + 0x160]
mov ecx, 5
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x420740
mov ebx, dword [0x49d44c]
jmp 0x420821
mov edi, 0x45e53c
lea esi, [esp + 0x160]
mov ecx, 5
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x420762
mov ebx, dword [0x49d450]
jmp 0x420821
mov edi, 0x45e534
lea esi, [esp + 0x160]
mov ecx, 5
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x420784
mov ebx, dword [0x49d454]
jmp 0x420821
mov edi, 0x45e52c
lea esi, [esp + 0x160]
mov ecx, 5
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x4207a6
mov ebx, dword [0x49d478]
jmp 0x420821
mov edi, 0x45e524
lea esi, [esp + 0x160]
mov ecx, 5
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x4207c6
movzx ebx, word [0x4a14f4]
jmp 0x420821
mov edi, 0x45e51c
lea esi, [esp + 0x160]
mov ecx, 6
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x4207e5
mov ebx, dword [0x4a1498]
jmp 0x420821
mov edi, 0x45e514
lea esi, [esp + 0x160]
mov ecx, 6
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x420804
mov ebx, dword [0x4a1494]
jmp 0x420821
mov edi, 0x45e7c8
lea esi, [esp + 0x160]
mov ecx, 5
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x420821
mov ebx, dword [0x4a14f0]
push eax
lea eax, [esp + 0x34]
push ebx
push eax
call fcn.0041b240
add esp, 0xc
test eax, eax
je 0x42085b
mov esi, dword [esp + 0x14]
mov dword [0x49fc1c], 1
mov eax, dword [esp + 0x28]
test eax, eax
je 0x4205e0
mov eax, dword [0x49fc1c]
test eax, eax
jne 0x422410
mov dword [0x49fc1c], 0xffffffff
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 9
push 0x45e508
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x420ace
push 1
lea edi, [ebx + 9]
push 0x2c
push edi
call fcn.00410490
lea ecx, [esp + 0x434]
push ecx
push 0xc8
push 2
push 0x2c
push edi
mov ebx, eax
call fcn.00410320
lea edx, [esp + 0x50]
push edx
push 9
push 3
push 0x2c
push edi
call fcn.00410320
push 4
push 0x2c
push edi
call fcn.00410490
add esp, 0x40
cmp ebx, 1
jl 0x42085b
cmp ebx, esi
jg 0x42085b
lea ecx, [esp + 0x428]
lea esi, [ecx + 1]
lea ecx, [ecx]
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x4208f0
sub ecx, esi
mov dword [esp + 0x14], ecx
je 0x42085b
lea ecx, [esp + 0x30]
lea esi, [ecx + 1]
lea ebx, [ebx]
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x420910
sub ecx, esi
mov dword [esp + 0x14], ecx
je 0x42085b
mov ecx, ebx
imul ecx, ecx, 0x3b0
cmp dword [ecx + 0x49be5c], 1
jne 0x42085b
dec ebx
mov edi, 0x45e554
lea esi, [esp + 0x428]
mov ecx, 3
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x420968
imul ebx, ebx, 0x3b0
mov ebx, dword [ebx + 0x49c1bc]
push eax
push ebx
lea edx, [esp + 0x38]
push edx
jmp 0x420f20
mov edi, 0x45e550
lea esi, [esp + 0x428]
mov ecx, 3
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x420997
imul ebx, ebx, 0x3b0
mov ebx, dword [ebx + 0x49c1a4]
push eax
push ebx
lea edx, [esp + 0x38]
push edx
jmp 0x420f20
mov edi, 0x45e6ec
lea esi, [esp + 0x428]
mov ecx, 5
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x4209c6
imul ebx, ebx, 0x3b0
mov ebx, dword [ebx + 0x49c1c0]
push eax
push ebx
lea edx, [esp + 0x38]
push edx
jmp 0x420f20
mov edi, 0x45e6e4
lea esi, [esp + 0x428]
mov ecx, 5
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x4209f5
imul ebx, ebx, 0x3b0
mov ebx, dword [ebx + 0x49c1c4]
push eax
push ebx
lea edx, [esp + 0x38]
push edx
jmp 0x420f20
mov edi, 0x45e53c
lea esi, [esp + 0x428]
mov ecx, 5
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x420a24
imul ebx, ebx, 0x3b0
mov ebx, dword [ebx + 0x49c1c8]
push eax
push ebx
lea edx, [esp + 0x38]
push edx
jmp 0x420f20
mov edi, 0x45e500
lea esi, [esp + 0x428]
mov ecx, 5
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x420a53
imul ebx, ebx, 0x3b0
mov ebx, dword [ebx + 0x49c1cc]
push eax
push ebx
lea edx, [esp + 0x38]
push edx
jmp 0x420f20
mov edi, 0x45e4f8
lea esi, [esp + 0x428]
mov ecx, 5
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x420abe
cmp ebx, dword [0x49d4cc]
jne 0x420a83
push eax
mov ebx, 2
push ebx
lea edx, [esp + 0x38]
push edx
jmp 0x420f20
cmp ebx, dword [0x49d4b0]
jne 0x420a9c
push eax
mov ebx, 3
push ebx
lea edx, [esp + 0x38]
push edx
jmp 0x420f20
imul ebx, ebx, 0x3b0
mov edx, dword [ebx + 0x49c548]
xor ecx, ecx
cmp edx, 1
sete cl
push eax
lea edx, [esp + 0x34]
mov ebx, ecx
push ebx
push edx
jmp 0x420f20
mov ebx, dword [esp + 0x14]
push eax
push ebx
lea edx, [esp + 0x38]
push edx
jmp 0x420f20
push 9
push 0x45e4ec
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x420bff
mov ecx, 0x18
lea edi, [esp + 0xa0]
rep stosd dword es:[edi], eax
lea eax, [esp + 0x428]
push eax
push 0xc8
push 1
add ebx, 9
push 0x2c
push ebx
call fcn.00410320
push 2
push 0x2c
push ebx
call fcn.00410490
xor edi, edi
add esp, 0x20
cmp eax, edi
mov dword [esp + 0x1c], eax
jl 0x420b2a
cmp eax, 9
jle 0x420b2e
mov dword [esp + 0x1c], edi
push 3
push 0x2c
push ebx
call fcn.00410490
add esp, 0xc
cmp eax, edi
mov dword [esp + 0xc], eax
jg 0x420b4b
mov dword [esp + 0xc], 1
lea eax, [esp + 0x428]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x420b55
sub eax, edx
mov dword [esp + 0x14], eax
je 0x422410
lea ecx, [esp + 0xa0]
push ecx
lea edx, [esp + 0x42c]
push edx
call fcn.0041b2e0
add esp, 8
mov esi, 9
mov ebx, 0x49df14
lea ebx, [ebx]
cmp edi, dword [esp + 0xc]
jge 0x422410
cmp dword [esp + esi*4 + 0xa0], 1
jne 0x420bdb
cmp dword [ebx], 1
jne 0x420bdb
mov eax, dword [esp + 0x1c]
mov ecx, dword [0x4a1494]
mov edx, dword [0x4a1498]
push eax
push esi
push ecx
push edx
lea eax, [esp + 0x438]
push eax
call fcn.00424830
lea ecx, [esp + 0x43c]
push ecx
call fcn.00402900
add esp, 0x18
inc edi
add ebx, 0x124
inc esi
cmp ebx, 0x49f030
jl 0x420b90
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 7
push 0x45e4e4
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x420de0
add ebx, 7
mov dword [0x49fc1c], eax
mov esi, 1
mov dword [esp + 0x14], ebx
jmp 0x420c30
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x428]
push edx
push 0x64
push esi
push 0x3b
push eax
call fcn.00410320
add esp, 0x14
mov dword [esp + 0x20], eax
mov al, byte [esp + 0x428]
inc esi
test al, al
mov dword [esp + 0x1c], esi
je 0x420da5
xor eax, eax
mov ecx, 0x18
lea edi, [esp + 0xa0]
rep stosd dword es:[edi], eax
lea ecx, [esp + 0xec0]
push ecx
push 0x63
push 1
lea edx, [esp + 0x434]
push 0x2c
push edx
call fcn.00410320
lea eax, [esp + 0xc0c]
push eax
push 0x63
push 2
lea ecx, [esp + 0x448]
push 0x2c
push ecx
call fcn.00410320
lea edx, [esp + 0xc8]
push edx
lea eax, [esp + 0x454]
push eax
call fcn.0041b2e0
lea eax, [esp + 0xc28]
add esp, 0x30
mov dword [esp + 0xc], 0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x420cd2
sub eax, edx
mov dword [esp + 0x28], eax
je 0x420db6
mov esi, 1
lea ebx, [ebx]
lea ecx, [esp + 0x40]
push ecx
push 0x31
push esi
lea edx, [esp + 0xc04]
push 0x7c
push edx
call fcn.00410320
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x54]
add esp, 0x14
inc esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x420d16
sub eax, edx
mov dword [esp + 0x10], eax
je 0x420d7f
mov edi, 0x49d4d4
lea ebx, [esp + 0xa0]
cmp dword [ebx], 1
jne 0x420d64
mov eax, dword [edi - 4]
test eax, eax
je 0x420d64
lea eax, [esp + 0x40]
push eax
push edi
call fcn.0044c450
add esp, 8
test eax, eax
jne 0x420d77
lea ecx, [esp + 0x40]
push ecx
lea edx, [edi + 0x68]
push edx
call fcn.0044c450
add esp, 8
test eax, eax
jne 0x420d77
add edi, 0x124
add ebx, 4
cmp edi, 0x49f034
jl 0x420d31
jmp 0x420d7f
mov dword [esp + 0xc], 1
mov eax, dword [esp + 0x28]
test eax, eax
je 0x420cf0
mov eax, dword [esp + 0xc]
test eax, eax
je 0x42085b
mov esi, dword [esp + 0x1c]
mov dword [0x49fc1c], 1
mov eax, dword [esp + 0x20]
test eax, eax
je 0x420c30
jmp 0x42084e
mov eax, 0x49d4d0
lea ecx, [esp + 0xa0]
cmp dword [ecx], 1
jne 0x420dcc
cmp dword [eax], 0
jne 0x420d9b
add eax, 0x124
add ecx, 4
cmp eax, 0x49f030
jl 0x420dc2
jmp 0x42085b
push 7
push 0x45e4dc
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x420f4b
lea eax, [esp + 0x428]
push eax
push 0x64
mov esi, 1
push esi
add ebx, 7
push 0x2c
push ebx
call fcn.00410320
lea ecx, [esp + 0x44]
push ecx
push 9
push 2
push 0x2c
push ebx
call fcn.00410320
mov al, byte [esp + 0x58]
add esp, 0x28
test al, al
jne 0x420e44
mov dx, word [0x45e4d8]
mov al, byte [0x45e4da]
mov word [esp + 0x30], dx
mov byte [esp + 0x32], al
push 3
push 0x2c
push ebx
call fcn.00410490
mov ebx, eax
add esp, 0xc
test ebx, ebx
jne 0x420e59
mov ebx, esi
xor eax, eax
mov ecx, 0x18
lea edi, [esp + 0xa0]
rep stosd dword es:[edi], eax
lea eax, [esp + 0x428]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x420e73
sub eax, edx
mov dword [esp + 0x14], eax
je 0x42085b
lea ecx, [esp + 0xa0]
push ecx
lea edx, [esp + 0x42c]
push edx
call fcn.0041b2e0
add esp, 8
xor edx, edx
mov eax, 0x49d5f4
lea ecx, [esp + 0xa4]
lea esp, [esp]
cmp dword [ecx - 4], esi
jne 0x420ec0
mov edi, dword [eax - 0x124]
test edi, edi
jne 0x420ec0
inc edx
cmp dword [ecx], esi
jne 0x420eca
cmp dword [eax], 0
jne 0x420eca
inc edx
cmp dword [ecx + 4], esi
jne 0x420eda
mov edi, dword [eax + 0x124]
test edi, edi
jne 0x420eda
inc edx
cmp dword [ecx + 8], esi
jne 0x420eea
mov edi, dword [eax + 0x248]
test edi, edi
jne 0x420eea
inc edx
cmp dword [ecx + 0xc], esi
jne 0x420efa
mov edi, dword [eax + 0x36c]
test edi, edi
jne 0x420efa
inc edx
cmp dword [ecx + 0x10], esi
jne 0x420f0a
mov edi, dword [eax + 0x490]
test edi, edi
jne 0x420f0a
inc edx
add eax, 0x6d8
add ecx, 0x18
cmp eax, 0x49f154
jl 0x420eb0
push ebx
push edx
lea eax, [esp + 0x38]
push eax
call fcn.0041b240
add esp, 0xc
dec eax
neg eax
sbb eax, eax
and eax, 0xfffffffe
inc eax
mov dword [0x49fc1c], eax
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push esi
push 0x45e4d0
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x42105e
lea ecx, [esp + 0x428]
push ecx
push 0xc8
push 1
add ebx, 5
push 0x2c
push ebx
call fcn.00410320
lea edx, [esp + 0x174]
push edx
push 0x64
push 2
push 0x2c
push ebx
call fcn.00410320
push 3
push 0x2c
push ebx
call fcn.00410490
add esp, 0x34
mov ebx, eax
mov edi, 0x45e4c8
lea esi, [esp + 0x428]
mov ecx, 5
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x42100f
call fcn.004043b0
mov edi, 0x45e4c0
lea esi, [esp + 0x160]
mov ecx, 5
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x422410
push ebx
call dword [sym.imp.kernel32.dll_Sleep]
mov eax, dword [0x4a1528]
push 1
push 0x402
push eax
call dword [sym.imp.USER32.dll_CheckDlgButton]
mov dword [0x4a1410], 1
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edi, 0x45e4b8
lea esi, [esp + 0x428]
mov ecx, 5
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x422410
lea eax, [esp + 0x428]
push 1
push eax
call fcn.00425180
lea ecx, [esp + 0x430]
push ecx
call fcn.00402900
add esp, 0xc
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push esi
push 0x45e4b0
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x421083
add ebx, 5
push ebx
call fcn.0044c55e
add esp, 4
push eax
jmp 0x41ce5b
push esi
push 0x45e2c4
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x421175
add ebx, 5
push ebx
call fcn.0044c55e
add esp, 4
mov ebx, eax
call dword [sym.imp.WINMM.dll_timeGetTime]
push 4
lea edx, [esp + 0x10]
push edx
push 0x458e708
mov dword [esp + 0x20], eax
call fcn.004042b0
mov eax, dword [esp + 0x18]
mov esi, dword [sym.imp.kernel32.dll_Sleep]
add esp, 0xc
cmp ebx, eax
mov edi, 1
mov dword [0x49fc1c], edi
je 0x421159
nop
push 0x32
call esi
push 4
lea eax, [esp + 0x10]
push eax
push 0x458e708
call fcn.004042b0
mov eax, dword [0x4a1630]
add esp, 0xc
cmp eax, edi
je 0x421159
cmp dword [0x4a1634], edi
je 0x421159
cmp dword [0x4661f8], edi
je 0x422410
mov ecx, dword [0x466220]
mov edx, dword [esp + 0x14]
push ecx
push edx
call fcn.00410150
add esp, 8
cmp eax, edi
je 0x42114f
cmp ebx, dword [esp + 0xc]
jne 0x4210e0
push 0x12c
call esi
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [0x49fc1c], 0xffffffff
push 0x12c
call esi
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push esi
push 0x45e4a8
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
je 0x42227e
push esi
push 0x45e4a0
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
je 0x42227e
push 2
push 0x45e49c
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x4211f6
mov eax, dword [0x4a1494]
mov ecx, dword [0x4a1498]
push eax
push ecx
lea edx, [esp + 0x430]
push edx
call fcn.004246b0
lea eax, [esp + 0x434]
push eax
call fcn.00402900
add esp, 0x10
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push esi
push 0x45e494
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x42123a
lea ecx, [esp + 0x24]
push ecx
lea edx, [esp + 0x1c]
push edx
push 0x45e61c
add ebx, 5
push ebx
call fcn.0044d009
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x28]
push eax
push ecx
call fcn.00404800
add esp, 0x18
push 0x64
jmp 0x41ce5b
push esi
push 0x45e48c
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x42131f
lea edx, [esp + 0xc]
push edx
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x20]
push ecx
push 0x45e480
add ebx, 5
or esi, 0xffffffff
push ebx
mov dword [esp + 0x20], esi
call fcn.0044d009
mov edx, dword [esp + 0x38]
mov eax, dword [esp + 0x2c]
push 3
push edx
push eax
lea ecx, [esp + 0xc18]
push ecx
call fcn.00424e10
mov eax, dword [esp + 0x30]
add esp, 0x24
cmp eax, esi
je 0x4212f9
call fcn.00405890
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x18]
push esi
push edx
push ecx
movzx edx, ax
mov eax, dword [esp + 0x18]
push edx
push eax
lea ecx, [esp + 0xb4]
push ecx
call fcn.00424610
lea eax, [esp + 0xb8]
add esp, 0x18
mov edx, eax
jmp 0x4212d0
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4212d0
lea edi, [esp + 0xbf8]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x4212e1
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edx, [esp + 0xbf8]
push edx
call fcn.00402900
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x1c]
push eax
push ecx
call fcn.00404520
add esp, 0xc
push 0x64
jmp 0x41ce5b
push esi
push 0x45e478
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x421363
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x1c]
push eax
push 0x45e61c
add ebx, 5
push ebx
call fcn.0044d009
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x28]
push ecx
push edx
call fcn.00404920
add esp, 0x18
push 0x64
jmp 0x41ce5b
push esi
push 0x45e470
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x4213a7
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x1c]
push ecx
push 0x45e61c
add ebx, 5
push ebx
call fcn.0044d009
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x28]
push edx
push eax
call fcn.00404bc0
add esp, 0x18
push 0x64
jmp 0x41ce5b
push esi
push 0x45e468
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x4213eb
lea ecx, [esp + 0x24]
push ecx
lea edx, [esp + 0x1c]
push edx
push 0x45e61c
add ebx, 5
push ebx
call fcn.0044d009
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x28]
push eax
push ecx
call fcn.00404920
add esp, 0x18
push 0x64
jmp 0x41ce5b
push esi
push 0x45e460
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x42142f
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x1c]
push eax
push 0x45e61c
add ebx, 5
push ebx
call fcn.0044d009
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x28]
push ecx
push edx
call fcn.00404a70
add esp, 0x18
push 0x64
jmp 0x41ce5b
push 9
push 0x45e454
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x421590
mov edx, dword [0x4a143c]
mov dword [esp + 0x10], eax
lea eax, [ebx + 9]
mov edi, 0x45e450
mov esi, eax
mov ecx, 3
xor ebx, ebx
repe cmpsb byte [esi], byte es:[edi]
mov dword [esp + 0xc], edx
jne 0x4214a4
cmp edx, 0x10f
mov dword [esp + 0x10], 1
jne 0x42152e
mov eax, dword [0x4a1514]
cmp eax, dword [0x4a1510]
je 0x42152e
mov dword [esp + 0xc], 0xeb
mov dword [esp + 0x10], 4
jmp 0x42152e
mov edi, 0x45e448
mov esi, eax
mov ecx, 7
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x4214c0
mov dword [esp + 0x10], 2
jmp 0x42152e
mov edi, 0x45e440
mov esi, eax
mov ecx, 5
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x4214dc
mov dword [esp + 0x10], 4
jmp 0x42152e
mov edi, 0x45e438
mov esi, eax
mov ecx, 5
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x4214f8
mov dword [esp + 0x10], 8
jmp 0x42152e
mov edi, 0x45e430
mov esi, eax
mov ecx, 7
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x421514
mov dword [esp + 0x10], 0x10
jmp 0x42152e
mov esi, eax
mov edi, 0x45e428
mov ecx, 7
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x42152e
mov dword [esp + 0x10], 0x20
call fcn.00405850
mov eax, dword [esp + 0x10]
test eax, eax
je 0x422410
mov ecx, dword [0x4a1438]
mov edx, dword [esp + 0xc]
push 0x45c544
push eax
mov eax, dword [0x4a1494]
push ecx
mov ecx, dword [0x4a1498]
push edx
push eax
push ecx
lea edx, [esp + 0x440]
push edx
call fcn.004250c0
lea eax, [esp + 0x444]
push eax
call fcn.00402900
add esp, 0x20
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 7
push 0x45e420
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x4216fa
push 0x2c
push ebx
mov dword [esp + 0x14], eax
call fcn.0044e000
add esp, 8
test eax, eax
mov edi, 1
je 0x4215cd
cmp byte [eax + 1], 0x31
jne 0x4215cd
mov byte [eax], 0
mov dword [esp + 0xc], edi
add ebx, 7
lea ecx, [esp + 0x160]
sub ecx, ebx
lea esp, [esp]
mov al, byte [ebx]
mov byte [ebx + ecx], al
inc ebx
test al, al
jne 0x4215e0
mov byte [esp + 0x2f], al
call dword [sym.imp.WINMM.dll_timeGetTime]
mov ebx, dword [sym.imp.kernel32.dll_Sleep]
mov dword [esp + 0x14], eax
mov edi, edi
push 0x32
call ebx
push edi
lea ecx, [esp + 0x43]
push ecx
push 0x56f930
call fcn.004042b0
mov al, byte [esp + 0x4b]
add esp, 0xc
cmp al, 1
jne 0x4216b8
mov esi, 0x56f980
push edi
lea edx, [esp + 0x32]
push edx
lea eax, [esi + 0x105]
push eax
call fcn.004042b0
mov al, byte [esp + 0x3a]
add esp, 0xc
test al, al
je 0x421674
push 0x114
lea ecx, [esp + 0x42c]
push ecx
push esi
call fcn.004042b0
lea edx, [esp + 0x16c]
push edx
lea eax, [esp + 0x43d]
push eax
call fcn.0044c450
add esp, 0x14
test eax, eax
jne 0x4216ad
mov al, byte [esp + 0x2e]
add esi, 0x114
test al, al
jne 0x421628
mov eax, dword [esp + 0xc]
test eax, eax
jne 0x4216b8
mov dword [0x49fc1c], 0xffffffff
push 0x64
call ebx
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov byte [esp + 0x2f], 1
mov dword [0x49fc1c], edi
cmp dword [0x4a1630], edi
je 0x421694
cmp dword [0x4a1634], edi
je 0x421694
cmp dword [0x4661f8], edi
je 0x422410
mov ecx, dword [0x466224]
mov edx, dword [esp + 0x14]
push ecx
push edx
call fcn.00410150
add esp, 8
cmp eax, edi
je 0x42168a
mov al, byte [esp + 0x2f]
test al, al
je 0x421600
jmp 0x421694
push esi
push 0x45e418
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x4218b9
mov eax, dword [0x4a1ac0]
cmp eax, 8
mov esi, 1
jl 0x4217a3
mov eax, dword [0x4a1abc]
push 0x2710
push eax
call fcn.00410150
add esp, 8
test eax, eax
jne 0x421797
mov ecx, dword [0x4a1abc]
push 0x2710
push ecx
call fcn.00410150
add esp, 8
test eax, eax
jne 0x421797
push 0xa
call dword [sym.imp.kernel32.dll_Sleep]
cmp dword [0x4a1630], esi
je 0x422410
cmp dword [0x4a1634], esi
je 0x422410
cmp dword [0x4661f8], esi
je 0x422410
mov edx, dword [0x4a1abc]
push 0x2710
push edx
call fcn.00410150
add esp, 8
test eax, eax
je 0x421753
mov dword [0x4a1ac0], 0
jmp 0x4217a7
test eax, eax
jne 0x4217b2
call dword [sym.imp.WINMM.dll_timeGetTime]
mov dword [0x4a1abc], eax
mov edi, dword [0x4a1ac0]
add ebx, 5
push 0x2c
inc edi
push ebx
mov dword [0x4a1ac0], edi
mov dword [esp + 0x14], 0xffffffff
call fcn.0044e000
mov esi, eax
add esp, 8
test esi, esi
jne 0x4217ec
push 0x20
push ebx
call fcn.0044d5d0
mov esi, eax
add esp, 8
test esi, esi
je 0x421822
lea edx, [esi + 1]
mov ecx, edx
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4217f4
sub ecx, edi
cmp ecx, 2
ja 0x421822
mov al, byte [edx]
cmp al, 0x30
jl 0x421822
cmp al, 0x39
jg 0x421822
lea eax, [esp + 0xc]
push eax
push 0x45c5f4
push edx
mov byte [esi], 0
call fcn.0044d009
add esp, 0xc
cmp byte [ebx], 0x24
jne 0x421895
mov eax, ebx
mov esi, 1
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x421831
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
sub eax, edx
cmp eax, 1
jle 0x42187d
jmp 0x421850
movzx ecx, byte [esi + ebx]
mov edx, dword [0x4a1588]
push 0
push ecx
push 0x102
push edx
call edi
mov eax, ebx
inc esi
lea edx, [eax + 1]
jmp 0x421870
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x421870
sub eax, edx
cmp esi, eax
jl 0x421850
mov eax, dword [0x4a1588]
push 0
push 0xd
push pe_nt_image_headers32
push eax
call edi
push 0x64
jmp 0x41ce5b
mov ecx, dword [esp + 0xc]
mov edx, dword [0x4a1494]
mov eax, dword [0x4a1498]
push 0xffffffffffffffff
push ecx
push ebx
push edx
push eax
call fcn.00402950
add esp, 0x14
push 0x64
jmp 0x41ce5b
push esi
push 0x45e410
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x421936
add ebx, 5
push ebx
lea ecx, [esp + 0x10]
call fcn.00406a40
push 0x45c51c
push 0x45e40c
lea ecx, [esp + 0x14]
mov dword [esp + 0xf3c], 2
call fcn.0041bf50
mov ecx, dword [esp + 0xc]
mov edx, dword [0x4a1584]
push 0
push 0x45e400
push ecx
push edx
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0x64
call dword [sym.imp.kernel32.dll_Sleep]
lea ecx, [esp + 0xc]
call fcn.00402c70
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push esi
push 0x45e3f8
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x421b06
add ebx, 5
push 0x2c
push ebx
mov dword [esp + 0x14], eax
call fcn.0044e000
add esp, 8
test eax, eax
je 0x42199e
lea esi, [eax + 1]
mov edi, 0x45e3f0
mov ecx, 5
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x421980
mov dword [esp + 0xc], 1
jmp 0x42199b
mov edi, 0x45e3e8
lea esi, [eax + 1]
mov ecx, 5
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x42199e
mov dword [esp + 0xc], 2
mov byte [eax], 0
call dword [sym.imp.WINMM.dll_timeGetTime]
mov dword [esp + 0x14], eax
xor edi, edi
lea ebx, [ebx]
mov eax, dword [esp + 0xc]
xor esi, esi
cmp eax, 1
jne 0x4219fe
mov eax, dword [0x4a16a4]
test eax, eax
jbe 0x421aa6
jmp 0x4219d0
push esi
mov ecx, 0x4a16a0
call fcn.0041b6e0
mov eax, dword [eax]
push ebx
push eax
call fcn.0044c450
add esp, 8
test eax, eax
jne 0x421a9b
mov eax, dword [0x4a16a4]
inc esi
cmp esi, eax
jb 0x4219d0
jmp 0x421aa6
cmp eax, 2
jne 0x421a37
mov eax, dword [0x4a16b4]
test eax, eax
jbe 0x421aa6
push esi
mov ecx, 0x4a16b0
call fcn.0041b6e0
mov eax, dword [eax]
push ebx
push eax
call fcn.0044c450
add esp, 8
test eax, eax
jne 0x421a9b
mov eax, dword [0x4a16b4]
inc esi
cmp esi, eax
jb 0x421a10
jmp 0x421aa6
mov eax, dword [0x4a16a4]
test eax, eax
jbe 0x421a65
push esi
mov ecx, 0x4a16a0
call fcn.0041b6e0
mov eax, dword [eax]
push ebx
push eax
call fcn.0044c450
add esp, 8
test eax, eax
jne 0x421a9b
mov eax, dword [0x4a16a4]
inc esi
cmp esi, eax
jb 0x421a40
test edi, edi
jne 0x421aa6
mov eax, dword [0x4a16b4]
xor esi, esi
test eax, eax
jbe 0x421aa6
push esi
mov ecx, 0x4a16b0
call fcn.0041b6e0
mov eax, dword [eax]
push ebx
push eax
call fcn.0044c450
add esp, 8
test eax, eax
jne 0x421a9b
mov eax, dword [0x4a16b4]
inc esi
cmp esi, eax
jb 0x421a74
jmp 0x421aa6
mov edi, 1
mov dword [0x49fc1c], edi
mov eax, dword [0x46621c]
mov ecx, dword [esp + 0x14]
push eax
push ecx
call fcn.00410150
mov ecx, 1
add esp, 8
cmp eax, ecx
je 0x421af5
cmp dword [0x4a1630], ecx
je 0x421aff
cmp dword [0x4a1634], ecx
je 0x421aff
cmp dword [0x4661f8], ecx
je 0x422410
push 0x64
call dword [sym.imp.kernel32.dll_Sleep]
test edi, edi
je 0x4219b0
push 0x64
jmp 0x41ce5b
mov dword [0x49fc1c], 0xffffffff
push 0x64
jmp 0x41ce5b
push 9
push 0x45e3dc
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x421c5b
mov al, byte [ebx + 9]
add ebx, 9
cmp al, 0x20
jne 0x421b30
mov al, byte [ebx + 1]
inc ebx
cmp al, 0x20
je 0x421b28
lea edx, [esp + 0x14c]
push edx
push 0x45ca74
push ebx
call fcn.0044d009
add esp, 0xc
xor esi, esi
jmp 0x421b50
mov edi, dword [esi*4 + 0x4663a0]
lea eax, [esp + 0x14c]
mov edi, edi
mov dl, byte [eax]
mov bl, byte [edi]
mov cl, dl
cmp dl, bl
jne 0x421b88
test cl, cl
je 0x421b84
mov dl, byte [eax + 1]
mov bl, byte [edi + 1]
mov cl, dl
cmp dl, bl
jne 0x421b88
add eax, 2
add edi, 2
test cl, cl
jne 0x421b60
xor eax, eax
jmp 0x421b8d
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x421bac
inc esi
cmp esi, 8
jl 0x421b50
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp esi, 0xffffffff
je 0x422410
mov eax, dword [esi*4 + 0x4663c0]
mov ecx, dword [0x4a1494]
mov edx, dword [0x4a1498]
push eax
push ecx
push edx
lea eax, [esp + 0x434]
push eax
call fcn.00424590
lea ecx, [esp + 0x438]
push ecx
call fcn.00402900
mov eax, dword [0x4a1494]
mov ecx, dword [0x4a1498]
mov dword [esp + 0x54], 5
mov dword [esp + 0x58], 6
mov dword [esp + 0x5c], 7
mov dword [esp + 0x60], 0
mov dword [esp + 0x64], 1
mov dword [esp + 0x68], 2
mov dword [esp + 0x6c], 3
mov dword [esp + 0x70], 4
mov edx, dword [esp + esi*4 + 0x54]
push edx
push eax
push ecx
lea edx, [esp + 0x448]
push edx
call fcn.00425380
lea eax, [esp + 0x44c]
push eax
call fcn.00403010
add esp, 0x28
push 0x64
jmp 0x41ce5b
push 4
push 0x45e640
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x421c8e
mov dword [0x4a1634], 1
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 4
push 0x45e1a8
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x421cbc
call fcn.0041b110
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 9
push 0x45e3d0
push ebx
call fcn.0044cfd0
add esp, 0xc
test eax, eax
jne 0x422410
lea ecx, [esp + 0x3c0]
push ecx
push 0x31
push 1
add ebx, 9
push 0x2c
push ebx
call fcn.00410320
lea edx, [esp + 0x36c]
push edx
push 0x31
push 2
push 0x2c
push ebx
call fcn.00410320
add esp, 0x28
mov edi, 0x45e3c4
lea esi, [esp + 0x3c0]
mov ecx, 9
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
mov ecx, 9
mov edi, 0x45e3b8
jne 0x421d44
lea esi, [esp + 0x358]
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x421d3d
mov dword [esp + 0x10], 1
jmp 0x421e5b
mov edi, 0x45e3ac
jmp 0x421db0
lea esi, [esp + 0x3c0]
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
mov ecx, 9
jne 0x421d75
mov edi, 0x45e3c4
lea esi, [esp + 0x358]
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x421d3d
mov dword [esp + 0x10], 1
jmp 0x421e5b
mov edi, 0x45e3ac
lea esi, [esp + 0x3c0]
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x421ddb
mov edi, 0x45e3c4
lea esi, [esp + 0x358]
mov ecx, 9
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x421dab
mov dword [esp + 0x10], 1
jmp 0x421e5b
mov edi, 0x45e3b8
lea esi, [esp + 0x358]
mov ecx, 9
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x421dcf
mov dword [esp + 0x10], 2
jmp 0x421e5b
mov edi, 0x45e3a4
mov ecx, 5
jmp 0x421e42
mov edi, 0x45e3a4
lea esi, [esp + 0x3c0]
mov ecx, 5
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x422410
mov edi, 0x45e3c4
lea esi, [esp + 0x358]
mov ecx, 9
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x421e17
mov dword [esp + 0x10], 1
jmp 0x421e5b
mov edi, 0x45e3b8
lea esi, [esp + 0x358]
mov ecx, 9
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x421e38
mov dword [esp + 0x10], 2
jmp 0x421e5b
mov edi, 0x45e3ac
mov ecx, 9
lea esi, [esp + 0x358]
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x422410
mov dword [esp + 0x10], 3
mov eax, dword [0x4a1494]
mov ecx, dword [0x4a1498]
push 5
push 0
push 0x45e838
push eax
push ecx
lea edx, [esp + 0x43c]
push edx
mov byte [esp + 0x440], 0
call fcn.00424c50
push 1
push 0
push 1
lea eax, [esp + 0x44c]
push 0
push eax
call fcn.00402ce0
mov eax, dword [0x4a1438]
mov ecx, dword [0x4a1494]
mov edx, dword [0x4a1498]
push 0x45e3a0
push 0
push eax
push 0xf6
push ecx
mov dword [esp + 0x5c], eax
push edx
lea eax, [esp + 0x1a4]
push eax
mov byte [esp + 0x470], 0
mov dword [esp + 0x70], 0
call fcn.004250c0
lea eax, [esp + 0x1a8]
add esp, 0x48
mov ecx, eax
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x421ee8
lea edi, [esp + 0x428]
sub eax, ecx
mov esi, ecx
dec edi
jmp 0x421f00
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x421f00
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov dword [esp + 0x20], 0
mov dword [esp + 0xc], 9
mov ebx, 0x49df14
jmp 0x421f30
cmp dword [ebx], 0
je 0x421ff8
lea esi, [ebx + 4]
push 0x45e398
push esi
call fcn.0044c450
add esp, 8
test eax, eax
je 0x421ff3
lea ecx, [esp + 0x3c0]
push ecx
push esi
call fcn.0044c450
add esp, 8
test eax, eax
je 0x421ff3
inc dword [esp + 0x20]
mov edx, dword [esp + 0xc]
push edx
lea eax, [esp + 0xe5c]
push 0x45e390
push eax
call fcn.0044c952
mov edx, dword [esp + 0x28]
mov eax, dword [0x4a1494]
lea ecx, [esp + 0xe64]
push ecx
mov ecx, dword [0x4a1498]
push 0
push edx
push 0xf3
push eax
push ecx
lea edx, [esp + 0x184]
push edx
call fcn.004250c0
lea eax, [esp + 0x188]
add esp, 0x28
mov ecx, eax
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x421fc0
lea edi, [esp + 0x428]
sub eax, ecx
mov esi, ecx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x421fd3
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov dword [esp + 0x28], 1
jmp 0x421ffc
cmp dword [ebx], 0
jne 0x421ffc
inc dword [esp + 0x20]
mov edx, dword [esp + 0xc]
inc edx
add ebx, 0x124
cmp ebx, 0x49f030
mov dword [esp + 0xc], edx
jl 0x421f30
cmp dword [esp + 0x28], 1
jne 0x4220a4
mov eax, dword [esp + 0x1c]
mov ecx, dword [0x4a1494]
mov edx, dword [0x4a1498]
push 0x45d794
push 0
push eax
push 0xf3
push ecx
push edx
lea eax, [esp + 0x178]
push eax
call fcn.004250c0
lea eax, [esp + 0x17c]
add esp, 0x1c
mov ecx, eax
lea ebx, [ebx]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x422060
lea edi, [esp + 0x428]
sub eax, ecx
mov esi, ecx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x422073
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x428]
push ecx
call fcn.00402900
add esp, 4
push 0x190
call dword [sym.imp.kernel32.dll_Sleep]
mov eax, dword [esp + 0x20]
test eax, eax
jle 0x422410
mov edx, dword [esp + 0x1c]
mov eax, dword [0x4a1494]
mov ecx, dword [0x4a1498]
push 0x45e828
push 0
push edx
push 0xf6
push eax
push ecx
lea edx, [esp + 0x178]
push edx
mov byte [esp + 0x444], 0
call fcn.004250c0
lea eax, [esp + 0x17c]
add esp, 0x1c
mov esi, eax
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4220f0
lea edi, [esp + 0x428]
sub eax, esi
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x422101
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, dword [esp + 0x20]
and ecx, 3
push eax
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0x14]
push ecx
lea edx, [esp + 0x114]
push 0x45e870
push edx
call fcn.0044c952
mov ebx, dword [esp + 0x2c]
mov ecx, dword [0x4a1494]
mov edx, dword [0x4a1498]
lea eax, [esp + 0x11c]
push eax
push 0
push ebx
push 0xf2
push ecx
push edx
lea eax, [esp + 0x188]
push eax
call fcn.004250c0
lea eax, [esp + 0x18c]
add esp, 0x2c
mov ecx, eax
mov edi, edi
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x422170
lea edi, [esp + 0x428]
sub eax, ecx
mov esi, ecx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x422183
mov edx, dword [0x4a1498]
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
push 0x45d794
push 0
mov ecx, eax
and ecx, 3
push ebx
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [0x4a1494]
push 0xf2
push ecx
push edx
lea eax, [esp + 0x178]
push eax
call fcn.004250c0
lea eax, [esp + 0x17c]
add esp, 0x1c
mov ecx, eax
lea ecx, [ecx]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4221d0
lea edi, [esp + 0x428]
sub eax, ecx
mov esi, ecx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x4221e3
mov edx, dword [0x4a1498]
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
push 0x45d794
push 2
mov ecx, eax
and ecx, 3
push ebx
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [0x4a1494]
push 0xf6
push ecx
push edx
lea eax, [esp + 0x178]
push eax
call fcn.004250c0
lea eax, [esp + 0x17c]
add esp, 0x1c
mov ecx, eax
lea ecx, [ecx]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x422230
lea edi, [esp + 0x428]
sub eax, ecx
mov esi, ecx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x422243
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x428]
push ecx
call fcn.00402900
add esp, 4
mov ecx, dword [esp + 0xf2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 1
lea edi, [ebx + 5]
push 0x2c
push edi
call fcn.00410490
add esp, 0xc
cmp eax, 1
mov dword [esp + 0x28], eax
jl 0x422410
cmp eax, esi
jg 0x422410
mov esi, eax
imul esi, esi, 0x3b0
mov eax, dword [esi + 0x49be5c]
test eax, eax
je 0x422410
push 2
push 0x2c
push edi
call fcn.00410490
mov dword [esp + 0x20], eax
imul eax, eax, 0x74
mov ecx, dword [eax + esi + 0x49bdf0]
add esp, 0xc
test ecx, ecx
je 0x422410
lea edx, [esp + 0x428]
push edx
push 0x64
push 3
push 0x2c
push edi
call fcn.00410320
add esp, 0x14
mov ecx, 0x19
xor eax, eax
lea edi, [esp + 0x160]
mov ebx, 1
rep stosd dword es:[edi], eax
jmp 0x422310
push ebx
lea eax, [esp + 0x42c]
push 0x7c
push eax
call fcn.00410490
add esp, 0xc
inc ebx
cmp eax, 1
jl 0x4223b8
cmp eax, 0xf
jg 0x4223b8
add eax, 8
push eax
lea ecx, [esp + 0x44]
push 0x45c5f4
push ecx
call fcn.0044c952
lea eax, [esp + 0x16c]
add esp, 0xc
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x422356
sub eax, edx
mov dword [esp + 0xc], eax
je 0x422382
lea edi, [esp + 0x160]
dec edi
lea ecx, [ecx]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x422370
mov dx, word [0x45e7d0]
mov word [edi], dx
lea eax, [esp + 0x40]
mov edx, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x422388
lea edi, [esp + 0x160]
sub eax, edx
dec edi
lea esp, [esp]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x4223a0
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea eax, [esp + 0x40]
push eax
push 9
lea ecx, [ebx - 1]
push ecx
lea edx, [esp + 0x434]
push 0x7c
push edx
call fcn.00410320
add esp, 0x14
test eax, eax
je 0x422310
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x28]
lea eax, [esp + 0x160]
push eax
push 0
dec ecx
push ecx
dec edx
push edx
lea eax, [esp + 0x438]
push eax
call fcn.00424f20
lea ecx, [esp + 0x43c]
push ecx
call fcn.00402900
add esp, 0x18
mov ecx, dword [esp + 0xf2c]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret